JP2020022150A - Information processing system and information processing method - Google Patents

Abstract

To provide techniques for increasing reliability of storage of image data.SOLUTION: An information processing system S is equipped with an imaging device 1 and a display device 2. The imaging device 1 is equipped with: a biometric information acquisition unit 10 for acquiring biometric information; a verification unit 150 for verifying whether biometric information acquired by the biometric information acquisition unit 10 matches previously registered biometric information; an imaging unit 11 for permitting imaging under the condition that the verification carried out by the verification unit 150 has been successful; an encoding unit 151 for encoding image data captured by the imaging unit 11, and thereby generating encoded data; and a data output unit 152 for outputting the encoded data to the display device 2 via a connection terminal 12 connected to the display device 2. The display device 2 is equipped with: an acquisition unit 240 for acquiring encoded data via a connection terminal 22 connected to the imaging device 1; a decoding unit 241 for decoding the encoded data acquired by the acquisition unit 240; and a display unit 20 for displaying image data acquired as a result of the decoding carried out by the decoding unit 241.SELECTED DRAWING: Figure 3

Description

  The present invention relates to an information processing system and an information processing method, and more particularly to a technique for securely storing and displaying a captured image.

  Sign or seal a document to prove any intention or claim, such as a work created by an artist or its appraisal, a contract to be exchanged for real estate or expensive personal property transactions, or an employment contract, etc. Etc.) are performed on a daily basis. The signature or the like left on the document is then verified for authenticity as necessary. However, there is no person in Japan responsible for the authenticity of signatures, etc., and stakeholders in matters related to documents with signatures, etc. judge authenticity. It is the current situation. Therefore, no responsibility is attached to the judgment result, and it must be said that the authenticity management of signatures and the like is insufficient.

  For this reason, it is also conceivable that the document with the signature or the like is imaged, image data is created, and the image data is stored safely with the image capturing time, so that it can be used for post-authentication evaluation. For example, Patent Literature 1 proposes a technique for securely storing image data.

JP 2001-306273 A

  The above technology is a technology for storing image data in a remote server via a network. While the technology for maintaining network security is evolving every day, the technology such as cracking is also evolving every day. The technology for maintaining network security and the technology for breaking it are in a so-called "pretend play" relationship, and storing image data with the above-mentioned technology does not necessarily guarantee the reliability of the original data.

  The present invention has been made in view of these points, and an object of the present invention is to provide a technique for improving the reliability of storage of image data.

  A first aspect of the present invention is an information processing system. The system includes an imaging device and a display device for displaying an image captured by the imaging device. The imaging device, a biometric information acquisition unit that acquires biometric information, an authentication unit that authenticates whether the biometric information obtained by the biometric information acquisition unit matches registered biometric information registered in advance, and the authentication unit An imaging unit that permits imaging on condition that authentication by the imaging unit succeeds, an encryption unit that encrypts image data captured by the imaging unit to generate encrypted data, and a connection terminal with the display device. A data output unit that outputs the encrypted data to the display device. The display device, an acquisition unit that acquires the encrypted data via a connection terminal with the imaging device, a decryption unit that decrypts the encrypted data acquired by the acquisition unit, and a decryption unit that decrypts and acquires the data. And a display unit for displaying the obtained image data.

  The data output unit of the imaging device may output the encrypted data to the display device on condition that the authentication by the authentication unit of the imaging device is successful.

  The imaging device may further include at least one of a pen point and a seal.

  The imaging device may further include an imaging device-side storage unit that stores a first encryption key used by the encryption unit to encrypt the image data, and the display device uses the first encryption key. The display device-side storage unit that stores a second encryption key for the decryption unit to decrypt the encrypted data may be further provided.

  The display device may further include a display device-side imaging unit that captures an image to be displayed on the display unit, wherein the display unit includes image data decoded by the decoding unit, and the display device-side imaging unit. May be displayed in a manner that allows comparison with newly captured image data.

  The imaging device may further include a time acquisition unit that acquires a time when the imaging unit captures the image, and the encryption unit associates the encrypted image data with information indicating an imaging time of the image data. To generate the encrypted data.

