JP2011223109A - Imaging apparatus and image file generating method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an imaging apparatus capable of selectively encrypting and concealing imaging information that needs privacy protection and preventing malfunction of another apparatus and software and an image file generating method.SOLUTION: The imaging apparatus comprises: an imaging unit 106 that images a subject and outputs image data; an information generation unit 124 that generates additional data including a plurality of items from the imaging information of the image data; an encryption unit 132 that encrypts imaging information of at least a part of items of the additional data selected based on predetermined conditions; a file generation unit 128 that generates an image file by adding the additional data to the image data; and a recording unit 140 that records the generated image file in a recording medium. The information generation unit 124 stores the encrypted imaging information in an item different from the selected item and generates additional data where the selected item or its contents are invalidated.

Description

  The present invention relates to an imaging apparatus and an image file generation method for generating an image file in which additional data is added to image data.

  In recent years, electronic cameras have rapidly spread. Many electronic cameras add imaging information such as the model name of the electronic camera and settings at the time of photographing as additional data (also referred to as metadata) in addition to image data that is actual data. A common standard has been established for additional data, and it can be used by various devices and software. Additional data is not necessary if you only browse images (photos), but it is used to manage image files according to the shooting date and location information, and to provide images with evidence. .

  Needless to say, the additional data is added for use, but if viewed in an unintended scene, there is a risk of leakage of privacy. Therefore, various proposals for protecting privacy have been made. For example, Patent Document 1 proposes a configuration in which high-accuracy imaging information is recorded in ciphertext and low-accuracy imaging information is recorded in plaintext.

Japanese Patent Application No. 2008-068969

  However, recording the imaging information in ciphertext not only makes it difficult for others to refer to it, but also limits the viewing opportunities for photographers (those who do not require restrictions). In other words, the additional data cannot be used unless the image file in which the additional data is encrypted is a specific device or software having a function of decrypting the image file.

  Further, if the additional data is simply encrypted, even if the imaging information cannot be easily viewed, it is known that there is some encrypted data. Then, depending on the case, there is a risk that the decryption will be tried steadily.

  Furthermore, when the additional data is simply encrypted, there is a possibility that it will not conform to the format (character string format) or data length defined in the common standard as a result of the encryption. In that case, there is a possibility that the device or software that has read the image file may malfunction.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide an imaging apparatus and an image file generation method capable of selectively encrypting and concealing imaging information that needs privacy protection and preventing malfunction of other devices and software. And

  In order to solve the above problems, a typical configuration of an imaging apparatus according to the present invention includes an imaging unit that images a subject and outputs image data, and information that generates additional data including a plurality of items of imaging information of the image data. A generation unit, an encryption unit that encrypts imaging information of at least some items of additional data selected based on a predetermined condition, and a file generation unit that generates additional image data by adding additional data to image data A recording unit that records the generated image file on a recording medium, and the information generation unit stores the encrypted imaging information in a different item from the selected item and invalidates the selected item or its contents The additional data is generated.

  In the imaging apparatus described above, the predetermined condition may include an item condition for selecting an item of imaging information and a content condition for restricting or allowing the content of the item.

  In the above imaging apparatus, the encryption unit may determine whether or not encryption is necessary by determining a content condition for an item selected based on the item condition.

  In the above imaging device, a file transfer unit that transfers an image file recorded on a recording medium to an external device, and a decryption that decrypts encrypted imaging information in the additional data and stores it in the original item The encryption unit encrypts the item selected based on the predetermined condition without judging the content condition, and the decryption unit performs the content condition when the file transfer unit transfers the image file. The information generating unit decodes the imaging information allowed by the content condition, stores the imaging information decoded by the decoding unit in the original item, regenerates the additional data, and the file transfer unit The image file in which the additional data is regenerated may be transferred to the external device.

  The imaging apparatus further includes a condition setting unit capable of inputting a predetermined condition, and a reprocessing unit that causes the encryption unit and the information generation unit to operate on the image file already recorded on the recording medium. The reprocessing unit may perform the reprocessing when a predetermined condition is set in the condition setting unit or at an arbitrary timing after the predetermined condition is set.

