JP2017143432A - Data structure, and data processing apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique for ensuring confidentiality of information, while trying to improve efficiency of system maintenance.SOLUTION: A data processing apparatus includes an acquisition unit, a classification unit, an addition unit, an encryption processing unit, and a generation unit. The classification unit generates multiple fields by sectioning the data, where data values are ordered according to a sequence, according to a regulation rule regulated based on the order of arrangement of data values in the sequence. The addition unit adds a header indicating the content of the field to each of the multiple fields. The encryption processing unit encrypts the data value included in at least one field out of the multiple fields. The data structure of data thus generated includes multiple fields 30 and multiple field headers 32, and the data value included in at least one field out of the multiple fields is encrypted.SELECTED DRAWING: Figure 3

Description

  The present invention relates to a data structure having an array structure and a data processing apparatus.

  2. Description of the Related Art There are known systems that capture and manage images used for medical purposes, and information management systems that are systems that measure and manage vital signs. In an information management system, it is required to ensure the confidentiality of information to be managed, that is, information such as images and vital signs.

  As a technique for ensuring the confidentiality of information, as described in Patent Document 1, there is a technique for covering a part of a selected page in document data and encrypting the covered part. Proposed.

Special table 2009-508240 gazette

  On the other hand, since the information management system is used for medical purposes, it is necessary to maintain the accuracy of captured images and measured vital signs, and maintenance is important. In maintenance, it is efficient that a person in charge of maintenance confirms what information is managed by the information management system.

  In order to ensure the confidentiality of information managed by the information management system, it is assumed that the technique described in Patent Document 1 is applied to the information management system. In this case, in order to confirm what information the person in charge of maintenance manages with the information management system, it is necessary to decode the covered portion of the data.

  However, the person in charge of maintenance often does not know the decryption code, cannot recognize what kind of information is managed by the information management system, and cannot perform maintenance efficiently. there were.

In addition, when the person in charge of maintenance knows the decryption code, all the covered areas can be browsed, which makes it difficult to ensure the confidentiality of information.
In other words, the conventional technique has a problem that it is difficult to ensure the confidentiality of information while making it possible to recognize the minimum necessary information.

  Accordingly, an object of the present invention is to provide a technique for ensuring the confidentiality of information while making it possible to recognize at least necessary information.

One aspect of the present invention made to achieve the above object relates to a data structure of data in which data values are arranged according to an array.
This data structure includes a plurality of field parts (30) and a plurality of field header parts (32).

  The plurality of field portions are obtained by partitioning data according to a regulation rule defined based on the order of arrangement of data values in the array. The plurality of field header portions represent the contents of each of the plurality of field portions.

Further, in the data structure, the data value included in at least one field portion of the plurality of field portions is encrypted.
In such a data structure, the unencrypted field portion data value can be browsed without being decrypted. For this reason, the user can grasp a part of the entire image of the data from the data value of the unencrypted field portion.

  Moreover, since the field header portion represents the contents of each field portion, such a data structure allows the user to specify which field portion the decrypted field portion does not have to be decrypted. It is possible to recognize whether such information is included, and by extension, what kind of information the data is.

Therefore, according to such a data structure, the user can be made to recognize the content of the minimum necessary data.
On the other hand, according to such a data structure, since the data value included in the encrypted field portion cannot be decrypted unless the decryption code is known, the confidentiality of the entire data can be ensured.

That is, by using such a data structure, it is possible to ensure the confidentiality of information while making it possible to recognize the minimum necessary information.
One aspect of the present invention includes an acquisition unit (22, S110), a classification unit (22, S120), an addition unit (22, S130), an encryption processing unit (22, S140, S150), a generation A data processing device including a unit (22, S160) may be used.

  The acquisition unit acquires data in which data values are arranged according to the array. The classification unit generates a plurality of field units in which each of the data values in the data acquired by the acquisition unit is classified according to a specified rule defined based on the order of arrangement of the data values in the array.

  The adding unit adds a field header portion representing the contents of each of the plurality of field portions generated by the classification unit. The encryption processing unit encrypts a data value included in at least one field unit among the plurality of field units generated by the classification unit.

  The generation unit includes a plurality of field units (30) and a plurality of field header units (32) based on the plurality of field units, the field header unit, and the encrypted field unit. The data in which the data value contained in at least one field part is encrypted is generated.

