JP2016086226A - Authenticity certification system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authenticity certification system capable of certifying the authenticity of generated digital image data while securing fairness, credibility and reliability.SOLUTION: A digital camera 30a calculates a hash value for certification of digital image data, and transmits the hash value for certification to a server 31, and when requesting the certification of the authenticity of the digital image data to the server 31, transmits the digital image data as the target of authenticity certification to the server 31. The server 31 stores the hash value for certification transmitted from the digital camera 30a, and when the digital camera 30a requests the certification of the authenticity of the digital image data, calculates the hash value for collation of the digital image data as the target of authenticity certification, and compares the hash value for certification with the hash value for collation, and when those hash values are coincident, affirms the authenticity of the digital image data, and when those hash values are not coincident, denies the authenticity of the digital image data.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authenticity proof system for proving authenticity of a plurality of generated digital contents.

  A software integrity data structure that includes a second hash value that has not been determined on an aircraft for a software component used by the aircraft, and an aircraft configured to calculate a first hash value for the software component on the aircraft A comparator on an aircraft comprising: a calculator on the aircraft configured to determine whether the first hash value matches a second hash value of the software integrity data structure; Discloses an apparatus in which an aircraft is configured to operate a software component only when the first hash value and the second hash value match (see Patent Document 1).

JP 2013-35539 A

  After each predetermined digital content is generated, the digital content may be modified to generate various digital contents that are similar to or different from the digital content. In this case, determining whether each generated digital content is genuine (genuine) or improper (fake) is whether the event or phenomenon contained in the digital content is factual or true It is indispensable to prove whether it is against the truth or not, and for that purpose it is necessary to fairly prove the authenticity (identity) of each digital content.

  In the apparatus disclosed in Patent Document 1, the first hash value for the software component on the aircraft is compared with the second hash value that is not determined on the aircraft of the software integrity data structure, and the first and second hash values are compared. If the two match, the aircraft operates a software part on the aircraft. However, since the comparison between the first hash value and the second hash value is performed by the comparator on the aircraft and the comparator may be operated, the fairness, reliability, and authenticity of the comparator are ensured. It is not possible to completely guarantee that the first and second hash values match or do not match.

  The object of the present invention is to be able to prove the authenticity of the generated digital content while ensuring fairness, credibility, and authenticity, and to completely guarantee the authenticity or authenticity of each digital content. It is to provide an authenticity proof system.

  The feature of the present invention for solving the above problems is formed from various digital content generation devices that generate predetermined digital content, and a server that proves the authenticity of the digital content generated by the digital content generation device, Proof hash value calculation means for the digital content generation device to calculate the proof hash value of each digital content generated, and proof basic data transmission means for transmitting the proof hash value calculated by the proof hash value calculation means to the server And proof object data transmitting means for transmitting to the server the digital content that is the object of authenticity when requesting the server to authenticate the authenticity of each digital content. Sent from the digital content generation device by Proof basic data storage means for storing the hash value for proof, and the digital content generation device requested the proof of authenticity of the digital content while transmitting the digital content of the authenticity proof object to the server by the proof object data transmitting means. Sometimes, a verification hash value calculation means for calculating a verification hash value of digital content to be authenticated, and a verification hash value stored by the proof data storage means and a verification hash value calculated by the verification hash value calculation means If the hash values match each other, the authenticity of the digital content subject to authenticity verification is affirmed. If the hash values do not match, the authenticity of the digital content subject to authenticity verification is denied. And authenticity proofing means.

  As an example of the present invention, the proof hash value calculating means calculates the proof hash value of each digital content immediately after generating the digital content, and the proof basic data transmitting means calculates the proof hash value immediately after calculating the proof hash value. Send the hash value to the server.

  Another example of the present invention includes original declaration means for declaring the original digital content from a plurality of digital contents generated by the digital content generation device, and the proof hash value calculation means is declared by the original declaration means The proof hash value of the original digital content is calculated, and the proof basic data transmission means transmits the proof hash value of the original digital content declared by the original declaration means to the server.

  As another example of the present invention, the proof basic data transmission means transmits a device identifier for identifying a digital content generation device together with a proof hash value to the server, and the proof object data transmission means transmits the device identifier together with the digital content to the server. The proof basic data storage means stores the device identifier transmitted from the digital content generating device together with the proof hash value, and the authenticity proof means stores the device identifier stored in the proof data storage means and the proof object data transmission means to digital content. Compare with the device identifier sent from the generating device, if the device identifiers match, affirm the authenticity of the digital content to be verified, and if the device identifiers do not match, verify the authenticity De To deny the authenticity of the barrel content.

  As another example of the present invention, when the server affirms the authenticity of the digital content to be authenticated by the authenticity proving means, the server confirms the authenticity confirmation to the digital content generation device, and If the authenticity of the content is denied, the authenticity result notifying means for notifying the digital content generating device of the authenticity denial, and the validity period of the authenticity affirmation of the authenticity certification target digital content notified by the authenticity result notifying means And authenticity expiration notification means for notifying, and authenticity affirmation cancellation means for canceling the affirmation of authenticity of the digital content when the expiration date of authenticity of the digital content has passed.

  As another example of the present invention, when the server affirms the authenticity of the digital content to be authenticated by the authenticity proving means, it creates a unique digital watermark indicating the authenticity affirmation and creates the authenticity confirmation Authenticity affixing means for affixing digital watermarks to digital contents subject to authenticity certification in a non-detachable manner, and uniqueness indicating denial of authenticity when authenticity certification means denies the authenticity of digital contents subject to authenticity certification Authentic digital watermark, and authenticity negative pasting means that non-separable pasted digital watermark to authenticate digital content and digital watermark of either authenticity positive or authenticity negative Electronic watermark data transmitting means for transmitting the attached digital content to the digital content generating device.

  As another example of the present invention, after the digital content generation device transmits the certification hash value to the server by the certification basic data transmission means, the digital content corresponding to the certification hash value is sent to the server by a predetermined time. A digital content transmission means for transmitting to the authentication hash value by the proof basic data transmission means after the proof hash value is transmitted from the digital content generation device to the server until a predetermined time has elapsed. If the corresponding digital content is not transmitted, the authenticity of the digital content is denied.

  As another example of the present invention, after the proof hash value is sent from the digital content generation device to the server by the proof basic data sending means by the proof basic data sending means, the proof hash value corresponds to the proof hash value by a predetermined time. If there is no request for proof of authenticity of the digital content, the authenticity of the digital content is denied.

  As another example of the present invention, a digital content generation device receives a key from a server before generating digital content, and a certificate hash value and device using the key received by the key reception unit A proof basic data encryption means for encrypting the identifier, and the proof basic data transmission means transmits the proof hash value and the device identifier encrypted by the proof basic data encryption means to the server.

  As another example of the present invention, each time the key receiving unit generates digital content, a different key is received from the server, and the certification basic data encryption unit uses the different key to obtain the certification hash value and the device identifier. Encrypt.

  As another example of the present invention, the server includes key expiration date setting means for setting an expiration date of the key transmitted to the digital content generation device by the server, and the key expiration date set by the authenticity proving means by the key expiration date setting means. When the proof hash value encrypted using the key is transmitted from the digital content generation device after the elapse of time, the authenticity of the digital content corresponding to the proof hash value is denied.

  As another example of the present invention, the digital content generation device is at least a digital camera of a digital camera, a multi-function mobile terminal, and a digital measuring instrument, and the digital content is taken by the digital camera and the multi-function mobile terminal. An image and various digital measurements measured by a digital measuring instrument.

  According to the authenticity proof system of the present invention, the digital content generation device transmits a proof hash value of each digital content to the server, and the digital content generation device can verify the authenticity of the digital content to be digitally authenticated. When requested by the server, the server compares the hash value for verification with the hash value for verification, and if the hash values match, the authenticity of the digital content to be authenticated is affirmed and the hash values are compared. If they do not match, denying the authenticity of the digital content to be authenticated, the authenticity of the digital content is proved by a server different from the digital content generation device. Generated by a digital content generation device It was possible to prove the authenticity of the digital content, authenticity (authentic, the same compound) or non-authentic (modifications, fake) of each digital content can be guaranteed completely. Since the authenticity proof system can guarantee the authenticity or authenticity of each digital content at any time using the hash value after the digital content has been generated, each digital object to be verified. You can always determine in a timely manner whether the content is authentic or inaccurate, and always in a timely manner whether the events and phenomena contained in the digital content are facts and truths or contrary to facts or truths Can be proved.

  Immediately after the digital content is generated, the proof hash value of each digital content is calculated, and immediately after the proof hash value is calculated, the proof hash system sends the proof hash value to the server. When a certification hash value is sent to the server after a lapse of a predetermined time, the relationship between the certification hash value and the digital content may be unclear, and the digital content generation time may be unclear. Since the proof hash value is immediately transmitted to the server after generating the proof, the proof hash value that is proof of the authenticity of the digital content can be deposited to the server when the digital content is generated. Can be proved exactly when the It is possible to reliably prove that calculated from digital content.

  The authenticity certification system in which the digital content generation device declares the original digital content from a plurality of various digital content and sends the proof hash value of the declared original digital content to the server. In addition to clarifying the original digital content in the digital content generation device or server, the proof hash value of the original digital content is transmitted to the server, and the proof hash value and the matching hash value are transmitted to the server. If the two match, the authenticity of the original digital content is affirmed. Therefore, it is possible to reliably determine whether the digital content to be authenticated is the original (genuine or the same), and the original digital content That the events and phenomena included in the I can testify.

