WO2012127797A1

WO2012127797A1 - Information processing device, information processing method and information processing program

Info

Publication number: WO2012127797A1
Application number: PCT/JP2012/001533
Authority: WO
Inventors: 哲也牛島; 正治天池
Original assignee: パナソニック株式会社
Priority date: 2011-03-22
Filing date: 2012-03-06
Publication date: 2012-09-27
Also published as: JP2012198801A

Abstract

Provided is an information processing device etc. that is capable of easily hiding the very existence of secret content information. This information processing device is provided with the following: a mode setting unit (10) that sets the operation mode to either a secret mode or a non-secret mode; a pseudo file generation unit (32) that generates, on the basis of a prescribed conversion rule, alternative content information that replaces the secret content information that is the content information to be made secret; and a pseudo file display unit (33) that displays the alternative content information.

Description

INFORMATION PROCESSING APPARATUS, INFORMATION PROCESSING METHOD, AND INFORMATION PROCESSING PROGRAM

The present invention relates to an information processing apparatus, an information processing method, and an information processing program. In particular, the present invention relates to a technique for concealing a part of a large number of stored content as a concealment target from browsing operations.

Information of various contents is often stored on storage devices of various devices such as mobile phones and digital cameras. Specifically, there are contents such as an image file obtained by shooting with a camera and text of an e-mail. In addition, contents such as image files and texts of electronic mail may be registered on various servers connected to the Internet or the like.

Such content may or may not contain personal information of a particular person. For content that does not contain personal information, there are many cases where problems will not occur even if unspecified people browse, but for content that includes personal information, it can not be browsed by anyone other than a specific user of the content, such as the owner of the device. Is desirable.

However, convenience can be lost if all the stored content can not be browsed by anyone other than a specific user. Therefore, there is a need to conceal only a part of a large number of stored content, for example, one including personal information, as a target of concealment from browsing operations.

Conventional techniques related to the present invention are disclosed, for example, in Patent Literature 1 and Patent Literature 2. Patent Document 1 discloses a technology that can be used when managing various user's position information and outputting data of a movement route.

Specifically, user behavior data (position information) is acquired and accumulated in the server, and one similar to the current user behavior data is selected from a plurality of past user behavior data, and pseudo behavior data is generated. In addition, when the current user behavior pattern can be set as concealment, and in the case of the concealment behavior pattern, the pseudo behavior pattern is generated, and the behavior of the concealed part is replaced with the pseudo behavior pattern under the specific condition.

For example, when outputting data of a moving route, a specific point on the route is made to be pseudo data, or data of a certain point is made null. This makes it possible to conceal non-daily activities. In addition, since the simulated behavior pattern is generated from the past behavior pattern of the user himself, unnaturalness does not occur in the behavior.

On the other hand, Patent Document 2 discloses a technology that can be applied when displaying a medical image. Specifically, when the patient's personal information is embedded in the medical image, mask processing is performed according to the purpose (use, level) without processing it to the original medical image for privacy protection. , Display with confidentiality added. With regard to mask processing, it is possible to handle displays, printed matter, and multiple images.

WO 2010/050195 Japanese Patent Application Laid-Open No. 2006-320488

However, in the technology disclosed in Patent Document 1, the information that can be concealed is only the action history. Therefore, it can not be used in applications for concealing information of specific content such as image files and e-mail contents. In addition, server cooperation is essential, and extensive facilities and processing are required for realization, such as accumulation of behavior patterns of the user in the past.

Further, in the technology disclosed in Patent Document 2, since the mask image is superimposed on the information to be concealed and concealed so that the concealment object is not visible, the fact that the information to be concealed exists in the portion of the mask image is itself Anyone can know. In other words, the existence of the information to be concealed can not be concealed, and for example, a third party who attempts unauthorized access may be interested in personal information that should be present in the area concealed by the mask image. It is considered to be sexual and dangerous. Also, even a general third party will notice that the hidden part has important meaning, that is, there is information that needs to be hidden.

An object of the present invention is to provide an information processing apparatus, an information processing method, and an information processing program capable of easily concealing the presence itself of content information to be concealed.

An information processing apparatus according to the present invention includes a mode setting unit that sets an operation mode to a concealment mode or a non-secret mode, a storage unit that stores content information including concealed content information that is concealed content information, and a predetermined conversion rule. A substitute content information generation unit configured to generate substitute content information to substitute for the secret content information stored in the storage unit based on the display unit, and a display unit configured to display substitute content information generated by the substitute content information generation unit; Equipped with

According to this information processing apparatus, it is possible to easily conceal the existence itself of the content information to be concealed. In addition, a third party who does not have the right to view the corresponding confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

In the information processing method according to the present invention, a step of setting the operation mode to a concealment mode or a non-secret mode, a step of storing content information including concealed content information which is concealed content information in a storage unit, The method includes the steps of generating alternative content information to be substituted for the confidential content information stored in the storage unit based on the conversion rule, and displaying the generated alternative content information by the display unit.

According to this information processing method, it is possible to easily conceal the existence itself of the content information to be concealed. In addition, a third party who does not have the right to view the corresponding confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

An information processing program according to the present invention is a program for causing a computer to execute each step of the above information processing method.

According to this information processing program, it is possible to easily conceal the existence itself of the content information to be concealed. In addition, a third party who does not have the right to view the corresponding confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

According to the present invention, it is possible to easily conceal the existence itself of the content information to be concealed.

Block diagram showing a configuration example of an information processing apparatus according to an embodiment of the present invention A block diagram showing a specific example of the configuration of each storage area and information used by the information processing apparatus according to the embodiment of the present invention A diagram showing a specific example of state transition of each display screen output by the information processing apparatus according to the embodiment of the present invention A flowchart showing an example of a file display control process executed by the information processing apparatus according to the embodiment of the present invention A flowchart showing an example of secret target file extraction processing executed by an information processing apparatus according to an embodiment of the present invention A flowchart showing an example of pseudo file control processing executed by the information processing apparatus according to the embodiment of the present invention A flowchart showing an example of display control processing at the time of concealment mode cancellation performed by the information processing apparatus according to the embodiment of the present invention A diagram showing a specific example of a content list output by the information processing apparatus according to the embodiment of the present invention for display A diagram showing a specific example of display contents of the mail display screen in the embodiment of the present invention The figure which shows the structural example of the conversion rule for converting the content of the mail in embodiment of this invention. The figure which shows the specific example of the number of preservation etc. according to the operation mode and data preservation state in the embodiment of the present invention

Embodiments of the present invention will be described below with reference to the drawings.

