JP2005286823A - Image input device, communication system, control method, computer program, and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To confirm whether a digital image in an image input device (a digital camera, a digital video camera, a mobile phone with a camera, or the like) is an original one, by preventing only the alteration detecting information (hash values, or the like) of the digital image from being altered as much as possible. <P>SOLUTION: Alteration detecting information is created by performing predetermined calculation (hash computation for example) with respect to a digital image, and this alteration detecting information is transmitted to an image management device on a network. Moreover, the image input device has a memory card portion for fitting in a memory card into which digital images are input, and manages the possibility of alteration of input digital images by managing attachment and removal of this memory cards. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image input device (digital camera, digital video camera, camera-equipped mobile phone, etc.), a communication system, and the like that prevent falsification of digital images.

Currently, various methods for preventing tampering of digital images have been proposed. For example, Patent Documents 1 to 4 propose a method for preventing falsification of a digital image using falsification detection information generated from a hash value or the like. Here, the hash value is a value obtained by a hash function that is a one-way function. Typical hash functions include MD5 (Message Digest 5) and SHA (Secure Hash Algorithm).
JP 2002-244924 A JP 2003-198540 A JP 2003-198542 A JP 2003-198543 A

  However, in the above method, since the falsification detection information (hash value and the like) is managed together with the digital image, only the falsification detection information may be falsified. If the falsification detection information is falsified, the digital image is falsified even if it is not falsified.

  Therefore, the present invention can prevent falsification of only digital image falsification detection information (hash value, etc.) as much as possible, and can digitally store digital images in an image input device (digital camera, digital video camera, camera-equipped mobile phone, etc.). An object is to enable confirmation that an image is an original digital image.

  In order to solve the above problems, an image input apparatus according to the present invention includes an image input unit that inputs a digital image, an instruction input unit that inputs a predetermined instruction, and an instruction input by the instruction input unit. A falsification detection information generating means for generating falsification detection information by executing a predetermined calculation on the digital image, and an image management apparatus in which the falsification detection information is connected via a predetermined network. And a control means for controlling the predetermined calculation and the transmission operation of the communication means.

An image input apparatus according to the present invention includes an image input means for inputting a digital image;
In response to the predetermined instruction input by the instruction input means, an instruction input means for inputting a predetermined instruction, a communication means for performing information communication with an image management apparatus connected via a predetermined network, and Control means for controlling the communication means so that the digital image is transmitted to the image management device, and the digital image has falsification detection information calculated on the basis of the digital image in the image management device. , Managed.

  Furthermore, the communication system according to the present invention receives and manages an image input device that receives a digital image and can communicate with other devices on the network, and related information related to the digital image input to the image input device. In the communication system having the image management device, the image input device responds to an instruction input by the image input means for inputting a digital image, an instruction input means for inputting a predetermined instruction, and the instruction input means. The falsification detection information generating means for generating falsification detection information by executing a predetermined calculation on the digital image, and the image in which the falsification detection information is connected via a predetermined network. A first communication unit that transmits to the management device; and a control unit that controls the predetermined calculation and a transmission operation of the first communication unit. Management device, characterized in that it comprises a second communication means for receiving the tampering detection information, and image information management means for managing the falsification detection information for each digital image the input.

  The communication system according to the present invention receives a digital image and receives an image input device capable of communicating with other devices on the network, and receives the digital image input to the image input device, and performs predetermined processing. A communication system having an image management apparatus for managing, wherein the image input apparatus is connected to an image input means for inputting a digital image, an instruction input means for inputting a predetermined instruction, and a predetermined network. In response to the predetermined instruction input by the instruction input means and a first communication means for performing information communication with the image management apparatus, the digital image is transmitted to the image management apparatus. Control means for controlling the first communication means, wherein the image management device is adapted to receive second digital means for receiving the digital image, and to tamper with the digital image. And falsification detection information generating means for generating a use information, characterized in that it comprises an image information management means for managing the falsification detection information for each digital image thus received.

  Furthermore, a control method according to the present invention is a method for controlling an image input device, which is an image input process for inputting a digital image, an instruction input process for inputting a predetermined instruction, and an instruction input in the instruction input process. Accordingly, the falsification detection information generating step for generating falsification detection information by executing a predetermined calculation on the digital image and the falsification detection information are connected via a predetermined network. A communication step for transmitting to the image management apparatus; and a control step for controlling the predetermined calculation and a transmission operation in the communication step.

  In addition, the control method according to the present invention receives and manages an image input device that receives a digital image and can communicate with other devices on the network, and related information related to the digital image input to the image input device. A control method for controlling a communication system having an image management device that performs an image input step of inputting a digital image, an instruction input step of inputting a predetermined instruction, and an input in the instruction input step The falsification detection information generating step for generating falsification detection information by executing a predetermined calculation on the digital image in response to the received instruction and the falsification detection information are connected via a predetermined network. A first communication step for transmitting to the image management apparatus, and a control process for controlling a transmission operation in the predetermined calculation and the first communication step And the image management apparatus includes a second communication step of receiving the falsification detection information, and an image information management step of managing the falsification detection information for each of the input digital images. Features.

  A computer program for realizing these control methods and a computer-readable storage medium storing this computer program are also realized in the present invention.