  In the imaging apparatus described above, the predetermined condition may be a condition for specifying one or a plurality of items selected from the group consisting of an imaging date and time, an imaging position, and personal identification information.

  Another representative configuration of the present invention is an image file generation method for generating an image file that includes image data and additional data related to the image data. The imaging information of the image data included in the additional data has a predetermined value. The imaging information of the item selected based on the condition is encrypted, the encrypted imaging information is stored in an item different from the selected item in the additional data, and the selected item or its content is invalidated .

  According to the present invention, imaging information that needs privacy protection can be selectively encrypted and concealed, and malfunctions of other devices and software can be prevented.

It is a figure explaining schematic structure of a digital camera. It is a figure which shows typically the recording state of additional data, and encryption conditions. It is a flowchart explaining the main operation | movement regarding encryption from imaging | photography to recording. It is a flowchart which shows the example of encryption determination. It is a figure explaining schematic structure of the digital camera concerning 2nd Embodiment. It is a flowchart explaining operation | movement of 2nd Embodiment. It is a figure explaining schematic structure of the digital camera concerning 3rd Embodiment. It is a flowchart explaining operation | movement of 3rd Embodiment.

[First Embodiment]
Hereinafter, a first embodiment of the present invention will be described in detail with reference to the accompanying drawings. The devices, image types, data formats, and other specific numerical values shown in the embodiments are merely examples for facilitating understanding of the invention, and do not limit the present invention unless otherwise specified. . In the present specification and drawings, elements having substantially the same function and configuration are denoted by the same reference numerals, and redundant description is omitted, and elements not directly related to the present invention are not illustrated. To do.

  In the present embodiment, a digital camera (electronic camera) will be described as an example of an imaging apparatus. FIG. 1 is a diagram illustrating a schematic configuration of the digital camera 10. The digital camera 10 includes a main bus 100, a photographing lens 102, an image sensor 104, an imaging unit 106, an image processing unit 108, a buffer memory 110, a monitor 112, an operation unit 120, a control unit 122, an encryption unit 132, a recording unit 140, An external interface 146, a GPS processing unit 150, and a face authentication unit 154 are provided. The control unit 122 also serves as an information generation unit 124, a condition setting unit 126, a file generation unit 128, and a file transfer unit 130.

  The main bus 100 connects other units to each other and transmits control signals and data.

  The photographing lens 102 forms an image of a subject on the imaging surface of the imaging element 104. The image sensor 104 is composed of a CCD sensor (Charge Coupled Device) or a CMOS sensor (Complementary Metal Oxide Semiconductor) in which a plurality of photoelectric conversion elements are arranged, and converts light into an electrical signal.

  The imaging unit 106 includes a CDS (correlated double sampling) circuit, an AGC (auto gain control) circuit, an ADC (analog / digital conversion circuit), and a timing generator. Each circuit is supplied with a timing signal from a timing generator. The CDS circuit performs low frequency noise reduction processing of the image signal. The AGC circuit adjusts the level of the imaging signal by adjusting the gain. The ADC circuit discretizes the analog signal, converts it into a digital signal, and outputs it as image data.

  The image processing unit 108 is a circuit that processes the image data output from the imaging unit 106, and is configured as an ASIC, for example. The image processing unit 108 performs image processing such as γ correction, white balance correction, and contrast correction on the input image data, and converts the RGB image data into a YCbCr color space corresponding to the luminance signal and the color difference signal. A YC conversion process for conversion is performed. Further, the image processing unit 108 performs a compression process for compressing the image data subjected to the YC conversion process into a predetermined compression format, for example, a JPEG format.

  The buffer memory 110 temporarily stores the image data output from the imaging unit 106, and holds image data that is being corrected or converted by the image processing unit 108. The buffer memory 110 can be composed of a high-speed RAM. The buffer memory 110 may also serve as a RAM as a program operation area of the control unit 122.

  The monitor 112 displays an image and a setting state, and includes a liquid crystal or an organic EL panel. The control unit 122 uses the monitor 112 to display a preview image before capturing an image, to display a postview image immediately after capturing the image, and to be stored in the recording medium 142 or the like by an operation from the operation unit 120. The read image data can be read and displayed.

