JP2014116864A - Image protection system, photographing apparatus and regeneration apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system capable of switching a mode for encrypting a subject image photographed by a photographing apparatus and storing the encrypted image in a memory card and a mode for storing the subject image in the memory card without encrypting the image by simple operation, and eliminating necessity of management of a key to be used for encryption or decryption even when the encrypted subject image is stored in the memory card.SOLUTION: Storage mode setting means 34 in a photographing apparatus 3, when detecting an NFC card 6 owned by a user in a state where a storage mode is set to a non-encrypted storage for storing a subject image without encrypting it, switches the set storage mode to encrypted storage for encrypting and storing the subject image. Photographing control means 30, when the storage mode is encrypted storage, instructs a secure memory card 2 to perform encrypted storage of the subject image, and in non-encrypted storage, instructs the secure memory card 2 to perform non-encrypted storage of the subject image.

Description

  The present invention is an invention for protecting the reproduction of a subject image shot by a shooting device such as a digital camera or a smartphone.

  Opportunities to shoot subject images related to work are increasing due to photographing devices such as digital cameras and smartphones / cell phones with camera functions, and measures to prevent leakage of subject images related to work are required.

  As a method for protecting content stored in a memory card, a method of encrypting content and storing it in a memory card is widely used. For example, in Patent Document 1, content stored in a memory card after encryption (here, , Music, etc.) for decoding and playing back.

  In Patent Document 2, a scene of a place where use of confidential data is permitted is photographed with a camera, and the confidential data is encrypted by encrypting the confidential data with a place-specific code generated using the captured image data of the scene. An invention is disclosed that limits where it can be made.

  However, since the subject image photographed by the photographing device includes not only a subject image related to work but also a normal subject image not related to work, a mode for encrypting and saving the subject image photographed by the photographing device and encryption It is desirable to be able to switch the mode for saving without conversion by a simple operation.

  Further, in the conventional technology, when the subject image is encrypted and stored in the memory card on the photographing device side, the key used for encryption or decryption must be stored on the photographing device or playback device side, and the encryption or decryption is performed. There is also a problem that the management of keys to be used becomes troublesome.

JP 2010-239436 A JP 2007-328771 A

  Therefore, the present invention can switch between a mode for encrypting a subject image taken by a photographing apparatus and storing it in a memory card, and a mode for storing it in a memory card without encryption, and further, the subject image can be switched. It is an object of the present invention to provide a system and apparatus that does not require management of keys used for encryption or decryption even when encrypted and stored in a memory card.

  In the image protection system according to the first invention for solving the above-described problem, an encryption unit that encrypts data with an encryption key in order to store a key used for encryption or decryption on the memory card side that stores the subject image And a secure chip having a personal authentication unit for collating personal authentication data, a flash memory for storing data, and an interface for communicating with the secure chip and the flash memory, and an encryption device for storing data is instructed from an external device. Then, the data received from the external device is encrypted by the encryption unit and the ciphertext of this data is written to the flash memory, and when the non-encrypted storage of data is instructed from the external device, the data received from the external device is A controller in which a controller that performs writing to the flash memory without encryption is installed. It includes Interview A memory card.

  In the image protection system according to the first aspect of the present invention, in order to provide a usage restriction for a subject image for business, and to prevent a usage restriction for a normal subject image, Shooting means for photographing, and means for allowing the user to set one of the storage modes of encrypted storage and non-encrypted storage. The storage mode is set to non-encrypted storage and the user has When a contact type mobile device is detected, a storage mode setting unit that switches the storage mode to encrypted storage, and when the photographing unit captures the subject image, an image file including the subject image and the current storage mode is generated. When the subject image of the image file is stored in the flash memory of the secure memory card, if the storage mode at this time is encrypted storage, When the controller of the secure memory card is instructed to store the subject image in an encrypted manner, and the storage mode at this time is non-encrypted storage, the controller of the secure memory card is not encrypted of the subject image. An imaging apparatus including an imaging control means for instructing to save the image is included. Note that the non-contact portable device possessed by the user means a device used for personal identification corresponding to short-range wireless communication.

  A second invention for solving the above-described problem is the image protection system according to the first invention, wherein the storage mode setting means of the photographing apparatus is in a state where the storage mode is set to encrypted storage. When the non-contact portable device is detected, the storage mode is set to non-encrypted storage.

  According to a third aspect of the present invention for solving the above-described problem, in the image protection system according to the first aspect, the storage mode setting means of the photographing apparatus is in a state where the storage mode is set to encrypted storage. When the button for setting the storage mode to unencrypted storage is operated, the storage mode is set to unencrypted storage.

  According to a fourth aspect of the present invention for solving the above-described problem, in the image protection system according to any one of the first to third aspects, the subject image stored in the secure memory card is reproduced. When reading out the subject image of the image file from the secure memory card, if the storage mode included in the image file is encryption storage, the person acquired from the user to the controller of the secure memory card After giving an instruction to verify the authentication data with the personal authentication unit, if the personal authentication is successful, the controller of the secure memory card is instructed to decode and read the subject image, and is included in the image file. If the storage mode to be stored is non-encrypted storage, the controller of the secure memory card Te includes reproducing apparatus having a regeneration control means for performing an instruction for reading the object image without decoding.

  In the fourth aspect of the invention, the secure chip of the secure memory card includes a decryption unit that decrypts data using a decryption key, and the controller receives a read instruction when receiving an instruction to read the decrypted data from an external device. The received data is read from the flash memory, decoded by the decoding unit and transmitted to the external device, and when an instruction to read the data without decoding is received from the external device, the data that has received the read instruction is read from the flash memory The data is read from the data and transmitted to the external device without being decoded.

  Furthermore, a fourth invention for solving the above-described problem is that in the image protection system described in the third invention, the subject image photographed in the business mode can be reproduced as long as the user is in a predetermined area. In addition, the reproduction apparatus includes a position measurement unit that measures position information, and the reproduction control unit is an area registered in the reproduction control unit when the storage mode included in the image file to be reproduced is encryption storage. When the information and the position information measured by the position measuring unit are collated, and the position information is included in the area information, the personal authentication is not performed and the controller of the secure memory card is used for the controller. An instruction to read the decoded subject image is given.

  As described above, according to the present invention described above, it is possible to switch between a mode for encrypting a subject image photographed by the photographing apparatus and storing it in the memory card, and a mode for storing it in the memory card without encryption. Furthermore, it is possible to provide a system and apparatus that do not require management of keys used for encryption or decryption even when subject images are encrypted and stored in a memory card.

1 is a diagram illustrating a configuration of an image protection system according to a first embodiment. FIG. The block diagram of a secure memory card. 1 is a block diagram of an image protection system according to a first embodiment. The figure explaining an image file. The figure explaining operation | movement of the imaging | photography control means and preservation | save mode setting means of an imaging device. The figure explaining the 1st method of setting a preservation | save mode using an NFC card. The figure explaining the 2nd method of setting a preservation | save mode using an NFC card. The figure explaining operation | movement of the reproduction | regeneration control means of the reproducing | regenerating apparatus concerning 1st Embodiment. The block diagram of the reproducing | regenerating apparatus concerning 2nd Embodiment. The figure explaining operation | movement of the reproduction | regeneration control means of the reproducing | regenerating apparatus concerning 2nd Embodiment.

  From here, the image protection system according to the present embodiment will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a diagram illustrating a configuration of an image protection system 1 according to the first embodiment, FIG. 2 is a block diagram of a secure memory card 2, and FIG. 3 is a block diagram of the image protection system 1 according to the first embodiment. It is.

  As shown in FIG. 1, the image protection system 1 according to the first embodiment secures a secure memory card 2 for storing an image file 220 including a subject image, a function for photographing a subject image, and the image file 220. Playback for playing back the image capturing device 3 having the function of storing in the memory card 2, the NFC card 6 (NFC: Near Field Communication) functioning as a non-contact portable device, and the image file 220 stored in the secure memory card 2. And at least the apparatus 4.

  In the present invention, various devices having a photographing function can be used as the photographing device 3. In FIG. 1, the photographing device 3 is illustrated as a smartphone, but a mobile phone, a digital camera, a tablet computer, or the like can also be used. Available as Similarly, in the present invention, various devices having a playback function of the image file 220 can be used as the playback device 4. In FIG. 1, the playback device 4 is illustrated as a tablet computer, but a smartphone, a mobile phone, A photo stand or the like can also be used as the photographing apparatus 3.

  Further, in FIG. 1, the form of the non-contact type portable device is the cache size NFC card 6, but other forms of the non-contact type portable device can be assumed to be a mini card or a key holder type micro tag. A mobile phone or the like mounted with a non-contact mobile chip that conforms to the standard can also be used as a non-contact portable device.

  First, the secure memory card 2 will be described with reference to FIG. The secure memory card 2 of the first embodiment is an SD card on which an IC card operating system is mounted.

  As shown in FIG. 2, the secure memory card 2 includes a secure chip 21 that is an IC card for an IC card having a CPU, RAM, ROM, EEPROM, a coprocessor specialized for cryptographic operation functions, and the like, and an imaging device 3. A flash memory 22 in which an image file 220 is stored, a controller 20 that controls reading and writing of data to and from the flash memory 22, and a memory card interface 23 for connecting to an external device. The controller 20 is a reader / writer for an IC card. And a flash memory interface 201 for communicating with the flash memory 22.

  A platform type operating system for an IC card is mounted on the ROM of the secure chip 21, and various applications can be mounted on the EEPOM of the secure chip 21.

  As shown in FIG. 2, in the first embodiment, as a function realized by an application mounted on the secure chip 21, the secure chip 21 encrypts data transmitted from the controller 20 with an encryption key 210a. 210, a decryption unit 211 that decrypts the encrypted data transmitted from the controller 20 using the decryption key 211a, and a personal authentication unit 212 that collates the personal authentication data transmitted from the controller 20 with the reference data 212a. The operation of the unit 211 requires successful personal authentication. As will be described later, since the NFC card 6 is used for setting the storage mode in the present embodiment, data (for example, a card number) stored in the NFC card 6 is used as data used for personal authentication. Is desirable.

  The controller 20 of the secure memory card 2 performs processing in accordance with an instruction received from a higher-level device (here, either the photographing device 3 or the playback device 4) to which the secure memory card 2 is attached.

  When the subject image is encrypted and saved from the photographing device 3, the controller 20 of the secure memory card 2 transmits the subject image to the encryption unit 210 of the secure chip 21, encrypts the subject image, and flushes the ciphertext of the subject image. A process of writing to the memory 22 is executed.

  When receiving an instruction from the photographing apparatus 3 to write a non-encrypted storage of the subject image, the controller 20 of the secure memory card 2 uses the secure chip 21 to encrypt the subject image without flashing the subject image. 22 is executed.

  When receiving an instruction from the playback device 4 to collate the personal authentication data with the personal authentication unit 212 of the secure memory card 2, the controller 20 of the secure memory card 2 transmits the personal authentication data (for example, the card number). ) Is transmitted to the personal authentication unit 212 of the secure chip 21 and a process of returning the personal authentication result to the playback device 4 is executed.

  When receiving an instruction from the playback device 4 to decrypt and read the ciphertext of the subject image, the controller 20 of the secure memory card 2 reads the ciphertext of the subject image designated from the playback device 4 from the flash memory 22. Then, using the decryption unit 211 of the secure chip 21, the ciphertext of the subject image is decrypted, and the decrypted subject image is returned to the playback device 4.

  When receiving an instruction from the playback device 4 to simply read out the subject image, the controller 20 of the secure memory card 2 reads the subject image designated from the playback device 4 from the flash memory 22 and then decrypts the ciphertext of the subject image. Without executing the process, the process of returning the subject image to the playback device 4 is executed.

  The photographing device 3 of the image protection system 1 will be described. As illustrated in FIG. 3, the image capturing device 3 of the image protection system 1 includes a display unit 31 for displaying data, an image capturing unit 33 for capturing a subject image, and an encryption function as functions for carrying out the present invention. A state in which the storage mode is set for non-encrypted storage to be stored without encryption, as a means for the user to set either encrypted storage to be stored or unencrypted storage to be stored without encryption Thus, when a non-contact portable device possessed by the user is detected, a storage mode setting unit 34 for switching the storage mode to encrypted storage for encryption and storage, a subject image photographed by the photographing unit 33, and a storage mode at this time are displayed. When the image file 220 including the image file 220 is stored in the flash memory 22 of the secure memory card 2, if the storage mode at this time is encrypted storage, the image file 220 included in the image file 220 is stored. When the controller 20 of the secure memory card 2 is instructed to store the body image in an encrypted manner, and the storage mode at this time is unencrypted storage, the subject image included in the image file 220 is stored in the secure memory card 2 unencrypted. A photographing control means 30 for instructing the controller 20, a memory card slot 32 for communicating with the secure memory card 2, and a CLF 35 (Contact Less Front-end) which is a chip for performing short-range wireless communication with the NFC card 6 possessed by the user. The secure memory card 2 is attached to the photographing device 3 when photographing a subject image.

  The photographing means 33 of the photographing apparatus 3 is a means constituted by a photographing element such as a CCD sensor or a COMS sensor, an optical lens, an image processing engine, and the like. Here, the display means 31 of the photographing apparatus 3 is a touch panel.

  FIG. 4 is a diagram illustrating the image file 220 generated by the imaging control unit 30 of the imaging apparatus 3. The image file 220 generated by the shooting control unit 30 of the shooting apparatus 3 includes subject image metadata including the file header of the image file 220, the shooting date and time of the subject image, shooting conditions of the subject image, thumbnail image metadata, and subject. It consists of a thumbnail image of an image and a subject image (generally compressed data of the subject image).

  When the image file 220 is an Exif format file, the subject image stored in the image file 220 corresponds to the Primary image, and the metadata of the subject image corresponds to 0th_IFD included in APP1. The thumbnail image corresponds to a 1st_IFD image (Thumbnail image) included in APP1, and the metadata of the thumbnail image corresponds to 1st_IFD included in APP1.

  In the present embodiment, the image capturing control unit 30 of the image capturing device 3 confirms the storage mode at this time before storing the image file 220 in the flash memory 22 of the secure memory card 2, and the storage mode at this time is encrypted. In the case of saving, when saving the subject image of the image file 220 to the secure memory card 2, the controller 20 of the secure memory card 2 is instructed to save the subject image in an encrypted manner, and the save mode at this time is non-encrypted. In the case of saving, the controller 20 of the secure memory card 2 is instructed to save the subject image in an unencrypted manner.

  The storage mode setting unit 34 of the photographing apparatus 3 is a unit provided so that the user can set the storage mode when the image file 220 is stored in the secure memory card 2 with a simple operation. When a non-contact type portable device possessed by the user is detected in a state where the storage mode is set for storage, processing for switching the storage mode to encrypted storage for encryption and storage is executed.

  FIG. 5 is a diagram for explaining the operation of the photographing control means 30 and the storage mode setting means 34 of the photographing apparatus 3. The imaging control means 30 of the imaging apparatus 3 is a means realized by an application installed in the imaging apparatus 3, and the imaging control means 30 of the imaging apparatus 3 performs the process illustrated in FIG.

  When “shooting” is selected from the menu, the shooting control means 30 of the shooting apparatus 3 is activated, and the shooting control means 30 of the shooting apparatus 3 is operated by the shooting means 33 as shown in FIG. The photographing screen 3a including the subject image being photographed is displayed on the display means 31 (S1).

  While the photographing unit 33 of the photographing apparatus 3 displays the photographing screen 3a on the display unit 31, the storage mode setting unit 34 of the photographing apparatus 3 operates, and the storage mode setting unit 34 stores the storage mode in which the user sets the storage mode. A mode setting process (S2) is executed. Details of the storage mode setting process (S2) will be described later.

  In the present embodiment, the user can select either encrypted storage or non-encrypted storage as the storage mode. The reason why encrypted storage is included in the storage mode is to allow use restrictions to be applied to the subject image captured by the image capturing device 3. The subject image captured when the storage mode is encrypted storage is encrypted and stored in the flash memory 22, and the subject image cannot be reproduced unless the usage conditions (here, successful authentication) are satisfied. In addition, the subject image taken when the storage mode is non-encrypted storage is stored in the flash memory 22 without being encrypted, and the subject image can be reproduced without satisfying the use conditions.

  The photographing means 33 of the photographing apparatus 3 confirms whether or not the shutter operation has been performed (S3), and returns to the storage mode setting process (S2) when the shutter operation has not been performed. When the shutter operation is performed, the photographing unit 33 of the photographing apparatus 3 photographs a subject image (S4), and the photographing control unit 30 of the photographing apparatus 3 generates an image file 220 having a predetermined file format (S5). Note that the image file 220 generated by the imaging control unit 30 of the imaging device 3 includes the storage mode at this time in addition to the subject image captured by the imaging unit 33. In this embodiment, the metadata of the subject image is included in the metadata of the subject image. The storage mode at this point is written.

  Next, the imaging control means 30 of the imaging device 3 starts processing to save the image file 220 in the secure memory card 2 (S6).

  The photographing control means 30 of the photographing device 3 starts the process of saving the image file 220 in the secure memory card 2 and then checks the save mode at this time when saving the subject image of the image file 220 in the secure memory card 2. When the storage mode at this time is encrypted storage, the controller 20 of the secure memory card 2 is instructed to encrypt the subject image (S8). It is to be noted that only the main body of the subject image is instructed to be encrypted, and the encrypted storage is not instructed for the metadata.

  The controller 20 of the secure memory card 2 transmits the subject image encryption command transmitted from the photographing control means 30 of the photographing device 3 to the encryption unit 210 when the photographing device 3 is instructed to encrypt and store the subject image. (S9) The encryption unit 210 of the secure chip 21 encrypts the subject image (S10).

  When the controller 20 of the secure memory card 2 encrypts the subject image using the encryption unit 210 of the secure chip 21, the controller 20 of the secure memory card 2 transmits an encrypted subject image write command to the flash memory 22 (S11). The image is stored in the flash memory 22 (S12), and this procedure ends.

  Further, when the storage mode at this time is non-encrypted storage in S6 of FIG. 5, the imaging control unit 30 of the imaging device 3 performs non-encrypted storage of the subject image on the controller 20 of the secure memory card 2. Instruct (S13).

  When the controller 20 of the secure memory card 2 is instructed to store the subject image in an unencrypted manner from the photographing device 3, the subject transmitted from the photographing device 3 is not encrypted using the encryption unit 210 of the secure chip 21. An image writing command is transmitted to the flash memory 22 (S14), the subject image is stored in the flash memory 22 (S15), and this procedure ends.

  Similar to the hard disk, the flash memory 22 of the secure memory card 2 has a block unit (for example, 512 bytes) for reading from and writing to the flash memory 22. When the subject image is transmitted to the secure memory card 2, the subject image is divided into blocks and transmitted to the secure memory card 2.

  Further, since the processing unit (for example, 128 bytes) is determined by the encryption algorithm supported by the encryption unit 210 of the secure chip 21, the controller 20 of the secure memory card 2 performs the subject of the block unit transmitted from the imaging control means 30. The image is divided into the processing units and encrypted.

  In addition, as illustrated in FIG. 4, the image file 220 generated by the imaging control unit 30 of the imaging device 3 may include a thumbnail image of the subject image in addition to the subject image as image data. When the thumbnail image of the subject image is included in the image file 220, it is desirable that the thumbnail image of the subject image is also encrypted and stored in the flash memory 22 of the secure memory card 2 in addition to the subject image.

  From here, the storage mode setting process (S2) in which the user sets the storage mode will be described. FIG. 6 is a diagram for explaining a first method for setting the storage mode using the NFC card 6, and FIG. 7 is a diagram for explaining a second method for setting the storage mode using the NFC card 6. FIG.

  A first method for setting the storage mode using the NFC card 6 will be described with reference to FIG. The first method for setting the storage mode using the NFC card 6 is a mode in which the NFC card 6 is used for setting encrypted storage and a button is used for setting unencrypted storage.

  In the first method of setting the storage mode using the NFC card 6, the storage mode setting unit 34 of the photographing apparatus 3 monitors whether an operation for setting the storage mode is performed (S20). Here, the operation for setting the storage mode is either an operation in which the user holds the NFC card 6 over the CLF 35 of the photographing apparatus 3 or an operation in which the user presses a button for setting the storage mode to unencrypted storage.

  When notified from the CLF 35 of the photographing apparatus 3 that the NFC card 6 has been detected, the storage mode setting unit 34 of the photographing apparatus 3 determines that the user has performed an operation of holding the NFC card 6 over the CLF 35 of the photographing apparatus 3. Further, the storage mode setting means 34 of the photographing apparatus 3 is a button for the user to set the storage mode to unencrypted storage when a button signal corresponding to the button for setting the storage mode to unencrypted storage is input by the user. It is determined that is pressed.

  Note that a physical button for setting the storage mode to unencrypted storage may be provided in the photographing apparatus 3, but in FIG. 1, a button object 3b for setting the storage mode to unencrypted storage is displayed on the photographing screen. It is displayed in 3a.

  When notified from the CLF 35 of the photographing apparatus 3 that the NFC card 6 has been detected, the storage mode setting means 34 of the photographing apparatus 3 sets the preservation mode to encrypted storage (S21), and returns to S20. In addition, when the user inputs a button signal corresponding to a button for setting the storage mode to unencrypted storage, the storage mode setting unit 34 of the photographing apparatus 3 sets the storage mode to unencrypted storage (S22). ), Return to S20.

  Next, a second method for setting the storage mode using the NFC card 6 will be described with reference to FIG. The second method of setting the storage mode using the NFC card 6 is a mode in which encrypted storage and unencrypted storage are switched each time the NFC card 6 is held over the photographing apparatus 3.

  In the second method of setting the storage mode using the NFC card 6, the storage mode setting unit 34 of the photographing apparatus 3 monitors whether an operation for setting the storage mode is performed (S30). In the second method, since the user can only set the storage mode by holding the NFC card 6 over the CLF 35 of the photographing apparatus 3, the storage mode setting unit 34 of the photographing apparatus 3 is operated from the CLF 35 of the photographing apparatus 3. When notified that the NFC card 6 has been detected, it is determined that the user has performed an operation of holding the NFC card 6 over the CLF 35 of the photographing apparatus 3.

  When the storage mode setting unit 34 of the photographing apparatus 3 is notified that the NFC card 6 has been detected from the CLF 35 of the photographing apparatus 3, it confirms whether or not the storage mode at this time is encrypted storage (S31). If the storage mode at this time is encrypted storage, the storage mode setting unit 34 of the photographing apparatus 3 sets the storage mode to non-encrypted storage (S32), and returns to S30. If the storage mode at this time is not encrypted storage, the storage mode setting unit 34 of the photographing apparatus 3 sets the storage mode to encrypted storage (S33), and returns to S30.

  Next, the playback device 4 of the image protection system 1 will be described. As shown in FIG. 3, the playback device 4 of the image protection system 1 has a display means 41 for playing back an image file 220 stored in the secure memory card 2, and an image file as functions for carrying out the present invention. When reading the subject image 220 from the secure memory card 2, if the storage mode of the image file 220 is encrypted storage, the personal authentication data obtained from the user is sent to the controller 20 of the secure memory card 2 by the secure memory card 2. If the user authentication is successful after instructing the personal authentication unit 212 to collate, the controller 20 of the secure memory card 2 is instructed to decrypt and read the subject image, and the storage mode of the image file 220 is unencrypted storage. In this case, the subject image is not displayed to the controller 20 of the secure memory card 2. A reproduction control unit 40 for instructing No. reading includes a memory card interface 42 for communicating with the secure memory card 2, when reproducing the image file 220, the secure memory card 2 is inserted into the playback device 4.

  The display means 41 of the playback device 4 is a display such as a liquid crystal or an organic EL. The playback control means 40 of the playback device 4 is a means realized by an application installed in the playback device 4.

  FIG. 8 is a diagram for explaining the operation of the playback control means 40 of the playback device 4. When the playback device 4 plays back an image, the playback control means 40 of the playback device 4 executes a process for allowing the user to select an image file 220 to be played back by the playback device 4 (S40).

  As processing for causing the user to select an image file 220 to be played back by the playback device 4, the playback control means 40 of the first embodiment displays a list of file names of the image files 220 stored in the flash memory 22 of the secure chip 21. The file name of the image file 220 to be displayed on the means 41 and played back by the playback device 4 is selected by the user.

  When the user selects the file name of the image file 220 to be played back by the playback device 4, the playback control means 40 of the playback device 4 checks the storage mode of the image file 220 played back by the playback device 4 (S41).

  If the storage mode of the image file 220 to be played back by the playback device 4 is encrypted storage, the playback control means 40 of the playback device 4 performs the personal authentication set as the use condition of the image file 220 for encrypted storage. Acquires personal authentication data from the user, and instructs the controller 20 of the secure memory card 2 to collate the personal authentication data acquired from the user with the personal authentication unit 212 of the secure memory card 2 (S42).

  The method of acquiring the personal authentication data from the user depends on the content of the personal authentication data. For example, when the personal authentication data is a card number stored in the NFC card 6, the card number is read from the NFC card 6 possessed by the user using an IC card reader or the like.

  When the controller 20 of the secure memory card 2 receives an instruction from the playback device 4 to collate the personal authentication data with the personal authentication unit 212 of the secure memory card 2, the personal authentication unit 212 of the secure chip 21 performs personal authentication including the personal authentication data. The command is transmitted (S43), the personal authentication unit 212 collates the personal authentication data (S44), and the controller 20 of the secure memory card 2 returns the personal authentication result to the playback device 4 (S45).

  The playback control means 40 of the playback device 4 confirms the personal authentication result transmitted from the secure memory card 2 (S46), and if the personal authentication result is unsuccessful, returns to the top of this procedure.

  When the personal authentication result transmitted from the secure memory card 2 is successful, the playback control means 40 of the playback device 4 designates the file name of the image file 220 to be played back to the controller 20 of the secure memory card 2, An instruction to decode and read the subject image is given (S47).

  When instructed by the playback device 4 to decrypt and read the subject image, the controller 20 of the secure memory card 2 sends an instruction to read the ciphertext of the subject image in the designated image file 220 to the flash memory 22 (S48). The ciphertext of the subject image is read from the flash memory 22 (S49).

  Then, the controller 20 of the secure memory card 2 transmits an instruction to decrypt the subject image ciphertext to the decryption unit 211 of the secure chip 21 (S50), and the decryption unit 211 of the secure chip 21 decrypts the ciphertext of the subject image. (S51).

  The controller 20 of the secure memory card 2 transmits the subject image decoded by the decoding unit 211 of the secure chip 21 to the playback device 4 (S52), and the playback control means 40 of the playback device 4 displays the decoded subject image. 41 (S53), and this procedure is terminated.

  In S21 of FIG. 6, the playback control means 40 of the playback device 4 sends the subject image to the controller 20 of the secure memory card 2 when the storage mode of the image file 220 selected by the user is non-encrypted storage. A non-decoding read is instructed (S54).

  When the controller 20 of the secure memory card 2 is instructed by the playback device 4 to perform non-decoding reading of the subject image, the controller 20 transmits an instruction to read the subject image specified by this instruction to the flash memory 22 (S55). The subject image is read out from (S56).

  Then, the controller 20 of the secure memory card 2 transmits the subject image read from the flash memory 22 to the playback device 4 (S57), and the playback control means 40 of the playback device 4 receives the subject image received from the secure memory card 2. The information is displayed on the display means 41 (S58), and this procedure is terminated.

  As described above, since the secure memory card 2 has a block unit for reading and writing to the flash memory 22, the secure chip 21 of the secure memory card 2 reads the subject image from the flash memory 22. Is performed, the subject image is divided into blocks and transmitted to the playback device 4.

  Since the processing unit is determined by the encryption algorithm supported by the decryption unit 211 of the secure chip 21, the controller 20 of the secure memory card 2 divides the subject image into the processing units and decrypts the subject image.

[Second Embodiment]
In the first embodiment described above, the use condition of the subject image captured with the storage mode being encrypted storage is only the success of the personal authentication, but an apparatus (for example, a smartphone) having a position measurement function is used for the subject image. Since the use of images for shooting and playback is increasing, if the use mode of the subject image for encrypted storage is set to either successful location authentication or successful identity authentication, the user is present in a preset area. As long as this is done, it is possible to play back the subject image that was shot in encrypted storage.

  FIG. 9 is a block diagram of the playback device 5 according to the second embodiment. As shown in FIG. 9, the playback device 5 according to the second embodiment includes a display unit 51 that displays a subject image stored in the secure memory card 2, and a playback control unit 50 that controls playback of the subject image. The memory card interface 52 for communicating with the secure memory card 2 and the position measuring means 53 for measuring the position information of the playback device 5 are provided, and when the subject image is played back, the secure memory card 2 is attached to the playback device 5. The

  As a method of measuring position information with a smartphone or a mobile phone, there are a method using a signal from a radio base station, a method using a signal from a GPS satellite and a radio base station, a method using a signal from a GPS satellite, etc. However, as long as position information can be measured, any method for measuring position information may be used.

  In order to perform position authentication, the playback control means 50 of the playback device 5 according to the second embodiment stores area information indicating an area where a subject image captured by encrypted storage can be played back. The area where a subject image captured by encrypted storage can be reproduced is preferably in a company building.

  FIG. 10 is a diagram for explaining the operation of the reproduction control means 50 of the reproduction apparatus 5 according to the second embodiment. The operation of the reproduction control means 50 of the reproduction device 5 according to the second embodiment is substantially the same as the operation of the reproduction control means 40 of the reproduction device 4 according to the first embodiment, and in FIG. 10, steps having the same contents as FIG. Are denoted by the same reference numerals as those in FIG. 8 and will not be described in detail here.

  When the storage mode of the image file 220 to be played back by the playback device 5 is encrypted storage in S41a of FIG. 10, the playback control unit 50 of the playback device 5 according to the second embodiment first stores the encrypted mode. In order to perform the position authentication set as the use condition of the image file 220, the position measurement unit 53 is used to acquire the position information at this time, and the acquired position information is set in the reproduction control unit 50. Check if it is included in the area information.

  If the acquired position information is included in the area information, the playback control means 50 of the playback device 5 proceeds to S47 in FIG. 10 and performs a process of playing back the subject image of the image file 220 captured by encrypted storage.

  If the acquired position information is not included in the area information, the playback control means 50 of the playback device 5 proceeds to S42 in FIG. 10 and uses the image file 220 whose storage mode is encrypted storage as in FIG. The user authentication set as a condition is performed, and when the user authentication is successful, a process of reproducing an image shot in encrypted storage is performed.

DESCRIPTION OF SYMBOLS 1 Image protection system 2 Secure memory card 20 Controller 21 Secure chip 210 Encryption part 211 Decryption part 212 Personal authentication part 22 Flash memory 3 Imaging device 30 Shooting control means 31 Display means 32 Memory card interface 33 Shooting means 34 Storage mode setting means 4 Playback Device 40 Playback control means 41 Display means 42 Memory card interface 6 Non-contact portable device (NFC card)

Claims (5)

A secure chip having an encryption unit for encrypting data with an encryption key and a personal authentication unit for verifying personal authentication data; a flash memory for storing data; an interface for communicating with the secure chip and the flash memory; When the external device instructs to store the encrypted data, the data received from the external device is encrypted by the encryption unit, and the ciphertext of the data is written to the flash memory, and the non-encrypted storage of the data is instructed from the external device. Then, a secure memory card mounted with a controller that performs a process of writing data received from an external device into the flash memory without encryption,
The photographing means for photographing the subject image, and means for allowing the user to set either the encrypted storage mode or the non-encrypted storage mode. In the state where the storage mode is set to the non-encrypted storage mode, When a non-contact portable device possessed is detected, a storage mode setting unit that switches a storage mode to encrypted storage, and when the photographing unit captures the subject image, an image file including the subject image and the current storage mode is obtained. After the generation, when the subject image of the image file is stored in the flash memory of the secure memory card, if the storage mode at this time is encrypted storage, the subject of the subject to the controller of the secure memory card When the encrypted storage of the image is instructed and the storage mode at this time is non-encrypted storage, the copy of the secure memory card is stored. Relative controllers, the imaging apparatus comprising an imaging control means for instructing the storage unencrypted of the subject image,
An image protection system comprising at least the above.   The storage mode setting means of the photographing apparatus sets the storage mode to non-encrypted storage when the non-contact portable device is detected in a state where the storage mode is set to encrypted storage. The image protection system according to claim 1.   The storage mode setting unit of the photographing apparatus sets the storage mode to non-encrypted storage when a button for setting the storage mode to non-encrypted storage is operated in a state where the storage mode is set to encrypted storage. The image protection system according to claim 1, wherein the image protection system is set. When reading the subject image of the image file from the secure memory card, if the storage mode included in the image file is encrypted storage, the authentication data acquired from the user is sent to the controller of the secure memory card. If the user authentication is successful after giving an instruction to collate to the personal authentication unit, the controller of the secure memory card is instructed to read the subject image by decoding, and the save mode included in the image file is In the case of non-encrypted storage, including a playback device including playback control means for instructing the controller of the secure memory card to read the subject image without decryption,
The secure chip of the secure memory card has a decryption unit that decrypts data with a decryption key, and when the controller receives an instruction to read the decrypted data from an external device, the data received the read instruction is stored in the flash memory. When the instruction to read data without decoding is received from the external device, it is read from the flash memory without being decoded. Process to send data to external device,
The image protection system according to claim 1, wherein the image protection system is an image protection system. The reproduction apparatus includes position measurement means for measuring position information, and the reproduction control means includes area information registered in the reproduction control means when the storage mode included in the image file to be reproduced is encryption storage. The position information measured by the position measuring means is collated, and when the position information is included in the area information, the controller of the secure memory card is decrypted by using the decrypting unit without performing personal authentication. The image protection system according to claim 4, wherein an instruction to read the subject image is issued.

Images