Imaging apparatus, computer program, and photograph verification system

Abstract

To prevent alteration of an electronic signature itself to be used for alteration detection of a photographic image.SOLUTION: An imaging apparatus 2 comprises a secure element 21 that stores a signature generation key 200 and executes processing of outputting, as an electronic signature 51, a cipher text obtained by encrypting data transmitted from the outside using the signature generation key 200. The imaging apparatus 2 comprises a photograph imaging unit 20 that executes processing of imaging a photographic image 50 using an image sensor 22, processing of generating signature object data including a hash value of the photographic image 50, and processing of transmitting the signature object data to the secure element 21 to generate a photograph file 5 including the photographic image 50 and the electronic signature 51 obtained from the secure element 21.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] This application relates to a technique for detecting forgery of photographic images taken using a photographing device such as a digital camera.

Background Art

[0002] In response to the advancement of high functionality of image editing software, illegal acts using forged photographs are increasing. A typical illegal act using a forged photograph is fake news. For this reason, a technique for detecting forgery of photographic images taken using a photographing device such as a digital camera is required.

[0003] An electronic signature is used to prevent forgery of digital contents such as photographic images taken using a photographing device. For example, in the invention disclosed in Patent Document 1, in order to prevent forgery of a photographic image taken at a construction site, encrypted data that can detect forgery of data related to the construction site is included in the metadata of the photographic image taken at the construction site.

[0004] In recent years, a technical standardization organization (C2PA: The Coalition for Content Provenance and Authenticity) has been established to establish technical standards for proving the origin and background of digital contents. In the regulations established by this standardization organization, a unique ID is assigned to a photographic image and the editing history is managed. Furthermore, in this regulation, a method of managing the metadata of a photographic image and a public key certificate together on a server has been proposed.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0006] In the invention disclosed in the present application, it is possible to prevent forgery of the electronic signature itself used for detecting forgery of a photographic image.

Means for Solving the Problems

[0007] The first invention for solving the above-described problems includes a secure element that stores a signature generation key internally and generates an encrypted text obtained by encrypting signature target data with the signature generation key as an electronic signature, a process of taking a photographic image using an image sensor, a process of generating the signature target data including a hash value of the photographic image, and a process of transmitting the signature target data to the secure element and generating a photographic file including the photographic image and the electronic signature obtained from the secure element. It is a photographing apparatus characterized by comprising: In the photographing apparatus according to the first invention, in order to prevent forgery of the electronic signature itself used for detecting forgery of the photographic image, the secure element is used for managing the signature generation key used for generating the electronic signature, and it is configured to generate an electronic signature inside the secure element. The second invention is the photographing apparatus according to the first invention, wherein when the photographing unit takes the photographic image using an image sensor, it generates metadata including attribute information regarding the photographic image, and in addition to the hash value of the photographic image, includes the predetermined attribute information in the signature target data, and includes the metadata in the photographic file. By including the predetermined attribute information regarding the authenticity of the photographic image in the signature target data, it is possible to detect forgery of the predetermined attribute information regarding the authenticity of the photographic image. Also, since the signature target data cannot be generated unless the attribute information to be included in the signature target data is known, an effect of preventing forgery of the signature target data that is the basis of the electronic signature is also obtained. The third invention is the imaging device of the second invention, wherein the photographic imaging unit includes photographer information in the metadata, and includes the photographer information in the data to be signed as the predetermined attribute information. It is preferable that the attribute information included in the data to be signed is the photographer information so that forgery of the photographer information can be detected. The fourth invention is the imaging device of the second or third invention, wherein the photographic imaging unit includes shooting date and time information and shooting position information in the metadata, and includes the shooting date and time information and the shooting position information in the data to be signed as the predetermined attribute information. It is preferable that the attribute information included in the data to be signed is the shooting date and time information and the shooting position information so that forgery of the shooting date and time information and the shooting position information can be detected.