  According to the present invention, it is possible to prevent falsification of only digital image falsification detection information (hash value, etc.) as much as possible, and the digital image in the image input device (digital camera, digital video camera, camera-equipped mobile phone, etc.) is the original. The digital image can be confirmed.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
FIG. 1 is a diagram showing main components of an image communication system according to the first to fourth embodiments suitable for the present invention. The image communication system in FIG. 1 includes a network 101, an image management server 102, an authentication device 103, wireless LAN access points (AP) 104 and 105, and an image input device 106. The image management server 102 and the authentication device 103 can be configured by a personal computer. In the first to fourth embodiments, the case where the image input device 106 is a digital camera will be described. However, the image input device 106 may be a digital video camera, a mobile phone with a camera, or the like.

  The digital camera 106 in FIG. 1 has a function of performing authentication with the authentication device 103 when communicating with the AP 104. After connecting to the AP 104, the digital camera 106 requests connection to the authentication device 103 set in advance in the AP 104 or the digital camera 106. The authentication device 103 authenticates the digital camera 106 and transmits an authentication result to the AP 104. At this time, the digital camera 106 transmits the user name, password, and the like of the user who is using the digital camera 106 to the authentication device 103. After receiving the authentication result transmitted from the authentication device 103, the AP 104 permits relaying only for communication between the digital camera 106 and the network 101.

  FIG. 2 is a block diagram showing the main components of the digital camera 106. The digital camera 106 conforms to an internal bus 201, an image input unit 202 that captures (captures) a digital image using an imaging device (CCD image sensor, CMOS image sensor, etc.), and a predetermined wireless LAN standard (IEEE802.11). A wireless communication unit 203 for performing wireless communication, a memory card unit 204 for mounting a memory card (a card-like storage medium having a semiconductor memory) as an example of a removable storage medium, and a program stored in the memory 206 are executed. A CPU (Central Processing Unit) 205, a memory 206 for storing programs processed by the CPU 205, an input unit 207 for inputting user instructions, and a display unit 208 such as an LCD (Liquid Crystal Display). The memory 206 stores a program for controlling the procedure described with reference to FIGS. The wireless communication unit 203 can be configured to be removable from the digital camera 106.

  FIG. 3 is a diagram illustrating a processing procedure executed in the image communication system according to the first embodiment.

(Process 301)
The digital camera 106 performs connection and authentication processing with the authentication device 103. During the authentication process, the digital camera 106 transmits the user name and password of the user of the digital camera 106 to the authentication device 102 using the wireless wireless communication unit 203. The authentication device 103 includes a storage device (not shown) such as a hard disk that stores user information that is a combination of a user name and a password that is permitted for authentication, and performs authentication by searching for user information.

(Processing 302)
The transmission and reception of information performed on the network 101 including the information exchanged in the authentication process is performed in units of frames in which data is divided into appropriate lengths and header information including a MAC address of a communication device performing transmission and reception is added. Done. The authentication device 103 stores the MAC address of the digital camera 106 acquired as the transmission source address of the frame transmitted from the digital camera 106 to the authentication device 103 and the user name obtained by the authentication processing as a pair.

(Processing 303)
The digital camera 106 performs connection and authentication processing with the image management server 102. During the authentication process, the digital camera 106 transmits the MAC address of the digital camera 106. Further, the image management server 102 includes a storage device (not shown) such as a hard disk that stores the MAC address of the digital camera 106 that permits authentication, and performs authentication by searching for the MAC address. At this time, the MAC address included in the header information of the frame transmitted from the digital camera 106 to the image management server 102 may be used without the digital camera 106 explicitly transmitting the MAC address.

(Processing 304)
The digital camera 106 receives a user instruction from the input unit 207 and takes a digital image. The input digital image is added with a file name by a predetermined procedure and stored in a storage medium attached to the memory card unit 204.

(Process 305)
The digital camera 106 calculates a hash value of the digital image that is input and stored in the memory card. This hash value becomes falsification detection information.

(Process 306)
The digital camera 106 encrypts the file name and hash value of the digital image with the encryption key A and transmits the encrypted image to the image management server 102. The encryption key A may be a secret key of a secret key encryption method or a public key of a public key encryption method. When the encryption key A is a public key, the encryption key A is a public key of the image management server 102.

  (Process 307) The image management server 102 stores the received hash value and file name for each MAC address of the digital camera 106.

(Processing 308)
The image management server 102 transmits the MAC address of the digital camera 106 to the authentication device 103.

(Process 309)
The authentication device 103 receives the MAC address, searches for a recorded combination of the MAC address and the user name, acquires the user name, and transmits the acquired user name to the image management server 102. At this time, the authentication apparatus 103 may store auxiliary information about the user in advance, and may transmit the stored auxiliary information together.

(Process 310)
The image management server 102 stores the received user name and incidental information together with the already stored hash value.

  After the process 310, the process 310 to the process 310 are repeated according to a user instruction.

  Through the above process, the hash value of the digital image input by the digital camera 106 is stored in the image management server 102. Thereafter, when a digital image is transmitted from the digital camera 106, a hash value of the digital image is calculated. The calculated hash value is compared with the hash value stored in the image management server 102 to determine whether or not they match. If they match, it is confirmed that the digital image is actually taken by the digital camera 106 and has not been tampered with (that is, the original digital image).

  At this time, the hash value and the digital image are associated with each other by the file name and / or the MAC address of the digital camera 106.

<Second Embodiment>
FIG. 4 is a diagram illustrating a processing procedure executed in the image communication system according to the second embodiment.

