JP2022154733A - Issuance device, authentication device, authentication system, issuance method, and information code - Google Patents

Abstract

To enable authentication using an information code that prevents falsification.SOLUTION: An issuance device is provided, comprising a computation unit configured to compute feature points of image data including an identification target, signature data generation unit configured to generate digital signature data including information on the feature points, and an issuance unit configured to issue an information code including the image data and a code for the digital signature data.SELECTED DRAWING: Figure 2

Description

TECHNICAL FIELD The present invention relates to an issuing device, an authentication device, an authentication system, an issuing method, and an information code.

2. Description of the Related Art There is a technique for providing an information code that enables a quick visual grasp of the type of code content included in a code region of a QR code (registered trademark) (see Patent Document 1). In Patent Document 1, a specific pattern area in which a specific pattern having a predetermined shape is arranged and a data recording area in which data is recorded by a plurality of types of cells are provided inside the code area. In Patent Document 1, furthermore, a display area is provided in the empty area in which at least a predetermined display object different from the cell and the specific pattern is displayed, and at least a part of the code area is formed into a shape or pattern that specifies the type of the display object. , color, or a combination thereof.

By using the technique of Patent Document 1, personal information can be recorded in the data recording area, including facial photograph data in the information code.

JP 2018-190458 A

However, the conventional information code containing the photograph of the face can be copied. Therefore, the information code can be easily falsified by replacing the face photo in the information code. On the other hand, an identification card with a built-in IC chip has the problem that the cost of the IC chip is high, and although the IC chip itself is difficult to tamper with, the face picture itself on the identification card can be easily tampered with. rice field.

The present invention has been made in view of the above circumstances, and provides an issuing device, authentication device, authentication system, issuing method, and information code that enable authentication using an information code that prevents falsification. aim.

The issuing device of the first aspect includes a calculation unit that calculates feature points of image data including an identification target, a signature data creation unit that creates digital signature data including information on the feature points, the image data, and the digital an issuing unit for issuing an information code containing the signature data code.

The issuing device of the first aspect creates digital signature data including feature points of image data and includes it in the information code. Therefore, the image data can be collated, and falsification of the image data becomes difficult.

The issuing device of the second aspect further includes identification information of the identification target in the information code or the digital signature data.

According to the issuing device of the second aspect, it is possible to ensure the certainty of collation based on the feature points by further using the identification information.

In the issuing device of the third aspect, the issuing unit creates the information code so that the image data is arranged in a predetermined range within the information code.

According to the issuing device of the third aspect, image data can be arranged according to specifications.

The issuing device of the fourth mode sets the feature points of the image data to the feature points of the target portion included in the image data, and creates the digital signature data including the feature points of the target portion.

According to the issuing device of the fourth mode, it is possible to design the features to be included in the digital signature data according to the specifications.

An authentication device according to a fifth aspect includes an acquisition unit for acquiring image data including an identification target and an information code including a code of digital signature data including information on feature points of the image data; a decoding unit for decoding the digital signature data and extracting the feature points of the image data contained in the digital signature data as second feature points; an authentication unit that compares the first feature point with the second feature point and obtains an authentication result.

An authentication system according to a sixth aspect is an authentication system including a terminal, an issuing device, and an authentication device, wherein the terminal transmits image data including an identification target to the issuing device, and the issuing device includes a calculation unit to calculate feature points of the image data, a signature data creation unit creates digital signature data including information on the feature points, and an issuing unit issues an information code including the code of the image data and the digital signature data The authentication device acquires the information code by the acquisition unit, the extraction unit extracts the feature point of the image data of the acquired information code as a first feature point, and the decoding unit extracts the acquired Decrypting the digital signature data of the information code, extracting feature points of the image data included in the digital signature data as second feature points, 2 feature points to determine the authentication result.

According to the authentication device of the fifth aspect and the authentication system of the sixth aspect, the image data in the information code and the characteristic points of the image data included in the digital signature data are compared. Therefore, falsification of image data can be easily determined. It also enables a simple and highly reliable authentication mechanism.

The issuance method of the seventh aspect includes calculating feature points of image data including an identification target, creating digital signature data including information on the feature points, and creating an information code including a code of the image data and the digital signature data. to cause the computer to execute the process.

The issuing method of the seventh aspect creates digital signature data including feature points of image data and includes it in the information code. Therefore, the image data can be collated, and falsification of the image data becomes difficult.

The information code of the eighth aspect includes image data including an identification target, and a code of digital signature data created to include feature point information of feature points calculated for the image data.