[0008] The fifth invention for solving the above problems is an invention related to a computer program, which includes step a of taking a photographic image using an image sensor, step b of generating data to be signed including the hash value of the photographic image, storing a signature generation key internally, transmitting the data to be signed to a secure element that generates a ciphertext obtained by encrypting the data to be signed with the signature generation key as an electronic signature, and step c of generating a photographic file including the photographic image and the electronic signature obtained from the secure element, and is a computer program that causes a processor of an imaging device to execute. The sixth invention is the computer program described in the fifth invention, and includes step a1 of generating metadata of the photographic image including attribute information related to the photographic image, which is executed after step a. In step b, in addition to the hash value of the photographic image, the predetermined attribute information is included in the data to be signed, and in step c, the metadata is included in the photographic file. The seventh invention is the computer program described in the sixth invention, wherein in step a1, photographer information is included in the metadata, and in step b, the photographer information is included in the data to be signed as the predetermined attribute information. The eighth invention is the computer program described in the sixth or seventh invention, characterized in that in step a1, the shooting date and time information and the shooting position information are included in the metadata, and in step b, the shooting date and time information and the shooting position information are included in the signature target data as the predetermined attribute information.

[0009] The ninth invention for solving the above-described problems is an invention related to a system, which is a photo verification system including a photographing device for photographing a photo image and a photo verification device for verifying the authenticity of the photo image. The photographing device includes a secure element that stores a signature generation key internally and generates an encrypted text obtained by encrypting signature target data with the signature generation key as an electronic signature, a process of photographing the photo image using an image sensor, a process of generating the signature target data including the hash value of the photo image, and a process of transmitting the signature target data to the secure element and generating a photo file including the photo image and the electronic signature obtained from the secure element. When the photo file is transmitted, the photo verification device includes a photo verification unit that performs a process of decrypting the electronic signature of the photo file using a signature verification key paired with the signature generation key, a process of generating verification signature target data including the hash value of the photo image, and a process of comparing the decrypted value of the electronic signature with the verification signature target data to verify the electronic signature of the photo file. The tenth invention for solving the above-described problems is the photo verification system of the ninth invention, characterized in that when the photo imaging unit included in the imaging device captures the photo image using an image sensor, it generates metadata of the photo image including attribute information related to the photo image, includes the predetermined attribute information in the signature target data in addition to the hash value of the photo image, includes the metadata in the photo file, and the photo verification unit included in the photo verification device includes the predetermined attribute information in the verification signature target data from among the metadata included in the photo file in addition to the photo image. The 11th invention for solving the above problems is that in the photo verification system of the 10th invention, the photo shooting unit included in the shooting device includes the photographer information in the metadata, and includes the photographer information in the data to be signed as the predetermined attribute information, and the photo verification unit included in the photo verification device includes the photographer information included in the metadata of the photo file in the data to be signed for verification. The 12th invention for solving the above problems is that in the photo verification system of the 10th or 11th invention, the photo shooting unit included in the shooting device includes the shooting date and time information and the shooting position information in the metadata, and includes the shooting date and time information and the shooting position information in the data to be signed as the predetermined attribute information, and the photo verification unit included in the photo verification device includes the shooting date and time information and the shooting position information included in the metadata of the photo file in the data to be signed for verification.

Effect of the Invention

[0010] In the invention disclosed in the present application, by using a secure element for generating an electronic signature used for detecting forgery of a photo image, forgery of the electronic signature itself can be prevented.

Brief Description of the Drawings

[0011]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Embodiments for Carrying Out the Invention

[0012] Hereinafter, embodiments according to the present invention will be described. This embodiment is for facilitating the understanding of the present invention, and the present invention is not limited to this embodiment. Also, unless otherwise specified, the drawings are schematic diagrams drawn for facilitating the understanding of the present invention.

[0013] FIG. 1 is a diagram showing the configuration of a photo verification system 1 according to this embodiment. FIG. 2 is a diagram for explaining the configuration of a photo file 5. FIG. 3 is a block diagram of an imaging device 2 constituting the photo verification system 1. FIG. 4 is a block diagram of a photo verification device 3 constituting the photo verification system 1.