  When the encrypted data obtained by the obtaining unit is different from any encrypted data received in the past, the display device includes a hash value generating unit that generates a hash value of the obtained encrypted data, and a communication network. A hash value management unit that registers the hash value in a database on a network.

  The hash value management unit may disconnect communication with the communication network when registration of the hash value in the database is completed.

  A second aspect of the present invention is an information processing method executed in an information system including an imaging device and a display device. In this method, the imaging apparatus obtains biometric information, authenticates whether the obtained biometric information matches registered biometric information registered in advance, and sets a condition that the authentication is successful. Permitting imaging, encrypting captured image data to generate encrypted data, outputting the encrypted data to the display device via a connection terminal with the display device, and executing I do. The display device acquires the encrypted data via a connection terminal with the imaging device, decrypts the encrypted data, and the display device includes decrypted and acquired image data. And displaying on the display unit.

  Note that any combination of the above-described components and any conversion of the expression of the present invention between a method, an apparatus, a system, a computer program, a data structure, a recording medium, and the like are also effective as embodiments of the present invention.

  According to the present invention, it is possible to provide a technique for improving the reliability of storage of image data.

FIG. 1 is a diagram schematically illustrating an overall configuration of an information processing system according to an embodiment. FIG. 3 is a diagram schematically illustrating an example of a use scene of the information processing system according to the embodiment. FIG. 2 is a diagram schematically illustrating a functional configuration of an imaging device and a display device according to the embodiment. FIG. 5 is a diagram schematically illustrating an example of a comparison screen displayed on the display unit according to the embodiment. FIG. 4 is a sequence diagram for describing a flow of information processing executed by the imaging device according to the embodiment.

<Outline of Embodiment>
An outline of an embodiment will be described. An information processing system according to an embodiment includes an imaging device and a display device. The imaging apparatus has a biometric authentication function, performs authentication using biometric information of a user registered in advance, and is configured to permit imaging on condition that authentication is successful.

  The imaging device encrypts the image data obtained by imaging by using the encryption key stored in the read-only memory by the manufacturer of the imaging device at the time of manufacturing the imaging device, and then sets the time at which the image data was captured. And store it in the imaging device in association with.

  The display device is a device for displaying image data captured by the imaging device. In the display device, an encryption key paired with an encryption key stored in the imaging device is stored in a read-only memory by a manufacturer of the display device when the display device is manufactured. The display device decrypts the encrypted data obtained from the imaging device using the encryption key stored in the read-only memory. The display device displays the image data obtained by decoding on a display unit provided in the display device.

  Here, the imaging device and the display device exchange encrypted data via a connection terminal that makes physical contact. In addition, the imaging device performs authentication using the biometric information of the user registered in advance, and outputs the encrypted data to the display device on condition that the authentication is successful. Further, the display device does not have a function of outputting video to an external device, and is configured to display image data only on a display unit included in the display device itself. It should be noted that the display device can also be set so as to be automatically deleted from the display device when a predetermined period (for example, 10 minutes) elapses after the display of the image data ends.

  In addition, only one display device holds an encryption key that is a pair of an encryption key held by a certain imaging device. Therefore, even if the encrypted data stored by a certain imaging device is output to the display device, but the display device does not store the encryption key for decrypting the encrypted data obtained from the imaging device, the display is performed. The device cannot display image data.

  As described above, in the information processing system according to the embodiment, only a person who has successfully authenticated the biometric authentication function of the imaging device can use the imaging function. Further, image data captured by the imaging device can be viewed only on a dedicated display device that forms a pair. The exchange of data between the imaging device and the display device is wired, and the display device has no external output function. For this reason, it is difficult for a third party to access the image data captured by the imaging device. Thereby, the information processing system according to the embodiment can improve the reliability of storage of image data.

<Overall Configuration of Information Processing System S>
FIG. 1 is a diagram schematically illustrating an overall configuration of an information processing system S according to an embodiment. As described above, the information processing system S according to the embodiment includes the imaging device 1 and the display device 2. Here, the display device 2 can be connected via a communication network N to a block chain B, which is a kind of database realized by a plurality of computers, in a communicable manner.