  Also in the present embodiment, processing is executed by the digital camera 106, the authentication device 103, and the image management server 102, as in the first embodiment. The digital camera 106, the authentication device 103, and the image management server 102 are connected as shown in FIG. 1, and the digital camera 106 has the configuration shown in FIG. 2 as an example.

(Process 401)
The digital camera 106 receives a user instruction from the input unit 207 and executes digital image shooting. A file name is added to the input digital image by a predetermined procedure and stored in a memory card attached to the memory card unit 204. Further, “1” is stored in a predetermined storage area (hereinafter referred to as storage area A) in the memory 206. When a plurality of digital images are input in accordance with a user instruction, the process 401 is repeated for the number of input images. “1” indicates that the memory card is attached to the memory card unit 204, and “0” indicates that it is not attached to the memory card unit 204.

(Processing 402)
The digital camera 106 receives a user instruction from the input unit 207 and switches to the hash transmission mode.

(Process 403)
The digital camera 106 is connected to the authentication apparatus 103 by communication, and authentication processing is executed there. During the authentication process, the digital camera 106 transmits the user name and password of the user of the digital camera 106 to the authentication device 103 using the wireless communication unit 203. The authentication device 103 includes a storage device (not shown) such as a hard disk that stores user information that is a combination of a user name and a password that are permitted to be authenticated, and performs authentication by searching for user information.

(Processing 404)
The transmission and reception of information performed on the network 101 including the information exchanged in the authentication process is performed in units of frames in which data is divided into appropriate lengths and header information including a MAC address of a communication device performing transmission and reception is added. Done. The authentication device 103 is a memory (memory) (not shown) that pairs the MAC address of the digital camera 106 acquired as the transmission source address of the frame transmitted from the digital camera 106 to the authentication device 103 and the user name obtained by the authentication processing. Device).

(Process 405)
The digital camera 106 is connected for communication with the image management server 102 and further performs authentication processing. During the authentication process, the digital camera 106 transmits the MAC address of the digital camera 106. The image management server 102 has a storage device (not shown) such as a hard disk that stores the MAC address of the digital camera 106 that permits authentication, and performs authentication by searching for the MAC address. The digital camera 106 does not explicitly transmit the MAC address, and authentication may be performed using the MAC address included in the header information of the frame transmitted from the digital camera 106 to the image management server 102.

(Process 406)
The digital camera 106 inspects information stored in the storage area A. When the information in the storage area A is “1”, the processing after the processing 407 is performed. When the information in the storage area A is “0”, a warning is output to the output device 208, the process 407 and the subsequent steps are not performed, the hash transmission mode is exited, and the photographing is ready. When the information in the storage area A is “1”, it indicates that the storage medium in which the digital image is stored has not been removed from the memory card unit 204, and thus the stored digital image is very likely to be tampered with. Low. Further, when the information in the storage area A is “0”, it indicates that the storage medium has been removed from the memory card unit 204, and therefore the digital image stored at that time may be falsified. is there. Therefore, in this process, hash transmission is not performed for a digital image that is suspected of being falsified.

(Process 407)
In the digital camera 106, the hash value of the digital image that is input and stored in the memory card attached to the memory card unit 204 is calculated. This hash value becomes falsification detection information. At this time, it may be performed only for the digital image selected by the user using the input unit 207 or may be performed for all images. Alternatively, the hash value calculation process may be executed only for one or more predetermined digital images set in advance.

(Process 408)
The digital camera 106 encrypts the file name and hash value of the digital image with the encryption key B to the image management server 102 and transmits them to the image management server 102. The encryption key B may be a secret key of a secret key encryption method or a public key of a public key encryption method. When the encryption key B is a public key, the encryption key B is a public key of the image management server 102. After transmitting the file name and the hash value to the image management server 102, the digital camera 106 exits the hash transmission mode and returns to a state where it can be photographed.

(Process 409)
The image management server 102 stores the hash value and file name received from the digital camera 106 in a storage device (not shown) for each MAC address of the digital camera 106.

(Processing 410)
The image management server 102 transmits the MAC address of the digital camera 106 to the authentication device 103.

(Processing 411)
The authentication device 103 receives the MAC address from the image management server 102, and searches for a set of the recorded MAC address and user name. Then, the user name is acquired, and the acquired user name is returned to the image management server 102. In this case, the authentication apparatus 103 may store auxiliary information about the user in advance, and may transmit the stored auxiliary information together.

(Process 412)
The image management server 102 stores the received user name and incidental information together with the already stored hash value.

  When the digital camera 106 monitors the removal or insertion of the storage medium in the memory card unit 204 and detects that the memory card has been removed from the memory card unit 204, the digital camera 106 sets the information stored in the storage area A to "0". To do.

  Through the above processing, the hash value of the digital image input from the digital camera 106 is transmitted to the image management server 102 via the network and stored in a storage device (not shown) in the image management server 102. . Thereafter, when the same digital image is input again, the hash value of the digital image is calculated, and the calculated hash value is compared with the hash value stored in the image management server 102. If the two hash values match, it is confirmed that the digital image is actually taken by the digital camera 106 and has not been tampered with (that is, the original digital image). At this time, the hash value and the digital image are associated with each other by the file name and / or the MAC address of the digital camera 106.

<Third Embodiment>
FIG. 5 is a diagram illustrating a processing procedure executed in the image communication system according to the third embodiment.

