Imaging device, control method thereof, program, and storage medium

Abstract

To provide an imaging device capable of maintaining security while suppressing a processing time.SOLUTION: An imaging device includes an imaging unit that images a subject, a temporary storage unit that temporarily stores an image obtained by imaging with the imaging unit, a storage unit that stores the image in a storage medium, a transfer unit that transfers the image to an external device, a setting unit that sets a security mode, and a control unit that, when the security mode is set to a first mode with a high level of security, stores the image only in the temporary storage unit without storing it in the storage medium, and deletes the image from the temporary storage unit when the transfer of the image to the external device is successful or fails.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an imaging device that captures an image containing personal information such as an affected area of ​​a patient. [Background technology]

[0002] Patent Document 1 discloses an image processing system having an imaging device and an image processing device that communicates with the imaging device. The imaging device receives light from a subject to generate image data and outputs the generated image data to a communication network. The image processing device extracts a predetermined area of ​​the subject from the image data acquired from the imaging device via the communication network and outputs information indicating the extraction result of the extracted predetermined area to the communication network. Then, a display means of the imaging device displays an image based on the information indicating the extraction result of the predetermined area acquired via the communication network.

[0003] In Patent Document 1, a display is provided to prompt the user to input information about the affected area, and the function of having the user input the affected area information is provided. In this way, it is possible to input the affected area information, which has conventionally been input using a separate medium, using only the imaging device.

[0004] Furthermore, Patent Document 2 discloses a camera system in which image data captured by a camera is encrypted and stored, and an authorization code is required to obtain, decrypt, or use the encrypted image data from the camera. The authorization code is issued from a recording server based on authorization code issuance conditions. The recording server records information on at least one of the following items: camera, image data, viewer, and authorization code. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Publication No. 2020-123304 [Patent Document 2] Patent No. 6671627 Summary of the Invention [Problem to be solved by the invention]

[0006] However, in Patent Document 1, security of the captured image of the affected area is not taken into consideration.

[0007] Furthermore, in Patent Document 2, security is taken into consideration by encrypting image data, but since image data is always encrypted and stored, when multiple images are taken, the encryption process takes an enormous amount of time.

[0008] The present invention has been made in view of the above-mentioned problems, and an object of the present invention is to provide an imaging device that can maintain security while reducing processing time. [Means for solving the problem]

[0009] The imaging device according to the present invention is characterized by comprising an imaging means for imaging a subject, a temporary storage means for temporarily storing an image obtained by imaging by the imaging means, a storage means for storing the image in a storage medium, a transfer means for transferring the image to an external device, a setting means for setting a security mode, and a control means for controlling the image not to be stored in the storage medium but only in the temporary storage means when the security mode is set to a first mode having a high level of security, and for controlling the image to be deleted from the temporary storage means when the transfer of the image to the external device is successful or unsuccessful. [Effects of the Invention]

[0010] According to the present invention, it is possible to provide an imaging device that can maintain security while reducing processing time. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a system configuration diagram showing the configuration of a medical imaging system. [Figure 2] FIG. 1 is a block diagram showing the configuration of an imaging apparatus. [Figure 3] FIG. 2 is a block diagram showing the configuration of an imaging system control device. [Figure 4] FIG. 2 is a diagram showing the imaging device as viewed from the back. [Figure 5] 4 is a flowchart showing the operation of the imaging device and the imaging system control device. DETAILED DESCRIPTION OF THE INVENTION

[0012] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0013] An imaging system according to one embodiment of the present invention is an imaging system that takes images of an affected area of ​​a patient in a medical setting and supports diagnosis.

[0014] In addition, the following description will be given assuming that a digital camera capable of capturing visible light is used to capture images of the patient's skin, etc. However, the present invention can also be applied to a multispectral camera that can capture images in different wavelength ranges depending on the purpose of diagnosis and imaging, or a polarization camera with a polarizer that transmits only light that vibrates in a certain direction. Furthermore, the present invention can also be applied to an infrared camera that can capture images in the infrared to near-infrared range, a three-dimensional shape measurement camera that can capture three-dimensional shapes, a microscope-type camera, a dermoscope (skin magnifying glass)-type camera, or a camera that combines multiple of the above-mentioned imaging functions. In other words, the present invention can be applied even when the information that can be captured and the camera form are different.