  The imaging device 1 includes a biological information acquisition unit 10, an imaging unit 11, and a connection terminal 12. The imaging device 1 illustrated in FIG. 1 also includes a pen tip 13. The display device 2 includes a display unit 20, a display device-side imaging unit 21, and a connection terminal 22. The connection terminal 12 included in the imaging device 1 is a so-called female connection terminal.

  On the other hand, the connection terminal 22 included in the display device 2 is a so-called male connection terminal. By inserting the connection terminal 12 into the connection terminal 22, the connection terminal 12 and the connection terminal 22 come into contact with each other, and the imaging device 1 forms a path for outputting the encrypted data to the connection terminal 22. Further, since the imaging device 1 is a female connection terminal, the terminal is accommodated in the housing of the imaging device 1 and does not protrude outside the imaging device 1. Thereby, when the user uses the imaging device 1 as a writing implement, the connection terminal 12 does not hinder writing.

  The display device 2 can also access a blockchain B configured like a network via a communication network N such as the Internet. Although details will be described later, when the display device 2 acquires new encrypted data from the imaging device 1, the display device 2 generates a hash value of the acquired encrypted data. The display device 2 registers the generated hash value in the blockchain B via the communication network N.

  As shown in FIG. 1, the block chain B is configured by a plurality of terminals existing on a network participating. As is well known, the blockchain can be regarded as one distributed database technology in which a huge ledger that records the transaction history of all participating terminals is shared by all participating terminals. The same information is shared by a plurality of terminals, and the validity of the information is determined by majority vote of participating terminals. For this reason, in order to falsify the information held in the blockchain, it is necessary to simultaneously falsify the information stored in each of the majority or more participating terminals, and it is said that the database is difficult to falsify.

  By storing the hash value of the encrypted data in the secure block chain B, the display device 2 can verify the validity of the image data as digital information as needed. Thereby, the information processing system S can further improve the reliability of storage of the image data. In addition, since the blockchain B existing on the communication network N is not the image data itself but a hash value of the data obtained by encrypting the image data, the information stored in the blockchain B may be a third party. Even if it leaks, it is practically impossible to specify the image data therefrom.

  FIGS. 2A and 2B are diagrams schematically illustrating an example of a use scene of the information processing system S according to the embodiment. Specifically, FIG. 2A is a diagram illustrating a state of imaging using the imaging device 1, and FIG. 2B is a diagram illustrating a state of displaying image data by the display device 2.

  In the imaging apparatus 1 shown in FIG. 2, the biometric information acquisition unit 10 is a sensor for acquiring the fingerprint of the user U as biometric information. Although not limited, the sensor constituting the biometric information acquisition unit 10 can be pressed by a finger, and the imaging unit 11 is configured to take an image when the biometric information acquisition unit 10 is pressed. Specifically, when the finger of the user U touches the biometric information acquisition unit 10, the biometric information acquisition unit 10 acquires the fingerprint information of the user U, and when the authentication based on the fingerprint information succeeds, the biometric information acquisition unit 10 The imaging unit 11 captures an image in conjunction with the pressing, and generates image data.

  In addition, the imaging unit 11 may perform imaging after a predetermined time has elapsed after an instruction of imaging by the user U (in the example illustrated in FIG. 2, the depression of the biological information acquisition unit 10). At this time, the imaging unit 11 may cause a sound output unit (not shown) included in the imaging device 1 to output a countdown for notifying the timing until the image is picked up by sound. Thereby, the imaging unit 11 can indicate to the user U when the imaging is performed, so that the convenience of the user U at the time of imaging can be improved. The predetermined time may be set by the user U.

  FIG. 2A illustrates an example in which the imaging target object O of the imaging unit 11 is a contract. As shown in FIG. 2A, the contract S, which is the imaging object O, has a signature Sg of the user U himself. Thereby, the user U can store the image data obtained by imaging the contract in which the signature Sg written by the user U is written in the imaging device 1.