An exemplary configuration of the information processing apparatus 100 according to the present embodiment is shown in FIG. It is assumed that the information processing apparatus 100 shown in FIG. 1 is configured as part of various functions incorporated in equipment such as, for example, a mobile phone terminal, a digital camera, and a personal computer. Further, the information processing apparatus 100 can also be applied to, for example, browsing functions provided by various servers existing on the Internet. The entity of the information processing apparatus 100 is assumed to be constituted by hardware such as a microcomputer incorporated in a device and a program that it executes, as a representative example.

In the case of a mobile phone terminal, the contents of various information such as an image file obtained by photographing by a camera or a file holding the contents of an e-mail transmitted / received by an e-mail communication function are recording media such as a memory card. It is generally stored on top. Such content may be viewed not only by the owner of the mobile phone terminal but also by a third party such as a family member or friend.

Similarly, for content stored on a server existing on the Internet, for example, not only specific users who can log in using a specific ID or password, but various nonspecific users can access and browse freely There is also a possibility.

However, the content of the image file may include personal information of a specific person, and the content of the e-mail may often include personal information of a specific person. Therefore, it is desirable that the content that is not desired to be viewed by a specific user is treated as confidential content (secret content information) and concealed from viewing by a third party. Moreover, if it only hides, it will be recognized by a third party that the secret content exists. Therefore, the information processing apparatus 100 in FIG. 1 is provided with a function for concealing from third parties including the fact that the confidential content exists.

As shown in FIG. 1, the information processing apparatus 100 includes a mode setting unit 10, a storage unit 20, a secret control unit 30, and a file browsing processing unit 40. The storage unit 20 further includes a content data storage area 21, a pseudo file display buffer 22, a secret management information storage area 23, and a pseudo file storage temporary buffer 24. The secret control unit 30 further includes a secret target file extraction unit 31, a pseudo file generation unit 32, a pseudo file display unit 33, a pseudo file control unit 34, a pseudo file storage unit 35, and a pseudo file management unit 36. Each of these elements is a function implemented by the computer executing a predetermined program.

The mode setting unit 10 turns on or off the concealment mode (also referred to as a secret mode) related to the operation of the information processing apparatus 100 at the time of content browsing according to a switch operation or command input of a user having special authority such as the owner of the information processing apparatus 100. Switch. That is, the secret mode is switched to the non-secret mode (normal mode).

The content data storage area 21 included in the storage unit 20 stores various information contents, that is, an image file, an e-mail file, and a file holding various history information (such as incoming call history). The information content may include secret content. In addition, in FIG. 1, although the memory | storage part 20 is shown as a storage in a terminal, it is not restricted to this. For example, it is also conceivable to use storage on a server connectable via a predetermined network, or an external storage device such as a memory card.

A process for reading out the content stored in the content data storage area 21 according to the input operation of a specific user or an unspecified user and displaying the content specified by the user so that the content can be browsed according to the input operation of a specific user or an unspecified user I do.

Secret control unit 30 has a process for concealing a specific confidential content from an unspecified user among the contents displayed by file browsing processing unit 40 when the confidential mode is designated by mode setting unit 10. Do.

The secret target file extraction unit 31 extracts, from the file group of many contents stored in the content data storage area 21, a file that needs to be concealed, that is, a secret target file. The secret target file may be a file designated by a specific user (such as an owner) in advance, or a file automatically determined according to a specific condition. As the specific content data storage area 21, an area in a specific folder to which an attribute of secrecy is assigned is assumed in the storage unit 20. Further, the storage unit 20 may be an external storage device such as a memory card.

The pseudo file generation unit 32 is an example of an alternative content information generation unit, and substitutes the alternative content (alternative content information) to be substituted for the secret content (secret target file) stored in the content data storage area 21 into a predetermined conversion rule. Generate based on.

The substitute content generated by the pseudo file generation unit 32 is referred to as a pseudo file here. The pseudo file is held in a pseudo file display buffer 22 or the like which is an area different from the content data storage area 21. A specific example of the pseudo file will be described later.

The pseudo file display unit 33 displays the pseudo file generated by the pseudo file generation unit 32 as the content to be browsed by the user.

The pseudo file control unit 34 performs control in the case where an input operation such as deletion, movement, or editing is performed on a pseudo file displayed as a browsing target via an operation unit (not illustrated) or the like.

The pseudo file storage unit 35 performs control of the case where the storage operation is performed via the operation unit (not illustrated) or the like on the pseudo file displayed as the browsing target.

The pseudo file management unit 36 manages various information related to the pseudo file generated by the pseudo file generation unit 32.

Next, FIG. 2 shows a specific example of the configuration of each storage area and information used by the information processing apparatus 100 of FIG. In the present embodiment, as shown in FIG. 2, in addition to the content data storage area 21 and the pseudo file display buffer 22 described above, the information processing apparatus 100 includes a secret management information storage area 23 and a pseudo file storage temporary buffer 24. Use

In the example shown in FIG. 2, "aaaaa.jpg", "bbbbb.jpg", "ccccc.jpg", "ddddd.jpg", "fffff.jpg", "ggggg.jpg" are displayed on the content data storage area 21, respectively. "," Hhhhh. Gif "," iiiii. Gif "," jjjj. Gif ", ... files of many contents represented by file names are stored. That is, in this example, an image file in the “jpg” format or the “gif” format exists as the content to be viewed by the user. Of course, not only images but also e-mail contents and history information may be used as the contents to be browsed. Thus, the content data storage area 21 functions as a first content area for sequentially storing a plurality of content information.

When the user views the content, the

content list

51 or 52 of FIG. 2 corresponding to the content of the content data storage area 21 is displayed. An example of the display content in the normal display state, that is, when the concealment mode is off is the content list (index) 51. Further, an example of the display content when the secret mode is on is the content list (index) 52.