  The stored device identifier is compared with the device identifier transmitted from the digital content generation device. If the device identifiers match, the authenticity of the digital content to be authenticated is affirmed and the device identifiers do not match. If the authenticity certification system that denies the authenticity of the digital content to be authenticated, the server compares the device identifiers together with the hash values, and if the hash values match and the device identifiers match, If the authenticity of the digital content to be verified is affirmed and the hash values do not match or the device identifiers do not match, the authenticity of the digital content to be verified is denied. Ensure credibility and authenticity In addition, the authenticity of each digital content generated by the digital content generation device can be reliably proved, and the authenticity (genuine, identical) or authenticity (modified, fake) of each digital content is completely guaranteed. be able to. Since the authenticity proof system can completely guarantee the authenticity or inaccuracy of each digital content using a hash value and a device identifier, each digital content to be authenticated is authentic or inaccurate. Can be reliably determined, and can prove whether the event or phenomenon contained in the digital content is fact and truth or contrary to the fact or truth.

  The authenticity verification system in which the server notifies the digital content generation device of authenticity confirmation or authenticity denial and also notifies the validity period of the authenticity confirmation of the digital content subject to authenticity verification. By this, many people can know the authenticity (genuine or identical) of the digital content that is the subject of authenticity certification, and by authenticity denial notified by the server, many people can authenticate the digital content that is the subject of authenticity certification (modified or fake) ) The authenticity proof system sets the expiration date for the authenticity confirmation of the digital content subject to authenticity verification, and cancels the authenticity of the past digital content after the expiration date. Can distribute digital contents that are no longer needed.

  The server affixes a digital watermark with a positive authenticity to the digital content subject to authenticity verification, and affixes a digital watermark with a negative authenticity to the digital content subject to authenticity verification. An authenticity proof system that sends digital content with one of the digital watermarks of gender denial to a digital content generation device. Digital content is generated for digital content to be verified with a digital watermark of authenticity affixed to the digital content generation device. By sending it to the device, the authenticity of the digital content (genuine or identical) can be proved to be tamper-proof with a digital watermark that cannot be peeled off. Prevent tampering with authenticity (modified or fake) It can be. The authenticity certification system sends the digital content subject to authenticity certification to which the digital watermark of authenticity denial is pasted to the digital content generation device, so that the digital content can be tampered with by the digital watermark that cannot be peeled off. It can be proved impossible, and falsification of the digital content to be proved in the digital content generation device from authenticity to authenticity can be prevented.

  If the digital content corresponding to the certification hash value is not transmitted from the digital content generation device to the server until a predetermined time after the certification hash value is transmitted from the digital content generation device to the server, the server If the digital content corresponding to the proof hash value is not sent before the lapse of a predetermined time after the proof hash value is sent to the server, the authenticity certification system that denies the authenticity of the digital content Assuming that the proof of authentication is no longer required, digital content that requires proof of authenticity and digital content that does not require proof of authenticity from among multiple types of digital content subject to the unsent time of digital content Can be distributed It can be made to utilize the non-transmission time Ceiling guaranteeing the authenticity of the only really need digital content authenticity certification from various plurality of digital contents.

  After the proof hash value is transmitted from the digital content generation device to the server, if there is no request for proof of authenticity of the digital content corresponding to the proof hash value after a predetermined time has elapsed, the server An authenticity proof system that denies authenticity is such that if the proof of authenticity of the digital content corresponding to the proof hash value is not required by a predetermined time after the proof hash value is sent to the server, the digital By considering that the authenticity of the content is no longer necessary, it is not necessary to verify the authenticity of the digital content and the authenticity of the digital content that is required from the various digital content, subject to the requirement of the authenticity of the digital content. Digital content can be distributed and the authenticity of digital content It can be made to guarantee only the authenticity of the really digital content that requires the authenticity of the certificates from various multiple of digital content using required.

  The digital content generation device receives the key from the server before generating the digital content, encrypts the certification hash value and device identifier using the received key, and sends the encrypted certification hash value and device identifier to the server. Since the authenticity certification system to transmit encrypts the certification hash value and the device identifier using the key received by the digital content generation device from the server, even if the certification hash value and the device identifier are illegally acquired, Tampering of illegally acquired certification hash values and device identifiers can be prevented, and the authenticity of each digital content generated by the digital content generation device using the encrypted certification hash value and device identifier can be prevented by the server. Can be proved reliably for each Tal content authentic (genuine, the same compound) or non-authentic (modifications, fake) can be fully guaranteed.

  Each time a digital content generation device generates digital content, a different key is received from the server, and the authenticity certification system that encrypts the certification hash value and device identifier using a different key is a digital content generation device that digitally Each time content is generated, the certification hash value and device identifier are encrypted using a different key received from the server. Even if the certification hash value and device identifier are illegally obtained, the illegally obtained certification is obtained. The hash value and device identifier can be reliably prevented from being altered, and the server uses the encrypted certification hash value and device identifier to ensure the authenticity of each digital content generated by the digital content generation device. Each digital container can be proved Tsu authentic (genuine, the same compound) or non-authentic (modifications, fake) can be fully guaranteed.

  When the expiration date of the key sent by the server to the digital content generation device is set, and the certification hash value encrypted using that key is sent from the digital content generation device after the expiration date of the key, The authenticity certification system that denies the authenticity of the digital content corresponding to the certification hash value is such that the certification hash value encrypted using the key is transmitted from the digital content generation device after the expiration date of the key. If it is necessary to prove the authenticity of the digital content, the digital content and the authenticity of the digital content that need to be verified from a variety of digital contents subject to the expiration date of the key. Can be used to sort digital content that does not need to be used. It is possible to ensure the authenticity of the only truly digital content that requires proof of authenticity from Le content.

  The digital content generation device is at least a digital camera of a digital camera, a multi-function mobile terminal, and a digital measuring instrument, and the digital content is measured by a digital image and a digital measuring instrument taken by the digital camera and the multi-function mobile terminal The authenticity proof system, which is a variety of digital measurement values, compares the hash value for verification with the hash value for verification, and if the hash values match, the authenticity of the digital image or digital measurement value to be verified. If the hash values do not match, the authenticity of the digital image or digital measurement value subject to authenticity verification is denied, and the authenticity of the digital image or digital measurement value is confirmed by the digital camera or multifunction mobile phone. Because it is proved by the server different from the terminal and the digital measuring instrument Proving the authenticity of each digital image taken by a digital camera or multi-function mobile terminal and the authenticity of each digital measurement measured by a digital measuring instrument while ensuring fairness, reliability and authenticity It is possible to completely guarantee the authenticity (genuine or identical) or the authenticity (modified or fake) of each digital image or each digital measurement value. The authenticity verification system uses a hash value to determine the authenticity or inaccuracy of each digital image or each digital measurement value at any time after the digital image is taken and after the digital measurement value is measured. Since it can be completely guaranteed, it is possible to always determine in a timely manner whether each digital image or each digital measurement value to be verified is authentic or inaccurate. It is always possible to prove in a timely manner whether or not is authentic.

FIG. 2 is a configuration conceptual diagram of an authenticity proof system shown as an example. The figure which shows an example of an authenticity proof menu screen. The figure which shows an example of a to-be-photographed object imaging | photography screen. The figure which shows another example of a to-be-photographed object imaging | photography screen. The figure which shows an example of a to-be-photographed photography completion screen. The figure which shows an example of an original declaration screen. The figure which shows an example of the hash value transmission screen for proof. The figure which shows an example of the hash value transmission confirmation screen for proof. The flowchart explaining transmission / reception of a hash value for certification and a device identifier. The figure which shows an example of a digital image data transmission screen. The figure which shows an example of a digital image data transmission confirmation screen. The flowchart explaining transmission / reception of digital image data. The figure which shows an example of a certification | authentication object data transmission screen. The figure which shows an example of a certification object data transmission confirmation screen. The figure which shows an example of an authenticity positive data selection screen. The figure which shows an example of the authenticity positive data display screen which displayed the digital image data on which the digital watermark of authenticity positive was stuck. The figure which shows an example of an authenticity negative data selection screen. The figure which shows an example of the authenticity negative data selection screen which displayed the digital image data on which the electronic watermark of authenticity negative was stuck. The flowchart explaining the authenticity certification | authentication of digital image data. 20 is a flowchart continued from FIG. 20 is a flowchart continued from FIG.

  The details of the authenticity proof system according to the present invention will be described below with reference to the accompanying drawings such as FIG. 1 which is a conceptual diagram of the authenticity proof system 10 shown as an example. In the authenticity certification system 10 shown in FIG. 1, the user registration of a plurality of users with respect to the management business operator who performs authenticity certification is completed, and the user ID and password of each user are issued from the management business operator. The authenticity certification system 10 includes a plurality of various digital content generation devices 30 that generate predetermined digital content, and an authenticity certification server 31 (server) that proves the authenticity of the digital content.