  According to such a data processing apparatus, the acquired data can be converted into data having the above-described data structure. For this reason, according to the data processor, the same effect as the data structure mentioned above can be acquired.

It is a block diagram which shows schematic structure of a data processor. It is a flowchart which shows the process sequence of a data generation process. It is explanatory drawing which shows the data structure of the specific data in 1st Embodiment. It is a flowchart which shows the process sequence of a display process. It is a figure explaining the data value decoded in the specific data of 1st Embodiment, (A) is a figure explaining the pixel decoded with the authentication information B, (B) is decoded with the authentication information A It is a figure explaining a pixel. It is a figure explaining the image based on the data value decoded in 1st Embodiment. It is explanatory drawing which shows the data structure of the specific data in 2nd Embodiment. It is a figure explaining the data value decoded in the specific data of 2nd Embodiment, (A) is a figure explaining the pixel which is not encrypted, (B) is a pixel decoded with the authentication information B It is a figure explaining. It is a figure explaining the data value decoded in the specific data of 2nd Embodiment, (A) is a figure explaining the pixel decoded with the authentication information A, (B) is based on the decoded data value It is a figure explaining an image. It is explanatory drawing which shows the data structure of the specific data in 3rd Embodiment. It is a figure explaining the data value decoded in the specific data of 3rd Embodiment, (A) is a figure explaining the pixel decoded with the authentication information B, (B) is decoded with the authentication information A It is a figure explaining a pixel. It is explanatory drawing which shows the state which decoded the specific data of the modification. It is explanatory drawing explaining the data structure in the specific data of a modification. It is explanatory drawing explaining an example of an interlace format, (A) is a figure which shows a data structure, (B) is a figure explaining the decoded pixel. It is explanatory drawing explaining an example of an interlace format, (A) is a figure which shows a data structure, (B) is a figure explaining the decoded pixel. It is explanatory drawing explaining an example of an interlace format, (A) is a figure which shows a data structure, (B) is a figure explaining the decoded pixel. It is a figure which illustrates waveform data as specific data.

Embodiments of the present invention will be described below with reference to the drawings.
[First Embodiment]
<1.1 Data processing device>
A data processing apparatus 1 illustrated in FIG. 1 is an apparatus that acquires original data that is one of data and generates specific data. Furthermore, the data processing device 1 is a device that executes display based on specific data.

The specific data is data obtained by encrypting at least a part of the data value of the original data, and is data having a data structure described later in detail.
The data processing apparatus 1 includes a data acquisition unit 12, a display unit 14, an information reception unit 16, an output unit 18, a storage unit 20, and a control unit 22.

  Among these, the data acquisition unit 12 acquires original data. The original data is data in which data values are arranged according to a predetermined array. The data value is a discretized value. An array means that the order is determined.

  The original data in the present embodiment is image data captured by an imaging device. Image data is data in which pixel values are arranged as data values. The pixel value is a value representing the intensity of luminance at each pixel.

  The image data in the present embodiment may be a medical image, for example. A medical image is an image of a human body or an image of measurement results. The medical image includes, for example, an image taken by a camera, an image taken by X-ray, an image taken by computed tomography, a nuclear magnetic resonance image, an image taken by an endoscope, and the like.

The display unit 14 displays information based on a signal from the control unit 22. The display unit 14 includes, for example, a liquid crystal display.
The information receiving unit 16 is a well-known mechanism that receives input of information from the outside. As this information reception part 16, well-known input mechanisms, such as a keyboard, a mouse | mouth, and a touch panel, are included, for example. In addition, when the information reception part 16 is comprised with the touch panel, the information reception part 16 may be comprised integrally with the display part 14. FIG.

  The output unit 18 outputs information according to a signal from the control unit 22. A network communication network, a printer, an external storage device, or the like can be considered as an output destination from which the output unit 18 outputs information.

The storage unit 20 is a non-volatile storage device configured to be able to read and write stored contents. The storage unit 20 stores various processing programs and various data.
The control unit 22 includes a known computer having at least a ROM 24, a RAM 26, and a CPU 28.

Among these, the ROM 24 of the control unit 22 stores a program for the control unit 22 to execute data generation processing for generating specific data. The ROM 24 of the control unit 22 stores a program for the control unit 22 to execute a display process for executing display based on specific data.
<1.2 Data generation processing>
When the data generation process illustrated in FIG. 2 is started, the control unit 22 first acquires original data via the data acquisition unit 12 (S110).

