JP2012133747A - Imaging device, imaging device control method, program and recording medium with program recorded thereon - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an imaging device capable of easily authenticating image data that can be reproduced by authentication, and to provide an imaging device control method, a program and a recording medium with the program recorded thereon.SOLUTION: An imaging device images a subject to generate image data. Face recognition processing is performed on the image data to extract a face included in the image data. When the extracted face image is the same as a face image previously registered in a secret user management table 900, all image data including the face image can be browsed. This saves time to input a password necessary for authentication.

Description

  The present invention relates to a photographing apparatus capable of easily authenticating reproducible image data by authenticating the photographing apparatus, a control method for the photographing apparatus, a program, and a recording medium on which the program is recorded.

  Conventionally, a subject is photographed with a photographing device such as a digital camera and stored as image data in the photographing device. In particular, since the user of the photographing apparatus performs photographing in various scenes, various image data are stored in the photographing apparatus. For example, there are a wide variety of people being photographed, such as image data taken when a user travels with a friend, image data taken at a children's athletic meet, and image data taken with a colleague of a company.

  Therefore, when the image data stored in the photographing device is reproduced on a display or the like provided in the photographing device, all of the image data can be reproduced, and thus even the image data that the user does not want to view is reproduced. It was.

  In order to solve this problem, in Patent Document 1, when a face image registered in an address book of a mobile terminal is included in a photographed image photographed by the mobile terminal, the face image is set in the address book. There is disclosed a mechanism for distinguishing a method for storing the captured image, a notification method at the time of shooting, and a method for displaying image data depending on whether the setting is a non-display setting (secret).

JP 2009-290541 A

  By using the mechanism shown in Patent Document 1, it becomes possible for a user not to reproduce image data that other users do not want to view. However, when reproducing image data set to non-display, the user It is very troublesome because authentication such as password entry is required.

  In addition, image data that may be browsed for each user who browses image data may differ from image data that is not desired to be browsed. For example, it is assumed that the user A's photographing device stores image data when traveling with a friend B who is a friend of the user A and image data of an athletic meet of a child C who is a child of the user A. In this case, the friend B does not want to view the image data of the child C, but may want to reproduce the image data when traveling with the friend B. Conversely, the child C does not want to view the image data when traveling with the friend B, but may want to reproduce the image data of the athletic meet of the child C.

  That is, the image data to be reproduced is different for each user who browses. If the same non-display setting is applied to all image data for which browsing restrictions are to be applied, all the image data will be canceled by the password input from the user who is the owner of the imaging device, so this situation should be handled. There is a problem that can not be.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to easily authenticate reproducible image data by authenticating and to make appropriate image data reproducible. The aim is to provide a possible mechanism.

  In order to achieve the above object, an information processing apparatus according to claim 1 is an imaging apparatus that displays captured image data so as to be browsed, and stores image data stored therein. And subject registration means for registering the subject and photographing the subject in order to request authentication when the subject is included in the image data so as to be viewable. Photographing means, subject presence / absence judging means for judging whether or not the subject registered by the subject registration means is included in the image data photographed by the photographing means, and the image data by the subject presence / absence judging means. If it is determined that the subject is included in the image data, the image including the subject is included in the image data stored in the image data storage unit. And having a first authentication canceling means for canceling the authentication data.

  As described above, according to the present invention, the imaging device recognizes a face included in the captured image data, and the image stored in the imaging device when the face is set to non-display. Among the data, since the image data including the face can be reproduced, it is possible to reduce the labor of the user and reproduce only appropriate image data.

It is a schematic diagram which shows an example of schematic structure of the imaging device 100 in embodiment of this invention. It is a schematic diagram which shows an example of the module structure of the imaging device 100 shown in FIG. 3 is a flowchart illustrating an example of a processing procedure of a control method by the imaging apparatus 100 illustrated in FIG. 1. It is a flowchart which shows an example of the detailed process sequence of the "secret user registration process" of the module in step S109 of FIG. 4 is a flowchart showing an example of a detailed processing procedure of “secret group registration processing” of a module in step S111 of FIG. 3. 4 is a flowchart showing an example of a detailed processing procedure of “imaging processing” of a module in step S117 of FIG. 4 is a flowchart showing an example of a detailed processing procedure of “image reproduction processing” of a module in step S119 of FIG. 4 is a flowchart illustrating an example of a detailed processing procedure of “release processing at startup” of a module in step S102 of FIG. 3. It is a schematic diagram which shows an example of the secret user management table 900 memorize | stored in the table memory | storage part of FIG. It is a schematic diagram which shows an example of the secret group management table 1000 memorize | stored in the table memory | storage part of FIG. It is a schematic diagram which shows an example of the secret cancellation | release list table 1100 memorize | stored in the table memory | storage part of FIG. 5 is a schematic diagram illustrating an example of an administrator menu screen 1200. FIG. FIG. 10 is a schematic diagram illustrating an example of an administrator image reproduction screen 1300 and a secret user registration screen 1310. FIG. 10 is a schematic diagram illustrating an example of a secret group list screen 1400 and a secret group registration screen 1410. 6 is a schematic diagram showing an example of a password input screen 1500 and a secret image non-display screen 1510. FIG. It is a flowchart which shows an example of the detailed process sequence of 2nd Embodiment of the flowchart of the "imaging process" shown in FIG. 17 is a flowchart illustrating an example of a detailed processing procedure of “security level processing” of a module in step S701 in FIG. It is a schematic diagram which shows an example of 2nd Embodiment of the secret group management table 1000 memorize | stored in the table memory | storage part of FIG. It is a schematic diagram which shows an example of the secret group cancellation | release confirmation screen 1900 and the secret group cancellation | release approval screen 1910. FIG. FIG. 9 is a flowchart illustrating an example of a detailed processing procedure according to the second embodiment of the flowchart of “start-up release processing” illustrated in FIG. 8. It is a schematic diagram which shows an example of 2nd Embodiment of the secret user management table 900 memorize | stored in the table memory | storage part of FIG.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  First, a schematic configuration of the imaging device 100 according to the embodiment of the present invention will be described. FIG. 1 is a schematic diagram illustrating an example of a schematic configuration of a photographing apparatus 100 according to an embodiment of the present invention.

  In FIG. 1, a photographing apparatus 100 includes a so-called digital camera, a photographing lens 101, an imaging element (hereinafter referred to as “CCD”) 102, an analog-digital converter (hereinafter referred to as “ADC”) 103, Image processing unit 104, controller 110, buffer memory 111, flash ROM 112, interface circuit (hereinafter referred to as “I / F circuit”) 113, card holder 114, memory card 115, display driver 116, USB driver 118, and operation unit 120.

  The lens 101 includes an objective lens, a zoom lens, and a focus lens. The zoom lens and the focus lens are driven in the optical axis direction by a driving mechanism (not shown). The CCD 102 is composed of a CCD image sensor that forms an optical image incident through the lens 101, converts it into an electrical signal (analog signal), and outputs the electrical signal. The ADC 103 has a function of converting an electrical signal (analog signal) output from the CCD 102 into a digital signal.

  The image processing unit 104 includes a preprocessing unit 105, a YC processing unit 106, an electronic zoom processing unit 107, a compression unit 108, and an expansion unit 109. The image processing unit 104 generates image data from a digital signal output from the ADC 103, and performs various image processing. It has a function to perform.

  The pre-processing unit 105 has a function of performing white balance processing for adjusting the white balance of an image based on input image data and image gamma correction processing. The white balance process is a process of adjusting the color of an image so as to be close to the actual color, or adjusting the color to an appropriate color that matches a light source (such as a fluorescent lamp or sunlight). The gamma correction process is a process for adjusting the contrast of an image. Note that the pre-processing unit 105 can also perform image processing other than white balance processing and gamma correction processing.

  The YC processor 106 separates an image based on input image data into luminance information “Y”, luminance signal and blue color difference information “Cb”, and luminance signal and red color difference information “Cr”. Have The electronic zoom processing unit 107 has a function of trimming a part of an image (for example, a central part) with a predetermined size and enlarging the trimmed image to the size of the original image by signal processing. The electronic zoom processing unit 107 can, for example, cut out a central 1024 × 768 dot image from a captured 1600 × 1200 dot image and enlarge it to a size of 1600 × 1200 dot while performing data interpolation.

  The compression unit 108 has a function of compressing image data in a compression format such as a JPEG (Joint Photographic Expert Group) method. The decompression unit 109 has a function of decompressing compressed image data. For example, when compressing image data using the JPEG method, first, a discrete cosine transform process is performed (DCT process) that digitizes the ratio of high-frequency components and low-frequency components of image data. Next, a quantization process is performed for expressing the gradation or gradation of the image by a numerical value (quantization bit number). Finally, the image data is compressed by the Huffman encoding process. Specifically, the signal character string of the image data is segmented every certain bit, and a shorter code is given to a character string having a high appearance frequency. In the case of a system that records image data without performing compression processing, the compression unit 108 and the expansion unit 109 can be omitted. Further, the image data compression format is not limited to the JPEG format, and the same processing can be performed even in a GIF (Graphical Interchange Format) format.

  The controller 110 is connected to the image processing unit 104, the buffer memory 111, the flash ROM 112, the I / F circuit 113, the display driver 116, the USB driver 118, and the operation unit 120. In addition, as a functional configuration, the controller 110 includes, as a functional configuration, a control unit (not shown) that outputs a control signal for controlling the operation of each unit in accordance with an input signal from the operation unit 120, and an authentication unit that performs user authentication (Not shown).

  The buffer memory 111 temporarily stores image data when the image processing unit 104 performs image processing. The flash ROM 112 stores various setting information of the photographing apparatus 100 and user authentication information described later. The I / F circuit 113 converts the image data output from the controller 110 into a data format that can be recorded on the memory card 115. The I / F circuit 113 converts the image data read from the memory card 115 into a data format that can be processed by the controller 110.

  The card holder 114 includes a mechanism that allows the memory card 115 that is a storage medium to be attached to and detached from the photographing apparatus 100, and includes an electrical contact that enables data communication with the memory card 115. Further, the card holder 114 has a structure corresponding to the type of storage medium used in the photographing apparatus 100. The memory card 115 is a card-type storage medium that incorporates a semiconductor storage element such as a flash memory and is detachable from the card holder 114. The memory card 115 can record image data captured by the image capturing apparatus 100.

  The display driver 116 converts the image data output from the controller 110 into a signal that can be displayed on the liquid crystal display 117. Specifically, the display driver 116 performs processing for converting digital image data output from the controller 110 into an analog image signal, and then sets the image size to a size suitable for the size of the displayable area of the liquid crystal display 117. Perform the conversion process.

  The operation unit 120 includes a power switch 121, a mode dial 122, a shooting button 123, a cursor key 124, a zoom button 125, and a browse (playback) button 126. The operation unit 120 receives an operation input from the user and receives a signal corresponding to the operation content. Is output to the controller 110. The operation unit 120 includes operation buttons other than the illustrated operation buttons, but a description thereof is omitted.

  The mode dial 122 is a rotatable dial for switching a shooting operation mode. The user can rotate the mode dial 122 to perform a plurality of shooting operations including an administrator mode in which image data stored in the memory card 115 can be restricted and a shooting operation mode other than the administrator mode. It is possible to select a mode.

  The shooting operation mode other than the administrator mode is, for example, an Auto mode or a night view mode in which shooting settings (white balance, shutter speed, etc.) held in advance by the shooting apparatus 100 are easily displayed to the user, or the user can select any mode. There is a manual mode in which shooting settings can be set.

  The browsing button 126 is a button for switching to a browsing mode (image reproduction mode) for browsing captured image data. When the browse button 126 is pressed, the shooting mode is changed to the browsing mode. Note that the method for switching to the viewing mode is not limited to pressing the viewing button 126, and may be a transition method using a touch panel (not shown) on the liquid crystal display 117 or the like.

  In the browsing mode, the controller 110 reads setting information and image data from the memory card 115 attached to the card holder 114 via the I / F circuit 113. The setting information includes the number of images recorded on the currently installed memory card 115 and the capacity of the recorded image data. The read image data is, for example, image data or thumbnail data for one image. Note that the image data read from the memory card 115 is compressed in a predetermined compression format as described above.

  The image data read from the memory card 115 is input to the display driver 116 via the I / F circuit 113 and the controller 110. The display driver 116 displays the input image data on the liquid crystal display 117.

  The cursor key 124 is a key for the user to perform a predetermined instruction or function selection to the photographing apparatus. The user can perform operation inputs such as various setting information and user authentication information with respect to the imaging apparatus 100 with the cursor keys 124. In addition, the cursor key 124 can display a menu screen on the liquid crystal display 117 or select a predetermined function of the photographing apparatus 100.

  Next, a photographing operation in the photographing apparatus 100 will be described with reference to FIG.

  First, the user operates the power switch 121 to turn on the photographing apparatus 100. Then, power is supplied to each circuit from a battery (not shown) built in the photographing apparatus 100, and activation processing of the photographing apparatus 100 (operation control for opening the lens barrier, reset processing of the microcomputer, etc.) is performed. The photographing apparatus 100 is turned on when the power switch 121 is pressed when the power is turned off.

  When the photographing apparatus 100 shifts to the photographing mode, an optical image enters the photographing apparatus via the lens 101 and is formed on the CCD 102. The CCD 102 converts the incident optical image into an electrical signal and outputs it to the ADC 103. The ADC 103 converts an input electric signal (analog signal) into a digital signal. A digital signal output from the ADC 103 is input to the image processing unit 104.

  A preprocessing unit 105 in the image processing unit 104 generates image data based on an input digital signal, and performs white balance processing, gamma correction processing, and the like. In the YC processing unit 106 in the image processing unit 104, the image data is separated into the luminance signal Y and the color difference signals Cr and Cb, and processing for reducing the information amount of the color difference signals Cr and Cb is performed. The information amount reduction processing for the color difference signals Cr and Cb is, for example, “4: 2: 2 downsampling processing” for thinning out color information in the main scanning direction of an image, or “4: 1” for thinning out color information in the vertical and horizontal directions of an image. : 1 downsampling process ". When image processing is performed in the preprocessing unit 105 and the YC processing unit 106, image data is temporarily stored in the buffer memory 111, and image processing is performed while reading the image data stored in the buffer memory 111 as needed. Is called.

  Image data (uncompressed) output from the image processing unit 104 is input to the controller 110. The controller 110 outputs the image data output from the image processing unit 104 to the display driver 116. The display driver 116 converts input image data (digital signal) into an analog image signal, and adjusts the size of the image based on the analog image signal to a size that can be displayed on the liquid crystal display 117. The display driver 116 controls the liquid crystal display 117 to display an image. At this time, the image displayed on the liquid crystal display 117 is an image (through image) generated by performing signal processing continuously in the CCD 102, the ADC 103, and the image processing unit 104.

  When the user operates the shooting button 123 at a desired timing while the through image is displayed on the liquid crystal display 117, the controller 110 outputs a control signal to the image processing unit 104. When a control signal is input to the image processing unit 104, the compression unit 108 stores the image data subjected to image processing in the preprocessing unit 105 and the YC processing unit 106 in the buffer memory 111, and performs compression processing. Specifically, discrete cosine transform processing (DCT processing) that digitizes the ratio of high-frequency components and low-frequency components of image data, and quantization that expresses the gradation and gradation of an image with the number of quantization bits Processing, Huffman coding processing for dividing a signal character string of image data into fixed bits and giving a shorter code to a character string having a high appearance frequency is performed. The compressed image data is displayed on the liquid crystal display 117 via the controller 110 and the display driver 116. The compressed image data is recorded on the memory card 115 via the card holder 114 (image data storage means).

  If the zoom button 125 is operated before the shooting button 123 is operated, the controller 110 can execute an optical zoom process or an electronic zoom process to enlarge or reduce the size of the image. When the shooting button 123 is operated after the zoom button 125 is operated, the image data of the enlarged or reduced image is recorded in the memory card 115. Note that the image data may be recorded in the flash ROM 112.

  The above is the description of the schematic configuration of the imaging apparatus 100 according to the embodiment of the present invention.

  Next, an example of a functional configuration of the photographing apparatus 100 will be described. FIG. 2 is a schematic diagram illustrating an example of a functional configuration of the imaging apparatus 100 illustrated in FIG.

  As shown in FIG. 2, the photographing apparatus 100 includes an image reproduction unit 201, a face recognition unit 202, a secret setting registration unit 203, a secret setting release unit 204, a photographing unit 205, an activation unit 206, an end unit 207, and a table storage unit. Each functional configuration of 208 and the image data storage unit 209 is configured. The table storage unit 208 stores a secret user management table 900, a secret group management table 1000, and a secret cancellation list table 1100.

  Here, in the present embodiment, the table storage unit 208 of FIG. 2 is configured in the flash ROM 112 shown in FIG. 2, for example, but other forms may be used.

  The secret user management table 900 stored in the table storage unit 208 in FIG. 2 will be described with reference to FIG.

  When a face image 906 of a user registered in the secret user management table 900 (hereinafter, “secret user”) is included in the image data, the image data cannot be reproduced in the image reproduction mode. In the case of performing reproduction, a password input screen 1500 shown in FIG. 15 is displayed in step S505 described later, and password authentication is required.

  The secret user management table 900 shown in FIG. 9 includes, for each face recognition No. 901, a user name 902 that is a user name, a password 903 that is necessary for authentication when displaying image data including the secret user, and a secret user group. Are group No. 904, a registration date 905 indicating the date registered as a secret user, and a face image 906 that is an image of the secret user's face.

  The face recognition number 901 is an identification number that is uniquely assigned to each face recognized by the face recognition unit 202. The user name 902 is the name of the secret user of the face recognized by the face recognition unit 202. It is a name arbitrarily determined for each secret user. The password 903 is authentication information necessary when image data including a face image matching the face image 906 is read from the memory card 115 or the flash ROM 112 and displayed. When the password 903 is input by the user, display is permitted. In the present embodiment, permission to display image data included in the secret user is referred to as cancellation. The group No. 904 is associated with the group No. 1001 managed in the secret group management table 1000 described later. When grouping is set by the user, the group No. 1001 of the group is stored. The registration date 905 stores the date registered in the secret user management table 900. In this embodiment, “Year / Month / Day” is stored in the form of “YYYY / MM / DD”, but the present invention is not limited to this. The face image 906 stores the secret user's face image data recognized in step S203, which will be described later. The face image 906 may store binary data, or may store a link to the secret user's face image stored in the flash ROM 112. In this embodiment, whether or not the image data should be hidden is determined based on whether or not the face data 906 is included in the image data. However, if it can be recognized that the image data includes a secret user, what happens? It may be a simple method.

  Next, the secret group management table 1000 stored in the table storage unit 208 in FIG. 2 will be described with reference to FIG.

  The secret group management table 1000 is a table for grouping secret users and canceling the non-display of the image data including the secret users grouped in step S406 described later. Note that the grouped group is a secret group.

  In the secret group management table 1000 shown in FIG. 10, for each group No 1001, a group name 1002 that is the name of the secret group and a registration date 1003 that indicates the date on which the secret group is registered are associated with each other.

  Group No. 1001 is an identification number uniquely assigned to each registered secret group. The group name 1002 is the name of the secret group. The name of the secret group is arbitrary. The registration date 1003 stores the date registered in the secret group management table 1000. In this embodiment, “Year / Month / Day” is stored in the form of “YYYY / MM / DD”, but the present invention is not limited to this.

  Next, the secret cancellation list table 1100 stored in the table storage unit 208 of FIG. 2 will be described with reference to FIG.

  If stored in the secret cancellation list table 1100, the stored image data of the secret user can be displayed on the liquid crystal display 117.

  In the secret cancellation list table 1100 shown in FIG. 11, the face recognition No. 1101 is associated with the previous cancellation date and time 1102, which is the date and time when the image data including the secret user indicated by the face recognition No. 1101 is released.

  The face recognition No. 1101 stores the released secret user face recognition No. 901. The previous release date 1102 stores the release date. In this embodiment, “year / month / day hour: minute: second” is stored in the form of “YYYY / MM / DD H24: MI: SS”, but the present invention is not limited to this.

  Next, the image reproduction unit 201, the face recognition unit 202, the secret setting registration unit 203, the secret setting release unit 204, the photographing unit 205, the activation unit 206, the end unit 207, and the image data storage unit 209 will be described.

  The image playback unit 201 has a function of reading captured image data from the memory card 115 or the flash ROM 112 and displaying the image data on the liquid crystal display 117 through the display driver 116. When displaying image data, if the user registered in the secret user management table 900 is included in the image data, the password input is accepted as non-display. If the user registered in the secret cancellation list table 1100 is included in the image data, it is displayed.

  The face recognition unit 202 has a function of performing predetermined image processing on image data stored in the memory card 115 or the flash ROM 112 and captured image data to recognize a human face. Further, it is determined whether or not the recognized face matches the face image 906 of the secret user management table 900.

  The secret setting registration unit 203 has a function of storing information about a user who is a secret user in the secret user management table 900. In addition, when a secret group is created, the secret group management table 1000 has a function of storing various types of information.

  The secret setting cancellation unit 204 has a function of storing various types of information in the secret cancellation list table 1100 when it is desired to cancel the non-display of secret users registered in the secret user management table 900. Specifically, in the image data of the secret user or secret group, the password input by the user operation is compared with the password 903 registered in the secret user management table 900, and the non-display setting is canceled only when they match. . Also, the release state of the image data for which the non-display setting has been released is registered in the secret release list table 1100. Further, when a face is recognized from the most recently captured image data and the recognized face image is registered in the face image 906, the non-display setting of the corresponding image data is automatically canceled. Also, the release state of the image data for which the non-display setting has been released is registered in the secret release list table 1100. In this embodiment, the face image of the user as a subject is used for canceling the non-display setting. However, any image that shows the characteristics of the subject may be used instead of the face image. For example, it may be the whole body of the user or a part of the body. Further, the subject is not limited to a person, and may be a plant or an animal. The subject is not limited to this.

  The image capturing unit 205 controls various hardware and functions of the image capturing apparatus 100 to capture a subject and generate image data. The shooting operation is as described above.

  The activation unit 206 has a function of activating the imaging apparatus 100 when it detects that the power switch 121 of the imaging apparatus 100 is pressed. Also, at the time of activation, the image data that has been secret-released at the end of the previous time is discriminated from the secret-cancellation list table 1100, and the user is allowed to confirm whether or not to cancel the non-display setting. When the non-display setting is not canceled, the initialization is performed by deleting all the records stored in the secret cancellation list table 1100.

  The end unit 207 has a function of turning off the power of the photographing apparatus 100 and ending when detecting the pressing of the power switch 121 of the photographing apparatus 100. Information of the secret user management table 900, secret group management table 1000, and secret cancellation list table 1100 is held so as not to be deleted.

  The image data storage unit 209 has a function of storing the image data photographed by the photographing unit 205 in the memory card 115 or the flash ROM 112.

  The above is an example of the functional configuration of the image capturing apparatus 100.

  Next, a series of processing procedures of the present embodiment executed by the photographing apparatus 100 will be described. FIG. 3 is a flowchart illustrating an example of a series of processing procedures according to the present exemplary embodiment performed by the imaging apparatus 100 illustrated in FIG. 1. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  First, in step S <b> 101, when the photographing apparatus 100 detects that the power switch 121 is pressed, the photographing unit 100 is turned on by the activation unit 206 to activate the photographing apparatus 100.

  In step S <b> 102, the image capturing apparatus 100 causes the activation unit 206 to perform activation cancellation processing for continuously canceling the secret user who canceled the non-display setting at the previous activation. Details of the release process at startup will be described later with reference to FIG.

  In step S103, the imaging apparatus 100 determines whether or not the administrator mode is set. Specifically, the mode dial 122 provided in the photographing apparatus 100 determines that the administrator mode is selected when the administrator mode is selected, and otherwise determines that the mode is not the administrator mode. Whether or not the administrator mode is selected is not limited to this, and the administrator mode may be selected when the administrator mode is selected from a menu screen (not shown) displayed on the liquid crystal display 117, or another method may be used. If it is determined that the mode is the administrator mode, the process proceeds to step S104. If it is determined that the mode is not the administrator mode, the process proceeds to step S115.

  Hereinafter, each step from step S104 to step S114 is processing in the administrator mode.

  If it is determined in step S103 that the mode is the administrator mode, in step S104, the imaging device 100 accepts authentication as to whether or not the user is an administrator. For the authentication, a password input screen may be displayed on the liquid crystal display 117 to accept the input, or another method may be used. The authentication method is not limited to this.

  In step S105, the imaging device 100 determines whether or not the password received in step S104 is correct. The authentication source password is stored in the flash ROM 112 or the like, and whether the authentication is correct or not is determined by comparing with the authentication source password. If it is determined that the password is correct, the process proceeds to step S106. If it is determined that the password is not correct, the use of the administrator mode is rejected, and the process proceeds to step S115, which is a normal mode that is not the administrator mode. Proceed with the process.

  In step S <b> 106, the photographing apparatus 100 displays an administrator menu screen 1200 (see FIG. 12) on the liquid crystal display 117. The administrator menu screen 1200 includes a secret user registration button 1201, a secret group registration button 1202, and a secret cancellation valid time setting button 1203. The configuration of the administrator menu screen 1200 is not limited to this.

  In step S <b> 107, the imaging apparatus 100 receives an operation from the user with respect to various buttons displayed on the administrator menu screen 1200, and determines the pressed button. Note that the liquid crystal display 117 in this embodiment is described as a display having a touch panel, but selection may be received by input from the cursor key 124. Various screen operations displayed on the liquid crystal display 117 are not limited thereto.

  In step S108, the imaging apparatus 100 determines whether or not the button pressed in step S107 is the secret user registration button 1201. If it is determined that the user is the secret user registration button 1201, the process proceeds to step S109. If it is determined that the user is not the secret user registration button 1201, the process proceeds to step S110.

  In step S <b> 109, the photographing apparatus 100 causes the secret setting registration unit 203 to execute a secret user registration process for registering a secret user from image data stored in the memory card 115 or the flash ROM 112. Details of the secret user registration process will be described later with reference to FIG.

  In step S110, the image capturing apparatus 100 determines whether the button pressed in step S107 is the secret group registration button 1202. If it is determined that the secret group registration button 1202 is selected, the process proceeds to step S111. If it is determined that the secret group registration button 1202 is not selected, the process proceeds to step S112.

  In step S <b> 111, the image capturing apparatus 100 causes the secret setting registration unit 203 to execute a secret group registration process for performing grouping settings for secret users registered by the secret user registration process in step S <b> 109. Details of the secret group registration process will be described later with reference to FIG.

  In step S112, the photographing apparatus 100 determines whether or not the button pressed in step S107 is the secret release effective time setting button 1203. If it is determined that the secret cancellation effective time setting button 1203 is selected, the process proceeds to step S113. If it is determined that the secret cancellation effective time setting button 1203 is not selected, the process proceeds to step S114.

  In step S113, the image capturing apparatus 100 accepts a setting of an effective time for cancellation in the activation cancellation process in step S102 (authentication cancellation period setting means). Specifically, this setting is used when it is determined whether or not the secret user registered in the secret cancellation list table 1100 is canceled when the image capturing apparatus 100 is activated in step S602 described later. For example, when the effective time is set as “1 hour”, if the restart is performed within one hour, the non-display setting of the image data including the secret user registered in the secret cancellation list table 1100 is canceled, and one hour or more has passed. If the secret user is registered in the secret cancellation list table 1100, the cancellation is not performed. The effective time is set by displaying an input screen (not shown), acquiring the effective time input by the user, and storing it in the flash ROM 112.

  In step S114, the photographing apparatus 100 determines whether or not the secret user registration button 1201, the secret group registration button 1202, and the secret release effective time setting button 1203 are not pressed, and the pressing of the power switch 121 is detected. . That is, it is determined whether or not an instruction to turn off the power of the photographing apparatus 100 has been issued. If the pressing of the power switch 121 is detected, the process proceeds to step S121. If the pressing of the power switch 121 cannot be detected, the process returns to step S107.

  Next, the processing in the normal mode that is not the administrator mode in each step of steps S115 to S120 will be described.

  If it is determined in step S103 that the mode is not the administrator mode, step S115 receives an operation from the user with respect to various buttons provided in the photographing apparatus 100, and determines the pressed button. Specifically, the mode indicated by the mode dial 122 provided in the photographing apparatus 100 is determined.

  In step S116, the photographing apparatus 100 determines whether or not the mode selected in step S115 is the photographing mode. If it is determined that the mode is the shooting mode, the process proceeds to step S117. If it is determined that the mode is not the shooting mode, the process proceeds to step S118.

  In step S <b> 117, the photographing apparatus 100 causes the photographing unit 205 to perform photographing processing for canceling the non-display setting when the secret user is included in the image data obtained by photographing the subject. Details of the photographing process will be described later with reference to FIG.

  In step S118, the photographing apparatus 100 determines whether or not the mode selected in step S115 is an image reproduction mode. If it is determined that the mode is the image playback mode, the process proceeds to step S119. If it is determined that the mode is not the image playback mode, the process proceeds to step S120.

  In step S <b> 119, when the image data stored in the memory card 115 or the flash ROM 112 is displayed on the liquid crystal display 117, the photographing apparatus 100 executes an image reproduction process that performs display or non-display control. Details of the image reproduction processing will be described later with reference to FIG.

  In step S <b> 120, the image capturing apparatus 100 determines whether or not the pressing of the power switch 121 is detected. That is, it is determined whether or not an instruction to turn off the power of the photographing apparatus 100 has been issued. If the pressing of the power switch 121 is detected, the process proceeds to step S121. If the pressing of the power switch 121 cannot be detected, the process returns to step S115.

  In step S <b> 121, the photographing apparatus 100 ends the activation of the photographing apparatus by the end unit 207. Further, the current date and time are stored in the previous release date and time 1102 of each record registered in the secret release list table 1100. As a result, the elapsed time from the previous end time can be measured during the startup release process.

  The above is description of the flowchart which shows an example of a series of processing procedures of the present Example by the imaging device 100.

  Next, the procedure of the secret user registration process executed by the image capturing apparatus 100 will be described. FIG. 4 is a flowchart illustrating an example of a processing procedure of secret user registration processing by the imaging apparatus 100 illustrated in FIG. 1. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  In step S201, the image capturing apparatus 100 acquires image data stored in the memory card 115 or the flash ROM 112 and displays it on the administrator image reproduction screen 1300 (see FIG. 13). The order of the image data to be acquired is not particularly limited, but a form in which a thumbnail of the image data is displayed on the liquid crystal display 117 and the image data corresponding to the thumbnail selected by the user may be acquired. The administrator image reproduction screen 1300 is provided with a secret user management button 1301. The secret user management button 1301 is a button that the user presses when registering a face shown in the displayed image data as a secret user. It is.

  In step S202, the imaging apparatus 100 determines whether or not the secret user management button 1301 on the administrator image reproduction screen 1300 has been pressed. If it is determined that the secret user management button 1301 has been pressed, the process proceeds to step S203, and if it cannot be determined that the secret user management button 1301 has been pressed, the process waits until it is pressed. Alternatively, reselection of image data may be accepted.

  In step S <b> 203, the image capturing apparatus 100 performs predetermined image processing on the displayed image data by the face recognition unit 202 to recognize a human face. In the image data displayed on the administrator image reproduction screen 1300 in FIG. 13, the face 1302 is recognized.

  In step S <b> 204, the imaging apparatus 100 determines whether or not the user is a secret user registered in the secret user management table 900 stored in the table storage unit 208. The secret user face image stored in the face image 906 of the secret user management table 900 is compared with the face recognized in step S203 to determine whether or not they are the same person. That is, if the user has already been registered as a secret user, there is no need to register again, so confirmation is performed in step S204. If it is determined that the user is a secret user registered in the secret user management table 900, the process proceeds to step S210. If it is determined that the user is not a secret user registered in the secret user management table 900, the process proceeds to step S205. To proceed.

  In step S205, the photographing apparatus 100 confirms whether or not to register the recognized face 1302 as a secret user on the administrator image reproduction screen 1300 displayed on the liquid crystal display 117, a YES button 1303, and a NO button. 1304 is displayed.

  In step S206, the imaging device 100 determines which of the buttons displayed in step S205 is pressed, the YES button 1303 or the NO button 1304. If it is determined that the YES button 1303 has been pressed, the process proceeds to step S207. If it is determined that the NO button 1304 has been pressed, the process proceeds to step S210.

  In step S207, the image capturing apparatus 100 newly creates a record in the secret user management table 900, and assigns a unique number to the face recognition number 901. Then, a secret user registration screen 1310 (see FIG. 13) is displayed on the liquid crystal display 117, and an input from the user is accepted. The secret user registration screen 1310 includes a face recognition No. 1311, a user name input form 1312, a password input form 1313, a user management group input form 1314, a registration button 1315, and a cancel button. The button 1316 is configured. Face recognition No. 1311, user name input form 1312, password input form 1313, and user management group input form 1314 correspond to face recognition No. 901, user name 902, password 903, and group No. 904 in the secret user management table 900, respectively. There may be other input forms as necessary. The configuration of the secret user registration screen 1310 is not limited to this.

  In step S208, the imaging device 100 determines which of the registration button 1315 and the cancel button 1316 displayed in step S207 has been pressed. If it is determined that the registration button 1315 has been pressed, the process proceeds to step S209. If it is determined that the cancel button 1316 has been pressed, the process proceeds to step S210.

  In step S209, the imaging apparatus 100 acquires the value input in each input form displayed in step S207, and stores it in the record of the secret user management table 900 newly created in step S207 (subject registration means). . The face recognition No 1311 is stored in the face recognition No 901, and the information input in the user name input form 1312 is stored in the user name 902. Further, information input to the password input form 1313 is stored in the password 903, and information input to the user management group input form 1314 is stored in the group No 904. In addition, the current date and time of the photographing apparatus 100 is stored in the registration date 905, and the face image recognized in step S203 is stored in the face image 906. Thereby, registration of a secret user is completed. After the registration is completed, the display on the liquid crystal display 117 is returned to the administrator image reproduction screen 1300.

  In step S210, the imaging device 100 determines whether there are other faces recognized in step S203. That is, since a plurality of users may be photographed in the image data, when a plurality of faces are recognized, a registration process for a plurality of users can be performed. If there are other faces recognized in step S203, the process returns to step S204, and if there are no other faces recognized in step S203, the process proceeds to step S211.

  In step S <b> 211, the image capturing apparatus 100 determines whether an input is received so as to display the next image data. Specifically, it is determined whether or not the cursor key 124 has been pressed to switch the display of the image data. Image data can be switched by pressing the cursor key 124 left and right. If there is an input to display the next image data, the process returns to step S201. If there is no input to display the next image data, the secret user registration process is terminated.

  The above is the description of the flowchart showing an example of the processing procedure of the secret user registration processing of the present embodiment by the imaging apparatus 100.

  Next, a processing procedure of secret group registration processing executed by the image capturing apparatus 100 will be described. FIG. 5 is a flowchart illustrating an example of a processing procedure of secret group registration processing by the imaging apparatus 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  As described above, the secret group is a group in which secret users are grouped. When a secret user is registered in the secret group and the hidden setting of the secret user is canceled, other secret users included in the secret group to which the released secret user belongs are also released.

  In step S301, the photographing apparatus 100 displays a secret group list screen 1400 (see FIG. 14) on the liquid crystal display 117. The secret group list screen 1400 displays group numbers 1001 and group names 1002 stored in the secret group management table 1000. Also, an edit button 1401 for editing a secret group that has already been registered and a new button 1402 for creating a new secret group are provided. The configuration of the secret group list screen 1400 is not limited to this.

  In step S302, the imaging apparatus 100 determines whether the edit button 1401 or the new button 1402 displayed on the secret group list screen 1400 has been pressed. If it is determined that the edit button 1401 or the new button 1402 has been pressed, the process proceeds to step S303, and if it cannot be determined that the edit button 1401 or the new button 1402 has been pressed, the process stands by.

  In step S <b> 303, the image capturing apparatus 100 displays a secret group registration screen 1410 (see FIG. 14) on the liquid crystal display 117. In this embodiment, a screen when the new button 1402 is pressed is displayed on the secret group registration screen 1410. When the new button 1402 is pressed, a new record is created in the secret group management table 1000, and a unique number is stored in the group number 1001 of the new record. And the said group No1001 is displayed on group No1411, and the input with respect to the group name input form 1412 is received. When the edit button 1401 is pressed, the record of the secret group to be edited is acquired from the secret group management table 1000 and displayed so as to be editable.

  In step S304, the imaging apparatus 100 determines whether the registration button 1414 displayed on the secret group registration screen 1410 has been pressed. If it is determined that the registration button 1414 has been pressed, the process proceeds to step S305. If it cannot be determined that the registration button 1414 has been pressed, the process waits until it is pressed.

  In step S305, the imaging apparatus 100 stores information on various input forms on the secret group registration screen 1410 displayed in step S303 in a corresponding record of the secret group management table 1000 (subject group registration unit). In this embodiment, when the new button 1402 is pressed, information input by the user in the group name input form 1412 is stored in the group name 1002. The same applies when the edit button 1401 is pressed. When the update of the secret group management table 1000 is completed, the secret group registration process is terminated.

  The above is the description of the flowchart showing an example of the processing procedure of the secret group registration processing of the present embodiment by the imaging apparatus 100.

  Next, a processing procedure of imaging processing executed by the imaging device 100 will be described. FIG. 6 is a flowchart illustrating an example of a processing procedure of imaging processing by the imaging device 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  In step S401, the image capturing apparatus 100 captures an image of the subject by the image capturing unit 205 (imaging unit). The shooting operation is as described above.

  In step S402, the imaging device 100 stores the image data captured in step S401 in the memory card 115 or the flash ROM 112.

  In step S403, the image capturing apparatus 100 performs face recognition processing on the image data stored in step S402 by the face recognition unit 202 (subject presence / absence determination unit). Specifically, it is determined by image processing whether or not a human face is captured in the image data. If the human face is captured, the face is extracted.

  In step S404, the image capturing apparatus 100 determines whether the recognized face has been registered in the face image 906 of the secret user management table 900 as a result of the face recognition process performed in step S403. Specifically, the recognized face is matched with the face of the face image 906, and it is determined whether or not there is a high similarity. The method for determining whether or not the recognized face and the face image 906 are the same is not limited to this. If it is determined that the recognized face has been registered in the face image 906 of the secret user management table 900, the process proceeds to step S405, and the recognized face has been registered in the face image 906 of the secret user management table 900. If not, the process proceeds to step S408.

  In step S405, the imaging device 100 determines whether or not the user who is determined to be registered in the face image 906 of the secret user management table 900 in step S404 belongs to the secret group. Specifically, it is determined whether or not a value is stored in the group number 904 of the record of the corresponding face image 906. If it is determined that the user belongs to the secret group, the process proceeds to step S406. If it is determined that the user does not belong to the secret group, the process proceeds to step S407.

  In step S406, the image capturing apparatus 100 registers all the users photographed by the secret setting cancellation unit 204 and other users who belong to the secret group to which the user belongs in the secret cancellation list table 1100 (second list). Authentication deactivation means). Specifically, the face recognition No. 901 of the user whose face has been recognized is stored in the face recognition No. 1101 of the secret release list table 1100, and the stored time is stored in the previous release date and time 1102. Thereby, the non-display setting of the secret registered user can be canceled in step S504 described later. In addition, by storing the previous release date and time 1102, whether or not the secret release effective time in step S113 described above has elapsed can be determined in step S602 described later. In other words, if the secret release effective time has passed, the secret mode is set, and if not, it can be reproduced as being released. Further, a record having a group No. 904 that matches the user group No. 904 registered in the secret release list table 1100 is searched, and the user of the extracted record is also registered in the secret release list table 1100. For example, it is assumed that a user's athletic meet is held with the user, the user's wife, and the user's child. Furthermore, it is assumed that these three people are registered as secret users. In this case, if the user's child, the user's wife, and the user himself / herself are photographed three times, the image data for all members is released, which is very troublesome. Therefore, these three persons are registered as a secret group, and when one person is released, the other two persons are also released.

  In step S407, the imaging device 100 registers the user imaged by the secret setting cancellation unit 204 in the secret cancellation list table 1100 (first authentication cancellation unit). The registration method is the same as in step S406. In this case, since the user is not registered in the secret group, only the user cancels the non-display setting.

  In step S408, the imaging device 100 determines whether there are other faces recognized in step S403. That is, since there is a possibility that a plurality of faces are captured in the image data photographed in step S401, the processes in steps S404 to S407 are repeated for the number of faces recognized in step S403.

  In step S409, the photographing apparatus 100 determines whether or not the photographing button 123 has been pressed by an operation from the user. That is, it is determined whether or not a photographing operation has been performed again. If it is determined that the shooting button 123 has been pressed by a user operation, the process proceeds to step S401. If it cannot be determined that the shooting button 123 has been pressed by a user operation, the shooting process ends. To do.

  The above is the description of the flowchart showing an example of the processing procedure of the imaging process of the present embodiment by the imaging apparatus 100.

  Next, a processing procedure of image reproduction processing executed by the image capturing apparatus 100 will be described. FIG. 7 is a flowchart illustrating an example of a processing procedure of image reproduction processing by the imaging apparatus 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  In step S <b> 501, the image capturing apparatus 100 acquires image data stored in the memory card 115 or the flash ROM 112. The acquired image data may be image data designated by the user, or may be other than that.

  In step S502, the image capturing apparatus 100 performs face recognition processing on the image data stored in step S501 by the face recognition unit 202. Specifically, it is determined by image processing whether or not a human face is captured in the image data. If the human face is captured, the face is extracted.

