Truthfulness evaluation device and truthfulness evaluation method

Abstract

To evaluate the truthfulness of content metadata.SOLUTION: A truthfulness evaluation device 10 comprises an acquisition unit 11 that acquires a plurality of metadata of the same type but with different generation methods for content and an evaluation unit 12 that compares the plurality of metadata acquired by the acquisition unit 11 and evaluates the truthfulness of the metadata.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an authenticity evaluation apparatus and an authenticity evaluation method for evaluating the authenticity of metadata of content.

Background Art

[0002] Patent Document 1 shows that an imaging device generates metadata related to an imaging image and records an image file including the imaging image and the metadata.

Prior Art Document

Patent Document

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] By referring to the metadata associated with content (for example, an imaging image in the example shown in Patent Document 1), information related to the content such as the imaging position or imaging time of the content can be grasped. However, if the metadata is forged, various problems may occur. For example, if the imaging position or imaging time of the content is forged, it may lead to the forgery of facts such as the actual time or position when the user actually performed imaging.

[0005] The present invention has been made in view of the above, and an object thereof is to provide an authenticity evaluation apparatus and an authenticity evaluation method capable of evaluating the authenticity of metadata of content.

Means for Solving the Problems

[0006] In order to achieve the above object, the authenticity evaluation apparatus according to the present invention includes an acquisition unit that acquires a plurality of metadata of the same type for content, which have different generation methods from each other, and an evaluation unit that compares the plurality of metadata acquired by the acquisition unit and evaluates the authenticity of the metadata.

[0007] In the authenticity evaluation apparatus according to the present invention, a plurality of metadata of the same type, which have different generation methods from each other, are compared, and the authenticity of the metadata is evaluated. Therefore, according to the authenticity evaluation apparatus according to the present invention, the authenticity of the metadata of the content can be evaluated.

[0008] By the way, the present invention can be described not only as an invention of an authenticity evaluation apparatus as described above, but also as an invention of an authenticity evaluation method as follows. These are substantially the same invention except for different categories, and exhibit the same operations and effects.

[0009] That is, the authenticity evaluation method according to the present invention includes an acquisition step in which an authenticity evaluation apparatus acquires a plurality of metadata of the same type for content, which have different generation methods from each other, and an evaluation step in which the authenticity evaluation apparatus compares the plurality of metadata acquired in the acquisition step and evaluates the authenticity of the metadata.

Advantages of the Invention

[0010] According to the present invention, the authenticity of the metadata of the content can be evaluated.

Brief Description of the Drawings

[0011]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Embodiments for Carrying Out the Invention

[0012] Hereinafter, embodiments of an authenticity evaluation apparatus and an authenticity evaluation method according to the present invention will be described in detail with reference to the drawings. In the description of the drawings, the same reference numerals are assigned to the same elements, and redundant descriptions are omitted.

[0013] FIG. 1 shows an authenticity evaluation apparatus 10 according to the present embodiment. The authenticity evaluation apparatus 10 is an apparatus (system) that evaluates the authenticity of content metadata. The content related to the metadata to be evaluated for authenticity is digital content, and for example, is an image (photo or moving image) generated by imaging (photographing). Alternatively, the content may be anything other than an image, such as text, audio (recording data), or an image generated by means other than imaging, as long as it is related to metadata. For example, the content may be data related to temperature, humidity, illuminance, smell, or taste.

[0014] Metadata is data indicating matters related to content. For example, metadata is data related to the position where the content was generated, the time when the content was generated, the person who generated the content, or the apparatus that generated the content. Specifically, the metadata may be data indicating these positions, times, persons who generated the content, or apparatuses that generated the content. When the content is an image generated by imaging, the metadata is data related to the position where the imaging was performed, the time when the imaging was performed, the person who performed the imaging, or the apparatus that performed the imaging.

[0015] The authenticity evaluation device 10 may have a function of generating (creating) content and metadata. For example, the authenticity evaluation device 10 may have a function of capturing an image using a camera or the like to generate an image. In this case, the authenticity evaluation device 10 evaluates the authenticity of the metadata of the content generated by itself. In this case, the authenticity evaluation device 10 is constituted by a computer having a function of generating content, such as a smartphone, a tablet terminal, or a PC (personal computer). Further, the authenticity evaluation device 10 may be a wearable terminal (for example, glasses or a watch), a camera such as a single-lens reflex camera, an IoT (Internet of Things) terminal (for example, a smart speaker or a sensor installed only at a remote location such as an LPWA (Low Power Wide Area) temperature sensor), an in-vehicle terminal, or a microphone for recording.

[0016] Alternatively, the authenticity evaluation device 10 may evaluate the authenticity of the metadata of the content generated by another device. For example, when the device that generates the content does not have a sufficient information processing function, the authenticity evaluation device 10 other than the device that generates the content may evaluate the authenticity of the metadata of the content. In this case, the authenticity evaluation device 10 is constituted by a computer such as a PC or a server device. The authenticity evaluation device 10 may be constituted by a plurality of computers. Further, the authenticity evaluation device 10 may be constituted by a device that generates content and another device (for example, a server device). The authenticity evaluation device 10 may be able to transmit and receive information to and from another device via a network for acquiring information necessary for realizing functions.

[0017] The authenticity of metadata refers to whether the metadata indicates true matters. Usually, metadata is the digitalization of real-world information. Therefore, the authenticity of metadata ensures the authenticity when digitizing real-world information. Without the authenticity of metadata, for example, if the metadata is forged by tampering or the like, various problems may occur. Tampering with metadata can be done by the content generator and also by those other than the content generator (for example, by hacking the sensor itself or the device itself).

