JP2007336457A - Verification apparatus, and verification program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a verification apparatus which improves convenience, quickness in use in tampering verification. <P>SOLUTION: The verification apparatus includes a retrieval section, a verification section, and a display control section. The retrieval section retrieves a file that becomes a target of tampering verification. The verification section performs the tampering verification on the file retrieved by the retrieval section. The display control section displays, on a display screen, both a progress of the file retrieval by the retrieval section and a progress of the tampering verification by the verification section. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a technique for verifying falsification of a file.

In recent years, opportunities for taking ID photographs using an electronic camera have increased. This type of ID photo is recorded as an electronic file. Therefore, it becomes easy to quickly submit the ID photo through the communication line. It is also easy to manage a large number of ID photos as a database.
On the other hand, this type of electronic file can be easily altered using familiar image processing software or the like. Therefore, a technique for verifying tampering of electronic files is important.

The following Patent Document 1 is known as a technique for this type of alteration verification. In this prior art, verification data is obtained by calculating a hash function from an original file. This verification data is stored in a file.
Later, the hash function data recalculated from the file is collated with the verification data in the file. If the two data do not match, it can be determined that the file has been tampered with.
Japanese Patent Laid-Open No. 11-215452

Consider a case where tampering verification is performed on multiple files. In this case, in the prior art, it is necessary to repeat the process described above many times. For this reason, it becomes difficult for the user to understand the accurate progress of the entire work while falsification verification is repeated. Also, a new file cannot be added at any time while tampering verification is repeated.
As described above, the conventional alteration verification has room for improvement in terms of usability and agility. Therefore, an object of the present invention is to improve the usability of falsification verification.

<< 1 >> The verification apparatus of the present invention includes a search unit, a verification unit, and a display control unit.
The search unit searches for a file that is subject to falsification verification.
The verification unit performs falsification verification on the file searched by the search unit.
The display control unit displays both the progress status of the file search by the search unit and the progress status of the falsification verification by the verification unit on the display screen.
<< 2 >> Preferably, at least some of the files include image data. The display control unit displays the display image of the image data on the display screen according to the progress of at least one of file search and falsification verification.
<< 3 >> Preferably, at least one of the search unit, the verification unit, and the display control unit generates a display image by converting the number of pixels of the image data.
<< 4 >> Preferably, a search waiting management unit that manages search waiting of the search unit is provided. In addition, a verification waiting management unit that manages the verification waiting of the verification unit is provided.
The retrieval unit retrieves this waiting for retrieval and retrieves a file to be subjected to falsification verification. The search unit registers the searched file for verification.
On the other hand, the verification unit takes out the verification wait and performs falsification verification.
<< 5 >> Also, preferably, when the search unit detects a subfolder from among the folders registered for search waiting, the search unit registers the subfolder for search waiting.
<6> Preferably, an input processing unit is provided. This input processing unit registers a file or a folder waiting for a search according to an instruction input from the outside.
<< 7 >> Also preferably, the search unit determines whether or not the file is a specific file predetermined as a target for falsification verification. The search unit searches for a file to be subjected to falsification verification based on this determination.
<< 8 >> Another verification apparatus of the present invention includes a search unit, a data extraction unit, a collation unit, a temporary storage unit, and a display control unit.
The retrieval unit retrieves a file to be subjected to falsification verification from data indicating a file type in the file.
The data extraction unit extracts the data area to be falsified and verified, the data for verifying the falsification of the data area, and the image data from the searched file according to the analysis result of the file type.
The collation unit determines whether the data area has been altered by collating the data area extracted by the data extraction unit with the verification data.
The temporary storage unit temporarily stores a display image corresponding to the image data extracted by the data extraction unit.
The display control unit displays the result of the falsification verification by the collation unit and the display image temporarily stored in the temporary storage unit on the display screen.
<< 9 >> to << 16 >> The verification program of the present invention has contents corresponding to the above << 1 >> to << 8 >>.

  According to the present invention, usability of tampering verification can be improved.

<< Configuration Description of Embodiment >>
FIG. 1 is a block diagram showing the verification device 11. The verification device 11 is realized by software using a computer and a verification program.
In FIG. 1, the input processing unit 12 registers falsification verification candidates in the search queue 13 in accordance with a user operation. The search unit 14 searches the search queue 13 for a target file for falsification verification. The search unit 14 registers the searched target file in the verification queue 15. The verification unit 16 performs falsification verification on the target file in the verification queue 15. The verification unit 16 includes a data extraction unit 21, a collation unit 22, a pixel number conversion unit 23, and a temporary storage unit 24.
The display control unit 18 displays the progress status of the search unit 14, the progress status of the verification unit 16, and the result of falsification verification described above on the display screen.

