JP6044761B2 - Image protection system, photographing apparatus and reproducing apparatus - Google Patents

Description

  The present invention is an invention for protecting the reproduction of a subject image shot by a shooting device such as a digital camera or a smartphone.

  Opportunities to shoot subject images related to work have increased with the use of digital cameras, smartphones with camera functions, mobile phones, and other devices. ing.

  As a method for protecting content stored in a memory card, a method of encrypting content and storing it in a memory card is widely used. For example, in Patent Document 1, content stored in a memory card after encryption (here, , Music, etc.) for decoding and playing back.

  In Patent Document 2, a scene of a place where use of confidential data is permitted is photographed with a camera, and the confidential data is encrypted by encrypting the confidential data with a place-specific code generated using the captured image data of the scene. An invention is disclosed that limits where it can be made.

  However, the subject image captured by the photographing apparatus includes not only a subject image related to work but also a normal subject image not related to work. It is desirable to be able to avoid using restrictions on images.

  In addition, in the conventional technology, in order to provide usage restrictions for subject images related to work, when the subject image is encrypted and stored in a memory card on the photographing device side, a key used for encryption / decryption is used for the photographing device or playback. There is also a problem that management of keys used for encryption / decryption becomes troublesome because it must be stored on the device side.

JP 2010-239436 A JP 2007-328771 A

  In view of this, the present invention can provide usage restrictions for subject images related to work, and not use restrictions for normal subject images. Further, the subject images can be encrypted and stored in a memory card. However, an object of the present invention is to provide a system and apparatus that do not require management of keys used for encryption / decryption.

The image protection system according to the first invention for solving the problems described above, in order to store the key used for encryption / decryption in the memory card side for storing the object image, said encryption key data by storing the encryption key And a secure chip having a personal authentication unit for verifying personal authentication data, a flash memory for storing data, and an interface for communicating with the secure chip and the flash memory. When an instruction to write is received from an external device, the data received from the external device is encrypted by the encryption unit, the encrypted data is written to the flash memory, and an instruction to write the data without encryption is received from the external device. A computer that performs processing to write data received from an external device to the flash memory without encryption. Rollers include secure memory card mounted.

  Further, in the image protection system according to the first aspect of the present invention, in order to provide a use restriction for a subject image for business, and not to provide a use restriction for a normal subject image, Photographing means for photographing the image, storage setting means for allowing the user to set one of encrypted storage for encryption and non-encrypted storage for storage, and the photographing means for capturing the subject image. After shooting, after generating an image file including the subject image and the current save setting, when saving the subject image of the image file in the flash memory of the secure memory card, the save setting at this time is encrypted. In the case of saving, the controller of the secure memory card is instructed to write the subject image encrypted, and the save setting at this time is non-encrypted. For presence, the relative said controller of the secure memory card, the include imaging apparatus comprising an imaging control means for instructing writing unencrypted object image.

  A second invention for solving the above-described problem is the image protection system according to the first invention, wherein the subject image of the image file is reproduced so that the subject image stored in the secure memory card can be reproduced. When the storage setting included in the image file is encryption storage when reading from the secure memory card, the controller of the secure memory card instructs the personal authentication unit to verify the personal authentication data acquired from the user If the user authentication is successful after performing the above, the controller of the secure memory card is instructed to decrypt and read the subject image, and when the storage setting included in the image file is non-encrypted storage, Read the subject image without decryption to the controller of the secure memory card. It includes reproducing apparatus having a regeneration control means for performing an instruction issue.

In the second invention, the secure chip of the secure memory card includes a decoder for decoding by the decoding key data by storing the decryption key, the controller, the controller, the decoded data When an instruction to read is received from an external device, the data that has been read is read from the flash memory, decoded by the decoding unit, transmitted to the external device, and an instruction to read data without decoding is received from the external device In response to the read instruction, the data is read from the flash memory, and the data is transmitted to the external device without being decoded.

  Furthermore, a third invention for solving the above-described problem is that in the image protection system described in the second invention, the subject image photographed in the business mode can be reproduced as long as the user is in a predetermined area. In addition, the reproduction apparatus includes a position measurement unit that measures position information, and the reproduction control unit is an area registered in the reproduction control unit when the storage setting included in the image file to be reproduced is encryption storage. When the information and the position information measured by the position measuring unit are collated, and the position information is included in the area information, the personal authentication is not performed and the controller of the secure memory card is used for the controller. An instruction to read the decoded subject image is given.

  The present invention also claims a secure memory card necessary for the image protection system according to the first and second inventions.

  As described above, according to the present invention described above, it is possible to set a usage restriction for a subject image related to business, and not to set a usage limit for a normal subject image. Further, the subject image is encrypted. Thus, it is possible to provide a system and apparatus that does not require management of keys used for encryption / decryption even when stored in a memory card.

1 is a diagram illustrating a configuration of an image protection system according to a first embodiment. FIG. The block diagram of a secure memory card. 1 is a block diagram of an image protection system according to a first embodiment. The figure explaining an image file. FIG. 6 is a diagram for explaining the operation of a photographing control unit of the photographing apparatus according to the first embodiment. The figure explaining operation | movement of the reproduction | regeneration control means of the reproducing | regenerating apparatus concerning 1st Embodiment. The block diagram of the reproducing | regenerating apparatus concerning 2nd Embodiment. The figure explaining operation | movement of the reproduction | regeneration control means of the reproducing | regenerating apparatus concerning 2nd Embodiment.

  From here, the image protection system according to the present embodiment will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a diagram illustrating a configuration of an image protection system 1 according to the first embodiment, FIG. 2 is a block diagram of a secure memory card 2, and FIG. 3 is a block diagram of the image protection system 1 according to the first embodiment. It is.

  As shown in FIG. 1, the image protection system 1 according to the first embodiment includes a secure memory card 2 for storing an image file 220 including a subject image, and a secure memory card that captures the subject image and stores the image file 220. 2 and at least a playback device 4 that plays back an image file 220 stored in the secure memory card 2.

  In the present invention, various devices having a photographing function can be used as the photographing device 3. In FIG. 1, the photographing device 3 is illustrated as a smartphone, but a mobile phone, a digital camera, a portable game machine, or the like is also used as the photographing device 3. Available. Similarly, in the present invention, various devices having a playback function of the image file 220 can be used as the playback device 4. In FIG. 1, the playback device 4 is illustrated as a tablet computer, but a smartphone, a mobile phone, A photo stand or the like can also be used as the photographing apparatus 3.

  First, the secure memory card 2 will be described with reference to FIG. The secure memory card 2 according to the first embodiment is an SD card on which an IC card operating system is mounted. As such SD card, the applicant of the present invention is a high security operating system for an IC card “MULTIS”. "Tinysmart (registered trademark)" which has implemented "(registered trademark)" has already been sold.

  As shown in FIG. 2, the secure memory card 2 includes a secure chip 21 that is an IC card for an IC card having a CPU, RAM, ROM, EEPROM, a coprocessor specialized for cryptographic operation functions, and the like, and an imaging device 3. The flash memory 22 in which the image file 220 is stored and the controller 20 that controls the reading and writing of data with respect to the flash memory 22. The controller 20 functions as a reader / writer for the IC card and communicates with the secure chip 21 to communicate with the secure chip 21. An interface 200 and a flash memory interface 201 for communicating with the flash memory 22 are provided.

  An operating system for an IC card such as “MULTIS (registered trademark)” or “JAVA (registered trademark)” is mounted on the ROM of the secure chip 21, and various applications can be mounted on the EEPOM of the secure chip 21. .

  As shown in FIG. 2, in the first embodiment, as a function realized by an application mounted on the secure chip 21, the secure chip 21 encrypts data transmitted from the controller 20 with an encryption key 210a. 210, a decryption unit 211 that decrypts the encrypted data transmitted from the controller 20 using the decryption key 211a, and a personal authentication unit 212 that collates the personal authentication data transmitted from the controller 20 with the reference data 212a. The operation of the unit 211 is protected by the successful authentication.

  The controller 20 of the secure memory card 2 performs processing in accordance with an instruction received from a higher-level device (here, either the photographing device 3 or the playback device 4) to which the secure memory card 2 is attached.

  When receiving an instruction from the photographing apparatus 3 to encrypt the subject image using the encryption unit 210 of the secure chip 21 and write it to the flash memory 22, the controller 20 of the secure memory card 2 sends the subject image to the encryption unit 210 of the secure chip 21. A process of transmitting and encrypting the subject image and writing the encrypted subject image into the flash memory 22 is executed.

  When the instruction to write the subject image without encryption is received from the photographing apparatus 3, the controller 20 of the secure memory card 2 uses the secure chip 21 to encrypt the subject image without flashing the subject image. Execute the process to write to.

  When receiving an instruction from the playback device 4 to collate the personal authentication data with the personal authentication unit 212 of the secure memory card 2, the controller 20 of the secure memory card 2 transmits the personal authentication data (for example, ID and ID) transmitted from the playback device 4. Password) is transmitted to the personal authentication unit 212 of the secure chip 21 and processing for returning the personal authentication result to the playback device 4 is executed.

  When receiving an instruction from the playback device 4 to decode and read out the subject image using the decoding unit 211 of the secure chip 21, the controller 20 of the secure memory card 2 stores the subject image specified from the playback device 4 in the flash memory 22. , The decryption unit 211 of the secure chip 21 is used to decrypt the encrypted subject image and return the decrypted subject image to the playback device 4.

  The photographing device 3 of the image protection system 1 will be described. As shown in FIG. 3, the photographing device 3 of the image protection system 1 includes a display means 31 for displaying data, a photographing means 33 for photographing a subject image, and encrypted storage as functions for carrying out the present invention. Alternatively, after the storage setting unit 34 for causing the user to set one of the non-encrypted storage settings, and the image file 220 including the subject image captured by the imaging unit 33 and the storage setting at this time, the image file 220 is generated. When the subject image is stored in the flash memory 22 of the secure memory card 2 and the storage setting at this time is encrypted storage, the controller 20 of the secure memory card 2 is used with the encryption unit 210 of the secure chip 21. When an instruction to write the encrypted subject image is issued and the storage setting at this time is non-encrypted storage, the control of the secure memory card 2 is performed. When the subject image is photographed, the photographing control means 30 for instructing the controller 20 to write the subject image without encryption and the memory card interface 32 for communicating with the secure memory card 2 are provided. 2 is attached to the playback device 4.

  The photographing means 33 of the photographing apparatus 3 is a means constituted by a photographing element such as a CCD sensor or a COMS sensor, an optical lens, an image processing engine, and the like. The display means 31 of the photographing apparatus 3 is a display such as a liquid crystal or an organic EL. However, here, the display means 31 of the photographing apparatus 3 is a touch panel.

  FIG. 4 is a diagram illustrating the image file 220 generated by the imaging control unit 30 of the imaging apparatus 3. The image file 220 generated by the image capturing control unit 30 of the image capturing apparatus 3 includes a file header of the image file 220, subject image metadata stored in the image file 220, thumbnail image metadata, thumbnail image, and subject image. .

  When the image file 220 is an Exif format file, the subject image stored in the image file 220 is a Primary image, and the metadata of the subject image is IFD (0th). Also, the thumbnail image is a Thumbnail image, and the metadata of the thumbnail image is IFD (1st).

  Specifically, the shooting control unit 30 of the shooting device 3 saves the image file 220 in the flash memory 22 of the secure memory card 2 and transmits the subject image of the image file 220 to the secure memory card 2 at this time. When the storage setting is confirmed, and the storage setting at this time is encrypted storage, the controller 20 of the secure memory card 2 is instructed to write the subject image encrypted using the encryption unit 210 of the secure chip 21; If the storage setting at this time is unencrypted storage, the controller 20 of the secure memory card 2 is instructed to write the subject image without encryption.

  FIG. 5 is a diagram for explaining the operation of the photographing control means 30 of the photographing apparatus 3. The imaging control means 30 of the imaging apparatus 3 is a means realized by an application installed in the imaging apparatus 3, and the imaging control means 30 of the imaging apparatus 3 performs the process illustrated in FIG.

  When “shooting” is selected from the menu, the storage setting unit 34 of the imaging device 3 is activated, and the storage setting unit 34 of the imaging device 3 is activated by the imaging unit 33 as shown in FIG. A shooting screen 3a including button objects 3b and 3c for the user to select the subject image being shot and the saving setting of either encrypted saving or non-encrypted saving is displayed on the display means 31 (S1).

  The reason why the user selects either the encrypted storage or the non-encrypted storage is to set a use restriction on the subject image photographed by the photographing apparatus 3. The subject image captured when the storage setting is encrypted storage is encrypted and stored in the flash memory 22, and the subject image cannot be reproduced unless the usage conditions (successful authentication of the user in this case) are satisfied. In addition, the subject image captured when the storage setting is unencrypted storage is stored in the flash memory 22 without being encrypted, and the subject image can be reproduced without satisfying the use conditions.

  Note that either the encrypted storage or the non-encrypted storage can be selected from the setting menu of the photographing apparatus 3, but the storage setting is determined depending on the subject image. In addition, button objects 3b and 3c for selecting the save setting are displayed on the photographing screen 3a so that the save setting can be easily set.

  When the user taps one of the button objects 3b, c for selecting the storage setting and selects the storage setting, the storage setting unit 34 of the photographing apparatus 3 acquires the storage setting selected by the user, and then This is held until the save setting is set (S2).

  When the shutter operation is performed, the photographing unit 33 of the photographing apparatus 3 photographs a subject image (S3), and the photographing control unit 30 of the photographing apparatus 3 generates an image file 220 having a predetermined file format (S4). Note that the image file 220 generated by the imaging control unit 30 of the imaging apparatus 3 includes the save setting at this time in addition to the subject image captured by the imaging unit 33. In this embodiment, the metadata of the subject image is included in the metadata of the subject image. The save setting at this time is written.

  Next, when the image control unit 30 of the image capturing apparatus 3 generates the image file 220, it performs a process of saving the image file 220 in the secure memory card 2 (S5).

  When saving the subject image of the image file 220 in the secure memory card 2, the shooting control means 30 of the shooting device 3 checks the save setting at this time (S 6), and if the save setting at this time is encrypted save, The controller 20 of the secure memory card 2 is instructed to write the subject image encrypted using the encryption unit 210 of the secure chip 21 (S7).

  When the controller 20 of the secure memory card 2 receives an instruction from the photographing device 3 to encrypt and write the subject image using the encryption unit 210 of the secure chip 21, the controller 20 of the subject memory transmits the subject image transmitted from the photographing control means 30 of the photographing device 3. The encryption command is transmitted to the encryption unit 210 (S8), and the encryption unit 210 of the secure chip 21 encrypts the subject image (S9).

  When the controller 20 of the secure memory card 2 encrypts the subject image using the encryption unit 210 of the secure chip 21, the controller 20 of the secure memory card 2 transmits an encrypted subject image write command to the flash memory 22 (S10). The image is stored in the flash memory 22 (S11), and this procedure ends.

  Further, when the storage setting at this time is non-encrypted storage in S6 of FIG. 5, the imaging control unit 30 of the imaging device 3 writes the subject image to the controller 20 of the secure memory card 2 without encryption. An instruction is given (S12).

  When the controller 20 of the secure memory card 2 receives an instruction to write a subject image without encryption from the photographing device 3, the subject transmitted from the photographing device 3 without being encrypted using the encryption unit 210 of the secure chip 21. An image writing command is transmitted to the flash memory 22 (S13), the subject image is stored in the flash memory 22 (S14), and this procedure ends.

  Similar to the hard disk, the flash memory 22 of the secure memory card 2 has a block unit (for example, 512 bytes) for reading from and writing to the flash memory 22. When the subject image is transmitted to the secure memory card 2, the subject image is divided into blocks and transmitted to the secure memory card 2.

  Further, since the processing unit (for example, 128 bytes) is determined by the encryption algorithm supported by the encryption unit 210 of the secure chip 21, the controller 20 of the secure memory card 2 performs the subject of the block unit transmitted from the imaging control means 30. The image is divided into the processing units and encrypted.

  As shown in FIG. 4, the image file 220 generated by the imaging control unit 30 of the imaging device 3 includes the file header of the image file 220, the metadata of the subject image stored in the image file 220, and the metadata of the thumbnail image. The thumbnail image and the subject image are included, but other than the subject image is stored in the flash memory 22 of the secure memory card 2 without being encrypted.

  Next, the playback device 4 of the image protection system 1 will be described. As shown in FIG. 3, the playback device 4 of the image protection system 1 has a display means 41 for playing back an image file 220 stored in the secure memory card 2, and an image file as functions for carrying out the present invention. When reading the subject image 220 from the secure memory card 2 and the storage setting of the image file 220 is encrypted storage, the personal authentication data obtained from the user is sent to the controller 20 of the secure memory card 2 by the secure memory card 2. If the user authentication is successful after giving the instruction to collate to the personal authentication unit 212, the controller 20 of the secure memory card 2 is instructed to read the subject image decoded using the decryption unit 211 of the secure chip 21, When the storage setting of the image file 220 is non-encrypted storage, the secure memory card 2 A playback control means 40 for instructing the controller 20 to read the subject image without decoding and a memory card interface 42 for communicating with the secure memory card 2 are provided. When playing back the image file 220, the secure memory card 2 is attached to the playback device 4.

  The display means 41 of the photographing apparatus 3 is a display such as a liquid crystal or an organic EL. The playback control means 40 of the playback device 4 is a means realized by an application installed in the playback device 4.

  FIG. 6 is a diagram for explaining the operation of the playback control means 40 of the playback device 4. When the playback device 4 plays back an image, the playback control means 40 of the playback device 4 executes a process for allowing the user to select an image file 220 to be played back by the playback device 4 (S20).

  As a process for causing the user to select an image file 220 to be played back by the playback device 4, the playback control means 40 of the first embodiment reads thumbnail images from all the image files 220 stored in the flash memory 22 of the secure chip 21, A list of thumbnail images is displayed on the display means 41, and the user selects a thumbnail image of the image file 220 to be played back by the playback device 4.

  When the user selects the image file 220 to be played back by the playback device 4, the playback control means 40 of the playback device 4 confirms the storage setting of the image file 220 played back by the playback device 4 (S21).

  If the storage setting of the image file 220 to be played back by the playback device 4 is encrypted storage, the playback control means 40 of the playback device 4 performs the personal authentication set as the use condition of the image file 220 for encrypted storage. Acquires the user authentication data from the user, and instructs the controller 20 of the secure memory card 2 to collate the user authentication data acquired from the user with the user authentication unit 212 of the secure memory card 2 (S22).

  The method of acquiring the personal authentication data from the user depends on the content of the personal authentication data. For example, when the personal authentication data is an ID and a password, a form for allowing the user to input the ID and password is displayed on the display means 41, and the ID and password are obtained from the user. When the personal authentication data is a card number, the IC card reader is used to read the card number from the IC card possessed by the user.

  When the controller 20 of the secure memory card 2 receives an instruction from the playback device 4 to collate the personal authentication data with the personal authentication unit 212 of the secure memory card 2, the personal authentication unit 212 of the secure chip 21 performs personal authentication including the personal authentication data. The command is transmitted (S23), the personal authentication unit 212 collates the personal authentication data (S24), and the controller 20 of the secure memory card 2 returns the personal authentication result to the playback device 4 (S25).

  The playback control means 40 of the playback device 4 confirms the personal authentication result transmitted from the secure memory card 2 (S26), and if the personal authentication result is unsuccessful, returns to the top of this procedure.

  When the identity authentication result transmitted from the secure memory card 2 is successful, the playback control means 40 of the playback device 4 sends the subject image of the image file 220 to be played back to the controller 20 of the secure memory card 2 in the secure chip 21. An instruction to decode and read using the decoding unit 211 is given (S27).

  When the controller 20 of the secure memory card 2 receives from the playback device 4 an instruction to decrypt and read out the subject image of the image file 220 to be reproduced using the decryption unit 211 of the secure chip 21, the controller 20 encrypts the encrypted image specified by this instruction. A command to read the subject image in the selected state is transmitted to the flash memory 22 (S28), and the encrypted subject image is read from the flash memory 22 (S29).

  Then, the controller 20 of the secure memory card 2 transmits a subject image decryption command in an encrypted state to the decryption unit 211 of the secure chip 21 (S30), and the decryption unit 211 of the secure chip 21 is in an encrypted state. The image file 220 is decrypted (S31).

  The controller 20 of the secure memory card 2 transmits the subject image decoded by the decryption of the secure chip 21 to the playback device 4 (S32), and the playback control means 40 of the playback device 4 displays the decoded subject image on the display means. (S33), and this procedure ends.

  In S21 of FIG. 6, the playback control means 40 of the playback device 4 decrypts the controller 20 of the secure memory card 2 when the storage setting of the image file 220 selected by the user is non-encrypted storage. An instruction to read the subject image is issued (S34).

  When the controller 20 of the secure memory card 2 receives an instruction to read the subject image without decoding from the playback device 4, the controller 20 transmits an instruction to read the subject image specified by this instruction to the flash memory 22 (S35). A subject image is read out from S22 (S36).

  Then, the controller 20 of the secure memory card 2 transmits the subject image read from the flash memory 22 to the playback device 4 (S37), and the playback control means 40 of the playback device 4 receives the subject image received from the secure memory card 2. The information is displayed on the display means 41 (S38), and this procedure is terminated.

  As described above, since the secure memory card 2 has a block unit for reading and writing to the flash memory 22, the secure chip 21 of the secure memory card 2 reads the subject image from the flash memory 22. Is performed, the subject image is divided into blocks and transmitted to the playback device 4.

  Since the processing unit is determined by the encryption algorithm supported by the decryption unit 211 of the secure chip 21, the controller 20 of the secure memory card 2 divides the subject image into the processing units and decrypts the subject image.

[Second Embodiment]
In the first embodiment described above, the use condition of the subject image captured with the storage setting being encrypted storage is only the success of the personal authentication. However, a smartphone having a position measurement function is used for capturing and reproducing the subject image. Therefore, if the use setting of the subject image for encrypted storage is set to either successful location authentication or successful identity authentication, if the user is in a preset area, the encryption will be performed. It is possible to play back the subject image that was shot in the digital save mode.

  FIG. 7 is a block diagram of the playback device 5 according to the second embodiment. As shown in FIG. 7, the playback device 5 according to the second embodiment includes a display unit 51 that displays a subject image stored in the secure memory card 2, and a playback control unit 50 that controls playback of the subject image. The memory card interface 52 for communicating with the secure memory card 2 and the position measuring means 53 for measuring the position information of the playback device 5 are provided, and when the subject image is played back, the secure memory card 2 is attached to the playback device 5. The

  As a method of measuring position information with a smartphone or a mobile phone, there are a method using a signal from a radio base station, a method using a signal from a GPS satellite and a radio base station, a method using a signal from a GPS satellite, etc. However, as long as position information can be measured, any method for measuring position information may be used.

  In order to perform position authentication, the playback control means 50 of the playback device 5 according to the second embodiment stores area information indicating an area where a subject image captured by encrypted storage can be played back. The area where a subject image captured by encrypted storage can be reproduced is preferably in a company building.

  FIG. 8 is a diagram for explaining the operation of the reproduction control means 50 of the reproduction apparatus 5 according to the second embodiment. The operation of the reproduction control means 50 of the reproduction apparatus 5 according to the second embodiment is substantially the same as the operation of the reproduction control means 40 of the reproduction apparatus 4 according to the first embodiment, and in FIG. 8, steps having the same contents as FIG. Are denoted by the same reference numerals as in FIG. 6 and will not be described in detail here.

  If the storage setting of the image file 220 to be played back by the playback device 5 is encrypted storage in S21a of FIG. 8, the playback control unit 50 of the playback device 5 according to the second embodiment first stores the encrypted setting as encrypted storage. In order to perform the position authentication set as the use condition of the image file 220, the position measurement unit 53 is used to acquire the position information at this time, and the acquired position information is set in the reproduction control unit 50. Check if it is included in the area information.

  If the acquired position information is included in the area information, the playback control means 50 of the playback device 5 proceeds to S27 in FIG. 8 and performs a process of playing back the subject image of the image file 220 captured by encrypted storage.

  If the acquired position information is not included in the area information, the playback control means 50 of the playback device 5 proceeds to S22 in FIG. 8 and uses the image file 220 whose save setting is encrypted and saved as in FIG. The user authentication set as a condition is performed, and when the user authentication is successful, a process of reproducing an image shot in encrypted storage is performed.

DESCRIPTION OF SYMBOLS 1 Image protection system 2 Secure memory card 20 Controller 21 Secure chip 210 Encryption part 211 Decoding part 212 Personal authentication part 22 Flash memory 3 Imaging device 30 Imaging control means 31 Display means 32 Memory card interface 33 Imaging means 34 Storage setting means 4 Reproduction apparatus 40 playback control means 41 display means 42 memory card interface

Claims (5)

Encryption unit for encrypting by said encryption key data by storing the encryption key, communication with the secure chip with an authentication section for collating the authentication data, a flash memory for storing data, and the secure chip and the flash memory When receiving an instruction to write data after encrypting from an external device, the data received from the external device is encrypted by the encryption unit, and the encrypted data is written to the flash memory without being encrypted. When receiving an instruction to write data from an external device, a secure memory card mounted with a controller that performs processing to write data to the flash memory without encrypting the data received from the external device;
A photographing unit for photographing a subject image; a storage setting unit for allowing a user to set either an encrypted storage to be encrypted and stored or an unencrypted storage to be stored without encryption; and When an image is captured, an image file including the subject image and the current save setting is generated, and then when the subject image of the image file is saved in the flash memory of the secure memory card, the save setting at this time is In the case of encrypted storage, the controller of the secure memory card is instructed to encrypt and write the subject image, and when the storage setting at this time is non-encrypted storage, the controller of the secure memory card is directed to A photographing device comprising photographing control means for instructing to write the subject image without encryption;
An image protection system comprising: When reading the subject image of the image file from the secure memory card, if the storage setting included in the image file is encrypted storage, the authentication data obtained from the user is sent to the controller of the secure memory card. If the user authentication is successful after giving an instruction to collate with the personal authentication unit, the controller of the secure memory card is instructed to decode and read the subject image, and the save setting included in the image file In the case of non-encrypted storage, including a playback device including playback control means for instructing the controller of the secure memory card to read the subject image without decryption,
The secure chip of the secure memory card includes a decoder for decoding by the decoding key data by storing the decryption key, the controller, the controller receives an instruction for reading the decoded data from the external device The data received in response to the read instruction is read from the flash memory, decoded by the decoding unit and transmitted to the external device, and the instruction to read the data without decoding is received from the external device. To read data from the flash memory and send the data to an external device without decoding,
The image protection system according to claim 1, wherein:   The reproduction apparatus includes position measurement means for measuring position information, and the reproduction control means includes area information registered in the reproduction control means when the storage setting included in the image file to be reproduced is encryption storage. The position information measured by the position measuring means is collated, and when the position information is included in the area information, the controller of the secure memory card is decrypted by using the decrypting unit without performing personal authentication. The image protection system according to claim 2, wherein an instruction to read the subject image is issued. Encryption unit for encrypting by said encryption key data by storing the encryption key, communication with the secure chip with an authentication section for collating the authentication data, a flash memory for storing data, and the secure chip and the flash memory When receiving an instruction to write data after encrypting from an external device, the data received from the external device is encrypted by the encryption unit, and the encrypted data is written to the flash memory without being encrypted. A secure memory card comprising: a controller that performs a process of writing data received from an external device into the flash memory without encrypting the data received from the external device upon receiving an instruction to write the data. When the controller receives an instruction to read the decrypted data from an external device, the controller reads the read data from the flash memory , stores the decryption key , and decrypts the data using the decryption unit. Then, when an instruction to read data from the external device is received from the external device without being decoded, the data that has been read is read from the flash memory, and the data is transmitted to the external device without being decoded. The secure memory card according to claim 4 , wherein:

Images