[0018] For example, even though user X is taking a picture of a poster in Sapporo, the user pretends that the location data of the imaging location (for example, the location data obtained by the imaging device through GPS (Global Positioning System) positioning) as metadata is in Tokyo and then takes the picture and uploads the image (photo) as real information to an SNS (Social Networking Service). User X's intention is simply to boast to friends about having been to Tokyo. People who view this image will misrecognize the facts.

[0019] Or, there may be a tampering act of setting the date and time in the imaging device, which is metadata, to 2023 for imaging when it is actually 2022. The intention is to cause confusion by making it seem that an event that was only held in 2022 was also held in 2023 when looking back several years later and to enjoy the fact that one's post has gone viral (many people are paying attention).

[0020] Alternatively, it is conceivable that User A uses User B's terminal to impersonate User B and generate content through fraud. Specifically, it is an act in which User A steals the passcode for using User B's terminal and then generates content while posing as User B. Or, it is also conceivable that User A logs in with User B's account on software to generate and post content. The intention is to post something disadvantageous to User B in order to socially entrap User B.

[0021] Alternatively, even if there is no malice on the part of User C, who is the photographer, it is conceivable that an image (photo) with data on an imaging position different from the actual reality, which is metadata, taken by User C who purchased a second-hand terminal whose GPS positioning function has been modified by User D, will circulate.

[0022] By evaluating the authenticity of metadata by the authenticity evaluation device 10, it is possible to prevent problems caused by falsification of metadata. Further, the authenticity evaluation device 10 may evaluate the authenticity of the content related to the metadata based on the evaluation result of the authenticity of the metadata. The authenticity of the content depends on whether the content relates to true matters.

[0023] Subsequently, the functions of the authenticity evaluation device 10 according to the present embodiment will be described. As shown in FIG. 1, the authenticity evaluation device 10 includes an acquisition unit 11 and an evaluation unit 12. Further, when the authenticity evaluation device 10 generates content and metadata, the authenticity evaluation device 10 also has a function of generating content and metadata. The function of generating content and metadata may be the same as that of the prior art.

[0024] The acquisition unit 11 is a functional unit that acquires a plurality of pieces of metadata of the same type for content, where the generation methods of the metadata are different from each other. The acquisition unit 11 may acquire a plurality of pieces of metadata of a plurality of types. The acquisition unit 11 may also acquire risk information indicating the risk of forgery in the device where the content is generated. The acquisition unit 11 may acquire a plurality of pieces of metadata at the timing when the content is generated.

[0025] The acquisition unit 11 may acquire, as metadata, data related to the position where the content is generated. The acquisition unit 11 may acquire, as metadata, data indicating the time when the content is generated. The acquisition unit 11 may acquire, as metadata, data related to the person who generated the content. The acquisition unit 11 may acquire, as metadata, data related to the device that generated the content.

[0026] The metadata acquired by the acquisition unit 11 is an object of authenticity evaluation. For example, the acquisition unit 11 acquires, as a plurality of pieces of metadata of the same type, one main piece of metadata and one or more sub-pieces of metadata. The main piece of metadata is, for example, preset metadata that is assumed to be associated with the content. The sub-pieces of metadata are metadata other than the main piece of metadata. Note that the main piece of metadata and the sub-pieces of metadata do not necessarily have to be the above-mentioned ones. Also, as long as there are a plurality of pieces of metadata, the distinction between the main piece of metadata and the sub-pieces of metadata does not have to be made.

[0027] The acquisition unit 11 acquires metadata of a preset type. The acquisition unit 11 may acquire a plurality of pieces of metadata of one type, or may acquire a plurality of pieces of metadata of a plurality of types.

[0028] The example of metadata used in the authenticity evaluation apparatus 10 is shown in the table of FIG. 2. The types of metadata acquired by the acquisition unit 11 are, for example, location information, date and time information, content acquirer, and device information. The location information is information indicating the location where the content is generated, that is, the location of the device that generates the content at the time when the content is generated. The location information is, for example, Geometry type data including information indicating the latitude and longitude of the location. The main metadata of the location information is, for example, data obtained by the device that generates the content measuring its own location with a positioning function using GPS. The sub-metadata of the location information is, for example, data obtained by cellular base station positioning (cellular), data obtained by positioning using Wi-Fi (registered trademark) radio waves (Wi-Fi), and data obtained by positioning using Bluetooth (registered trademark) radio waves (Bluetooth).

[0029] Cellular base station positioning is the positioning of the device based on radio waves from the base station of cellular communication received by the device that generates the content. Positioning using Wi-Fi radio waves is the positioning of the device based on Wi-Fi radio waves received by the device that generates the content. Positioning using Bluetooth radio waves is the positioning of the device based on Bluetooth radio waves received by the device that generates the content. Each of the above positioning methods may be a conventional method. As described above, the location information may be based on cellular communication (mobile communication) and short-range wireless communication. The location information used as metadata is information related to the location at the time of content generation. Note that, as the metadata (type), data related to the location where the content is generated other than the above location information may be used.

