Image File Metadata Flagging for Hidden Privacy Information

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing image file formats, such as HEIF, do not adequately protect privacy information embedded in metadata that is not intended for display, risking unintentional leakage of personal information when images are shared or published.

Innovation Solution

An image processing apparatus and method that identifies and marks image files containing privacy information by adding identification metadata to indicate the presence of non-displayed privacy information, ensuring users are aware before sharing or publishing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple pieces of image data and metadata are stored in a single image file, then the file structure can store various information including shooting conditions and GPS information, but privacy information may be unintentionally leaked when the image file is shared or published

Engineering Contradiction:
Improvestorage capabilityVSAvoidprivacy leakage
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by adding identification metadata to image files before they are shared or published. This identification metadata marks the presence of privacy information in advance, allowing users to be notified and take preventive measures before the privacy leakage can occur. The system proactively identifies and flags privacy-containing data rather than reacting after leakage occurs.

Inventive Principle:
Principle #10Preliminary action

2Object-affected harmful factors

If additional information such as GPS information is automatically deleted when transferring image files, then shooting information and personal information can be protected, but image files cannot be transferred with complete information

Engineering Contradiction:
Improveprivacy protectionVSAvoidinformation completeness
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent applies local quality by differentiating between types of metadata in the image file. Instead of deleting all additional information uniformly, the system selectively identifies metadata containing privacy information and adds specific identification markers only to those portions. This allows the image file to retain complete information for legitimate uses while flagging only the privacy-sensitive portions for selective deletion or user notification.

Inventive Principle:
Principle #3Local quality

3Object-affected harmful factors

If identification information is added to image files to indicate the presence of privacy information, then users can be notified before sharing, but the file structure becomes more complex

Engineering Contradiction:
Improveprivacy awarenessVSAvoidfile structure complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent applies the nested doll principle by embedding identification metadata within the existing image file structure. Rather than creating a separate complex system, the identification information is nested within the metadata section of the image file itself, utilizing the existing file structure. This minimizes overall complexity while still providing the necessary privacy identification functionality.

Inventive Principle:
Principle #7Nested doll (Nesting)

Data Source

PatentUS12536315B2Image processing apparatus, image processing method, and non-transitory computer-readable storage medium
Publication Date: 2026.01.27 CANON KK
  • US12536315B2 patent drawing
  • US12536315B2 patent drawing
  • US12536315B2 patent drawing

AI summary

An image processing apparatus that processes an image file having a structure that includes a plurality of pieces of image data and metadata relating to the plurality of pieces of image data. The apparatus includes a determining unit configured to determine whether the structure is a file structure in which privacy information can be included in data, among the plurality of pieces of image data and the metadata, that is not to be displayed at a first priority, and a display control unit configured, when the determining unit determines that the structure is a file structure in which privacy information can be included in the data, to display identification information capable of identifying the structure as a file structure in which privacy information can be included in the data.