The information code of the eighth aspect includes code of image data and digital signature data including feature points of the image data. Therefore, image data can be collated with the information code alone, making falsification of image data difficult.

ADVANTAGE OF THE INVENTION According to this invention, the authentication using the information code which suppresses falsification is enabled.

FIG. 4 is a diagram schematically showing a SidQR code generated based on ID photo data; 1 is a schematic configuration diagram of an authentication system according to an embodiment of the present invention; FIG. It is a figure which shows the functional structure of the issuing device of embodiment of this invention. FIG. 10 is a diagram showing an example of generating a SidQR code by synthesizing ID photo data and a process code; It is a figure which shows the functional structure of the authentication apparatus of embodiment of this invention. 3 is a block diagram showing the hardware configuration of an issuing device and an authentication device; FIG. It is a flowchart which shows the issuing process in the issuing apparatus which concerns on embodiment of this invention. 4 is a flow chart showing authentication processing in the authentication device according to the embodiment of the present invention;

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

First, an outline of an embodiment of the present invention will be described.

In the embodiment of the present invention, ID photo data is incorporated into a QR code (registered trademark), and facial feature points of the ID photo data are incorporated into digital signature data and stored in the QR code (registered trademark), which is called a SidQR code. Propose a method. By incorporating the ID photo data into the digital signature data in this manner, a QR code (registered trademark) containing a face photo that cannot be altered can be created. SidQR code 50 is an example of the information code of the present invention.

FIG. 1 is a diagram schematically showing a SidQR code generated based on ID photo data. The upper part of FIG. 1 is ID photo data 40 and the lower part is SidQR code 50 . The SidQR code 50 arranges the face part 41 of the ID photo data 40 in the central area, and arranges the two-dimensional code in the area other than the face part 41 of the ID photo data 40 . Digital signature data, personal information that does not need to be anonymized, and inspection points are arranged as white or black two-dimensional codes. The digital signature data is created using the feature points of the face portion 41 of the ID photo data 40. - 特許庁A check point is a redundant bit added by encoding in an error correcting code. Note that the arrangement format of the SidQR code 50 is an example, and other arrangement formats may be used. In addition, in the above example, the case where the identification photo data 40 is incorporated into the SidQR code 50 as an identification card has been described as an example, but it is not limited to this. Any image data from which feature points representing an identification target can be extracted can be incorporated into the SidQR code 50 . As described above, the SidQR code 50 can be authenticated by a code system that can prevent falsification.

Such a SidQR code 50 can be used just by displaying it on the screen or printing it and making it read, like a normal QR code (registered trademark). Therefore, an identification card or the like that cannot be falsified can be produced without using an IC chip. In addition, even if the ID photo data 40 is forged, the SidQR code 50 can easily determine forgery without accessing the authenticity server by checking using the feature points incorporated in the digital signature data. In addition, by checking the digital signature data online, it is possible to confirm whether or not the digital signature data has been issued by a legitimate issuer. As a result, even if a plurality of or a large number of SidQR codes 50 of one legitimate product are copied and pasted, it is possible to immediately determine invalidity, thereby reducing damage. In addition, it can be used for documents that require that facial photographs have not been tampered with. For example, it can be used for public institutions that require confirmation of personal identification and online transactions that require electronic authentication.

FIG. 2 is a schematic configuration diagram of the authentication system 100 of the embodiment of the present invention. In the authentication system 100 shown in FIG. 2, an issuing device 110, a terminal 120, a printing device 130, and an authentication device 140 are connected via a network N. FIG.

The issuing device 110 is a device that issues the SidQR code 50 in response to an issuing request from the terminal 120 . The issued SidQR code 50 is sent to the terminal 120 or sent to the printer 130 to be printed according to the issue request. A specific configuration of the issuing device 110 will be described later.

The terminal 120 is a terminal operated by a user, and is a terminal having a display interface and a user interface such as a smartphone, tablet, or personal computer. The terminal 120 transmits the ID photo data 40 and the personal information to the issuing device 110 along with the request for issuing the SidQR code 50 according to the user's operation. The issuing device 110 performs processing for issuing the SidQR code 50 with the issuing request as a trigger. The issuance request includes issuance method information that determines whether the SidQR code 50 is to be printed by the printer 130 or returned to the terminal 120 as data. Personal information is arbitrary information such as name and affiliation. Also, the terminal 120 can display the SidQR code 50 via the display interface. It is possible to select whether to include personal information in the SidQR code 50 or not.