[0015] [System Configuration] 1 is a diagram showing the configuration of a medical imaging system according to this embodiment. The medical imaging system according to this embodiment is made up of devices that perform the following processes.

[0016] The imaging device 101 captures an image of a subject and generates image data. In the following explanation, the image data captured by the imaging device 101 will be described as visible light image data. The imaging device 101 is a small, portable imaging device, similar to a commercially available digital camera. The imaging device 101 is equipped with a display device that allows the captured image to be checked and can display human body image data and body part information data transmitted from the electronic medical record terminal device 104. The display device has an interface such as a touch panel and can display buttons for various operations. In addition, by touching the body part display that displays the affected part information, the body part data can also be written as additional information into the metadata of the affected part image after the affected part image has been captured.

[0017] The imaging device 101 can identify an individual patient by capturing an image of a tag 107 such as a bar coat worn by the patient and transmitting the image to the imaging system control device 106.

[0018] The network 102 is a device that realizes an inter-device network. For example, when the imaging device 101 is turned on by the photographer, it is connected to the network 102 (described later) and becomes able to communicate with other devices in the medical system via the network 102. The network 102 is a communication means that transmits wireless data, wired data, and sends and receives various control signals. Various communication protocols can be applied to the network 102, such as Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), Picture Transfer Protocol (PTP), Universal Serial Bus (USB), Local Area Network (LAN), Health Level Seven (HL7), and Digital Imaging and Communications in Medicine (DICOM). Any protocol can be used as long as it can communicate image data, text data, control data, and the like.

[0019] In this embodiment, the imaging device 101 and its peripheral devices maintain a continuous communication-enabled state until they are turned off. Also, the connection and communication method between the imaging device 101 and the network 102 has been described in detail above. However, the connection and communication methods between various other devices, such as the electronic medical record management device 103, electronic medical record terminal device 104, image management device 105, and imaging system control device 106, are similar.

[0020] 1, if necessary, a lighting device such as a halogen light or a light-emitting diode light may be installed for photography. These can be controlled by communicating via an interface or network 102 arranged in the imaging device 101.

[0021] The electronic medical record management device 103 stores in-hospital patient information (ID, name, medical department, age, sex, medical history, lesions, etc.) and doctor information (ID, name, affiliation information such as medical department, etc.). It can also verify and authenticate doctors' login and logoff information on the electronic medical record terminal device 104, provide doctor information, and provide patient information in the form of electronic medical records. It also updates and stores new data. Such management devices are registered on a PC (personal computer), an in-hospital server, or a cloud server, and can be accessed via the network 102 when necessary.

[0022] The electronic medical record terminal device 104 downloads information about the logged-in doctor and the patient to be examined from the electronic medical record management device 103 during a medical examination, providing an electronic medical record function, and can display, edit, and update the provided information. It can also associate image data of the affected area captured by the imaging device 101, body part data associated with the affected area image, and human body image data.

[0023] The image management device 105 mainly has functions to store, update, and delete image data, photographer information, patient information, and affected area information associated with the image data, as well as a search function to refer to the data as needed.

[0024] The imaging system control device 106 acquires the above-mentioned photographer information and patient information from the electronic medical record terminal device 104 and transmits this information to the imaging device 101. Furthermore, when imaging, the imaging device 101 temporarily stores the photographer information and patient information transmitted from the imaging system control device 106 in association with the acquired image data.

[0025] The imaging system control device 106 also detects various events, such as imaging events of the imaging device 101, and receives various data associated with the captured image data, etc. Furthermore, it transmits the received various data, such as image data, to the electronic medical record terminal device 104 and the image management device 105. The detailed flow of this process will be described later.

[0026] The imaging system control device 106 may also perform image processing (e.g., thumbnail extraction, data compression, pathology estimation, etc.) on the image data received from the imaging device 101 according to the purpose of the examination. The results may then be displayed on the display unit 304 (see FIG. 3), transmitted to the electronic medical record terminal device 104 via the network 102 for display, or transmitted to the imaging device 101 for display on the display unit 204 (see FIG. 2). The processed image data may also be transmitted to the image management device 105. This configuration not only allows image data to be checked only at the time of imaging, but also makes it easy to present the image processing results of the captured patient image data to the doctor during medical examination, thereby assisting the doctor in the examination.