(Process 501)
The digital camera 106 is connected to the authentication apparatus 103 by communication, and authentication processing is executed there. During the authentication process, the digital camera 106 transmits the user name and password of the user of the digital camera 106 to the authentication device 103 using the wireless communication unit 203. The authentication device 103 includes a storage device (not shown) such as a hard disk that stores user information that is a combination of a user name and a password that are permitted to be authenticated, and performs authentication by searching for user information.

(Processing 502)
The transmission and reception of information performed on the network 101 including the information exchanged in the authentication process is performed in units of frames in which data is divided into appropriate lengths and header information including a MAC address of a communication device performing transmission and reception is added. Done. The authentication device 103 stores the MAC address of the digital camera 106 acquired as the transmission source address of the frame transmitted from the digital camera 106 to the authentication device 103 and the user name obtained by the authentication processing as a pair.

(Process 503)
The digital camera 106 is connected to the image management server 102 via a network through communication, and the image management server 102 performs authentication processing. During the authentication process, the digital camera 106 transmits the MAC address of the digital camera 106 to the image management server 102. The authentication device 103 has a storage device (not shown) such as a hard disk that stores the MAC address of the digital camera 106 that permits authentication, and performs authentication by searching for the MAC address. At this time, the MAC address included in the header information of the frame transmitted from the digital camera 106 to the image management server 102 may be used without the digital camera 106 explicitly transmitting the MAC address.

(Processing 504)
The digital camera 106 receives a user instruction from the input device 207 and takes a digital image. The input digital image is added with a file name by a predetermined procedure and stored in a storage medium attached to the memory card unit 204.

(Process 505)
The digital camera 106 encrypts the digital image and the file name of the digital image with the encryption key C to the image management server 102 and transmits them to the image management server 102. The encryption key C may be a secret key of a secret key encryption method or a public key of a public key encryption method. When the encryption key C is a public key, the encryption key C is a public key of the image management server 102.

(Process 506)
The image management server 102 calculates the hash value of the digital image after decrypting the digital image and the file name of the digital image. This hash value becomes falsification detection information.

(Process 507)
The image management server 102 stores the calculated hash value and the received file name for each MAC address of the digital camera 106.

(Process 508)
The image management server 102 transmits the MAC address of the digital camera 106 to the authentication device 103.

(Process 509)
The authentication device 103 receives the MAC address, searches for a recorded combination of the MAC address and the user name, acquires the user name, and transmits the acquired user name to the server. At this time, the authentication apparatus 103 may store auxiliary information about the user in advance, and may transmit the stored auxiliary information together.

(Processing 510)
The image management server 102 stores the received user name and incidental information together with the already stored hash value.

  After the process 510, the process 504 to the process 510 are repeated according to a user instruction.

  Through the above process, the hash value of the digital image input by the digital camera 106 is stored in the image management server 102. Thereafter, when the same digital image is input again, the hash value of the digital image is calculated, and the calculated hash value is compared with the hash value stored in the image management server 102. If they match, it is confirmed that the digital image is actually taken by the digital camera 106 and has not been tampered with (that is, the original digital image). At this time, the hash value and the digital image are associated with each other by the file name and / or the MAC address of the digital camera 106.

  In this embodiment, a digital image is transmitted for each shooting. However, as described in the second embodiment, when the recording / removal of the recording medium in the memory card unit 204 is detected and the recording medium is not attached / detached, that is, If there is no digital image tampering, one or more digital images may be transmitted.

<Fourth Embodiment>
FIG. 6 is a diagram illustrating a processing procedure executed in the image communication system according to the fourth embodiment.

Further, the digital camera 106, the authentication apparatus 103, and the image management server 102 are connected as shown in FIG. 1, and the digital camera 106 has the configuration shown in FIG. 2 as an example.
Unlike the other embodiments described above, the processing in this embodiment is performed after the hash value of the digital image is stored in the image management server 102.

(Process 601)
The digital camera 106 is connected to the authentication apparatus 103 by communication, and authentication processing is executed there. During the authentication process, the digital camera 106 transmits the user name and password of the user of the digital camera 106 to the authentication device 103 using the wireless communication unit 203. The authentication device 103 includes a storage device 206 such as a hard disk that stores user information that is a combination of a user name and a password that is permitted for authentication, and performs authentication by searching for user information.

(Process 602)
The transmission and reception of information performed on the network 101 including the information exchanged in the authentication process is performed in units of frames in which data is divided into appropriate lengths and header information including a MAC address of a communication device performing transmission and reception is added. Done. The authentication device 103 stores the MAC address of the digital camera 106 acquired as the transmission source address of the frame transmitted from the digital camera 106 to the authentication device 103 and the user name obtained by the authentication processing as a pair.

(Process 603)
The digital camera 106 is communicatively connected to the image management server 102 via a network, and the image management server 102 performs authentication processing. During the authentication process, the digital camera 106 transmits the MAC address of the digital camera 106. The image management server 102 has a storage device (not shown) such as a hard disk that stores the MAC address of the digital camera 106 that permits authentication, and performs authentication by searching for the MAC address. At this time, the MAC address included in the header information of the frame transmitted from the digital camera 106 to the image management server 102 may be used without the digital camera 106 explicitly transmitting the MAC address.

(Process 604)
Upon receiving a user instruction from the input device 207, the digital camera 106 switches from the authentication mode to the image transmission mode.