The printer 130 is a device that prints the received SidQR code 50 . If the SidQR code 50 is not printed and used, the configuration of the authentication system 100 does not need to include the printing device 130 .

The authentication device 140 is a device that verifies the SidQR code 50 in response to an authentication request and outputs an authentication result.

The issuing device 110 will be described. FIG. 3 is a diagram showing the functional configuration of the issuing device 110 according to the embodiment of the invention. As shown in FIG. 3 , the issuing device 110 includes a preprocessing unit 112 , a calculating unit 114 , a signature data creating unit 116 and an issuing unit 118 .

The issuing device 110 receives the issuing request, the ID photo data 40, and the personal information from the terminal 120, and performs the following processes.

The preprocessing unit 112 detects the face part 41 of the ID photo data 40 . General image processing software or the like may be used for detection. Note that the preprocessing unit 112 may receive a plurality of ID photo data 40 and search for the ID photo data 40 that matches the SidQR code 50 . When searching for the ID photo data 40, for example, ID photo data 40 having the same size as the SidQR code 50 and the number of symbols of RS1 overlapping the face part 41=the maximum number of error-correctable symbols of RS1 is searched. do.

The calculation unit 114 calculates feature points of the ID photo data 40 . The characteristic point is calculated, for example, by binarizing the ID photo data 40 for each pixel. Further, the feature points include not only binarized information but also other feature amounts obtained as image information of the ID photo data 40, such as color information, local feature amounts, and other multidimensional values. It may be used as long as it can be stored in . Further, the feature points may be calculated by applying the ID photo data 40 to the size of the QR code and binarizing each cell. Note that the feature points of the face portion 41 of the ID photo data 40 are used to create the digital signature data. In addition, in the generation of the SidQR code 50, data obtained by binarizing the entire ID photo data 40 is used when creating the code 45 in the process.

The signature data creation unit 116 creates digital signature data including information on the feature points of the face portion 41 of the ID photo data 40 . The digital signature data is encrypted by a general digital signature method and output as a padding code for the SidQR code 50 . As a countermeasure against the case where the facial feature points match even if the ID photo is of someone else, it is possible to add personal information such as an individual identification number to the digital signature data. In this case, the personal information and the feature points of the face portion 41 are connected to create digital signature data. In this way, it is possible to create digital signature data for a portion of image data that is particularly desired to be verified. Although the target portion used for the digital signature data is the face portion 41, it is not limited to this. can be selected as the target portion to be This makes it possible to design the SidQR Code 50 more flexibly.

The issuing unit 118 generates the ID photo data 40 and the SidQR code 50 including the code of the digital signature data, and issues it to the user. The process of generating the SidQR code 50 will be described below. FIG. 4 is a diagram showing an example of generating a SidQR code 50 by synthesizing the identification photo data 40 and the process code 45. As shown in FIG. In FIG. 4, (1) is the identification photo data 40, (2) is the process code 45, and (3) is the SidQR code 50 generated by synthesizing (1) and (2).

In generating the SidQR code 50, first, a white or black two-dimensional code is added to the identification photo data 40 to create a code 45 in the process. A two-dimensional code is arranged by obtaining a bit string of personal information and digital signature data and RS-encoding it.

Next, a SidQR code 50 is generated by synthesizing the identification photo data 40 and the code 45 in the process. In synthesizing, the face portion 41 detected for the ID photo data 40 is not corrected, that is, the face portion 41 is prevented from including the two-dimensional code. Therefore, in the SidQR code 50, the face portion 41 is excluded from the correction target and processed as noise, and only the image of the identification photo data 40 is included for verification. For correction targets other than the face portion 41, for example, if the two-dimensional code of the code 45 in the process is black, the luminance is set to 60, and if it is white, the luminance is set to 240, and black and white are added. The process code 45 also includes an alignment pattern 46 at a position overlapping the face portion 41 . Therefore, visibility is improved by excluding the alignment pattern 46 of the face portion 41 . Thus, the SidQR code 50 is generated. In the SidQR code 50, inspection points are arranged in the upper part of the outer frame, the left and right frames, and other than the face part 41 of the ID photo data 40, and the digital signature data is arranged in the lower frame. The SidQR code 50 may define in which range the ID photo data 40 is arranged according to specifications. Note that the arrangement in the SidQR code 50 is an example, and other arrangement configurations are possible.

The issuing unit 118 generates and issues the SidQR code 50 as described above.