<Description of main thread operation>
FIG. 2 is a flowchart showing the main thread of the verification program. This main thread corresponds to the functions of the input processing unit 12 and the display control unit 18 shown in FIG. Hereinafter, this operation will be described along the step numbers shown in FIG.

Step S1: First, the user starts a verification program on the computer. Following this activation, the main thread creates a window (see FIGS. 3 and 4). The main thread receives messages such as user operations via the message queue of this window.

Step S2: In the main thread activation process, a search thread (described later) is created and activated. Thereafter, this search thread operates in parallel or time-sharing with the main thread.

Step S3: A verification thread (described later) is created and activated in the main thread activation process. Thereafter, the verification thread operates in parallel with the main thread and the search thread or in a time-sharing manner.

Step S4: Messages of user operations and messages from other threads are accumulated in the message queue via the OS (Operating System). The main thread sequentially retrieves the first message from the message queue. The main thread executes the branch process of steps S5 to S12 according to the content of the extracted message.
When the main thread detects a window end operation, the main thread preferentially shifts to the end process after step S13.

Step S5: In this step, a branch process corresponding to the file / folder addition message is executed.
First, the main thread acquires this file / folder addition message via the message queue. This additional message is generated by drag and drop of a file / folder or a menu operation. It is also possible to generate a file / folder addition message via a command line option (text data added to the command line). Furthermore, a file / folder addition message can be generated by inter-process communication issued from another application.
The input processing unit 12 acquires file / folder reference information from this additional message. The reference information is a small amount of data indicating the location of actual data. The input processing unit 12 additionally registers the acquired reference information in the search queue 13.
When the registration of the search queue 13 is completed, the main thread immediately returns control to the OS.

Step S6: In this step, branch processing corresponding to the redraw message of the verification list is executed.
First, the main thread acquires a redraw message of the verification list via the message queue. The display control unit 18 updates the verification list display 71 shown in FIG. 3 or 4 in accordance with the redrawing instruction.
When the main thread completes this display update, it immediately returns control to the OS.

Step S7: In this step, a branch process corresponding to the verification list rearrangement message is executed.
The user can generate a rearrangement message by clicking the item 81 in the display 71 of the verification list.
The main thread obtains this sort message via the message queue. The display control unit 18 rearranges the list data of the verification list according to the contents of the item 81 instructed to be rearranged. Next, the main thread issues a redraw request for the verification list that has been rearranged to the OS. The main thread returns control to the OS immediately after these operations.

Step S8: In this step, a branch process corresponding to the focus selection in the verification list is executed.
The user can select a focus on the corresponding file by clicking the list data 82 on the display 71 of the verification list.
The main thread obtains this focus selection via the message queue. The display control unit 18 inquires the verification list of the file selected as the focus, and acquires reference information of the display image of the file. The display control unit 18 reads the display image from the temporary storage unit 24 according to the reference information. The display control unit 18 displays the display image in the display area 77 shown in FIG. The main thread returns control to the OS immediately after these operations.
When the user selects a plurality of files in focus, it is preferable to display a plurality of corresponding display images side by side in the display area 77.

Step S9: In this step, a branch process corresponding to the list deletion of the verification list is executed.
The user can issue an instruction to delete an unnecessary list by performing a delete key or a menu operation in a state where the file on the display 71 is in focus.
The main thread acquires this deletion instruction via the message queue. The main thread (display control unit 18) deletes the list instructed to be deleted from the verification list. Next, the main thread issues a verification list redrawing request to the OS. The main thread returns control to the OS immediately after these operations.

Step S10: In this step, a branch process corresponding to the interruption instruction is executed.
The user can issue an instruction to interrupt the search process and the verification process by clicking the interrupt button 83 shown in FIG.
The main thread obtains this interruption instruction via the message queue. The input processing unit 12 clears the contents of the search queue 13 and the verification queue 15 in accordance with this interruption instruction. This process interrupts the operations of the search thread and the verification thread described later. The main thread returns control to the OS immediately after these operations.

