JP2020102658A - Terminal, delivery system, and program - Google Patents

Abstract

To provide a terminal and the like for improving safety of delivery of an object.SOLUTION: A parent terminal 2, a terminal possessed by a parent who requests delivery of a child between a deliverer and an acceptor, includes: message transmission means 101 for transmitting a message including a request for delivery of an object to terminals of the deliverer and the acceptor; cryptogram transmission means 102 for transmitting cryptograms to the terminals of the deliverer and the acceptor; key transmission means 103 for transmitting keys to the terminals of the deliverer and the acceptor; decryption result reception means 104 for receiving a decryption result obtained by decrypting a cryptogram received by the terminal of the deliverer using a key of the acceptor and a decryption result obtained by decrypting a cryptogram received by the terminal of the acceptor using a key of the deliverer; and determination means 105 for determining whether or not the decryption results are correct.SELECTED DRAWING: Figure 3

Description

The present invention relates to a terminal, a delivery system, and a program for improving the safety of delivery of an object.

When a child is picked up at a child care facility such as a kindergarten or a nursery school, it is sufficient if the guardian can pick him up, but in many cases the guardian cannot pick him up due to work reasons.

At such times, many kindergartens and nursery schools distribute an agent certificate to their parents, who will give a certificate in advance to the agent who will pick up the child if the person cannot pick him up. I will give it to you. The agent holding the certificate picks up the child on behalf of the guardian, and the child is handed over by confirming the possession of the certificate at the kindergarten or day care center.

However, in this method, if the guardian and the agent cannot contact each other, the guardian cannot request the agent to transfer the child, and no one can pick up the child. On the other hand, Patent Document 1 describes a transfer support system for requesting a driver of a taxi company to transfer a child, and the driver of the taxi company comes to pick up the child instead of the guardian himself. ing.

JP 2009-32136 JP

Since there is almost no chance that the driver of a taxi company cannot be contacted, in Patent Document 1, no one can pick up a child as described above, but the safety of handing over the child, that is, handing over the child The trustworthiness of the person is ensured by interviewing the guardian himself and the driver of the taxi company.

However, in order to further enhance the safety of delivery, it is more desirable to have a system capable of ensuring that the person who delivers the delivery is a reliable person on the system.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a terminal or the like for improving the safety of delivery of a target.

A first invention for solving the above-mentioned problem is a client terminal requesting delivery of an object between a transferer and an acceptor, wherein each of the transferee and the acceptor's terminal transfers the object. Message sending means for sending a delivery request message including a request, a cipher sending means for sending a cipher to at least one of the transferor and the acceptor, and the cipher received by the one terminal with the transferor. A terminal characterized by comprising a decryption result receiving means for receiving a decryption result decrypted by a key of the other person and a determining means for determining whether or not the decryption result is correct.

According to the present invention, by performing authentication by judging whether the decryption result is correct or not, one of the transferor and the transferee correctly transmits a predetermined cipher from the client terminal, and thus the transfer executor (trustworthy person). ) Can be secured at least on the system, and the safety of delivery of the target can be improved.

It is desirable that the terminal of the first invention further comprises a key transmitting means for transmitting the key to the other terminal of the transferee and the transferee.
As a result, the key required for decryption can be changed each time, and the security is high and the security of the transfer of the target is improved.

The cipher transmission means further transmits a cipher to the other terminal, the key transmission means further transmits a key to the one terminal, and the decryption result reception means receives the cipher received by the other terminal. , The decryption result decrypted by the key received by the one terminal is further received, and the determination means determines that the decryption result of the cipher received by the one terminal and the decryption result of the cipher received by the other terminal are correct. It is desirable to judge whether or not.
As a result, both the deliverer and the acceptor can be ensured on the system that they are the executors (reliable persons) who correctly transmit the predetermined encryption and key from the client's terminal, and the target delivery Improves the safety of.

It is desirable that the message transmitting unit transmits a delivery instruction message including a delivery instruction to at least the terminal of the delivery person in accordance with the determination result of the determination unit.
As a result, at least the delivery person can be informed that the delivery person and the delivery person are reliable persons and that the delivery of the target may be performed.

It is desirable that the delivery request message transmitted to at least the terminal of the acceptor includes a caution regarding the target.
This allows the underwriter to handle the delivered object with caution.