  Subsequently, the control unit 22 generates a plurality of field units 30 (see FIG. 3) in which the original data acquired in S110 is classified according to the regulation rule (S120). The prescribed rule is a rule prescribed in advance based on the order of arrangement of data values in the array of original data. The prescription rule in the embodiment is to divide into each field in the interlace format. The interlace format is a format related to image scanning, and is a format in which scanning of an image is performed in a discrete manner for each specified pixel. In the present embodiment, Adam7, which is a well-known algorithm that scans in the prescribed pixel order, may be used as an interlaced implementation method.

  The field portion is obtained by dividing the original data according to a specified rule. Each of the field units 30 in the present embodiment is a field in an interlace format.

  Further, the control unit 22 adds a field header unit 32 (see FIG. 3) to each of the plurality of field units 30 generated in S120 (S130). The field header portion 32 is information representing the contents of the field portion 30 and is provided for each field portion 30. The contents of the field part include the data size included in each field, transfer information of each field, and the like.

  Subsequently, the control unit 22 acquires authentication information via the information receiving unit 16 (S140). The authentication information is information for identifying a user, for example, an ID and a password. In the present embodiment, authentication information is acquired for each group of field parts 30 to be encrypted.

  Then, based on the authentication information acquired in S140, the control unit 22 performs encryption of the data value included in at least one field unit 30 among the plurality of field units 30 generated in S120 (S150). The encryption in S150 is performed on the data values included in the prescribed number of field portions 30 among the plurality of field portions 30. The prescribed number in the present embodiment is the number of field portions 30. In S150, the data values included in all the field portions 30 are encrypted.

  Encryption is a process that makes it impossible for a third party who does not know the authentication information to view the data. In the present embodiment, as shown in FIG. 3, among the plurality of field parts 30, two 1/64 part fields and three field parts 30 (ie, the first group) of 1/32 part fields are used. , Encryption is performed using the authentication information B of the authentication information acquired in S140. Of the plurality of field parts 30, the remaining four field parts 30 (that is, the second group) are encrypted using the authentication information A of the authentication information acquired in S140. These pieces of authentication information are added to the field unit 30.

Subsequently, the control unit 22 reconstructs and stores the original data on which the steps from S120 to S150 have been executed as specific data (S160).
The specific data is data in which data values are arranged according to an array, and is data in which at least a part of the field part 30 is encrypted. As shown in FIG. 3, the specific data in the present embodiment includes a plurality of field portions 30, a field header portion 32 for each field portion 30, and a file header portion 34 that represents the contents of the entire data.

  In the present embodiment, among the plurality of field portions 30, the first group of field portions 30 is encrypted using the authentication information B, and the second group of field portions 30 is encrypted with the authentication information B. Are encrypted using authentication information A which is different information.

  Also, the reconstruction is to generate data including a plurality of field parts 30 and a plurality of field header parts 32, and in the present embodiment, it means that original data is converted into specific data. is there.

  In S160, the storage destination for storing the specific data may be the storage unit 20 or an external storage device. The external storage device includes a server connected to the data processing device 1.

Thereafter, the control unit 22 ends the data generation process.
That is, in this data generation process, the original data is converted into interlaced data, and a part of the field part 30 in the interlaced data is encrypted using the authentication information A. Further, the remaining field part 30 is encrypted using the authentication information B. Then, specific data including these encrypted field portions 30 is generated.

Therefore, as shown in FIG. 3, the specific data includes a plurality of field parts 30, a field header part 32, and a file header part 34, and a data structure in which a data value included in the field part 30 is encrypted. It becomes.
<1.3 Display processing>
Next, when the display process shown in FIG. 4 is started, the control unit 22 first acquires specific data designated via the information receiving unit 16 (S210).

Subsequently, the control unit 22 acquires authentication information via the information receiving unit 16 (S220). Hereinafter, the authentication information acquired in S220 is referred to as input information.
And the control part 22 collates the input information acquired by S220 with the authentication information contained in the specific data acquired by S210, and determines whether authentication was successful (S230). In the present embodiment, if the authentication information included in the specific data matches the input information, it is determined that the authentication is successful, and if the authentication information does not match, the authentication may not be successful.

As a result of the determination in S230, if the authentication is not successful (S230: NO), the control unit 22 displays an image encrypted based on the specific data on the display unit 14 (S240).
Thereafter, the control unit 22 ends the display process.