  The operation unit 120 includes buttons, a cross key, a dial, a touch panel, and the like (not shown), and can perform various operations and input settings. The output of the operation unit 120 is input to the control unit 122 described below.

  The control unit 122 comprehensively controls (sequence management) each unit of the digital camera 10. The control unit 122 includes a CPU (Central Processing Unit) that performs arithmetic processing, a RAM (Random Access Memory) as a program operation area, a ROM (Read Only Memory) that stores programs, settings, and the like. The control unit 122 executes a predetermined program to realize an information generation unit 124, a condition setting unit 126, a file generation unit 128, and a file transfer unit 130 described later.

  The information generation unit 124 generates additional data including a plurality of items of imaging information of image data. The condition setting unit 126 receives an input of a condition for encryption by operating the operation unit 120. The encryption unit 132 encrypts the imaging information of at least some items of the additional data selected based on the predetermined condition input to the condition setting unit 126. The configurations and operations of the information generation unit 124, the condition setting unit 126, and the encryption unit 132 will be described later.

  The file generation unit 128 generates image files by adding additional data to the image data. The additional data (metadata) is data that stores matters relating to image data that is substantial data and is stored in the same file as the image data.

  The file transfer unit 130 transfers the image file recorded on the recording medium 142 to the external device 148 such as a computer via the external interface 146. The file transfer unit 130 can directly transfer the image file generated by the file generation unit 128 or directly transfer the image data output from the image processing unit 108 (PC camera function). The external interface 146 is connected to an external device 148 such as a computer via wired communication or wireless communication. The external interface 146 can use existing communication standards such as USB (Universal Serial Bus), IEEE 802.11x, IEEE 1394, and serial communication.

  The recording unit 140 is connected to a recording medium 142 that is detachably mounted in a slot (connector) (not shown). Then, the recording unit 140 records the generated image file on the recording medium 142. As the recording medium 142, for example, a non-volatile flash ROM, a hard disk, a flexible disk, an optical disk, a magneto-optical disk, or the like can be used.

  The GPS processing unit 150 receives the signal from the GPS satellite 152, measures the position of the digital camera 10, and outputs it as longitude and latitude (latitude and longitude) information. The GPS processing unit 150 performs positioning by receiving signals from three or more (generally about five) GPS satellites 152 at the same time. By storing the imaging position information in the additional data, the additional data can be extremely effective when searching for a photograph taken at a specific place regardless of the time.

  The face authentication unit 154 extracts a person's face from the image, calculates a feature amount from a specific position such as an eye or nose, and specifies an individual by collating with previously stored data. Therefore, by sequentially registering the person recognized at the time of shooting, it becomes possible to identify the person when the person is copied next time. If the person name is stored in the additional data, the additional data can be made extremely effective when searching for a photo showing a specific person later.

  FIG. 2 is a diagram schematically showing a recording state of additional data and encryption conditions. As shown in FIG. 2A, in the digital camera 10 according to the present embodiment, the data structure conforming to the DCF (Design Rule of Camera File System) standard is used for the format and folder structure of image data. The DCF standard is a standard including a data structure and a folder structure (directory structure). The DCF standard defines a data description format in the Exif (Exchangeable Image File) standard, which is an additional data (metadata) standard for image files. In the Exif standard, imaging information of image data is stored as a tag. There are many types of imaging information in the Exif standard, but there are various shooting conditions such as electronic camera manufacturer name (Make), model name (Model), imaging date and time information (DateTimeOriginal) as mandatory tags, Imaging position information (GPS info IFD group), image description (ImageDescription), user comment (userComment), maker note (MakerNote), etc. are defined as optional tags (non-essential tags). Mandatory tags are defined to be filled with blanks when no substantial data is stored.

  By the way, the image file generated by photographing is used not only for printing and viewing as a photograph but also for various purposes. For example, there is a method of use that is published as an electronic album on the Internet. Here, as described above, the image file includes not only image data but also additional information such as shooting conditions, shooting date information, and shooting position. For this reason, there is a possibility that such information may be disclosed regardless of the user's intention, which is problematic in terms of privacy protection.

