Image processing apparatus, control method, image processing system, and storage medium

Abstract

To provide an image processing apparatus, a control method, an image processing system, and a program which enable a user not to manually select a connection mode.SOLUTION: The method includes acquiring information indicating whether or not first image data recorded in the imaging device is encrypted from the imaging device connected in a first connection mode for acquiring the recorded image data (S203), reconnecting to the imaging device in a second connection mode for acquiring identification information corresponding to second image data captured by the imaging device in a case where the information indicates that the first image data is encrypted (YES in S204), acquiring decoding key based on the identification information corresponding to the second image data captured by the imaging device connected in the second connection mode (S207), and acquiring image data obtained by decrypting the encrypted first image data using the decoding key (S212).SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to an image processing apparatus, a control method, an image processing system, and a program. [Background technology]

[0002] Conventionally, there have been image processing devices that decrypt encrypted images. For example, Patent Document 1 discloses an image processing device that encrypts a captured image and decrypts the encrypted image using a decryption key.

[0003] Also known is a configuration in which an imaging device and an image processing device are connected. Also known is an image processing device that analyzes an image containing a barcode and acquires identification information. Also known is an image processing device that performs authentication using the identification information. Also known is a configuration in which authentication information is transmitted from the image processing device to an information processing device such as a server and an encryption key is received from the information processing device. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-314050 Summary of the Invention [Problem to be solved by the invention]

[0005] However, in conventional technologies including the above-mentioned Patent Document 1, when decrypting an encrypted image, the user had to manually switch the connection mode between the image processing device and the photographing device in order to photograph the identification information.

[0006] SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide an image processing apparatus that enables a user to select a connection mode without having to manually select the mode. [Means for solving the problem]

[0007] In order to achieve the above object, according to one aspect of the present invention, a communication means for connecting to an image capturing device through communication; An image processing device having a control means, The control means acquiring information indicating whether or not the first image data recorded in the photographing device is encrypted from the photographing device connected in a first connection mode for acquiring the recorded image data; If the information indicates that the first image data is encrypted, reconnecting to the photographing device in a second connection mode for obtaining identification information corresponding to the photographed second image data; acquiring a decryption key based on identification information corresponding to the second image data captured by the imaging device connected in the second connection mode; The encrypted first image data is decrypted using the decryption key to obtain image data. An image processing device is provided. [Effects of the Invention]

[0008] According to the present invention, it is possible to provide an image processing apparatus that automatically selects a connection mode, thereby reducing the user's workload and reducing the chances of operational errors. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an example of a system configuration of an apparatus according to an embodiment of the present invention; [Figure 2] 1 is a flowchart showing a process for displaying an image in the image processing apparatus according to the present embodiment; [Figure 3] FIG. 10 is a diagram showing an example of a screen generated by the image processing apparatus according to the present embodiment while waiting for processing; [Figure 4] FIG. 10 is a diagram showing an example of a screen displaying a list of images generated by the image processing apparatus according to the present embodiment; [Figure 5] A flowchart showing a process for decoding an image outside the image processing device of this embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0011] [First embodiment] ●System configuration 1 is a system diagram showing the configuration of an image processing system according to an embodiment of the present invention. The image processing system may also be called an information processing system, and includes an image processing device 100 such as a general-purpose computer, an image capturing device 110 such as a digital camera, and a management server 120.

[0012] ●Image processing device The image processing device 100 is a terminal that uses a client application for transmitting an image to a server. The image processing device 100 is an information processing device such as a personal computer on which a program for the procedures shown in Figures 2 and 5 is installed, and is a device that processes data including image data.

[0013] The CPU 101 performs various calculations and controls each part constituting the image processing device 100 in accordance with signals and programs input via an operation unit 104 and a communication unit 106 .

[0014] The RAM 102 is a volatile memory and is used as a temporary storage area such as a work area.

[0015] The ROM 103 stores programs (firmware) for controlling the image processing device 100, various setting information, and the like. These programs include the application program 1031 shown in Figures 2 and 5. The ROM 103 is a medium capable of recording electronic data, such as a storage device such as a hard disk or SSD, or a memory card detachably connected to the device. In this example, the ROM 103 is a non-volatile storage medium that allows additional data to be written and erased.

[0016] The operation unit 104 is a device for receiving operations from the user, and is composed of a touch panel, buttons, etc. Instructions input via the operation unit 104 enable image capture, screen operation, execution or cancellation of processing, etc.

[0017] The display unit 105 displays programs, characters for interactive operations, etc. For example, it may be a liquid crystal display built into the device, or an external display detachably connected to the device.

[0018] The communication unit 106 communicates with a system external to the device via a network, either wired or wirelessly. In this example, the communication unit 106 may be a universal serial bus (USB) interface, and in that case, it is connected to, for example, a USB interface of the image capturing device 110 via a cable. Alternatively, the communication unit 1106 may be another communication interface, for example, a wired or wireless LAN interface. It may also have interfaces for multiple media, for example, both a USB interface and a LAN interface. In that case, it may be connected to, for example, the image capturing device 110 via a USB interface and to the server 120 via a LAN interface.

[0019] ●Photographing equipment Next, we will move on to a description of the photographing device 110. The photographing device 110 is a device that photographs images. For example, it is a camera or a digital camera that can record and transmit images as image data.

[0020] The CPU 111 performs various calculations and controls each part of the imaging device 110 in accordance with input signals and programs.

[0021] The RAM 112 is a volatile memory and is used as a temporary storage area such as a work area.

[0022] The ROM 113 stores a program (firmware) for controlling the image capturing device 110, various setting information, and the like, and is also used to save captured image data 1131. The ROM 113 is a writable and erasable non-volatile memory device.

