Image display device, imaging apparatus, control method, and program

Abstract

To provide a technique to prevent the possibility that an image including a specific part of a person is unnecessarily browsed.SOLUTION: An image display device is provided which comprises: receiving means that receives authentication information from a user; selection means that selects an image; first determination means that determines whether the image includes a specific part of a person; and control means that, when the image is determined to include the specific part, controls display of the image according to the authentication information.SELECTED DRAWING: Figure 3B

Description

[Technical field]

[0001] The present invention relates to an image display device, an imaging device, a control method, and a program. [Background technology]

[0002] There is known a technique for detecting a facial image from an image of a person captured by a camera and applying a mosaic to the image so that the face cannot be recognized (for example, Patent Document 1).

[0003] Also, there is known an imaging device for photographing an affected part of a patient in a hospital or the like and recording the photographed image (affected part image) in a hospital system such as an image server. This imaging device photographs a barcode wrapped around the patient's wrist or a barcode handed to the patient at the reception desk when the patient visits the hospital to obtain patient identification information, then photographs the affected part of the patient, links the affected part image to the patient identification information, and transmits the image to the hospital system by wireless or wired communication. The photographed image of the affected part may also be stored in the imaging device for the purpose of explaining the image to the patient, etc. Also, if the image of the affected part cannot be transmitted to the hospital system due to a wireless communication malfunction, the imaging device must store the image of the affected part in the imaging device and transmit it to the hospital system when wireless communication is restored. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2004-62560 A Summary of the Invention [Problem to be solved by the invention]

[0005] An image of an affected area may include a part corresponding to personal information such as a patient's face (a part that can identify the patient as a specific individual) or a part related to the patient's dignity such as genitals. Therefore, while it may be necessary to display an image of an affected area in an imaging device or a hospital system for medical purposes, it is not desirable to display the image of an affected area unlimitedly. In addition, a similar problem occurs when capturing and displaying an image that may include a part of a person for which it is desired to prevent unnecessary viewing, not limited to an image of a patient's affected area. Patent Document 1 does not take such a problem into consideration.

[0006] The present invention has been made in view of the above circumstances, and has an object to provide a technique for reducing the possibility that an image including a specific part of a person is unnecessarily viewed. [Means for solving the problem]

[0007] In order to solve the above problems, the present invention provides an image display device comprising: a receiving means for receiving authentication information from a user; a selection means for selecting an image; a first determination means for determining whether the image includes a specific body part of a person; and a control means for controlling display of the image in accordance with the authentication information when it is determined that the image includes the specific body part. Effect of the Invention

[0008] According to the present invention, it is possible to reduce the possibility that an image including a specific part of a person is unnecessarily viewed.

[0009] Other features and advantages of the present invention will become apparent from the accompanying drawings and the following detailed description of the preferred embodiments of the present invention. [Brief description of the drawings]

[0010] [Figure 1A] FIG. 1 shows the configurations of an imaging system 100 and an imaging device 101. [Figure 1B] FIG. 2 shows the configuration of an information processing server 102 and an information processing terminal 103. [Diagram 2] 3 shows an example of a screen displayed on a display unit 115 of the imaging device 101. [Figure 3A] 4 is a flowchart of a process in which the imaging device 101 captures an image of an affected area of ​​a patient. [Figure 3B] 6 is a flowchart of a process executed by the imaging device 101 and the information processing server 102 when the imaging device 101 displays an affected area image recorded on an SD card. [Figure 4] FIG. 13 is a diagram showing how an operator selects a region to be photographed as an affected area. [Diagram 5] 4 is a flowchart of a process executed by the imaging device 101 and the information processing server 102 when the imaging device 101 captures an image of an affected area of ​​a patient. [Figure 6] 1 is a diagram showing a user interface (UI) of an electronic medical record client operating on an information processing terminal 103. [Figure 7] 6 is a flowchart of a process executed by the information processing terminal 103 and the information processing server 102 when the information processing terminal 103 displays an affected area image. [Figure 8] (A) A figure showing an example of the results of artificial intelligence inferring the location of a diseased area for an image of the diseased area, and (B) a figure showing an example of a list of areas inferred by the artificial intelligence with an accuracy greater than or equal to a first threshold. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, the embodiments will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims. Although the embodiments describe a number of features, not all of these features are essential to the invention, and the features may be combined in any manner. Furthermore, in the attached drawings, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0012] In the following embodiments, a case where an image of an affected area of ​​a patient is captured and displayed will be described. However, the image of an affected area of ​​a patient is merely one example of an image that may include a part of a person for which it is desired to prevent unnecessary viewing, and the following embodiments are not limited to the image of an affected area of ​​a patient.

[0013] [First embodiment] 1A is a diagram showing the configuration of an imaging system 100 and an imaging device 101. The imaging system 100 includes an imaging device 101, an information processing server 102, an information processing terminal 103 acting as a client, and a network 104 to which these are connected. In reality, there may be a plurality of imaging devices 101 and information processing terminals 103. Furthermore, the imaging devices 101 and information processing terminals 103 may be connected to the network 104 by wireless communication.

[0014] The configuration of the imaging device 101 will be described. Reference numeral 111 denotes an imaging unit including a lens and an imaging element. Reference numeral 112 denotes a CPU that controls the operation of the imaging device 101. Reference numeral 113 denotes a ROM in which a control program for the imaging device 101 is recorded. The control program is executed by the CPU 112. Reference numeral 114 denotes a RAM in which the CPU 112 and the like temporarily record data. Reference numeral 115 denotes a display unit provided on the rear surface of the imaging device 101. Reference numeral 116 denotes an image processing unit that converts data acquired by the imaging unit 111 into image data such as JPEG. Reference numeral 117 denotes a file generating unit that generates a file (image file) including the image data generated by the image processing unit 116. Reference numeral 118 denotes an input unit including a shutter button, other buttons, a dial, a touch panel, and the like. Reference numeral 119 denotes a media drive for mounting a portable medium such as an SD card. Reference numeral 120 denotes an interface (I / F) for the imaging device 101 to communicate via the network 104. Reference numeral 121 denotes a bus that is used when each block (reference numerals 111 to 120) of the imaging device 101 communicates with each other.