  Therefore, it is conceivable to encrypt items (tags) that may have a problem from the viewpoint of privacy protection. However, when the additional data is simply encrypted, an encrypted character string having an unknown meaning is written together when the photo is published in an electronic album, for example, which is not preferable for a person viewing the photo. In addition, if the encrypted character string frequently comes into contact with people, in some cases, there is a risk that the decryption will be tried persistently.

  Therefore, in this embodiment, the information generation unit 124 encrypts the content of the item selected as having a problem from the viewpoint of privacy protection, and stores the captured imaging information in an item different from the selected item. At the same time, the selected item is invalidated, or additional data in which the content is invalidated while the item remains is generated.

  FIG. 3 is a flowchart for explaining main operations relating to encryption from shooting to recording, and FIG. 4 is a flowchart showing an example of encryption determination.

  First, as a preliminary preparation, it is assumed that a predetermined condition for encryption is input from the operation unit 120 to the condition setting unit 126 and stored in the ROM of the control unit 122. As shown in FIG. 2B, the conditions for encryption include an item condition for selecting an item to be encrypted and a content condition for restricting or allowing the content of the item. The item condition is a condition for uniformly targeting the corresponding item, and has a content such as “imaging date and time information is always encrypted”, for example. The content condition is a condition for determining whether or not encryption is necessary according to the data content. For example, the content condition is “when the imaging date and time information is encrypted from when to when”. The predetermined condition also includes a passphrase for performing encryption and decryption. Note that a plurality of sets (profiles) may be registered as the predetermined condition, and valid / invalid may be switched while maintaining the condition contents.

  As illustrated in FIG. 3, in S <b> 102, the image processing unit 108 performs predetermined processing on the image data output from the imaging unit 106 to generate image data. In S104, the information generation unit 124 first generates additional data that is not concealed. At this time, in addition to the imaging information generated by the digital camera 10 itself, imaging position information acquired by the GPS processing unit 150 and personal identification information generated by the face authentication unit 154 are also stored in the additional data. The imaging position information may be stored in an Exif standard imaging position information tag (GPS info IFD group), and the personal identification information may be stored in an Exif standard maker note tag (MakerNote).

  In S <b> 106, the file generation unit 128 generates an image file by adding the additional data generated by the information generation unit 124 to the image data generated by the image processing unit 108. The image file generated at this stage is preferably temporarily recorded in the buffer memory 110, but may be recorded on the recording medium 142 via the recording unit 140.

  Next, in S108, a series of processing for determining whether or not to encrypt is performed. The encryption determination will be described later with reference to FIG.

  In S110, if the encryption unit 132 is true according to the result of the encryption determination (Y in S110), the corresponding item is encrypted in S112. The encrypted data is stored in an item different from the corresponding item. As a different item, a maker note tag (MakerNote) can be suitably used as a specific example. This is because the manufacturer note tag has a variable data length (Any) and there is no predetermined format.

  In S114, the information generation unit 124 generates (regenerates) additional data in which the encrypted corresponding item (original item) is invalidated. Invalidation is as if there is no data. As a specific example, when the corresponding item is not an essential tag, the item itself can be deleted, or a pointer to the tag area (for example, a pointer to GPS information IFD: GPSInfoIFDPointer) can be deleted. In the case of an essential tag, a null value or a blank list can be stored in place of the original data without deleting the item.

  In S116, the file generation unit 128 adds the additional data regenerated by the information generation unit 124 to the image data included in the previously created image file, and regenerates the image file. In step S <b> 118, the image file generated by the recording unit 140 is recorded on the recording medium 142.

  On the other hand, if the encryption unit 132 determines in S110 that there is no item to be encrypted (N in S110), the process proceeds to S118, and the image file recorded in the buffer memory 110 is recorded by the recording unit 140. Recording on the medium 142. If the image file generated in S106 has already been recorded on the recording medium 142, the process ends without passing through S118.

  Next, the encryption determination process will be described with reference to FIG. In the present embodiment, imaging position information and personal identification information based on face authentication will be described as an example, but imaging date / time information or other information may also be subject to encryption.