The terminal of the first invention has a message receiving means for receiving a delivery completion message including the fact that the delivery of the target has been completed from at least one of the terminal of the delivery person and the delivery person. It is desirable to include the terminal position of.
Thereby, the client can confirm that the delivery of the target has been completed and that the delivery of the target has been performed in the correct place.

A second invention is a delivery system having a client terminal requesting delivery of an object between a deliverer and a deliverer, a deliverer's terminal, and a deliverer's terminal, wherein the client's terminal comprises: Message transmitting means for transmitting a message including a request for delivery of the target to each of the terminals of the transferor and the acceptor, an encryption transmitting means for transmitting an encryption to at least one terminal of the transferor and the acceptor, and the one A decryption result receiving means for receiving a decryption result obtained by decrypting the cipher received by the terminal with a key possessed by the other of the deliverer and the acceptor, and a determining means for determining whether or not the decryption result is correct. It is a delivery system characterized by that.

A third aspect of the present invention is a message transmission for transmitting a message including a request for delivery of a target to a terminal of a client who requests delivery of a target between a delivery person and a recipient, to each of the terminals of the delivery person and the client. Means, cipher transmitting means for transmitting a cipher to at least one terminal of the transferor and the acceptor, and a decryption result obtained by decoding the cipher received by the one terminal with a key of the other of the transferor and the acceptor. Is a program for functioning as a terminal having a decryption result receiving means for receiving and a determining means for determining whether or not the decryption result is correct.

According to the present invention, it is possible to provide a terminal or the like for improving the safety of the transfer of a target.

The figure which shows the delivery system 1. The figure which shows the hardware constitutions of the guardian terminal 2. The figure which shows the function structure of the delivery system 1. The flowchart which shows the procedure of handing over a child from the staff of a deposit facility to the driver of a taxi company. Examples of delivery request message, authentication failure message, delivery instruction message, delivery completion message. An example of the ID card 100. The flowchart which shows the procedure which transfers a child from the driver of a taxi company to the relative of a guardian. Examples of delivery request message and delivery completion message. An example of a delivery request message.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

(1. Delivery system 1)
FIG. 1 is a diagram showing a delivery system 1 according to an embodiment of the present invention. In the delivery system 1, when a guardian cannot pick up a child at a child care facility such as a kindergarten or a nursery school, a taxi driver will pick up the child instead of the guardian and It is used when depositing with relatives of parents. Parents will eventually pick up the children entrusted to their relatives.

The delivery system 1 delivers the child between the staff of the custody facility and the driver of the taxi agent, and the child between the driver of the taxi agent and the relatives of the guardian. By performing mutual authentication of, the security of delivery is improved.

The delivery system 1 includes a guardian terminal 2, a staff terminal 3, a driver terminal 4, a relative terminal 5, and the like.

The guardian terminal 2 is a computer terminal carried by a child guardian. The guardian (client) uses the guardian terminal 2 to hand over the children between the staff of the custody facility and the driver of the taxi company, and the children between the driver of the taxi company and the relatives of the guardian. Request delivery. As the guardian terminal 2, it is possible to use a mobile terminal such as a smartphone or a tablet terminal.

FIG. 2 is a diagram showing a hardware configuration of the guardian terminal 2. As shown in FIG. 2, the guardian terminal 2 is configured by connecting a control unit 21, a storage unit 22, a display unit 23, an input unit 24, a communication unit 25, a camera 26, a voice input/output unit 27, etc. by a bus or the like. It However, the guardian terminal 2 is not limited to this and can take various configurations as appropriate.

The control unit 21 is composed of a CPU, ROM, RAM and the like. The CPU calls a program related to the processing of the guardian terminal 2 stored in the storage unit 22, a storage medium such as a ROM, into the work area on the RAM and executes the program to control each unit of the guardian terminal 2 to perform processing described later. To realize. ROM is a non-volatile memory that permanently holds programs such as boot programs and BIOS, and data. The RAM is a volatile memory, and temporarily stores programs and data loaded from the storage unit 22, ROM, etc., and includes a work area used by the control unit 21 to perform various processes.

The storage unit 22 is a flash memory or the like, and stores a program executed by the guardian terminal 2, data necessary for executing the program, an OS (operation system), and the like. These programs and data are read and executed by the control unit 21 as needed. Particularly in the present embodiment, the storage unit 22 stores an application program for the guardian terminal 2 to perform the processing described below.

The display unit 23 has a display device such as a liquid crystal panel.
The input unit 24 is for inputting various settings to the guardian terminal 2, and is a touch panel integrally provided with the display unit 23 in the present embodiment.

The communication unit 25 is a communication interface that mediates communication via a network or the like, and communicates with other terminals such as the staff terminal 3, the driver terminal 4, and the relative terminal 5.
The camera 26 is a digital camera provided in the guardian terminal 2.
The voice input/output unit 27 is a microphone, a speaker, or the like.

The staff terminal 3, the driver terminal 4, and the relative terminal 5 are predetermined computer terminals possessed by the staff of the deposit facility, the driver of the taxi company, and the relatives of the guardian, respectively, and similar to the guardian terminal 2. A mobile terminal having the above hardware configuration can be used.

FIG. 3 is a diagram showing a functional configuration of the delivery system 1. As shown in FIG. 3, in the delivery system 1, the guardian terminal 2 has a message transmitting unit 101, an encryption transmitting unit 102, a key transmitting unit 103, a decryption result receiving unit 104, a determining unit 105, a message receiving unit 106, and the like. ..

In the message transmission unit 101, the control unit 21 of the guardian terminal 2 sends a delivery request message including a child delivery request to each of the delivery person who delivers the child and the terminal of the delivery person via the communication unit 25. , A delivery instruction message including instructions for delivery of children.

Here, the delivery person means the delivery source when delivering the target, and the delivery person means the delivery destination when delivering the target. In the present embodiment, the child (the object of the transfer) is handed over between the staff of the custody facility and the driver of the taxi agency, and between the driver of the taxi agency and the relatives of the guardian. Is the transferee and the driver of the taxi company is the transferee. Therefore, the staff terminal 3 becomes the terminal of the transferee, and the driver terminal 4 becomes the terminal of the acceptor. In the latter case, the taxi driver is the deliverer, and the relatives of the guardian are the acceptors. Therefore, the driver's terminal 4 becomes the terminal of the transferor, and the relative terminal 5 becomes the terminal of the acceptor.

The cipher transmission means 102 is for the control unit 21 of the guardian terminal 2 to transmit the cipher to each of the transferor who hands over the child and the terminal of the transferee via the communication unit 25.

The key transmitting unit 103 is for the control unit 21 of the guardian terminal 2 to transmit the key via the communication unit 25 to each of the transferor who hands over the child and the terminal of the transferee.

The decryption result receiving means 104 is for the control unit 21 of the guardian terminal 2 to receive, via the communication unit 25, the decryption result of the above-mentioned encryption from each of the transferor and the terminal of the transferee who hand over the child. is there.

The determination means 105 is for determining whether the decryption results received by the control unit 21 of the guardian terminal 2 are respectively from the transferor who hands over the child and the terminal of the transferee. The delivery instruction message described above is transmitted according to the determination result of the determination unit 105.

In the message receiving means 106, the control unit 21 of the guardian terminal 2 passes through the communication unit 25, and the delivery completion including the fact that the delivery of the child is completed from each of the delivery person who delivers the child and the terminal of the acceptance person. It receives a message.

(2. Processing of delivery system 1)
Next, the processing performed by the delivery system 1 of this embodiment will be described. As described above, the delivery system 1 of the present embodiment allows the child of the child between the staff of the custody facility and the driver of the taxi company and between the driver of the taxi company and the relatives of the guardian. At the time of handing over, mutual authentication is performed between the two who hand over the child, and each procedure will be described below.

(2-1. Handing over children from the staff at the custody facility to the drivers of taxi companies)
FIG. 4 is a flowchart showing a procedure for transferring a child from a staff member (deliverer) of a deposit facility to a driver (underwriter) of a taxi company. The control unit 21 of the guardian terminal 2 executes S101, S103, S107 to S109, S111, and S114 of FIG. The control unit of the staff terminal 3 executes S102a, S104a to S106a, S110a, and S112a to S113a, and the control unit of the driver terminal 4 executes S102b, S104b to S106b, S110b, and S112b to S113b.

In the present embodiment, a guardian (client) who cannot directly pick up a child at a custody facility operates the guardian terminal 2 to start an application, and an application screen displayed on the guardian terminal 2 In accordance with the above instruction (not shown), a staff member of the deposit facility transmits a delivery request message including a message requesting the driver of the taxi operator to deliver the child to both the staff terminal 3 and the driver terminal 4 (S101). ). The staff terminal 3 and the driver terminal 4 receive the delivery request message (S102a, S102b) and display it.

FIG. 5A is an example of a delivery request message, and in the present embodiment, “from Mr. XX (name of staff or facility name of deposit facility, etc.) to Mr. ΔΔ (driver name of taxi company, etc.) The location 203 of the custody facility, which is the transferor, is displayed on the map 202, along with a message 201 requesting the delivery of the child such as □I request the delivery of the child (name of the child, etc.). ..

The guardian terminal 2 further transmits the encryption and key for mutual authentication to each of the staff terminal 3 and the driver terminal 4 (S103). The staff terminal 3 and the driver terminal 4 receive the encryption and the key from the guardian terminal 2 (S104a, S104b) and record them in the storage unit. The encryption and key transmitted from the guardian terminal 2 are different between the staff terminal 3 and the driver terminal 4.

The driver of the taxi company who received the delivery request message in S102b grasps the child's name and the location of the custody facility from the delivery request message, and picks up the child at the custody facility.

In the present embodiment, the taxi company and the driver have registered in advance with the custody facility side, and it is not the case that a stranger driver on the custody facility side suddenly came to accept the child. The taxi company name, driver's name, face image, registration number, etc. are recorded in the management device (not shown) on the deposit facility side, and the taxi company driver has an ID card according to the registration. And FIG. 6 shows an example of the ID card 100. For example, a taxi company name 110, a driver's name 120 and a face image 130, a registration number 140, etc. are displayed on the ID card 100.

The taxi driver who arrives at the custody facility faces the staff at the custody facility. The staff member looks at the ID card 100 and performs identity verification such as whether the name 120 of the ID card matches the name of the delivery request message described above or whether the face image 130 of the ID card 100 matches the face of the driver. ..

After that, the staff of the deposit facility operates the staff terminal 3, and decrypts the cipher received by the staff terminal 3 in S104a using the key possessed by the driver received by the driver terminal 4 in S104b (S105a). Is transmitted to the guardian terminal 2 (S106a). The driver's key may be verbally transmitted from the driver to the staff, or may be transmitted from the driver terminal 4 to the staff terminal 3.

On the other hand, the driver of the taxi operator also operates the driver terminal 4, and decrypts the cipher received by the driver terminal 4 in S104b using the staff key received by the employee terminal 3 in S104a (S105b). The result is transmitted to the guardian terminal 2 (S106b). Similarly to the above, the staff key may be verbally transmitted from the staff to the driver, or may be transmitted from the staff terminal 3 to the driver terminal 4.

The guardian terminal 2 receives the above decoding results from each of the staff terminal 3 and the driver terminal 4 (S107), compares each decoding result with a positive value recorded in the storage unit 22 in advance, and It is determined whether the decryption result is correct (S108).

If at least one of the decryption results is not correct (S108; NO), the guardian terminal 2 sends an authentication failure message indicating that the child cannot be handed over to the staff terminal 3 and the driver terminal 4 because the authentication could not be performed. It transmits to each (S109). The staff terminal 3 and the driver terminal 4 receive the authentication failure message (S110a, S110b) and display it.

FIG. 5B is an example of the authentication failure message, and in the present embodiment, authentication such as “Could not be authenticated. Please do not hand over □□-chan (child name etc.)”. A message 204 is displayed to the effect that the child cannot be handed over because it was not. In this example, the child is not handed over from the staff of the immediate deposit facility to the driver of the taxi company, but the child is handed over only when the parents can confirm the identity of both by a separate means. However, the process when the authentication cannot be performed is not limited to this.

On the other hand, if any of the decryption results is correct (S108; YES), the guardian terminal 2 determines that the mutual authentication of the staff of the deposit facility and the driver of the taxi company has been completed, and sends a delivery instruction message including an instruction to deliver the child. It transmits to each of the staff terminal 3 and the driver terminal 4 (S111). The staff terminal 3 and the driver terminal 4 receive the delivery instruction message (S112a, S112b) and display it.

FIG. 5C is an example of the delivery instruction message, and in the present embodiment, the text of the delivery instruction such as “Authentication is completed. Please deliver □□-chan (child's name etc.)”. 205 is displayed. As a result, the staff at the deposit facility will hand over the children to the driver of the taxi company.

The staff of the custody facility and the driver of the taxi company who handed over the children operate the staff terminal 3 and the driver terminal 4 respectively to send a delivery completion message including the fact that the delivery is completed to the guardian terminal 2 ( S113a, S113b). The guardian terminal 2 receives the delivery completion message from each of the staff terminal 3 and the driver terminal 4 (S114) and displays it.

FIG. 5D is an example of the delivery completion message transmitted from the driver terminal 4, and in the present embodiment, “Mr. XX (employee name of the deposit facility or facility name, etc.) to Mr. Driver's terminal 4 by GPS (Global Positioning System), etc., along with a message 206 that the transfer of the child is completed, such as □□-chan (child's name etc. is completed) to the driver's name etc.) The terminal position 208 of the driver terminal 4 acquired by is displayed on the map 207. The delivery completion message transmitted from the staff terminal 3 is almost the same, but the terminal position 208 of the staff terminal 3 is displayed on the map 207 instead of the terminal position 208 of the driver terminal 4.

Parents can check the delivery completion message to confirm that the children have been handed over between the staff at the deposit facility and the driver of the taxi company, and that the delivery has been done at the correct place (the deposit facility). ..

(2-2. Handing over the child from the taxi driver to the relatives of the guardian)
After that, the driver of the taxi company sends the child to the relatives of the guardian and entrusts the children to the relatives. FIG. 7 is a flow chart showing a procedure for delivering a child from a driver (deliverer) of a taxi company to a relative (acceptor) of a guardian. The control unit 21 of the guardian terminal 2 executes S201, S203, S207 to S209, S211, and S214 in FIG. 7. The control unit of the driver terminal 4 executes S202a, S204a to S206a, S210a, and S212a to S213a, and the control unit of the relative terminal 5 executes S202b, S204b to S206b, S210b, and S212b to S213b.

The procedure of FIG. 7 is the same as that of the “deposit facility staff”, “staff terminal 3”, “cab driver's driver”, and “driver terminal 4” of the procedure described in FIG. 4, respectively. It is almost the same as the one read as "terminal 4", "parent's relative", and "relative terminal 5", but will be briefly described below.

That is, the guardian (client) who confirms that the child has been handed over to the driver of the taxi company from the staff of the deposit facility by the delivery completion mail is an application screen (not shown) displayed on the guardian terminal 2. ) According to the above instruction, a delivery request message including a message requesting the delivery of the child from the driver of the taxi company to the relatives of the guardian is transmitted to both the driver terminal 4 and the relative terminal 5 (S201). The driver terminal 4 and the relative terminal 5 receive the delivery request message (S202a, S202b) and display it.

FIG. 8A shows an example of the delivery request message. In this embodiment, "I request the handing over of □□-chan (such as the name of a child) from Mr. △△ (such as the name of a taxi driver) to Mr. XX (such as the name of a relative of the guardian)." A message 201 requesting the delivery of such a child and the location 203 of the relative of the guardian who is the underwriter are displayed on the map 202.

Moreover, the guardian terminal 2 transmits the encryption and key for mutual authentication to each of the driver terminal 4 and the relative terminal 5 (S203). The driver terminal 4 and the relative terminal 5 receive the encryption and the key from the guardian terminal 2 (S204a, S204b) and record them in the storage unit.

The driver of the taxi company who received the request in S202a heads to the relatives of the guardian. In the present embodiment, the relatives of the guardian have pre-registered with the taxi company, and the driver of the taxi company does not hand over the child to a stranger. It is assumed that the relative's name, face image, registration number, etc. are recorded in a management device (not shown) on the taxi company side, and the relative has an ID card according to the registration. The ID card, for example, omits the taxi company name 110 from the ID card 100 of FIG. 6 and displays the relative's name, face image, and registration number instead of the driver's name 120, face image 130, and registration number 140. ..

The driver of the taxi company who arrives at the relative of the guardian faces the relative and looks at the ID card held by the relative and confirms the relative's identity as described above. After that, the driver of the taxi operator operates the driver terminal 4 to decrypt the cipher received by the driver terminal 4 by using the key of the relative received by the relative terminal 5 (S205a), and the decryption result is protected. It is transmitted to the terminal 2 (S206a). Similarly, the relative of the guardian also operates the relative terminal 5 to decrypt the cipher received by the relative terminal 5 by using the key held by the driver at the driver terminal 4 (S205b), and the decrypted result is the guardian. It is transmitted to the terminal 2 (S206b).

The guardian terminal 2 receives the decryption result from each of the staff terminal 3 and the driver terminal 4 (S207), and determines whether or not each decryption result is correct in the same manner as described above (S208).

If at least one of the decryption results is not correct (S208; NO), the guardian terminal 2 sends an authentication failure message similar to that in FIG. 5B to each of the driver terminal 4 and the relative terminal 5 (S209). .. The driver terminal 4 and the relative terminal 5 receive the authentication failure message (S210a, S210b) and display it.

On the other hand, if any decryption result is correct (S208; YES), the guardian terminal 2 determines that the mutual authentication of the driver of the taxi company and the relatives of the guardian has been completed, and a delivery instruction message similar to that in FIG. 5C. Is transmitted to each of the driver terminal 4 and the relative terminal 5 (S211). The driver terminal 4 and the relative terminal 5 receive the delivery instruction message (S212a, S212b) and display it.

By this delivery instruction message, the driver of the taxi company delivers the child to the relatives of the guardian. The driver of the taxi company and the relative of the guardian who handed over the child operate the driver terminal 4 and the relative terminal 5 respectively to send a delivery completion message including the fact that the delivery is completed to the guardian terminal 2 ( S213a, S213b). The guardian terminal 2 receives the delivery completion message from each of the driver terminal 4 and the relative terminal 5 (S214) and displays it.

FIG. 8B is an example of the delivery completion message transmitted from the driver terminal 4. In this embodiment, "the delivery of □□-chan (name of children, etc.) from Mr. △△ (driver name of taxi company, etc.) to Mr. XX (name of relatives of guardian, etc.) is completed." The terminal position 208 of the driver terminal 4 is displayed on the map 207 together with the message 206 that the transfer of the child is completed. The delivery completion message transmitted from the relative terminal 5 is almost the same, but the terminal position 208 of the relative terminal 5 is displayed on the map 207 instead of the terminal position 208 of the driver terminal 4.

Parents can check the delivery completion message to confirm that the children have been handed over between the taxi driver and their relatives, and that the delivery has been done in the correct location (the location of the relatives). , After this, I will pick up my children from my relatives.

As described above, in the present embodiment, the guardian terminal 2 performs mutual authentication between the child who delivers the child and the person who receives the child, so that the parent terminal 2 performs a predetermined encryption on both the person who delivers the child and the person who accepts the child. Also, it is possible to ensure on the system that the person who executes the transfer (the person who can be trusted) is transmitting the key. If either the deliverer or the acceptor has a fake encryption or key, authentication is not possible and spoofing is prevented.

Thereby, in the delivery system 1 of the present embodiment, it is possible to improve the safety of delivery of children. For example, a parent may request a driver of a taxi company with no personal connection to transfer children. Even, you can get a sense of security.

In addition, since the guardian terminal 2 makes a determination regarding mutual authentication (S108, S208) on the program, mutual authentication between the acceptor and the transferor can be automatically performed even if the guardian does not have enough time. There are also advantages. For example, if the recipient and the recipient are confirmed by telephone, the guardian needs to take time for that. Further, since there is a risk of spoofing because the confirmation by telephone relies only on the voice, the present embodiment is also advantageous in that such a risk can be eliminated.

Further, in the present embodiment, after the mutual authentication between the transferee and the transferee is completed, the transferee message is transmitted to the terminals of the transferee and the transferee, so that the transferee of the child may be transferred to the transferee. Can inform people. However, the delivery instruction message may be transmitted to at least the terminal of the delivery person.