  As the digital content generation device 30, as shown in FIG. 1, a digital camera 30 a, a smartphone 30 b, and a tablet multifunction mobile terminal 30 c are illustrated, but the digital content generation device 30 is not particularly limited, and digital content can be If it is a device that can be generated, the authenticity proving function provided by the system 10 can be used. 1 shows one digital camera 30a, a smartphone 30b, and a tablet multifunction mobile terminal 30c, but the system 10 includes a plurality of digital cameras 30a and smartphones of different models and carriers (manufacturers). 30b, there is a tablet-type multifunctional portable terminal 30c.

  The digital content generated by the digital camera 30a, the smartphone 30b, and the tablet multifunction mobile terminal 30c is a digital image (still image or moving image) photographed by the digital camera 30a, the smartphone 30b, or the tablet multifunction mobile terminal 30c. . The digital camera 30a, the smartphone 30b, and the tablet-type multifunctional mobile terminal 30c include a central processing unit (CPU or MPU), a main storage device (main memory and cache memory), and a large-capacity storage area (such as a hard disk and an optical disk). A logical computer that is operated by a physical OS (operating system) is incorporated. An authenticity proof application for using the authenticity proof function of the authenticity proof system 10 is stored in the main storage device of the digital camera 30a, the smartphone 30b, or the tablet-type multifunction mobile terminal 30c. The authenticity proof application directly accesses the authenticity proof server 31 or downloads from the server 31 after accessing the server 31 from another server via a link.

  The digital camera 30a shoots (acquires) the subject as digital image data (still image or moving image) by the shooting function, and stores the digital image data of the shot subject in the storage area. The digital camera 30a includes a wireless LAN 32, transmits various information including digital image data (digital image) to other devices using the wireless LAN 32, and receives various information including digital image data from other devices. Has a digital data transmission / reception function.

  The digital camera 30a can be connected to the Internet 32 via a separate computer (not shown) having various server functions. By using the Internet 32, an unspecified number of other devices (computers). You can access and login. Further, the digital camera 30a stores a web browser and an e-mail client for sending / receiving e-mails and managing e-mails. The digital camera 30a can be connected to the Internet 32 using the web browser. Other devices (computers) can be accessed and logged in. In those cases, the digital camera 30a can transmit various types of information including digital image data to other devices using the Internet 32, and can receive various types of information including digital image data from other devices. it can.

  The storage area of the digital camera 30a stores a device identifier (camera identifier) for identifying (specifying) the device. As the device identifier, the individual identification number, serial number (product number), URL, mail address, etc. of the digital camera 30a can be used, and a unique identifier for identifying the digital camera 30a is uniquely generated, The generated unique identifier can be used as a device identifier. The storage area of the digital camera 30a stores user information of users who have the authority to use it. User information includes a password, ID number, user name or name (corporate name or personal name), address or residence, telephone number, FAX number, age, gender, and the like.

  The main storage device of the smartphone 30b or the tablet-type multifunctional mobile terminal 30c stores a web browser and an e-mail client that performs e-mail transmission / reception and e-mail management. The smartphone 30b and the tablet-type multifunctional mobile terminal 30c photograph (obtain) the subject as digital image data (still image or moving image) by the photographing function (camera function), and store the digital image data of the photographed subject in the storage area. .

  The smartphone 30b and the tablet-type multifunctional mobile terminal 30c can be connected to the Internet 32 using a web browser, and can access and log in to an unspecified number of other devices (computers) using the Internet 32. . The smartphone 30b and the tablet-type multifunctional mobile terminal 30c can transmit various information including digital image data to other devices using the Internet 32, and receive various information including digital image data from other devices. be able to.

  Device identifiers (terminal identifiers) for identifying (specifying) them are stored in the storage areas of the smartphone 30b and the tablet-type multifunctional portable terminal 30c. As a device identifier, the IP address, MAC address, URL, e-mail address, cookie information, individual identification number, etc. of the smartphone 30b or tablet-type multifunctional portable terminal 30c can be used. The terminal 30c can uniquely generate a unique identifier for identifying them, and the generated unique identifier can be used as a device identifier. User information of a user who has authority to use the smartphone 30b and the tablet-type multifunctional mobile terminal 30c is stored. The user information is the same as that of the digital camera 30a.

  The central processing unit of the digital camera 30a, the smart phone 30b, or the tablet multifunctional mobile terminal 30c starts an application stored in the main storage device based on control by the OS, and executes the following means according to the application. . The digital camera 30a, the smart phone 30b, and the tablet multifunctional mobile terminal 30c receive the encryption public key from the server 31 before acquiring digital image data (still image or moving image) (before generating digital content). The receiving means is executed.

The digital camera 30a, the smartphone 30b, and the tablet-type multi-function mobile terminal 30c capture a digital image data as an original from a plurality of acquired (generated) digital image data after capturing a subject and acquiring digital image data. Execute the original declaration means to declare. The digital camera 30a, the smart phone 30b, and the tablet multifunctional mobile terminal 30c use a predetermined calculation formula (various hash algorithms) to calculate the hash value of the original digital image data declared by the original declaration means. Execute value calculation means. The hash value includes
There are a SHA256 hash value, a SHA384 hash value, a SHA512 hash value, and the like, but a hash value calculated by a newly developed hash algorithm is also included.

  The digital camera 30a, the smart phone 30b, and the tablet multifunction mobile terminal 30c use the obtained digital image data (including the image data name, user information, and shooting order) and the calculated hash value of the digital image data as a device identifier (camera Data storage means for storing in the storage area in a state associated with the identifier and terminal identifier) and the shooting date and time. The digital camera 30a, the smart phone 30b, and the tablet multifunction mobile terminal 30c use the public key received by the key receiving unit and use the certification hash value calculated by the certification hash value calculating unit and the device identifier (camera identifier and terminal identifier). ) The proof basic data encryption means for encrypting is executed.

  The digital camera 30a, the smart phone 30b, and the tablet-type multifunctional mobile terminal 30c transmit the proof hash value and the device identifier (camera identifier and terminal identifier) encrypted by the proof basic data encryption means to the server 31. Execute the transmission means. The certification hash value transmitted to the server 31 when the original is declared by the original declaration means is a hash value of the declared original digital image data.

  The digital camera 30a, the smart phone 30b, and the tablet-type multi-function mobile terminal 30c use the public key received by the key receiving unit after transmitting the certification hash value to the server 31 by the certification basic data transmission unit, The digital content encryption means for encrypting the image data is executed, and the digital image data (encrypted digital image data) corresponding to the certification hash value is transmitted to the server 31 by the end of a predetermined time (transmission deadline). The digital content transmission means is executed.

  When the digital camera 30a, the smartphone 30b, and the tablet multifunctional mobile terminal 30c request the server 31 to prove the authenticity of the digital image data, the digital image data and the device identifier (camera identifier and The certification object data transmission means for transmitting the terminal identifier) to the server 31 is executed. The digital camera 30a, the smart phone 30b, and the tablet multifunction mobile terminal 30c execute an authenticity result receiving unit that receives an authenticity result of either authenticity confirmation or authenticity denial from the server 31, and authenticity confirmation or authenticity. The digital watermark data receiving means for receiving from the server digital image data to be authenticated, to which any one of the digital watermarks of gender denial is attached.

  The digital camera 30a, the smartphone 30b, and the tablet-type multifunctional mobile terminal 30c use the device identifier to identify the digital image data to which the digital watermark of any one of authenticity positive or authenticity negative, authenticity positive or authenticity negative of the digital image data is attached. The authenticity proof result storage means for storing in the storage area in a state associated with (camera identifier or terminal identifier), proof hash value, shooting date / time, and reception date / time is executed.

  The authenticity proof server 31 is installed in a mega data center and is managed by a management company. The server 31 includes a central processing unit (CPU or virtual CPU), a main storage device (memory or virtual memory), and a large-capacity storage area (hard disk, virtual hard disk, virtual optical disk, etc.), and a physical OS (operating system). ) Or a virtual OS (virtual operating system). Although not shown, the server 31 is connected to an input device such as a keyboard and a mouse and an output device such as a display and a printer via an interface. The server 31 is connected to routers (physical security routers and virtual security routers) and firewalls (physical firewalls and virtual firewalls) that exist in the mega data center.

  The authenticity proof server 31 includes a wireless LAN 32, transmits various information to other devices using the wireless LAN 32, and receives various information from other devices. The server 31 has various server functions such as a DNS server function, a Web server function, an application server function, a mail server function, a database server function, an FTP server function, and a document server function, and can be connected to the Internet 32. By using the Internet 32, it is possible to access and log in to an unspecified number of other servers (computers). The server 31 transmits various types of information to other devices using the Internet 32 and receives various types of information from other devices.

  The storage area of the authenticity certification server 31 stores management company data such as a management company number, a management company name (including a representative name), a corporate address, a telephone number, a FAX number, and an e-mail address. , Login ID and password of each user, user number corresponding to login ID and password, user name (corporate name (including representative name), personal name), department, post, address (corporate address, personal address), User information such as a telephone number, a FAX number, and an e-mail address is stored.

  The central processing unit of the authenticity proof server 31 starts the authenticity proof application stored in the storage device based on the control by the physical OS or the virtual OS, and executes the following means according to the authenticity proof application. To do. The server 31 executes key transmission means for transmitting a public key for encryption to the digital camera 30a, the smartphone 30b, and the tablet multifunction mobile terminal 30c, and transmits the key to the digital camera 30a, the smartphone 30b, and the tablet multifunction mobile terminal 30c. The key expiration date setting means for setting the expiration date of the public key is executed.