  FIG. 2B illustrates a state in which the connection terminal 12 of the imaging device 1 and the connection terminal 22 of the display device 2 are connected. When the connection terminal 12 of the imaging device 1 is connected to the connection terminal 22 of the display device 2, the encrypted image data stored in the imaging device 1 is output to the display device 2. FIG. 2B shows a state in which the sign Sg of the user U among the image data stored in the imaging device 1 is enlarged and displayed on the display unit 20. The user U can provide information for determining the authenticity of the signature Sg by arranging the signature Sg displayed on the display unit 20 and the imaging target O.

<Functional Configuration of Imaging Device 1 and Display Device 2 According to Embodiment>
Next, the functional configuration of the imaging device 1 and the display device 2 for realizing the above-described information processing system S will be described in detail.

  FIG. 3 is a diagram schematically illustrating a functional configuration of the imaging device 1 and the display device 2 according to the embodiment. The imaging device 1 includes a biological information acquisition unit 10, an imaging unit 11, a connection terminal 12, a pen tip 13, an imaging device storage unit 14, and a control unit 15. The display device 2 includes a display unit 20, a display-side imaging unit 21, a connection terminal 22, a display-side storage unit 23, and a control unit 24.

  In FIG. 3, arrows indicate main data flows, and there may be data flows not shown in FIG. In FIG. 3, each functional block shows a configuration of a function unit, not a configuration of a hardware (device) unit. Therefore, the functional blocks illustrated in FIG. 3 may be implemented in a single device, or may be separately implemented in a plurality of devices. The transfer of data between the functional blocks may be performed via any means such as a data bus, a network, a portable storage medium, and the like.

  The imaging device-side storage unit 14 includes a ROM (Read Only Memory) for storing a BIOS (Basic Input Output System) of a computer that implements the imaging device 1, a RAM (Random Access Memory) serving as a work area of the imaging device 1, and an OS. (Operating System), application programs, and large-capacity storage devices such as HDDs (Hard Disk Drives) and SSDs (Solid State Drives) that store various information referred to when the application programs are executed.

  Similarly, the display device-side storage unit 23 is a ROM that stores a BIOS or the like of a computer that implements the display device 2, a RAM that is a work area of the display device 2, an OS or an application program, and is referred to when the application program is executed. It is a large-capacity storage device such as an HDD or SSD that stores various information.

  The control unit 15 is a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit) of the imaging device 1, and executes the program stored in the imaging device-side storage unit 14 to execute the authentication unit 150 and the encryption. It functions as the unit 151, the data output unit 152, and the time acquisition unit 153.

  Similarly, the control unit 24 is a processor such as a CPU or a GPU of the display device 2, and executes a program stored in the display device-side storage unit 23 to obtain an acquisition unit 240, a decoding unit 241, and a hash value generation unit 242. , And a hash value management unit 243.

  The biological information acquisition unit 10 of the imaging device 1 acquires biological information of the user U of the imaging device 1. Here, “biological information” is information used for biometric authentication, and is information representing a physical characteristic of a human. Examples of the biological information include, but are not limited to, fingerprint information, iris information, voiceprint information, and vein pattern.

  The authentication unit 150 authenticates whether the biometric information acquired by the biometric information acquisition unit 10 matches registered biometric information registered in advance. Here, the “preregistered registered biometric information” is, for example, biometric information of the user U registered by the user U at the time of initial setting of the imaging apparatus 1.

  The imaging unit 11 permits imaging by the user U on condition that the authentication by the authentication unit 150 is successful. In other words, if the authentication by the authentication unit 150 fails, the user U cannot take an image using the imaging unit 11. That is, a person who does not register biometric information in the imaging device 1 cannot generate image data using the imaging device 1. Thereby, it is possible to guarantee that the image data stored in the imaging device 1 is data captured by the user U who has registered the biological information in the imaging device 1.

  The encryption unit 151 encrypts image data captured by the imaging unit 11 to generate encrypted data. The encrypted data generated by the encryption unit 151 is stored and stored in the imaging device-side storage unit 14. If the encryption of the image data is successful, the encryption unit 151 may delete the plaintext image data. Thus, even if the information stored in the imaging device-side storage unit 14 leaks to a third party, it is possible to prevent a situation in which the third party acquires plaintext image data.