[0023] The image capturing unit 114 captures images and controls the lens and shutter.

[0024] The operation unit 115 is for accepting operations from the user and is composed of a touch panel, buttons, etc. Instructions input via the operation unit 115 enable imaging, screen operation, execution or cancellation of processing, etc.

[0025] The display unit 116 displays programs and characters for interactive operations.

[0026] The communication unit 117 communicates with a system external to the device via a network, either wired or wirelessly. In this example, the communication unit 117 may be a USB interface, and in that case, it is connected to a USB interface of the image processing device 100 via a cable. Alternatively, the communication unit 117 may be another communication interface, such as a wired or wireless LAN interface. The communication unit 117 may also have interfaces for multiple media, such as both a USB interface and a LAN interface.

[0027] ● Functions of the imaging device The image capturing device 110 has an image transfer function and a remote image capturing function. The image transfer function is a function for transmitting image data and Exif information recorded together with the image data to the image processing device 100 in response to a request when connected to the image processing device 100 in image capture mode, for example. The remote image capturing function includes a function for transmitting image data (video data) captured in real time to the image processing device 100 at a predetermined frame rate in response to a request when connected to the image processing device 100 in remote image capturing mode, for example. The remote image capturing function may also include a function for transmitting acquired image data to the image processing device 100 at a specified timing.

[0028] The image capturing device 110 may also have a medical mode as one of its functions. In the medical mode, when a barcode or the like is captured, information reproduced from the barcode (barcode information) is sent to a server or the like, and identification information is received in response. The identification information may be, for example, staff information indicating that the person is a staff member of a medical institution. In the medical mode, the acquired identification information is recorded as part of the Exif information in the header of image data that is subsequently captured and recorded.

[0029] The photographing device 110 photographs a subject using the photographing unit 114 and records the image data of a still image or a moving image in the ROM 113. The image data of the still image is converted into, for example, JPEG or TIFF and recorded, and at this time, Exif information associated with the image data is recorded as a file header. The Exif information includes information such as the date and time the image data was created (photographed), a thumbnail image, information about the equipment used to photograph it, the photographing conditions, and the location. It may also include identification information (staff information) stored in the medical mode. Because the Exif information is incidental information associated with each image, it is sometimes called image incidental information.

[0030] Furthermore, the photographing device 110 has an encryption function for encrypting photographed image data. The encryption is performed using a separately set encryption key. For example, when a user inputs an instruction to encrypt selected image data, the encryption may be performed in response to that instruction. In this case, the encryption key may be input separately. Alternatively, the photographed image data may be encrypted each time a photograph is taken, and the encrypted image data may be recorded. In this case, the encryption key may be registered in the photographing device 110 in advance and stored in, for example, the ROM 113. The encryption may be performed using the encryption key.

[0031] Furthermore, in this embodiment, when image data is recorded without encryption, the Exif information for that image data includes a thumbnail image that is a reduced version of the image data. On the other hand, when encrypted image data is recorded, the Exif information for that image data does not include a thumbnail image. Note that when encrypting image data that has already been recorded, the thumbnail image is deleted from the Exif information for that image data. This allows the thumbnail image in the Exif information to be referenced as information indicating whether the corresponding image data has been encrypted.

[0032] Furthermore, the image capturing device 110 can be connected to the image processing device 100 in two different connection modes: an image capture mode and a remote capture mode, which will be described later. When connected in the image capture mode, the image capturing device 110 can transmit recorded image data to the image processing device 100. On the other hand, when connected in the remote capture mode, the image capturing device 110 can transfer captured image data to the image processing device 100 without recording it. The transferred image data may be, for example, streaming video captured at a predetermined rate.

[0033] As described above, the photographing device 110 can photograph a subject by itself and record image data of the photographed subject. The photographing device 110 can also encrypt and record the photographed image data. The photographing device 110 can also transmit the recorded image data to the image processing device 100 connected in image capture mode. Furthermore, the photographing device 110 can transfer the photographed image data to the image processing device 100 connected in remote photographing mode, and can record the image data in the ROM 113 according to an instruction.

[0034] ● Management server Next, we will explain the management server 120. The management server 120 performs authentication using identification information and manages decryption keys. The management server 120 stores lists of staff information and patient information. When the management server 120 receives staff information sent from an imaging device or image processing device along with a request for a decryption key, it authenticates the staff information and, if authentication is successful, returns the decryption key to the requestor. The staff information, for example, is the identification information (ID) of the staff member and is pre-registered in the management server 120 in association with their authority. During authentication, the received staff information is compared with pre-registered staff information, and if the staff information has the predetermined authority, authentication may be determined to be successful. In addition to the identification information, the staff information may also include a private password known only to the person in question. Here, the predetermined authority may be, for example, the authority to access patient data, or more specifically, the authority to access and view patient image data. The decryption key stored in the management server 120 corresponds to the encryption key used to encrypt image data in the imaging device 110 and may be pre-stored.

[0035] The management server may also have a function of receiving barcode information from an imaging device operating in medical mode and transmitting corresponding identification information (staff information) to the imaging device that is the sender of the barcode information.

[0036] The CPU 121 performs various calculations in accordance with input signals and programs and controls each part of the management server 120. The CPU 121 also executes the process of transmitting a decryption key in response to the above-mentioned authentication or request.

[0037] The RAM 122 is a volatile memory and is used as a temporary storage area such as a work area.

[0038] The ROM 123 stores a program (firmware) for controlling the management server 120, various setting information, and the like.

[0039] The communication unit 124 communicates with a system external to the device via a network, either wired or wirelessly, and may be, for example, a wired or wireless LAN interface.