Step S11: The search thread requests the main thread to update the display of the progress status of the search process via the message queue. In accordance with this request, the display control unit 18 rewrites the search status progress display 72 shown in FIG.
Note that the display control unit 18 may sequentially display display images (such as reduced images) included in the file being searched in the margin of the window in a frame-by-frame manner. In this case, in order to adjust the display size of the display image, it is preferable to perform pixel number conversion in either the search unit 14 or the display control unit 18.
The main thread returns control to the OS immediately after these operations.

Step S12: The verification thread requests the main thread to update the display of the progress status of the verification process via the message queue. In accordance with this request, the display control unit 18 rewrites the search status progress display 73 and the progress bar 74 shown in FIG.
Note that the display control unit 18 may sequentially display display images (such as reduced images) included in the file under verification in a frame margin in a window margin. In this case, in order to adjust the display size of the display image, it is preferable to perform pixel number conversion in either the verification unit 16 or the display control unit 18.
The main thread returns control to the OS immediately after these operations.

Step S13: The user can instruct the end of the verification program using the end button 84 shown in FIG. This end instruction is preferentially transmitted to the main thread. The main thread clears the contents of the search queue 13 and the verification queue 15 according to the end instruction. By this processing, the processing of the search thread and the verification thread is interrupted.

Step S14: Subsequently, the main thread gives an end instruction to the search thread and the verification thread.

Step S15: The main thread waits for the search thread and the verification thread to end.

Step S16: When the main thread confirms the end of the search thread and the verification thread, the main thread discards the window created in step S1 from the memory. With the above operation, the operation of the verification program ends.

《Search thread operation explanation》
Next, a specific operation of the search thread will be described.
FIG. 5 is a flowchart showing the operation of this search thread. This search thread corresponds to the functions of the search unit 14 and the search queue 13 shown in FIG.
A series of operations of this search thread is repeatedly performed until an end instruction is issued from the main thread. Further, when an end instruction is issued from the main thread, the search thread is discarded from the memory.

Step S31: The search unit 14 checks the number of elements in the search queue 13 at regular intervals. When the search unit 14 determines that the element of the search queue 13 is empty, the operation proceeds to step S32. On the other hand, if the search unit 14 determines that there is an element in the search queue 13, the operation proceeds to step S34.

Step S32: The search unit 14 replaces the text data indicating the search target folder name with a NULL value, and requests the main thread to update the search progress (see step S11). As a result, the progress display 72 of the search process shown in FIG. 3 is deleted.

Step S33: Since the search queue 13 is empty, the search unit 14 returns control to the OS side and enters an idling state. On the OS side, when the elapse of a predetermined time is detected, the search unit 14 is restarted. The restarted search unit 14 returns to step S31 and resumes operation.

Step S34: The search unit 14 takes out the head element from the search queue 13.

Step S35: The search unit 14 substitutes the path display of the parent folder name of the extracted element into the text data indicating the search target folder name. Subsequently, the search unit 14 requests the main thread to update the search progress (see step S11). As a result, the name of the folder currently being searched is displayed in the progress display 72 of the search process shown in FIG.

Step S36: The search unit 14 determines the type of the extracted element.
For example, the search unit 14 performs type determination based on element naming rules (such as a file extension). For example, the search unit 14 accesses the actual data of the file. The search unit 14 reads tag data indicating the file type from the actual data. As a result, even if the file name is rewritten, the file type can be determined without error.

In accordance with such type determination, the search unit 14 classifies elements into the following types.
(1) Folder
(2) Target file (for example, JPEG, TIFF, RAW file in the case of image file)
(3) Excluded files

  If the search unit 14 determines that the type of element is a folder, the search unit 14 proceeds to step S38. If the search unit 14 determines that the type of element is the target file, the search unit 14 proceeds to step S37. On the other hand, if the search unit 14 determines that the element type is a non-target file, the search unit 14 returns the operation to step S31.

Step S37: The search unit 14 additionally registers in the verification queue 15 the reference information of the target file determined in Step S36 and its type information. After this operation, the search unit 14 returns the operation to step S31.

Step S38: The search unit 14 substitutes the path display of the searched folder name for the text data indicating the search target folder name. Subsequently, the search unit 14 requests the main thread to update the search progress (see step S11). As a result, the name of the folder currently being searched is displayed on the progress display 72 of the search process shown in FIG.

Step S39: The search unit 14 performs the same type determination as step S36 for each element in the folder.
When the search unit 14 finds a subfolder in the folder, the operation proceeds to step S40. Further, when the search unit 14 finds the target file in the folder, the operation proceeds to step S41. On the other hand, when the search unit 14 finds a non-target file in the folder, the operation proceeds to step S42.