[0015] 1B is a diagram showing the configuration of the information processing server 102 and the information processing terminal 103. The information processing server 102 has a function of an electronic medical record server, and can hold electronic medical record information of patients and images of affected areas captured by the imaging device 101. The information processing terminal 103 has a function of an electronic medical record client, and can display electronic medical record information and images of affected areas acquired from the electronic medical record server. The information processing server 102 and the information processing terminal 103 configure an electronic medical record system.

[0016] First, the configuration of the information processing server 102 will be described. 151 is a display unit such as a monitor. 152 is a CPU that controls the operation of the information processing server 102. 153 is a ROM in which a control program for the information processing server 102 is recorded. The control program is executed by the CPU 152. 154 is a RAM in which the CPU 152 and the like temporarily record data. 155 is an interface (I / F) for the information processing server 102 to communicate via the network 104. 156 is a storage such as an HDD or SSD. 157 is an input unit including a keyboard, a mouse, and the like. 158 is a media drive for mounting media such as an SD card or a CD-ROM. 159 is a bus used when each block (reference numerals 151 to 158) of the information processing server 102 communicates with each other.

[0017] Next, the configuration of the information processing terminal 103 will be described. Reference numeral 181 denotes a display unit such as a monitor. Reference numeral 182 denotes a CPU that controls the operation of the information processing terminal 103. Reference numeral 183 denotes a ROM in which a control program for the information processing terminal 103 is recorded. The control program is executed by the CPU 182. Reference numeral 184 denotes a RAM in which the CPU 182 and the like temporarily record data. Reference numeral 185 denotes an interface (I / F) for the information processing terminal 103 to communicate via the network 104. Reference numeral 186 denotes a storage such as an HDD or SSD. Reference numeral 187 denotes an input unit including a keyboard, a mouse, and the like. Reference numeral 188 denotes a media drive for mounting media such as an SD card or a CD-ROM. Reference numeral 189 denotes a bus used when each block (reference numerals 181 to 188) of the information processing terminal 103 communicates with each other.

[0018] 2A to 2C are diagrams showing examples of screens displayed on the display unit 115 of the imaging device 101. Figures 2A to 2C show screens displayed when the imaging device 101 captures an image of an affected area of ​​a patient.

[0019] FIG. 2(A) shows how the imaging device 101 captures an image of a patient's barcode using the imaging unit 111. The patient's barcode is printed, for example, on the patient's wristband, name tag, or patient registration card. After capturing an image of the barcode, the imaging device 101 acquires patient identification information (person identification information) based on the barcode image. For example, the imaging device 101 analyzes the barcode image to acquire a numeric string represented by the barcode as the patient identification information. As another example, the imaging device 101 may transmit the barcode image to the information processing server 102. In this case, the information processing server 102 analyzes the barcode image to acquire the numeric string represented by the barcode as the patient identification information, and transmits the acquired patient identification information to the imaging device 101.

[0020] Note that a configuration may be adopted in which the imaging device 101 acquires the patient identification information by a method other than photographing a barcode. For example, a patient list may be stored in the ROM 113 of the imaging device 101, and the photographer may operate the imaging device 101 to display the patient list on the display unit 115 and select patient identification information from the patient list. As another example, the imaging device 101 may be provided with a short-range wireless communication unit (not shown) and acquire patient identification information by reading a short-range wireless communication tag of the patient.

[0021] FIG. 2B shows how the photographer selects a region to be photographed as an affected area. In the example of FIG. 2B, the imaging device 101 displays a region list 201 on the display unit 115, and allows the photographer to select a region. As another example, the imaging device 101 displays the region list in a hierarchical structure, and allows the photographer to first select a rough region (e.g., "hand"), and then select a finer region (e.g., "left elbow"). This reduces the photographer's effort to find a region from the region list. As another example, the imaging device 101 may display a diagram of a human body on the display unit 115. In this case, the photographer can select a region from the displayed diagram. This allows the photographer to intuitively select a region. As another example, the imaging device 101 may obtain an imaging order from the information processing server 102 before imaging, and obtain a region described in the imaging order.

[0022] 2(C) shows how the imaging device 101 captures an image of the affected area of ​​a patient using the imaging unit 111. After capturing an image, the imaging device 101 links the affected area image with patient identification information and body part information and transmits the image to the information processing server 102. If the transmission is successful and the imaging device 101 is set not to leave the affected area image in the imaging device 101, the imaging device 101 deletes the captured affected area image. In other cases, the imaging device 101 saves the captured affected area image in an SD card attached to the media drive 119.

[0023] 2(D) to 2(G) show screens that are displayed when the imaging device 101 displays an image of an affected area stored in an SD card.

[0024] 2D shows the image capturing device 101 displaying an affected area on the patient's left elbow. The left elbow is not a part that can identify an individual, nor is it a part that concerns the patient's dignity. Therefore, the image capturing device 101 displays an image of the affected area without requesting authentication information.

[0025] 2(E) to 2(G) show a case where the imaging device 101 displays an affected area on the face of a patient. Because the face is a part that can identify an individual, the imaging device 101 displays a screen requesting authentication information such as a personal identification number (PIN) as shown in FIG. 2(E). If the authentication is successful, the imaging device 101 displays an image of the affected area as shown in FIG. 2(F). If the authentication is unsuccessful, the imaging device 101 displays a message indicating that the user does not have the authority to display the image as shown in FIG. 2(G).

[0026] 3A is a flowchart of a process in which the imaging device 101 captures an image of an affected area of ​​a patient. In the description of this flowchart, the process described as being executed by the imaging device 101 can be realized by the CPU 112 executing a program stored in the ROM 113, unless otherwise specified.

[0027] In S301, the imaging device 101 acquires patient identification information. For example, as described with reference to Fig. 2(A), the imaging device 101 can acquire the patient identification information by capturing an image of a barcode of a patient using the imaging unit 111.

[0028] In steps S302 to S307, the imaging device 101 captures an image of the affected area of ​​the patient. Generally, multiple images of the affected area are captured for one patient, so the processes in steps S302 to S307 form a loop.

[0029] In S303, the imaging device 101 acquires information (site information) indicating the site to be photographed as the affected area. For example, as described with reference to Fig. 2B, the imaging device 101 allows the photographer to select the site, and acquires site information indicating the selected site. Note that if site information has already been acquired, such as when multiple images of the same affected area are photographed, the imaging device 101 may skip the process of S303.