[0040] ●Connection mode The photographing device 110 can be connected to the image processing device 100 via the communication unit 117, and when connected, the connection is made in a connection mode set by the image processing device 100. The connection modes include an image capture mode, which is a first connection mode, and a remote photographing mode, which is a second connection mode.

[0041] The image capture mode is a mode in which communication is performed between the photographing device 110 and the image processing device 100, and image data recorded in the photographing device 110 is transferred from the photographing device 110 to the image processing device 100. The image data to be transferred is separately specified before the transfer. The image capture mode may also be called the image transfer mode. The transfer target is not limited to image data; Exif information (image auxiliary information) recorded in the file header of a file containing image data, or part of it, can also be transferred.

[0042] The remote capture mode is a mode in which an image is captured by an image capturing device 110 connected to the image processing device 100, and the captured image data is transmitted to the image processing device 100. In the remote capture mode, when an object is captured by the image capturing device 110, the image data obtained by the capture is transmitted from the image capturing device 110 to the image processing device 100 at a predetermined frame rate, and is received by the image processing device 100. Alternatively, the image capturing device 110 may transmit still image data acquired by the image capturing device 110 to the image processing device 100 at a timing specified by a shutter operation or the like. In either case, in the remote capture mode, the image capturing device 110 can transmit captured image data to the image processing device 100 in real time (in real time) without recording it. The remote capture mode is also called a tethered capture mode.

[0043] In the remote shooting mode, the image data to be transferred is not encrypted by the photographing device 110. In the remote shooting mode, the type of subject to be photographed is not particularly important, and identification information encoded in a barcode, QR code (registered trademark), or the like may be photographed. In the image capture mode, encrypted image data may be captured into the image processing device 100 regardless of the type of image data transferred from the photographing device 110 to the image processing device 100. The instruction to photograph, i.e., the shutter operation, may be performed by either the image processing device 100 or the photographing device 110. When an instruction to photograph is given, the image data obtained by photographing may be recorded in ROM 113.

[0044] This connection mode is specified by the image processing device 100 to the photographing device 110. If the photographing device 110 complies with the specification, the image processing device 100 and the photographing device 110 are connected in the specified connection mode. As described above, the photographing device 110 operates in accordance with the connection mode. The connection mode is specified regardless of the type of communication medium, such as USB, wired LAN, or wireless LAN.

[0045] If the communication medium is USB, the image processing device 100 may connect the image capturing device 110 as a mass storage device using a device driver for that device in the image capture mode, or as a video device using a device driver for that device in the remote capture mode.

[0046] ●Transfer of image data from the imaging device to the image processing device Next, a series of processes performed by the CPU 101 of the image processing device 100 to display an image will be described in detail using the flowchart in Fig. 2. The flowchart in Fig. 2 is realized by the CPU 101 executing instructions of an application program 1031 stored in a memory such as the ROM 103.

[0047] In S201, the CPU 101 detects that the photographing device 110 has been connected to the image processing device 100. The process waits until the connection of the photographing device 110 is detected. If the connection is detected, the process proceeds to S202. When the photographing device 110 is connected to the image processing device 100 via a USB cable, the image processing device 100 detects that an external device has been connected. The type of the connected external device is then identified and it is determined whether it is the photographing device 110. Alternatively, the process may start from S202 when the connection to the photographing device 110 is detected, without waiting in S201. Furthermore, the image processing device 100 can launch an application on the image processing device 100. The process of detecting the connection of the photographing device 110 may be performed when an application that displays images is running.

[0048] In S202, the CPU 101 connects to the image capturing device 110 in image capture mode, and proceeds to S203. There are multiple connection modes in which the image processing device 100 and the image capturing device 110 communicate. The connection modes include at least a remote capture mode in which remote capture is performed, and an image capture mode in which image data is captured into the image processing device 100. When the image processing device 100 connects to the image capturing device 110 in image capture mode, it notifies the image capturing device 110 that it will operate in image capture mode. If the image capturing device 110 responds to the notification, the image processing device 100 and the image capturing device 110 will then operate in image capture mode until the current connection mode is released.

[0049] Although the configuration in S202 is such that connection is automatically made in image import mode, other configurations may be used. For example, a configuration in which the user specifies the image import mode may be used. A connection mode selection screen that allows the user to select a connection mode may be displayed on the display unit 116, and when the user selects the image import mode, connection may be made in the image import mode.

[0050] In S203, the CPU 101 acquires a list of image information from the connected image capturing device 110 and proceeds to S204. The image information list is a list of Exif information included in the images. When importing images from the image capturing device 110 to the image processing device 100, first, Exif information including the file name, creation date and time, thumbnail images, etc. is acquired. Then, with the list displayed, the user can select the image data to be acquired. For example, a check box may be provided in the list for each image data item, and the image data may be selected by checking the check box. The operation of acquiring a list of image information from the connected image capturing device 110 by the image processing device 100 is also one of the operations possible in the image import mode. When thumbnails are displayed in the list, if thumbnail images are not included in the Exif information, for example, only frames may be displayed.

[0051] In this embodiment, the Exif information is acquired, but the image data may also be acquired together with the Exif information.

[0052] In S204, the CPU 101 determines whether the image data to be acquired, i.e., the image data selected by the user, contains encrypted image data. If it is determined that encrypted image data is included, the process proceeds to S205. If it is determined that encrypted image data is not included, the process proceeds to S218. The determination of whether encrypted image data is included is made based on whether a thumbnail image is included in the list of Exif information acquired by the image processing device 100. When an image is encrypted by the image capturing device 110, a thumbnail image is not included in the Exif information of the encrypted image data. Therefore, image data that includes a thumbnail image can be determined to be an unencrypted image, and image data that does not include a thumbnail image can be determined to be an encrypted image. A thumbnail image is a reduced image of a captured image. Exif information is created for the captured image data when the image is captured, and a thumbnail is created for unencrypted image data and saved as part of the Exif information.