[0014] As shown in FIG. 1, the photo verification system 1 according to this embodiment includes an imaging device 2 that captures a photo image 50, and a photo verification device 3 having a function of verifying the authenticity of the photo image 50 captured by the imaging device 2. In FIG. 1, each of the imaging device 2 and the photo verification device 3 is connected to a network 4. In this embodiment, the imaging device 2 transmits a photo file 5 including the photo image 50 to the photo verification device 3, and the photo verification device 3 verifies the authenticity of the photo image 50 included in the photo file 5.

[0015] FIG. 2 is a diagram for explaining the configuration of a photo file 5 generated by the imaging device 2. In addition to TIFF, file formats such as JPEG, PNG, and GIF can be used for the photo file 5. As shown in FIG. 2, the photo file 5 generated by the imaging device 2 includes a photo image 50 captured using the image sensor 22 of the imaging device 2, and an electronic signature 51 used when verifying the authenticity of the photo image 50. The electronic signature 51 of the photo image 50 is data obtained by encrypting signature target data including the hash value of the photo image 50 with a signature generation key 200 that is an encryption key.

[0016] The photo file 5 according to this embodiment includes, in addition to the photo image 50 and the electronic signature 51, the metadata 52 of the photo image 50. The metadata 52 of the photo image 50 is a structure that includes various attribute information about the photo image 50. As the format of the metadata 52, Exif (Exchangeable image file format) and IPTC (International Press Telecommunications Council) are well-known. The metadata 52 according to this embodiment includes, as attribute information about the photo image 50, shooting date and time information, shooting location information, and photographer information. In addition to this, attribute information related to shooting conditions can be included in the metadata 52.

[0017] Figure 3 is a block diagram of the imaging device 2. The imaging device 2 is a device realized by using a device having a camera function. In FIG. 1, the imaging device 2 is illustrated as a smartphone, but the imaging device 2 may be a tablet computer or a digital camera. In FIG. 3, as the hardware included in the imaging device 2, a processor 20a, a secure element 21 (Secure Element), an image sensor 22, a RAM 25 (Random Access Memory), an SSD 26 (Solid State Drive), a UI 27 (User Interface), and a display 28 are provided. Further, in FIG. 3, a position measurement unit 23 and a clock circuit 24 are illustrated as the hardware for acquiring the attribute information to be included in the metadata 52 of the photo image 50. Naturally, the imaging device 2 includes hardware that is necessary for the imaging device 2 to function and is not shown in FIG. 3.

[0018] The secure element 21 included in the imaging device 2 is an IC chip configured to store important confidential data and perform processing using this confidential data. The secure element 21 can be mounted on the circuit board of the imaging device 2, or can be mounted on the imaging device 2 in the form of a SIM card (SIM: Subscriber Identify Module).

[0019] The secure element 21 is designed to protect the confidential data stored by the secure element 21 from unauthorized access and tampering. In the present application, the secure element 21 stores, as confidential data, a signature generation key 200 used for generating an electronic signature 51. As a process using the signature generation key 200, the secure element 21 executes a process of outputting, as the electronic signature 51, a ciphertext obtained by encrypting the data transmitted to the secure element 21 with the signature generation key 200.

[0020] The image sensor 22 included in the imaging device 2 is an element that converts light into an electrical signal. The imaging device 2 includes, as hardware not shown in FIG. 3, a lens that guides light to the image sensor 22 and an image processing processor that converts the electrical signal from the image sensor 22 into a digital photographic image 50 so that the photographic image 50 can be captured.

[0021] The RAM 25 included in the imaging device 2 is a volatile memory that temporarily stores data processed by the processor 20a. The SSD 26 (Solid State Drive) included in the imaging device 2 is an electrically rewritable non-volatile memory. The SSD 26 included in the imaging device 2 may be mounted on the circuit board of the imaging device 2 or may be an SD card attached to the imaging device 2. The photographic file 5 including the photographic image 50 captured using the image sensor 22 is stored in the SSD 26 of the imaging device 2. Further, a signature verification key 201 used for verifying the electronic signature 51, which is a cipher key paired with the signature generation key 200, is stored in the form of a public key certificate in the SSD 26 of the imaging device 2.