  First, in S202, the encryption unit 132 determines whether or not the imaging position information is uniformly targeted for encryption according to the item conditions. If it is registered as a uniform prohibition (Y in S202), the encryption unit 132 sets the imaging position information item to true in S204. If the entire item is not uniformly prohibited (N in S202), in S206, the encryption unit 132 determines whether the imaging position is registered as an encryption target area according to the content condition, and is within the prohibited range. If so (Y in S206), encryption is set to true in S204. If it is not within the prohibited range (N in S206), the encryption is set to false in S208. The forbidden range may be specified by an area, or may be within a predetermined distance centered on a specified position.

  Next, in S212, the encryption unit 132 determines whether the personal identification information is uniformly targeted for encryption according to the item conditions. If it is registered as a uniform prohibition (Y in S212), in S214, the encryption unit sets the encryption of the item of the personal identification information as true. If the entire item is not uniformly prohibited (N in S212), in S216, the encryption unit 132 determines whether or not the recognized person is registered as an encryption target person, and is included in the prohibition target. If so (Y in S216), encryption is set to true in S214. If it is not a prohibition target (N in S216), encryption is set to false in S218.

  In the flowchart shown in FIG. 4, the determination regarding the imaging position information and the determination regarding the personal identification information are illustrated as a series of processes, but these may be performed individually or any of them may be performed first. Also, the encryption determination can be made for the imaging date / time information and other information in the same manner. Further, it may be possible to always determine whether encryption is necessary based on the content condition without providing the item condition (uniform determination). However, it is possible to speed up the processing by making a determination based only on the item conditions.

  According to the above configuration, it is possible to selectively encrypt imaging information that requires privacy protection. Further, by invalidating the selected item or its content, it is possible to conceal even the presence of encrypted imaging information and to prevent malfunction of other devices and software.

[Second Embodiment]
A second embodiment of the present invention will be described. FIG. 5 is a diagram for explaining the schematic configuration of the digital camera 12 according to the second embodiment, and FIG. 6 is a flowchart for explaining the operation of the second embodiment. The same reference numerals are given and description thereof is omitted.

  In the first embodiment described above, encryption is performed at the time of imaging, but there are cases where it is desired to set conditions for an image file that has already been captured. Therefore, in the present embodiment, an example will be described in which predetermined conditions are set at an arbitrary timing, and reprocessing is performed collectively at a later time.

  As shown in FIG. 5, the digital camera 12 further includes a reprocessing unit 134. The reprocessing unit 134 causes the encryption unit 132 and the information generation unit 124 to act on the image file already recorded on the recording medium 142. In the present embodiment, the reprocessing unit 134 executes reprocessing when a predetermined condition is set in the condition setting unit 126 or at an arbitrary timing after the predetermined condition is set.

  As shown in the flowchart of FIG. 6, in S <b> 302, the user operates the operation unit 120 at an arbitrary timing and inputs a predetermined condition for encryption to the condition setting unit 126. In step S <b> 304, the reprocessing unit 134 inquires of the user whether to perform batch reprocessing on the existing image by displaying the monitor 112 or the like. If the user cancels (N in S304), the process ends.

  If the user approves the execution of batch reprocessing (Y in S304), the reprocessing unit 134 reads the image file from the external device 148 to the buffer memory 110 as shown in S306. Then, the encryption unit 132 performs an encryption determination on the read file in S108, refers to the result of the encryption determination in S110, and performs an encryption process in S112. In S114, the information generation unit 124 generates (regenerates) additional data. In S116, the file generation unit 128 generates a new image file. In S118, the recording unit 140 records (updates) the image file on the recording medium 142. Or overwrite).

  If there are a large number of recorded image files, the processing may take time. Therefore, during the batch reprocessing, the control unit 122 displays a dialog that allows the user to input a cancellation, and refers to whether or not an interruption is input in S308. If it has been interrupted (Y in S308), the series of processing is terminated at that time. If not interrupted (N in S308), in S310, the control unit 122 determines whether or not all the recorded image files have been processed. If there is an unprocessed image file (N in S310), the process returns to S306. If all are completed (Y in S310), the series of processing is terminated.