  On the other hand, if the result of determination in S230 is that authentication has succeeded (S230: YES), the control unit 22 decrypts the data value contained in the field unit 30 that has been successfully authenticated (S250). Subsequently, the control unit 22 displays an image based on the decoded data value on the display unit 14 (S260).

  That is, when the authentication for the authentication information B is successful among the plurality of authentication information, in S260, the control unit 22 is included in the field unit 30 encrypted with the authentication information B as shown in FIG. Then, an image based on the data value decoded in S250 is displayed on the display unit 14. If the authentication information A among the plurality of authentication information is successfully authenticated, in S260, the control unit 22 is included in the field unit 30 encrypted with the authentication information A as shown in FIG. Then, an image based on the data value decoded in S250 is displayed on the display unit 14.

Thus, when displaying an image based on some data values, pixels corresponding to undecoded data values may be complemented based on the decoded data values.
On the other hand, when the authentication is successful in both the authentication information A and the authentication information B among the plurality of authentication information, in S260, the control unit 22 is included in all the field units 30 as shown in FIG. An image based on the data value (that is, all pixel values) is displayed on the display unit 14.

Note that the difference in hatching in FIGS. 5A, 5 </ b> B, and 6 indicates a difference in the field portion 30.
Thereafter, the control unit 22 ends the display process.

That is, in the display process, the data value included in the field unit 30 that has been successfully authenticated is decoded, and an image based on the decoded data value is displayed.
[1.4 Effects of First Embodiment]
(1A) Therefore, if only a part of a plurality of pieces of authentication information is taught to a part of a user such as a person in charge of maintenance, the user can decrypt only a part of the specific data, and the specific data Cannot be decrypted.

Therefore, a user who knows part of the authentication information can recognize the outline of what the specific data is, that is, the minimum necessary information.
As a result, it is possible to improve the efficiency of maintenance of a system that captures and manages images used for medical purposes.

(1B) On the other hand, a user who knows a part of authentication information in the authentication information cannot grasp the entire contents of the specific data.
Therefore, according to the specific data having the data structure described above, the confidentiality of the data can be ensured.

  (1C) In other words, according to the specific data having the above-described data structure, a system that captures and manages an image used for medical purposes by changing a decodable range by properly using a plurality of pieces of authentication information. It is possible to ensure the confidentiality of information while enabling the user to recognize the minimum necessary information.

  (1D) Furthermore, in the display process, when an image based on the decoded data value and included in only the field unit 30 that has been successfully authenticated is displayed on the display unit 14, pixels corresponding to the undecoded data value are displayed. If it complements based on the decoded data value, the visibility of the image can be improved while ensuring the confidentiality of the information.

(1E) In addition, if the user knows all the authentication information, the entire contents of the specific data can be recognized.
[Second Embodiment]
The second embodiment mainly differs from the first embodiment in the data structure of specific data. For this reason, in this embodiment, the data structure of specific data different from the first embodiment will be described.

<2.1 Specific data>
The specific data of the present embodiment includes a plurality of field parts 30, a field header part 32, and a file header part 34, as shown in FIG.

In the present embodiment, the data value included in at least one field portion 30 among the plurality of field portions 30 is not encrypted.
That is, in S150 of the data generation process, two field units 30 among the plurality of field units 30 are encrypted as the first group using the authentication information B. Then, the four field units 30 among the plurality of field units 30 are encrypted as the second group using the authentication information A. For the remaining one field part 30, specific data is generated in S160 without encryption.

Further, in S240 of the display process, the control unit 22 displays an image based on the data value of the field unit 30 that is not encrypted as shown in FIG.
On the other hand, when the authentication with respect to the authentication information B among the plurality of authentication information is successful, in S260 of the display process, the control unit 22 displays the data value of the unencrypted field unit 30 as shown in FIG. And an image based on the data value included in the field part 30 encrypted with the authentication information B and decrypted in S250, is displayed on the display part 14. Further, when the authentication for the authentication information A among the plurality of authentication information is successful, in S260 of the display unit, the control unit 22 displays the data value of the unencrypted field unit 30 as shown in FIG. And an image based on the data value included in the field part 30 encrypted with the authentication information A and decrypted in S250 is displayed on the display part 14.

  When both authentication information A and authentication information B are successfully authenticated, the control unit 22 displays images based on the data values included in all the field units 30 as shown in FIG. 9B. To display.