(Processing 605)
The digital camera 106 encrypts the digital image and the file name of the digital image with the encryption key D to the image management server 102 and transmits them to the image management server 102. The encryption key D may be a secret key of a secret key encryption method or a public key of a public key encryption method. When the encryption key D is a public key, the encryption key D is the public key of the image management server 102.

(Process 606)
After the image management server 102 decrypts the digital image and the file name of the digital image, the hash value of the digital image is calculated. This calculated hash value is compared with the hash value stored in the memory in the image management server 102. If they match, it is confirmed that the digital image is actually taken by the digital camera 106 and has not been tampered with (that is, the original digital image). At this time, the hash value and the digital image are associated with each other by the file name and / or the MAC address of the digital camera 106. If the hash values do not match, that is, if it is determined that the digital image has been tampered with, processing 607 and the subsequent steps are not performed and the digital camera 106 is notified and the process ends. Upon receiving the notification, the digital camera 106 outputs a warning to an output device 208 (for example, a display unit such as a liquid crystal display or an LED or a speaker that generates a warning sound) 208, and processing 611 and subsequent steps are not performed. Then, the process exits from the image transmission mode, and the digital camera 106 is ready to shoot.

(Process 607)
The image management server 102 embeds user information stored as a set with a hash value in a digital image as a digital watermark. As an example of embedding the digital watermark, a method of embedding information by applying a rule that “1” is represented when the pixel value of a predetermined pixel of the digital image is an even number and “0” is represented when the pixel value is an odd number is applied to a plurality of pixels. Done in

(Process 608)
The image management server 102 calculates a hash value of the digital image in which the digital watermark is embedded. This is because the hash value of a digital image becomes a new value by embedding a digital watermark.

(Processing 609)
The image management server 102 updates the hash value stored so far by using the hash value of the digital image in which the digital watermark is embedded as a new hash value.

(Process 610)
The image management server 102 transmits the digital image in which the digital watermark is embedded to the digital camera 106.

(Process 611)
After recording the received digital image, the digital camera 106 exits the image transmission mode and becomes ready for photographing.

  A case where the image management server 102 is connected from a personal computer or the like without using the digital camera 106 is also included in the scope of the present invention. When connecting from a personal computer, the user must always input the MAC address of the digital camera 106 in the personal computer in the authentication process with the image management server 102 (process 603).

  The information embedded as the digital watermark may be other information stored in the image management server 102 and / or the authentication device 103, information transmitted from the digital camera 106 and received by the image management server 102, or the like. good.

  As described above, according to the present embodiment, even when an electronic watermark is embedded in a digital image, tampering of the digital image is correctly detected, and thus the security of the digital image is further ensured.

<Other embodiments>
In the above embodiment, the case where the hash value is used as the falsification detection information has been described, but the falsification detection information is not limited to the hash value. It goes without saying that a hash value that has been subjected to a predetermined operation (substitution, conversion, encryption, etc.) may be used as falsification detection information.

  Further, in the present invention, a storage medium in which a program code of software that realizes the functions of each embodiment is recorded is provided to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus stores the storage medium in the storage medium. It is also achieved by reading and executing the programmed program code. In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention. As a storage medium for supplying such a program code, for example, a floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, magnetic tape, nonvolatile memory card, ROM Etc. can be used.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on the instruction of the program code. This includes a case where part or all of the actual processing is performed and the functions of the above-described embodiments are realized by the processing.

  Furthermore, after the program code read from the storage medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function is based on the instruction of the program code. This includes a case where the CPU or the like provided in the expansion board or function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

  In addition, the program code of the software that realizes the functions of the above-described embodiments is distributed via a network and stored in a storage means such as a hard disk or memory of a system or apparatus or a storage medium such as a CD-RW or CD-R. Needless to say, this can also be achieved by the computer (or CPU or MPU) of the system or apparatus reading and executing the program code stored in the storage means or the storage medium.

It is a figure which shows the main components of the image communication system in the 1st thru | or 4th embodiment suitable for this invention. It is a block diagram which shows the main components of the digital camera which is an example of an image input device. It is a figure for demonstrating the communication procedure of the image communication system in 1st Embodiment. It is a figure explaining the process sequence performed with the image communication system in 2nd Embodiment. It is a figure explaining the process sequence performed with the image communication system in 3rd Embodiment. It is a figure explaining the process sequence performed with the image communication system in 4th Embodiment.

Claims (74)

