JP2019074938A - Device, system, method and program for communication relay - Google Patents

Abstract

An object of the present invention is to prevent forgery of biometric authentication data while maintaining the visibility of public image data including a person. A communication relay device according to the present invention includes a receiving unit that receives a transmission request for transmitting a photographed image including a person to a public server, and a predetermined biometric authentication of the person's body that can be used, A specifying unit that specifies a specific area in which the person cannot be visually identified from the photographed image included in the transmission request, a processing unit that performs predetermined processing on the specific region of the photographed image, and a processing unit. a transmission unit that transmits the processed image on which the processing is performed to the public server in place of the captured image. [Selection drawing] Fig. 1

Description

  The present invention relates to a communication relay device, system, method and program, and more particularly to a communication relay device, system, method and program for relaying transmission of image data including a person to a public server.

  In recent years, image data of photographs taken by a mobile phone, a digital camera or the like has often been published on the Internet. Therefore, there is a possibility that an individual may be identified from the published image data. In view of this, Patent Document 1 discloses that it is difficult to specify personal information by performing mosaic processing on a face area in image data and performing predetermined processing on attribute information added to the image data. A technique related to an information processing apparatus for creating an image file is disclosed.

  In addition, in smartphones and personal computers, security functions are realized using biometrics such as fingerprint authentication. For example, Patent Document 2 discloses a technique related to an authentication device that authenticates an individual using a feature of a living body.

Unexamined-Japanese-Patent No. 2010-44625 Unexamined-Japanese-Patent No. 2017-091186

  Here, in Patent Document 1, although the image is originally intended to be disclosed, mosaic processing is performed on the face region, so the visibility is significantly reduced. On the other hand, there is a possibility that it may be forged as biometric authentication data as used in Patent Document 2 by analyzing a captured image including a person and extracting a part due to the recent increase in resolution of digital cameras. . Therefore, in order to create image data to be released via a network, it is necessary to prevent the forgery of biometric data while maintaining the visual recognition of the user.

  The present invention has been made to solve such a problem, and is a communication relay device for suppressing forgery of biometric data while maintaining visibility of image data published including a person. , A system, a method, and a program are provided.

The communication relay device according to the first aspect of the present invention is
A receiving unit that receives a transmission request for transmitting a photographed image including a person to a public server;
An identifying unit that identifies, from among the photographed images included in the transmission request, a specific area that can be used in predetermined biometric authentication among the body of the person and can not visually identify the person;
A processing unit that performs predetermined processing on the specific area of the captured image;
A transmitting unit that transmits the processed image subjected to the processing to the open server instead of the photographed image;
Equipped with

A communication relay system according to a second aspect of the present invention is
A communication terminal holding a photographed image including a person;
A communication relay device relaying communication between the communication terminal and the public server;
The communication relay device is
A receiving unit that receives a transmission request for transmitting the captured image from the communication terminal to the public server;
An identifying unit that identifies, from among the photographed images included in the transmission request, a specific area that can be used in predetermined biometric authentication among the body of the person and can not visually identify the person;
A processing unit that performs predetermined processing on the specific area of the captured image;
A transmitting unit that transmits the processed image subjected to the processing to the open server instead of the photographed image;
Equipped with

A communication relay method according to a third aspect of the present invention is
Receiving a transmission request for transmitting a photographed image including a person to the public server;
Among the body of the person, a specific area that can be used in predetermined biometric authentication and can not visually identify the person is specified from among the photographed images included in the transmission request,
Performing predetermined processing on the specific area of the photographed image;
The processed image subjected to the processing is transmitted to the open server in place of the photographed image.

A communication relay program according to a fourth aspect of the present invention is
A reception process for receiving a transmission request for transmitting a photographed image including a person to a public server;
A specific process of specifying, from among the photographed images included in the transmission request, a specific area of the body of the person that can be used in predetermined biometric authentication and can not visually identify the person;
A processing execution process for performing a predetermined processing process on the specific area of the photographed image;
Transmission processing for transmitting the processed image subjected to the processing to the open server instead of the photographed image;
On a computer.