  In the above flowchart, an inquiry about reprocessing in S304 is made when the conditions in S302 are set. However, the subsequent sequence may be called from S304 at an arbitrary timing by a user operation. Thus, for example, when the recording medium 142 is replaced, the existing image file can be encrypted under the current conditions without changing the condition settings.

  Further, when there are a large number of recorded image files, the processing may take time, and if the recording medium 142 is removed while the recording medium 142 is being accessed, the file may be damaged. Therefore, it is preferable to display a warning on the monitor 112 so as not to take out the recording medium 142 and to provide an access lamp near the operation unit 120 so that the recording medium 142 is lit while reading / writing.

  With the above-described configuration, when the encryption necessity condition is changed, it is possible to perform the process retroactively on the already generated image file. Therefore, for example, after taking a group of images such as after a trip, it is possible to set an imaging date and time and an imaging position for a photograph of the current trip and perform encryption. At this time, by making it possible to reprocess the face recognition, the personal identification information can be added to the image file before the person is registered.

[Third Embodiment]
A third embodiment of the present invention will be described. FIG. 7 is a diagram for explaining the schematic configuration of the digital camera 10 according to the third embodiment, and FIG. 8 is a flowchart for explaining the operation of the third embodiment. The description will be omitted.

  In each of the above embodiments, the necessity of encryption is determined for each item or according to the content of the item, and only the items that require encryption are encrypted. On the other hand, the third embodiment encrypts all items that may be problematic from the viewpoint of privacy protection, and decrypts only items that do not require encryption when transferred from the digital camera 10 to the outside. It is.

  As shown in FIG. 7, the digital camera 10 further includes a decoding unit 136. The decryption unit 136 decrypts the encrypted imaging information in the additional data and stores it in the original item. Specifically, the imaging information that is encrypted and stored in an item (such as a maker note tag) that is different from the original item is extracted and decrypted into plain text. The information generation unit 124 regenerates the additional data using the decoded imaging information.

  FIG. 8A is a flowchart during imaging. As shown in FIG. 8A, the image processing unit 108 generates image data in S102, the information generation unit 124 generates additional data with an encryption structure in S104, and the file generation unit 128 adds to the image data in S106. Add image data to generate image file.

  In step S <b> 402, the encryption unit 132 uniformly encrypts predetermined items. In other words, encryption is performed according to the item condition, and the content condition is not judged. The predetermined item is an item that may have a problem from the viewpoint of privacy protection. This is because there are a lot of additional data such as image size and focal length that need not be concealed.

  Then, in the same manner as in the first embodiment, the additional data in which the original item encrypted by the information generating unit 124 is invalidated in S114 is regenerated, and the additional data regenerated in the image data by the file generating unit 128 in S116. Data is added, and the recording unit 140 records the image file on the recording medium 142 in S118.

  Compared with the flowchart of the first embodiment shown in FIG. 3, the difference is that the encryption judgment (S108 to S110) is not performed at the time of encryption.

  FIG. 8B is a flowchart at the time of transfer. First, the transfer is started by an operation from the operation unit 120 or an operation from the external device 148. In S410, the control unit 122 identifies a file to be transferred. In step S412, the decryption unit 136 performs decryption determination based on the content condition. In the decryption determination, all encrypted imaging information is once decrypted, and then true / false can be determined in reverse using the same condition (content condition) as the encryption determination shown in FIG. (Determining that decryption is not performed).

  In S414, the decryption unit 136 stores the data decrypted in S416 in the corresponding item (original item) if it is true (Y in S414) according to the result of the decryption determination. In S418, the information generation unit 124 generates (regenerates) additional data in which the decoded imaging information is stored in the original item. In S420, the file generation unit 128 adds the regenerated additional data to the image data included in the image file, and generates a decoded image file.

  In step S <b> 422, the file transfer unit 130 transfers the image file to the external apparatus 148 via the external interface 146. Note that the image file (decoded image file) generated in S420 is not recorded in the recording medium 142, but temporarily stored in the buffer memory 110, and then transferred from the external interface 146 to the external device 148. It is preferable.