[0027] In the imaging system of this embodiment, the imaging device 101, electronic medical record management device 103, electronic medical record terminal device 104, image management device 105, and imaging system control device 106 are described as separate devices. However, the functions of two or more devices may be realized by a single device, such as by constructing any two or more devices of the electronic medical record management device 103, electronic medical record terminal device 104, imaging system control device 106, and image management system 105 in the same housing. In this way, a system with appropriate cost can be configured according to the load and capacity required by the system.

[0028] [Imaging device 101] The imaging device 101 of this embodiment, which is a digital still camera, will be described with reference to FIG.

[0029] 2 is a block diagram showing the configuration of the imaging device 101. In the imaging device 101, a CPU 201 executes a predetermined control program to realize imaging processing described below and function as an imaging device.

[0030] The imaging unit 200 captures an optical image using a solid-state imaging device, and generates electrical digital image data by analog-to-digital conversion. The CPU 201 controls the entire imaging device 101.

[0031] A ROM (Read Only Memory) 202 stores the operation processing procedures of the CPU 201 (for example, programs for processing when the power of the imaging device 101 is turned on, basic input / output processing, etc.). A RAM (Random Access Memory) 203 functions as the main memory (main temporary storage means) of the CPU 201, but may be a different storage medium. For example, it may be configured as a non-volatile memory device such as a Read Only Memory (ROM) or an Electrically Erasable Programmable Read-Only Memory (EEPROM), or a file area or virtual storage area on an external storage device (not shown) connected via a network, etc.

[0032] Various programs, including a control program for implementing the processes described below, are loaded from the ROM 202 or the like into the RAM 203 and executed by the CPU 201. The RAM 203 also provides a work area when the CPU 201 executes various processes. When the security mode of the imaging device 101 is a high security mode described below, captured image data is stored only in the RAM 203, and the stored image data is transferred to the imaging system control device 106 via the network interface 207. Thereafter, when the image transfer fails or is completed, the image data stored in the RAM 203 is erased.

[0033] The display unit 204 performs various displays under the control of the CPU 201. For example, the display unit 204 displays data stored in the ROM 202, the RAM 203, the media drive 206, etc. The display unit 204 may also display a live view image captured by the imaging unit 200, an image captured by the imaging unit 200 in response to a shooting instruction input by operating the release button, and various setting screens.

[0034] The input unit 205 includes buttons and the like for performing various operations. For example, these include a release button located at the top of the digital still camera, and a cross key and setting keys located on the back. The touch panel provided on the display unit 204 is also included in the input device. The user (photographer) can input various instructions to the imaging device 101 by operating these input units 205. The input unit 205 also makes it possible to select the position of the affected area and input body part information. The input unit 205 also issues an instruction to start image transfer.

[0035] The media drive 206 is used as a means for mounting a removable storage medium (media) 206a. It allows data to be stored and stored data to be read. If the imaging device 101 is set to medium security mode, which has a lower level of security than high security mode, and image transfer fails, the image is encrypted using encryption processing sent from the image management device 105 and saved to the media. Alternatively, if the image transfer is completed successfully, the transferred image is erased.

[0036] The network interface 207 is used to send and receive data to and from a server computer or a personal computer, and communication with the image management device 105 is performed via this network interface.

[0037] The system bus 208 includes an address bus, a data bus, and a control bus, and connects the above-mentioned units together. The communication line 209 is a wired or wireless communication line. The computer network 210 is connected to the image capture device 101 via the communication line 209.

[0038] The image processing unit 211 performs image processing on the image data. The CPU 201 temporarily stores the image data generated by the imaging unit 200 and the associated attribute information in the RAM 203. Then, as necessary, the image processing unit 211 performs a series of image processing to generate image data suited to the purpose of shooting, such as data tailored to human visual characteristics, three-dimensional data, or data including both. Furthermore, if the processing load is large, the data processing may be divided and shared with the image processing unit of the imaging system control device 106.

[0039] The file generation unit 212 generates an image file. For example, the CPU 201 converts image data into a general-purpose still image format in the file generation unit 212 to generate an image file. In addition, affected area information, doctor information, patient information, etc. are recorded as meta information of the image data. A file in which a failed image is encrypted is also created by this file generation unit 212.