[0053] The purpose of encrypting image data is to make it impossible for users without a decryption key to play back the image, making it impossible to identify the image. Even if image data is encrypted, if a thumbnail image exists, the image can still be identified by the thumbnail image. By not including a thumbnail image in the encrypted image data, it is possible to more reliably make the image unidentifiable.

[0054] Furthermore, if no image data exists in the ROM 113 of the photographing device 110, it may be determined that no encrypted image is included.

[0055] Furthermore, although encryption is determined based on the presence or absence of a thumbnail image in the above embodiment, other configurations are also acceptable. For example, the determination may be based on whether an encryption flag associated with image data is set. To achieve this, an encryption flag setting item is added to the Exif information. When the photographing device 110 encrypts an image, a value indicating encryption (already encrypted) is recorded as the setting value of the encryption flag in the Exif information. When the image processing device 100 imports image information, it determines whether the Exif information has an encryption flag setting item and whether the encryption flag setting value is already encrypted. In this case, in S204, if the setting value is already encrypted, i.e., if the encryption flag is set, the image is determined to be encrypted. On the other hand, if the setting value is not already encrypted or there is no encryption flag setting item, the image is determined to be unencrypted.

[0056] Furthermore, if the entire image data, including image information, is encrypted, the image or image information cannot be read normally. Therefore, in S204, if the image or image information cannot be read normally, it may be determined that an encrypted image is included.

[0057] In addition, although the image processing device 100 is configured to acquire image information and determine whether the image is encrypted or not from the acquired image information, other configurations may be used. For example, the image capturing device 110 may determine whether the image data contains encrypted image data, and the image processing device 100 may receive the determination result.

[0058] In S205, the CPU 101 determines whether or not staff information has been acquired. If it is determined that staff information has not been acquired, the process proceeds to S206. If it is determined that staff information has been acquired, the process proceeds to S211. Staff information is personal identification information that identifies an individual. In a workplace such as a hospital, it is information that identifies staff such as doctors and nurses. The staff information is used during authentication, which will be described later. If staff information has already been acquired, the step of acquiring staff information does not need to be performed and can be omitted. When the application 1031 of the image processing device 100 is started, the user may be prompted to input the staff information, which is personal identification information. The staff information that has been input is stored in a memory such as the ROM 103 or the RAM 102. If staff information stored in the memory exists, it is determined that the staff information has been acquired. If the user was not prompted to input personal identification information when the application 1031 was started, it may be determined that the staff information has not been acquired.

[0059] Furthermore, it is also possible to use personal identification information that is input as login information when the image processing device 100 is started, rather than when the application 1031 is started. Furthermore, any information that can identify an individual is acceptable, and does not have to be employee information.

[0060] In S206, CPU 101 determines whether the photographing device 110 has an identification information photographing function for photographing identification information encoded in a barcode or the like. If it is determined that the photographing device 110 has the identification information photographing function, the process proceeds to S207. If it is determined that the photographing device 110 does not have the identification information photographing function, the process proceeds to S219. The identification information photographing function is a function for photographing identification information encoded in a two-dimensional code such as a barcode or a QR code (registration information). For this reason, it is sometimes called a barcode photographing function. The barcode referred to here includes not only barcodes but also other symbols such as two-dimensional codes that represent information such as character strings, and includes symbols from which the original information can be reproduced from an optically read image of the symbol.

[0061] The image processing device 100 inquires of the photographing device 110 whether a mode including the identification information photographing function is enabled, and if the image processing device 100 receives a response indicating that the photographing function is enabled, it is determined that the photographing device 110 has the identification information photographing function. For example, a medical photographing device 110 may be equipped with a medical mode. When the medical mode is enabled, a function for photographing a barcode is activated. The barcode photographing function displays a message on the display unit 116 of the photographing device 110 informing the user that a barcode will be photographed. Alternatively, the photographing device 110 may also activate a function for determining whether an image photographed by the photographing device 110 is a barcode. That is, the image processing device 100 inquires of the photographing device 110 whether the medical mode is enabled. If the medical mode is enabled based on the response, it may be determined that the photographing device 110 has the function for photographing identification information, for example, a function for photographing a barcode, decoding the photographed barcode, and acquiring the identification information encoded as the barcode. The identification information includes personal identification information that identifies an individual, and in this example, is staff information indicating that the individual is a staff member of a medical institution.

[0062] By determining whether the photographing device 110 has an identification information photographing function, it becomes possible to automatically switch between acquiring identification information by photographing and acquiring identification information by user input.

[0063] In S207, the CPU 101 connects to the image capturing device 110 in the remote capture mode described above, and the process proceeds to S208. If the connection in image capture mode remains, the connection mode is switched to remote capture mode. To do this, the image processing device 100 cancels the image capture mode, which is the current connection mode with the image capturing device 110, and reconnects in remote capture mode. That is, the connection is reconnected in remote capture mode. To connect in remote capture mode, the image processing device 100 and the image capturing device 110 communicate with each other to determine the connection mode to use. Here, the image processing device 100 notifies the image capturing device 110 that it will connect in remote capture mode. Upon receiving the notification, the image processing device 100 communicates with the image processing device 100 and, for example, transmits a response to the image processing device 100 indicating that it accepts the remote capture mode. As a result, the image processing device 100 and the image capturing device 110 recognize that they are connected to each other and will operate in remote capture mode. Note that information indicating the current connection mode may be stored in each of the image processing device 100 and the image capturing device 110.

[0064] Furthermore, in S207, the CPU 101 connects to the image capturing apparatus 110 in the remote image capturing mode, and then generates a processing standby screen and displays it on the display unit 105.