[0030] The date and time information is information indicating the time when the content is generated. The location information is, for example, Date-type data including information indicating the date and the time on that date. The main metadata of the date and time information is, for example, data obtained by the clock function of the device that generates the content. The sub-metadata of the location information is, for example, data obtained by the clock function outside the device that generates the content. As this data, for example, there is data obtained from an NTP (Network Time Protocol) server (NTP server), data obtained from a Wi-Fi router connected to the device that generates the content (Wi-Fi), and data obtained from artificial satellites (satellite information). Also, this data may be data obtained from the clock function of a terminal (for example, a smart speaker) around the authenticity evaluation device 10. The date and time information used as metadata is information related to the time at the time of content generation. Note that, as the metadata (type), data indicating the time when the content is generated, other than the above date and time information, may be used.

[0031] The data of the content acquirer is data indicating the person who acquired (generated) the content. The data of the content acquirer is, for example, Float-type data. The main metadata of the content acquirer is, for example, the account (data indicating it) (for example, user ID) used in the use of the device that generates the content. The said account indicates the user of the device that generates the content and indicates the content acquirer.

[0032] The sub-metadata of the content acquirer is, for example, data obtained from a server that performs online identity verification (eKYC: electronic Know Your Customer) for the content acquirer (eKYC server). Also, the sub-metadata of the content acquirer is data used for biometric authentication of the content acquirer (biometric authentication). Also, the sub-metadata of the content acquirer is the ID of a wallet (wallet ID) for managing digital financial information, etc. about the content acquirer. Also, the metadata of the content acquirer may be data (for example, data used for biometric authentication) characterized as feature amounts. Also, the sub-metadata of the content acquirer may be information related to an account used for the use of the device that generates the content (for example, the password corresponding to the account).

[0033] Each of the above metadata of the content acquirer may be conventionally used data. The data of the content acquirer regarded as metadata is information related to the user of the device that generates the content at the time of content acquisition (generation). Note that, as the metadata (type), data related to the person who generated the content other than the above data of the content acquirer may be used.

[0034] Device information is information indicating the device that generated the content. The device information is, for example, Int-type data. The main metadata of the device information is, for example, data indicating the device stored in the device that generates the content. The data indicating the device is, for example, a UUID (Universally Unique Identifier), an IMEI (International Mobile Equipment Identity), or data indicating the specifications of the device (specification sheet). The specification sheet is a sheet describing the detailed parts of the device defined by the device manufacturer. The specification sheet includes, for example, the model numbers of the camera sensor and the CPU (Central Processing Unit) chip, and data on the maximum and minimum values of the values that can be obtained by the sensor.

[0035] The sub-metadata of the device information is, for example, data (device management system (MDM)) corresponding to the main metadata of the above device information related to the device that generates the content and stored in a device management system (MDM). For example, when the main metadata of the device information is a UUID stored in the device that generates the content, the sub-metadata of the device information is the UUID stored in the MDM. Note that, as the metadata (type), data related to the device that generated the content other than the above device information may be used. Also, the metadata (type) of the content may be other than the above.

[0036] When the device that generates the content is the authenticity evaluation device 10 and the metadata is stored in the authenticity evaluation device 10, the acquisition unit 11 reads and acquires the metadata from its own device 10. When the device that generates the content is other than the authenticity evaluation device 10, or when the metadata is not stored in the authenticity evaluation device 10, the acquisition unit 11 receives and acquires the metadata from the device in which the metadata is stored. The acquisition of the metadata from the device in which the metadata is stored may be performed, for example, by the acquisition unit 11 requesting the metadata from the device, or the device may be set in advance to transmit the metadata to the acquisition unit 11.

[0037] For example, when personal authentication is realized dispersedly by verifying data of a plurality of terminals other than the device that generates the content (for example, constant monitoring by IoT terminals in the street), the acquisition unit 11 may acquire data for personal authentication from the plurality of terminals as metadata of the content. Also, the acquisition unit 11 may acquire authentication information of a microchip embedded in the body of the person who generates the content as metadata of the content. Also, the acquisition unit 11 may acquire metadata by a method other than the above.

[0038] The acquisition unit 11 may acquire metadata at the timing when the content is generated. For example, the acquisition unit 11 detects that the content has been generated and acquires the metadata. The detection of the generation of the content may be performed by a conventional method. Note that the acquisition unit 11 may also acquire metadata at a timing other than when the content is generated. The acquisition unit 11 outputs the acquired metadata to the evaluation unit 12.

[0039] In addition to the metadata, the acquisition unit 11 may also acquire risk information indicating the risk of forgery in the device where the content related to the metadata is generated, as information for evaluating the authenticity of the metadata. The risk is, for example, that the device is rooted (the operation authority that is not normally released to the user in the terminal is released). In this case, the risk information is information indicating whether the device where the content related to the metadata is generated is rooted. This is because when the device is rooted, the metadata in the terminal is likely to be forged.

[0040] Whether the device is rooted or not can be detected by a conventional method, and the acquisition unit 11 acquires the risk information using the conventional method. For example, when the device where the content is generated is the authenticity evaluation device 10, the acquisition unit 11 detects whether the own device 10 is rooted and acquires the risk information. When the device where the content is generated is a device other than the authenticity evaluation device 10, the acquisition unit 11 receives and acquires the risk information from the device where the content is generated. The acquisition unit 11 may also acquire the risk information by a method other than the above. Also, the risk information may be information other than the above as long as it indicates the risk of forgery in the device where the content related to the metadata is generated. The acquisition unit 11 outputs the acquired risk information to the evaluation unit 12.