Step S40: The search unit 14 additionally registers the found subfolder in the search queue 13. By the process of returning to the search queue 13, the search process in the subfolder is performed later. After this processing, the search unit 14 shifts the operation to step S42.

Step S41: The search unit 14 additionally registers the reference information of the target file found in step S39 and its type information in the verification queue 15. After this operation, the search unit 14 shifts the operation to step S42.

Step S42: If the retrieval unit 14 determines that the retrieval processing has been completed for all elements in the folder, the operation returns to step S31. On the other hand, if the search unit 14 determines that the search process has not been completed for all elements in the folder, the search unit 14 returns the operation to step S39.

<Explanation of verification thread operation>
Next, a specific operation of the verification thread will be described.
FIG. 6 is a flowchart showing the operation of the verification thread. This verification thread corresponds to the operations of the verification unit 16 and the verification queue 15 shown in FIG.
A series of operations of the verification thread is repeatedly performed until an end instruction is issued from the main thread. Further, when an end instruction is issued from the main thread, the verification thread is discarded from the memory.

Step S51: The verification unit 16 checks the number of elements in the verification queue 15 at regular intervals. When the verification unit 16 determines that the element of the verification queue 15 is empty, the operation proceeds to step S52. On the other hand, when the verification unit 16 determines that there is an element in the verification queue 15, the operation proceeds to step S54.

Step S52: The verification unit 16 replaces the text data indicating the verification target file name with the NULL value, and requests the main thread to update the progress status of the falsification verification (see step S12). As a result, the tampering verification progress display 73 shown in FIG. 3 is deleted.

Step S53: Since the verification queue 15 is empty, the verification unit 16 returns control to the OS and enters an idling state. This idling state can reduce the processing load. When the OS side detects the elapse of a predetermined time, the verification unit 16 is restarted. The restarted verification unit 16 returns to Step S51 and resumes operation.

Step S54: The verification unit 16 takes out the head element from the verification queue 15.

Step S55: The verification unit 16 substitutes the file name of the extracted element into text data indicating the verification target file name. Subsequently, the verification unit 16 requests the main thread to update the progress status of the falsification verification (see step S12). As a result, the file name currently being verified is displayed in the progress display 73 of the verification process shown in FIG.

Step S56: The verification unit 16 obtains the number of registrations in the verification list (the number of verified files). Further, the verification unit 16 accumulates the total number of registrations (total number of target files) in the verification queue 15 from the start of the program to the present. In addition, the verification unit 16 obtains a ratio between the number of verified files and the total number of target files. The verification unit 16 requests the main thread to rewrite the progress bar 74 according to this ratio (see step S12).
As a result, the progress bar 74 shown in FIG. 3 displays a bar indicating the progress of the verification process.

Step S57: The data extraction unit 21 in the verification unit 16 acquires the reference information and type information of the target file from the verification queue 15. The data extraction unit 21 accesses the actual data of the target file based on the reference information. Further, the data extraction unit 21 classifies the actual data into segments according to the type information. According to this classification, the data extraction unit 21 extracts a data area to be falsified and verified, verification data, and display image data.

Step S58: The collation unit 22 in the verification unit 16 collates the data area with the verification data and determines whether the data area has been tampered with.
Note that the collation unit 22 performs alteration determination for each information unit (EXIF information, etc.), the entire image unit, and the cropped image unit in the file.

Step S59: The pixel number conversion unit 23 in the verification unit 16 converts the number of pixels of the display image data obtained in Step S57 according to the display size of the display area 77 shown in FIG. The pixel number conversion unit 23 temporarily stores the display image after the pixel number conversion in the temporary storage unit 24.

Step S60: The verification unit 16 constructs report data by collecting the reference information of the display image in the temporary storage unit 24 as a result of the falsification verification by the verification unit 22.

Step S61: The verification unit 16 adds the report data constructed in step S60 to the verification list. Subsequently, the verification unit 16 requests the main thread to redraw the verification list (see step S6). By this processing, the display of the list data 82 of the verification list shown in FIG. 3 is increased line by line. Note that when the display width of the window is exceeded, the display is switched to scroll bar display. After such an operation, the verification unit 16 returns the operation to step S51.

<< Effects of the embodiment >>
In this embodiment, the user only needs to perform a file / folder addition operation. Subsequent searches and verifications are automatically performed according to the number of elements in the search queue 13 and the verification queue 15. Therefore, the user needs to learn at least a file / folder addition operation in the alteration verification work. Therefore, it becomes possible to master the tampering verification work in a short time.