Note that the difference in hatching in FIGS. 8A, 8B, 9A, and 9B means the difference in the field portion 30. FIG.
[2.2 Effects of Second Embodiment]
According to the specific data having such a data structure, the user can grasp the data value of the unencrypted field portion 30 without decrypting it. For this reason, the user can grasp a part of the whole specific data from the data value of the field part 30 which is not encrypted.

On the other hand, if the user knows all the authentication information, the user can recognize the entire contents of the specific data.
[Third Embodiment]
The third embodiment is mainly different from the first embodiment in the data structure of specific data. For this reason, in this embodiment, the data structure of specific data different from the third embodiment will be described.

<3.1 Specific data>
As shown in FIG. 10, the specific data of the present embodiment includes a file header portion 34, a main body field portion 40, and a duplicate field portion 42.

  The main body field part 40 has all the field parts 30. That is, the main body field portion 40 is all the field portions 30 in which the data values included in the original data are classified according to the regulation rule.

  The duplicate field part 42 is a field part 30 having the same contents as a part of the field part 30 included in the main body field part 40. The field part 30 having the same contents is at least one field part 30 having overlapping positions and data values in the array. That is, each of the field parts 30 in the overlapping field part 42 has the same data value as the field part 30 included in the main body field part 40. In the present embodiment, the number of field portions 30 of the overlapping field portion 42 is three.

  In the present embodiment, each field portion 30 in the main body field portion 40 is encrypted using the authentication information B. Each of the field parts 30 in the duplicate field part 42 is encrypted using authentication information A different from the authentication information B.

  That is, in S150 of the data generation process, each field part 30 in the main body field part 40 is encrypted using the authentication information A as the second group. Each of the field parts 30 in the duplicate field part 42 is encrypted using the authentication information B as the first group.

Furthermore, in S240 of the display process, the control unit 22 displays an image encrypted based on the specific data on the display unit 14.
On the other hand, in S260 of the display process, if the authentication by the authentication information B is successful, the control unit 22 decrypts the data value of the field unit 30 in the duplicate field unit 42 as shown in FIG. An image based on the decoded data value is displayed on the display unit 14. If the authentication information A is successfully authenticated, in S260, the control unit 22 decrypts the data value included in the field unit 30 in the main body field unit 40 as shown in FIG. An image based on the decoded data value is displayed on the display unit 14.

Note that the difference in hatching in FIGS. 11A and 11B means the difference in the field portion 30.
[3.2 Effects of Third Embodiment]
According to such a data structure, when the duplicate field portion 42 is decoded, a part of the data value can be recognized, and when the main body field portion 40 is decoded, all the data values can be recognized. .

Therefore, according to such a data structure, by using a plurality of pieces of authentication information and changing a decodable range, it is possible to improve the convenience in using the data while ensuring the confidentiality of the data.
[4. Other Embodiments]
As mentioned above, although embodiment of this invention was described, this invention is not limited to the said embodiment, In the range which does not deviate from the summary of this invention, it is possible to implement in various aspects.

  (4.1) In the first to third embodiments, the arrangement in the specific data is described as having 8 rows and 8 columns. However, the arrangement in the specific data is not limited to this.

  For example, the arrangement in the specific data may be 16 rows and 16 columns as shown in FIG. In this case, in the data structure of the specific data, the effect described above can be obtained by increasing the number of field portions 30 as shown in FIG.

Note that the difference in hatching in FIG. 12 means the difference in the field portion 30.
In addition, the arrangement of the specific data is not limited to this, and may be 1 row and M columns, M rows and 1 columns, or M as long as they are arranged in a predetermined order. It may be in row N column. However, M and N are integers of 1 or more.

(4.2) In the above embodiment, the well-known Adam7 is used as the interlaced scanning method, but the interlaced scanning method is not limited to this.
In the interlace scanning method, for example, as shown in FIGS. 14A and 14B, a specific line and a line after a specified number of lines from the specific line are used as the first field. Alternatively, the remaining rows may be used as the second field, and the image may be scanned in a skipped manner.

  Further, the interlace scanning method, for example, as shown in FIGS. 15A and 15B, a specific row and a column after a specified number of columns from the specific row are first It is also possible to use a format in which scanning of an image is performed with a field as a field and the remaining lines as a second field.

  Furthermore, in the interlace scanning method, for example, as shown in FIGS. 16 (A) and 16 (B), a prescribed pixel in a specific row is used as the first field, and all the remaining pixels are used. The second field may be a format in which image scanning is performed in a skipped manner.