In the situation shown in FIG. 2, it is assumed that the third, sixth, and ninth contents in the content data storage area 21 are designated as confidential contents. When the concealment mode is off, as shown by the content list 51 in FIG. 2, the third content "ccccc.jpg", the sixth content "ggggg.jpg", and the ninth content "jjj.gif" The file name of each file (with * mark added) is displayed as it is. The “*” mark indicates that the corresponding file is a secret content.

On the other hand, when the concealment mode is on, contents different from the contents list 51 are displayed as the contents list 52 in FIG. That is, in the content list 52 in FIG. 2, the file names of "ccccc. Jpg" of No. 3, "ggggg. Jpg" of No. 6, and "jjjjj. Gif" of No. 9 which are confidential contents such as secret images As “BBBBB”, “FFFFF”, and “IIIII” are displayed. Here, pseudo files such as pseudo images indicated by “BBBBB”, “FFFFF”, and “IIIII” are “bbbbb. Jpg” and “fffff. Jpg” which are non-secret content (content not to be concealed), respectively. , “Iiiii.gif” file is generated based on the file. Preferably, the pseudo file is generated from a file in the vicinity of a secret target file (such as date and time, permutation, etc.).

Therefore, for the content list 52 that can be referred to by unspecified users when the secret mode is on, the number of contents displayed is the same as the content list 51, but the secret content "ccccc", "ggggg" , "Jjjj" are hidden.

Further, in the content list 52 shown in FIG. 2, the file name "bbbbb.jpg" of the adjacent second content is used to conceal the third "ccccc.jpg" name. Similarly, in order to conceal the sixth "ggggg. Jpg", the adjacent fifth file name "fffff. Jpg" is used, and in order to conceal the ninth "jjjj. Gif", the adjacent 8 File name "iiiii. Gif" is used.

When the pseudo file control unit 34 edits a pseudo file and the pseudo file storage unit 35 stores the pseudo file when the concealment mode is on, the file is normally stored on the content data storage area 21. Ru. However, if there is no free space on the content data storage area 21, it is stored in the pseudo file storage temporary buffer 24.

Secret management information storage area 23 shown in FIG. 2 stores management information for managing each secret content present in a large number of contents stored in content data storage area 21. In the example shown in FIG. 2, since each file of the third content "ccccc.jpg", the sixth content "ggggg.jpg" and the ninth content "jjjjj.gif" is a secret content, an information file for managing these files Exists in the secret management information storage area 23. That is, "3. ccccc. Txt", "6. ggggg. Txt" and "9. jjjjj. Txt" respectively manage the secret contents of "ccccc. Jpg", "ggggg. Jpg" and "jjj. Gif" These text files are stored in the secret management information storage area 23.

In each of these text files, for example, the following information can be included in addition to the information specifying the corresponding confidential content file.
a. Information of a pseudo file to be output as a substitute for secret content b. Information of non-secret content used when generating the pseudo file c. Historical information representing editing operations on the pseudo file

Further, the secret management information storage area 23 may store management information of a file held in the content data storage area 21 as a base of a pseudo file such as a pseudo image.

The pseudo file generated by the pseudo file generation unit 32 shown in FIG. 1 is held on the pseudo file display buffer 22 shown in FIG. In the example shown in FIG. 2, since the third, sixth, and ninth numbers in the content data storage area 21 are confidential contents, pseudo files corresponding to these are generated and held on the pseudo file display buffer 22. That is, “3. BBBBB. Xxx”, “6. FFFFF. Xxx”, and “9. IIIII. Xxx” on the pseudo file display buffer 22 shown in FIG. 2 represent the pseudo files held.

The pseudo file display buffer 22 is merely a buffer for temporary storage. The pseudo files on the pseudo file display buffer 22 are not counted as the number of stored contents of contents such as images.

The pseudo file storage temporary buffer 24 shown in FIG. 2 is a buffer temporarily used to store a pseudo file in a special case. For example, with respect to the pseudo file displayed instead of the confidential content in the state where the confidential mode is on, an unspecified user regards it as unnecessary and deletes it, moves it to a trash can, etc., saves it after editing ( May overwrite). However, when there is no free space on the content data storage area 21, the corresponding pseudo file can not be stored in the content data storage area 21 unless the confidential content is overwritten. On the other hand, for a third party who browses the pseudo file, it seems that there is no problem in overwriting and saving this file, so that it may cause discomfort when the saving operation can not be performed. Therefore, when there is no free space on the content data storage area 21 when the storage operation is performed on the pseudo file, a new storage destination area is secured using the pseudo file storage temporary buffer 24 instead. .

If there is no free space in the content data storage area 21 when the concealment mode is released, the pseudo file management unit 36 notifies that there is no free space in the content data storage area 21. Thereby, a deletion instruction can be issued to delete at least a part of the data stored in the content data storage area 21. Then, the pseudo file storage unit 35 moves the pseudo file temporarily stored in the pseudo file storage temporary buffer 24 to the content data storage area 21. The pseudo file management unit 36 may delete the pseudo file from the pseudo file storage temporary buffer 24 instead of moving the pseudo file.

A specific example of the state transition of each display screen output by the information processing apparatus 100 of FIG. 1 is shown in FIG. That is, a specific user such as the owner browses the display as shown in each of the display screens 61, 62, 67, 68 shown in FIG. 3 in the state where the concealment mode is off (that is, the normal mode). In addition, an unspecified user views the display as shown in each of the display screens 63, 64, 65, 66 shown in FIG. 3 in the state where the concealment mode is on.

On the display screen 61 of FIG. 3, a list 61a of content, an image 61b which is the content of the selected content, and information 61c of the number of stored items / the number of available images. The content list 61a represents file names of a large number of contents existing in a specific folder (corresponding to the content data storage area 21) selected in advance by the user. The image 61 b is the content of the second content “2. bbbbb” selected by the user's operation in the content list 61 a. In the "number of stored items / number of shootable items" of the information 61c, "the number of stored items" represents the number of images currently stored in the content data storage area 21 (left side of the diagonal line). It represents whether the number of images can be photographed and stored in the content data storage area 21, that is, the remaining capacity of the content data storage area 21 (right side of the oblique line).

In the state of the display screen 61, when the user moves the cursor for selecting the content in the content list 61a and selects the third content "3. ccccc", the display content is switched like the display screen 62. . That is, on the display screen 62, the content of the third content "3. ccccc" is displayed as the image 62b.

On the other hand, when the secret mode is on, contents such as the display screen 63 are displayed. That is, since “3. ccccc” in the third content list 61 a on the content data storage area 21 is a confidential content, it is not displayed on the display screen 63. Instead, “BBBBB” is displayed as a file name at the third content location in the content list 63 a on the display screen 63. The file name "BBBBB" is automatically determined as a name similar to the file name "bbbbb" of the second content. Further, on the display screen 63, an image 63b is displayed as the content of the third content.

The image 63 b is the contents of the pseudo file generated by the pseudo file generation unit 32. In the example of FIG. 3, the second content is selected based on the previous position adjacent to the third content selected in the content list 63a, that is, based on the second content “2. bbbbb” file. It is generated as a similar image. As described above, in the content data storage area 21, the pseudo file generation unit 32 generates a pseudo file based on the non-secret content existing within a predetermined range from the region where the selected confidential content is stored. Thus, it is possible to generate a pseudo file to be displayed so that the third party does not feel uncomfortable.

Further, for example, an image 63b similar in content to that obtained when shooting fails due to camera shake is displayed. Accordingly, the image 63b is recognized by an unspecified user as a failure image similar to the image 61b in the display screen 61 but not worth noting. Therefore, the file name or image of the confidential content does not appear on the display screen 63, and is surely hidden from the user who browses. In addition, the display screen 63 does not include information indicating the possibility that the confidential content exists.

With the display screen 63 displayed, an unspecified user may perform various operations such as editing on the displayed content (pseudo file). The display screen 64 shows the result of performing some editing on the displayed content and performing a save operation. Further, the result of moving the content displayed on the display screen 63 from “folder 1” to “folder 2” is shown on the display screen 65. Further, the display screen 66 shows the result of deleting the displayed content.

From the viewpoint of the user who operates it, saving a file after editing means overwriting the image before editing that has been on the content data storage area 21 so far, so saving the file on the content data storage area 21 There should be no change in the number of content files. Further, the image of the pseudo file displayed instead of the confidential content in the state where the confidential mode is on exists on the pseudo file display buffer 22 which is an area different from the content data storage area 21 (FIG. 2). See), not stored in the number. Therefore, when the user operates to save the pseudo file, a mismatch may occur in the number of saved files. In the present embodiment, processing to be described later is performed so that the information 64c of the number of stored cases / number of shootable cases of the display screen 64 after storage execution does not change from the contents of the information 63c before storage (appears like overwrite) (FIG. 6) Step S48 of FIG. 7 and step S59 of FIG.

Also, information on the history regarding the operations such as editing and storage performed by the user on the pseudo file is stored in the secret management information storage area 23. Further, when the user performs a moving operation such that the storage destination folder changes with respect to the pseudo file as in the display screen 65, the information of the movement of the folder is stored in the secret management information storage area 23.

On the display screen 66 after the user has deleted the pseudo file "3. BBBBB", the display processing is executed by the pseudo file display unit 33 so that the user sees the content of the corresponding pseudo file as if it were deleted. Be done. That is, the display of the pseudo file name "3. BBBBB" is erased from the list 66a, and the number of images changed by reflecting the effect of deletion is displayed in the information 66c of the number of stored items / the number of available images.

When the concealment mode is turned off by the mode setting unit 10 and switched to the normal mode with the display screens 66, 64 and 65 displayed when the concealment mode is on, the display screen 62, as indicated by the arrows, It changes to the state which displays 67 and 68.

When the delete operation of the pseudo file is performed in the state where the concealment mode is on, the pseudo file which is not saved is deleted, but the secret target file replaced with the pseudo file is not deleted. Therefore, when the display mode 66 in which the confidential mode is on is switched to the display mode 62 for the normal mode, the number of stored / number of shootable cases 62c is not affected by the deletion. Is displayed correctly.

On the other hand, with regard to the pseudo file for which the save operation has been performed in the state of the display screen 64, there is no change in the information 64c because the file is overwritten when viewed from the user side, but the pseudo file which was not actually saved is It will be saved. Therefore, when the display screen 64 is displayed and the confidential mode is turned off and the display screen 67 is switched to the normal mode display screen 67, the information 67c on the number of stored items / number of available images becomes "101/399". Appears as a change in the number.

Further, when the pseudo file is moved so that the storage destination folder of the pseudo file is changed as shown on the display screen 65, the actual number of saved items etc. does not change. Therefore, even if the display screen 65 turns off the concealment mode and switches to the display screen 68 in the normal mode, the information 68c on the number of stored items / the number of available images does not change at "100/400".

FIG. 11 shows a list of specific examples of the information on the “number of stored items / the number of shootable items” being displayed as in the display screens 61 to 68 shown in FIG. As shown in FIG. 11, in any situation, when the concealment mode is on, the number of displayed preservations and photographing are displayed so that the pseudo file is not realized to an unspecified user that it is a substitute for actual concealed content. The possible number is adjusted automatically. In the normal mode when the concealment mode is off, the actual number of stored images and the number of recordable images are displayed.

Next, the detailed operation of the information processing apparatus 100 shown in FIG. 1 will be described.
First, file display control processing when the information processing apparatus 100 is set to the secret mode on will be described.

The contents of the file display control process executed by the information processing apparatus 100 are shown in FIG. The details of step S15 in FIG. 4 are shown in FIG.

In step S11 of FIG. 4, the secret control unit 30 identifies the current operation mode specified by the mode setting unit 10. In the current operation mode, if the secret mode (secret mode) is on, the process proceeds from the next step S12 to S14, and if the normal mode, the process proceeds to step S13.

In step S13, under control of the file browsing processing unit 40, files of various contents are displayed in a list as in the display screens 61 to 68 shown in FIG. 3 according to the user's input operation, and the contents of the selected contents Display (image etc.)

In step S14, the pseudo file management unit 36 acquires the confidential content and the information necessary for managing the generated pseudo file from the pseudo file display buffer 22 and the secret management information storage area 23.

In step S <b> 15, the secret target file extraction unit 31 extracts a secret target file from the large number of contents stored in the content data storage area 21. That is, the process shown in FIG. 5 is performed.

Here, the secret target file extraction process executed by the information processing apparatus 100 will be described.

In step S31 of FIG. 5, the secret target file extraction unit 31 confirms the extraction condition determined in advance. In the present embodiment, a first extraction condition that permits extraction of a specific content that needs concealment from a large number of contents, and a specific content selected in advance by the user and designated as a target of concealment are extracted. And a second extraction condition that permits that is available.

In step S32, the secret target file extraction unit 31 determines whether the first extraction condition is permitted. For example, if the first extraction condition is face detection and it is permitted, it is considered that face detection of a person is necessary, and the process proceeds to step S33. If the first extraction condition is not permitted, the process proceeds to S34.

In step S33, among the many contents stored in the contents data storage area 21, the secret target file extraction unit 31 extracts only the contents of the image including the person's face as the secret target file. The face detection is an example, and the secret target file may be extracted by person detection or another method. As described above, the secret target file extraction unit 31 has a function as a secret content information determination unit that extracts features of the content such as the face of a person and determines secret content based on the extracted features. Thereby, the secret content can be automatically determined according to the feature of the content, and privacy protection can be achieved.

For example, in the image group of the content list 53 shown in FIG. 8,

images

53a, 53b, 53c, 53d, 53e, and 53f including the face of a person exist. An image including these faces can be concealed when the concealment mode is on, and can be replaced with a display such as the content list 54. With regard to the detection of the face of a person, the presence or absence of a face can be identified by performing image processing according to a known technique to recognize the features of the face of the person.

In step S34, the secret target file extraction unit 31 determines whether the second extraction condition is permitted. If the second extraction condition is permitted, the process proceeds from step S34 to step S35 in FIG.

In step S35, the secret target file extraction unit 31 extracts only the specific content which the user has selected in advance and designated as a secret target from the large number of contents stored in the content data storage area 21. Information indicating whether each content has been designated as a confidential object by the user may be included as attribute information in the content file, or may be included in the information stored in secret management information storage area 23. good.

According to such secret target file extraction processing, the content intended by the user can be designated as the secret content, or the secret content can be automatically designated regardless of the user operation.

Returning to FIG. 4, in step S16, the pseudo file management unit 36 identifies the type of content to be processed. Specifically, it is identified whether each content on the content data storage area 21 that the user is going to browse is an image file or a mail file. In the case of an image, the process proceeds to step S17, and in the case of an e-mail, the process proceeds to step S19.

In step S17, the pseudo file generation unit 32 selects the original content that is the source of the pseudo file in accordance with the contents of the conversion rule determined in advance. For example, another content at a position adjacent to the front or back in the file arrangement order is selected as the original content for the concealed content to be concealed. In addition, when the other content at the adjacent position is also the secret content, the content at the next position is further searched until the non-secret content is found. In this case, it is preferable to select an appropriate original content at a position as close as possible to the confidential content. This further reduces unnaturalness due to the display of the pseudo file.

For example, in the example of the content list 52 shown in FIG. 2, in order to conceal the file name "3. ccccc" of the third content which is the confidential content, the file name "2. bbbbb" of the second content is used. It is selected as content. The same applies to the display screen 63 shown in FIG.

The conversion rules for generating the pseudo file may be stored in advance as fixed data in the storage unit 20 of the information processing apparatus 100 or may be downloaded from an appropriate server connected to a network such as the Internet. You may get it. As a result, even in a terminal that does not hold information on conversion rules in advance, information on appropriate conversion rules can be acquired, and conversion rules can be defined flexibly.

In step S18, the pseudo file generation unit 32 generates a pseudo file in accordance with the contents of the conversion rule, based on the original content selected in step S17.

For example, in the example of the display screen 63 shown in FIG. 3, the image 63b representing the contents of the pseudo file "3. BBBBB" that is an alternative to the third secret content is the second content "adjacent non-secret content". 2. bbbbb is used as the original content, and the image of the original content is generated as a result of falsification into an image that appears to be affected by camera shake. That is, when viewed from the unspecified user side, the content of the pseudo file displayed on the screen looks like a failure image which is not worth browsing.

Note that although it is a representative example of processing to generate a pseudo file, generating a failed image where the influence of camera shake appears due to falsification of the original content, for example, a pseudo file is generated by another method as shown below You may.
1. It produces an unsharp blurred image that is out of focus.
2. A part of the image is extracted based on a position shifted from the center of the image of the original content, and an image in which the main subject is difficult to see is generated.
3. It generates low-resolution or smaller-size images with fewer pixels than standard images.
4. By changing the color and brightness of the image of the original content, an image with poor color tone or poor brightness and darkness is generated.

As described above, the pseudo file generation unit 32 may process the non-secret content to generate the substitute content. By processing like a failure image, it is possible to hide confidential content without the attention of a third party.

In addition, the pseudo file generation unit 32 may search for an appropriate image that does not correspond to secrecy, such as landscape, for example, and may use this as the pseudo file as it is. In the example shown in FIG. 8, since a person is shown in each of the images 53a to 53f in the content list 53, these are replaced with images 54a to 54f in which the scenery is shown in the content list 54.

In addition, the pseudo file generation unit 32 may sequentially perform the process for each of the confidential content, or may collectively perform the process for each of a plurality of confidential content.

Also, if the pseudo file based on the predetermined original content has been generated before and the history of editing (storage) for the pseudo file exists in the secret management information storage area 23, the pseudo file generation unit 32 Do not generate a new pseudo file based on the original content. That is, a new pseudo file is not generated based on the original content of the pseudo file having a control history such as a deletion history, an editing history, and a movement history in the secret management information storage area 23. In this way, when the third party views the displayed alternative content as unnecessary and deletes it, etc., it is possible to prevent the content that should have been deleted from being displayed again on the next browsing.

On the other hand, in the case of generating a pseudo file for the content of the mail, in step S19, the pseudo file generation unit 32 determines a method for the mocking. Here, the pseudo file generation unit 32 acquires information representing a conversion rule for the confidential content from the storage unit in the information processing apparatus 100 or from a server connected via a predetermined network. In addition, unnecessary mails deleted in the past are acquired from the deleted folder or the like as the original content that is the source of the pseudo file.

In step S20, the pseudo file generation unit 32 generates a pseudo file of the mail according to the contents of the acquired conversion rule. Specifically, with respect to the acquired original content mail, each item such as sender, title, mail text, pictogram, etc. is corrected according to the conversion rule, and the result is made a pseudo file.

When generating a pseudo file in step S20, for example, a character string conversion table 73 as shown in FIG. 10 can be used. In the character string conversion table 73 of FIG. 10, the character string before conversion (the first character string) and the character after conversion for each item of “body”, “person's name”, “time”, and “pictogram” Information representing the correspondence with the column (second character string) is held.

By using the character string conversion table 73, contents such as the mail display screen 72 can be generated from the contents of the mail display screen 71 shown in FIG. 9, for example. That is, by replacing the first character string of each item of the character string conversion table 73 with the corresponding second character string in the information of the mail display screen 71, it is possible to simulate mail such as the mail display screen 72. Can generate files.

As described above, the storage unit 20 includes the character string conversion table 73 that stores the first character string and the second character string in association with each other, and the pseudo file generation unit 32 is based on the character string conversion table 73. Then, substitute content including the second character string is generated from the confidential content including the first character string. Thereby, the presence itself of the content information of the e-mail to be concealed can be easily concealed.

Returning to FIG. 4, in step S21, the pseudo file management unit 36 generates attribute (property) information of the pseudo file generated in step S18 or S20. That is, simply inheriting the attributes of the original content can not maintain consistency with respect to time and place, etc., and there is a possibility that an unspecified user may feel distrust, so shooting time and storage location to prevent it Make appropriate corrections to

For example, in the content list 52 shown in FIG. 2, the third content "3. BBBBB", the sixth content "6. FFFFF", and the ninth content "9. IIIII" are pseudo files. Also, the pseudo file "3. BBBB" is generated with the second content "2. bbbbb" as the original content. In this case, as the attribute of the pseudo file "3. BBBB", the place in the order of arrangement is between the second content and the fourth content, and the shooting date and time is later than the second content, and the fourth It has to be before content. Therefore, as the attribute of the pseudo file "3. BBBBB", the attribute of the original content "2. bbbbb" is slightly shifted to generate similar attribute information which can maintain consistency.

As described above, the pseudo file management unit 36 sets the information of the time when the pseudo file is generated based on the information of the time when the original content that is the generation source of the pseudo file is generated (for example, taken). You may correct so that it may continue from the time when it was generated. This makes it possible to prevent a mismatch between the order of arrangement of the contents that can be viewed by a third party and the order of recording times of the contents and the like. In other words, the third party can accept the pseudo file without much discomfort.

In step S22, the pseudo file storage unit 35 temporarily stores the generated pseudo file, including the attribute information, on the pseudo file display buffer 22.

In step S23, the pseudo file management unit 36 allocates the pseudo file stored on the pseudo file display buffer 22 as a substitute file of the corresponding confidential content. Also, the pseudo file storage unit 35 stores this management information in the secret management information storage area 23.

Therefore, when the file browsing processor 40 displays the list of contents in step S13, whether or not to conceal each content is identified based on the management information stored in the secret management information storage area 23 or It is possible to obtain a pseudo file generated corresponding to the content to be concealed. That is, the file browsing processing unit 40 displays a list of files of various contents and displays the contents (such as an image) of the selected contents, as in the display screens 61 to 68 shown in FIG. 3, for example. it can. At this time, when the secret mode is on, the secret target file can be replaced with a pseudo file and displayed.

According to such file display control processing in the concealment mode, it is possible to easily conceal the existence itself of the content information to be concealed. In addition, a third party who does not have the right to view the corresponding confidential content information does not notice the fact that the confidential content information exists. In addition, there is no need for server cooperation in order to perform such concealment.

Next, pseudo file control processing such as editing, deletion, and movement of a pseudo file performed by the information processing apparatus 100 will be described.

When an unspecified user performs an operation such as editing on a pseudo file displayed with the confidential mode on, the pseudo file control unit 34 executes the pseudo file control process shown in FIG.

In step S41 in FIG. 6, under the control of the pseudo file display unit 33, a list of contents is displayed as in the contents list 52 shown in FIG. 2 or the display screen 63 shown in FIG. 3, for example.

In step S42, the pseudo file control unit 34 determines the presence or absence of a control request for a pseudo file. Specifically, it is determined whether the pseudo file control unit 34 has attempted to perform an operation such as editing on the pseudo file via the operation unit (not shown) from the displayed content list. When a control request for a pseudo file is generated, the process proceeds from step S42 to the process of S43.

In step S43, the pseudo file control unit 34 executes processing such as deletion, movement, editing and the like in accordance with the user's input operation via the operation unit (not shown).

In step S44, it is identified whether or not the save operation of the pseudo file is performed. If the save operation is performed, the process proceeds to step S45. If the save operation is not performed, the process proceeds to step S49.

In step S45, the pseudo file storage unit 35 identifies whether there is a free space on the content data storage area 21. Here, since the area on the content data storage area 21 is managed by the number of storages of content, the maximum number of storage cases defined in advance (“500” in the example of FIG. 11) and the actual content data storage area 21 Compare with the number of saved above to identify the presence or absence of vacancy. If the number of stored items has been stored up to the maximum value and there is no space, the process proceeds to step S47.

In step S 46, the pseudo file storage unit 35 extracts the pseudo file subjected to the storage operation from above the pseudo file display buffer 22, and stores the extracted pseudo file on the content data storage area 21.

In step S47, the pseudo file storage unit 35 extracts the pseudo file subjected to the storage operation from the pseudo file display buffer 22 and stores the extracted pseudo file in the pseudo file storage temporary buffer 24. As described above, when the pseudo file storage unit 35 tries to store a file (an edited file, a moved file, etc.) based on the pseudo file, the remaining capacity of the content data storage area 21 is set when the concealment mode is set. If it is less than the predetermined capacity, the file is stored in the pseudo file storage temporary buffer 24 as a second content storage area. As a result, it is possible to avoid the situation where the pseudo file which should be already saved from the user side can not be saved.

In step S48, the pseudo file management unit 36 displays the number of displayed items (number of stored items / number of recordable images / available number of items available) so that there is no inconsistency in the number of contents visible to the user as a result of the storage process of step S46 or step S47. Update the contents of

For example, in a state where content is already stored in the content data storage area 21 up to the maximum number of stored values “500”, when editing a pseudo file and storing it, the user side simply overwrites and stores the content However, it actually becomes a new save of the pseudo file. Here, if there is a space, it is stored in the content data storage area 21, and if there is no space, it is stored in the temporary buffer for temporary file storage. Further, as shown in the number display D11 shown in FIG. 11, the result (in this case, “500/0”) obtained by processing so as not to change before and after storage (number of stored cases / number of shootable cases) It is reflected.

As described above, when the pseudo file is stored in the content data storage area 21 by the pseudo file storage unit 35 at the time of setting the concealment mode, the pseudo file management unit 36 stores the number of display data for the content data storage area 21. Manage not to change. As a result, it is possible to prevent the occurrence of inconsistency in the number of stored contents that can be recognized by the third party, and since the pseudo file looks like it originally existed, it is possible to eliminate the sense of discomfort of the third party.

Also, if there is space in the content data storage area 21, the pseudo file is stored in the content data storage area 21 in step S46, but even in this case, it is overwrite storage when viewed from the user side. It processes so that it may become the number display D12 shown to 11. That is, the result (in this case, "100/400") processed so that (the number of stored items / the number of possible images to be captured) does not change before and after storage is reflected in the display content in step S48.

On the other hand, when the pseudo file is deleted, the pseudo file management unit 36 decreases the number of stored cases and increases the number of shootable cases in order to make it appear that the file actually stored is deleted.

In step S49, the pseudo file management unit 36 registers, in the secret management information storage area 23, history information on control of the pseudo file edited or the like. For example, when the pseudo file ("3. BBBB" in the content list 52) corresponding to the third secret content "3. ccccc" included in the content list 51 shown in Fig. 2 is edited. The history information is registered in the secret management information storage area 23 as history information of "3. ccccc. Txt" corresponding to the confidential content "3. ccccc".

According to such pseudo file control processing, the pseudo file can be edited, deleted, moved and the like without giving a sense of incongruity to a third party, and further, the pseudo file can be stored.

Next, display control processing executed by the information processing apparatus 100 when canceling the concealment mode will be described.

When the secret mode is switched from on to off by the mode setting unit 10, the secret control unit 30 executes a process as shown in FIG.

In step S51 of FIG. 7, under the control of the secret control unit 30, the secret mode is switched to the display contents of the normal mode. For example, the display of the content list 51 is switched from the state in which the content list 52 shown in FIG. 2 is displayed. Alternatively, the display state of the display screens 63 to 66 shown in FIG. 3 is switched to the state of displaying the display screens 61, 62, 67, and 68.

In step S52, the pseudo file display unit 33 displays a file of confidential content not displayed when the confidential mode is on (for example, "3. ccccc #" in the content list 51 of FIG. 2) in the list, and the pseudo file (For example, “3. BBBBB” in the content list 52 of FIG. 2) is switched to non-display.

In step S53, the pseudo file storage unit 35 refers to the state of the pseudo file storage temporary buffer 24. Then, in step S54, the pseudo file storage unit 35 identifies whether or not the pseudo file is stored in the pseudo file storage temporary buffer 24. If the pseudo file is stored on the pseudo file storage temporary buffer 24, the process proceeds from step S54 to step S55, and if not stored, the process proceeds to step S59.

In step S55, the pseudo file storage unit 35 refers to the state of the content data storage area 21. Then, in step S56, the pseudo file storage unit 35 identifies whether or not there is no free space on the content data storage area 21 and storage of new content is not possible. If the new content can not be saved, the process proceeds from step S56 to step S57. If there is a free space and the save is possible, the process proceeds to step S58.

In step S57, since there is no space in the storage destination area, the pseudo file management unit 36 displays a message for instructing deletion of any of the stored contents on the display screen or the like to notify the user. Then, after any content is deleted from the content data storage area 21 in accordance with the user's deletion instruction, the process proceeds to step S58.

Thus, at the time of switching from the secret mode to the non-hidden mode, the pseudo file management unit 36 stores at least the content data storage area 21 when the remaining capacity of the content data storage area 21 is less than the predetermined capacity. It has a function as a deletion instruction presentation unit that presents an instruction to delete one content. As a result, by arranging contents currently stored by the user, the generated pseudo file and the like can be continuously stored.

If the pseudo file stored in the pseudo file storage temporary buffer 24 is unnecessary, the pseudo file management unit 36 deletes the pseudo file from the pseudo file storage temporary buffer 24 and stores the content data storage area 21. Save to may be omitted.

In step S58, the pseudo file storage unit 35 moves the pseudo file stored in the pseudo file storage temporary buffer 24 after being edited or the like to the content data storage area 21 and stores it.

As described above, the pseudo file storage unit 35 stores the temporary file storage temporary buffer 24 when the remaining capacity of the content data storage area 21 is greater than or equal to a predetermined amount when switching from the secret mode to the non-hidden mode. The pseudo file is moved to the content data storage area 21 and stored. As a result, it is possible to minimize the use of the temporary storage temporary file storage temporary buffer 24 and perform an efficient storage operation.

In step S59, the pseudo file management unit 36 updates the display content regarding the number of stored images / the number of recordable images / the number of receivable images. That is, when an unspecified user performs a save operation when the concealment mode is on, a difference occurs between the number displayed in that state and the actual number. Therefore, when the secret mode is turned off and the normal mode is entered, the display content is updated to display the actual number.

For example, when the concealment mode is switched to the normal mode with the number display D11 “500/0” shown in FIG. 11 being displayed, the number display D13 is switched to “501/0”. In this case, only 500 can be stored on the content data storage area 21. Therefore, in order to store the pseudo file on the temporary file storage temporary buffer 24 in the content data storage area 21, the 500 files have already been stored. It is necessary to delete one or more of them to secure the area.

Further, when the confidential mode is switched to the normal mode in a state where "100 // 400" of the sheet number display D12 shown in FIG. 11 is displayed, the screen is switched to "101/399" of the sheet number display D14. That is, the edited pseudo file saved by another user is also saved in the content data saving area 21, and the number is reflected in the number of saved items.

As described above, the pseudo file management unit 36 updates the number of display preservation cases to the number of preservation cases stored in the content data storage area 21 when switching from the concealment mode to the non-secret mode. Thereby, the actual number of saved items can be displayed in the non-secret mode in which the third party's malicious browsing is not considered.

On the other hand, even when the pseudo file is deleted in the concealment mode, the pseudo file management unit 36 updates the number of cases actually stored in the content data storage area 21 when switching from the concealment mode to the non-secret mode. . Therefore, in the case of deletion, only the file that was not actually stored is deleted, so both the number of stored cases and the number of shootable cases return to the state before the deletion of the pseudo file.

According to the information processing apparatus 100 of the present embodiment, when the secret mode is on, secret content (image, content of e-mail, history information, etc.) including personal information is hidden from the viewer and the secret is hidden. A pseudo file that substitutes for content is displayed instead. Therefore, desired file display can be performed without the viewer being aware of the fact that the confidential content exists from the display content. In this way, it is possible to prevent a third party from noticing that specific content is being concealed, which helps prevent unauthorized access and prevent privacy infringement.

Although the invention has been described in detail and with reference to specific embodiments, it will be apparent to those skilled in the art that various changes and modifications can be made without departing from the spirit and scope of the invention.
This application is based on Japanese Patent Application No. 2011-063072 filed on March 22, 2011, the contents of which are incorporated herein by reference.

The present invention is useful for an information processing apparatus, an information processing program, and the like that can easily conceal the presence itself of content information to be concealed.

10 mode setting unit 20 storage unit 21 content data storage area 22 pseudo file display buffer 23 secret management information storage area 24 pseudo file storage temporary buffer 30 secret control unit 31 secret target file extraction unit 32 pseudo file generation unit 33 pseudo file display Part 34 Pseudo file control part 35 Pseudo file storage part 36 Pseudo file management part 40 File view processing part 51 to 54 List of contents output for display 61 to 68

Display screen

71, 72 Mail display screen 73 String conversion table 100 Information Processing unit

Claims

A mode setting unit configured to set the operation mode to the concealed mode or the non-hidden mode;
A storage unit that stores content information including concealed content information that is concealed content information;
An alternative content information generation unit that generates alternative content information to be substituted for the secret content information stored in the storage unit based on a predetermined conversion rule;
A display unit for displaying the alternative content information generated by the alternative content information generation unit;
An information processing apparatus comprising:
The information processing apparatus according to claim 1, wherein
The storage unit has a first content storage area for sequentially storing a plurality of pieces of content information,
The alternative content information generation unit generates the alternative content information based on non-secret content information existing in a predetermined range from a region where the secret content information is stored in the first content storage region.
The information processing apparatus according to claim 2,
The said alternative content information generation part processes the non-secret content information, The information processing apparatus which produces | generates said alternative content information.
The information processing apparatus according to any one of claims 1 to 3, further comprising:
An information processing apparatus comprising: a secret content information determination unit that extracts a feature of content information and determines the secret content information based on the extracted feature.
The information processing apparatus according to any one of claims 1 to 4, further comprising:
An alternative content information management unit that manages alternative content information;
The alternative content information management unit generates generation time information at which the alternative content information is generated based on generation time information at which the original content information that is generation source of the alternative content information is generated. An information processing apparatus that corrects to be continuous from.
The information processing apparatus according to any one of claims 1 to 5, further comprising:
An alternative content information management unit that manages the alternative content information;
The storage unit has a content management area for storing substitute content management information including original content information that is a generation source of the substitute content information and information of control history of the substitute content information;
The alternative content information management unit generates new alternative content information based on original content information that is a generation source of alternative content information having a control history stored in the content management area, by the alternative content generation unit. Information processing device that prohibits.
The information processing apparatus according to any one of claims 1 to 6, further comprising:
An alternative content information management unit that manages the alternative content information;
The alternative content information management unit, when the secret mode is set by the mode setting unit, when the alternative content is saved in the first content save area, the number of saved items for display of the first content save area An information processing device that controls to be invariable.
The information processing apparatus according to claim 7, wherein
The alternative content information management unit is configured to save the content information stored in the first content storage area when the mode setting unit switches the secret mode to the non-hidden mode. Information processing device to update to the number.
The information processing apparatus according to any one of claims 2 to 8, further comprising:
A content storage control unit configured to control storage of content information based on the alternative content;
The storage unit has a second content storage area different from the first content storage area,
When the remaining capacity of the first content storage area is less than a predetermined capacity when the secret mode is set by the mode setting unit, the content storage control unit performs the second content information based on the substitute content information. An information processing apparatus for storing data in a content storage area of
The information processing apparatus according to claim 9, further comprising:
At the time of switching from the secret mode to the non-hidden mode by the mode setting unit, when the remaining capacity of the first content storage area is less than a predetermined capacity, at least one of the first content storage area is stored. An information processing apparatus, comprising: a deletion instruction presentation unit that presents a deletion instruction of content information of a unit.
An information processing apparatus according to claim 9 or 10, wherein
The content storage control unit stores the second content when the remaining capacity of the first content storage area is equal to or more than a predetermined capacity when switching from the concealment mode to the non-secret mode by the mode setting unit. An information processing apparatus for storing alternative content information stored in an area in the first content storage area.
The information processing apparatus according to claim 1, wherein
The storage unit includes a character string conversion table that stores the first character string and the second character string in association with each other.
The information processing apparatus, wherein the alternative content information generation unit generates the alternative content information including the second character string from the secret content information including the first character string based on the character string conversion table.
The information processing apparatus according to any one of claims 1 to 12, further comprising:
An information processing apparatus comprising: a receiving unit that receives the conversion rule from an external server.
Setting the operation mode to the secret mode or the non-hidden mode;
Storing in the storage unit content information including concealed content information which is concealed content information;
Generating substitute content information to be substituted for the secret content information stored in the storage unit based on a predetermined conversion rule;
Displaying the generated alternative content information by a display unit;
Information processing method having.
An information processing program for causing a computer to execute each step of the information processing method according to claim 14.