  Further, in the present embodiment, as shown in FIG. 3, both the progress status of the search process and the progress status of the verification process are displayed. Therefore, the user can grasp the progress status of both processes.

  In particular, the user can determine the availability of search processing. Therefore, the user can add files and folders to the search queue 13 with good timing according to the availability of the search process. As a result, it is possible to efficiently perform falsification verification for a large number of files and folders.

  In the present embodiment, the search process and the verification process are multi-threaded. Therefore, the search process and the verification process can be processed in parallel in a pipeline manner. Normally, the search process accesses the actual file data. Therefore, the access time to a physical device such as a hard disk becomes dominant. As a result, the CPU in the computer often waits for access. On the other hand, in the verification process, it is necessary to access the actual data of the file again. However, in a general OS, the actual data accessed in the immediately preceding search process is held in a file cache on the memory. Therefore, in the verification process, actual data may be read from the file cache. Therefore, the access time to the physical device hardly occurs. Rather, in the verification process, a complicated calculation process is mainly performed for falsification verification, so that the processing load is concentrated on the CPU side.

  Therefore, during the period when the physical device is accessed in the search process, the verification process can be efficiently advanced by effectively using the CPU waiting for access. As a result, the total processing time for falsification verification can be shortened.

  In the present embodiment, the display image being processed can be displayed in a frame advance according to the progress of the search process and the verification process. Therefore, the user can visually grasp to which file the falsification verification work has progressed while viewing the display of the display image.

  Furthermore, in the present embodiment, the display size of the display image is adjusted in any of the search unit 14, the verification unit 16, and the display control unit 18. Therefore, the display sizes of the display images that differ depending on the files can be made uniform. As a result, the problem that the display size fluctuates drastically in the progress display of the frame invoice can be solved.

  In the present embodiment, a search queue 13 is provided. The search queue 13 can hold the remaining amount of money between the input processing unit 12 and the search unit 14 while waiting for a search. As a result, the input processing unit 12 can add files / folders to the search queue 13 at any time independently of the operation of the search unit 14.

  Furthermore, in this embodiment, a verification queue 15 is provided. The verification queue 15 makes it possible to hold the amount of money remaining between the search unit 14 and the verification unit 16 while waiting for verification. As a result, the search unit 14 can add the target file to the verification queue 15 independently of the operation of the verification unit 16.

  In the present embodiment, when the search unit 14 finds a subfolder during the search in the folder, the search unit 14 sends the subfolder back to the search queue 13. As a result, the search unit 14 can perform a search process later in the subfolder. By repeating this operation, the search process can be performed without omission while tracing the subfolders in order to the lower hierarchy.

  Further, in the present embodiment, the search unit 14 determines the type of file. The search unit 14 registers this type information in the verification queue 15. Therefore, the data extraction unit 21 can acquire this type information from the verification queue 15 when verifying the alteration of the file. Therefore, it is not necessary to determine the file type again in the falsification verification. Therefore, the processing load of tampering verification can be reduced.

In the present embodiment, the temporary storage unit 24 temporarily stores the display image. Therefore, the display control unit 18 can quickly switch and display the display image by accessing the temporary storage unit 24.
With the above effects, it is possible to improve the usability and agility of tampering verification.

<< Additional items of embodiment >>
In the above-described embodiment, the case where the falsification verification work is executed using a single computer has been described. However, the present invention is not limited to this. For example, in the case of a server system constructed on the Internet, the verification apparatus 11 may be realized by functioning a plurality of server computers in a distributed manner. Further, for example, part or all of the configuration of the verification apparatus 11 may be realized by hardware.

  In the above-described embodiment, the display image is stored in the temporary storage unit 24, thereby speeding up the display of the display image. However, the memory capacity necessary for the temporary storage unit 24 may be saved by creating and temporarily storing the display image immediately before displaying it.

  In the above-described embodiment, a hash function is used as a method for calculating verification data. However, the present invention is not limited to this. In general, any calculation method that calculates different verification data depending on data alteration may be used.

  In the above-described embodiment, the first-in first-out queue is described. However, the invention is not limited to this. A last-in first-out queue may be used. In this case, it is possible to search and / or verify from the file / folder added later.

  As described above, the present invention is a technique that can be used for a verification program or the like.