[0022] The display 28 included in the imaging device 2 is a display device used for displaying the photographic image 50 and the like. A liquid crystal display, an organic EL display, or the like can be used for the display 28 of the imaging device 2.

[0023] The UI 27 included in the imaging device 2 is an interface for a user to operate the imaging device 2. Buttons, switches, touchscreens, etc. are used for the UI 27 of the imaging device 2.

[0024] The clock circuit 24 included in the imaging device 2 is a circuit that measures time by generating signals at regular intervals.

[0025] The position measurement unit 23 included in the imaging device 2 is a function for measuring the position information (latitude and longitude) of the imaging device 2. In the case of a smartphone that can be used as the imaging device 2, as a method for measuring position information, a method of receiving signals from GPS satellites to measure the position, a method of communicating with a wireless access point and using its position information to measure the position, a method of using the signal strength from a base station of mobile communication to measure the position, etc. are adopted. In the case of a digital camera that can be used as the imaging device 2, a method of receiving signals from GPS satellites to measure the position is adopted.

[0026] The processor 20a included in the imaging device 2 is an integrated circuit that functions as the central processing unit of the imaging device 2. In the imaging device 2, at least a computer program for generating a photo file 5 including a photo image 50 taken using the image sensor 22 is implemented as a computer program for operating the processor 20a. By executing this computer program, the processor 20a of the imaging device 2 functions as the photo imaging unit 20 according to the present application. When a smartphone is used as the imaging device 2, it is preferable to implement a computer program that functions as the photo imaging unit 20 in the form of an application installed on the smartphone.

[0027] In the present embodiment, the photo imaging unit 20 included in the imaging device 2 executes a process of taking a photo image 50 using the image sensor 22, a process of generating signature target data including the hash value of the photo image 50, and a process of transmitting the signature target data to the secure element 21 and generating a photo file 5 including the photo image 50 and the electronic signature 51 obtained from the secure element 21.

[0028] The hash function used to calculate the hash value of the photographic image 50 may be arbitrary, but functions such as SHA2-256, SHA2-384, or SHA2-512 can be used as the hash function for calculating the hash value of the photographic image 50.

[0029] When the photographic image 50 is tampered with, the photographic image 50 itself becomes a fake photograph. For this reason, it is necessary to include the photographic image 50 itself in the data to be signed. As shown in FIG. 2, the photographic file 5 according to the present embodiment includes, in addition to the photographic image 50, metadata 52 including attribute information related to the photographic image 50. Since the metadata 52 of the photographic image 50 includes attribute information related to the authenticity of the photographic image 50, in the present embodiment, in addition to the photographic image 50, predetermined attribute information related to the authenticity of the photographic image 50 is included in the data to be signed. Attribute information related to the authenticity of the photographic image 50 includes shooting date and time information, shooting location information, and photographer information. When the shooting date and time information in the metadata 52 is tampered with, the photograph becomes a fake photograph with a shooting date and time different from the original shooting date and time. When the shooting location information in the metadata 52 is tampered with, the photograph becomes a fake photograph with a shooting location different from the original shooting location. When the photographer information in the metadata 52 is tampered with, the photograph becomes a fake photograph with a photographer different from the original photographer.

[0030] The electronic signature 51 included in the photographic file 5 is data obtained by encrypting the data to be signed, which includes the hash value of the photographic image 50, with the signature generation key 200. If the signature generation key 200 used for generating the electronic signature 51 is leaked, the electronic signature 51, which is data for verifying the authenticity of the photographic image 50 and the like, will be tampered with. Therefore, in the present application, the secure element 21 having high tamper resistance against external analysis attacks is used to manage the signature generation key 200, and the photographing unit 20 of the photographing apparatus 2 causes the secure element 21 to generate the electronic signature 51 inside.

