JP4664821B2 - Specific object guaranteed barcode system and specific object guaranteed barcode processing method - Google Patents

Description

  The present invention relates to a processing system and a processing method for supplying, for example, a two-dimensional barcode such as a website address, an address, and a personal insurance card number.

Entering a website address on a mobile phone is a hassle. In order to solve this problem, there are two kinds of techniques, and both are generally used together.
(1) A method of reducing the burden of input by publishing a short and easy-to-remember unique address as a mobile phone address.
(2) As described in Non-Patent Document 1, the web address is printed as a two-dimensional bar code such as a QR code (registered trademark), for example, at the corner of a flyer or an advertisement. When the barcode is photographed by the camera of the camera-equipped cellular phone, the two-dimensional barcode is analyzed in the cellular phone and automatically connected to the web address indicated by the two-dimensional barcode. In this way, there is a method that reduces the labor of inputting a web address.

There is also an electronic stamp technique in which a two-dimensional barcode as described in Non-Patent Document 2 is signed to verify whether the barcode has been tampered with.
http: // mobile. goo. ne. jp / barcode. html Postal Service Institute Monthly Report 1999. pp. 59-66

When an address is acquired from a two-dimensional barcode, it is not known where the address is accessed until the barcode is analyzed. Therefore, in general, the URL (Uniform Resource Locator) of the access destination can be seen by the side. indicate. However, there are two problems with the technology described above.
The first problem is that the shorter the address, the harder it is to determine whether the address is the address of a company or business that the user really wants to access. For example, ABCDEFG Corporation's mobile phone address emphasizes input efficiency, and is available at http: // 123. The address for the personal computer (original URL) is http: // ABCDEFG. ne. It may be jp /. Both will eventually lead to the same server, but 123. It is difficult to recognize that it will be connected to the server of ABCDEFG, Inc. as soon as it is said that it will access jp.

The second point is because the analyzed address does not necessarily match the address displayed beside it. Therefore, it can be a hotbed for phishing scams that guide users to unintended connections.
In the technique of the electronic stamp introduced last in the page of the prior art, since a signature is attached to prevent "counterfeit", for example, even if the destination is wrong due to some mistake, if the signature for it is correct, Determined to be correct. In other words, it is not for making it possible to distinguish between what is different and what is correct.

It is conceivable to provide not only the URL but also specific objects such as an e-mail address, an address of a company or an individual, a personal insurance card number or a residence number as a two-dimensional barcode. In this case, it is possible to display intuitively what the specific target is (intuitive target), and it is guaranteed that the relationship between the specific target and the intuitive target is correct. It is convenient.
An object of the present invention is to provide a two-dimensional barcode processing system and a processing method that guarantee that a specific object and an intuitive object have a correct relationship.

  According to the present invention, the specific object providing device and the authentication device are connected to the network, and the authentication device signs the input intuitive object and the specific object with the signature key, and both these objects and the signature Is generated as two-dimensional barcode data, and a verification application that verifies the signature including the public key is generated. The specific object providing device links with the authentication device, requests the verification application, and receives it from the authentication device. The verification application verifies the signature of the two-dimensional barcode, and if the verification passes, the two-dimensional barcode data is added to the medium as a two-dimensional barcode.

  According to the above configuration, since the reliable authentication device signs the intuitive object and the specific object, and both the object and the signature are made into a two-dimensional barcode, the user terminal can By analyzing the barcode, it is possible to acquire not only a specific object but also an intuitive object. If the intuitive object is displayed, for example, the specific object is a URL and the intuitive object is service A of Company S. Is displayed and it is possible to immediately know whether or not the relationship between the two is what the user desires. Moreover, since the signature verification for both the targets is passed, the relationship between the two targets is correct. Therefore, in the above example, a phishing scam or the like is prevented.

Example 1
Example 1 will be described below. Here, the specific target providing device is the service providing device, the direct target is the company S and its service name A, and the specific target is the website address T of the company S.
FIG. 1 shows a system configuration example of an embodiment of the inventive apparatus. A service providing apparatus 4 and a reliable institutional apparatus 6 (hereinafter referred to as an authentication apparatus or CA (Certificate Authority)) are connected to the electronic network 2. The service providing device 4 and the CA 6 can exchange data through the network 2.