  According to the present invention, it is possible to provide a communication relay device, system, method, and program for suppressing forgery of biometric data while maintaining visibility of published image data including a person.

It is a block diagram which shows the structure of the communication relay system concerning Embodiment 1 of this invention. It is a sequence diagram which shows the flow of the communication relay method concerning Embodiment 1 of this invention. It is a block diagram which shows the structure of the communication relay system concerning Embodiment 2 of this invention. It is a flowchart which shows the flow of the communication relay method concerning Embodiment 2 of this invention. It is a figure for demonstrating the effect concerning Embodiment 2 of this invention. It is a figure which shows the relationship between the kind of biometrics, and biometric information. It is a figure for demonstrating the concept of upload of the picked-up image concerning related technology. It is a figure for demonstrating generation | occurrence | production of a task.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the drawings, the same or corresponding elements are denoted by the same reference numerals, and for the sake of clarity of the description, redundant description will be omitted as necessary.

First Embodiment
Here, problems to be solved by the present embodiment will be described again. First, FIG. 7 is a diagram for explaining the concept of uploading a photographed image according to the related art. The portable terminal 90 is an information terminal equipped with a digital camera function. Then, the portable terminal 90 captures an image of the user U and stores the image as a captured image 91 in an internal storage area (not shown). Here, the captured image 91 includes the user U in a visually distinguishable manner. In addition, it is assumed that the captured image 91 has a high resolution as compared with the resolution of the screen of a general display device. Thereafter, the portable terminal 90 uploads the photographed image 91 toward the public server 94 in order to make the photographed image 91 public via SNS or the like. Specifically, the portable terminal 90 transmits an upload request including the captured image 91 to a home gateway (HGW) 92 wirelessly connected to the portable terminal 90. When receiving the upload request, the HGW 92 transfers the upload request including the photographed image 91 via the Internet N toward the transmission destination public server 94. The public server 94 receives an upload request for the captured image 91 via the Internet N, and stores the received request as a captured image 95 in an internal storage device (not shown). Thereafter, the portable terminal 96 transmits a browse request of the photographed image 95 to the public server 94 via the Internet N by the operation of the user V. The public server 94 sends the captured image 95 back to the portable terminal 96 in response to a browsing request from the portable terminal 96. Thus, the portable terminal 96 can display the captured image 95 on the screen, so that the user V (who is different from the user U) of the portable terminal 96 can view the captured image 95.

  FIG. 8 is a diagram for explaining the occurrence of a task. As described above, the photographed image 95 includes the user U, and in particular, the hand of the user U is shown. Further, as described above, the captured image 95 has a high resolution compared to the resolution of the screen of a general display device. Therefore, in the captured image 95, not only the upper body including the face of the user U but also the fingerprint of the fingertip is finely imaged.

  Therefore, the user V enlarges the area of the hand from the photographed image 95 using the portable terminal 96 or another computer, and displays the enlarged image 951 of the hand on the screen, and further, from the enlarged image 951 of the hand. The fingertip area is enlarged and extracted as an image 952 of the fingertip area. Here, it is assumed that the fingerprint of the user U is finely included in the image 952 of the fingertip region to the extent that it can be used as data for fingerprint authentication. Then, the image 952 of the fingertip region is stored in the portable terminal 96. That is, there is a possibility that the user V can forge the fingerprint information of the user U from the photographed image 95 released by the public server 94. Then, for example, while the user V displays the image 952 of the fingertip region on the screen of the portable terminal 96, the user U holds the screen of the portable terminal 96 over the fingerprint authentication apparatus registered in a regular manner. There is a possibility that the user U can be authenticated. That is, the user V may impersonate the user U to break through the security. This may become noticeable as the resolution of the imaging device advances. In particular, the fingerprint information can not be visually identified by the user U only by displaying the photographed image 11 on a normal screen, and therefore, it is weak to recognize that biological information is included when the photographed image 11 is photographed. Because it is more dangerous. In addition, once the captured image 95 flows out on the Internet N, it is easily diffused, so it is difficult to erase all the captured images 95 after diffusion. Also, fingerprints, unlike ID data, can not be changed because they are information unique to a living body, and the leakage of fingerprint information can be a serious security problem. The first embodiment is made to solve such a problem, and will be described below.

  FIG. 1 is a block diagram showing the configuration of a communication relay system 1000 according to a first embodiment of the present invention. The communication relay system 1000 includes a communication terminal 10, a communication relay device 20, and a public server 30. The communication terminal 10 holds a photographed image 11 including a person. Further, the communication terminal 10 transmits, to the communication relay device 20, a transmission request for transmitting the photographed image 11 to the public server 30.

  The communication relay device 20 relays communication between the communication terminal 10 and the public server 30. The communication relay device 20 includes a receiving unit 21, a specifying unit 22, a processing unit 23, and a transmitting unit 24. The receiving unit 21 receives a transmission request for transmitting the photographed image 11 from the communication terminal 10 to the public server 30. The identifying unit 22 identifies a specific area from the captured image 11 included in the received transmission request.

  Here, the specific region is a region of the person's body that can be used in predetermined biometric authentication, and is a region in which the person can not be identified visually. The predetermined biometric authentication is, for example, fingerprint authentication or iris authentication. Further, the specific area is, for example, an area of a fingertip including fingerprint information used in fingerprint authentication, an eye area including iris information used in iris authentication, and the like. In addition, the specific area is generally a fine area where a human can not visually identify a person when the photographed image 11 is displayed on the screen of a normal display device. For example, when the photographed image 11 includes a person, a person who views the photographed image 11 on the screen usually visually identifies the person in the photographed image 11 by a face, a body shape, etc. including a facial expression or a hair style. On the other hand, a human being can not visually identify a person included in the photographed image 11 on the screen by a fingerprint or an iris. Therefore, even if the captured image 11 is captured with a resolution that allows fingerprints and irises to be identified, it can be said that the fingertip area and the eye area are specific areas in which a person can not be identified visually. Furthermore, when the image size is such that the face can be identified visually, the fingertip area and the eye area in the image are fine.

  The processing unit 23 performs predetermined processing on a specific area of the captured image 11. Here, the predetermined processing includes, for example, correction with similar colors to a specific area, change in the ratio of the size of parts, and the like, but is not limited thereto. The predetermined processing may be performed so as not to be visually distinguishable when the specific area is enlarged and displayed on the screen. The transmission unit 24 transmits the processed image subjected to the processing process to the open server 30 instead of the photographed image 11.

  The public server 30 holds the processed image received from the communication relay device 20, and sends back the processed image in response to a browse request for the processed image. That is, the public server 30 publicizes the processed image to the outside. The public server 30 is, for example, a server that manages content such as SNS (Social Network Service).

  FIG. 2 is a sequence diagram showing the flow of the communication relay method according to the first embodiment of the present invention. First, the communication terminal 10 transmits, to the communication relay device 20, a request for transmitting the photographed image 11 to the public server 30 (S101). In response to this, the receiving unit 21 of the communication relay device 20 receives a transmission request from the communication terminal 10. Then, the specifying unit 22 of the communication relay device 20 specifies a specific area from the captured image 11 included in the transmission request (S102). Subsequently, the processing unit 23 of the communication relay device 20 performs predetermined processing on a specific area in the captured image 11 (S103). Thereafter, the transmitting unit 24 of the communication relay device 20 transmits the processed image on which the processing process has been performed to the public server 30 (S104). That is, the communication relay device 20 does not transmit the photographed image 11 to the public server 30. Then, the disclosure server 30 can disclose the received processed image to the outside.

  As described above, according to the first embodiment, since the specific area is already processed in the processed image, the content of the specific area is not leaked out even if the external server 30 makes the external disclosure by the public server 30, and predetermined biometric authentication is performed. Data forgery can be suppressed. Further, since the specific region is originally a region in which a person can not be identified visually, even if it is processed, it has little influence on the reduction in the visibility of human eyes. That is, it is possible to prevent the forgery of biometric data while maintaining the visibility of the image data that is released to the public including the person.

Second Embodiment
The second embodiment is an improved example of the first embodiment described above. In particular, the specifying unit specifies an area including either a fingertip or an eye of the person as the specific area. Thereby, forgery of authentication data in biometric authentication of fingerprint authentication or iris authentication can be suppressed.

  Then, it is preferable that the processing unit corrects the specific area so as to have the same color. Alternatively, the processing unit may change a ratio of sizes of a plurality of portions included in the specific region. These make it difficult to identify a specific area in the processed image, and even for high resolution images, it is possible to suppress forgery.

  Furthermore, it is preferable to further include a determination unit that determines a network type to which the destination of the transmission request belongs, and the identification unit desirably identifies the specific area when the determined network type is an external network. Thus, when the transmission destination is the internal network, the photographed image can be transmitted as it is without performing the processing, so that the visibility in the safe internal network can be maintained more.

  The communication relay device may be a home gateway device, and the receiving unit may receive the transmission request from a subordinate communication terminal that has captured the captured image. Thereby, it can respond also in a general use form.

  FIG. 3 is a block diagram showing the configuration of a communication relay system 2000 according to a second embodiment of the present invention. The communication relay system 2000 includes a portable terminal 10 a, a portable terminal 10 b, an HGW 20 a, the Internet N, an open server 30, and a portable terminal 32. The Internet N is an example of an external network.

  The portable terminals 10a, 10b and 32 are, for example, a smart phone, a mobile phone, a tablet terminal or the like equipped with a digital camera. The portable terminals 10a, 10b and 32 may be information processing apparatuses such as personal computers (PCs).

  Here, the mobile terminal 10a is an example of the communication terminal 10 described above. The portable terminal 10a holds the photographed image 11 obtained by photographing the user U in an internal storage area (not shown). Here, the photographed image 11 includes the user U in a visually distinguishable manner. Further, it is assumed that the captured image 11 has a high resolution compared to the resolution of the screen of a general display device. Therefore, it is assumed that the photographed image 11 includes the face or the figure of the user U so as to be visually distinguishable, and the fingerprint of the finger of the hand of the user U is also finely imaged.

  The HGW 20a is an example of the communication relay device 20 described above, and is a home gateway device that relays communication between the portable terminals 10a and 10b and the Internet N side. Further, the HGW 20a is connected to each of the mobile terminals 10a and 10b by a wireless local area network (LAN). That is, the mobile terminals 10a and 10b are subordinate to the HGW 20a. The HGW 20a, the public server 30, and the mobile terminal 32 are connected via the Internet N.

  The HGW 20 a further includes a determination unit 25 in addition to the configuration of the communication relay device 20. The determination unit 25 determines whether the network type to which the destination of the transmission request belongs is the Internet N or a wireless LAN. Then, when the determined network type is the Internet N, the identifying unit 22 identifies a specific area from the captured image 11. The processing unit 23 generates a processed image by correcting the specific area so as to have the same color. The transmission unit 24 transmits the generated processed image to the public server 30 via the Internet N. The public server 30 stores the received processed image 31 in an internal storage device (not shown).

  FIG. 4 is a flowchart showing the flow of the communication relay method according to the second embodiment of the present invention. First, the receiving unit 21 of the HGW 20a receives an upload request for the captured image 11 from the portable terminal 10a (S201). Next, the determination unit 25 of the HGW 20a determines whether the network type to which the destination of the upload request belongs is the Internet N (S202). At this time, when it is determined that the network type is not the Internet N but the wireless LAN, the transmitting unit 24 of the HGW 20a transmits the upload request including the captured image 11 as it is to the destination in the wireless LAN, for example, the mobile terminal 10b ( S208). Therefore, the portable terminal 10b can receive the captured image 11 via the wireless LAN and can display the captured image 11 on the screen. Since the mobile terminals 10a and 10b exist in the same HGW 20a, even if the user W browses the photographed image 11 as it is from the screen of the mobile terminal 10b, the security risk is low.

  On the other hand, when it is determined in step S202 that the network type is the Internet N, the determination unit 25 determines whether a person is included in the captured image 11 included in the upload request (S203). For example, the determination unit 25 performs known image recognition processing on the captured image 11 to determine whether the captured image 11 includes an area corresponding to a person. If it is determined in step S203 that a person is included in the captured image 11, the determination unit 25 determines whether a fingertip is included in the captured image 11 (S204). For example, the determination unit 25 performs well-known image recognition processing on an area corresponding to a person in the captured image 11 to determine whether or not the area corresponding to a fingertip is included in the captured image 11. .

  If it is determined in step S204 that a fingertip is included in the captured image 11, the identifying unit 22 determines whether fingerprint authentication can be performed on the image of the fingertip region in the captured image 11 (S205). For example, the specifying unit 22 extracts a fingertip area from the captured image 11, and determines whether the image of the extracted fingertip area is larger than the resolution of input data in a predetermined fingerprint authentication process. Then, when the image of the fingertip area is equal to or higher than the resolution, it is determined that fingerprint authentication is possible with the image of the fingertip area in the captured image 11.

  If it is determined in step S205 that fingerprint authentication is possible based on the image of the fingertip area in the captured image 11, the processing unit 23 corrects the fingertip area in the captured image 11 with the similar color to generate a processed image (S206). Then, the transmitting unit 24 transmits the corrected processed image to the destination via the Internet N (S207).

  Therefore, the public server 30 receives the upload request of the processed image via the Internet N, and stores it as the processed image 31 in an internal storage device (not shown). Thereafter, the portable terminal 32 transmits a browse request of the processed image 31 to the public server 30 via the Internet N by the operation of the user V. The public server 30 sends the processed image 31 back to the portable terminal 32 in response to the browsing request from the portable terminal 32. Thereby, the mobile terminal 32 can view the processed image 31 by displaying the processed image 31 on the screen. Since the fingertip area in the processed image 31 is corrected in the same color, the user V can not forge the fingerprint information of the user U from the processed image 31.

  If it is determined that one of steps S203, S204 or S205 is NO, the transmission unit 24 transmits the photographed image 11 to the destination via the Internet N (S209). Also in this case, as described above, the public server 30 holds the received captured image 11 internally, and sends the captured image 11 back to the request source in response to the browsing request. However, in this case, the fingerprint of the fingertip region is not imaged in the captured image 11 at least at a resolution at which fingerprint authentication can be performed. Therefore, even if the photographed image 11 is released as it is, the possibility of forgery of fingerprint authentication data is low. On the other hand, since the processing is not performed, the visibility is not excessively reduced.

  FIG. 5 is a figure for demonstrating the effect concerning Embodiment 2 of this invention. Here, the case where the determination in step S205 described above is YES will be described. In this case, the processed image 31 includes the user U, and in particular, the hand of the user U is shown. Therefore, the user V who has stored the processed image 31 on the portable terminal 32 enlarges the area of the hand of the processed image 31 and displays the enlarged image 311 of the hand on the screen, and further displays the fingertip area from the enlarged image 311 of the hand. Is extracted and extracted as an image 312 of the fingertip region. However, since the image 312 in the fingertip region is corrected with the similar color, no fingerprint information is left, and at least the image is unclear. Therefore, it is shown that the fingerprint information for fingerprint authentication can not be forged using the processed image 31, and the security of the fingerprint authentication can not be breached using the image 312 of the fingertip region.

  Subsequently, a modification of the second embodiment will be described. Although the finger tip area included in the photographed image 11 as the specific area is set as the specific area and the countermeasure against fingerprint authentication is shown as the biometric authentication, the biometric authentication targeted in the present embodiment is not limited to this. For example, FIG. 6 shows the relationship between the type of biometric authentication and biometric information. Here, fingerprint authentication, vein authentication, face authentication, bill authentication, iris authentication, and voiceprint authentication are listed as types of biometric authentication. Here, in the present embodiment, since the purpose is to suppress forgery of biological information from a photographed image including a person, vein authentication and voiceprint authentication that can not be extracted from an image are excluded. And, the measures for fingerprint authentication are as described above.

  Next, measures for iris authentication will be described. Here, iris authentication is performed using iris information in the eye. The iris information is also very fine as in the case of the fingerprint information, and therefore, it can be realized by applying the eye area included in the captured image 11 to the present embodiment as a specific area.

  In addition, measures for face recognition will be described. Here, face authentication is performed using the shape of a person's face, expression, hair style, and the like. However, even if a face is included in the captured image 11, if the human can visually identify the person when displayed on the screen of a normal display device, the user can use personal information before uploading. It is possible to take some measures regardless of the present embodiment, since it is possible to notice the risk of outflow. However, even if the photographed image 11 includes the face, the user is personal information by uploading the photographed image 11 when it is too small to visually identify a person on the screen of a normal display device. It is hard to notice the outflow of In particular, when the captured image 11 has a high resolution compared to the resolution of the screen, the face area of the captured image 11 is clear even if it is extracted, and therefore it may be forged as data for face authentication. Therefore, in such a case, it is possible to realize by applying the area of the face included in the photographed image 11 as the specific area to the present embodiment. Then, since the processing in this case includes a plurality of parts of the face in the specific area, it is possible to change the ratio of the size of the parts so as to be recognized as another person in face recognition. May be

  In addition, measures for bill authentication will be described. Here, in the bill authentication, authentication is performed using the shape of a hand, hand or the like. In this case, it can be realized by applying the area of the hand included in the captured image 11 to the present embodiment as the specific area. Then, processing may be performed so as to be recognized as another person in bill authentication by changing the ratio of thickness and length of a plurality of parts of the hand, that is, the thumb and forefinger in a specific area. Alternatively, the palm of the hand may be corrected with a similar color.

  From the above, according to the second embodiment, it is possible to prevent the forgery of biometric data while maintaining the visibility of the image data released via the network. In particular, it is not the mosaic processing of the face which can be originally identified visually, but the processing of the part having little influence on the visual observation of the user, so that the user's discomfort can be reduced and the visibility can be maintained. In addition, since processing is performed on an area that can be used for biometrics even for high-resolution image data, it is possible to prevent forgery of biometrics data and to prevent impersonation. Furthermore, in order to perform processing processing in the communication relay device when transmitting the photographed image to the public server, the original image in the photographing device main body is held. In addition, since the processing is processing in the communication relay device, leakage of biological information can be suppressed even when the user of the transmission source is not aware of it. Then, as long as it is processed when transmitted from the communication relay apparatus to the external network and is not shared outside in the internal network closed to the outside, no processing is performed, and therefore, the visibility can be further maintained.

<Other Embodiments>
In the embodiment described above, not only the photographed image but also metadata added to the photographed image, for example, GPS information indicating the photographing location may be deleted in the processing. This can further improve security.

  The present invention is not limited to the above embodiment, and can be appropriately modified without departing from the scope of the present invention.

  Moreover, in the above-mentioned embodiment, although this invention was demonstrated as a structure of a hardware, this invention is not limited to this. The present invention can also realize arbitrary processing by causing a central processing unit (CPU) to execute a computer program.

  In the above-mentioned example, the program can be stored using various types of non-transitory computer readable media and supplied to a computer. Non-transitory computer readable media include tangible storage media of various types. Examples of non-transitory computer readable media are magnetic recording media (eg flexible disk, magnetic tape, hard disk drive), magneto-optical recording media (eg magneto-optical disk), CD-ROM (Read Only Memory), CD-R, CD-R / W, DVD (Digital Versatile Disc), semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (Random Access Memory)) are included. Also, the programs may be supplied to the computer by various types of transitory computer readable media. Examples of temporary computer readable media include electrical signals, light signals, and electromagnetic waves. The temporary computer readable medium can provide the program to the computer via a wired communication path such as electric wire and optical fiber, or a wireless communication path.

1000 communication relay system 10 communication terminal 11 photographed image 20 communication relay device 21 reception unit 22 identification unit 23 processing unit 24 transmission unit 30 public server 2000 communication relay system U user V user W user 10 a portable terminal 10 b portable terminal 20 b HGW
25 judgment unit N Internet 31 processed image 311 enlarged image of hand 312 image of fingertip area 32 portable terminal 90 portable terminal 91 photographed image 92 HGW
94 Public server 95 Photograph image 951 Enlarged image of hand 952 Image of fingertip area 96 Mobile terminal

Claims (9)

A receiving unit that receives a transmission request for transmitting a photographed image including a person to a public server;
An identifying unit that identifies, from among the photographed images included in the transmission request, a specific area that can be used in predetermined biometric authentication among the body of the person and can not visually identify the person;
A processing unit that performs predetermined processing on the specific area of the captured image;
A transmitting unit that transmits the processed image subjected to the processing to the open server instead of the photographed image;
A communication relay device comprising: The communication relay device according to claim 1, wherein the specifying unit specifies an area including either a finger or an eye of the person as the specific area. The communication relay device according to claim 1, wherein the processing unit corrects the specific area so that the specific area has a similar color. The communication relay device according to claim 1, wherein the processing unit changes a ratio of sizes of a plurality of parts included in the specific area. The apparatus further comprises a determination unit that determines a network type to which the destination of the transmission request belongs.
The communication relay device according to any one of claims 1 to 4, wherein the specifying unit specifies the specific area when the determined network type is an external network. The communication relay device is a home gateway device,
The communication relay device according to any one of claims 1 to 5, wherein the receiving unit receives the transmission request from a subordinate communication terminal that has captured the captured image. A communication terminal holding a photographed image including a person;
A communication relay device relaying communication between the communication terminal and the public server;
The communication relay device is
A receiving unit that receives a transmission request for transmitting the captured image from the communication terminal to the public server;
An identifying unit that identifies, from among the photographed images included in the transmission request, a specific area that can be used in predetermined biometric authentication among the body of the person and can not visually identify the person;
A processing unit that performs predetermined processing on the specific area of the captured image;
A transmitting unit that transmits the processed image subjected to the processing to the open server instead of the photographed image;
A communication relay system comprising: Receiving a transmission request for transmitting a photographed image including a person to the public server;
Among the body of the person, a specific area that can be used in predetermined biometric authentication and can not visually identify the person is specified from among the photographed images included in the transmission request,
Performing predetermined processing on the specific area of the photographed image;
Sending the processed image subjected to the processing to the open server instead of the photographed image;
Communication relay method. A reception process for receiving a transmission request for transmitting a photographed image including a person to a public server;
A specific process of specifying, from among the photographed images included in the transmission request, a specific area of the body of the person that can be used in predetermined biometric authentication and can not visually identify the person;
A processing execution process for performing a predetermined processing process on the specific area of the photographed image;
Transmission processing for transmitting the processed image subjected to the processing to the open server instead of the photographed image;
A communication relay program that causes a computer to execute.

Images