  The encryption key used by the encryption unit 151 for encrypting image data is stored in a read-only secure memory in the imaging device-side storage unit 14 by the manufacturer of the imaging device 1 when the imaging device 1 is manufactured. The manufacturer of the imaging device 1 stores a different encryption key for each imaging device 1.

  The data output unit 152 outputs the encrypted data generated by the encryption unit 151 to the display device 2 via the connection terminal 12 with the display device 2. The acquisition unit 240 of the display device 2 acquires the encrypted data from the imaging device 1 via the connection terminal 22 with the imaging device 1. As described above, the imaging device 1 and the display device 2 exchange encrypted data by being connected by the physical connection terminal. Therefore, as compared with the case where the imaging device 1 and the display device 2 exchange data wirelessly, a third party obtains the encrypted data while the imaging device 1 and the display device 2 communicate encrypted data. It becomes difficult to do. As a result, the information processing system S can increase the robustness against leakage of the encrypted data stored in the imaging device 1.

  The decryption unit 241 decrypts the encrypted data acquired by the acquisition unit 240. Here, the encryption key used by the decryption unit 241 to decrypt the encrypted data is stored in the read-only secure memory in the display device-side storage unit 23 by the manufacturer of the display device 2 when the display device 2 is manufactured. The encryption key used by the encryption unit 151 of the imaging device 1 to encrypt the image data and the encryption key used by the decryption unit 241 of the display device 2 to decrypt the encrypted data are paired encryption keys. In other words, the data encrypted by the encryption unit 151 using the encryption key cannot be decrypted by the decryption unit 241 unless the encryption key is paired with the encryption key.

  Hereinafter, the encryption key used by the encryption unit 151 to encrypt the image data is “first encryption key”, and the encryption key used by the decryption unit 241 to decrypt the data encrypted with the first encryption key is “ Second encryption key ". The first encryption key is stored in the imaging device-side storage unit 14, and the second encryption key is stored in the display device-side storage unit 23. The first encryption key and the second encryption key are realized by, for example, a secret key and a public key of a public key cryptosystem, respectively. Thereby, the imaging device 1 that stores the first encryption key and the display device 2 that stores the second encryption key paired with the first encryption key are also paired.

  The display unit 20 displays the image data obtained by decoding by the decoding unit 241. The acquisition unit 240 is realized by, for example, an LCD (Liquid Crystal Display) or an organic EL (Electroluminescence) display, and is integrated with the display device 2. The display unit 20 may have a touch panel function. In this case, the display unit 20 also functions as an input interface of the display device 2.

  As described above, the imaging device 1 and the display device 2 form a pair. That is, image data captured by a certain imaging device 1 cannot be displayed on a device other than the display device 2 paired with the imaging device 1. The imaging device 1 enhances the reliability of the image data stored in the imaging device 1 in that the image data can be displayed only by a dedicated viewer device.

  When the connection terminal 12 of the imaging device 1 is connected to the connection terminal 22 of the display device 2, the data output unit 152 of the imaging device 1 sets a condition that authentication in the authentication unit 150 of the imaging device 1 succeeds. , And outputs the encrypted data to the display device 2. Thereby, the imaging device 1 can suppress transfer of image data to the display device 2 by a person other than the person who registered the biological information in the imaging device 1. Since only a limited number of persons can retrieve image data from the imaging device 1, the imaging device 1 can improve the reliability of storage of image data.

  The time acquisition unit 153 of the imaging device 1 acquires the time at which the imaging unit 11 captured an image. The encryption unit 151 generates encrypted data by associating the encrypted image data with information indicating the image capturing time of the image data. Here, the time acquired by the time acquiring unit 153 includes the date when the image capturing unit 11 captures an image.

  Consider a case where the imaging unit 11 captures a contract and generates image data. Generally, the contract will state the date the contract was signed. By associating the image capturing time with the image data obtained by capturing the contract, the encryption unit 151 provides information for ex-post confirmation of whether or not the image data was captured on the date on which the contract was concluded. Can be.

  If the contract date and the image data capture date are the same, the image data is compared to the case where the contract date and the image data capture date are different. It is highly probable that this is data obtained by imaging the image. By generating the encrypted data by associating the image data encrypted by the encryption unit 151 with the information indicating the imaging time of the image data, the imaging apparatus 1 improves the reliability of storage of the image data. Can be.