[0030] In S304, as described with reference to Fig. 2C, the imaging device 101 captures an image of the affected area of ​​the patient using the imaging unit 111. The image of the affected area is captured in response to, for example, the photographer pressing the shutter button of the input unit 118.

[0031] In S305, the imaging device 101 links the affected area image captured in S304 with the patient identification information acquired in S301 and the body part information acquired in S303, and records the linked images on an SD card attached to the media drive 119. This linking is performed, for example, by storing the patient identification information and the body part information in a header portion (such as Exif) of the affected area image file. As another example, the imaging device 101 may generate a sidecar file corresponding to the affected area image file and store the patient identification information and the body part information in the sidecar file. As another example, the imaging device 101 may create a database in the SD card that associates the affected area image, the patient identification information, and the body part information with each other.

[0032] In S306, the imaging device 101 transmits the affected area image recorded on the SD card in S305 to the information processing server 102 together with the patient identification information and body part information linked to the affected area image.

[0033] In S307, the image capturing apparatus 101 determines whether the photographer continues image capturing. If the photographer issues an instruction to end image capturing, the image capturing apparatus 101 ends the image capturing process of this flowchart. If not, the process returns to S302.

[0034] 3B is a flowchart of the process executed by the imaging device 101 and the information processing server 102 when the imaging device 101 displays an affected area image recorded on an SD card. Unless otherwise specified, the process described in the description of this flowchart as being executed by the imaging device 101 can be realized by the CPU 112 executing a program stored in the ROM 113. Furthermore, unless otherwise specified, the process described in the description of this flowchart as being executed by the information processing server 102 can be realized by the CPU 152 executing a program stored in the ROM 153.

[0035] In addition, in Fig. 3B, the imaging device 101 is used as an example of an image display device that displays an image of an affected area. However, the image display device of this embodiment is not limited to the imaging device 101. For example, the information processing terminal 103 may be used as the image display device. In this case, the information processing terminal 103 as the image display device performs the same process as that performed by the imaging device 101 as the image display device as far as it is technically possible.

[0036] In S321 to S335, the imaging device 101 performs display processing for the affected area image recorded on the SD card attached to the media drive 119. Generally, a plurality of affected area images are recorded on an SD card, so the processing of S321 to S335 becomes a loop.

[0037] In S322, the imaging device 101 selects an affected area image to be displayed. For example, the imaging device 101 selects an affected area image in response to an instruction for image display or image forwarding input by the user using the input unit 118.

[0038] In S323, the imaging apparatus 101 identifies the region of the affected area image based on the region information associated with the affected area image selected in S322.

[0039] In S324, the image capturing apparatus 101 determines whether or not the part identified in S323 is a special consideration part (specific part). If it is a special consideration part, the process proceeds to S325, and if not, the process proceeds to S333.

[0040] Sensitive areas are areas where it is advisable to limit the users who can view them, such as areas that can identify an individual (areas that can identify the patient as a specific individual), areas that concern the patient's dignity, and areas where there is a high possibility that such areas may be captured.

[0041] Examples of parts that can identify an individual include the face, palm, back of the hand, fingertips, eyes (iris and eye blood vessels), dentition, and ears. Which parts can identify an individual may be determined taking into account attributes such as the patient's age. Therefore, the special care parts may change according to the patient's attributes. For example, if the patient is a newborn, the face may not be treated as a part that can identify an individual, even if it is the face, because the face changes quickly. The imaging device 101 can acquire the patient's attributes from an in-hospital system such as the information processing server 102 (electronic medical record server).

[0042] Examples of areas that are related to the patient's dignity include the pubic area, chest, and buttocks. The areas that are related to the patient's dignity may be determined taking into account the patient's attributes such as age and sex. Thus, the areas requiring special care may vary according to the patient's attributes. For example, if the patient is male or younger than an infant, even the chest may not be considered to be a part that is related to the patient's dignity.

[0043] Areas that are likely to include areas that can identify an individual and areas that are related to the patient's dignity include, for example, the neck and shoulders, which are areas that are likely to include the face.

[0044] In S325, the imaging device 101 judges whether it has been confirmed that the user has the display authority of the special care site. This process can be realized by the imaging device 101 recording the user's authentication information in the RAM 114 in S332, which will be described later, when it is determined that the user has the display authority in S331, which will be described later. If the display authority has been confirmed (i.e., if the authentication information is stored in the RAM 114), the process proceeds to S333. If the display authority has not been confirmed, the process proceeds to S326. Therefore, when another affected area image (a second affected area image) is selected after it has been determined that the user has the display authority of the special care site, the imaging device 101 refrains from prompting the user to provide authentication information. This can eliminate the hassle of the user having to input authentication information again in FIG. 2(E) when displaying another affected area image after inputting authentication information in FIG. 2(E) and displaying an affected area image in FIG. 2(F).

[0045] The imaging device 101 may erase the user authentication information from the RAM 114 when any of the following conditions is satisfied. This can reduce the possibility that after it is confirmed that a specific user has the display authority, another user who does not have the display authority operates the imaging device 101 to view the affected area image. The imaging device 101 has been powered off. The operation mode of the imaging device 101 has been switched from the image display mode to the shooting mode. A state in which the user has not operated the imaging device 101 continues for a predetermined period of time.

[0046] In S326, the imaging device 101 accepts authentication information from the user. The accepted authentication information is, for example, any of the following pieces of information. The imaging device 101 may also realize multi-factor authentication by accepting multiple pieces of the following pieces of information: Knowledge information, such as a username and password combination or a PIN as described with reference to FIG. 2(E). Possessed information, such as a barcode printed on a user's identification card or magnetic information recorded on the identification card. Biometric information, such as a user's fingerprint or iris.

[0047] Depending on the method of determining the display authority (details will be described in S329), user identification information may be required. In this case, authentication information including user identification information is used. For example, if a combination of a user name and password is used as authentication information, the user name plays the role of user identification information. Also, if a unique PIN is assigned to each user, the PIN can be used as identification information including user identification information.

[0048] In S327 to S331, a process for determining whether or not the user has the authority to display the consideration-required part is performed. Here, as an example, a configuration will be described in which the imaging device 101 transmits information required for determining the display authority to the information processing server 102 (external device), receives a determination result from the information processing server 102, and determines whether or not the user has the authority to display the consideration-required part by referring to the determination result. However, this embodiment is not limited to this configuration. For example, the imaging device 101 may complete the process of determining the display authority inside the imaging device 101 without communicating with the information processing server 102.

[0049] In S327, the imaging device 101 transmits the authentication information accepted in S326 to the information processing server 102 via the I / F 120. Furthermore, when patient identification information is used to determine the display authority (details will be described in S329), the imaging device 101 transmits patient identification information linked to the affected area image selected in S322, in addition to the authentication information, to the information processing server 102. Furthermore, when photographer identification information is used to determine the display authority (details will be described in S329), the imaging device 101 transmits photographer identification information linked to the affected area image selected in S322, in addition to the authentication information, to the information processing server 102.

[0050] In order to link the photographer identification information to the affected area image, the imaging device 101 may acquire the photographer identification information in addition to the patient identification information in S301 of Fig. 3A. The photographer identification information can be acquired in the same manner as the patient identification information. That is, the imaging device 101 can acquire the photographer identification information by photographing the photographer's barcode using the imaging unit 111. In this case, in S305 of Fig. 3A, the imaging device 101 can link the photographer identification information to the affected area image in addition to the patient identification information and body part information.

[0051] In S328, the information processing server 102 receives the authentication information (and, if necessary, at least one of the patient identification information and the photographer identification information) transmitted by the imaging apparatus 101 in S327.

[0052] In S329, the information processing server 102 performs user authentication based on the received authentication information. As the authentication method, any known authentication method can be used depending on the type of authentication information. The information processing server 102 also judges whether the authenticated user has the right to display the patient image. In order to judge the display right, the information processing server 102 refers to at least one of the authentication information, the patient identification information, and the photographer identification information as necessary. A database (DB) in which information used for the authentication of the user and the judgment of the display right is registered is stored in the storage 156 of the information processing server 102. Thereafter, the information processing server 102 transmits the judgment result of the display right to the imaging device 101. Note that, when adopting a configuration in which the judgment process of the display right is completed inside the imaging device 101 described above, a database (DB) in which information used for the authentication of the user and the judgment of the display right is registered is stored in the ROM 113 of the imaging device 101.

[0053] Examples of methods (criteria) for determining display authority include the following: The information processing server 102 determines that all authenticated users have display authority (in other words, if user authentication based on authentication information is successful, the authenticated user is determined to have display authority). If an authenticated user satisfies a specific condition, the information processing server 102 determines that the user has display authority.

[0054] Examples of specific conditions include the following: The authenticated user is in charge of the patient corresponding to the affected area image to be displayed. When this condition is used, the information processing server 102 makes a determination based on the authentication information and the patient identification information received in S328. The authenticated user belongs to the same medical department or the same treatment group as the photographer of the affected area image to be displayed. When this condition is used, the information processing server 102 makes a judgment based on the authentication information and photographer identification information received in S328. This makes it possible to grant display authority only to members of the bedsore team when the patient has a bedsore on the buttocks, for example. The authenticated user matches the photographer of the affected area image to be displayed. When this condition is used, the information processing server 102 makes a determination based on the authentication information and photographer identification information received in S328.

[0055] It should be noted that the information used to determine whether or not the display authority has been confirmed in S325 may be changed depending on the condition used as the specific condition.

[0056] For example, when the condition "the authenticated user is in charge of the patient corresponding to the affected part image to be displayed" is used, the imaging device 101 stores the patient identification information in the RAM 114 in addition to the authentication information of the user in S332 described later. In this case, after the next affected part image is selected in S322, the imaging device 101 determines in S325 whether the patient identification information linked to the next affected part image matches the patient identification information stored in the RAM 114. If the patient identification information linked to the next affected part image is different from the patient identification information stored in the RAM 114, the imaging device 101 determines that the display authority has not been confirmed, and proceeds to the process in S326. In addition, the imaging device 101 erases the patient identification information and the authentication information of the user stored in the RAM 114. This can suppress the possibility that a user without the display authority views the affected part image.

[0057] In addition, when the condition that "the authenticated user belongs to the same medical department or the same treatment group as the photographer of the diseased part image to be displayed" or "the authenticated user matches the photographer of the diseased part image to be displayed" is used, the imaging device 101 stores photographer identification information in the RAM 114 in addition to the user authentication information in S332 described later. In this case, after the next diseased part image is selected in S322, the imaging device 101 determines in S325 whether the photographer identification information linked to the next diseased part image matches the photographer identification information stored in the RAM 114. If the photographer identification information linked to the next diseased part image is different from the photographer identification information stored in the RAM 114, the imaging device 101 determines that the display authority has not been confirmed, and proceeds to the process in S326. In addition, the imaging device 101 erases the photographer identification information and the user authentication information stored in the RAM 114. This can suppress the possibility that a user without the display authority views the diseased part image.

[0058] Depending on the attributes of the authenticated user, different determination methods (criteria) may be used to determine whether the user has display authority. For example, if the authenticated user is a doctor, the information processing server 102 determines that the user has display authority if it is confirmed that the user is an official staff member of the hospital. On the other hand, if the authenticated user is a nurse, the information processing server 102 determines that the user has display authority if the user is in charge of the patient corresponding to the affected area image to be displayed. This makes it possible to control the granting of display authority for all images to users with higher positions or roles.

[0059] In S330, the imaging device 101 receives the determination result.

[0060] In S331, the imaging device 101 determines whether or not the imaging device 101 has display authority (whether or not the user has display authority) based on the determination result received in S330. If the imaging device 101 has display authority, the process proceeds to S332, and if the imaging device 101 does not have display authority, the process proceeds to S334.

[0061] In S332, the imaging device 101 records the authentication information of the user in the RAM 114. As described in S329, the imaging device 101 also records in the RAM 114, as necessary, the patient identification information, the photographer identification information, or the patient identification information and the photographer identification information associated with the affected area image to be displayed.

[0062] In S333, the imaging device 101 displays the affected area image, for example, as shown in Fig. 2(F). If the affected area image does not include a special care area, the process transitions from S324 to S333, and the imaging device 101 displays the affected area image, for example, as shown in Fig. 2(D). In this way, if the affected area image does not include a special care area, the user can view the affected area image without inputting authentication information, reducing the operational burden on the user.

[0063] In S334, the imaging apparatus 101 displays a message indicating that the user does not have the authority to display the affected area image, as shown in FIG. 2(G), for example.

[0064] S335 is the end of the loop. If the user ends the image display mode of the imaging device 101, the imaging device 101 ends the process of this flowchart. If not, the process returns to S321.

[0065] In addition, even if the affected area image includes a region requiring special care, if the display size of the affected area image is smaller than a predetermined size, the imaging device 101 may control the display of the affected area image regardless of whether the user has the display authority. For example, the imaging device 101 may have a function of displaying multiple affected area images as thumbnails at once, in addition to the function of displaying one affected area image at a time as described above. When multiple affected area images are displayed as thumbnails, the display size of each affected area image is relatively small. Therefore, even if the region of the affected area image is a region requiring special care, it is considered that the adverse effect on the patient is relatively small. Therefore, in the case of thumbnail display, the imaging device 101 may display the affected area image without requesting the user to input authentication information.

[0066] In the above-described example, the imaging device 101 links the part information to the affected part image at the time of shooting, and uses the part information at the time of displaying the image to determine whether user authentication is required (whether display authority confirmation is required). As another method, the imaging device 101 may not link the part information to the affected part image at the time of shooting, but may acquire information (part information) indicating the affected part associated with the patient from an electronic medical record system or the like at the time of displaying the image, and may determine whether user authentication is required based on the acquired part information. This makes it possible to determine whether the affected part image includes a special care part at the time of display without requesting the photographer to select a part. Note that, if the patient has multiple affected parts (i.e., multiple parts are associated with the patient in the electronic medical record system and the part information indicates multiple parts), the imaging device 101 may determine that all affected part images of the patient include a special care part if at least one of the multiple parts is a special care part, and may control to request user authentication. This allows the imaging device 101 to prevent a third party from viewing the special care part without specifying which of the multiple parts is included in each affected part image.

[0067] Furthermore, when the imaging device 101 obtains an imaging order from the information processing server 102 before imaging, the imaging device 101 may link the imaging order to the affected part image instead of the body part information in S305. Since the body part to be imaged is described in the imaging order, the imaging device 101 can essentially link the body part information to the affected part image by linking the imaging order to the affected part image. In this case, the imaging device 101 obtains the imaging order linked to the affected part image in S323. Then, the imaging device 101 determines whether the body part of the affected part image is a body part requiring special care by referring to the body part information described in the imaging order in S324. When the imaging order is used in this way, the photographer does not need to select the body part in S303, and the operational burden on the photographer is reduced.

[0068] Furthermore, instead of accepting the selection of the part by the photographer in S303, the imaging device 101 may capture the image of the affected area in S304 and then infer the part appearing in the image of the affected area using artificial intelligence (AI) or the like. In this case, in S305, the imaging device 101 may record a list of parts whose accuracy is equal to or higher than a first threshold value in association with the image of the affected area.

[0069] Fig. 8(A) is a diagram showing an example of the result of inferring the part of a diseased area by the artificial intelligence for a certain image of the diseased area. In Fig. 8(A), 801 shows the part of the diseased area inferred by the artificial intelligence, and 802 shows the accuracy of each part obtained by inference.

[0070] FIG. 8B is a diagram showing an example of a list of parts inferred by the artificial intelligence, the accuracy of which is equal to or higher than a first threshold value (0.2 in the example of FIG. 8B). In the example of FIG. 8B, in S305, the imaging device 101 records part information indicating "upper arm" and "lower arm" in association with the affected part image. Then, in S323, the imaging device 101 obtains a list of parts indicated by the part information associated with the affected part image, and in S324, determines whether the consideration-requiring part is included in the list of parts. If the consideration-requiring part is included in the list of parts, the process proceeds to S325; otherwise, the process proceeds to S333. This makes it possible to prevent a third party from viewing an affected part image that is likely to include a consideration-requiring part, without requiring the photographer to select a part.

[0071] Also, the imaging device 101 may infer the part shown in the affected part image by artificial intelligence or the like in S323 when displaying the image. In this case, in S324, the imaging device 101 determines whether the accuracy of the consideration-required part included in the inference result is equal to or greater than the second threshold. If the accuracy of the consideration-required part is equal to or greater than the second threshold, the process proceeds to S325, and if not, the process proceeds to S333. For example, when the inference result shown in FIG. 8(A) is obtained in S323, the imaging device 101 determines whether the accuracy of the consideration-required part included in FIG. 8(A) is equal to or greater than the second threshold (for example, 0.3) in S324. In the example of FIG. 8(A), the upper arm is the only part with an accuracy of 0.3 or greater, and the upper arm is not a consideration-required part. Therefore, the process proceeds to S333, and the imaging device 101 displays the affected part image without requesting user authentication. This makes it possible to prevent a third party from viewing an affected part image that is likely to include a consideration-required part without requiring the photographer to select a part. Furthermore, with this configuration, there is no need to link affected area images with site information when capturing images.

[0072] In addition, if there is no part having a certainty exceeding the third threshold as a result of inferring the part in the affected part image by artificial intelligence or the like, the inference may be regarded as a failure. If the inference fails, the imaging device 101 may determine in S324 that the affected part image includes a part requiring attention, and may request user authentication when displaying the affected part image.

[0073] As described above, according to the first embodiment, the imaging device 101 performs a process of receiving authentication information from a user (S326) and a process of selecting an affected area image (S322). In addition, the imaging device 101 performs a process of determining whether or not the selected affected area image includes a special area (specific area) of the patient (S324). If it is determined that the selected stem image includes a special area, the imaging device 101 controls the display of the affected area image according to the authentication information (S327, S330, S331, S333, and S334).

[0074] Therefore, according to this embodiment, it is possible to reduce the possibility that an affected area image including a special care area is unnecessarily viewed.

[0075] [Second embodiment] In the first embodiment, a configuration has been described in which the imaging device 101 allows the photographer to select a body part and acquires body part information indicating the selected body part. However, when body parts are divided into small categories, the photographer must select a body part from an enormous number of options, which is a burden for the photographer. Therefore, in this embodiment, a configuration will be described in which the imaging device 101 acquires a body part list from the information processing server 102 to limit the body part options.

[0076] In this embodiment, the basic configuration of the imaging system 100 is similar to that of the first embodiment. Below, differences from the first embodiment will be mainly described.

[0077] Fig. 4 is a diagram showing how the photographer selects a region to be photographed as an affected area. In this embodiment, the imaging device 101 photographs the barcode of the patient to obtain patient identification information in the same manner as in the first embodiment, and then transmits the patient identification information to the information processing server 102 to obtain a region list for the patient. 401 is a region list displayed on the display unit 115. The example in Fig. 4 corresponds to a case where the imaging device 101 obtains a region list from the information processing server 102 for a patient with affected areas on the left elbow and left cheek. In this example, the region list 201 contains only two options, so the photographer has less trouble selecting a region than in the first embodiment.

[0078] If the patient has only one affected area (if the region list contains only one option), the imaging device 101 does not need to request the photographer to select a region. In this case, the imaging device 101 may omit displaying the region list 401.

[0079] 5 is a flowchart of the process executed by the imaging device 101 and the information processing server 102 when the imaging device 101 captures an image of an affected area of ​​a patient. In the description of this flowchart, the process described as being executed by the imaging device 101 can be realized by the CPU 112 executing a program stored in the ROM 113, unless otherwise specified. In addition, in the description of this flowchart, the process described as being executed by the information processing server 102 can be realized by the CPU 152 executing a program stored in the ROM 153, unless otherwise specified. Below, differences from FIG. 3A will be described.

[0080] In S501, the imaging apparatus 101 transmits the patient identification information acquired in S301 to the information processing server 102 to request a region list.

[0081] In S502, the information processing server 102 acquires a list of regions to be imaged as affected areas of the patient identified by the received patient identification information. An example of a method for acquiring the region list is given below. The information processing server 102 has the function of an electronic medical record server, and acquires a list of body parts of a target patient from the electronic medical record server. The information processing server 102 acquires area information associated with the affected area images of the target patient from among the affected area images previously taken and stored in the storage 156 or the media drive 158, and generates a area list based on the acquired area information. The information processing server 102 acquires an imaging order in which the imaging target region of the target patient is recorded from an imaging ordering system (not shown) connected to the network 104, and generates a region list based on the acquired imaging order. Note that the information processing server 102 may have the function of the imaging ordering system.

[0082] In S503, the information processing server 102 transmits the part list acquired in S502 to the imaging apparatus 101.

[0083] In S504, the imaging apparatus 101 receives the part list from the information processing server 102.

[0084] In S505, the imaging apparatus 101 displays the part list 401 on the display unit 115 as shown in FIG. 4, and acquires part information indicating the part selected by the user.

[0085] As described above, according to the second embodiment, a list of body parts of a patient to be imaged is acquired from the information processing server 102, and the photographer is prompted to select a body part from the body part list. Therefore, according to this embodiment, it is possible to reduce the burden on the photographer of selecting a body part.

[0086] [Third embodiment] In the third embodiment, a case will be described in which an information processing terminal 103 having the function of an electronic medical record client displays an affected area image registered in an information processing server 102 having the function of an electronic medical record server. The electronic medical record server may be a server separate from the information processing server 102. In this case, the processes described below as being executed by the information processing server 102 may be executed by the information processing server 102 in cooperation with the electronic medical record server as necessary.

[0087] In this embodiment, the basic configuration of the imaging system 100 is similar to that of the first embodiment. Below, differences from the first embodiment will be mainly described.

[0088] 6 is a diagram showing a user interface (UI) of an electronic medical record client operating on the information processing terminal 103. This electronic medical record client operates in conjunction with an electronic medical record server in the information processing server 102.

[0089] Fig. 6(A) shows a login screen of the electronic medical record client. A user logs in to the electronic medical record client by inputting authentication information such as a user name and a password on the login screen. Note that the authentication information is not limited to a user name and a password, and various types of information can be used. Examples of information that can be used as authentication information are as described with reference to S326 in the first embodiment.

[0090] 6B shows a screen in an electronic medical record client where a doctor in charge of a particular patient is displaying information about the patient. 601 is an image of the affected area on the patient's left elbow, and 602 is an image of the affected area on the patient's face.

[0091] Fig. 6(C) shows a screen in an electronic medical record client in which the same patient information as in Fig. 6(B) is displayed by a doctor other than the patient. Since the left elbow is not a body part that can identify an individual or that affects the patient's dignity, the information processing terminal 103 displays an image 601 of the affected area of ​​the left elbow, as in Fig. 6(B). However, since the face is a body part that can identify an individual, the information processing terminal 103 displays, as indicated by reference numeral 603, that the doctor does not have the authority to display an image of the face.

[0092] As a method (criteria) for determining the display authority, various methods can be used, as in the first embodiment. Examples of the method (criteria) for determining the display authority are as described with reference to S329 in the first embodiment (excluding the criterion that all authenticated users have the display authority).

[0093] 7 is a flowchart of the process executed by the information processing terminal 103 and the information processing server 102 when the information processing terminal 103 displays an affected area image. Unless otherwise specified, the process described in the description of this flowchart as being executed by the information processing terminal 103 can be realized by the CPU 182 executing a program stored in the ROM 183. Furthermore, unless otherwise specified, the process described in the description of this flowchart as being executed by the information processing server 102 can be realized by the CPU 152 executing a program stored in the ROM 153.

[0094] In FIG. 7, the information processing terminal 103 is used as an example of an image display device that displays an affected area image. However, the image display device of this embodiment is not limited to the information processing terminal 103. For example, the imaging device 101 may be used as an image display device. In this case, the imaging device 101 as an image display device performs the same process as the information processing terminal 103 as an image display device as long as it is technically possible. In addition, in the description of FIG. 6, the information processing terminal 103 has a function as an electronic medical record client and displays an affected area image on the screen of the electronic medical record client. However, the display location of the affected area image in this embodiment is not limited to the screen of the electronic medical record client. Therefore, for example, the imaging device 101 as an image display device that does not have the function of an electronic medical record client may perform the same process as the information processing terminal 103 as an image display device as described below, thereby displaying, for example, screens as shown in FIG. 2(D) to FIG. 2(G) on the display unit 115.

[0095] In S701, the information processing terminal 103 displays the login screen shown in Fig. 6(A) on the display unit 181, thereby accepting input of authentication information from the user, and transmits the accepted authentication information to the information processing server 102. As described above, examples of information that can be used as authentication information are as described with reference to S326 in the first embodiment. Also, similar to the first embodiment, the information processing terminal 103 may realize multi-factor authentication by accepting multiple pieces of information.

[0096] In S702 , the information processing server 102 receives authentication information from the information processing terminal 103 .

[0097] In S703, the information processing server 102 performs user authentication (determines whether or not the user has login authority) based on the authentication information, and transmits the authentication result to the information processing terminal 103.

[0098] In S704, the information processing terminal 103 receives the authentication result from the information processing server 102.

[0099] In S705, the information processing terminal 103 determines whether the authentication result indicates that the user authentication has been successful (whether the user has the right to log in). If the user authentication has been successful, the process proceeds to S706, and if not, the process of this flowchart ends.

[0100] In S706 to S717, the information processing terminal 103 performs a display process of the affected area image registered in the electronic medical record server. The affected area image is recorded in the storage 156 of the information processing server 102 having the function of the electronic medical record server, and the information processing terminal 103 receives and displays the affected area image from the information processing server 102. Generally, multiple affected area images are recorded in an electronic medical record, so the processes of S706 to S717 form a loop.

[0101] In S707, the information processing terminal 103 selects an affected area image to be displayed on the display unit 181 based on a chart display instruction, a patient selection instruction, an examination date selection instruction, a scroll instruction, or the like input by the user using the input unit 187.

[0102] In S708, the information processing terminal 103 identifies the region of the affected area image selected in S707. As a method for identifying the region, the various identification methods described in the first and second embodiments can be used.

[0103] In S709, the information processing terminal 103 determines whether or not the part identified in S708 is a part requiring special care. If it is a part requiring special care, the process proceeds to S710. If not, the process proceeds to S715.

[0104] In S710 to S714, a process for determining whether or not the user has the display authority of the consideration-required part is performed. Here, as an example, a configuration will be described in which the information processing terminal 103 transmits information required for determining the display authority to the information processing server 102, receives a determination result from the information processing server 102, and determines whether or not the user has the display authority of the consideration-required part by referring to the determination result. However, this embodiment is not limited to this configuration. For example, similar to the description of S327 to S331 in the first embodiment, the information processing terminal 103 may complete the display authority determination process inside the information processing terminal 103 without communicating with the information processing server 102. This point is also the same for the process for user authentication in S701 to S705, and the information processing terminal 103 may complete the user authentication process inside the information processing terminal 103 without communicating with the information processing server 102.

[0105] In S710, in order to confirm whether or not the user has the authority to display the affected area image, the information processing terminal 103 transmits the user authentication information received in S701 and the patient identification information of the patient being referenced by the electronic medical record client to the information processing server 102 via the interface 185. Note that if a method that does not use the patient identification information of the patient is used as a method for determining the display authority, it is not necessary to transmit the patient identification information in S710. As in the first embodiment, the information processing terminal 103 only needs to transmit the necessary information to the information processing server 102 depending on the method for determining the display authority.

[0106] In S711, the information processing server 102 receives the user's authentication information and the patient identification information.

[0107] In S712, the information processing server 102 judges whether or not the user has the right to display the patient image based on the user's authentication information and patient identification information, and transmits the judgment result to the information processing terminal 103. As described above, various methods can be used as the judgment method (criteria) of the display authority, as in the first embodiment. Examples of the judgment method (criteria) of the display authority are as described with reference to S329 in the first embodiment. However, in the third embodiment, a configuration is adopted in which the presence or absence of the display authority is judged for a user whose user authentication has been successful. Therefore, among the examples of the judgment method (criteria) described in the first embodiment, the criterion that all authenticated users have the display authority is excluded in the third embodiment.

[0108] In S713, the information processing terminal 103 receives the determination result.

[0109] In S714, the information processing terminal 103 determines whether or not the user has display authority (whether or not the user has display authority) based on the determination result received in S713. If the user has display authority, the process proceeds to S715, and if the user does not have display authority, the process proceeds to S716.

[0110] In S715, the information processing terminal 103 displays the image of the affected area, for example, as indicated by reference numeral 602 in FIG.

[0111] In S716, the information processing terminal 103 displays a message indicating that the user does not have the authority to display the affected area image, as indicated by reference numeral 603 in FIG.

[0112] S717 is the end of the loop. If the user performs an operation to end viewing of the chart on the information processing terminal 103, the information processing terminal 103 ends the process of this flowchart. If not, the process returns to S706.

[0113] As described above, according to the third embodiment, similarly to the first embodiment, it is possible to suppress the possibility that an affected part image including a care-requiring part is unnecessarily viewed.

[0114] [Other embodiments] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0115] [summary] The above-described embodiment discloses at least the inventions shown in the following items, but is not limited to these inventions. [Item 1] A receiving means for receiving authentication information from a user; A selection means for selecting an image; a first determination means for determining whether the image includes a specific part of a person; a control means for controlling display of the image in accordance with the authentication information when the image is determined to include the specific portion; An image display device comprising: [Item 2] The first determination means determines whether the image includes the specific region based on whether a region indicated by region information associated with the image is the specific region. 2. The image display device according to item 1, [Item 3] The first determination means transmits personal identification information that identifies the person to an external device, receives body part information associated with the person from the external device, and determines whether the image includes the specific body part based on whether the body part indicated by the body part information is the specific body part. 2. The image display device according to item 1, [Item 4] When the part information indicates a plurality of parts, if at least one of the plurality of parts is the specific part, the first determination means determines that the image includes the specific part. 4. The image display device according to item 3, [Item 5] The first determination means infers a part included in the image using artificial intelligence, and determines whether the image includes the specific part based on whether the inferred part is the specific part. 2. The image display device according to item 1, [Item 6] When the inference of the part included in the image fails, the first determination means determines that the image includes the specific part. 6. The image display device according to item 5, [Item 7] The specific part includes at least one of a part that can identify the person as a specific individual and a part that is related to the dignity of the person. 7. The image display device according to any one of items 1 to 6, [Item 8] The specific part changes depending on the attributes of the person. 8. The image display device according to any one of items 1 to 7, [Item 9] a second determination means for determining whether or not the user has a display authority for the specific part based on the authentication information; The control means controls the display of the image when it is determined that the user has the display authority. 9. The image display device according to any one of items 1 to 8, [Item 10] The second determination means transmits the authentication information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information, thereby determining whether or not the user has the display authority. 10. The image display device according to item 9, [Item 11] The second determination means determines that the user has the display authority when user authentication based on the authentication information is successful. 11. The image display device according to item 9 or 10, [Item 12] the authentication information includes user identification information that identifies the user; The second determination means determines whether or not the user has a display authority for the specific body part based on the authentication information and personal identification information that identifies the person. 12. The image display device according to any one of items 9 to 11, [Item 13] The second determination means transmits the authentication information and the personal identification information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information and the personal identification information, thereby determining whether or not the user has the display authority. 13. The image display device according to item 12, [Item 14] The second determination means determines whether or not the user has a display authority for the specific body part based on the authentication information and photographer identification information for identifying a photographer of the image. 10. The image display device according to item 9, [Item 15] The second determination means transmits the authentication information and the photographer identification information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information and the photographer identification information, thereby determining whether or not the user has the display authority. 15. The image display device according to item 14, [Item 16] When it is determined that the image includes the specific part, and when it is determined that the user does not have the display authority, the control means performs control to display a message indicating that the user does not have the display authority. 16. The image display device according to any one of items 9 to 15, [Item 17] When it is determined that the image includes the specific part, if the display size of the image is smaller than a predetermined size, the control means controls to display the image regardless of whether the user has the display authority. 17. The image display device according to any one of items 9 to 16, [Item 18] When it is determined that the image does not include the specific portion, the control means controls to display the image regardless of whether the user has the display authority. 18. The image display device according to any one of items 9 to 17, [Item 19] the accepting means prompts the user to provide the authentication information after the image is selected; When a second image different from the image is selected after it is determined that the user has the display authority of the specific body part, the accepting means refrains from prompting the user to provide the authentication information. 19. The image display device according to any one of items 9 to 18, [Item 20] When a predetermined condition is satisfied after it is determined that the user has the display authority of the specific body part, the accepting means prompts the user to provide the authentication information after the second image is selected. 20. The image display device according to item 19, [Item 21] An image display device according to any one of items 1 to 20, An imaging means for generating the image; An imaging device comprising: [Item 22] A control method executed by an image display device, comprising: a receiving step of receiving authentication information from a user; a selection step for selecting an image; a first determination step of determining whether the image includes a specific part of a person; a control step of controlling display of the image in accordance with the authentication information when the image is determined to include the specific portion; A control method comprising: [Item 23] A program for causing a computer to function as each of the means of the image display device according to any one of items 1 to 20.

[0116] The invention is not limited to the above-described embodiments, and various modifications and variations are possible without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0117] 100: photography system, 101: imaging device, 102: information processing server, 103: information processing terminal, 104: network

Claims

1. A receiving means for receiving authentication information from a user; A selection means for selecting an image; a first determination means for determining whether the image includes a specific part of a person; a control means for controlling display of the image in accordance with the authentication information when the image is determined to include the specific portion; An image display device comprising:

2. The first determination means determines whether or not the image includes the specific region based on whether or not a region indicated by region information associated with the image is the specific region.

2. The image display device according to claim 1 .

3. The first determination means transmits personal identification information that identifies the person to an external device, receives body part information associated with the person from the external device, and determines whether the image includes the specific body part based on whether the body part indicated by the body part information is the specific body part.

2. The image display device according to claim 1 .

4. When the part information indicates a plurality of parts, if at least one of the plurality of parts is the specific part, the first determination means determines that the image includes the specific part.

4. The image display device according to claim 3.

5. The first determination means infers a part included in the image using artificial intelligence, and determines whether or not the image includes the specific part based on whether or not the inferred part is the specific part.

2. The image display device according to claim 1 .

6. When the inference of the part included in the image fails, the first determination means determines that the image includes the specific part.

6. The image display device according to claim 5,

7. The specific part includes at least one of a part that can identify the person as a specific individual and a part that is related to the dignity of the person.

2. The image display device according to claim 1 .

8. The specific part changes depending on the attributes of the person.

2. The image display device according to claim 1 .

9. a second determination means for determining whether or not the user has a display authority for the specific part based on the authentication information; The control means controls the display of the image when it is determined that the user has the display authority.

2. The image display device according to claim 1 .

10. The second determination means transmits the authentication information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information, thereby determining whether or not the user has the display authority.

10. The image display device according to claim 9.

11. The second determination means determines that the user has the display authority when user authentication based on the authentication information is successful.

10. The image display device according to claim 9.

12. the authentication information includes user identification information that identifies the user; The second determination means determines whether or not the user has a display authority for the specific body part based on the authentication information and personal identification information that identifies the person.

10. The image display device according to claim 9.

13. The second determination means transmits the authentication information and the personal identification information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information and the personal identification information, thereby determining whether or not the user has the display authority.

13. The image display device according to claim 12.

14. The second determination means determines whether or not the user has a display authority for the specific body part based on the authentication information and photographer identification information for identifying a photographer of the image.

10. The image display device according to claim 9.

15. The second determination means transmits the authentication information and the photographer identification information to an external device, and receives from the external device a result of a determination as to whether or not the user has the display authority, the determination being made based on the authentication information and the photographer identification information, thereby determining whether or not the user has the display authority.

15. The image display device according to claim 14.

16. When it is determined that the image includes the specific part, and when it is determined that the user does not have the display authority, the control means performs control to display a message indicating that the user does not have the display authority.

10. The image display device according to claim 9.

17. When it is determined that the image includes the specific part, if the display size of the image is smaller than a predetermined size, the control means controls to display the image regardless of whether the user has the display authority.

10. The image display device according to claim 9.

18. When it is determined that the image does not include the specific portion, the control means controls to display the image regardless of whether the user has the display authority.

10. The image display device according to claim 9.

19. the accepting means prompts the user to provide the authentication information after the image is selected; When a second image different from the image is selected after it is determined that the user has the display authority of the specific body part, the accepting means refrains from prompting the user to provide the authentication information.

10. The image display device according to claim 9.

20. When a predetermined condition is satisfied after it is determined that the user has the display authority of the specific body part, the accepting means prompts the user to provide the authentication information after the second image is selected.

20. The image display device according to claim 19.

21. An image display device according to any one of claims 1 to 20, An imaging means for generating the image; An imaging device comprising:

22. A control method executed by an image display device, comprising: a receiving step of receiving authentication information from a user; a selection step for selecting an image; a first determination step of determining whether the image includes a specific part of a person; a control step of controlling display of the image in accordance with the authentication information when the image is determined to include the specific portion; A control method comprising:

23. A program for causing a computer to function as each of the means of the image display device according to any one of claims 1 to 20.

Images