  In step S503, the image capturing apparatus 100 determines whether the recognized face has been registered in the face image 906 of the secret user management table 900 as a result of the face recognition processing in step S502. Specifically, the recognized face is matched with the face of the face image 906, and it is determined whether or not there is a high similarity. The method for determining whether or not the recognized face and the face image 906 are the same is not limited to this. If it is determined that the recognized face has been registered in the face image 906 of the secret user management table 900, the process proceeds to step S504, and the recognized face has been registered in the face image 906 of the secret user management table 900. If not, the process proceeds to step S508.

  In step S504, the image capturing apparatus 100 determines whether or not the user of the face recognized in step S502 has been registered in the secret cancellation list table 1100 (cancellation determination unit). That is, a record having the face image 906 of the face recognized in step S502 is searched from the secret user management table 900, and whether or not the face recognition No 1101 matching the face recognition No 901 of the corresponding user is in the secret cancellation list table 1100. Determine. If it has been canceled, image display may be permitted, and if not, it is necessary to prompt for cancellation by a password in step S505 described later. If it is determined that the user of the recognized face has been registered in the secret cancellation list table 1100, the process proceeds to step S508, and it is determined that the user of the recognized face has not been registered in the secret cancellation list table 1100. If so, the process proceeds to step S505.

  In step S505, the photographing apparatus 100 displays a password input screen 1500 (see FIG. 15) on the liquid crystal display 117, and accepts input of a password in the password input field 1501. In other words, since the image data including the secret user's face is to be displayed, the input of the password of the user is accepted.

  In step S506, the imaging apparatus 100 determines whether or not the password received in step S505 is correct. Specifically, it is determined whether or not the password 903 registered in the secret user management table 900 and included in the image data to be displayed matches the password accepted in step S505. judge. If it is determined in step S505 that the input password is correct, the process proceeds to step S507. If it is determined in step S505 that the input password is not correct, the process proceeds to step S510. .

  In step S507, since the correct password has been input, the image capturing apparatus 100 registers the user in the secret cancellation list table 1100. The registration method to the secret cancellation list table 1100 is as described above.

  In step S508, the imaging apparatus 100 determines whether there are other faces recognized in step S502. That is, since there is a possibility that a plurality of faces are captured in the image data acquired in step S501, the processes in steps S503 to S507 are repeated for the number of faces recognized in step S502.

  In step S509, the imaging apparatus 100 displays the image data acquired in step S501 on the liquid crystal display 117 (display unit). That is, it is displayed when the secret user is not included in the image data or when all the secret users are released.

  In step S510, since the passwords do not match, the photographing apparatus 100 does not display the image data acquired in step S501 on the liquid crystal display 117 (display unit). Specifically, control is performed such that image data is not displayed as in the secret image non-display screen 1510 (see FIG. 15).

  In step S511, the imaging apparatus 100 determines whether or not there has been an operation from the user to display another image. If it is determined that there has been an operation from the user to display another image, the process proceeds to step S501. If it has not been determined that there has been an operation from the user to display another image, The image reproduction process ends.

  The above is the description of the flowchart showing an example of the processing procedure of the image reproduction processing of the present embodiment by the photographing apparatus 100.

  Next, the processing procedure of the release process at startup executed by the photographing apparatus 100 will be described. FIG. 8 is a flowchart illustrating an example of a processing procedure of a release process at startup by the imaging apparatus 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  In step S <b> 601, the image capturing apparatus 100 determines whether data is stored in the secret cancellation list table 1100. That is, it is determined whether or not there is a secret user stored in the secret cancellation list table 1100 at the previous activation. If it is determined that data is stored in the secret cancellation list table 1100, the process proceeds to step S602. If it is determined that no data is stored in the secret cancellation list table 1100, the data is not displayed at startup. Since there is no secret user whose display setting should be canceled, the cancellation process at the time of start is terminated.

  In step S602, the imaging apparatus 100 determines whether or not the previous cancellation date 1102 stored in the secret cancellation list table 1100 is within the secret cancellation valid period (authentication cancellation period determination unit). Specifically, the previous release date / time 1102 is compared with the current date / time to determine whether or not the secret release effective period set in step S113 described above has been exceeded. As a result, it is possible to prevent the user who has once canceled the non-display setting from being kept in the release state. In addition, the secret cancellation list table 1100 is cleared each time the image capturing apparatus 100 is turned off, and the time and effort for releasing the secret each time the power is turned on can be reduced. If it is determined that the previous release date 1102 stored in the secret release list table 1100 is within the secret release valid period, the process proceeds to step S603, and the previous release date 1102 stored in the secret release list table 1100 is updated. If it is determined that it is not within the secret cancellation valid period, the process proceeds to step S606. It should be noted that whether or not the secret release effective period is exceeded may be equal to or longer than the secret release effective period or may be longer than the secret release effective period. The threshold judgment is not limited to this.

  In step S <b> 603, the photographing apparatus 100 displays a release confirmation message (not shown) on the liquid crystal display 117. That is, the user confirms whether or not the user who has been released at the previous activation is to be released again.

  In step S604, the imaging device 100 determines whether or not the user has performed an OK operation on the cancellation confirmation message displayed in step S603. Specifically, an OK button (not shown) and a cancel button (not shown) are displayed at the same time as displaying the release confirmation message in step S603, and determination is made according to whether or not the OK button has been pressed. If it is determined that the user has performed an OK operation on the cancellation confirmation message displayed in step S603, the process proceeds to step S605, and the user confirms the cancellation confirmation message displayed in step S603. If it is determined that the cancel operation has been performed, the process proceeds to step S606.

  In step S605, the imaging apparatus 100 updates the previous release date 1102 of the secret release list table 1100 to the current date. Thereby, at the next activation, it can be determined whether or not the secret cancellation effective period has elapsed from the current date and time.

  In step S <b> 606, the imaging apparatus 100 deletes the data stored in the secret cancellation list table 1100 because the cancellation is not performed. That is, in order to cancel again, it is necessary to cancel by the above-described photographing process or image reproduction process.

  The above is the description of the flowchart illustrating an example of the processing procedure of the release processing at the start-up according to the present exemplary embodiment by the imaging apparatus 100.

  Next, a second embodiment of the photographing process described above with reference to FIG. 6 will be described. In the second embodiment of the photographing process, in step S701 described later, in consideration of the security level of the secret group, control is performed as to whether or not cancellation of the secret group that has already been canceled is cancelled. That is, when a user of a secret group different from the secret group is photographed while the secret group is released, the secret group being released may not be viewed by the user who has taken the image. Therefore, by canceling the release of the secret group that has been released in such a case, the display is returned to the non-display state and is controlled so as not to be viewed by the user. By doing so, the user of the photographing apparatus can browse only appropriate image data. Hereinafter, a description will be given based on FIGS. 16 and 17.

  A processing procedure related to the second embodiment of the photographing process executed by the photographing apparatus 100 will be described. FIG. 16 is a flowchart illustrating an example of a processing procedure of imaging processing by the imaging device 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  Note that the processing in steps S401 to S409 in FIG. 16 is the same as that in steps S401 to S409 in FIG.

  When step S403 ends, in step S701, the imaging apparatus 100 performs security level processing for controlling whether to cancel the cancellation of the secret group canceled in step S405 according to the security level, by the secret setting cancellation unit 204. To do. Details of the security level process will be described later with reference to FIG.

  Next, a security level processing procedure executed by the imaging apparatus 100 will be described. FIG. 17 is a flowchart illustrating an example of a processing procedure of security level processing by the photographing apparatus 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

In step S <b> 801, the imaging apparatus 100 determines whether there is a record in the secret cancellation list table 1100. That is, it is determined whether there is a user whose secret has been canceled. If it is determined that there is a record in the secret cancellation list table 1100, the process proceeds to step S802. If it is determined that there is no record in the secret cancellation list table 1100, the series of processes ends.

  In step S802, the imaging apparatus 100 acquires one record of the secret cancellation list table 1100. In this embodiment, the records registered in the secret cancellation list table 1100 are acquired one by one and the processing in steps S803 to S812 described later is performed. However, a plurality of records may be processed at one time.

  In step S803, the imaging apparatus 100 determines whether or not the secret group to which the user indicated by the record acquired in step S802 belongs and the secret group to which the user shot in step S401 belongs are different (subject group). Determination means). That is, if it belongs to the same secret group as the user who has taken the image, it may be released, but if not, control such as canceling the release of the secret group being released becomes necessary. For this reason, in step S803, it is determined whether or not the user belongs to a secret group different from that of the photographed user. If it is determined that they belong to different secret groups, the process proceeds to step S804. If it is determined that they belong to the same secret group, the process proceeds to step S813. Note that there may be no secret group to which the user indicated by the record acquired in step S802 belongs. Also in this case, the process proceeds to step S813.

  In step S805, the imaging device 100 acquires the security level of the secret group to which the user indicated by the record acquired in step S802 belongs. Specifically, the face recognition No. 901 corresponding to the face recognition No. 1101 of the record acquired in step S802 is specified. A group No. 1001 corresponding to the group No. 904 of the identified face recognition No. 901 record is identified from the secret group management table 1000 shown in FIG. 18, and the security level 1801 of the identified record is acquired.

  The configuration of the secret group management table 1000 shown in FIG. 18 is the same as the configuration of the secret group management table 1000 shown in FIG. 10, but a security level 1801 is added. The security level 1801 indicates whether the secret group is released according to the set security level when a user who does not belong to the secret group is photographed when the secret group to which the security level is set is released. It is a parameter for determining whether or not. The security level can be set as one of the parameters registered in step S303 of the secret group registration process in FIG. In this embodiment, there are three types of security levels: “high”, “medium”, and “low”. The above-described determination is performed according to these levels. When the security level is “high”, when a user who does not belong to the secret group is photographed, the cancellation of the secret group is terminated. When the security level is “medium”, when a user who does not belong to the secret group is photographed, the user can select whether or not to keep the secret state released. When the security level is “low”, the secret state is kept released even when a user who does not belong to the secret group is photographed. In the present embodiment, such display control is performed, but the present invention is not limited to this.

  In step S806, the imaging apparatus 100 determines whether the acquired security level is “high”. If it is determined that the security level is “high”, the process proceeds to step S807. If it is determined that the security level is not “high”, the process proceeds to step S808.

  In step S807, the imaging device 100 deletes the secret group to which the user indicated by the acquired record belongs from the secret cancellation list table 1100. Specifically, all users belonging to the secret group to which the user indicated by the record acquired in step S802 belongs are deleted from the secret cancellation list table 1100. For example, it is assumed that a user with the user name 902 “BBBBB” in the secret user management table 900 is photographed. At this time, in the secret release list table 1100, as shown in FIG. 11, the user with the user name 902 “AAAAA” and the user with the user name 902 “DDDDD” are released. Since the user “BBBBB” has been photographed, one record of the secret cancellation list table 1100 is acquired. This time, it is assumed that the first record has been acquired. Since the first record of the secret cancellation list table 1100 is the user “AAAAA”, it is determined based on the secret user management table 900 that the first record belongs to a secret group different from the photographed “BBBBB”. The secret group “SG01” to which “AAAAA” belongs has a security level 1801 of “high” in the secret group management table 1000 shown in FIG. Therefore, the record of the user whose secret group is “SG01” among the records stored in the secret cancellation list table 1100 is deleted. Since “DDDDDD” is also the same secret group “SG01” as “AAAAAA” this time, records corresponding to “AAAAA” and “DDDDD” are deleted from the secret cancellation list table 1100. With the above flow, processing when the security level 1801 is “high” is performed.

  In step S808, the imaging apparatus 100 determines whether the acquired security level is “medium”. If it is determined that the security level is “medium”, the process proceeds to step S809. If it is determined that the security level is not “medium”, that is, the security level is “low”, the process advances to step S813. If the security level is “low”, it can be canceled and the process proceeds to step S813.

  In step S809, the photographing apparatus 100 displays a secret group release confirmation screen 1900 shown in FIG. 19 on the liquid crystal display 117. The secret group release confirmation screen 1900 accepts selection of whether or not to hold the release state when the security level is “medium”.

  In step S810, the image capturing apparatus 100 determines whether or not to leave the secret group whose security level is “medium”. Specifically, the determination is made based on whether the YES button 1901 provided on the secret group release confirmation screen 1900 is pressed or the NO button 1902 is pressed. If it is determined that the release is to be left, the process proceeds to step S811, and if it is determined to end the release, the process proceeds to step S807.

  In step S811, the photographing apparatus 100 displays a secret group release approval screen 1910 shown in FIG. 19 on the liquid crystal display 117, and accepts a password from the administrator. It is considered that the release has been approved by the password input from the administrator. By doing so, it is possible to control so that the release is not held without permission.

  In step S812, the imaging device 100 determines whether or not the password is input from the administrator in step S811, and the password is correct. If it is determined that the password is correct, the process proceeds to step S813. If it is determined that the password is not correct, the process proceeds to step S807.

  In step S813, the imaging apparatus 100 determines whether there is a record in the secret release list table 1100 that has not been subjected to the processing in steps S802 to S813. If it is determined that there is a record that has not yet been processed in steps S802 to S813 in the secret cancellation list table 1100, the process proceeds to step S802. If not, the series of processes ends.

  In this way, by setting the security level of the secret group, when a user who does not belong to the secret group is photographed, it is determined whether or not the release is terminated according to the security level. Since it can be controlled, only the image data that the user wants to display can be displayed.

  In this embodiment, the description has been made based on the security level of the secret group, but a security level may be set for each user. That is, a security level item is provided in the secret user management table 900, and can be set as one of the parameters of the secret user registration process of FIG. The above-described processing is performed with reference to the security level when the image is taken by the user. By doing so, good fine control is possible.

  Next, a second embodiment of the startup release process described above with reference to FIG. 8 will be described. In the second embodiment of the release process at startup, even if the secret release valid period has passed, a user belonging to the same secret group as the user who has passed the valid period is within the valid period. If there is, it is considered to be within the validity period and is left released. By doing so, the convenience of the user is increased. Hereinafter, a description will be given based on FIG.

  A processing procedure related to the second embodiment of the startup cancellation process executed by the imaging apparatus 100 will be described. FIG. 20 is a flowchart illustrating an example of a processing procedure of a release process at startup by the imaging apparatus 100 illustrated in FIG. A program for executing this process is stored in the flash ROM 112. When an execution request for this process is received, the program is started and the process is executed according to control by the program.

  20 are the same as steps S601 to S606 in FIG. 8 described above, and thus the description thereof is omitted.

  If it is determined in step S602 that the record acquired in the secret cancellation list table 1100 is not within the secret cancellation effective period, in step S901, the imaging apparatus 100 is set to the same group as the secret group to which the user indicated by the record belongs. If the user to which the user belongs is registered in the secret cancellation list table 1100, it is determined whether the user is within the secret cancellation valid period. If it is determined that it is within the valid period, the process proceeds to step S603; otherwise, the process proceeds to step S606.

  Specifically, it is determined whether or not it is within the valid period with reference to the valid period 2101 of the secret user management table 900 shown in FIG. The validity period 2101 can be set as one of the parameters in step S207 of the secret user registration process of FIG. 4 described above. Here, an effective period 2101 as shown in FIG. 21 is set, and the user as shown in FIG. 11 is released in the secret release list table 1100, and two hours have passed since the photographing apparatus 100 was terminated. An example will be described. When the startup release process shown in FIG. 20 is executed, one record of the secret release list table 1100 is acquired. It is assumed that the first record is acquired this time. It can be seen from the secret user management table 900 shown in FIG. 21 that the first record is the user “AAAAA” from face recognition No. 1101. “AAAAA” has an effective period 2101 set to “1 hour”, but it is out of the effective period since 2 hours have already passed. However, since “DDDDD” belonging to the same group “SG01” as “AAAAA” is also registered in the secret cancellation list table 1100, and “DDDDD” has a validity period 2101 of “3 hours”, “AAAAA” is also Considering that it is within the valid period, the process proceeds to step S603. By doing so, users belonging to the same secret group can be matched with the user with the latest effective period, so that it is possible to avoid that only a specific user of the secret group is terminated at the time of activation.

  As described above, according to the present embodiment, the imaging device recognizes a face included in the captured image data, and is stored in the imaging device when the face is set to non-display. Among the image data, image data including the face can be reproduced, so that it is possible to reduce the user's labor and reproduce only appropriate image data.

  Although the embodiment has been described in detail above, the present invention can take an embodiment as a method, a program, a recording medium, or the like.

  The program according to the present invention is a program that allows a computer to execute (read) each processing method, and the recording medium according to the present invention stores a program that allows the computer to execute each processing method.

  The program in the present invention may be a program for each processing method of each device.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by performing reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion board or It goes without saying that the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device.

  Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network by a communication program, the system or apparatus can enjoy the effects of the present invention.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

100 photographing device 110 controller 111 buffer memory 112 flash ROM
115 Memory Card 117 LCD Display 120 Operation Unit 122 Mode Dial 124 Cursor Key 126 View Button

Claims (19)

An imaging device that displays image data in a viewable manner,
Image data storage means for storing captured image data;
Subject registration means for registering a subject which is included in the image data stored in the image data storage means and needs to be authenticated when displaying image data including the subject in a viewable manner;
Photographing means for generating image data by photographing a subject and storing the image data in the image data storage means;
Subject presence / absence determining means for determining whether or not the subject registered by the subject registration means is included in the image data photographed by the photographing means;
When it is determined that the subject is included in the image data by the subject presence / absence determination unit, the authentication of the image data including the subject is canceled out of the image data stored in the image data storage unit. First authentication cancellation means;
An imaging apparatus comprising: Subject group registration means for registering a group composed of a plurality of subjects registered by the subject registration means;
The first authentication canceling unit includes the subject in the image data stored in the image data storage unit when the subject presence / absence determining unit determines that the subject is included in the image data. And when the subject belongs to a group registered by the subject group registration unit, the image data including other subjects belonging to the group is included. The imaging apparatus according to claim 1, wherein authentication is also canceled. When deauthentication is performed by the first deauthentication unit, a subject that has already been deauthenticated and is a subject that has been photographed by the photographing unit among groups registered by the subject group registration unit Further comprises subject group determination means for determining whether or not there are subjects belonging to different groups,
The first authentication canceling means is a subject whose authentication has already been canceled by the subject group determining means, and among subjects registered by the subject group registration means, a subject photographed by the photographing means If it is determined that there is a subject belonging to a different group, the authentication of the image data including the subject photographed by the photographing means is canceled, and the subject of the subject that has already been deauthenticated The photographing apparatus according to claim 2, wherein the cancellation of the authentication of the subject belonging to the group is terminated.   The first authentication canceling means is a subject whose authentication has already been canceled by the subject group determining means, and among subjects registered by the subject group registration means, a subject photographed by the photographing means If it is determined that there is a subject belonging to a different group, the authentication of the image data including the subject photographed by the photographing means is canceled, and the subject of the subject that has already been deauthenticated Depending on the group, whether or not to cancel the authentication of subjects belonging to the group, whether to hold the release by accepting re-authentication, or to keep the release held The imaging device according to claim 3. The subject group registration means further accepts a security level setting for each group,
The first deauthentication unit terminates deregistration of a subject belonging to a group of subjects that have already been deauthenticated according to the security level set by the subject group registration unit, 5. The photographing apparatus according to claim 4, wherein whether or not to hold the release by accepting authentication is determined and executed. An authentication cancellation period setting means for accepting a setting of a period in which the authentication canceled by the first authentication cancellation means is valid;
Set by the deauthentication period setting unit after the subject of the image data de-authenticated by the first de-authentication unit is de-authenticated by the first de-authentication unit when the photographing apparatus is activated De-authentication period determination means for determining whether or not a given period has passed;
When the authentication cancellation period determination means cancels the authentication of the image data including the subject when the canceled authentication is within a valid period, and otherwise displays the image data in a viewable manner The imaging apparatus according to claim 1, further comprising: a second authentication canceling unit that requests authentication. The deauthentication period setting means accepts, for each subject, setting of a period during which the authentication canceled by the first deauthentication means is valid,
The second authentication canceling means cancels the authentication of the image data including the subject when the canceled authentication is within a valid period, and otherwise, the authentication cancellation period determining means The authentication of image data including the subject is canceled when there is a subject that is determined to be within a certain period and belongs to the same group. Shooting device. The subject registration means further registers the face image of the user,
The subject presence / absence determination unit determines whether the image data captured by the imaging unit includes the face image of the user registered by the subject registration unit,
The first authentication cancellation unit, when the subject presence / absence determination unit determines that the face image of the user is included in the image data, of the image data stored in the image data storage unit, The imaging apparatus according to claim 1, wherein authentication of image data including a subject is canceled. Of the image data stored in the image data storage means, when displaying the image data that requires authentication in a viewable manner, the released determination means for determining whether or not the authentication of the image data has been released,
When it is determined that the authentication has been canceled by the canceled determination means, the image data is displayed so as to be viewable, and when it is determined that the authentication is not canceled by the cancellation determination means, 9. The photographing apparatus according to claim 1, further comprising display means for requesting authentication or not displaying the image data.   10. The apparatus according to claim 1, wherein the subject registration unit determines whether or not the photographing apparatus is in an administrator mode, and is executable when the photographing apparatus is in the administrator mode. The imaging device described. A method for controlling a photographing apparatus comprising image data storage means for storing photographed image data, wherein the image data is displayed so as to be viewable.
The subject registration unit of the photographing apparatus is a subject included in the image data stored in the image data storage unit, and a subject requiring authentication when displaying the image data including the subject in a viewable manner. Subject registration step to be registered;
An imaging step in which an imaging unit of the imaging apparatus generates image data by imaging an object and stores the image data in the image data storage unit;
A subject presence / absence determining step of determining whether or not the subject registered in the subject registration step is included in the image data photographed by the photographing unit;
When the first deauthorization step of the photographing apparatus determines that the subject is included in the image data by the subject presence / absence determination step, the subject among the image data stored in the image data storage unit A first deauthentication step for deauthorizing image data including
A method for controlling an imaging apparatus, comprising: The subject group registration means of the photographing apparatus further comprises a subject group registration step of registering a group composed of a plurality of subjects registered in the subject registration step;
In the first deauthentication step, when it is determined by the subject presence / absence determination step that the subject is included in the image data, the subject is included in the image data stored in the image data storage unit. And when the subject belongs to the group registered by the subject group registration step, the image data including other subjects belonging to the group is included. 12. The method for controlling an imaging apparatus according to claim 11, wherein authentication is also canceled. An authentication cancellation period setting step in which the authentication cancellation period setting means of the photographing apparatus receives a setting of a period in which the authentication canceled by the first authentication cancellation step is valid;
When the deauthentication period determination unit of the photographing apparatus activates the photographing apparatus, the subject of the image data that has been deauthenticated by the first deauthorization step is deauthenticated by the first deauthorization step. Deauthentication period determination step for determining whether or not the period set by the deauthentication period setting step has elapsed,
When the second authentication cancellation unit of the photographing apparatus cancels the authentication of the image data including the subject when the authentication canceled by the authentication cancellation period determination step is within a valid period, and The method according to claim 11, further comprising a second authentication cancellation step of requesting authentication when displaying the image data so as to be viewable. A computer readable program comprising image data storage means for storing photographed image data, for causing the computer to execute a control method of the photographing apparatus for displaying the image data in a viewable manner,
The imaging device;
Subject registration means for registering a subject which is included in the image data stored in the image data storage means and needs to be authenticated when displaying image data including the subject in a viewable manner;
Photographing means for generating image data by photographing a subject and storing the image data in the image data storage means;
Subject presence / absence determining means for determining whether or not the subject registered by the subject registration means is included in the image data photographed by the photographing means;
When it is determined that the subject is included in the image data by the subject presence / absence determination unit, the authentication of the image data including the subject is canceled out of the image data stored in the image data storage unit. A program that functions as first authentication cancellation means. The imaging device;
Further function as subject group registration means for registering a group composed of a plurality of subjects registered by the subject registration means;
The first authentication canceling unit includes the subject in the image data stored in the image data storage unit when the subject presence / absence determining unit determines that the subject is included in the image data. And when the subject belongs to a group registered by the subject group registration unit, the image data including other subjects belonging to the group is included. The program according to claim 14, wherein authentication is also canceled. An authentication cancellation period setting unit that accepts a setting of a period during which the authentication canceled by the first authentication cancellation unit is valid.
Set by the deauthentication period setting unit after the subject of the image data de-authenticated by the first de-authentication unit is de-authenticated by the first de-authentication unit when the photographing apparatus is activated De-authentication period determination means for determining whether or not a given period has passed;
When the authentication cancellation period determination means cancels the authentication of the image data including the subject when the canceled authentication is within a valid period, and otherwise displays the image data in a viewable manner The program according to claim 14 or 15, further functioning as a second authentication cancellation unit that requests authentication.   A computer-readable recording medium storing the program according to claim 14.   A computer-readable recording medium storing the program according to claim 15.   A computer-readable recording medium storing the program according to claim 16.

Images