[0040] [Photography system control device 106] The imaging system control device 106 of this embodiment, which has a CPU made up of a computer, will be described with reference to Fig. 3. Fig. 3 is a block diagram showing the configuration of the imaging system control device 106 of this embodiment. The CPU 301 of the imaging system control device 106 executes a predetermined control / processing program to perform the processes described below, but these processes may also be performed within a local network or on a server such as the cloud.

[0041] The CPU 301 is responsible for system control. The ROM 302 stores the operation processing procedures of the CPU 301 (for example, programs for computer startup processing, basic input / output processing, etc.). The RAM 303 functions as the main memory of the CPU 301. Various programs, including control programs for realizing the processing described below, are loaded into the RAM 303 from the hard disk drive 305 or the like and executed by the CPU 301. The RAM 303 also provides a work area for the CPU 301 when it executes various processes.

[0042] A display unit 304 displays various information under the control of the CPU 301. A hard disk drive (hereinafter referred to as HDD) 305 is used to save and read application programs, data, libraries, and the like.

[0043] The input unit 306 includes operation members for the user to input, such as a pointing device (touch pad) and a keyboard. The media drive 307 can be equipped with a removable storage medium and can read data captured by the imaging device 101 and stored therein.

[0044] The network interface 308 is connected to a computer network 311 via a wireless or wired communication line 310. Data is transmitted and received to and from devices that can communicate with the network interface 308. In this embodiment, the imaging system control device 106 is connected to the imaging device 101 via the network interface 308, and the CPU 301 transmits and receives various data to and from the imaging device 101. The CPU 301 acquires images captured by the imaging device 101 and records them in the HDD 305.

[0045] The system bus 309 comprises an address bus, a data bus, and a control bus, and connects the above-mentioned units together.

[0046] [User interface of imaging device] FIG. 4 is an external view of an image capturing device 101 configured as a digital camera according to this embodiment.

[0047] In FIG. 4, the display unit 204 displays images and various information. The shutter button 611 is an operation member for issuing a shooting instruction. The mode selector switch 601 is an operation member for switching between various modes. A connection cable 622 for connecting to an external device such as a personal computer or printer is attached to a connector 621. The input unit 205 includes operation members such as various switches, buttons, and a touch panel for receiving various operations from the user. The touch panel is configured as a plane overlaid on the display unit 204, and is configured to output coordinate information according to the position of contact. It is also possible to select a region of the displayed image using this touch panel and record information about that region as meta information in the image file.

[0048] The controller wheel 613 is a rotatable operating member included in the input unit 205. The power switch 612 is a push button for switching the power on and off. The storage medium 206a is configured with a memory card, a hard disk, or the like. The storage medium slot 631 is a space for storing the storage medium 206a. The storage medium 206a stored in the storage medium slot 631 is capable of communicating with the imaging device 101 and enabling recording and playback. The lid 632 closes the storage medium slot 631 so that it can be opened and closed. FIG. 4 shows a state in which the lid 632 is opened and a portion of the storage medium 206a is removed from the storage medium slot 631 and exposed.

[0049] Each operation member of the input unit 205 is assigned a function appropriate for each situation by selecting and operating various icons displayed on the display unit 204, and functions as various function buttons. Examples of function buttons include an end button, a back button, an image forward button, a jump button, a filter button, and an attribute change button. For example, when the menu button is pressed, a menu screen allowing various settings is displayed on the display unit 204. The user can intuitively perform various settings using the menu screen displayed on the display unit 204, the four-way buttons (up, down, left, and right), the SET button, and the like. Furthermore, in a low security mode, which has a lower level of security than the medium security mode, the display unit 204 also has a function of displaying the failure and notifying the photographer if the transfer of the affected area image fails.

[0050] The controller wheel 613 is a rotatable operation member included in the input unit 205, and is used together with the directional buttons to indicate a selection item. When the controller wheel 613 is rotated, an electrical pulse signal is generated according to the amount of rotation, and the CPU 201 controls each unit of the imaging device 101 based on this pulse signal. This pulse signal makes it possible to determine the angle at which the controller wheel 613 is rotated and the number of rotations. The controller wheel 613 may be any operation member that can detect a rotation operation. For example, the controller wheel 613 may be a dial operation member that rotates itself in response to a user's rotation operation to generate a pulse signal. Alternatively, the controller wheel 613 may be an operation member made of a touch sensor that does not rotate itself but detects the rotation of the user's finger on the controller wheel 613 (a so-called touch wheel).