[0031] The encryption algorithm used for generating the electronic signature 51 may be arbitrary. In this embodiment, public-key cryptography such as RSA cryptography or elliptic curve cryptography is used for generating the electronic signature 51. When public-key cryptography is used for generating the electronic signature 51, the private key of the public-key cryptography is used as the signature generation key 200. Also, the public key paired with the private key used as the signature generation key 200 is used as the signature verification key 201 for verifying the electronic signature 51. The signature verification key 201, which is the public key of the public-key cryptography, is stored in the SSD 26 in the form of a public key certificate issued by a certification authority. A symmetric key cryptography represented by AES (Advanced Encryption Standard) can also be used for generating the electronic signature 51. In this case, the signature generation key 200 used for generating the electronic signature 51 and the signature verification key 201 used for verifying the electronic signature 51 are the same. The signature generation key 200 used for generating the electronic signature 51 is stored in the secure element 21 provided in the imaging device 2, and the signature verification key 201 used for verifying the electronic signature 51 is secretly stored in the photo verification device 3.

[0032] FIG. 4 is a block diagram of the photo verification device 3. The photo verification device 3 is a device to which the photo file 5 is uploaded from the imaging device 2, and is a device realized using a general-purpose server. In FIG. 4, as the hardware included in the photo verification device 3, a processor 30a, a RAM 31, and a storage device 32 are shown. Naturally, the photo verification device 3 includes hardware that is necessary for functioning as a server, such as a network interface, which is not shown in FIG. 4.

[0033] The RAM 31 included in the photo verification device 3 is a volatile memory that temporarily stores data processed by the processor 30a. The storage device 32 included in the photo verification device 3 is a device that can store a large amount of data, for example, a hard disk drive.

[0034] The processor 30a is an integrated circuit that functions as the central processing unit of the photo verification device 3. In the photo verification device 3, at least a computer program for verifying the electronic signature 51 included in the photo file 5 transmitted to the photo verification device 3 is implemented as a computer program for operating the processor 30a. When this computer program is activated, the processor 30a of the photo verification device 3 functions as a photo verification unit 30.

[0035] When a photo file 5 is uploaded to the photo verification device 3, the photo verification unit 30 of the photo verification device 3 uses a signature verification key 201 that pairs with the signature generation key 200 stored in the secure element 21 provided in the imaging device 2 to decrypt the electronic signature 51 of the photo file 5, generates verification signature target data including the hash value of the photo image 50 in the same procedure as the photo imaging unit 20 of the imaging device 2, and compares the value obtained by decrypting the electronic signature 51 with the verification signature target data to execute a process of verifying the electronic signature 51 of the photo file 5. If the value obtained by decrypting the electronic signature 51 is the same as the verification signature target data, the photo verification unit 30 of the photo verification device 3 determines that the verification of the electronic signature 51 has been successful. In the present embodiment, the signature verification key 201 used for verifying the electronic signature 51 is transmitted from the imaging device 2 to the photo verification device 3 in the form of a public key certificate.

[0036] Hereinafter, the processes executed in the photo verification system 1 according to the present embodiment will be described. FIG. 5 is a diagram for explaining the operation of the photo imaging unit 20 provided in the imaging device 2. FIG. 6 is a diagram for explaining the operation of the photo verification unit 30 provided in the photo verification device 3.

[0037] First, with reference to FIG. 5, the operation of the photo imaging unit 20 provided in the imaging device 2 that constitutes the photo verification system 1 according to the present embodiment will be described. The description of FIG. 5 also serves as the description of the computer program disclosed in the present application.

[0038] When the user performs an operation to take a photo using the UI 27 of the imaging device 2, the photo shooting unit 20 of the imaging device 2 operates, and the photo shooting unit 20 stores a photo file 5 including a photo image 50 taken using the image sensor 22 in the RAM 25 (step S1).