  The hash value generation unit 242 of the display device 2 generates a hash value of the acquired encrypted data when the encrypted data acquired by the acquisition unit 240 from the imaging device 1 is different from any encrypted data received in the past. The hash value generation unit 242 generates a hash value of the encrypted data using a known hash generation algorithm such as SHA3 (Secure Hash Algorithm version 3).

  The hash value management unit 243 registers the hash value generated by the hash value generation unit 242 via the communication network N in a database on the network. Specifically, the hash value management unit 243 registers the hash value generated by the hash value generation unit 242 in the block chain B configured on the communication network N. Thereby, the display device 2 can determine whether or not the encrypted data acquired from the imaging device 1 for the second time or later matches the encrypted data acquired from the imaging device 1 for the first time. Accordingly, the display device 2 can confirm that the encrypted data stored in the imaging device 1 has not been modified afterward, and thus the reliability of storage of image data by the imaging device 1 can be improved. .

  Specifically, the hash value management unit 243 converts the imaging time associated with the encrypted data generated by the hash value generation unit 242 and the imaging device identifier for identifying the imaging device 1 into a hash value. Register it in the blockchain B in association with it. Here, the imaging device identifier associated with the hash value by the hash value management unit 243 is an identifier for specifying the imaging device that has captured the image data that is the original data of the encrypted data. The imaging device identifier is stored in a read-only secure memory in the imaging device side storage unit 14 when the imaging device 1 is manufactured by the manufacturer of the imaging device 1. The acquisition unit 240 acquires the imaging device identifier from the imaging device 1 together with the encrypted data.

  The hash value management unit 243 refers to the block chain B using the imaging device identifier and the imaging time as keys, and determines whether the encrypted data acquired from the imaging device 1 is registered in the block chain B. The hash value management unit 243 causes the hash value generation unit 242 to generate a hash value of the encrypted data when the encrypted data acquired by the acquisition unit 240 from the imaging device 1 is different from any encrypted data received in the past. The hash value is registered in the block chain B.

  The hash value management unit 243 disconnects communication with the communication network N when the registration of the hash value in the database on the communication network N is completed. That is, the hash value management unit 243 is off-line except for checking whether the hash value has already been registered in the block chain B and when registering the hash value.

  As described above, since the display device 2 is usually offline except when it is necessary to be online, the opportunity for a malicious third party to access the display device 2 via the communication network N is minimized. And Thereby, as a whole of the information processing system S, the reliability of storage of image data by the imaging device 1 can be improved.

  FIG. 2 is a diagram illustrating a case where the signature Sg displayed on the display unit 20 of the display device 2 and the contract itself are compared side by side. Here, if the contract to be compared is also digitized, it can be conveniently used for comparison and the like using image processing.

  Thus, the display device-side imaging unit 21 captures an image to be displayed on the display unit 20. The display unit 20 displays the image data decoded by the decoding unit 241 and the image data newly picked up by the display device-side image pickup unit 21 in a comparable manner.

  FIG. 4 is a diagram schematically illustrating an example of the comparison screen displayed on the display unit 20 according to the embodiment. In the comparison screen illustrated in FIG. 4, the “image in memory” stored in the imaging device storage unit 14 of the imaging device 1 and the “camera image” captured by the display device imaging unit 21 are displayed on the display unit 20. They are displayed side by side at the same time. Below each of the in-memory image and the camera image, enlargement / reduction interfaces 200 and 201 for enlarging or reducing the image are also displayed. Further, in the area for displaying the image in the memory, the imaging time of the image data is also displayed.

  When the display unit 20 is a touch screen, the user U can enlarge or reduce the in-memory image by operating the enlargement / reduction interface 200. Similarly, the user U can enlarge or reduce the camera image by operating the enlargement / reduction interface 201. Accordingly, the user U can equalize the size of the signature Sg included in each of the in-memory image and the camera image. Therefore, the display device 2 has information useful for comparing the signature U with the user U. Can be provided.