[0065] 3 is a diagram showing an example of a processing standby screen generated and displayed by the image processing device 100 in S207. The processing standby screen 300 is a screen indicating that processing (i.e., image data captured by the photographing device 110) is on standby until an image is received from the photographing device 110 connected in remote connection mode in S207. A message 301 prompting the user to capture an image with the photographing device 110 is displayed on the display unit 105.

[0066] In S208, the CPU 101 acquires information (including image data) of the captured image from the image capturing device 110 connected in remote image capturing mode, and the process proceeds to S209. The image processing device 100 and the image capturing device 110 are connected in remote image capturing mode and are communicating with each other. The image capturing device 110 performs image capturing. The captured image is transmitted from the image capturing device 110 to the image processing device 100. The image processing device 100 receives the image data transmitted from the image capturing device 110. The received image data may be video data at a predetermined frame rate, or may be image data of a still image captured at a timing corresponding to a shutter operation or the like. It may also be image data of a still image captured when the image capturing device 110 analyzes the image and recognizes that the subject includes a barcode.

[0067] Here, receiving image data is considered to be the acquisition of information on a captured image, but it does not have to be image data. For example, the image capturing device 110 may perform image analysis on the captured image, and the image processing device 100 may acquire the results of the analysis as information. More specifically, a barcode image, which is a captured image, may be image-analyzed, decoded, and character string information may be extracted from the barcode image, and the character string information may be used as the acquired information. Note that character string information encoded in a barcode may also be referred to as barcode character string information.

[0068] Furthermore, the image capturing device 110 may perform image analysis of a barcode image captured by the image capturing device 110, and if the decoded information is valid identification information, transmit the identification information from the image capturing device 110 to the image processing device 100. For example, when the medical mode is enabled, the Exif information of the recorded image data may include staff information. The image capturing device 110 analyzes the captured barcode image, extracts character string information from the barcode, and acquires staff information using the extracted character string information. To acquire staff information, for example, the extracted character string information may be transmitted to a server, and staff information corresponding to the character string information may be received from the server in response. The staff information acquired based on the captured image in this manner is compared with the staff information included in the Exif information of the image data recorded in the ROM 113. If the staff information acquired from the captured image is included as staff information in any of the recorded image data, the staff information is determined to be valid identification information. In other words, valid identification information is identification information that has been used as staff information. If the identification information is valid, the valid staff information is transmitted from the image capturing device 110 to the image processing device 100. If it is not determined that the identification information is valid, a message is displayed urging the user to take a photograph again, and the employee information, which is the identification information, is not transmitted from the photographing device 110 to the image processing device 100.

[0069] As a result, if the staff information of the captured image does not match the staff information of the recorded image and the image is not allowed to be decrypted, it can be determined that the image is not allowed to be decrypted before authentication is performed by the server 120, which will be described later. This has the effect of shortening the processing wait time for the user and improving usability.

[0070] Furthermore, photographing may be performed by a user operating the photographing device 110, or may be performed by transmitting a photographing instruction from the image processing device 100 to the photographing device 110. When receiving video from the photographing device 110 and the image processing device 100 identifies a barcode from one of the frames, or when the photographing device 110 recognizes the barcode of the subject and captures image data, no particular photographing instruction may be required.

[0071] In S209, CPU 101 analyzes the acquired image data, acquires staff information, and the process proceeds to S210. In S209, the acquired barcode image is analyzed, and character string information of the barcode is extracted from it. Here, the extracted character string information is used as staff information, but other configurations may be used as long as it is personal identification information.

[0072] For example, staff information may be acquired based on character string information. In this case, image processing device 100 manages a list linking character string information extracted from a barcode with staff information, thereby acquiring staff information corresponding to the character string information of the barcode.

[0073] If the acquired image does not contain a barcode or the barcode in the image cannot be recognized, the staff information will not be acquired. Note that if the decrypted staff information is received from the image capturing device 110 in S208, S209 may be skipped.

[0074] In S210, the CPU 101 determines whether the staff information was acquired. If it is determined that the staff information was acquired, the process proceeds to S211. If it is determined that the staff information was not acquired, the process proceeds to S219.

[0075] In S219, the CPU 101 requests the photographing apparatus 110 to display a screen on the display unit 116 requesting input of barcode information, and the process proceeds to S220. In response to this request, the photographing apparatus 110 displays a barcode input screen on the display unit 116. The barcode input screen is a screen for inputting barcode information, i.e., a character string indicated by a barcode. On the barcode input screen, the user inputs a character string corresponding to the barcode indicating staff information using the operation unit 115. The input character string may be, for example, a character string written alongside the barcode. The image processing device 100 accepts barcode information, which is the character string of the barcode input by the user to the photographing apparatus 110. Note that S210 may be configured to request input of staff information, which is information for identifying an individual. In this case, the user is requested to input staff information, rather than obtaining staff information indirectly from the barcode information. The reason why the photographing apparatus 110 is required to input the barcode information is because the apparatus currently being operated by the operator (e.g., a staff member such as a doctor) is considered to be the photographing apparatus 110.

[0076] In S220, CPU 101 acquires staff information from the barcode information received from the user, and the process proceeds to S211. The staff information may be obtained using the barcode information described above, or may be acquired based on the barcode information. That is, if the barcode information is staff information, that information is used, and if staff information is linked to the barcode information, the staff information linked to the barcode information is acquired.

[0077] In S211, the CPU 101 sends the acquired staff information to the management server 120, and the process proceeds to S212. The management server 120 has the function of performing authentication based on the received staff information. The server 120 manages pre-registered staff information. The management server 120 holds a list of staff information for which authentication is permitted. The server 120 determines whether the received staff information is included in the list of staff information for which authentication is permitted. If included, it determines that authentication is permitted. If authentication is permitted, the server 120 sends a decryption key to the image processing device 100.