An image input means for inputting a digital image;
An instruction input means for inputting a predetermined instruction;
Falsification detection information generating means for generating falsification detection information by executing a predetermined calculation on the digital image in response to an instruction input by the instruction input means;
Communication means for transmitting the falsification detection information to an image management apparatus connected via a predetermined network;
Control means for controlling the predetermined calculation and the transmission operation of the communication means;
An image input device comprising:   2. The control unit according to claim 1, wherein the control unit performs user authentication with an authentication device connected via the predetermined network before transmitting the falsification detection information. Image input device. Furthermore, the storage device stores the unique identification information of the image input device,
3. The control unit according to claim 1, wherein the control unit transmits the identification information to the image management apparatus before the falsification prevention information is transmitted, so that authentication processing can be performed in the image management apparatus. Image input device. Furthermore, it has a storage medium mounting means for mounting a storage medium to which the digital image is input,
The image input apparatus according to claim 1, wherein the control unit further manages attachment / detachment of the storage medium.   The control means records identification information regarding attachment / detachment of the storage medium in an internal storage means of the image input device, and manages whether or not the digital image may be falsified. 5. The image input device according to 4. The attachment / detachment identification information includes first information indicating that the storage medium has been removed from the storage medium mounting means, and second information indicating that the storage medium remains mounted,
When it is determined that the first information corresponds to the digital image, the control unit controls the communication unit to prohibit transmission of the falsification detection information. The image input device according to claim 5.   7. The image input apparatus according to claim 5, wherein the attachment / detachment identification information is stored in the internal storage unit for each digital image to be input.   7. The image input apparatus according to claim 5, wherein the attachment / detachment identification information is stored in the internal storage unit for each image stored in the storage medium.   The image input apparatus according to claim 5, wherein the attachment / detachment identification information is managed so as not to be rewritten.   10. The falsification prevention information generation unit generates a hash value by executing a hash calculation based on the digital image, and uses the hash value as the falsification detection information. The image input device according to item 1. An image input means for inputting a digital image;
An instruction input means for inputting a predetermined instruction;
A communication means for performing information communication with an image management apparatus connected via a predetermined network;
Control means for controlling the communication means so that the digital image is transmitted to the image management apparatus in response to the predetermined instruction input by the instruction input means,
The image input device is characterized in that the image management device calculates and manages falsification detection information based on the digital image. And a mode switching means for switching a processing mode between an authentication mode for performing an authentication process and an image transmission mode for transmitting the digital image to the image management apparatus,
The control means controls the communication means so that the digital image is transmitted to the image management apparatus when the processing mode is the image transmission mode;
The image input device according to claim 11, wherein the digital image is added with falsification detection information in the image management device.   13. The image input device according to claim 12, wherein the communication unit receives a falsification preventing processed image which is a digital image to which the falsification detection information is added by the image management device.   The image input device according to claim 12 or 13, wherein the falsification detection information includes digital watermark information.   15. The image input according to claim 13, wherein the control unit cancels the image transmission mode after the reception of the falsification prevention processed image by the communication unit, and enables the input of the digital image. apparatus.   16. The image input apparatus according to claim 2, wherein the authentication process is performed using MAC (Media Access Control) address information. A communication system having an image input device that receives digital images and can communicate with other devices on a network, and an image management device that receives and manages related information related to the digital images input to the image input devices. There,
The image input device includes:
An image input means for inputting a digital image;
An instruction input means for inputting a predetermined instruction;
Falsification detection information generating means for generating falsification detection information by executing a predetermined calculation on the digital image in response to an instruction input by the instruction input means;
First communication means for transmitting the falsification detection information to the image management apparatus connected via a predetermined network;
Control means for controlling the predetermined calculation and the transmission operation of the first communication means,
The image management device includes:
Second communication means for receiving the falsification detection information;
An image information management means for managing the falsification detection information for each input digital image. And an authentication device that performs predetermined authentication with the image input device,
The control means in the image input device performs user authentication with the authentication device connected via the predetermined network before transmitting the falsification detection information. The communication system according to claim 17. The image input device further includes storage means for storing unique identification information of the image input device,
19. The control unit according to claim 17 or 18, wherein the control unit transmits the identification information to the image management apparatus before transmitting the falsification prevention information so that device authentication processing can be performed in the image management apparatus. The communication system described. The image input device further includes a storage medium mounting unit for mounting a storage medium to which the digital image is input,
The communication system according to any one of claims 17 to 19, wherein the control unit further manages attachment / detachment of the storage medium.   The control means records identification information regarding attachment / detachment of the storage medium in an internal storage means of the image input device, and manages whether or not the digital image may be falsified. 21. The communication system according to 20. The attachment / detachment identification information includes first information indicating that the storage medium has been removed from the storage medium mounting means, and second information indicating that the storage medium remains mounted,
When it is determined that the first information corresponds to the digital image, the control unit controls the first communication unit to prohibit transmission of the falsification detection information. The communication system according to claim 21.   23. The communication system according to claim 21 or 22, wherein the attachment / detachment identification information is stored in the internal storage unit for each input digital image.   23. The communication system according to claim 21, wherein the attachment / detachment identification information is stored in the internal storage unit for each image stored in the storage medium.   The communication system according to any one of claims 21 to 24, wherein the attach / detach identification information is managed so as not to be rewritten.   26. The falsification prevention information generation unit generates a hash value by executing a hash calculation based on the digital image, and uses the hash value as the falsification detection information. The communication system according to item 1. The recognition device acquires user information including a user name of the image input device by the user authentication process,
In the image management apparatus, the second communication means transmits the unique identification information to the recognition apparatus, receives the user information corresponding to the unique identification information from the recognition apparatus, and the management means , Managing the falsification detection information together with the user information,
The communication system according to any one of claims 18 to 25, wherein: A communication system having an image input device capable of communicating with other devices on a network, to which a digital image is input, and an image management device that receives the digital image input to the image input device and manages it by performing predetermined processing Because