  2 and 3 show functional configuration examples of the service providing apparatus 4 and the CA 6, respectively. First, the company S applies to the CA 6 to start providing a new service name S as the website address T on the Internet, for example, through the service providing device 4. For this application, the person in charge of the company S can go directly to the CA and hand the application documents to the person in charge of the CA, or mail the application documents to the CA 6. Upon receiving this application form, CA 6 checks whether the information desired to be linked is valid with the address T and whether the relationship between the information desired to be linked and the applicant is valid. This application may be made electronically. In other words, the company name S, the website address T, the service name A, and other data necessary for determining the validity are input to the input unit 40 of the service providing apparatus 4, and the service providing apparatus 4 receives the input information. Is generated by the specific target guarantee request generation unit 54 and transmitted to the CA 6 via the network 2 by the transmission unit 42 in the communication unit 41. The CA 6 determines that the application data received by the reception unit 61 in the communication unit 60 is received data as application data by the reception information determination unit 63, and inputs this data to the validity confirmation unit 64. Once stored in the target object guarantee request storage unit 78, the validity check unit 64 determines the validity.

  The CA 6 uses the key generation unit 65 to create a pair of a signature key and a public key. The signature key is stored secretly in the signature key storage unit 66. If the applicant is determined to be appropriate, the company name S, the service name A, the website address T of the company S, and the like are input to the input unit 71. The authentication device 6 temporarily stores the input information in the storage unit 72 and inputs the information to the signature unit 67. Using the signature key, the signature unit 67 performs signature processing on the combination of the company name S, the service name A, and the website address T to generate a signature.

  The public key is input to the verification application generation unit 68, and a verification application including the public key is generated. Here, the verification application means an application for verifying the signature by the signature unit 67. This verification application is stored in the verification application storage unit 69. A link to the verification application (URL of the verification application) is input by the input unit 71 in the same manner as the company name S, the service name A, and the website address T of the company S obtained from the legitimacy, and stores the link to the verification application. Stored in the unit 70.

  Next, the barcode generation unit 73 generates two-dimensional barcode data. In this embodiment, the two-dimensional barcode data includes (1) company name S and service name A, (2) company S website address T, and (3) company name S and service name A. And a signature for the set of the address T of the website of the company S, and (4) a link to the verification application. Accordingly, these four pieces of information are input to the barcode generation unit 73, and the barcode generation unit 73 generates two-dimensional barcode data such as a QR code including these four pieces of information.

  Next, the generated two-dimensional barcode data is transmitted to the service providing apparatus 4 by the transmission unit 62 in the communication unit 60. The service providing device 4 stores the received two-dimensional barcode data in the barcode storage unit 45 when the information received by the reception unit 43 is determined by the two-dimensional barcode data and the reception information determination unit 44. Is done. The verification application link obtained from this data is input to the verification application request signal generation unit 47, and a verification application request signal for the input link (URL) is generated. This verification application request signal is transmitted to the CA 6 via the transmission unit 42.

  The transmitted verification application request signal is received by the receiving unit 61 of the CA 6, and the received information determination unit 63 determines that the received information is a verification application request signal. Based on this request signal, verification is performed from the verification application storage unit 69. The application is read. The read verification application is transmitted to the service providing apparatus 4 through the transmission unit 62 and via the network by an encryption communication method such as SSL (Secure Sockets Layer).

  The transmitted verification application is received by the receiving unit 43 of the service providing apparatus 4. The received signal is determined as a verification application by the reception information determination unit 44 and stored in the verification application storage unit 48. The verification application stored in the verification application storage unit 48 and the two-dimensional barcode data stored in the barcode storage unit 45 are input to the signature verification unit 49.