[0039] When the photo image 50 is stored in the RAM 25, the photo shooting unit 20 of the imaging device 2 generates metadata 52 of the photo image 50 and adds the metadata 52 to the photo file 5 stored in the RAM 25 (step S2). The metadata 52 generated by the photo shooting unit 20 provided in the imaging device 2 includes various attribute information related to the photo image 50. In the present embodiment, the metadata 52 includes shooting date and time information, shooting position information, and photographer information function as attribute information related to the reliability of the photo image 50. The photo shooting unit 20 provided in the imaging device 2 acquires the position information at this time from the position measurement unit 23 as the shooting position information. Also, the photo shooting unit 20 provided in the imaging device 2 acquires the date and time information at this time from the clock circuit 24 as the shooting date and time information. Further, the photo shooting unit 20 provided in the imaging device 2 acquires the photographer information registered in the SSD 26 of the imaging device 2.

[0040] Next, the photo shooting unit 20 provided in the imaging device 2 substitutes the photo image 50 into a hash function to calculate the hash value of the photo image 50, and generates signature target data including the hash value of the photo image 50 (step S3). The photo shooting unit 20 provided in the imaging device 2 includes, in addition to the photo image 50, predetermined attribute information included in the metadata 52 in the signature target data. This attribute information is attribute information related to the reliability of the photo image 50, and here, it is the shooting position information, the shooting date and time information, and the photographer information.

[0041] Next, the photo shooting unit 20 included in the imaging device 2 transmits the data to be signed to the secure element 21 (step S4). The secure element 21 calculates an electronic signature 51 by encrypting the data to be signed using the signature generation key 200 stored in the secure element 21 (step S5), and transmits the electronic signature 51 to the photo shooting unit 20 (step S6). The data to be signed is transmitted to the secure element 21 in the form of a command message for generating the electronic signature 51. This command message includes, in addition to the data to be signed, information specifying the signature generation key 200 used for generating the electronic signature 51.

[0042] After the photo shooting unit 20 included in the imaging device 2 stores the electronic signature 51 transmitted from the secure element 21 in the photo file 5 stored in the RAM 25 and adds it (step S7), the imaging device 2 stores the photo file 5 including the photo image 50, the metadata 52, and the electronic signature 51 in the SSD 26 included in the imaging device 2 (step S8), and the procedure of FIG. 5 ends.

[0043] Next, with reference to FIG. 6, the operation of the photo verification unit 30 included in the photo verification device 3 constituting the photo verification system 1 according to the present embodiment will be described.

[0044] The photo verification device 3 uploads the photo file 5 to be verified for reliability and the public key certificate of the signature verification key 201 from the imaging device 2 (step S10). The photo verification unit 30 of the photo verification device 3 verifies the reliability of the photo image 50 received by the photo verification device 3 by verifying the electronic signature 51 included in the uploaded photo file 5 using the uploaded signature verification key 201 (step S11). The procedure for verifying the electronic signature 51 included in the photo file 5 is as follows. · Generate verification signature target data in the same procedure as the imaging device 2. · Decrypt the electronic signature 51 with the signature verification key 201 paired with the signature generation key 200 stored in the secure element 21 of the imaging device 2. · Compare the verification signature target data with the decrypted value of the electronic signature 51. · When the verification signature target data matches the decrypted value of the electronic signature 51, use the certification authority that issued the public key certificate to confirm the validity of the public key certificate. · When the verification signature target data matches the decrypted value of the electronic signature 51 and the validity of the public key certificate can be confirmed, it is determined that the verification of the electronic signature 51 has been successful.

[0045] When the photo verification unit 30 of the photo verification device 3 performs the verification of the electronic signature 51, it transmits the verification result of the electronic signature 51 to the photographing device 2 that uploaded the photo file 5 to the photo verification device 3 (step S12). Then, only when the verification of the electronic signature 51 is successful, the photo verification device 3 stores the photo file 5 uploaded from the photographing device 2 in the storage device 32 (step S13), and the procedure in FIG. 6 ends.

Explanation of Signs

[0046] 1 Photo verification system 2 Photographing device 20 Photo photographing unit 21 Secure element 22 Image sensor 3 Photo verification device 30 Photo verification unit 4 Network 5 Photo file 50 Photo image 51 Electronic signature 52 Metadata

Claims

1. A secure element that stores a signature generation key internally and generates an encrypted text obtained by encrypting signature target data with the signature generation key as an electronic signature, a process of taking a photo image using an image sensor, a process of generating the signature target data including a hash value of the photo image, and a process of transmitting the signature target data to the secure element and generating a photo file including the photo image and the electronic signature obtained from the secure element, A photographing apparatus comprising the same.