The image input device includes:
An image input means for inputting a digital image;
An instruction input means for inputting a predetermined instruction;
First communication means for performing information communication with the image management apparatus connected via a predetermined network;
Control means for controlling the first communication means so that the digital image is transmitted to the image management apparatus in response to the predetermined instruction input by the instruction input means;
The image management device includes:
A second communication means for receiving the digital image;
Falsification detection information generating means for generating falsification detection information for the digital image;
Image information management means for managing the falsification detection information for each received digital image;
A communication system comprising: The image input apparatus further includes at least mode switching means for switching a processing mode between an authentication mode for performing an authentication process and an image transmission mode for transmitting the digital image to the image management apparatus,
The control means controls the first communication means so that the digital image is transmitted to the image management apparatus when the processing mode is the image transmission mode;
The image management apparatus further includes processing image information generation means for generating falsification preventing processing image information by adding the falsification detection information to the digital image.
29. The communication system according to claim 28, comprising:   30. The communication system according to claim 29, wherein the second communication unit transmits the falsification preventing process image information to the image input device. The first communication means receives the falsification preventing process image information,
30. The apparatus according to claim 29, wherein the control means cancels the image transmission mode after receiving the falsification preventing process image information, and enables the digital image to be input to the image input device. 30. The communication system according to 30. And an authentication device that performs predetermined authentication with the image input device,
The control means in the image input device performs user authentication with the authentication device connected via the predetermined network before transmitting the digital image. Item 32. The communication system according to any one of Items 29 to 31. The image input device further includes storage means for storing unique identification information of the image input device,
The control means transmits the unique identification information to the image management device before the digital image transmission,
The communication system according to claim 32, wherein the image management apparatus performs device authentication processing of the image input apparatus.   34. The falsification detection information generation means generates a hash value by executing a hash calculation based on the digital image, and uses the hash value as the falsification detection information. The communication system according to claim 1. The falsification detection information generating means in the image management device further generates a hash value by executing a hash calculation based on the falsification preventing process image information,
34. The communication system according to claim 33, wherein the image information management unit manages the hash value as the falsification detection information in association with the individual identification information. Furthermore, an authentication device that performs user authentication with the image input device, the recognition device acquires user information including a user name of the image input device by the user authentication processing,
The image input device further includes storage means for storing unique identification information of the image input device,
In the image management device, the second communication unit transmits the unique identification information to the recognition device, receives the user information corresponding to the unique identification information from the recognition device, and the image information management The communication system according to claim 28, wherein means manages the falsification detection information together with the user information. A method for controlling an image input device, comprising:
An image input process for inputting a digital image;
An instruction input step for inputting a predetermined instruction;
In accordance with the instruction input in the instruction input step, falsification detection information generation step for generating falsification detection information by executing a predetermined calculation on the digital image;
A communication step of transmitting the falsification detection information to an image management apparatus connected via a predetermined network;
A control step for controlling the predetermined operation and the transmission operation in the communication step;
A control method comprising:   38. In the control step, user authentication is performed with an authentication device connected via the predetermined network before transmission of the falsification detection information. The control method described.   The control step includes transmitting the identification information of the image input device to the image management device before transmitting the falsification prevention information so that the image management device can perform an authentication process. The control method according to 37 or 38. The image input device has a storage medium mounting means for mounting a storage medium to which the digital image is input,
40. The control method according to any one of claims 37 to 39, wherein in the control step, attachment / detachment of the storage medium is further managed.   In the control step, identification information regarding attachment / detachment of the storage medium is recorded in an internal storage unit of the image input device, and it is managed whether or not the digital image may be falsified. Item 41. The control method according to Item 40. The attachment / detachment identification information includes first information indicating that the storage medium has been removed from the storage medium mounting means, and second information indicating that the storage medium remains mounted,
In the control step, when it is determined that the first information corresponds to the digital image, a communication operation in the communication step is performed so that transmission of the falsification detection information is prohibited. 42. The control method according to claim 41, wherein the control method is controlled.   43. The control method according to claim 41 or 42, wherein the attachment / detachment identification information is stored in the internal storage unit for each input digital image.   43. The control method according to claim 41, wherein the attachment / detachment identification information is stored in the internal storage unit for each image stored in the storage medium.   44. The control method according to claim 41, wherein the attachment / detachment identification information is managed so as not to be rewritten.   46. In the falsification prevention information generation step, hash calculation is executed based on the digital image to generate a hash value, and the hash value is used as the falsification detection information. The control method according to claim 1. A method for controlling an image input device, comprising:
An image input process for inputting a digital image;
An instruction input step for inputting a predetermined instruction;
A communication process for performing information communication with an image management apparatus connected via a predetermined network;
A control step of controlling a communication operation of the communication step so that the digital image is transmitted to the image management device in response to the predetermined instruction input in the instruction input step;
The digital image is managed by calculating and managing falsification detection information based on the digital image in the image management apparatus. Furthermore, a mode switching step of switching a processing mode between an authentication mode for performing an authentication process and an image transmission mode for transmitting the digital image to the image management apparatus,
In the control step, when the processing mode is the image transmission mode, the communication operation is controlled such that the digital image is transmitted to the image management device,
48. The control method according to claim 47, wherein falsification detection information is added to the digital image in the image management apparatus.   49. The control method according to claim 48, wherein, in the communication step, a falsification preventing process image that is a digital image to which the falsification detection information is added is received by the image management apparatus.   The control method according to claim 48 or 49, wherein the falsification detection information includes digital watermark information.   51. The control method according to claim 49, wherein, in the control step, the image transmission mode is canceled after receiving the falsification preventing processed image, and the digital image can be input.   52. The control method according to claim 38, wherein the authentication process is performed using MAC (Media Access Control) address information. A communication system having an image input device capable of communicating with other devices on a network through which a digital image is input and an image management device for receiving and managing related information related to the digital image input to the image input device A control method for controlling,