The authentication device 140 will be explained. FIG. 5 is a diagram showing the functional configuration of the authentication device 140 according to the embodiment of the invention. As shown in FIG. 5 , authentication device 140 includes acquisition section 142 , extraction section 144 , decryption section 146 , and authentication section 148 .

The obtaining unit 142 obtains the SidQR code 50 . The SidQR code 50 can be acquired while being displayed on the display interface of the terminal 120 or printed matter. Also, the SidQR code 50 is acquired by a QR code reader equipped with a camera capable of reading two-dimensional codes and recognizing images. If the personal information is not included in the digital signature data and is stored in the inspection point, it can be read even by a QR code reader that does not have a camera capable of image recognition. Therefore, it is also possible to perform authentication by combining identification information such as personal information stored in the inspection point and the matching result of the feature points.

The extraction unit 144 extracts the feature points of the facial part 41 of the ID photo data 40 included in the SidQR code 50 as first feature points.

The decoding unit 146 decodes the digital signature data included in the SidQR code 50, and extracts the feature points of the facial part 41 of the ID photo data 40 included in the digital signature data as second feature points.

The authentication unit 148 compares the extracted first feature points and second feature points to obtain an authentication result. If the feature points match in the collation, an authentication result indicating that the SidQR code 50 has been successfully authenticated is output. If the feature points do not match in the collation, an authentication result indicating that the authentication of the SidQR code 50 has failed is output. It should be noted that the method of using the authentication result may be appropriately designed according to the usage scene. For example, if it is used for authentication using an employee ID card, it can be used for entering a locked auto-locked room, logging in to a terminal, and the like.

Even if the SidQR code 50 is camouflaged and the facial part 41 is changed, the first feature point of the malicious user's facial part 41 and the second feature point of the facial part 41 in the digital signature data are different. Authentication fails. In addition, since verification can be performed using only the information contained in the SidQR code 50, the authentication result can be obtained without online communication.

FIG. 6 is a block diagram showing the hardware configuration of the issuing device 110 and the authentication device 140. As shown in FIG. As shown in FIG. 6, the issuing device 110 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a storage 14, an input unit 15, a display unit 16, and a communication interface ( I/F) 17. Each component is communicatively connected to each other via a bus 19 . Note that the terminal 120 and the printing device 130 can also be realized by a similar hardware configuration.

The CPU 11 of the issuing device 110 is a central processing unit that executes various programs and controls each section. That is, the CPU 11 reads the issuing program from the ROM 12 or the storage 14 and executes the issuing program using the RAM 13 as a work area. The CPU 11 performs control of the above components and various arithmetic processing according to the issuing program stored in the ROM 12 or the storage 14 . In this embodiment, the ROM 12 or storage 14 stores an issuing program.

The ROM 12 stores various programs and various data. The RAM 13 temporarily stores programs or data as a work area. The storage 14 is configured by a storage device such as a HDD (Hard Disk Drive) or an SSD (Solid State Drive), and stores various programs including an operating system and various data.

The input unit 15 includes a pointing device such as a mouse and a keyboard, and is used for various inputs.

The display unit 16 is, for example, a liquid crystal display, and displays various information. The display unit 16 may employ a touch panel system and function as the input unit 15 .

The communication interface 17 is an interface for communicating with other devices such as terminals, and uses standards such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark), for example.

The CPU 21 of the authentication device 140 is a central processing unit that executes various programs and controls each section. That is, the CPU 21 reads the authentication program from the ROM 22 or the storage 24 and executes the authentication program using the RAM 23 as a work area. The CPU 21 performs control of each configuration and various arithmetic processing according to an authentication program stored in the ROM 22 or the storage 24 . In this embodiment, the ROM 22 or storage 24 stores an authentication program. Other configurations are the same as those of the issuing device 110 .

The hardware configurations of the issuing device 110 and the authentication device 140 have been described above.

Next, operation of the authentication system 100 according to the embodiment of the present invention will be described. Since the action of the authentication system 100 is divided into the issuing process by the issuing device 110 and the authentication process by the authentication device 140, each will be described below.

FIG. 7 is a flow chart showing issuing processing in the issuing device 110 according to the embodiment of the present invention. In the issuing process, the CPU 11 of the issuing device 110 reads out the issuing program and various data from the ROM 12 and executes the issuing process.

In step S100, the CPU 11 receives an issue request, the ID photo data 40, and personal information from the terminal 120. FIG.

At step S 102 , the CPU 11 detects the face portion 41 of the ID photo data 40 .

In step S<b>104 , the CPU 11 calculates feature points of the ID photo data 40 . Here, the feature points of the face portion 41 are included in the calculation.

In step S 106 , the CPU 11 creates digital signature data including information on feature points of the face portion 41 of the ID photo data 40 .

In step S108, the CPU 11 generates the SidQR code 50 including the ID photo data 40 and the code of the digital signature data.

In step S110, the CPU 11 issues the generated SidQR code 50 to the user. The SidQR code 50 is issued by returning it as data to the terminal 120 or sending it to the printing device 130 for printing according to the information on the issuing method of the issue request. The above is the description of the issuing process.

FIG. 8 is a flow chart showing authentication processing in the authentication device 140 according to the embodiment of the present invention. The authentication process is performed by the CPU 21 of the authentication device 140 reading the authentication program and various data from the ROM 22 and executing the authentication processing.

In step S200, the CPU 21 acquires the SidQR code 50. FIG.

In step S202, the CPU 21 extracts the feature points of the face portion 41 of the ID photo data 40 included in the SidQR code 50 as first feature points.

In step S204, the CPU 21 decrypts the digital signature data included in the SidQR code 50, and extracts the feature points of the face portion 41 of the ID photo data 40 included in the digital signature data as second feature points.

In step S206, the CPU 21 collates the extracted first feature points with the second feature points.

In step S208, the CPU 21 determines whether or not the matching result of the feature points in step S206 matches. If it is determined that they match, the process proceeds to step S210, and if it is determined that they do not match, the process proceeds to step S212.

In step S210, the CPU 21 outputs an authentication result indicating that the SidQR code 50 has been successfully authenticated.

In step S212, the CPU 21 outputs an authentication result indicating that the SidQR code 50 has failed authentication. The above is the description of the authentication process.

As described above, according to the authentication system 100 of the embodiment of the present invention, authentication using the SidQR code 50 that prevents falsification is possible.

In addition, by using the SidQR code 50, it is possible to easily construct a highly reliable authentication mechanism. Moreover, since an IC card is not used, the authentication mechanism can be constructed at low cost.

The present invention is not limited to the above-described embodiments, and various modifications and applications are possible without departing from the gist of the present invention.

100 Authentication system 110 Issuing device 112 Preprocessing unit 114 Calculation unit 116 Signature data creation unit 118 Issuing unit 120 Terminal 130 Printing device 140 Authentication device 142 Acquisition unit 144 Extraction unit 146 Decryption unit 148 Authentication unit

Claims (8)

a calculation unit that calculates feature points of image data including an identification target;
a signature data creation unit that creates digital signature data including information on the feature points;
an issuing unit that issues an information code containing the code of the image data and the digital signature data;
Issuing device including. 2. The issuing device according to claim 1, wherein the information code or the digital signature data further includes identification information of the identification target. 3. The issuing device according to claim 1, wherein said issuing unit creates said information code so as to arrange said image data in a predetermined range within said information code. The feature point of the image data is a feature point of a target portion included in the image data, and the digital signature data including the feature point of the target portion is created. issuing device. an acquisition unit that acquires image data including an identification target and an information code including a code of digital signature data including information on feature points of the image data;
an extraction unit that extracts a feature point of the image data as a first feature point;
a decoding unit that decodes the digital signature data and extracts feature points of the image data included in the digital signature data as second feature points;
an authentication unit that compares the extracted first feature points and the second feature points and obtains an authentication result;
authentication device including An authentication system including a terminal, an issuing device, and an authentication device,
The terminal transmits image data including an identification target to the issuing device,
The issuing device calculates feature points of the image data by a calculation unit,
creating digital signature data including information on the feature points by a signature data creation unit;
an issuing unit issues an information code including the code of the image data and the digital signature data;
The authentication device acquires the information code by an acquisition unit,
an extraction unit extracting a feature point of the image data of the acquired information code as a first feature point;
a decryption unit decrypts the digital signature data of the acquired information code, extracts the feature points of the image data included in the digital signature data as second feature points,
The authentication unit compares the extracted first feature points and the second feature points, and obtains an authentication result.
Authentication system. Calculating feature points of image data including an identification target,
creating digital signature data including information on the feature points;
issuing an information code containing a code for the image data and the digital signature data;
A publishing method that causes a computer to execute processing. a code of digital signature data created to include image data including an identification target and information of feature points of feature points calculated for the image data;
Information code including .

Images