2. When the photographing unit takes the photo image using an image sensor, it generates metadata including attribute information regarding the photo image, and in addition to the hash value of the photo image, includes the predetermined attribute information in the signature target data and includes the metadata in the photo file. The photographing apparatus according to claim 1, characterized in that.

3. The photographing unit includes photographer information in the metadata and includes the photographer information in the signature target data as the predetermined attribute information. The photographing apparatus according to claim 2, characterized in that.

4. The photographing unit includes photographing date and time information and photographing position information in the metadata and includes the photographing date and time information and the photographing position information in the signature target data as the predetermined attribute information. The photographing apparatus according to claim 2 or claim 3, characterized in that.

5. A computer program that causes a processor of a photographing apparatus to execute: step a of taking a photo image using an image sensor; step b of generating signature target data including a hash value of the photo image; and step c of transmitting the signature target data to a secure element that stores a signature generation key internally and generates an encrypted text obtained by encrypting the signature target data with the signature generation key as an electronic signature, and generating a photo file including the photo image and the electronic signature obtained from the secure element.

6. In a step executed after step a, it includes step a1 of generating metadata of the photo image including attribute information regarding the photo image. In step b, in addition to the hash value of the photo image, the predetermined attribute information is included in the signature target data. In step c, the metadata is included in the photo file. The computer program according to claim 5, characterized in that.

7. In the step a1, include the photographer information in the metadata, and in the step b, include the photographer information in the data to be signed as the predetermined attribute information. The computer program according to claim 6, characterized in that.

8. In the step a1, include the shooting date and time information and the shooting position information in the metadata, and in the step b, include the shooting date and time information and the shooting position information in the data to be signed as the predetermined attribute information. The computer program according to claim 6 or claim 7, characterized in that.

9. A system including a photographing device for photographing a photographic image and a photograph verification device for verifying the authenticity of the photographic image, The photographing device stores a signature generation key internally, and includes a secure element that generates an encrypted text obtained by encrypting data to be signed with the signature generation key as an electronic signature, a process of photographing the photographic image using an image sensor, a process of generating the data to be signed including the hash value of the photographic image, and a process of transmitting the data to be signed to the secure element and generating a photograph file including the photographic image and the electronic signature obtained from the secure element. The photographing unit executes the process. When the photograph file is transmitted, the photograph verification device includes a photograph verification unit that executes a process of decrypting the electronic signature of the photograph file using a signature verification key paired with the signature generation key, a process of generating verification data to be signed including the hash value of the photographic image, and a process of comparing the value obtained by decrypting the electronic signature with the verification data to be signed to verify the electronic signature of the photograph file. A photograph verification system, characterized in that.

10. When the photographing unit included in the photographing device photographs the photographic image using an image sensor, it generates metadata of the photographic image including attribute information regarding the photographic image, includes predetermined attribute information in the data to be signed in addition to the hash value of the photographic image, and includes the metadata in the photograph file. The photograph verification unit included in the photograph verification device includes predetermined attribute information in the verification data to be signed from among the metadata included in the photograph file in addition to the photographic image. The photograph verification system according to claim 9, characterized in that.

11. The photographing unit included in the photographing apparatus includes photographer information in the metadata, includes the photographer information as the predetermined attribute information in the data to be signed, and the photograph verification unit included in the photograph verification apparatus includes the photographer information included in the metadata of the photograph file in the data to be signed for verification. The photograph verification system according to claim 10, characterized in that.

12. The photographing unit included in the photographing apparatus includes shooting date and time information and shooting position information in the metadata, includes the shooting date and time information and the shooting position information as the predetermined attribute information in the data to be signed, and the photograph verification unit included in the photograph verification apparatus includes the shooting date and time information and the shooting position information included in the metadata of the photograph file in the data to be signed for verification. The photograph verification system according to claim 10 or claim 11, characterized in that.

Images