  The server 31 executes proof basic data receiving means for receiving the proof hash value and the device identifier (camera identifier and terminal identifier) transmitted from the digital camera 30a, the smart phone 30b, and the tablet multifunction mobile terminal 30c. The server 31 executes proof basic data decryption means for decrypting the proof hash value and device identifier (camera identifier and terminal identifier) using the decryption secret key, and decrypted by the proof basic data decryption means. The certification basic data storage means for storing the converted certification hash value and the device identifier in the storage area in a state associated with the public key (including the public key transmission order and the public key transmission date and time) and the private key is executed.

  The server 31 executes digital content receiving means for receiving digital image data corresponding to the certification hash value transmitted from the digital camera 30a, the smartphone 30b, or the tablet multifunction mobile terminal 30c, and the digital camera 30a, the smartphone 30b, Digital content storage means for storing digital image data received from the tablet-type multifunctional portable terminal 30c in a storage area in a state associated with a hash value for verification and a device identifier (including the transmission order of image data and the transmission date and time of image data) Execute. If the digital image data is encrypted, a digital content decrypting unit that decrypts the digital image data using a decryption secret key is executed, and the decrypted digital image data is converted into a proof hash value. , Device identifier (including image data transmission order, image data transmission date and time), public key (including public key transmission order and public key transmission date and time), and secret key, and stored in the storage area.

  The server 31 stores each public key transmitted to the digital camera 30a, the smart phone 30b, and the tablet multifunction mobile terminal 30c in the storage area in a state associated with the device identifier (including the public key transmission order and the public key transmission date and time). The private key for storing and decrypting the data encrypted by the public key is stored in the storage area in a state associated with the device identifier (including the transmission order of the public key and the transmission date and time of the public key) and the public key. The expiration date of the public key is stored in the storage area in a state associated with the device identifier (including the public key transmission order and the public key transmission date and time). The expiration date of the public key is 24 hours, 48 hours, 120 hours, 240 hours, or the like from when the key is generated, and is freely set by the server 31.

  The server 31 transmits a transmission deadline (predetermined period) from when the certification hash value is transmitted to when the digital image data corresponding to the certification hash value is transmitted. Device identifier (public key transmission order, public key transmission date and time) And in the storage area in a state associated with the public key. The transmission time limit of the digital image data is 24 hours, 48 hours, 120 hours, 240 hours or the like after the certification hash value is transmitted to the server 31, and is freely set by the server 31.

  The server 31 stores the request period (predetermined period) for authenticity certification of digital image data in the storage area in a state associated with the device identifier (including the public key transmission order and the public key transmission date and time) and the public key. The time limit for requesting authentication of authenticity is 24 hours or 48 hours after the proof hash value is transmitted to the server 31 or the digital image data corresponding to the proof hash value is transmitted to the server 31. 120 hours, 240 hours, etc., which can be freely set by the server 31.

  The server 31 executes proof object data receiving means for receiving the digital image data of the authenticity proof object and the device identifier transmitted from the digital camera 30a, the smartphone 30b, and the tablet multifunction mobile terminal 30c by the proof object data transmitting means. To do. The server 31 calculates a hash value for collation of the digital image data to be authenticated when the digital image data to be authenticated is transmitted and the authenticity of the digital image data is requested. A matching hash value calculation means is executed.

  The server 31 compares the proof hash value stored by the proof data storage unit with the verification hash value calculated by the verification hash value calculation unit, and also stores the device identifier stored by the proof data storage unit and the proof object data transmission unit. The data comparison means for comparing the device identifier transmitted from the digital camera 30a, the smart phone 30b, or the tablet multifunctional mobile terminal 30c is executed.

  The server 31 compares the hash values by the data comparison means and compares the device identifiers. As a result, if the hash values match and the device identifiers match, the authenticity of the digital image data to be authenticated is verified. If the hash values do not match (mismatch), or the device identifiers do not match (mismatch), authenticity verification means to deny the authenticity of the digital image data subject to authenticity verification Run.

  In the authenticity proving means, after the proof hash value is transmitted from the digital camera 30a, the smart phone 30b, or the tablet multifunction mobile terminal 30c to the server 31, it corresponds to the proof hash value until a predetermined time elapses. When the digital image data is not transmitted from the digital camera 30a, the smartphone 30b, or the tablet multifunctional mobile terminal 30c to the server 31, the authenticity of the digital image data is denied. In addition, after the proof hash value is transmitted from the digital camera 30a, the smart phone 30b, or the tablet multifunction mobile terminal 30c to the server 31, the authenticity of the digital image data corresponding to the proof hash value after a predetermined time elapses. Is not requested from the digital camera 30a, the smartphone 30b, or the tablet multifunction mobile terminal 30c to the server 31, the authenticity of the digital image data is denied. Further, the certification hash value encrypted using the public key after the expiration date of the public key set by the key expiration date setting means passes from the digital camera 30a, the smartphone 30b, or the tablet multifunctional mobile terminal 30c to the server. When sent to 31, the authenticity of the digital image data corresponding to the proof hash value is denied.

  When authenticating the authenticity of the digital image data to be authenticated by the authenticity proving means, the server 31 creates a unique digital watermark indicating that the authenticity is affirmed, and authenticates the created authenticity-positive digital watermark. A unique digital watermark that indicates authenticity denial when authenticity affixing means is applied to the target digital image data so that it cannot be peeled off, and the authenticity verification means denies the authenticity of the digital image data to be authenticated. And authenticity negative pasting means for pasting the created digital watermark of authenticity denial onto the digital image data to be authenticated.

  When the authenticity of the digital image data subject to authenticity verification is affirmed by the authenticity proving means, the server 31 notifies the digital camera 30a, the smartphone 30b, and the tablet multifunctional mobile terminal 30c of the authenticity verification, thereby authenticating the authenticity. When the authenticity of the target digital image data is denied, an authenticity result notifying unit for notifying the digital camera 30a, the smartphone 30b, and the tablet multifunctional mobile terminal 30c of authenticity denial is executed.

  The server 31 transmits digital watermark data to which the digital image data to be authenticated is pasted to either the digital camera 30a, the smartphone 30b, or the tablet multifunctional mobile terminal 30c. Execute means. The server 31 executes authenticity expiration date notifying means for notifying the validity expiration date of the authenticity affirmation of the digital image data targeted for authenticity notified by the authenticity result notification means.

  The server 31 is a digital image data to which any one of the digital image data authenticity confirmation or authenticity denial, authenticity confirmation or authenticity denial is attached, and the validity period of authenticity confirmation is used as a proof hash value and for verification The authenticity proof result storage means for storing the hash value (including the calculation date and time) and the device identifier in a state associated with the device identifier is executed. The server 31 executes authenticity affirmative cancellation means for canceling the affirmative authenticity of the digital image data when the validity period of the affirmative authenticity of the digital image data has elapsed.

  FIG. 2 is a diagram illustrating an example of an authenticity proof menu screen displayed on the operation screen 33 of the digital camera 30a. FIG. 3 illustrates an example of a subject photographing screen displayed on the operation screen 33 of the digital camera 30a. FIG. FIG. 4 is a diagram showing another example of the subject shooting screen displayed on the operation screen 33 of the digital camera 30a, and FIG. 5 is an example of the subject shooting end screen displayed on the operation screen 33 of the digital camera 30a. FIG.

  6 is a diagram illustrating an example of an original declaration screen displayed on the operation screen 33 of the digital camera 30a, and FIG. 7 is an example of a certification hash value transmission screen displayed on the operation screen 33 of the digital camera 30a. FIG. FIG. 8 is a diagram showing an example of a certification hash value transmission confirmation screen displayed on the operation screen 33 of the digital camera 30a, and FIG. 9 is a flowchart for explaining transmission / reception of the certification hash value and the device identifier. 6 to 8, illustration of digital image data displayed in the digital image data display areas 6a, 7a, and 8a is omitted.

  In the following description based on FIG. 2 to FIG. 21, a case where the digital camera 30 a of the digital content generation device requests authenticity from the server 31 will be described. Since the case where the smart phone 30b or the tablet-type multi-function mobile terminal 30c requests the server 31 for authenticity is the same as the digital camera 30a, the smart phone 30b or the tablet multi-function mobile terminal 30c Thus, the description when requesting authenticity proof is omitted. In the operation screen 33 of the digital camera 30a, illustration of a mechanical operation unit is omitted.

  In order to use the authenticity proof system 10, the user of the digital camera 30a taps (clicks) an authenticity proof icon on a standby screen (not shown) displayed on the operation screen 33 of the camera 30a. When the authenticity proof icon is tapped, the authenticity proof application is activated, the camera 30a logs in to the server 31 via the Internet 32 or the wireless LAN 32, and the authenticity shown in FIG. 2 is displayed on the operation screen 33 (liquid crystal screen) of the camera 30a. The proof menu screen is displayed.

  The authenticity certification menu screen includes a subject photographing button 2a, an original declaration button 2b, a hash value transmission button 2c, an image data transmission button 2d, an authenticity certification button 2e, an authenticity positive data display button 2f, and an authenticity negative data display button. 2g, a logout button 2h is displayed. When the logout button 2h is tapped, the camera 30a logs out from the server 31, and the authenticity proof application is terminated and returns to the standby screen (the following logout button also returns to the standby screen).