  If it is false in S414 (N in S414), the process proceeds to S422 without regenerating the additional data or the image file, and the file transfer unit 130 transfers the encrypted image file. The imaging information temporarily decoded for decoding determination is discarded.

  In S424, the control unit 122 determines whether or not processing has been performed on all recorded image files. If there is an unprocessed image file (N in S424), the process returns to S412. If all are completed (Y in S424), the series of processing is terminated.

  According to the above configuration, even if the condition for encrypting the imaging information is not set before imaging, the condition may be set before the image is transferred to the external device 148. Accordingly, it is possible to set the encryption condition appropriately later in accordance with the actual shooting situation, instead of predicting the shooting situation and setting the encryption condition.

  The digital camera 10 is a portable device and may be lost. Furthermore, since the recording medium 142 is used by being exchanged, there is a high possibility that it will be handed over. Even if an image file is viewed in such a case, it is possible to greatly reduce the risk of leakage of imaging information by encrypting all items (tags) that may be problematic from the viewpoint of privacy protection. .

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  The present invention can be used as an imaging device and an image file generation method for generating an image file in which additional data is added to image data.

DESCRIPTION OF SYMBOLS 10 ... Digital camera, 100 ... Main bus, 102 ... Shooting lens, 104 ... Imaging element, 108 ... Image processing part, 110 ... Buffer memory, 112 ... Monitor, 120 ... Operation part, 122 ... Control part, 124 ... Information generation part , 126 ... condition setting section, 128 ... file generation section, 130 ... file transfer section, 132 ... encryption section, 134 ... reprocessing section, 136 ... decryption section, 140 ... recording section, 142 ... recording medium, 146 ... external Interface: 148: External device, 150: GPS processing unit, 152: GPS satellite, 154: Face authentication unit

Claims (7)

An imaging unit for imaging a subject and outputting image data;
An information generating unit for generating additional data including a plurality of items of imaging information of the image data;
An encryption unit for encrypting the imaging information of at least some items of the additional data selected based on a predetermined condition;
A file generation unit for generating an image file by adding the additional data to the image data;
A recording unit for recording the generated image file on a recording medium,
The information generation unit stores the encrypted imaging information in an item different from the selected item, and generates the additional data in which the selected item or its content is invalidated. The imaging apparatus according to claim 1,
The predetermined condition includes an item condition for selecting an item of the imaging information and a content condition for restricting or allowing the content of the item. The imaging apparatus according to claim 2,
The image pickup apparatus, wherein the encryption unit determines the necessity of encryption by determining the content condition for an item selected based on the item condition. The imaging apparatus according to claim 2,
A file transfer unit that transfers the image file recorded on the recording medium to an external device;
A decryption unit that decrypts the encrypted imaging information in the additional data and stores the decrypted image information in the original item;
The encryption unit encrypts the item selected based on the predetermined condition without determining the content condition,
The decoding unit determines the content condition when the file transfer unit transfers the image file, decodes imaging information allowed by the content condition,
The information generation unit stores the imaging information decoded by the decoding unit in an original item and regenerates the additional data,
The image transfer apparatus, wherein the file transfer unit transfers the image file in which the additional data is regenerated to an external device. The imaging apparatus according to claim 1,
A condition setting unit capable of inputting the predetermined condition;
A reprocessing unit that causes the encryption unit and the information generation unit to act on the image file already recorded on the recording medium,
The imaging apparatus according to claim 1, wherein the reprocessing unit performs the reprocessing when a predetermined condition is set in the condition setting unit or at an arbitrary timing after the predetermined condition is set. The imaging apparatus according to claim 1,
The imaging apparatus is characterized in that the predetermined condition is a condition for specifying one or more items selected from a group consisting of an imaging date and time, an imaging position, and personal identification information. An image file generation method for generating an image file including image data and additional data related to the image data,
About imaging information of the image data included in the additional data,
Encrypt imaging information of an item selected based on a predetermined condition, store the encrypted imaging information in an item different from the selected item in the additional data, and invalidate the selected item or its contents An image file generation method characterized by: