JP2015201022A - fraud detection system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a fraud detection system capable of detecting fraud related to an information code.SOLUTION: In an information code generation device 20, when a hash 44 is created on the basis of a predetermined hash function from predetermined data 41, an electronic signature 42 is created as information encrypted by using a secret key 45 from the hash 44, and an information code 40 is generated such that an electronic certificate 43 created in accordance with a public key 46 making a pair with the secret key 45 and the predetermined data 41 and the electronic signature 42 are readable. Also, in an information code reading device 30, a hash 47 for comparison created on the basis of the predetermined hash function from the predetermined data 41 acquired by decode processing is compared with the hash 44 restored from the electronic signature 42 by using the public key 46 acquired from the electronic certificate 43, and the presence/absence of fraud related to the information code 40 is reported on the basis of the comparison result.

Description

  The present invention relates to a fraud detection system for detecting fraud related to an information code.

  Conventionally, information codes such as two-dimensional codes have been used in various fields as means for easily acquiring predetermined information. In particular, as a means for guiding consumers who use terminal devices such as mobile phones and smartphones to a desired website such as a website on which a corporate advertisement is posted, for example, disclosed in Patent Document 1 below. An information distribution system is known. In this system, the URL information can be acquired by reading an information code obtained by encoding the URL information of the target website with a terminal device, and such a method is widely used. Along with this, each terminal device is configured so that a program (application) for optically reading the information code is installed in advance or can be installed via the Internet or the like. It is an environment where a readable reading device can be possessed.

JP 2008-234530 A

  By the way, when data communication destination information such as URL information or an e-mail address obtained by reading an information code is illegally altered, there is no method for confirming whether the data communication destination information is safe. In some cases, the user is connected to a website different from the desired website or sends an unintended electronic mail. In this case, for example, there is a problem that if a connection is made to a malicious website or the like in which a virus or malware is loaded, the reading device is infected.

  Such a problem is not limited to URL information, e-mail addresses, and the like. When an information code whose information has been tampered with is read, that is, when there is a fraud related to the information code, there is a method of confirming the fraud Otherwise, there is a problem that damage caused by reading an illegal information code occurs.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a fraud detection system capable of detecting fraud related to an information code.

In order to achieve the above object, an invention according to claim 1 of the present invention includes an information code generation device (20) for generating an information code (40) capable of detecting fraud, and optically reading the information code. An fraud detection system (10) comprising an information code reading device (30) capable of detecting fraud related to the information code, wherein the information code generation device is based on a predetermined hash function from predetermined data (41). A generation-side hash creation means (21) for creating a hash (44) and a cipher for creating information (42) encrypted using a secret key (45) from the hash created by the generation-side hash creation means Generating the information code in such a manner that the encryption means (21), the public key (46) paired with the secret key, the predetermined data and the encrypted information can be read. Generating means (21), wherein the information code reader decodes the information code picked up by the image pickup means (32) for picking up the information code, and the predetermined information by decoding the information code picked up by the image pickup means. Decoding means (31) for acquiring data, the encrypted information and the public key, and a reading side for creating a hash (47) based on the predetermined hash function from the predetermined data acquired by the decoding means A hash creating means (31), a hash restoring means (31) for restoring a hash from the encrypted information using the public key acquired by the decoding means, and a hash created by the reading-side hash creating means And a comparison means (31) for comparing the hash restored by the restoration means and a comparison result by the comparison means And informing means for informing whether there is invalid (35) for said information code Te, characterized in that it comprises a.
In addition, the code | symbol in each said parenthesis shows the correspondence with the specific means as described in embodiment mentioned later.

  According to the first aspect of the invention, when a hash is created from predetermined data based on a predetermined hash function in the information code generation device, information encrypted using a secret key is generated from the hash. Then, an information code is generated so that the public key that is paired with the secret key, predetermined data, and encrypted information can be read. Further, in the information code reader, the information code reader is restored from the information encrypted by using the hash created based on the predetermined hash function from the predetermined data acquired by the decoding unit and the public key acquired by the decoding unit. The hash is compared, and based on the result of the comparison, it is informed whether there is a fraud related to the information code.

  If it is a legitimate information code, the hash created from the predetermined data obtained based on the predetermined hash function matches the hash restored from the information encrypted using the same public key. Therefore, if the two hashes do not match, it can be determined that there is an irregularity related to the information code. For this reason, when both hashes do not match, it is possible to easily detect fraud related to the read information code by notifying that there is fraud related to the information code.

  In the invention of claim 2, in the information code generation device, an electronic signature is created as information encrypted from a hash using a secret key, and created according to a public key authenticated by a certificate authority The information code is generated so that the document, the predetermined data and the electronic signature can be read. Then, in the information code reading device, the hash is restored from the electronic signature using the public key included in the electronic certificate acquired by the decoding unit.

  In this way, by using the public key that has been authenticated by the certificate authority, it becomes difficult to illegally create an information code, and the accuracy of fraud detection of the information code can be improved.

  According to the invention of claim 3, in the information code reading device, when the matching comparison result is made by the comparison means, it is displayed together with the predetermined data that the predetermined data is reliable, and the non-matching comparison result If the comparison is made or if the decoded information and the public key are not included in the decoding result, it is displayed that the predetermined data is untrustworthy data.

  Thereby, the user who has seen the display by the notification means can easily recognize whether or not the read predetermined data is reliable data.

  In the invention of claim 4, when the display of the predetermined data is selected by the selecting means in response to the display that the predetermined data is untrustworthy data, the predetermined data is displayed by the notifying means.

  For this reason, the user who sees the indication that the read predetermined data is untrustworthy data recognizes that the read predetermined data is untrustworthy data, and whether or not to display the predetermined data. Can be selected. As a result, it is possible to select whether or not to display the predetermined data in consideration of the reading status and the like, so that it is possible to improve the convenience regarding the display of the predetermined data.

  In the invention of claim 5, when the data communication destination information is included in the predetermined data selected to be displayed by the selection means, the data indicating the data communication destination information is displayed and then the predetermined data is displayed by the selection means. When the display is selected again, predetermined data is displayed by the notification means.

  For this reason, even if it is selected to display the predetermined data indicating that it is untrustworthy data, if the predetermined data includes data communication destination information such as URL information or an e-mail address, The presence / absence of display of the predetermined data is selected. As a result, it is possible to select whether or not to display the predetermined data in consideration of the contents of the predetermined data, so that the convenience of displaying the predetermined data can be further improved.

  According to the sixth aspect of the present invention, the predetermined data decoded by the decoding means, the encrypted information and the public key, the comparison result by the comparison means, and the selection result by the selection means are information that specifies the decoded information code And stored in the storage means. Then, when information specifying the information code decoded by the decoding means is already stored in the storage means, the presence or absence of display of the predetermined data in the notification means is associated with the information specifying the information code and the storage means This is performed based on the comparison result and the selection result stored in.

  Therefore, when the same information code as the information code for which the display of the predetermined data has been selected by the selection unit is read, the predetermined data can be displayed regardless of the selection of the selection unit, and the display of the predetermined data by the selection unit When the same information code as the information code that was not selected is read, the predetermined data can be hidden regardless of the selection of the selection means. Thereby, since it is not necessary to perform the same selection operation for reading the same information code, it is possible to improve the convenience of displaying predetermined data.

It is explanatory drawing which shows schematic structure of the fraud detection system which concerns on 1st Embodiment. FIG. 2 is a block diagram schematically illustrating an electrical configuration of the information code generation device in FIG. 1. It is a flowchart which illustrates the flow of the code production | generation process performed by the control part of an information code production | generation apparatus. FIG. 2 is a block diagram schematically illustrating an electrical configuration of the information code reading device in FIG. 1. It is a part of flowchart which illustrates the flow of the reading process performed by the control part of an information code reader. It is a part of flowchart which illustrates the flow of the reading process performed by the control part of an information code reader. FIG. 7A is an explanatory diagram illustrating a display example of reliable data, and FIG. 7B is an explanatory diagram illustrating a display example of unreliable data.

[First Embodiment]
Hereinafter, a first embodiment embodying a fraud detection system according to the present invention will be described with reference to the drawings. FIG. 1 is an explanatory diagram showing a schematic configuration of the fraud detection system 10 according to the first embodiment.
The fraud detection system 10 shown in FIG. 1 mainly includes an information code generation device 20 and an information code reading device 30, and issues an information code 40 generated by the information code issuer using the information code generation device 20. When the issued / distributed information code 40 is read by the information code reader 30, it is configured as a system for notifying whether or not there is an irregularity related to the information code 40. Note that the information code 40 according to the present embodiment is configured by a QR code (registered trademark) as an information code that can be detected illegally. However, the information code is not limited to this, and an information code of another code type, for example, a data matrix It may be configured as a code, a maxi code, or the like.

First, the configuration of the information code generation device 20 that generates the information code 40 will be described with reference to FIG. FIG. 2 is a block diagram schematically illustrating an electrical configuration of the information code generation device 20 of FIG.
The information code generation device 20 is a device for generating the information code 40 using predetermined data acquired from an information code issuer or the like. The information code generation device 20 is configured by a personal computer or the like, and includes a control unit 21, a storage unit 22, an input unit 23, a display unit 24, a communication unit 25, a printing unit 26, and the like as shown in FIG. ing.

  The control unit 21 is responsible for overall control of the information code generation device 20, has a CPU, a system bus, an input / output interface, and the like, and functions as an information processing device together with the storage unit 22. The storage unit 22 is configured by a known semiconductor memory such as a ROM, a RAM, or a nonvolatile memory. The storage unit 22 includes a predetermined program for realizing a code generation process and various information processing described later. These are stored in advance so as to be executable by the control unit 21.

  The input unit 23 is configured by an input device such as a mouse or a keyboard, and is configured to give information corresponding to an external operation to the control unit 21. The display unit 24 is configured by a liquid crystal monitor or the like, and is configured to display various information according to the control of the control unit 21. The communication unit 25 includes a plurality of types of communication interfaces, and is configured to perform wired communication or wireless communication with an external device via a network such as the Internet, which is controlled by the control unit 21. The printing unit 26 is configured as a known printer (such as a known label printer), and is configured to print the information code 40, various data, and the like in accordance with a command from the control unit 21.

Next, the information code 40 generated by the information code generation device 20 configured as described above and a code generation process for generating the information code 40 will be described.
The information code 40 according to the present embodiment is a predetermined data 41 to be distributed to the user of the information code reader 30 in order to detect whether or not the information code 40 is fraudulent as an information code capable of fraud detection. In addition, the electronic signature 42 and the electronic certificate 43 are encoded and generated.

  The electronic signature 42 is generated by encrypting a hash 44 created as described later based on predetermined data 41 using a secret key 45. The secret key 45 is prepared in advance by an information code issuer or the like together with the public key 46 that makes a pair, and is for encrypting the hash 44. The public key 46 is for decrypting the hash 44 encrypted as the electronic signature 42 by using the paired secret key 45. The electronic certificate 43 is created by the certificate authority 1 based on the public key 46 and authentication information for authenticating the information code issuer with respect to the public key 46. Is obtained as a result of authentication from the certificate authority 1 by submitting information such as the public key 46 to the certificate authority 1.

Hereinafter, the code generation process executed by the control unit 21 will be described in detail with reference to FIG. FIG. 3 is a flowchart illustrating the flow of code generation processing executed by the control unit 21 of the information code generation device 20.
A code generation process is started when a predetermined application program is executed by the control unit 21 of the information code generation device 20 by an operation of the input unit 23 by an information code issuer. In this code generation process, first, in the determination process shown in step S101 of FIG. 3, information including the predetermined data 41, the secret key 45, and the electronic certificate 43 (hereinafter also referred to as code generation information) is obtained. It is determined whether or not it has been input, and the determination of No is repeated until these pieces of code generation information are input.

  After the information code issuer receives authentication from the certificate authority 1 and obtains the electronic certificate 43, the information for code generation is input to the information code generation device 20 by operating the input unit 23 by the information code issuer. Then (Yes in S101), the hash creation process shown in step S103 is performed. In this process, a hash 44 is created from the acquired predetermined data 41 based on a predetermined hash function. This predetermined hash function is a common function that is also used by the information code reader 30, and is prepared in advance according to the predetermined data 41 and stored in the storage unit 22. Note that the control unit 21 that executes the process of step S103 may correspond to an example of a “generation-side hash creation unit”.

  Next, an electronic signature creation process shown in step S105 is performed, and an electronic signature 42 is created as information encrypted using the secret key 45 from the hash 44 created as described above. The electronic signature 42 encrypted in this way is created so that the hash 44 can be obtained only when decrypting using the public key 46 paired with the private key 45 used for encryption. The control unit 21 that executes the process of step S105 may correspond to an example of an “encryption unit”.

  Subsequently, an information code creation process shown in step S107 is performed, and the electronic signature 42 created as described above, the obtained predetermined data 41 and the electronic certificate 43 are coded by a known code generation method, An information code 40 is generated. The control unit 21 that executes the process of step S107 may correspond to an example of a “generating unit”.

  Then, the information code printing process shown in step S109 is performed, and print data for printing the information code 40 is output to the printing unit 26. As a result, the information code 40 and related information are printed by the printing unit 26 on a predetermined sheet or the like for distributing the information code 40. The information code 40 is not limited to being printed and distributed on a display medium, but is distributed to each user as electronic data to be displayed on the display screen of the electronic device possessed by each user. Also good.

Next, the configuration of the information code reading device 30 according to the present embodiment will be described with reference to FIG. FIG. 4 is a block diagram schematically illustrating an electrical configuration of the information code reading device 30 of FIG.
The information code reader 30 is created by the information code generator 20 by installing a predetermined application program (hereinafter also referred to as fraud detection application program) on a mobile phone such as a smartphone having a camera function, for example. It is configured as a portable reader capable of detecting fraud related to the information code 40.

  As shown in FIG. 4, the information code reading device 30 includes an information code 40 imaged based on a pixel signal from an imaging unit 32 having a camera function in addition to normal call processing and communication processing as a mobile phone. A control unit 31 that controls the reading process and the like is provided. The control unit 31 is configured mainly with a microcomputer, has a CPU, a system bus, an input / output interface, and the like, and functions as an information processing apparatus together with the storage unit 33. The storage unit 33 is configured by a known semiconductor memory such as a ROM, a RAM, or a nonvolatile memory. The storage unit 33 includes the above-described program in addition to a predetermined program for realizing a call function and a communication function. The fraud detection application program is stored in advance so as to be executable by the control unit 31. Further, as described above, a predetermined hash function used in the information code generation device 20 is prepared and stored in the storage unit 33. The imaging unit 32 may correspond to an example of “imaging unit”, and the storage unit 33 may correspond to an example of “storage unit”.

  The information code reading device 30 includes an operation unit 34, a display unit 35, and a communication unit 36. The operation unit 34 includes a plurality of keys and the like, and has a function of inputting information corresponding to the key operation to the control unit 31. The display unit 35 is composed of a liquid crystal or the like, and is controlled by the control unit 31 and has a function of displaying predetermined information such as a result of reading an information code on the display screen 35a. The communication unit 36 is controlled by the control unit 31 and has a function of performing wireless communication with an external device via a network such as a mobile phone network or the Internet. The operation unit 34 may correspond to an example of “selection unit” that can be selected by the user, and the display unit 35 may correspond to an example of “notification unit”.

  Next, reading processing for optically reading the distributed information code 40 using the information code reading device 30 configured as described above will be described in detail with reference to the drawings. 5 and 6 are flowcharts illustrating the flow of reading processing executed by the control unit 31 of the information code reading device 30. FIG. 7A is an explanatory diagram illustrating a display example of reliable data, and FIG. 7B is an explanatory diagram illustrating a display example of unreliable data.

  The fraud detection application program is executed by the control unit 31 in response to a user operation on the operation unit 34, and an imaging operation is performed with the camera of the imaging unit 32 facing the information code 40 to be read. Then, the reading process is started by the control unit 31. First, the imaging process shown in step S201 in FIG. 5 is performed, and the imaging unit 32 captures an image of the reading target.

  Next, the decoding process shown in step S203 is performed. In this process, based on the code image of the information code included in the captured image captured by the imaging process, the information code is decoded based on a known decoding method. Note that the control unit 21 that performs the decoding process shown in step S203 may correspond to an example of a “decoding unit”.

  If this decoding is successful (Yes in S205), it is determined whether or not the cache corresponding to the information code that has been successfully decoded is stored in the storage unit 33 in the determination process shown in Step S207. Here, the cache is information relating to the decoding result, display of data read from the information code, and the like. If the cache corresponding to the information code is not stored in the storage unit 33, No is determined in step S207. It is determined. If the decoding process in step S203 fails (No in S205), the process from step S201 is performed again.

  Subsequently, in the determination process shown in step S209, it is determined whether or not the electronic signature 42 and the electronic certificate 43 are included in the decoding result. Here, since the information code 40 created by the information code generation device 20 has been successfully decoded, the electronic signature 42 and the electronic certificate 43 in addition to the predetermined data 41 are included in the decoding result. (Yes in S209), the hash creation process shown in step S211 is performed. In this process, a comparison hash 47 is created from predetermined data 41 obtained from the decoding result based on a predetermined hash function stored in advance in the storage unit 33. The control unit 31 that executes the process of step S211 may correspond to an example of “reading-side hash creation unit”.

  Next, hash decryption processing shown in step S213 is performed, and the hash encrypted as the electronic signature 42 is decrypted using the public key 46 acquired from the electronic certificate 43 included in the decoding result. The control unit 31 that executes the process of step S213 can correspond to an example of a “hash restoration unit”.

  Subsequently, a hash comparison process shown in step S215 is performed. In this process, a process of comparing the created comparison hash 47 with the decrypted hash is performed. The control unit 31 that executes the process of step S215 may correspond to an example of “comparison means”.

  Here, if the hash 44 is decrypted because the regular information code 40 is read, a comparison result in which the hash 44 matches the comparison hash 47 is made (Yes in S217). In this case, the notification process shown in step S219 is performed, and it is displayed and notified on the display screen 35a that the read predetermined data 41 is reliable data. Subsequently, the data display process shown in step S221 is performed, and predetermined data 41 included in the decoding result is displayed on the display screen 35a.

  For example, if the predetermined data 41 is URL information “http: // www...,...,” As illustrated in FIG. By the notification process shown, information indicating that the read data is reliable data such as “* This URL is reliable data” is displayed on the display screen 35a.

  Subsequently, the cache creation process shown in step S223 is performed. In this process, the read data (predetermined data 41, electronic signature 42, and electronic certificate 43) and the comparison result in step S215 that match are associated with the code specifying information that specifies this information code, and cached. Is created. The reading process is completed when the cache created in this way is stored in the storage unit 33.

  On the other hand, when the hash decrypted in step S213 does not match the comparison hash 47 created in step S215 (No in S217), or when the electronic signature 42 and the electronic certificate 43 are not included in the decoding result In (No in S209), the warning display process shown in step S225 is performed. In this process, a warning that the read data is untrustworthy data is displayed and notified on the display screen 35a, and information for allowing the user to select whether or not to display the read data is displayed on the display screen 35a. The

  If the user selects not to display the read data in accordance with the operation of the operation unit 34 or the like (No in S227), the process of step S223 is performed without displaying the read data. In this case, a cache is created by associating the read data with the comparison result in step S215 that the data does not match and the selection result indicating that display is unnecessary by the operation unit 34 in association with the code specifying information.

  On the other hand, when selection is made to display the read data in accordance with the operation of the operation unit 34 or the like by the user (Yes in S227), in the determination process shown in step S229, the URL data and the website URL information and It is determined whether or not information such as an e-mail address (hereinafter also referred to as data communication destination information) is included. Here, when the data communication destination information is not included in the read data (No in S229), the data display process shown in step S221 is performed. In this case, the read data is displayed on the display screen 35a together with the warning display in step S225. Then, the process of step S223 is performed, and the cache data is created by associating the read data with the comparison result of step S215 that does not match and the selection result of the display required by the operation unit 34 with the code specifying information. The

  On the other hand, when the data communication destination information is included in the read data (Yes in S229), a warning display process shown in step S231 is performed. In this process, a warning indicating that the read data is untrustworthy data communication destination information is displayed and notified on the display screen 35a, and information for allowing the user to select whether to display the read data is displayed again. It is displayed on the screen 35a. When the user selects not to display the read data in accordance with the operation of the operation unit 34 or the like (No in S233), the process of step S223 is performed without displaying the read data. In this case, a cache is created by associating the read data with the comparison result in step S215 that the data does not match and the selection result indicating that display is unnecessary by the operation unit 34 in association with the code specifying information.

  On the other hand, when the user selects to display the read data in accordance with the operation of the operation unit 34 or the like (Yes in S233), the data including the data communication destination information is displayed in the data display process shown in step S221. It is displayed on the display screen 35a.

  For example, if the read data is URL information “http: // www... ΔΔΔ...”, As shown in FIG. By the warning display processing, information indicating that the read data is untrustworthy data such as “* This URL may be untrustworthy data” is displayed on the display screen 35a.

  Then, the process of step S223 is performed, and the cache data is created by associating the read data with the comparison result of step S215 that does not match and the selection result of the display required by the operation unit 34 with the code specifying information. The

  When the information code stored in the storage unit 33 is read again by being read once as described above, it is determined as Yes in step S207. In this case, in the determination process shown in step S235 of FIG. 6, the information is read from the information code based on the cache stored in the storage unit 33 corresponding to the code specifying information for specifying the read information code. It is determined whether the data is reliable.

  If it is determined that the data is reliable based on the cache (Yes in S235), the data display process shown in step S237 is performed. In this process, together with the read data, this data is reliable and displayed on the display screen 35a. Then, the reading process ends without updating the cache.

  On the other hand, if it is determined that the data is not credible based on the cache (No in S235), the determination process shown in step S239 selects the read data based on the cache. It is determined whether or not it was. Here, when it is determined that the display unnecessary selection has been made based on the cache (No in S239), the reading process is terminated without displaying the read data or updating the cache.

  On the other hand, when it is determined that the selection for displaying data is made based on the cache (Yes in S239), the data display process shown in step S241 is performed. In this process, together with the read data, a warning that the data is untrustworthy data is displayed on the display screen 35a and notified. Then, the reading process ends without updating the cache.

  As described above, in the fraud detection system 10 according to the present embodiment, when the hash 44 is created from the predetermined data 41 based on the predetermined hash function in the information code generation device 20, the secret key is generated from the hash 44. An electronic signature 42 is created as information encrypted by using 45. Then, the information code 40 is generated so that the electronic certificate 43, the predetermined data 41, and the electronic signature 42 created according to the public key 46 paired with the private key 45 can be read. Further, the information code reader 30 uses the comparison hash 47 created from the predetermined data 41 acquired by the decoding process based on the predetermined hash function and the public key 46 acquired from the electronic certificate 43. The hash 44 restored from the electronic signature 42 is compared, and based on the comparison result, it is informed whether there is any fraud with respect to the information code 40.

  If it is a legitimate information code 40, it is restored from the electronic signature 42 using the comparison hash 47 created from the acquired predetermined data 41 based on the predetermined hash function and the public key 46 acquired in the same way. Therefore, if both hashes do not match, it can be determined that there is a fraud with the information code. For this reason, when the two hashes do not match (No in S217), it is easily detected by using the display on the display screen 35a that the information code is invalid. can do.

  In particular, since the public key 46 authenticated by the certificate authority 1 is used, it becomes difficult to illegally create the information code 40, and the fraud detection accuracy of the information code 40 can be improved.

  The information code generator 20 creates information encrypted using the secret key 45 from the hash 44, and the information code 40 is read so that the public key 46, the predetermined data 41, and the encrypted information can be read. It may be generated. In this case, the information code reader 30 uses the comparison hash 47 created based on the predetermined hash function from the predetermined data 41 acquired by the decoding process, and the encrypted information using the public key 46. It is also possible to compare with the hash restored from the above and notify whether or not there is a fraud related to the information code 40 based on the comparison result.

  Further, in the information code reading device 30, when a matching comparison result is made in step S215 (Yes in S217), the display screen 35a indicates that the predetermined data 41 is reliable data together with the predetermined data 41. When the comparison result that does not match is made in step S215 (No in S217), or the decoding result does not include the electronic signature 42 (encrypted information) and the electronic certificate 43 (public key 46) (No in S209), the display screen 35a displays that the read data is unreliable data.

  Thereby, the user who has seen the display on the display screen 35a can easily recognize whether or not the read data is reliable data.

  Further, when display of the read data is selected by the operation unit 34 according to the display that the read data is untrustworthy data, the display screen 35a displays that the read data is untrustworthy data. Is displayed.

  For this reason, a user who sees an indication that the read data is untrustworthy data, recognizes that the read data is untrustworthy data, and selects whether to display the read data. be able to. Thereby, since the presence or absence of the display of the read data can be selected in consideration of the reading status and the like, the convenience regarding the display of the read data can be improved.

  In particular, when data communication destination information is included in the data selected to be displayed by the operation of the operation unit 34, the data read by the operation of the operation unit 34 after displaying that the data communication destination information is included is displayed. By selecting the display again, the display screen 35a of the display unit 35 displays the read data together with a display indicating that the data is not reliable.

  For this reason, even after selecting to display data that is displayed as untrustworthy data, if the data includes data communication destination information such as URL information or e-mail address, the data Whether to display or not is selected. As a result, the presence or absence of data display can be selected in consideration of the content of the read data, so that the convenience of displaying the read data can be further improved.

  In the reading process, the data decoded in step S203 (if the information code 40 is decoded, the predetermined data 41, the electronic signature 42 and the electronic certificate 43 (public key 46)), the step The comparison result in S215 and the selection result by the operation unit 34 (not included in the cache when the information code 40 is decoded) are stored in the storage unit 33 as a cache in association with the code specifying information. . If the cache (code specifying information) corresponding to the decoded information code is already stored in the storage unit 33 (Yes in S207), the cache is checked for the presence or absence of display of the read data using the display screen 35a. This is performed based on the comparison result and the selection result stored in the storage unit 33 in association with.

  Therefore, when the same information code as the information code for which the display of the read data such as the predetermined data 41 is selected by the operation of the operation unit 34 is read regardless of the selection of the operation unit 34 (the operation unit 34 is operated). The read data (predetermined data 41) can be displayed, and when the same information code as the information code for which the display of the read data was not selected by the operation unit 34 is read, the selection of the operation unit 34 is performed. Regardless of this (without operating the operation unit 34), the read data can be hidden. Thereby, since it is not necessary to operate the same operation part 34 with respect to the reading of the same information code, the convenience regarding the display of the read data can be improved.