2 is a block diagram showing a verification device 11. FIG. It is a flowchart which shows the main thread of a verification program. It is a figure which shows the example of a progress display of a search process and a verification process. It is a figure which shows the example of a display of verification result. It is a flowchart which shows operation | movement of a search thread. It is a flowchart which shows operation | movement of a verification thread.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 ... Verification apparatus, 12 ... Input processing part, 13 ... Search queue, 14 ... Search part, 15 ... Verification queue, 16 ... Verification part, 18 ... Display control part, 21 ... Data extraction part, 22 ... Collation part, 23 ... Pixel number conversion unit, 24... Temporary storage unit

Claims (16)

A search unit for searching for files subject to tampering verification;
A verification unit that performs falsification verification on the file searched by the search unit;
A verification apparatus comprising: a display control unit configured to display both a progress status of file search by the search unit and a progress status of falsification verification by the verification unit on a display screen. The verification apparatus according to claim 1,
At least some of the files include image data;
The display control unit displays a display image of the image data on the display screen according to progress of at least one of the file search and the falsification verification. The verification apparatus according to claim 2,
At least one of the search unit, the verification unit, and the display control unit generates the display image by converting the number of pixels of the image data. The verification apparatus according to any one of claims 1 to 3,
A search waiting management unit for managing search waiting of the search unit;
A verification waiting management unit for managing the verification waiting of the verification unit,
The search unit takes out the search wait, searches for the file that is subject to falsification verification, registers it in the verification wait,
The verification device, wherein the verification unit takes out the verification wait and performs falsification verification. The verification apparatus according to claim 4,
When the search unit detects a subfolder in the search awaiting folder, the search unit registers the subfolder in the search awaiting. In the verification device according to claim 4 or 5,
A verification apparatus comprising: an input processing unit for registering a file or a folder waiting for the search according to an instruction input from the outside. The verification apparatus according to any one of claims 1 to 6,
The verification device, wherein the search unit searches for a file to be subjected to falsification verification by determining whether or not the file is a specific file predetermined as a falsification verification target. A search unit for searching for a file subject to falsification verification from data indicating a file type in the file;
According to the analysis result of the file type, from the searched file, a data area to be subjected to falsification verification, verification data for falsification of the data area, and a data extraction unit for extracting image data;
A collation unit for determining falsification of the data region by collating the data region extracted by the data extraction unit with the verification data;
A temporary storage unit for temporarily storing a display image corresponding to the image data extracted by the data extraction unit;
A verification apparatus comprising: a display control unit configured to display a result of falsification verification by the verification unit and the display image temporarily stored in the temporary storage unit on a display screen. A search step for searching for files subject to tampering verification;
A verification step for performing falsification verification on the file searched by the search step;
A verification program for causing a computer to execute a display control step of displaying both a progress status of file search by the search step and a progress status of falsification verification by the verification step on a display screen. The verification program according to claim 9,
At least some of the files include image data;
In the display control step, a display image of the image data is displayed on the display screen according to the progress of at least one of the file search and the falsification verification. The verification program according to claim 10,
At least one of the search step, the verification step, and the display control step converts the number of pixels of the image data to generate the display image. The verification program according to any one of claims 9 to 11,
A search wait management step for managing the search wait of the search step;
A verification wait management step for managing the verification wait of the verification step,
In the search step, the search wait is read, the file that is subject to falsification verification is searched, registered in the verification wait,
In the verification step, the waiting for verification is read to perform falsification verification. The verification program according to claim 12,
In the search step, when a subfolder is detected in the search awaiting folder, the subfolder is registered in the search awaiting. In the verification program according to claim 12 or claim 13,
A verification program for causing a computer to execute an input processing step of registering a file or a folder waiting for a search according to an instruction input from the outside. The verification program according to any one of claims 9 to 14,
A verification program characterized in that, in the search step, a file to be subjected to falsification verification is searched by determining whether or not the file is a specific file predetermined as a falsification verification target. A search step for searching for a file subject to falsification verification from data indicating a file type in the file;
According to the analysis result of the file type, a data extraction step of extracting a data area to be subjected to falsification verification, verification data for falsification of the data area, and image data from the searched file,
A collation step of determining falsification of the data area by collating the data area extracted by the data extraction step with the verification data;
A temporary storage step of temporarily storing a display image corresponding to the image data extracted by the data extraction step;
A verification program for causing a computer to execute a display control step of displaying a result of falsification verification in the verification step and the display image temporarily stored in the temporary storage step on a display screen.

Images