  In order to acquire (photograph) digital image data of a subject using the digital camera 30a, the subject photographing button 2a on the authenticity certification menu screen is tapped. When the subject photographing button 2 a is tapped, a subject photographing screen (1) shown in FIG. 3 is displayed on the operation screen 33. A public key reception button 3a, a return button 3b, and a logout button 3c are displayed on the subject photographing screen (1). When the return button 3b is tapped, the screen returns to the authenticity proof menu screen, which is the previous screen (the following back buttons also return to the previous screen).

  When the public key reception button 3a on the subject photographing screen (1) is tapped, the server 31 generates a public key (key) for encryption and a private key (key) for decryption, and the generated public key is stored in the digital camera 30a. Transmit (key transmission means). The server 31 sets an expiration date for the generated public key (key expiration date setting means). Attach the expiration date to the public key. The server 31 stores the public key transmitted to the digital camera 30a in the storage area in association with the device identifier (including the public key transmission order and the public key transmission date and time), and the data encrypted with the public key A secret key for decrypting (hash value, device identifier, digital image data) is stored in the storage area in a state associated with the device identifier (including the public key transmission order and public key transmission date and time) and the public key, and The expiration date of the public key is stored in the storage area in a state associated with the device identifier (including the public key transmission order and the public key transmission date and time).

  The digital camera 30a receives a public key from the server 31 (key receiving means). After receiving the public key, the subject photographing screen (2) shown in FIG. On the subject shooting screen (2), a public key reception / shooting preparation completion message display area 4a, a shooting start button 4b, a return button 4c, and a logout button 4d are displayed. After tapping the shooting start button 4b, the subject is focused, the shutter is released (pressed), and the subject is shot (S-10).

  When the subject is photographed, a subject photographing end screen shown in FIG. 5 is displayed on the operation screen 33. On the subject photographing completion screen, a photographing end message display area 5a, an image display area 5b displaying a digital image of the photographed subject, an image save button 5c, a re-photograph button 5d, and a logout button 5e are displayed. When the re-shooting button 5d is tapped, the shot digital image is cleared (erased), and the subject is shot again. In order to save the image after confirming the digital image displayed in the image display area 5b, the image save button 5c is tapped.

  When the image save button 5c is tapped, the captured digital image data is stored in the storage area of the digital camera 30a (S-11). Digital image data (including image data name, user information, shooting order, public key, and public key expiration date) is stored in the storage area in a state associated with the device identifier and the shooting date and time. After storing the digital image data, the authenticity proof menu screen shown in FIG. 2 is displayed on the operation screen 33.

  To photograph the subject again, the subject photography button 2a on the menu screen is tapped and the subject is photographed according to the procedure described above. When the subject photographing button 2a is tapped again, the server 31 newly generates a public key for encryption different from the public key transmitted to the digital camera 30a last time and a secret key corresponding to the public key, and generates the generated public key. It transmits to the digital camera 30a (a different key is transmitted to the digital camera 30a every time digital content is generated) (key transmission means). The digital camera 30a receives a public key from the server 31 (receives a different key from the server 31 every time digital content is generated) (key receiving means).

  To declare the original digital image data from a plurality of photographed (stored) digital image data, tap the original declaration button 2b on the menu screen of FIG. When the original declaration button 2 b is tapped, the original declaration screen shown in FIG. 6 is displayed on the operation screen 33. On the original declaration screen, a digital image data display area 6a displaying a plurality of photographed digital image data, an original declaration button 6b, an original undeclared button 6c, a clear button 6d, a return button 6e, and a logout button 6f are displayed. The

  Of the digital image data displayed in the digital image data display area 6a, the digital image data for which the original declaration is made is tapped to select (invert) the image data (multiple selection is possible), and the original declaration button 6b is tapped. Note that by swiping the digital image data display area 6a, the digital image data is selected while scrolling the display area 6a. When the clear button 6c is tapped, the selected (inverted) original declaration target digital image data is cleared, and the original declaration target digital image data is selected again.

  When the original declaration button 6b is tapped, the selected digital image data is declared as the original, and the original declaration is set in the digital image data (original declaration means) (S-12). The digital camera 30a uses a hash algorithm to calculate a proof hash value of digital image data declared by the original declaration means (proof hash value calculation means) (S-32). The digital camera 30a calculates a proof hash value for the digital image data immediately after the original declaration of the digital image data is made (immediately after the digital content is generated).

  Note that the system 10 does not have to declare the original. When not declaring the original, tap the digital image data for setting the original undeclared from the digital image data displayed in the digital image data display area 6a in FIG. 6 to select (invert) the image data (multiple selection is possible) ), The original undeclared button 6c is tapped. When the original undeclared button 6c is tapped, original undeclared is set for the selected digital image data (S-12). The digital camera 30a uses a hash algorithm to calculate a proof hash value of undeclared digital image data (proof hash value calculation means) (S-32). The digital camera 30a calculates a proof hash value for the digital image data immediately after the undeclared original digital image data is set (immediately after the digital content is generated).

  The digital camera 30a includes digital image data (including the image data name, user information, shooting order, public key, public key expiration date, and original declaration) in which the original declaration is set, and a calculated hash value for the digital image data. Are stored in the storage area in association with the device identifier and the shooting date (data storage means). In addition, digital image data (including image data name, user information, shooting order, public key, public key expiry date, original undeclared) and the calculated hash value for the digital image data are set. Are stored in the storage area in association with the device identifier and the shooting date (data storage means).

  After the digital image data and the proof hash value are stored in the storage area, the authenticity proof menu screen shown in FIG. 2 is displayed on the operation screen 33. In order to transmit the certification hash value to the server 31, the hash value transmission button 2c on the menu screen is tapped. When the hash value transmission button 2 c is tapped, a certification hash value transmission screen shown in FIG. 7 is displayed on the operation screen 33. On the certification hash value transmission screen, a digital image data display area 7a displaying a plurality of digital image data to be transmitted, a hash value transmission button 7b, a clear button 7c, a return button 7d, and a logout button 7e are displayed. In the digital image data displayed in the digital image data display area 7a, the key expiration date, the original declaration of the digital image data, or the original declaration of the original is displayed.

  Of the digital image data displayed in the digital image data display area 7a, the digital image data for transmitting the certification hash value to the server 31 is tapped to select (invert) the image data (multiple selection is possible), and the hash value is transmitted. Tap the button 7b. Note that by swiping the digital image data display area 7a, the digital image data is selected while scrolling the display area 7a. When the clear button 7c is tapped, the selected (inverted) hash value transmission target digital image data is cleared, and the hash value transmission target digital image data is selected again.

  When the hash value transmission button 7 b is tapped, a certification hash value transmission confirmation screen shown in FIG. 8 is displayed on the operation screen 33. On the certification hash value transmission confirmation screen, a digital image data display area 8a displaying digital image data corresponding to the certification hash value to be transmitted selected from the digital image data display area 7a, a transmission confirmation button 8b, and a return button 8c and a logout button 8d are displayed. In the digital image data displayed in the digital image data display area 8a, the expiration date of the key, the original declaration of the digital image data or the original declaration of the original is displayed. In addition, by swiping the digital image data display area 8a, the digital image data corresponding to the certification hash value to be transmitted can be viewed while scrolling the display area 8a.

  After confirming the digital image data displayed in the digital image data display area 8a, when the transmission confirmation button 8b on the certification hash value transmission confirmation screen is tapped, the digital camera 30a uses the public key received from the server 31, The calculated hash value for digital image data and the device identifier are encrypted (proof basic data encryption means) (S-14). In the original declaration screen of FIG. 6, the digital camera 30a transmits a different public key from the server 31 each time an original declaration is made, and uses a different public key. To encrypt the certification hash value and the device identifier. When the original declaration is not made, the certification hash value and the device identifier are encrypted using different public keys transmitted from the server 31. The digital camera 30a transmits the encrypted certification hash value and device identifier to the server 31 (certification basic data transmission means) (S-15). The digital camera 30 a transmits the proof hash value and the device identifier to the server 31 immediately after calculating the proof hash value of the digital image data.

  The server 31 receives the certification hash value and device identifier (encrypted certification hash value and device identifier) transmitted from the digital camera 30a (certification basic data receiving means) (S-16), and then decrypts Is used to decrypt the certificate hash value and the device identifier (certification basic data decryption means) (S-17). The server 31 stores the decrypted certification hash value and the device identifier in the storage area in a state associated with the public key (including the public key transmission order and public key transmission date and time) and the private key (certification basic data storage). Means) (S-18).

  FIG. 10 is a diagram illustrating an example of a digital image data transmission screen displayed on the operation screen 33 of the digital camera 30a. FIG. 11 illustrates a digital image data transmission confirmation screen displayed on the operation screen 33 of the digital camera 30a. It is a figure which shows an example. FIG. 12 is a flowchart illustrating transmission / reception of digital image data. 10 and 11, illustration of digital image data displayed in the digital image data display areas 10a and 11a is omitted. Note that, for the digital image data displayed in the digital image data display areas 10 a and 11 a, a hash value for proof has already been calculated and the hash value has been transmitted to the server 31.