In addition, this invention is not limited to the said embodiment, For example, you may actualize as follows.
(1) The notification as to whether or not there is an irregularity regarding the read information code is not limited to the display on the display screen 35a of the display unit 35, but by other notification means such as the buzzer 44 sounding or LED lighting. It may be made by notification.

(2) The information code reader 30 is not limited to a mobile phone in which the fraud detection application program is installed. For example, a dedicated stationary reader or portable reader in which the fraud detection application program is installed. It may be constituted by.

DESCRIPTION OF SYMBOLS 10 ... Fraud detection system 20 ... Information code generation apparatus 21 ... Control part (Generation side hash creation means, encryption means, generation means)
30 ... Information code reading device 31 ... Control unit (decoding means, reading-side hash creation means, hash restoration means, comparison means)
32 ... Imaging unit (imaging means)
33 ... Storage section (storage means)
34. Operation unit (selection means)
35 ... Display section (notification means)
40 ... Information code 41 ... Predetermined data 42 ... Electronic signature 43 ... Electronic certificate 44 ... Hash 45 ... Private key 46 ... Public key 47 ... Comparison hash

Claims (6)

An information code generation device for generating an information code capable of fraud detection;
An information code reader capable of optically reading the information code and detecting fraud related to the information code;
A fraud detection system comprising:
The information code generation device includes:
Generating hash creating means for creating a hash from predetermined data based on a predetermined hash function;
Encryption means for creating information encrypted by using a secret key from the hash created by the generation-side hash creation means;
A public key that is paired with the secret key, and a generation unit that generates the information code so that the predetermined data and the encrypted information can be read.
The information code reader is
Imaging means for imaging the information code;
Decoding means for obtaining the predetermined data, the encrypted information, and the public key by decoding the information code imaged by the imaging means;
Reading-side hash creation means for creating a hash based on the predetermined hash function from the predetermined data acquired by the decoding means;
Hash restoring means for restoring a hash from the encrypted information using the public key acquired by the decoding means;
Comparison means for comparing the hash created by the reading-side hash creation means with the hash restored by the restoration means;
Informing means for informing whether or not there is an irregularity related to the information code based on a comparison result by the comparing means;
A fraud detection system comprising: The encryption means creates an electronic signature as information encrypted from the hash using the secret key,
The generating means generates the information code so that the electronic certificate created according to the public key authenticated by a certificate authority, the predetermined data and the electronic signature can be read,
The fraud detection system according to claim 1, wherein the hash restoration unit restores the hash from the electronic signature using the public key included in the electronic certificate acquired by the decoding unit.   The notifying means displays that the predetermined data is reliable data together with the predetermined data when a matching comparison result is made by the comparing means, and the non-matching comparison result is made by the comparing means. The fraud detection according to claim 1 or 2, wherein if the decoded information and the public key are not included in the decoding result, the fact that the predetermined data is untrustworthy data is displayed. system. The information code reader includes a selection unit that allows a user to select whether or not to display the predetermined data.
The informing means displays the data when the selection means selects display of the predetermined data in response to a display indicating that the predetermined data is untrustworthy data. The fraud detection system according to claim 3.   If the predetermined data selected to be displayed by the selection means includes data communication destination information including at least one of URL information of a website and an e-mail address, the notification means includes the data 5. The fraud detection system according to claim 4, wherein the data is displayed when the display of the predetermined data is selected again by the selection means after displaying that the communication destination information is included. . The information code reader is
Information specifying the decoded information code, the predetermined data decoded by the decoding means, the encrypted information and the public key, the comparison result by the comparison means, and the selection result by the selection means Storage means stored in association with
When the information specifying the information code decoded by the decoding means is already stored in the storage means, the notification means is associated with the information specifying the information code as to whether or not the predetermined data is displayed. The fraud detection system according to claim 4, wherein the fraud detection system is performed based on the comparison result and the selection result stored in the storage unit.

Images