[0078] If the authentication is not permitted, the management server 120 notifies the image processing device 100 of the denial of authentication and does not transmit the decryption key.

[0079] If staff information is registered in the server 120, but authentication of specific staff information is to be denied, the relevant staff information is not included in the list of staff information for which authentication is permitted. This ability to set whether authentication is permitted or denied enhances security. Furthermore, the staff information includes authorization information, and the decryption key may be sent only if the staff member whose staff information is to be authenticated has access authorization to patient information.

[0080] The decryption key may be a common decryption key or may be an individual decryption key according to the employee information. Authentication may be permitted if the employee belongs to the same group based on the information of the group to which the employee belongs.

[0081] In S212, the CPU 101 receives the decryption key from the management server 120, and the process proceeds to S213. Note that if the management server 120 does not send the decryption key due to reasons such as unsuccessful authentication, or if it sends a message indicating authentication failure, the decryption key is not received.

[0082] In S213, the CPU 101 determines whether the decryption key has been acquired. If the decryption key has been acquired, the process proceeds to S214. If the decryption key has not been acquired, the process proceeds to S219.

[0083] In S214, the CPU 101 determines whether the image capturing apparatus 110 is connected in remote image capturing mode. If it is determined that the image capturing mode is remote, the process proceeds to S215. If it is determined that the image capturing mode is not remote, the process proceeds to S216.

[0084] In S215, the CPU 101 connects to the image capturing device 110 in the image capture mode described above, and the process proceeds to S216. If the connection in remote image capturing mode remains, the connection mode is switched to image capture mode. The connection between the image processing device 100 and the image capturing device 110 in remote image capturing mode is terminated, and a reconnection is made in image capture mode. The image processing device 100 and the image capturing device 110 communicate with each other to determine the connection mode to connect in. Here, the image processing device 100 notifies the image capturing device 110 that it will connect in image capture mode. Upon receiving the notification, the image capturing device 110 communicates with the image processing device 100 and recognizes that it will connect in image capture mode. The connection mode can be changed in the same manner as in S207, but the connection modes before and after the connection mode switch are reversed from S207.

[0085] In S216, the CPU 101 acquires the image data selected in S203 from the connected image capturing device 110, and the process proceeds to S217.

[0086] In S217, the CPU 101 decrypts the encrypted image data using the acquired decryption key, and the process proceeds to S218. In the decryption process, the image processing device 100 executes the decryption process on each of the selected image data based on the decryption key and the encryption algorithm information.

[0087] In S218, the CPU 101 displays an image reproduced from the decrypted image data on the screen of the display unit 105, and then ends the process. The display unit 105 displays a list of multiple images, with the decrypted images and file names arranged side by side. If the images cannot all be displayed, they may be displayed on multiple screens, or the screen may be enlarged and displayed by scrolling. If decryption fails or if decryption is not permitted, image data that has not been decrypted displays an icon indicating that it has not been decrypted. If image data containing Exif information has been encrypted, the Exif information can be read correctly by decrypting it. In this case, a thumbnail image included in the Exif information is displayed on the screen.

[0088] 4 is a diagram showing an example of an image list screen generated and displayed by the image processing device 100 in S218. The image list screen 400 includes an image 401 and a file name 402. The image 401 is an image reproduced based on image data acquired from the image capturing device 110 and decrypted if encrypted. The file name 402 is a file name included in the image information acquired from the image capturing device 110. The icon 403 is an icon displayed in the case of image data that has not been decrypted. The list displayed in S203 may also be as shown in FIG. 4. However, in S203, thumbnail images are displayed, and check boxes for image selection and the like are also displayed.

[0089] As described above, the remote shooting mode in this embodiment is a mode that includes any of the following operations.

[0090] One is that after the photographing device 110 takes a photograph, it immediately transmits the photographed image data to the image processing device 100.

[0091] One is that the photographing device 110 uses the identification information recognition function to perform image analysis of the photographed image data in real time, and if it determines that the photographed image data contains identification information, it transmits the image data to the image processing device 100.

[0092] In one case, the photographing device 110 transmits photographed image data to the image processing device 100 at regular intervals using the identification information recognition function.

[0093] In one operation, the photographing device 110 performs image analysis of the photographed image data using the identification information recognition function, extracts staff information as identification information, and transmits the extracted staff information to the image processing device 100.

[0094] With the above configuration, the connection mode is automatically switched when an image needs to be decoded, which has the effect of reducing the user's workload.

[0095] [Second embodiment] Next, a series of processes for decrypting an image outside the image processing device will be described in detail using the flowchart in Fig. 5. In this embodiment, the image capturing device 110 has an encryption function as well as a decryption function for encrypted image data. The image capturing device 110 decrypts the encrypted image data and transmits unencrypted image data to the image processing device 100. The system configuration of this embodiment is the same as that of the first embodiment, so a description thereof will be omitted. The flowchart in Fig. 5 is implemented by the CPU 101 executing commands of the application 1031 of this embodiment.

[0096] The processing from S501 to S513 is the same as the processing from S201 to S213 described above, and therefore description thereof will be omitted.

[0097] In S514, the CPU 101 transmits the decryption key acquired by the image processing device 100 to the photographing device 110, and the process proceeds to S515. Meanwhile, the photographing device 110 decrypts the image data using the acquired decryption key, and transmits the decryption result including the decrypted image data to the image processing device 100.

[0098] In S515, the CPU 101 receives the decoding result of the image data including the image data from the image capturing device 110, and the process proceeds to S516.

[0099] The processing from S516 to S521 is the same as the processing from S214 to S220 described above, and therefore description thereof will be omitted.

[0100] With the above configuration, similar to the first embodiment, the user can capture an image of a barcode or the like, acquire staff information, and decode the image data without switching between image capture modes, thereby shortening processing time and reducing the user's workload.

[0101] In addition, according to this embodiment, the encryption program and decryption program implementing the encryption algorithm are not stored in the image processing device 100, but in the image capturing device 110. This makes it difficult for a malicious user to identify the encryption algorithm information. This has the effect of strengthening security by preventing the encryption algorithm information from being known.

[0102] [Third embodiment] Next, as a third embodiment, an example will be described in which not only image encryption but also decryption processing is performed by the photographing device 110. First, an example of processing for encrypting image data by the photographing device 110 will be described. The photographing device 110 allows the user to register a password in advance. Then, a common key cryptosystem is used to generate a common key from the registered password. Then, the common key is used to encrypt the image data when photographing.

[0103] Next, an example of a process for decrypting and displaying encrypted image data on the display unit 116 of the image capturing device 110 will be described. In this embodiment, the image capturing device 110 has a decryption function, and therefore can display the decrypted image on the display unit 116. When attempting to display an image on the display unit 116 of the image capturing device 110, the image capturing device 110 requests the user to enter a password. Then, a common key is generated from the password entered by the user. The common key is then used to decrypt the image data, and an image reproduced from the decrypted image data is displayed on the display unit 116. In this manner, the image capturing device 110 can independently encrypt and decrypt image data and reproduce the image without using the image processing device 100 and the management server 120.

[0104] Next, an example of the process of preparing a decryption key in the server 120 will be described. The server 120 allows a user to register a password that is the same as the password registered in the image capture device 110 in advance. Then, a common key is generated from the registered password using a common key cryptosystem. Then, in S512 of Fig. 5, when authentication is permitted by the server 120, the generated common key is used as the decryption key. For example, the server 120 stores the generated common key as a decryption key, and transmits the decryption key to the image processing device 100 when authentication is successful.

[0105] In the first to third embodiments, the captured image has been described as a still image, but it may be a video (video). Also, while a barcode has been used as identification information, other identification information such as a QR code (registered trademark) or a face authentication image may be used. Also, the encryption method may be any encryption method, including a common key encryption method and a public key encryption method. In this case, a public key and a private key are prepared, and the private key is stored and managed in the management server 120 as a decryption key, and the public key is used by the image capturing device 110 as an encryption key. Also, although authentication is configured to be performed by the management server 120, authentication may be performed within the image processing device 100.

[0106] The present invention can also be realized by executing the following process: software (programs) that realize the functions of the above-described embodiments are supplied to a system or device via a network or various storage media, and the computer (or CPU, MPU, etc.) of the system or device reads and executes the programs.

[0107] Although the preferred embodiments of the present invention have been described above, the present invention is not limited to these embodiments, and various modifications and changes are possible within the scope of the gist of the present invention.

[0108] [Other Examples] The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0109] Summary of embodiments The above embodiments can be summarized as follows: (Item 1) a communication means for connecting to the imaging device by communication; An image processing device having a control means, The control means acquiring information indicating whether or not the first image data recorded in the photographing device is encrypted from the photographing device connected in a first connection mode for acquiring the recorded image data; If the information indicates that the first image data is encrypted, reconnecting to the photographing device in a second connection mode for obtaining identification information corresponding to the photographed second image data; acquiring a decryption key based on identification information corresponding to the second image data captured by the imaging device connected in the second connection mode; The encrypted first image data is decrypted using the decryption key to obtain image data. 1. An image processing device comprising: (Item 2) Item 1, the image processing device according to item 1, The control means decrypts the encrypted first image data acquired from the image capturing device using the decryption key, thereby acquiring image data obtained by decrypting the first image data. 1. An image processing device comprising: (Item 3) Item 1 or 2, the image processing device The control means transmits the decryption key to the image capture device, and acquires image data from the image capture device that has been decrypted by the image capture device using the decryption key from the encrypted first image data. 1. An image processing device comprising: (Item 4) Item 3. The image processing device according to any one of items 1 to 3, The control means receives the second image data captured by the image capturing device connected in the second connection mode, acquires the identification information corresponding to the second image data, and acquires a decryption key based on the identification information. 1. An image processing device comprising: (Item 5) Item 4. The image processing device according to item 4, the second image data includes a symbol corresponding to the identification information; The control means acquires the identification information based on the symbol, and acquires the decryption key according to the identification information from a server connected to the image processing device. 1. An image processing device comprising: (Item 6) Item 5. The image processing device according to item 5, The control means acquires the identification information represented by the symbol based on the symbol. 1. An image processing device comprising: (Item 7) Item 6. The image processing device according to item 6, The symbol includes a barcode or a two-dimensional code. 1. An image processing device comprising: (Item 8) Item 1, the image processing device according to item 1, When the photographing device is compatible with the medical mode, the control means receives the identification information corresponding to the second image data captured from the photographing device connected in the second connection mode, and acquires a decryption key based on the identification information. 1. An image processing device comprising: (Item 9) Item 10. The image processing device according to any one of items 1 to 8, The control means determines whether the photographing device has a function for photographing the second image data, and if it determines that the photographing device has the function, reconnects to the photographing device in the second connection mode. 1. An image processing device comprising: (Item 10) Item 9. The image processing device according to item 9, The control means inquires of the photographing device whether it has a function for photographing the second image data, and determines whether it has the function based on the response. 1. An image processing device comprising: (Item 11) 11. The image processing device according to any one of items 1 to 10, The control means acquires image attendant information of the first image data as information indicating whether the first image data is encrypted, and determines whether the first image data is encrypted based on the image attendant information. 1. An image processing device comprising: (Item 12) Item 11: An image processing device according to item 11, The control means determines whether the first image data is encrypted based on whether or not a thumbnail image is included in the image attendant information. 1. An image processing device comprising:

[0110] The present invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Therefore, the following claims are appended to apprise the public of the scope of the invention. (Item 13) 13. A program for causing a computer to function as the image processing device according to any one of items 1 to 12. (Item 14) An image processing device according to any one of items 1 to 12, an imaging device; An image processing system comprising: (Item 15) Item 15. The image processing system according to item 14, the photographing device records the photographed first image data; When the second image data is captured, identification information corresponding to the second image data is acquired; determining whether the identification information corresponding to the second image data is included in identification information associated with the first image data recorded in the photographing device; If it is determined that the identification information is included, the identification information is transmitted to the image processing device; The control means receives the identification information included in the identification information associated with the first image data recorded in the photographing device. An image processing system comprising: (Item 16) A control method for an image processing device having a communication means for connecting to an image capture device by communication and a control means, the control means acquires information indicating whether the first image data recorded in the photographing device is encrypted from the photographing device connected in a first connection mode for acquiring the recorded image data; When the information indicates that the first image data is encrypted, the control means reconnects to the photographing device in a second connection mode for acquiring identification information corresponding to the photographed second image data; the control means acquires a decryption key based on identification information corresponding to the second image data captured by the imaging device connected in the second connection mode, The control means obtains image data by decrypting the encrypted first image data using the decryption key. 2. A method for controlling an image processing apparatus comprising: [Explanation of symbols]

[0111] 100 image processing device, 110 imaging device, 120 server

Claims

1. a communication means for connecting to the imaging device by communication; An image processing device having a control means, The control means acquiring information indicating whether or not first image data recorded in the photographing device is encrypted from the photographing device connected in a first connection mode for acquiring recorded image data; If the information indicates that the first image data is encrypted, reconnecting to the photographing device in a second connection mode for obtaining identification information corresponding to the photographed second image data; acquiring a decryption key based on identification information corresponding to the second image data captured by the imaging device connected in the second connection mode; The encrypted first image data is decrypted using the decryption key to obtain image data.

1. An image processing device comprising:

2. 2. The image processing device according to claim 1, The control means decrypts the encrypted first image data acquired from the image capturing device using the decryption key, thereby acquiring image data obtained by decrypting the first image data.

1. An image processing device comprising:

3. 2. The image processing device according to claim 1, The control means transmits the decryption key to the image capture device, and acquires image data from the image capture device that has been decrypted by the image capture device using the decryption key from the encrypted first image data.

1. An image processing device comprising:

4. 2. The image processing device according to claim 1, The control means receives the second image data captured by the image capturing device connected in the second connection mode, acquires the identification information corresponding to the second image data, and acquires a decryption key based on the identification information.

1. An image processing device comprising:

5. 5. The image processing device according to claim 4, the second image data includes a symbol corresponding to the identification information; The control means acquires the identification information based on the symbol, and acquires the decryption key according to the identification information from a server connected to the image processing device.

1. An image processing device comprising:

6. 6. The image processing device according to claim 5, The control means acquires the identification information represented by the symbol based on the symbol.

1. An image processing device comprising:

7. 7. The image processing device according to claim 6, The symbol includes a barcode or a two-dimensional code.

1. An image processing device comprising:

8. 2. The image processing device according to claim 1, When the photographing device is compatible with the medical mode, the control means receives the identification information corresponding to the second image data captured from the photographing device connected in the second connection mode, and acquires a decryption key based on the identification information.

1. An image processing device comprising:

9. 2. The image processing device according to claim 1, The control means determines whether the photographing device has a function for photographing the second image data, and if it determines that the photographing device has the function, reconnects to the photographing device in the second connection mode.

1. An image processing device comprising:

10. 10. The image processing device according to claim 9, The control means inquires of the photographing device whether it has a function for photographing the second image data, and determines whether it has the function based on the response.

1. An image processing device comprising:

11. 2. The image processing device according to claim 1, The control means acquires image attendant information of the first image data as information indicating whether the first image data is encrypted, and determines whether the first image data is encrypted based on the image attendant information.

1. An image processing device comprising:

12. The image processing device according to claim 11, The control means determines whether the first image data is encrypted based on whether or not a thumbnail image is included in the image attendant information.

1. An image processing device comprising:

13. A program for causing a computer to function as the image processing device according to any one of claims 1 to 12.

14. An image processing device according to any one of claims 1 to 12; an imaging device; An image processing system comprising:

15. 15. The image processing system according to claim 14, the photographing device records the photographed first image data; When the second image data is captured, identification information corresponding to the second image data is acquired; determining whether the identification information corresponding to the second image data is included in identification information associated with the first image data recorded in the photographing device; If it is determined that the identification information is included, the identification information is transmitted to the image processing device; The control means receives the identification information included in the identification information associated with the first image data recorded in the photographing device. An image processing system comprising:

16. A control method for an image processing device having a communication means for connecting to an image capture device by communication and a control means, the control means acquires information indicating whether or not the first image data recorded in the photographing device is encrypted from the photographing device connected in a first connection mode for acquiring the recorded image data; When the information indicates that the first image data is encrypted, the control means reconnects to the photographing device in a second connection mode for acquiring identification information corresponding to the photographed second image data; the control means acquires a decryption key based on identification information corresponding to the second image data captured by the image capturing device connected in the second connection mode; The control means obtains image data by decrypting the encrypted first image data using the decryption key.

2. A method for controlling an image processing apparatus comprising:

Images