  After transmitting the encrypted certification hash value and device identifier to the server 31, the digital camera 30a transmits digital image data corresponding to the certification hash value to the server by a predetermined time (transmission deadline) (see FIG. Digital content transmission means). The digital image data is encrypted with a public key obtained by encrypting the certification hash value and the device identifier, but the digital image data may not be encrypted. The predetermined period (transmission deadline) is transmitted from the server 31 to the digital camera 30a, and digital image data (image data name, user information, shooting order, public key, public key expiration date, original declaration or original undeclared) is transmitted. In the storage area of the camera 30a in a state associated with the certification hash value, the device identifier, and the shooting date and time. Instead of transmitting the digital image data to the server 31, only the proof hash value of the digital image data may be transmitted to the server 31, and only the proof hash value may be stored in the server 31.

  In order to transmit the digital image data to the server, the image data transmission button 2c on the authenticity proof menu screen in FIG. 2 is tapped. When the image data transmission button 2 c is tapped, a digital image data transmission screen shown in FIG. 10 is displayed on the operation screen 33. On the digital image data transmission screen, a digital image data display area 10a displaying a plurality of digital image data (original image data already declared or undeclared digital image data), an image data transmission button 10b, and a clear button 10c are displayed. A return button 10d and a logout button 10e are displayed. In the digital image data display area 10a, a digital image data transmission deadline, a digital image data original declaration or an original non-declaration are displayed. The digital image data displayed in the digital image data display area 10 a is data in which a certification hash value is transmitted to the server 31.

  Of the digital image data displayed in the digital image data display area 10a, the digital image data to be transmitted is tapped to select (invert) the image data (multiple selection is possible), and the image data transmission button 10b is tapped. Note that by swiping the digital image data display area 10a, the digital image data to be transmitted is selected while scrolling the display area 10a. When the clear button 10c is tapped, the selected (inverted) transmission target digital image data is cleared, and the transmission target digital image data is selected again.

  When the image data transmission button 10 b is tapped, a digital image data transmission confirmation screen shown in FIG. 11 is displayed on the operation screen 33. On the digital image data transmission confirmation screen, digital image data displaying a plurality of digital image data to be transmitted selected from the digital image data display area 10a (original declared digital image data or original undeclared digital image data) A display area 11a, a transmission confirmation button 11b, a return button 11c, and a logout button 11d are displayed. In the digital image data displayed in the digital image data display area 11a, a digital image data transmission deadline, a digital image data original declaration or an original non-declaration are displayed. By swiping the digital image data display area 11a, the digital image data to be transmitted can be viewed while scrolling the display area 11a.

  After confirming the digital image data in the digital image data display area 11a, when the transmission confirmation button 11b is tapped, the selected digital image data is transmitted from the digital camera 30a to the server 31. The digital camera 30a uses the public key received by the key receiving means, encrypts the digital image data to be transmitted (digital content encrypting means) (S-20), and transmits the encrypted digital image data to the server 31. (Digital content transmission means) (S-21). The digital camera 30a encrypts the digital image data using a different public key. When the digital image data is not encrypted, the digital image data is transmitted to the server 31 (digital content transmission means) (S-21).

  The server 31 receives digital image data (encrypted digital image data or non-encrypted digital image data) corresponding to the certification hash value transmitted from the digital camera 30a (digital content receiving means) (S -22). When the digital image data is encrypted, the digital image data received from the digital camera 30a is decrypted using the decryption secret key (digital content decrypting means) (S-23).

  The server 31 decrypts the decrypted digital image data with a certification hash value, a device identifier (including the transmission order of the image data, the transmission date and time of the image data, and the request time limit for authenticity certification), the public key (the transmission order of the public key, The data is stored in the storage area in a state associated with the secret key (including the transmission date and time of the public key) (digital content storage means) (S-24). When the digital image data is not encrypted, the digital image data is converted into a hash value for certification, a device identifier (including the transmission order of the image data, the transmission date and time of the image data, a request period for authenticity certification), and a public key (public The data is stored in the storage area in association with the secret key (including digital key storage order) (S-24).

  FIG. 13 is a diagram illustrating an example of a certification target data transmission screen displayed on the operation screen 33 of the digital camera 30a, and FIG. 14 illustrates a certification target data transmission confirmation screen displayed on the operation screen 33 of the digital camera 30a. It is a figure which shows an example. FIG. 15 is a diagram showing an example of the authenticity affirmative data selection screen displayed on the operation screen 33 of the digital camera 30a. FIG. 16 shows an authenticity positive digital watermark displayed on the operation screen 33 of the digital camera 30a. It is a figure which shows an example of the authenticity positive data display screen which displayed the digital image data with which 34 was stuck.

  FIG. 17 is a diagram showing an example of the authenticity negation data selection screen displayed on the operation screen 33 of the digital camera 30a, and FIG. 18 shows an authenticity negation digital watermark displayed on the operation screen 33 of the digital camera 30a. It is a figure which shows an example of the authenticity negative data selection screen which displayed the digital image data on which 34 was stuck. FIG. 19 is a flowchart for explaining authenticity verification of digital image data, and FIG. 20 is a flowchart continued from FIG. FIG. 21 is a flowchart continued from FIG. 13 to 18, illustration of digital image data displayed in the digital image data display areas 13a, 14a, 15a, 16a, 17a, and 18a is omitted.

  When the digital camera 30a requests the server 31 for proof of authenticity of the digital image data, the authenticity proof button 2e on the authenticity proof menu screen of FIG. 2 is tapped. When the authenticity certification button 2 e is tapped, a certification target data transmission screen shown in FIG. 13 is displayed on the operation screen 33. On the certification object data transmission screen, a digital image data display area 13a displaying a plurality of digital image data (original declared digital image data or original undeclared digital image data) to be certified, and a certification data transmission button 13b A clear button 13c, a return button 13d, and a logout button 13e are displayed. In the digital image data display area 13a, a request deadline for authenticity verification of the digital image data and the original declaration or non-declaration of the digital image data are displayed. The digital image data displayed in the digital image data display area 13 a is data in which the certification hash value and the digital image data corresponding to the hash value are transmitted to the server 31.

  Of the digital image data displayed in the digital image data display area 13a, the digital image data to be requested for authenticity is tapped to select (invert) the image data (multiple selection is possible), and the proof data transmission button 13b is pressed. Tap. Assume that one digital image data is selected (inverted) from the digital image data display area 13a. Note that by swiping the digital image data display area 13a, the digital image data to be requested for authenticity is selected while scrolling the display area 13a. When the clear button 13c is tapped, the selected (inverted) digital image data subject to request for authenticity is cleared, and the digital image data subject to request for authenticity is selected again.

  When the image data transmission button 13 b is tapped, a certification target data transmission confirmation screen shown in FIG. 14 is displayed on the operation screen 33. On the verification object data transmission confirmation screen, a digital image displaying the digital image data (original image data that has been declared original or undeclared digital image data) that is selected from the digital image data display area 13a. An image data display area 14a, a transmission confirmation button 14b, a return button 14c, and a logout button 14d are displayed. The digital image data displayed in the digital image data display area 14a displays the request deadline for authenticity verification of the digital image data, the original declaration of the digital image data, or the original declaration of the original. In addition, by swiping the digital image data display area 14a, the digital image data requested for authenticity can be viewed while scrolling the display area 14a.

  After confirming the digital image data in the digital image data display area 14a, when the transmission confirmation button 14b is tapped, the digital camera 30a displays the selected digital image data and device identifier (camera identifier) as the object of the authenticity certification. It transmits to the server 31 (certification object data transmission means) (S-31). It is assumed that one digital image data is selected (inverted) from the digital image data display area 14 a and the digital image data is transmitted to the server 31.

  The server 31 receives the digital image data to be authenticated and the device identifier transmitted from the digital camera 30a (certification target data receiving means). When the server 31 receives the digital image data to be authenticated and the device identifier from the digital camera 30a, the server 31 uses the hash algorithm to calculate a verification hash value of the digital image data (a verification hash value calculation unit). (S-32). The server 31 compares the certification hash value with the verification hash value, and compares the device identifier stored by the certification data storage unit with the device identifier transmitted from the digital camera 30a by the certification target data transmission unit (data). Comparison means) (S-33).

  The server 31 determines whether the hash values match or the device identifiers match (S-34), and the expiration date of the public key, the certification hash value, and the device identifier are encrypted by the public key. Whether the certification hash value and the device identifier have been encrypted within the validity period of the public key is determined based on the point in time (S-35). The server 31 determines whether the digital image data has a transmission deadline based on the time when the certification hash value is transmitted from the digital camera 30a and the time when the digital image data corresponding to the certification hash value is transmitted from the digital camera 30a. It is determined whether or not it has been transmitted to the server 31 (S-36). Further, based on the authenticity request time limit of each digital image data and the authenticity request date and time of the digital image data, it is determined whether the authenticity request for the digital image data was made within the time limit (S-37).

  The server 31 compares the hash values and, as a result of comparing the device identifiers, if the hash values match and the device identifiers match, the certification hash value and the device identifier are stored in the public key. If it is encrypted within the expiration date, if the digital image data is transmitted within the transmission time limit, if the request for authenticity of the digital image data is made within the time limit, the digital image subject to authenticity certification The authenticity of the data is affirmed (authentication proving means) (S-38). It should be noted that at least one of the expiration date of the public key, the transmission time limit of the digital image data, and the request time period for authenticity can be set as a condition for authenticity affirmation or authenticity denial, It can be removed from the condition of authenticity denial.