[0041] The evaluation unit 12 is a functional unit that compares a plurality of pieces of metadata acquired by the acquisition unit 11 and evaluates the authenticity of the metadata. The evaluation unit 12 may evaluate the authenticity of the metadata for each of a plurality of types, and evaluate the authenticity of the content based on the evaluation results of the authenticity of the metadata for each of the plurality of types. The evaluation unit 12 may also evaluate the authenticity of the metadata based on the risk information acquired by the acquisition unit 11. The evaluation unit 12 evaluates the authenticity of the metadata as follows, for example.

[0042] The evaluation unit 12 evaluates the authenticity of the metadata based on evaluation criteria preset and stored in the authenticity evaluation device 10. The evaluation criteria are set for each type of metadata. The evaluation criteria are based on the idea that if a plurality of pieces of metadata of the same type indicate the same or corresponding things to each other, the authenticity of the metadata is considered to be valid.

[0043] The evaluation unit 12 inputs the metadata from the acquisition unit 11. The evaluation unit 12 evaluates the authenticity of the input metadata for each type of metadata. The evaluation unit 12 compares a plurality of pieces of metadata of the same type and evaluates the authenticity of the metadata. Hereinafter, an example of evaluating the authenticity of location information metadata will be described.

[0044] The evaluation unit 12 calculates a score for the authenticity of the metadata from the input metadata. Here, the higher the authenticity score, the larger the value. For example, assume that four pieces of metadata (cellular, GPS, Wi-Fi, and Bluetooth) shown in FIG. 3 are acquired as location information metadata.

[0045] The evaluation unit 12 calculates the reliability for each combination of two of the four pieces of metadata and for each latitude and longitude. The reliability takes into account the differences in the sensitivity of internal sensors for each device (the device that generates the metadata or the device that generates the data for generating the metadata) (for example, manufacturer differences and individual differences).

[0046] The evaluation unit 12 calculates the difference in latitude or longitude for each latitude and longitude of the two metadata, and calculates the reliability from the difference. FIG. 4 shows the criteria for calculating the reliability. For example, the difference between the latitude of the cellular metadata and the latitude of the GPS metadata is 100 - 110 = -10. As shown in FIG. 4, since the difference value -10 is within the normal range, the reliability is set to 100%. Note that if any of the four metadata cannot be obtained, the metadata that cannot be obtained is not used for comparison. For example, if the GPS metadata cannot be obtained, the GPS metadata is excluded from the comparison target.

[0047] The evaluation unit 12 calculates the authenticity score of the metadata of the location information from the calculated reliability for each latitude and longitude of the two metadata. FIG. 5 shows an example of the values used for calculating the reliability according to the example of the four metadata shown in FIG. 3. For each latitude and longitude of the two metadata, the evaluation unit 12 calculates the reliability (TC) (the value in the column of "Threshold check & Reliability extraction = TC" in FIG. 5) calculated, and the reliability (TC') for each latitude and longitude of the two metadata up to that point (the value in the column of "Reliability (first)" in FIG. 5), and calculates the reliability (the value in the column of "Reliability (first time)" in FIG. 5) used for calculating the authenticity score. When there is no reliability (TC') for each latitude and longitude of the two metadata up to that point, that is, in the case of calculating the authenticity score for the first time, the value of the reliability (TC') for each latitude and longitude of the two metadata up to that point is set to 100, which is a preset value.

[0048] The evaluation unit 12 stores the reliability used for calculating the calculated authenticity score. The evaluation unit 12 uses the stored reliability as the reliability up to that point for the next calculation of the authenticity score. Since the information acquired by the same device will be compared using the same logic after the second time, the reliability may be determined with reference to the past reliability as described above. It is an image of calibrating the difference (for example, manufacturer difference and individual difference) described above for the first time.

[0049] When the calculated reliability (TC) is 1.00 (100%), the evaluation unit 12 sets the reliability used for calculating the truth score to TC' × 1.01. When the calculated reliability (TC) is not 1.00 (100%), the evaluation unit 12 sets the reliability used for calculating the truth score to TC' - (1.00% - TC). That is, the reliability used for calculating the truth score = IF(TC = 1.00 (100%), TC' × 1.01, TC' - (1.00% - TC)). If TC is high, the latitude or longitude of the two metadata is accurate, so the reliability is increased. Conversely, if it is low, it is inaccurate, so the reliability is decreased. The evaluation unit 12 calculates the average of the reliabilities used for calculating the truth score as the truth score of the location information metadata.

[0050] In addition, when the difference between the highest and lowest reliabilities used for calculating the truth score is equal to or greater than a threshold value (for example, 5), the evaluation unit 12 excludes the low reliability from the calculation of the truth score. For example, if the reliability of the combination of cellular and GPS is 103 and the reliability of the combination of GPS and Wi-Fi is 97, the combination of GPS and Wi-Fi is excluded from the calculation of the truth score because its reliability is relatively low within the device.

[0051] Even if the reliability of a combination once decreases, if it recovers to a preset reliability, it may be restored as being used for the calculation of the truth score. For example, even if the reliability of the combination including GPS becomes 96% due to the tampering of GPS at the second time and is excluded from the calculation of the truth score, if it returns to 98% at the fifth time, it may be restored as being used for the calculation of the truth score. In this algorithm, combinations with low reliability are excluded because their reliability continues to decrease with each passing time. Also, as described above, for each device that generates metadata, the sensitivity of the sensor (the accuracy of the generated metadata) is different (for example, there are those with high or low cellular sensitivity and Wi-Fi sensitivity when acquiring location information), so there is also the intention to trust more those with consistently high reliability in that device.