<Sequence diagram illustrating the flow of information processing executed by the imaging device 1>
FIG. 5 is a sequence diagram for describing a flow of information processing executed by the imaging device 1 according to the embodiment. The processing in the sequence diagram starts when, for example, the imaging device 1 is activated.

  The biological information acquisition unit 10 acquires biological information of the user U of the imaging device 1 (S2). The authentication unit 150 authenticates whether the biometric information of the user U acquired by the biometric information acquiring unit 10 matches registered biometric information registered in advance (S4). While the authentication of the biometric information has failed (No in S6), the imaging device 1 returns to step S2 and continues acquiring and authenticating the biometric information.

  When the biometric information authentication is successful (Yes in S6), the imaging unit 11 permits imaging (S8). The encryption unit 151 encrypts the image data obtained by the imaging unit 11 using the first encryption key (S10). The data output unit 152 outputs the encrypted data to the display device 2 via the connection terminal 12 with the display device 2 (S12).

  The acquisition unit 240 of the display device 2 acquires the encrypted data from the imaging device 1 via the connection terminal 22 with the imaging device 1 (S14). The decryption unit 241 decrypts the encrypted data acquired by the acquisition unit 240 using the second encryption key (S16). The display unit 20 causes the display unit 20 to display the image data obtained by decoding by the decoding unit 241 (S18).

<Other Usage Scenes of Information Processing System S According to Embodiment>
An example in which the user U of the information processing system S images his or her contract has been described with reference to FIG. In addition, the user U of the information processing system S may be various agents, legal staff, accounting staff, public servants, or investors of a company. In this case, in addition to the imaging target object O of the imaging device 1, a receipt or the like may be an imaging target.

  Further, when the user U is an artist who creates a work or a relative thereof, the signature Sg attached to the work or the signature Sg attached to the work certificate as part of authenticity evaluation of the work of himself or the relative or work management. May be set as the imaging target O. For this reason, the imaging device 1 may be able to register fingerprints of a plurality of users U. At this time, a management authority user who permits use of all functions of the imaging device 1 including the use of the imaging unit 11 of the imaging device 1 and a function of transferring encrypted data stored in the imaging device 1 to the display device 2 are provided. It may be possible to classify users as restricted users who have restrictions on available functions such as use.

  Specifically, for example, a user U who has registered biometric information for the first time in the imaging apparatus 1 is registered as a management authority user, and a user U who has registered biometric information with the management authority user already registered is registered as a restricted user. May be performed. As described above, by permitting the registration of the user U who is limited only to the use of the transfer function of the encrypted data and the like, the imaging apparatus 1 cannot operate the imaging apparatus 1 by the artist who is the administrative authority user for some reason. Also, a relative or a designated administrator can display the encrypted data of the imaging device 1 on the display device 2.

<Effects of Imaging Device 1 According to Embodiment>
As described above, according to the imaging device 1 according to the embodiment, it is possible to provide a technique for improving the reliability of storage of image data.

  As described above, the present invention has been described using the embodiment, but the technical scope of the present invention is not limited to the scope described in the above embodiment, and various modifications and changes are possible within the scope of the gist. is there. For example, the specific embodiment of the dispersion / integration of the apparatus is not limited to the above-described embodiment, and all or a part of the apparatus may be functionally or physically dispersed / integrated in an arbitrary unit. Can be. Further, new embodiments that are generated by arbitrary combinations of the plurality of embodiments are also included in the embodiments of the present invention. The effect of the new embodiment caused by the combination has the effect of the original embodiment.

<First Modification>
The case where the imaging device 1 includes the pen tip 13 has been described above. Alternatively, the imaging device 1 may include a seal. Thereby, even if there is a document for which a seal is required, the user U can save the trouble of preparing a seal in addition to the imaging device 1.

<Second Modification>
The convenience of the user U is improved if the imaging device 1 includes the pen tip 13 and the seal, but the pen tip 13 and the seal are not essential components of the imaging device 1. When the imaging device 1 does not include the pen point 13 or the seal, the imaging device 1 functions as an image generation / storage device with a biometric authentication function. When the user U uses the imaging apparatus 1 to store an image such as a contract, the user U may prepare a pen or a seal in addition to the imaging apparatus 1 and proceed with a procedure such as a contract.