  When authenticating the authenticity of the digital image data to be authenticated by the authenticity proving means, the server 31 creates a unique digital watermark 34 indicating affirmative authenticity, and authenticates the created authenticity positive digital watermark 34. The digital image data to be verified is pasted to the digital image data so as not to be peeled off (authenticity affixing means) (S-39). The server 31 notifies the digital camera 30a of affirmation of authenticity (authentication result notification means) (S-40), and notifies the validity period of authenticity confirmation of the digital image data to be authenticated (authentication validity period). Notification means) (S-41). The server 31 transmits the digital image data to be authenticated, to which the digital watermark 34 with a positive authenticity is pasted, to the digital camera 30a (digital watermark data transmitting means) (S-42).

  The server 31 includes digital image data to which digital image data authenticity confirmation, authenticity confirmation digital watermark 34 is attached, a validity hash value for authenticity confirmation, a hash value for verification, a hash value for verification (including calculation date and time), a device Store in the storage area in a state associated with the identifier (authentication proof result storage means). The server 31 cancels the authenticity confirmation of the digital image data when the validity period of the authenticity confirmation of the digital image data has passed (authentication positive cancellation means). The validity period of authenticity affirmation is 720 hours, 1440 hours, 2160 hours, etc. from when authenticity is confirmed, and is set freely by the server 31.

  The digital camera 30a receives the authenticity positive authenticity result from the server 31 (authentication result receiving means) and also receives the authenticity verification target digital image data with the authenticity positive digital watermark 34 attached thereto from the server. (Digital watermark data receiving means) (S-43). The digital camera 30a stores the digital image data to which the digital watermark 34 authenticating the digital image data and the digital watermark 34 confirming the authenticity is attached in the storage area in a state associated with the device identifier, the certification hash value, the shooting date / time, and the reception date / time. (Authentication proof result storage means).

  In order to display the digital image data with a positive authenticity, the authenticity positive data display button 2f on the menu screen of FIG. 2 is tapped. When the authenticity positive data display button 2 f is tapped, the authenticity positive data selection screen shown in FIG. 15 is displayed on the operation screen 33. On the authenticity affirmation data selection screen, a digital image data display area 15a displaying digital image data whose authenticity has been affirmed, a display button 15b, a clear button 15c, a return button 15d, and a logout button 15e are displayed. In the digital image data display area 15a, an expiration date for affirming the authenticity of the digital image data and the original declaration or non-declaration of the digital image data are displayed. By swiping the digital image data display area 15a, it is possible to view digital image data with a positive authenticity while scrolling the display area 15a.

  Of the digital image data displayed in the digital image data display area 15a, the digital image data to be displayed is tapped to select (invert) the image data (multiple selection is possible), and the display button 15b is tapped. Assume that one digital image data is selected (inverted) from the digital image data display area 15a. Note that by swiping the digital image data display area 15a, the digital image data to be displayed is selected while scrolling the display area 15a. When the clear button 15c is tapped, the selected (inverted) display target digital image data is cleared, and the display target digital image data is selected again.

  When the display button 15b is tapped, the authenticity positive data display screen shown in FIG. 16 is displayed on the operation screen 33 (S-44). On the authenticity affirmation data display screen, a digital image data display area displaying the digital image data to be displayed selected from the digital image data display area 14a (originally declared digital image data or original undeclared digital image data) 16a, a print button 16b, a return button 16c, and a logout button 16d are displayed. In the digital image data display area 16a, digital image data to which a digital watermark 34 with a positive authenticity is attached, a validity period of digital image data with a positive authenticity, a digital image data original declaration or an original non-declaration are displayed. Yes. By tapping the print button, digital image data with a digital watermark with a positive authenticity displayed in the digital image data display area 16a can be printed.

  In step 34 (S-34) to step 37 (S-37), the server 31 compares the hash values and compares the device identifiers. As a result, the hash values do not match (do not match). If the device identifiers do not match (do not match), the certification hash value and the device identifier are not encrypted within the validity period of the public key, or the digital image data is not transmitted within the transmission deadline If the request for authenticity of the digital image data is not made within the time limit, the authenticity of the digital image data to be authenticated is denied (authentication proving means) (S-45).

  When authenticating the authenticity of the digital image data subject to authenticity verification, the server 31 creates a unique digital watermark 34 indicating authenticity denial, and authenticates the generated authenticity negative digital watermark 34. The digital image data to be verified is pasted to the digital image data so as not to be peeled off (authenticity negative pasting means) (S-46). The server 31 notifies the digital camera 30a of the denial of authenticity (authentication result notifying means) (S-47), and the digital image data of the authenticity certification target with the authenticity denial digital watermark 34 attached thereto is sent to the digital camera 30a. Transmit (digital watermark data transmission means) (S-48). The server 31 stores the digital image data to which the digital image data with authenticity denial and authenticity denial digital watermarks 34 are attached in association with the certification hash value, the verification hash value (including the calculation date and time), and the device identifier. Store in the area (authentication proof result storage means).

  The digital camera 30a receives the authenticity negative authenticity result from the server 31 (authentication result receiving means) and also receives the authenticity verification target digital image data with the authenticity negative digital watermark 34 attached thereto from the server. (Digital watermark data receiving means) (S-49). The digital camera 30a stores the digital image data to which the digital image data with authenticity denial and authenticity denial digital watermarks 34 are attached in the storage area in association with the device identifier, the certification hash value, the shooting date and time, and the reception date and time. (Authentication proof result storage means).

  To display authenticity negative digital image data, the authenticity negative data display button 2g on the menu screen of FIG. 2 is tapped. When the authenticity negative data display button 2g is tapped, an authenticity negative data selection screen shown in FIG. 17 is displayed on the operation screen 33. A digital image data display area 17a, a display button 17b, a clear button 17c, a return button 17d, and a logout button 17e displaying digital image data whose authenticity is denied are displayed on the authenticity negative data selection screen. In the digital image data display area 17a, an original declaration or non-declaration of digital image data is displayed. In addition, by swiping the digital image data display area 17a, it is possible to view the digital image data with negative authenticity while scrolling the display area 17a.

  Of the digital image data displayed in the digital image data display area 17a, the digital image data to be displayed is tapped to select (invert) (multiple selection is possible), and the display button 17b is tapped. It is assumed that one digital image data is selected (inverted) from the digital image data display area 17a. Note that by swiping the digital image data display area 17a, the digital image data to be displayed is selected while scrolling the display area 17a. When the clear button 17c is tapped, the selected (inverted) display target digital image data is cleared, and the display target digital image data is selected again.

  When the display button 17b is tapped, the authenticity negative data display screen shown in FIG. 18 is displayed on the operation screen 33 (S-50). On the authenticity negative data display screen, a digital image data display area displaying the digital image data to be displayed selected from the digital image data display area 17a (originally declared digital image data or original undeclared digital image data). 18a, a print button 18b, a return button 18c, and a logout button 18d are displayed. In the digital image data display area 18a, digital image data to which a digital watermark 34 of authenticity denial is affixed, an original declaration of the digital image data, or an original declaration of the original is displayed. By tapping the print button, it is possible to print digital image data with a digital watermark with a negative authenticity displayed in the digital image data display area 18a.

  When the validity period of authenticity affirmation of digital image data has elapsed, the server 31 cancels the authenticity affirmation of the digital image data, erases the digital image data with the authenticity affirmative digital watermark 34 attached thereto, and erases it. An authenticity-negative digital watermark 34 is attached to the same digital image data as the digital image data (authentication-negative application means). The server 31 notifies the digital camera 30a of authenticity denial (authentication result notifying means), and transmits the digital image data of the authenticity certification target with the authenticity denial digital watermark 34 attached thereto (electronic). Watermark data transmission means), digital image data with authenticity negative, authenticity negative digital watermark 34 attached digital image data with a hash value for verification, a hash value for verification (including calculation date and time), and a device identifier Is stored in the storage area (authentication proof result storage means).

  The digital camera 30a receives authenticity denial from the server 31 after the expiration date of authenticity affirmation (authentication result receiving means), and also authenticates the authenticity-certified digital watermark affixed with the authenticity denial digital watermark 34. Image data is received from the server (digital watermark data receiving means) (S-49). The digital camera 30a stores the digital image data to which the digital image data with authenticity denial and authenticity denial digital watermarks 34 are attached in the storage area in association with the device identifier, the certification hash value, the shooting date and time, and the reception date and time. (Authentication proof result storage means).

  In the authenticity certification system 10, the digital camera 30 a, the smartphone 30 b, and the tablet multifunction mobile terminal 30 c (digital content generation device) transmit a certification hash value of each digital image data (each digital content) to the server 31. When proof of authenticity of digital image data to be certified is requested, the server 31 compares the hash value for verification with the hash value for verification, and also compares the device identifiers, and the hash values match. If the device identifiers match, the authenticity of the digital image data subject to authenticity verification is affirmed. If the hash values do not match, or the device identifiers do not match, the authenticity verification target. By denying the authenticity of digital image data Since the authenticity of the digital image data is proved by the server 31 different from the digital camera 30a, the smartphone 30b, and the tablet multifunction mobile terminal 30c, the digital camera 30a and the smartphone are secured while ensuring fairness, reliability, and credibility. 30b, the authenticity of each digital image data photographed by the tablet-type multi-function mobile terminal 30c can be proved, and the authenticity (genuine, identical) or authenticity (modified, fake) of each digital image is completely Can be guaranteed.