[0052] The evaluation unit 12 performs a truth evaluation (judgment) based on the calculated truth score. As shown in the table of FIG. 2, when the calculated truth score is equal to or higher than a preset threshold (for example, 90%), the evaluation unit 12 evaluates that the truth of the metadata of the location information is true. When the calculated truth score is less than the threshold, the evaluation unit 12 evaluates that the truth of the metadata of the location information is false. For example, as shown in the table of FIG. 2, when the calculated truth score is 77%, the evaluation unit 12 evaluates that the truth of the metadata of the location information is false.

[0053] In the above example, the evaluation is performed by a pairwise comparison between the main metadata and the sub-metadata. However, the evaluation may also be performed by other comparisons. For example, among a plurality of sub-metadata, those considered to have high reliability may be set in advance as comparison targets, and the set sub-metadata may be compared with the main metadata for evaluation. Further, when it is determined by a conventional method or the like that there is an obvious error in the main metadata, the reliability of the main metadata is low, or the main metadata has been tampered with, the main metadata may be replaced with preset sub-metadata considered to have high reliability.

[0054] For metadata types that are numerical and for which differences (for example, manufacturer differences and individual differences) can occur between multiple metadata, the evaluation unit 12 may evaluate the truth of the metadata in the same manner as the above location information. For example, the evaluation unit 12 may also evaluate the truth of the metadata for the date and time information in the same manner as the above location information. Note that the evaluation of the truth of the metadata does not necessarily have to be performed by the above method, and it is sufficient that multiple metadata are compared for the same metadata type.

[0055] Next, an example of evaluating the authenticity of the metadata of the content acquirer will be described. The evaluation unit 12 determines whether the input multiple metadata correspond to each other, in this case, whether the multiple metadata pertain to the same content acquirer. The evaluation unit 12 stores in advance, in association with each other, multiple metadata that pertain to the same content acquirer. For example, when the authenticity evaluation device 10 is a device that generates content, the evaluation unit 12 stores in advance, in association with each other, multiple metadata that pertain to the user of the authenticity evaluation device 10 as the content acquirer. The evaluation unit 12 stores the multiple metadata in association with a cryptographic key prepared in advance.

[0056] The evaluation unit 12 determines whether all of the input multiple metadata are those stored in advance in association with the cryptographic key. If it is determined that all of the input multiple metadata are those stored in advance in association with the cryptographic key, the evaluation unit 12 evaluates that the authenticity of the metadata of the content acquirer is True. If it is determined that not all of the input multiple metadata are those stored in advance in association with the cryptographic key, the evaluation unit 12 evaluates that the authenticity of the metadata of the content acquirer is False.

[0057] Next, an example of evaluating the authenticity of the metadata of the device information will be described. In the present embodiment, the main metadata and the sub-metadata of the device information should be the same as each other in terms of whether they are stored in the device that generates content or stored outside the device (MDM). Therefore, the evaluation unit 12 determines whether the input multiple metadata match each other. If it is determined that the input multiple metadata match each other, the evaluation unit 12 evaluates that the authenticity of the metadata of the device information is True. If it is determined that the input multiple metadata do not match each other, the evaluation unit 12 evaluates that the authenticity of the metadata of the device information is False.

[0058] When the evaluation unit 12 determines that the metadata is authentic, for multiple pieces of metadata that correspond to or are identical to each other, the authenticity of the metadata may be evaluated in the same manner as the above-described content acquirer or device information. Note that the evaluation of the authenticity of the metadata does not necessarily have to be performed by the above method, and it is sufficient that multiple pieces of metadata are compared for the same type of metadata.

[0059] After the evaluation unit 12 evaluates the authenticity of the metadata for each of the multiple types, the evaluation unit 12 may evaluate (determine) the authenticity of the content based on the evaluation results of the authenticity of the metadata for each of the multiple types. For example, when the evaluation unit 12 evaluates that all of the multiple types of metadata are authentic (True), the evaluation unit 12 evaluates that the content related to the metadata is authentic. When the evaluation unit 12 evaluates that any one of the multiple types of metadata is inauthentic (False), the evaluation unit 12 evaluates that the content related to the metadata is inauthentic.

[0060] When risk information is acquired by the acquisition unit 11, the evaluation unit 12 may input the risk information from the acquisition unit 11 and evaluate the authenticity of the metadata based on the input risk information. For example, the evaluation unit 12 sets criteria for evaluating the authenticity of the metadata based on the risk information. Specifically, the evaluation unit 12 sets a threshold for evaluating the authenticity of the metadata from the above-described authenticity score based on the risk information. When the risk information indicates that the device is rooted, the evaluation unit 12 sets the threshold lower (compared to the following case) so that the metadata is more likely to be evaluated as inauthentic. When the risk information indicates that the device is not rooted, the evaluation unit 12 sets the threshold higher (compared to the above case) so that the metadata is less likely to be evaluated as inauthentic. Note that the evaluation unit 12 may evaluate the authenticity of the metadata based on the risk information by a method other than the above.

[0061] When the evaluation unit 12 acquires the information used for evaluation by the acquisition unit 11, it may perform the above evaluation. For example, the evaluation unit 12 may perform the above evaluation at the timing when the content is generated. Also, the function of the evaluation unit 12 is realized by a dedicated application, and the evaluation unit 12 may use the cache area of the application to perform the above evaluation between when the content is generated and when it is stored in the storage of the device that generates the content. This is to prevent forgery before storage in the storage.