Note that the difference in hatching in FIGS. 14B, 15B, and 16B means the difference between the first field and the second field.
(4.3) In the above embodiment, a plurality of field portions 30 are encrypted with one authentication information. However, the object to be encrypted with one authentication information is not limited to this. For example, one authentication information One field part 30 may be encrypted with information. That is, it may be encrypted using different authentication information for each field unit 30.

  (4.4) In the above embodiment, the original data is acquired as image data. However, the target acquired as the original data is not limited to this. The target acquired as the original data may be waveform data whose data value is a value obtained by sampling the amplitude in the waveform, for example, as shown in FIG. This waveform data may indicate a measurement result measured by a measuring device.

(4.5) Part or all of the functions executed by the control unit 22 in the above embodiment may be configured in hardware by one or a plurality of ICs.
(4.6) In the above embodiment, the program is stored in the ROM 24. However, the storage medium for storing the program is not limited to this, and is stored in a non-transitional physical storage medium such as a semiconductor memory. It may be.

  (4.7) Further, the control unit 22 may execute a program stored in a non-transitional tangible recording medium. By executing this program, a method corresponding to the program is realized.

  (4.8) In addition, the aspect which abbreviate | omitted a part of structure of the said embodiment is also embodiment of this invention. Further, an aspect configured by appropriately combining the above embodiment and the modification is also an embodiment of the present invention. Moreover, all the aspects which can be considered in the limit which does not deviate from the essence of the invention specified by the wording described in the claims are the embodiments of the present invention.

(4.9) The symbols used in the description of the above embodiments are also used in the claims as appropriate, but are used for the purpose of facilitating the understanding of the invention according to each claim. It is not intended to limit the technical scope of the invention.
[5. Example of correspondence]
The function obtained by executing S110 of the data generation process corresponds to an example of an acquisition unit. The function obtained by executing S120 corresponds to an example of a classification unit. Furthermore, the function obtained by executing S130 corresponds to an example of an adding unit. The function obtained by executing S140 to S150 corresponds to an example of an encryption processing unit. The function obtained by executing S160 corresponds to an example of a generation unit.

  DESCRIPTION OF SYMBOLS 1 ... Data processing device 12 ... Data acquisition part 14 ... Display part 16 ... Information reception part 18 ... Output part 20 ... Storage part 22 ... Control part 24 ... ROM 26 ... RAM 28 ... CPU 30 ... Field part 32 ... Field header part 34 ... File header part 40 ... Body field part 42 ... Duplicate field part

Claims (8)

An acquisition unit (22, S110) for acquiring data in which data values are arranged according to the array;
A classification unit (22, S120) for generating a plurality of field units obtained by classifying the data acquired by the acquisition unit according to a specified rule defined based on an arrangement order of data values in the array;
An addition unit (22, S130) for adding a field header portion representing the contents of each of the plurality of field portions generated by the classification unit;
An encryption processing unit (22, S140, S150) for encrypting a data value included in at least one of the plurality of field units generated by the classification unit;
Based on a plurality of field parts generated by the classification part, a field header part added by the addition part, and a field part encrypted by the encryption processing part, a plurality of field parts (30), and the plurality of field parts And a generation unit (22, S160) for generating data in which a data value included in at least one field portion of the plurality of field portions is encrypted. , Data processing equipment. A data structure of data in which data values are arranged according to an array,
A plurality of field portions (30) that divide the data according to a rule defined based on an order of arrangement of data values in the array;
A plurality of field header portions (32) representing the contents of each of the plurality of field portions,
A data structure in which a data value included in at least one field portion of the plurality of field portions is encrypted.   The data structure according to claim 2, wherein one field part of the plurality of field parts is not encrypted. Of the plurality of field parts, the field part in which the data value is encrypted is:
4. The data structure according to claim 2, further comprising authentication information that is information used for authentication. The authentication information is:
The data structure according to claim 4, wherein the data structure is defined for each field part. An overlapping field portion (42) that is an arrangement in the array and at least one field portion where the data values overlap;
In the plurality of field parts, all field parts other than the duplicate field parts are set as body field parts (40),
The data structure according to claim 4 or 5, wherein authentication information for the main body field portion is different from authentication information for the duplicate field portion. The data value is a pixel value;
The field part is
The data structure according to any one of claims 2 to 6, which is a field in an interlace format.   The data structure according to any one of claims 2 to 6, wherein the data value is a value obtained by sampling an amplitude in a waveform.