  If the digital image data is taken by the digital camera 30a, the smartphone 30b, or the tablet multifunction mobile terminal 30c, the authenticity proof system 10 uses the hash value or the device identifier to authenticate each digital image data. Since the authenticity can be completely guaranteed at any time, it is always possible to determine in a timely manner whether each digital image data subject to authenticity is authentic or authentic, and the digital image data is authentic It can be proved at any time in a timely manner.

  The authenticity proof system 10 transmits the digital image data of the authenticity verification target with the authenticity-aware digital watermark 34 pasted to the digital camera 30a, the smartphone 30b, and the tablet multifunctional mobile terminal 30c. The authenticity of the digital image data (genuine or identical) can be proved by the electronic watermark 34 that cannot be peeled off, and the digital image to be proved in the digital camera 30a, the smartphone 30b, or the tablet multifunctional mobile terminal 30c. It is possible to prevent falsification of data from authenticity to improperness (modified or fake).

  The authenticity proof system 10 transmits the digital image data of the authenticity verification target with the authenticity negative digital watermark 34 pasted to the digital camera 30a, the smartphone 30b, and the tablet multifunctional mobile terminal 30c. The authenticity of digital image data (modified or fake) can be proved to be falsified by the electronic watermark 34 that cannot be peeled off, and the digital camera 30a, the smart phone 30b, and the digital subject of authenticity verification in the tablet multifunctional mobile terminal 30c It is possible to prevent falsification of image data from authentic to authentic (genuine or identical).

  Although not shown, various digital measuring devices can be exemplified as the digital content generation device 30, and various digital measurement values measured by the digital measuring device can be exemplified as the digital content. . In this case, the system 10 includes a plurality of digital measuring instruments of different types and manufacturers. Examples of the digital measuring instrument include a manual image measuring instrument, a digital measuring microscope, a digital distance measuring instrument, a digital PH meter, a digital power meter, and a digital level checker.

  When these digital measuring instruments have a communication function, a certification hash value and digital measurement value data are transmitted from the digital measuring instrument to the server 31 via the Internet 13 or a wireless LAN, and these digital measuring instruments have a communication function. If not, the certification hash value and the digital measurement value data are transmitted to the server 31 using a communication device (such as a server) connected to the digital measurement device. The server 31 affirms or denies the authenticity of the digital measurement value data to be authenticated by the above-described procedure.

  When the digital content generation device is a variety of digital measuring devices, a hash value for verification obtained by hashing the digital measurement value data with a hash algorithm and a hash value for verification obtained by hashing the digital measurement value data to be authenticated with a hash algorithm If the device identifiers are compared and the hash values match and the device identifiers match, the authenticity of the digital measurement data to be verified is affirmed and the hash values are compared. Does not match or the device identifiers do not match, denying the authenticity of the digital measurement data to be verified by a server whose digital measurement data is different in authenticity from the digital instrument. Because it ’s proven, fairness, credibility, The authenticity of each digital measurement data measured by a digital measuring instrument can be proved while ensuring the inertia, and each digital measurement data is authentic (genuine, identical) or unauthentic (modified, fake) ) Can be fully guaranteed.

  In addition, since the digital measurement value data is measured by the digital measuring instrument, it is possible to completely guarantee the authenticity or inaccuracy of each digital measurement value data at any time using a hash value or device identifier. You can always determine in a timely manner whether each digital measurement data subject to authenticity is genuine or incorrect, and always prove in a timely manner whether the digital measurement data is authentic be able to.

DESCRIPTION OF SYMBOLS 10 Authenticity proof system 30 Digital content generation device 30a Digital camera 30b Smartphone 30c Tablet type multifunctional portable terminal 31 Authenticity proof server (server)
32 Internet, wireless LAN
34 Digital watermark

Claims (12)

A plurality of digital content generation devices that generate predetermined digital content, and a server that proves the authenticity of the digital content generated by the digital content generation device;
Proof hash value calculating means for calculating a proof hash value of each digital content generated by the digital content generating device, and a proof basis for transmitting the proof hash value calculated by the proof hash value calculating means to the server Data transmitting means, and proof object data transmitting means for transmitting to the server the digital content that is the object of authenticity certification when requesting the server to authenticate the authenticity of each digital content,
The server stores proof basic data storage means for storing the proof hash value transmitted from the digital content generation device by the proof basic data transmission means, and the digital content generation device authenticates by the proof object data transmission means. Hash value calculation means for collation that calculates a hash value for collation of the digital content to be proved when requesting proof of authenticity of the digital content while transmitting the digital content to be certified to the server; The proof hash value stored by the proof data storage means is compared with the collation hash value calculated by the collation hash value calculation means, and when the hash values match each other, Affirms authenticity, and the hash value If the teeth do not match, the authenticity proving system characterized by having a authenticity proving means for denying the authenticity of the digital content of the authenticity certification target.   The proof hash value calculation means calculates the proof hash value of each digital content immediately after generating the digital content, and the proof basic data transmission means immediately after the proof hash value is calculated The authenticity proof system according to claim 1, wherein a hash value is transmitted to the server.   The digital content generation device includes original declaration means for declaring original digital content from a plurality of various generated digital contents, and the digital value of the original declared by the certification hash value calculation means by the original declaration means 3. The proof hash value for content is calculated, and the proof basic data transmission unit transmits the proof hash value of the original digital content declared by the original declaration unit to the server. 4. Authenticity proof system.   The proof basic data transmitting means transmits a device identifier for identifying the digital content generating device to the server together with the proof hash value, and the proof object data transmitting means transmits the device identifier to the server together with the digital content. And the proof basic data storage means stores the device identifier transmitted from the digital content generation device together with the proof hash value, and the authenticity proof means stores the device identifier stored by the proof data storage means. And the device identifier transmitted from the digital content generation device by the certification object data transmitting means, and if the device identifiers match, the authenticity of the digital content to be authenticated is affirmed and the device identifiers are verified. If the identifier each other do not match, the authenticity proving system according to any claims 1 to 3 denies the authenticity of the digital content of the authenticity certification target.   When the server affirms the authenticity of the digital content to be authenticated by the authenticity certifying means, the server notifies the digital content generation device of affirmation of authenticity, and confirms the authenticity of the digital content to be authenticated. If negative, authenticity result notifying means for notifying the digital content generation device of authenticity denial, and authenticity notifying the validity period of authenticity verification of the digital content to be authenticated notified by the authenticity result notifying means. 5. The apparatus according to claim 1, further comprising authenticity expiration notification means and authenticity affirmation cancellation means for canceling affirmation of authenticity of the digital content when the validity period of authenticity affirmation of the digital content has elapsed. Authenticity proof system.   When the server affirms the authenticity of the digital content to be authenticated by the authenticity certifying unit, the server creates a unique digital watermark indicating the authenticity verification, and the generated authenticity-positive digital watermark is the authenticity Affirmative authenticity affixing means that can be attached to digital contents to be certified in an inseparable manner, and a unique digital watermark that indicates denial of authenticity when the authenticity of digital contents is denied by the authenticity certification means And authenticity negative pasting means for pasting the created digital watermark of authenticity denial to the digital content subject to authenticity certification, and digital content pasted with either an authenticity positive or authenticity negative digital watermark Further comprising: electronic watermark data transmitting means for transmitting the data to the digital content generating device. Motomeko 5 authenticity certification system according to any one.   The digital content generation device transmits the proof hash value to the server by the proof basic data transmission means, and then transmits the digital content corresponding to the proof hash value to the server until a predetermined time elapses. Including a content transmission means, wherein the authenticity proof means transmits the proof hash value from the digital content generation device to the server by the proof basic data transmission means and after a lapse of a predetermined time, The authenticity proof system according to claim 1, wherein if the digital content corresponding to is not transmitted, the authenticity of the digital content is denied.   The authenticity certifying means sends the proof hash value from the digital content generating device to the server by the proof basic data transmitting means, and the digital content corresponding to the proof hash value after a predetermined time elapses. 8. The authenticity proof system according to claim 1, wherein if there is no request for authenticity verification, the authenticity of the digital content is denied.   The digital content generation device receives a key from the server before generating the digital content, and encrypts the certification hash value and the device identifier using the key received by the key reception unit. The proof basic data encrypting means for converting the proof basic data transmitting means to transmit the proof hash value and the device identifier encrypted by the proof basic data encrypting means to the server. 8. The authenticity proof system according to any one of 8.   The key receiving means receives a different key from the server every time the digital content is generated, and the proof basic data encryption means encrypts the proof hash value and the device identifier using different keys. The authenticity proof system according to claim 9.   The server includes key expiration date setting means for setting an expiration date of a key transmitted to the digital content generation device, and the authenticity certifying means is after the expiration date of the key set by the key expiration date setting means has elapsed. The authenticity of the digital content corresponding to the certification hash value is denied when the certification hash value encrypted using the key is transmitted from the digital content generation device. The authenticity proof system described.   The digital content generation device is at least a digital camera of a digital camera, a multi-function mobile terminal, and a digital measuring device, and the digital content is a digital image taken by the digital camera and the multi-function mobile terminal, and the The authenticity proof system according to any one of claims 1 to 11, which is various digital measurement values measured by a digital measuring instrument.

Images