<Third Modification>
The case where the display unit 20 of the display device 2 displays the in-memory image and the camera image in parallel has been described above. In addition, the display device 2 may automatically determine whether the image in the memory matches the camera image. In this case, an image comparison unit (not shown) may be provided in the control unit 24 of the display device 2. The image comparing unit determines whether or not the image data decoded by the decoding unit 241 matches the image data newly picked up by the display-side image pickup unit 21. The image comparison unit can be realized using a known image processing technique such as pattern matching.

<Fourth modification>
In the above, it has been mainly described that the database on the communication network N is the blockchain B. However, the database on the communication network N is not limited to the blockchain B. A database other than the blockchain B may be used, provided that security can be ensured.

DESCRIPTION OF SYMBOLS 1 ... Imaging device 10 ... Biological information acquisition part 11 ... Imaging part 12 ... Connection terminal 13 ... Nib 14 ... Imaging device side storage part 15 ... Control part 150 ... Authentication unit 151 Encryption unit 152 Data output unit 153 Time acquisition unit 2 Display device 20 Display unit 21 Display unit-side imaging unit 22 Connection Terminal 23 Display-side storage unit 24 Control unit 240 Acquisition unit 241 Decoding unit 242 Hash value generation unit 243 Hash value management unit N Communication network S: Information processing system

Claims (9)

An imaging device and a display device for displaying an image captured by the imaging device,
The imaging device,
A biological information acquisition unit that acquires biological information,
An authentication unit that authenticates whether the biometric information obtained by the biometric information obtaining unit matches registered biometric information registered in advance,
An imaging unit that permits imaging on condition that the authentication by the authentication unit is successful;
An encryption unit that encrypts the image data captured by the imaging unit to generate encrypted data;
A data output unit that outputs the encrypted data to the display device via a connection terminal with the display device,
The display device,
An acquisition unit that acquires the encrypted data through a connection terminal with the imaging device;
A decryption unit for decrypting the encrypted data acquired by the acquisition unit,
A display unit that displays the image data obtained by decoding by the decoding unit,
Information processing system. The data output unit of the imaging device outputs the encrypted data to the display device, on condition that the authentication in the authentication unit of the imaging device is successful.
The information processing system according to claim 1. The imaging device further includes at least one of a pen point and a seal,
The information processing system according to claim 1. The imaging device further includes an imaging device-side storage unit that stores a first encryption key used by the encryption unit to encrypt the image data,
The display device further includes a display device-side storage unit that stores a second encryption key for the decryption unit to decrypt data encrypted with the first encryption key,
The information processing system according to claim 1. The display device further includes a display device-side imaging unit that captures an image to be displayed on the display unit,
The display unit displays the image data decoded by the decoding unit and the image data newly captured by the display device-side imaging unit in a manner that allows comparison.
The information processing system according to claim 1. The imaging apparatus further includes a time acquisition unit that acquires a time at which the imaging unit captures an image,
The encryption unit generates the encrypted data by associating the encrypted image data with information indicating the imaging time of the image data,
The information processing system according to claim 1. The display device, if the encrypted data obtained by the obtaining unit is different from any previously received encrypted data, a hash value generating unit that generates a hash value of the obtained encrypted data,
A hash value management unit that registers the hash value in a database on the network via a communication network;
The information processing system according to any one of claims 1 to 6, further comprising: The hash value management unit disconnects the communication with the communication network when the registration of the hash value to the database is completed,
The information processing system according to claim 7. An information processing method executed in an information system including an imaging device and a display device,
The imaging device,
Obtaining biological information;
Authenticating whether the obtained biometric information matches registered biometric information registered in advance,
Allowing imaging on condition that the authentication is successful;
Encrypting the captured image data to generate encrypted data;
Outputting the encrypted data to the display device via a connection terminal with the display device;
Run
The display device,
Obtaining the encrypted data via a connection terminal with the imaging device;
Decrypting the obtained encrypted data;
Displaying the decoded and acquired image data on a display unit included in the display device.
Information processing method.

Images