[0062] The evaluation unit 12 uses the evaluation result as follows. For example, the evaluation unit 12 outputs the evaluation result. The output of the evaluation result is performed, for example, in a form recognizable by the person who generated the content. Specifically, when the device that generated the content is the authenticity evaluation device 10, the evaluation unit 12 performs display etc. of the evaluation result. When the device that generated the content is other than the authenticity evaluation device 10, the evaluation unit 12 transmits the display of the evaluation result to the device that generated the content. Thereby, in the device that generated the content, display etc. of the evaluation result is performed. Thereby, the person who generated the content can grasp the authenticity of the metadata or the content.

[0063] Also, the evaluation unit 12 may perform processing on the content according to the evaluation result. For example, the evaluation unit 12 may associate the evaluation result with the content so that the authenticity of the metadata or the content can be grasped from the evaluation result associated with the content. Also, the evaluation unit 12 may associate the metadata evaluated as authentic (metadata with guaranteed authenticity) with the content so that it can be handled as one piece of data.

[0064] In addition, the evaluation unit 12 may encrypt the content related to the metadata evaluated as authentic or the content evaluated as authentic. This can reduce the risk of content being processed during the distribution process. Also, the evaluation unit 12 may perform control to prohibit the storage of the content related to the metadata evaluated as inauthentic or the content evaluated as inauthentic in storage. This can prevent the content related to the metadata evaluated as inauthentic or the content evaluated as inauthentic from being used. Note that the evaluation result may be used by other methods than those described above. The above are the functions of the authenticity evaluation device 10 according to the present embodiment.

[0065] Subsequently, using the flowchart of FIG. 6, an authenticity evaluation method, which is a process (operation method performed by the authenticity evaluation device 10) executed by the authenticity evaluation device 10 according to the present embodiment, will be described. In this process, first, the acquisition unit 11 acquires evaluation information used for evaluating the authenticity of the metadata (S01, acquisition step). The evaluation information includes a plurality of pieces of metadata of the same type for the content, with different generation methods for each other.

[0066] Subsequently, the evaluation unit 12 compares the plurality of pieces of metadata acquired by the acquisition unit 11 to evaluate the authenticity of the metadata (S02, evaluation step). Subsequently, the evaluation unit 12 evaluates the authenticity of the content based on the evaluation result of the authenticity of the metadata (S03, evaluation step). Subsequently, the evaluation unit 12 uses the evaluation result (S04). The above is the authenticity evaluation method, which is the process executed by the authenticity evaluation device 10 according to the present embodiment.

[0067] In this embodiment, a plurality of metadata of the same type but with different generation methods are compared to evaluate the authenticity of the metadata. Therefore, according to this embodiment, the authenticity of the metadata of the content can be evaluated. For example, as a result of this evaluation, even if the above-mentioned metadata is forged by tampering or the like, the person who generates the content or the person who uses the content can grasp the authenticity of the metadata, and problems can be prevented from occurring. For example, it is possible to prevent malicious tampering of the metadata itself or tampering of the metadata environment.

[0068] Also, as in this embodiment, the authenticity of the content may be evaluated based on the evaluation results of the authenticity of the metadata for each of the plurality of types. According to this configuration, the authenticity of the content itself can also be evaluated. However, the evaluation of the authenticity of the content is not necessarily required.

[0069] Also, as in this embodiment, the authenticity of the metadata may be evaluated based on the risk information. According to this configuration, the authenticity of the metadata of the content can be evaluated more appropriately. However, the risk information is not necessarily used for evaluating the authenticity of the metadata.

[0070] Also, as in this embodiment, the metadata used for evaluating the authenticity of the metadata may be acquired at the timing when the content is generated. Usually, the metadata is generated at the timing when the content is generated. Therefore, according to this configuration, the authenticity of the metadata of the content can be evaluated more appropriately. However, the acquisition of the metadata may be performed at a timing other than the timing when the content is generated.

[0071] Also, as in the present embodiment, the type of metadata may be at least any one of data related to the position where the content was generated, data indicating the time when the content was generated, data related to the person who generated the content, and data related to the device that generated the content. According to this configuration, the authenticity of the metadata of the content can be evaluated more appropriately. However, the type of metadata may be other than the above.

[0072] Note that the block diagrams used in the description of the above embodiment show blocks of functional units. These functional blocks (components) are realized by any combination of at least one of hardware and software. Also, the method of realizing each functional block is not particularly limited. That is, each functional block may be realized using one physically or logically combined device, or two or more physically or logically separated devices may be directly or indirectly (for example, using wired, wireless, etc.) connected and realized using these multiple devices. The functional block may be realized by combining software with the above one device or the above multiple devices.

[0073] Functions include, but are not limited to, judgment, decision, determination, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, solution, selection, selection, establishment, comparison, assumption, expectation, regarded as, notification (broadcasting), notification (notifying), communication, forwarding, configuration, reconfiguration, allocation (allocating, mapping), assignment, etc. For example, a functional block (component) that functions as transmission is called a transmission unit or a transmitter. In any case, as described above, the realization method is not particularly limited.

[0074] For example, the authenticity evaluation device 10 in one embodiment of the present disclosure may function as a computer that performs the information processing of the present disclosure. FIG. 7 is a diagram showing an example of the hardware configuration of the authenticity evaluation device 10 according to one embodiment of the present disclosure. The above-described authenticity evaluation device 10 may physically be configured as a computer device including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, and the like.

[0075] In the following description, the term "device" can be read as a circuit, a device, a unit, or the like. The hardware configuration of the authenticity evaluation device 10 may be configured to include one or more of each device shown in the figure, or may be configured without including some devices.

[0076] Each function in the authenticity evaluation device 10 is realized by causing a processor 1001 to read a predetermined software (program) onto hardware such as the processor 1001 and the memory 1002, so that the processor 1001 performs calculations and controls communication by the communication device 1004, or controls at least one of reading and writing data in the memory 1002 and the storage 1003.

[0077] The processor 1001 controls the entire computer by operating an operating system, for example. The processor 1001 may be configured by a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic device, a register, and the like. For example, each function in the above-described authenticity evaluation device 10 may be realized by the processor 1001.

[0078] Further, the processor 1001 reads a program (program code), software module, data, etc. from at least one of the storage 1003 and the communication device 1004 into the memory 1002, and executes various processes according to these. As the program, a program for causing a computer to execute at least a part of the operations described in the above embodiments is used. For example, each function in the authenticity evaluation device 10 may be stored in the memory 1002 and realized by a control program operating in the processor 1001. Although it has been described that the above various processes are executed by one processor 1001, they may be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. Note that the program may be transmitted from a network via a telecommunication line.

[0079] The memory 1002 is a computer-readable recording medium and may be constituted by at least one of, for example, ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), RAM (Random Access Memory), etc. The memory 1002 may be referred to as a register, cache, main memory (main storage device), etc. The memory 1002 can store a program (program code), software module, etc. executable for implementing the information processing according to an embodiment of the present disclosure.

[0080] Storage 1003 is a computer-readable recording medium and may be composed of, for example, at least one of an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disc, a digital versatile disc, a Blu-ray (registered trademark) disc), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 1003 may also be referred to as an auxiliary storage device. The storage medium included in the authenticity evaluation device 10 may be, for example, a database including at least one of the memory 1002 and the storage 1003, a server, or other appropriate medium.

[0081] The communication device 1004 is hardware (a transmission / reception device) for performing communication between computers via at least one of a wired network and a wireless network, and is also referred to as, for example, a network device, a network controller, a network card, a communication module, etc.

[0082] The input device 1005 is an input device (e.g., a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.) for receiving an external input. The output device 1006 is an output device (e.g., a display, a speaker, an LED lamp, etc.) for performing an output to the outside. Note that the input device 1005 and the output device 1006 may have an integrated configuration (e.g., a touch panel).

[0083] Also, each device such as the processor 1001 and the memory 1002 is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus or may be configured using different buses for each device.

[0084] Further, the authenticity evaluation device 10 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), and a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 1001 may be implemented using at least one of these hardware components.

[0085] The processing procedures, sequences, flowcharts, etc. of each aspect / embodiment described in the present disclosure may be rearranged as long as there is no contradiction. For example, for the methods described in the present disclosure, the elements of various steps are presented using an exemplary order and are not limited to the specific order presented.

[0086] The input / output information, etc. may be stored in a specific location (e.g., memory) or may be managed using a management table. The input / output information, etc. may be overwritten, updated, or appended. The output information, etc. may be deleted. The input information, etc. may be transmitted to other devices.

[0087] The determination may be made based on a value represented by 1 bit (0 or 1), a boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0088] Each aspect / embodiment described in the present disclosure may be used alone, in combination, or switched during execution. Further, the notification of predetermined information (e.g., the notification of "being X") is not limited to being explicitly performed and may be performed implicitly (e.g., by not performing the notification of the predetermined information).

[0089] Although the present disclosure has been described in detail above, it is obvious to those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be implemented as modifications and variations without departing from the spirit and scope of the present disclosure defined by the claims. Therefore, the description of the present disclosure is for illustrative purposes and does not have any limiting meaning for the present disclosure.

[0090] Software should be broadly construed to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, execution threads, procedures, functions, etc., whether called by the name of software, firmware, middleware, microcode, hardware description language, or other names.

[0091] Also, software, instructions, information, etc. may be transmitted and received via a transmission medium. For example, when software is transmitted from a website, server, or other remote source using at least one of wired technologies (such as coaxial cables, optical fiber cables, twisted pairs, digital subscriber lines (DSL), etc.) and wireless technologies (such as infrared rays, microwaves, etc.), at least one of these wired technologies and wireless technologies is included within the definition of the transmission medium.

[0092] The terms "system" and "network" used in the present disclosure are used interchangeably.

[0093] Also, the information, parameters, etc. described in the present disclosure may be represented using absolute values, relative values from a predetermined value, or corresponding other information.

[0094] As used in this disclosure, the terms "determining" and "deciding" may encompass a wide variety of operations. "Determining" and "deciding" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up (e.g., searching in a table, database, or other data structure), and ascertaining that something has been "determined" or "decided". "Determining" and "deciding" may also include receiving (e.g., receiving information), transmitting (e.g., transmitting information), inputting, outputting, and accessing (e.g., accessing data in a memory) and ascertaining that something has been "determined" or "decided". "Determining" and "deciding" may also include resolving, selecting, choosing, establishing, comparing, etc., and ascertaining that something has been "determined" or "decided". That is, "determining" and "deciding" may include ascertaining that some operation has been "determined" or "decided". Also, "determining (deciding)" may be read as "assuming", "expecting", "considering", etc.

[0095] The terms "connected" or "coupled," or any variations thereof, mean any direct or indirect connection or coupling between two or more elements and can include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements can be physical, logical, or a combination thereof. For example, "connected" may be read as "accessed." As used in this disclosure, two elements can be considered to be "connected" or "coupled" to each other using at least one of one or more wires, cables, and printed electrical connections, as well as electromagnetic energy having wavelengths in radio frequency regions, microwave regions, and optical (both visible and invisible) regions, by way of some non-limiting and non-exhaustive examples.

[0096] As used in this disclosure, the recitation "based on" does not mean "based solely on" unless otherwise specified. In other words, the recitation "based on" means both "based solely on" and "based at least in part on."

[0097] Any reference in this disclosure to an element using designations such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations can be used in this disclosure as a convenient way to distinguish between two or more elements. Thus, a reference to a first and a second element does not mean that only two elements can be employed, or that the first element must in some way precede the second element.

[0098] In this disclosure, when the terms "include," "including," and variations thereof are used, these terms are intended to be inclusive in the same manner as the term "comprising." Further, the term "or" as used in this disclosure is not intended to be exclusive.

[0099] In the present disclosure, for example, when articles are added by translation, such as a, an, and the in English, the present disclosure may include that the nouns following these articles are in the plural form.

[0100] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other". Note that the term may also mean "A and B are different from C respectively". Terms such as "separate", "coupled", etc. may also be interpreted in the same way as "different".

[0101] The authenticity evaluation apparatus and authenticity evaluation method of the present disclosure have the following configurations. [1] An acquisition unit that acquires a plurality of metadata of the same type for the content, which are different from each other in generation method, An evaluation unit that compares the plurality of metadata acquired by the acquisition unit and evaluates the authenticity of the metadata, An authenticity evaluation apparatus comprising the above. [2] The acquisition unit acquires the plurality of metadata of a plurality of types, The evaluation unit evaluates the authenticity of the metadata for each of the plurality of types, and evaluates the authenticity of the content based on the evaluation results of the authenticity of the metadata for each of the plurality of types. The authenticity evaluation apparatus according to [1]. [3] The acquisition unit also acquires risk information indicating the risk of forgery in the apparatus where the content is generated, The evaluation unit evaluates the authenticity of the metadata based also on the risk information acquired by the acquisition unit. The authenticity evaluation apparatus according to [1] or [2]. [4] The acquisition unit acquires the plurality of metadata at the timing when the content is generated. The authenticity evaluation apparatus according to any one of [1] to [3]. [5] The acquisition unit acquires, as the metadata, data related to the position where the content is generated. The authenticity evaluation apparatus according to any one of [1] to [4]. [6] The acquisition unit acquires, as the metadata, data indicating the time when the content was generated. The authenticity evaluation apparatus according to any one of [1] to [5]. [7] The acquisition unit acquires, as the metadata, data related to the person who generated the content. The authenticity evaluation apparatus according to any one of [1] to [6]. [8] The acquisition unit acquires, as the metadata, data related to the apparatus that generated the content. The authenticity evaluation apparatus according to any one of [1] to [7]. [9] An acquisition step in which an authenticity evaluation apparatus acquires a plurality of pieces of metadata of the same type for content, and the generation methods of which are different from each other; An evaluation step in which the authenticity evaluation apparatus compares the plurality of pieces of metadata acquired in the acquisition step and evaluates the authenticity of the metadata; An authenticity evaluation method including the above.

Explanation of Signs

[0102] 10... Authenticity evaluation apparatus, 11... Acquisition unit, 12... Evaluation unit, 1001... Processor, 1002... Memory, 1003... Storage, 1004... Communication device, 1005... Input device, 1006... Output device, 1007... Bus.

Claims

1. An acquisition unit that acquires a plurality of metadata of the same type for content, where the generation methods of the metadata are different from each other; An evaluation unit that compares the plurality of metadata acquired by the acquisition unit and evaluates the authenticity of the metadata; An authenticity evaluation device comprising the above.

2. The acquisition unit acquires the plurality of metadata of a plurality of types; The evaluation unit evaluates the authenticity of the metadata for each of the plurality of types, and evaluates the authenticity of the content based on the evaluation results of the authenticity of the metadata for each of the plurality of types. The authenticity evaluation device according to claim 1.

3. The acquisition unit also acquires risk information indicating the risk of forgery in the device where the content is generated; The evaluation unit evaluates the authenticity of the metadata based also on the risk information acquired by the acquisition unit. The authenticity evaluation device according to claim 1.

4. The acquisition unit acquires the plurality of metadata at the timing when the content is generated. The authenticity evaluation device according to claim 1.

5. The acquisition unit acquires, as the metadata, data related to the position where the content is generated. The authenticity evaluation device according to claim 1.

6. The acquisition unit acquires, as the metadata, data indicating the time when the content is generated. The authenticity evaluation device according to claim 1.

7. The acquisition unit acquires, as the metadata, data related to the person who generated the content. The authenticity evaluation device according to claim 1.

8. The acquisition unit acquires, as the metadata, data related to the device that generated the content. The authenticity evaluation device according to claim 1.

9. An authenticity evaluation method, including: an acquisition step in which an authenticity evaluation device acquires a plurality of metadata of the same type for content, where the generation methods of the metadata are different from each other; An evaluation step in which the authenticity evaluation device compares the plurality of metadata acquired in the acquisition step and evaluates the authenticity of the metadata. An authenticity evaluation method including the above.

Images