Further, in the present embodiment, the delivery completion message allows the guardian to confirm that the delivery of the child has been completed and that the delivery of the child has been performed in the correct place. In the present embodiment, the delivery completion message is transmitted from each of the terminal of the delivery person and the terminal of the delivery person, but it may be transmitted to the guardian terminal 2 from either the terminal of the delivery person or the terminal of the delivery person.

Further, by transmitting the key used for decryption from the guardian terminal 2 to the terminals of the deliverer and the acceptor, the key required for decryption can be changed each time, and the security is high and the safety of delivery is improved.

However, the present invention is not limited to the above embodiment. For example, in the present embodiment, the object to be handed over is a child, but the present invention is not limited to this, and may be a pet or a car, for example. The client, the deliverer, and the acceptor differ depending on the delivery target, but in this case as well, it is possible to ensure that the authentic subject of the trustworthy transferee is delivered to the trustworthy receiver. , It is possible to increase the safety of the delivery of the target.

Further, in the present embodiment, the encryption and the key are transmitted to both the delivery person and the delivery person to perform mutual authentication.However, only the encryption is transmitted to one of the delivery person and the delivery person, and the delivery person and the delivery person receive it. Only the key may be transmitted to the other terminal of the person, and authentication may be performed based on the decryption result obtained by decrypting the encryption using the key.

It is also possible to send only the cipher to one of the terminals of the transferee and the transferee, and to authenticate the cipher with the decryption result obtained by decrypting the cipher with the key held in advance by the other of the transferee and the transferee. It is possible. Accordingly, it is possible to at least ensure on the system that one of the transferee and the transferee is an executor (trustworthy person) who correctly transmits the predetermined cipher from the guardian terminal 2. is there. The other of the transferee and the transferee is, for example, a person whose parents are particularly reliable.

For example, when handing over children between the staff of the custody facility and the driver of a taxi company, if the staff of the custody facility is particularly reliable, the guardian terminal 2 uses the secret key to create a cipher created from plaintext to the driver. The driver terminal 4 transmits the decryption result to the parent terminal 2 by decrypting the ciphertext to the original plaintext by using the public key held by the staff in advance. The guardian terminal 2 determines whether the decryption result is correct. If the decryption result is positive, the guardian terminal 2 sends a delivery instruction message to the staff terminal 3, and if the decryption result is no, it sends an authentication failure message to the staff terminal 3.

In the above example, the decryption result is transmitted from the driver terminal 4 to the guardian terminal 2, but by transmitting the cipher received by the driver terminal 4 from the driver terminal 4 to the staff terminal 3, the cipher is disclosed. It is also possible to transmit the decryption result decrypted by the key from the staff terminal 3 to the guardian terminal 2.

Furthermore, the content of each message described in FIGS. 5A to 5D and FIGS. 8A and 8B is not particularly limited. For example, the delivery request message in FIG. 5(a) may include cautions regarding children. FIG. 9(a) is an example of this. By including allergies that the child has as precautionary notes 210, the taxi driver handles the child with caution and gives the child sweets and the like containing allergen sources. To prevent problems. The precautions 210 may be included at least in the delivery request message transmitted to the acceptor's terminal (driver terminal 4 in the example of FIG. 9A). Similar notes can be included in the delivery instruction message.

Further, in the present embodiment, the delivery request is made at the time of handing over the child between the staff of the custody facility and the driver of the taxi company, and at the time of handing over the child between the driver of the taxi company and the relatives of the guardian. Although the message is sent, the delivery request message may be sent only once at the beginning.

FIG. 9B is an example of a delivery request message in this case, in which "△△ (the driver name of a taxi agent, etc.) changes from ○○ (the staff name or facility name of the deposit facility) to □□ ( I will accept the child's name etc. and hand it over to Mr. XX (name of parents' relatives etc.) such as staff of a custody facility, taxi driver, parent's relatives 3 people A message 209 requesting the delivery of children between the students is displayed. Further, the location 203 of the deposit facility and the location 212 of the relative are displayed on the maps 202 and 211, respectively.

Further, in the present embodiment, the driver of the taxi company carries out the transportation of the children, but other companies can also carry out the transportation as long as there is a certain degree of reliability on behalf of the guardian. However, there is an advantage that a driver of a local taxi company is preferable because he/she has a prior knowledge of a child's custody facility and the driver often knows the staff of the custody facility.

Further, in the present embodiment, the child is entrusted to the relative of the guardian by handing over the child, but the parent is not limited to the relative, and the guardian may be trusted. Since taxi companies have cars (taxi) as a means of transportation, even children who are a little far away can go to check in children. Alternatively, if the taxi company has a temporary child custody facility, the facility may temporarily store the children. In this case, the procedure described in FIG. 7 is unnecessary.

In addition, in the present embodiment, the driver has the ID card 100 including the face image 130 and the like in order to confirm the identity when the child is transferred from the staff of the deposit facility to the driver of the taxi company. The face image may be included in the delivery request message, and the staff member of the deposit facility may compare the face image with the driver's face to confirm the identity. Alternatively, the staff terminal 3 may acquire a face image associated with the registration number 140 of the ID card 100 from a management device (not shown) on the depositing facility side and compare this with the driver's face. This also applies to the identification of relatives when a child is transferred from a taxi driver to a relative of a guardian.

The preferred embodiments of the present invention have been described above with reference to the accompanying drawings, but the present invention is not limited to the examples. It is obvious to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea disclosed in the present application, and it is obvious that those modifications and alterations also belong to the technical scope of the present invention. Understood.

1: Delivery system 2: Guardian terminal 3: Staff terminal 4: Driver terminal 5: Relatives terminal 100: ID card 101: Message transmitting means 102: Encryption transmitting means 103: Key transmitting means 104: Decryption result receiving means 105: Judgment Means 106: Message Receiving Means

Claims (8)

The terminal of the client who requests the delivery of the target between the deliverer and the acceptor,
Message transmitting means for transmitting a delivery request message including a request for delivery of the target to each of the terminals of the deliverer and the acceptor,
An encryption transmitting means for transmitting an encryption to at least one terminal of the transferor and the acceptor,
Decryption result receiving means for receiving the decryption result obtained by decrypting the cipher received by the one terminal with the key of the other of the transferee and the acceptor,
Determination means for determining whether or not the decryption result is correct,
A terminal characterized by having. 2. The terminal according to claim 1, further comprising key transmitting means for transmitting the key to the other terminal of the transferee and the transferee. The cipher transmission means further transmits cipher to the other terminal,
The key transmitting means further transmits a key to the one terminal,
The decryption result receiving means further receives a decryption result obtained by decrypting the cipher received by the other terminal with the key received by the one terminal,
The terminal according to claim 2, wherein the determination unit determines whether or not the decryption result of the cipher received by the one terminal and the decryption result of the cipher received by the other terminal are correct. 4. The message transmitting means transmits at least a delivery instruction message including a delivery instruction to at least the terminal of the delivery person in accordance with the result of the determination made by the determining means. The listed terminal. The terminal according to any one of claims 1 to 4, wherein the delivery request message transmitted to at least the terminal of the acceptor includes a caution regarding the target. A message receiving means for receiving a delivery completion message containing a message that the delivery of the target has been completed from at least one terminal of the delivery person and the delivery person,
The terminal according to any one of claims 1 to 5, wherein the delivery completion message includes the terminal position of the terminal. A delivery system having a client terminal for requesting delivery of an object between a transferor and a transferee, a transferee's terminal, and a transferee's terminal,
The client terminal is
Message transmitting means for transmitting a message including a request for delivery of the target to each of the terminal of the transferee and the terminal of the transferee,
An encryption transmitting means for transmitting an encryption to at least one terminal of the transferor and the acceptor,
Decryption result receiving means for receiving the decryption result obtained by decrypting the cipher received by the one terminal with the key of the other of the transferee and the acceptor,
Determination means for determining whether or not the decryption result is correct,
A delivery system characterized by having. The terminal of the client who requests the delivery of the target between the deliverer and the acceptor,
Message transmitting means for transmitting a message including a request for delivery of the target to each of the terminal of the transferee and the terminal of the transferee,
An encryption transmitting means for transmitting an encryption to at least one terminal of the transferor and the acceptor,
Decryption result receiving means for receiving the decryption result obtained by decrypting the cipher received by the one terminal with the key of the other of the transferee and the acceptor,
Determination means for determining whether or not the decryption result is correct,
A program for functioning as a terminal having.

Images