[0051] [Sequence of taking images of the affected area during a patient examination] 5 is a flowchart showing the operation of the imaging system of this embodiment when used for medical purposes. The flowchart shows the flow when a doctor photographs an affected area of ​​a patient using the imaging device 101 and transmits the image data of the affected area to the imaging system control device 106. Although the photographer will be described as a doctor, the photographer may also be a technician, assistant, nurse, or other person designated by the doctor.

[0052] First, the operation of the imaging system control device 106 will be described using the left part (S401 to S403) of the flowchart in FIG.

[0053] First, in step S401 (hereinafter, "step" will be omitted), the CPU 301 of the imaging system control device 106 determines whether or not the user has turned on the power to the imaging system control device 106. If the power has been turned on, the CPU 301 proceeds to the process of S402, and if the power has not been turned on, the CPU 301 remains in standby.

[0054] In S402, the CPU 301 determines whether or not a connection request has been made by CCAPI (Camera Control Application Programming Interface) from the image capture device 101. If a connection request has been made, the CPU 301 transmits a CCAPI connection response to the image capture device 101.

[0055] Thereafter, when the imaging device 101 is set to the high security mode and an affected area image is transmitted from the imaging device 101, the CPU 301 receives the affected area image, and when reception is complete, transmits a completion notification to the imaging device 101. Furthermore, if reception fails, the CPU 301 also transmits a notification to that effect to the imaging device 101.

[0056] Furthermore, when the imaging device 101 is set to the medium security mode and an encryption key is requested from the imaging device 101, the CPU 301 notifies the imaging device 101 of the encryption key in S403. Furthermore, when an affected area image is transmitted from the imaging device 101, the CPU 301 receives the affected area image, and when reception is complete, transmits a completion notification to the imaging device 101. Furthermore, when reception fails, the CPU 301 also transmits a notification to that effect to the imaging device 101.

[0057] Next, the operation of the imaging device 101 will be described using the right-hand portion (S501 to S523) of the flowchart in FIG.

[0058] First, in S501, the CPU 201 of the imaging device 101 determines whether or not the user has turned on the power to the imaging device 101. If the power has been turned on, the CPU 201 proceeds to S502, and if not, the CPU 201 remains in standby.

[0059] In S502, the CPU 201 transmits a connection request to the imaging system control device 106 using CCAPI.

[0060] When the CPU 201 receives a CCAPI connection response from the imaging system control device 106, in S503, the CPU 201 determines whether or not connection to the imaging system control device 106 is possible using CCAPI. If connection is possible, the CPU 201 proceeds to the process of S504, and if not, proceeds to the process of S524.

[0061] In S504, the CPU 201 changes the mode of the imaging device 101 so that it operates as a medical camera.

[0062] In S505, the CPU 201 determines whether or not the security mode is set for the imaging device 101. If the security mode is set, the CPU 201 proceeds to S507, and if the security mode is not set, the CPU 201 proceeds to S506.

[0063] In S506, the CPU 201 sets the security mode.

[0064] In S507, the CPU 201 determines whether the security mode is set to the high security mode. If the security mode is set to the high security mode, the CPU 201 proceeds to S508, and if not, the CPU 201 proceeds to S513.

[0065] In S508, the CPU 201 determines whether or not an image of the affected area has been captured. If an image of the affected area has been captured, the CPU 201 proceeds to S509, and if an image of the affected area has not been captured, the CPU 201 repeats the process of S508.

[0066] In S509, the CPU 201 stores the image of the affected area in the RAM 203. Normally, the image of the affected area is also recorded in the storage medium 206a, but if the high security mode is set, the image is stored only in the RAM 203 to maintain security.

[0067] In S510, the CPU 201 transfers the image of the affected area to the imaging system control device 106.

[0068] In S511, the CPU 201 determines whether or not a notification indicating that the image transfer has been completed or has failed has been received from the imaging system control device 106. If a notification has been received, the CPU 201 proceeds to S512, and if a notification has not been received, the CPU 201 repeats the processes of S510 and S511.