In the image input device,
An image input process for inputting a digital image;
An instruction input step for inputting a predetermined instruction;
In accordance with the instruction input in the instruction input step, falsification detection information generation step for generating falsification detection information by executing a predetermined calculation on the digital image;
A first communication step of transmitting the falsification detection information to the image management apparatus connected via a predetermined network;
A control step of controlling the predetermined operation and the transmission operation in the first communication step,
In the image management apparatus,
A second communication step of receiving the falsification detection information;
An image information management step of managing the falsification detection information for each of the inputted digital images. The communication system further includes an authentication device that performs predetermined authentication with the image input device,
In the image input device, in the control step, user authentication is performed with the authentication device connected via the predetermined network before transmission of the falsification detection information. 54. A control method according to claim 53, characterized in that: The image input device further includes storage means for storing unique identification information of the image input device,
55. The control step according to claim 53 or 54, wherein the identification information is transmitted to the image management apparatus before the falsification prevention information is transmitted, so that device authentication processing can be performed in the image management apparatus. The control method described. The image input device further includes a storage medium mounting unit for mounting a storage medium to which the digital image is input,
The control method according to any one of claims 53 to 55, wherein in the control step, attachment / detachment of the storage medium is managed.   In the control step, identification information regarding attachment / detachment of the storage medium is recorded in an internal storage unit of the image input device, and management is performed as to whether or not the digital image may be falsified. Item 56. The control method according to Item 56. The attachment / detachment identification information includes first information indicating that the storage medium has been removed from the storage medium mounting means, and second information indicating that the storage medium remains mounted,
58. In the control step, when it is determined that the first information corresponds to the digital image, transmission of the falsification detection information is prohibited. Control method.   59. The control method according to claim 57 or 58, wherein the attachment / detachment identification information is stored in the internal storage unit for each input digital image.   59. The control method according to claim 57 or 58, wherein the attachment / detachment identification information is stored in the internal storage unit for each image stored in the storage medium.   61. The control method according to claim 57, wherein the attach / detach identification information is managed so as not to be rewritten.   62. The falsification prevention information generating step executes hash calculation based on the digital image to generate a hash value, and the hash value is used as the falsification detection information. The control method according to claim 1. The recognition device acquires user information including a user name of the image input device by the user authentication process,
In the image management device, in the second communication step, the unique identification information is transmitted to the recognition device, and the user information corresponding to the unique identification information is received from the recognition device. In the management step, The falsification detection information is managed together with the user information.
The control method according to any one of claims 54 to 61, wherein: A communication system having an image input device capable of communicating with other devices on a network, to which a digital image is input, and an image management device that receives the digital image input to the image input device and manages it by performing predetermined processing A control method for controlling
In the image input device,
An image input process for inputting a digital image;
An instruction input step for inputting a predetermined instruction;
A first communication step of performing information communication with the image management apparatus connected via a predetermined network;
A control step in which an operation of the information communication is controlled so that the digital image is transmitted to the image management device in response to the predetermined instruction input in the instruction input step;
In the image management apparatus,
A second communication step for receiving the digital image;
Falsification detection information generating step for generating falsification detection information for the digital image;
An image information management step for managing the falsification detection information for each received digital image;
A control method comprising: The image input device further includes a mode switching step of switching a processing mode between at least an authentication mode for performing an authentication process and an image transmission mode for transmitting the digital image to the image management device,
In the control step, when the processing mode is the image transmission mode, the information communication operation is controlled such that the digital image is transmitted to the image management device,
In the image management device, further, a processing image information generation step of generating the falsification preventing processing image information by adding the falsification detection information to the digital image,
The control method according to claim 64, further comprising:   66. The control method according to claim 65, wherein in the second communication step, the falsification preventing process image information is transmitted to the image input device. In the first communication step, the tampering prevention processing image information is further received,
66. In the control step, after receiving the falsification preventing process image information, the image transmission mode is canceled and the digital image can be input to the image input device. The control method described in 1. The communication system further includes an authentication device that performs predetermined authentication with the image input device,
In the control step of the image input apparatus, user authentication is performed with the authentication apparatus connected via the predetermined network before the transmission of the digital image. The control method according to any one of claims 65 to 67. The image input device further includes storage means for storing unique identification information of the image input device,
In the control step, before the digital image transmission, the unique identification information is transmitted to the image management device,
The control method according to claim 68, wherein device authentication processing of the image input device is performed in the image management device.   70. The falsification detection information generating step executes hash calculation based on the digital image to generate a hash value, and the hash value is used as the falsification detection information. The control method according to any one of the above. In the falsification detection information generation step in the image management device, a hash calculation is further performed based on the falsification prevention processing image information to generate a hash value,
The control method according to claim 68, wherein, in the image information management step, the hash value is managed as the falsification detection information in association with the individual identification information. The communication system further includes an authentication device that performs user authentication with the image input device, and in the description recognition device, user information including a user name of the image input device is acquired by the user authentication processing,
The image input device further includes storage means for storing unique identification information of the image input device,
In the image management device, in the second communication step, the unique identification information is transmitted to the recognition device, the user information corresponding to the unique identification information is received from the recognition device, and the image information management The control method according to claim 64, wherein in the step, the falsification detection information is managed together with the user information.   A computer program for causing a computer to implement the control method according to any one of claims 37 to 72.   74. A computer-readable storage medium storing the computer program according to claim 73.

Images