[0069] In S512, the CPU 201 erases the affected area image data stored in the RAM 203. As a result, whether the transfer is successful or unsuccessful, by erasing the affected area image data that exists only in the RAM 203, it becomes possible to prevent individuals from being identified and maintain security.

[0070] On the other hand, if the high security mode was not set in S507, the CPU 201 determines whether the medium security mode is set in S513. If the medium security mode is set, the CPU 201 proceeds to S514, and if not, the CPU 201 proceeds to S523.

[0071] In S514, the CPU 201 requests the imaging system control device 106 to transfer an encryption key for encrypting the affected area image.

[0072] In S515, the CPU 201 determines whether or not an encryption key has been received from the imaging system control device 106. If an encryption key has been received, the CPU 201 proceeds to the process of S516, and if an encryption key has not been received, the CPU 201 repeats the process of S515.

[0073] In S516, the CPU 201 determines whether an image of the affected area has been captured. If an image of the affected area has been captured, the CPU 201 proceeds to S517, and if an image of the affected area has not been captured, the CPU 201 waits until an image is captured.

[0074] In S517, the CPU 201 stores the captured image of the affected area in the storage medium 206a.

[0075] In S518, the CPU 201 transmits the image of the affected area to the imaging system control device 106.

[0076] In S519, the CPU 201 determines whether or not the transfer of the affected area image to the imaging system control device 106 has failed. If the transfer has failed, the CPU 201 proceeds to S520, and if not, proceeds to S521.

[0077] In S520, the image of the affected area is encrypted and stored in the storage medium 206a, and the unencrypted image of the affected area stored in S517 is deleted, and the operation of this flow ends.

[0078] In S521, it is determined whether or not the transfer of the affected area image to the imaging system control device 106 has been completed. If the transfer has been completed, the CPU 201 proceeds to S522, and if not, the CPU 201 returns to S518 and repeats S518 and S519 until the transfer is completed.

[0079] In S522, the CPU 201 deletes the image of the affected area from the storage medium 206a, and ends the operation of this flow.

[0080] If the medium security mode was not set in S513, the CPU 201 sets the imaging device 101 to the low security mode in S523, and if the image transfer fails, displays on the display unit 204 that the transfer has failed, and ends the operation of this flow.

[0081] Furthermore, in S503, if the imaging system control device 106 cannot be connected by CCAPI, the CPU 201 does not operate as a medical camera in S524, but operates in the normal camera mode.

[0082] Although the present embodiment does not specify a means for setting the security mode, the security mode may be set by the user via the input unit 205 of the image capture device 101. Alternatively, the image capture system control device 106 may notify the user of the security mode and the security mode may be set accordingly.

[0083] The operation of the normal camera mode will be briefly explained. When the imaging device 101 operates in the normal camera mode, the image transfer mode can be set to FTP transfer mode or the like. In this transfer mode, the captured image is not encrypted, nor is the image deleted. In the FTP transfer mode, if transmission has failed or has already been performed, a flag is set in the header area of ​​the image file.

[0084] As described above, in this embodiment, during a patient examination, in high security mode, affected area images are not stored in the storage medium but only in RAM, and affected area images that were successfully or unsuccessfully transferred are deleted from RAM. In addition, in medium security mode, affected area images that were successfully transferred are deleted from the storage medium, and affected area images that were unsuccessfully transferred are encrypted and stored in the storage medium. This makes it possible to prevent individuals from being identified and maintain security.

[0085] The disclosure of this specification includes the following imaging device, its control method, program, and storage medium.

[0086] (Item 1) an imaging means for imaging a subject; a temporary storage means for temporarily storing an image captured by the imaging means; a storage means for storing the image in a storage medium; a transfer means for transferring the image to an external device; a setting means for setting a security mode; a control means for controlling, when the security mode is set to a high security mode, to store the image only in the temporary storage means without storing it in the storage medium, and to delete the image from the temporary storage means when the transfer of the image to the external device is successful or unsuccessful; An imaging device comprising:

[0087] (Item 2) The imaging device described in item 1, characterized in that the control means stores the image in the storage medium when the security mode is set to a medium security mode, which has a lower level of security than the high security mode.

[0088] (Item 3) 3. The imaging device according to item 2, wherein the control means, in the medium security mode, requests an encryption key for encrypting the image from the external device.

[0089] (Item 4) The imaging device described in item 3 is characterized in that, if the transfer of the image to the external device fails in the medium security mode, the control means encrypts the image based on the encryption key and stores it in the storage medium.

[0090] (Item 5) 5. The imaging device according to item 4, wherein the control means deletes the unencrypted images from the storage medium.

[0091] (Item 6) The imaging device described in any one of items 2 to 5, characterized in that the control means deletes the image from the storage medium if the transfer of the image to the external device is successful in the medium security mode.

[0092] (Item 7) The imaging device described in any one of items 2 to 6, characterized in that if the security mode is set to a low security mode that has a lower level of security than the medium security mode, and if the transfer of the image fails, the control means notifies the user that the transfer has failed.

[0093] (Item 8) 8. The imaging device according to any one of items 1 to 7, wherein the setting unit sets the security mode in response to a user instruction.

[0094] (Item 9) 8. The imaging device according to any one of items 1 to 7, wherein the setting unit sets the security mode in response to an instruction from the external device.

[0095] (Item 10) A method for controlling an imaging device including an imaging means for imaging a subject, a temporary storage means for temporarily storing an image obtained by imaging the imaging means, a storage means for storing the image in a storage medium, and a transfer means for transferring the image to an external device, the method comprising: a configuration step for setting a security mode; a control step of controlling, when the security mode is set to a high security mode, to store the image only in the temporary storage means without storing it in the storage medium, and to delete the image from the temporary storage means when the transfer of the image to the external device is successful or unsuccessful; 10. A method for controlling an imaging device, comprising:

[0096] (Item 11) Item 11. A program for causing a computer to execute each step of the control method described in Item 10.

[0097] (Item 12) A computer-readable storage medium storing a program for causing a computer to execute each step of the control method described in item 10.

[0098] (Other embodiments) The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0099] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0100] 101: Imaging device, 102: Network, 103: Electronic medical record management device, 104: Electronic medical record terminal device, 105: Image management device, 106: Imaging system control device

Claims

1. an imaging means for imaging a subject; a temporary storage means for temporarily storing an image captured by the imaging means; a storage means for storing the image in a storage medium; a transfer means for transferring the image to an external device; a setting means for setting a security mode; a control means for controlling, when the security mode is set to a first mode having a high level of security, to store the image only in the temporary storage means without storing it in the storage medium, and to delete the image from the temporary storage means when the transfer of the image to the external device is successful or unsuccessful; An imaging device comprising:

2. 2. The imaging device according to claim 1, wherein the control means stores the image in the storage medium when the security mode is set to a second mode having a lower level of security than the first mode.

3. 3. The image pickup apparatus according to claim 2, wherein the control means, in the second mode, requests an encryption key for encrypting the image from the external device.

4. 4. The imaging device according to claim 3, wherein, in the second mode, if transfer of the image to the external device fails, the control means encrypts the image based on the encryption key and stores it in the storage medium.

5. 5. The imaging device according to claim 4, wherein the control means deletes the unencrypted images from the storage medium.

6. 3. The imaging device according to claim 2, wherein the control means, in the second mode, deletes the image from the storage medium if the transfer of the image to the external device is successful.

7. The imaging device according to claim 2, characterized in that, if the security mode is set to a third mode which has a lower level of security than the second mode, the control means notifies the user of the failure of the transfer if the transfer of the image fails.

8. 2. The image pickup apparatus according to claim 1, wherein the setting means sets the security mode in response to a user instruction.

9. 2. The image pickup apparatus according to claim 1, wherein the setting unit sets the security mode in response to an instruction from the external device.

10. A method for controlling an imaging device including an imaging means for imaging a subject, a temporary storage means for temporarily storing an image obtained by imaging the imaging means, a storage means for storing the image in a storage medium, and a transfer means for transferring the image to an external device, the method comprising: a configuration step for setting a security mode; a control step of controlling, when the security mode is set to a first mode having a high level of security, to store the image only in the temporary storage means without storing it in the storage medium, and to delete the image from the temporary storage means when the transfer of the image to the external device is successful or unsuccessful; 10. A method for controlling an imaging device, comprising:

11. A program for causing a computer to execute each step of the control method according to claim 10.

12. A computer-readable storage medium storing a program for causing a computer to execute each step of the control method according to claim 10.

Images