  The signature verification unit 49 uses the verification application to check whether the data of the two-dimensional barcode is correctly signed, that is, whether the signature is a CA6 signature key using the public key included in the verification application. Verify whether or not. If the verification is successful, the two-dimensional barcode data and the verification success signal from the signature verification unit 49 are input to the display unit 50, and the analysis result of the barcode, that is, at least the company name S and the service name. If necessary, the site address (URL) T of the company S is also displayed, and the service provider sees this display, and for the company name S, the service name A, and the site address T of the company S that has applied, It can be confirmed that it was correctly signed. Based on this confirmation, when a medium addition command is input from the input unit 40, the data of the two-dimensional barcode stored in the barcode storage unit 45 is input to the medium addition unit 51, and two-dimensional A bar code is added. Here, the addition to various media may be printed on a flyer, a poster, a magazine, or the like, or may be inserted as a two-dimensional barcode image into a part of a Web image. Then, a two-dimensional barcode is distributed along with the advertisement of the company S. The medium addition of the two-dimensional barcode may be automatically performed based on the signature verification success signal.

Example 2
Next, a case where the user uses the generated two-dimensional barcode will be described. An example of the functional configuration of the user terminal 8 is shown in FIG. In this case, the user terminal 8 is connected to the network 2 as indicated by a broken line in FIG. When the user captures a two-dimensional barcode with the barcode capture unit 80 such as a camera built in the mobile phone, the two-dimensional barcode image data is stored in the barcode storage unit 81. The stored two-dimensional barcode image data is input to the barcode analysis unit 82 and analyzed to obtain two-dimensional barcode data, which is temporarily stored in the barcode analysis unit 82. The verification application link (URL of CA6) in the result of this analysis is input to the verification application request signal generation unit 83, a verification application request signal is generated, and the verification application request signal is transmitted from the transmission unit 85 in the communication unit 84. Is transmitted to CA6, that is, a request for a verification application is made to CA6.

  When this verification application request signal is received by CA 6 by the same operation as described above, CA 6 transmits the verification application to user terminal 8. The verification application received by the user terminal 8 is stored in the verification application storage unit 87. The two-dimensional barcode data from the barcode analysis unit 82 and the verification application stored in the verification application storage unit 87 are input to the signature verification unit 88. The signature verification unit 88 verifies the signature of the input two-dimensional barcode data using a verification application. When the verification is successful, the verification success signal and the two-dimensional barcode data analyzed by the barcode analysis unit 82 are input to the display unit 89, and at least the company name S and service name A, and if necessary, the company S Is displayed on the display unit 89. Therefore, if the user desires, when he / she inputs to the input unit 90 that he / she wants to access the website of the company S, the access request signal generation unit 91 generates an access request signal, and through the transmission unit 85, the barcode generation unit The service S is transmitted to the address T of the website of the company S obtained from 82, connected to the service providing apparatus 4, and can access the website of the company S. The user uses the service A in the utilization unit 92.

  As described above, since the company S is displayed on the display unit 89, the website address T of the input two-dimensional barcode is for the service A of the company S, that is, what the user desires. You can immediately know if it is. In addition, the user terminal 8 can be connected to the correct access destination without worrying about accessing a homepage that is not desired by the user (of a malicious third party).

Example 3
As a third embodiment, a case where a two-dimensional barcode is used for QR code Ver9 error correction M and signature scheme ECAO standardized by ISO / IEC 15946-4 is used will be described. The structure of the two-dimensional barcode data in this case is shown in FIG. Here, the QR code Ver9 error correction M is standardized by JIS (JIS-X-0510 title: two-dimensional code symbol (QR code basic specification)), ISO (ISO / IEC18004), and the like. The signature scheme ECAO is a signature scheme having a message recovery portion, and the message recovery is a mechanism in which a part of a message can be automatically decrypted when it can be verified that the signature is correct.

In FIG. 5, (a) a signature identifier field is filled with an identifier representing a signature method (including elliptic curve parameters), and (b) an application identifier field corresponds to which verification application corresponds to which provision object. An identifier for identifying whether or not This point will be described in detail later.
(C) In the public key number column, the serial number of the public key included in the verification application is entered.
(D) In the signature column, a signature for the company name S and its site address T is entered. The part of the signature entered in the (d1) column is message-recovered, and in this example, the data of the company name S and service name A is decrypted. (D) The other part of the signature column (column (d2)) is called signature S.
(E) In the plaintext length column, (f) the length of the message entered in the message column is entered in bytes.
(G) In the verification application link field, as described above, data of a link to the verification application indicating the URL of the authentication device 2 provided with the verification application is entered.

  In this example, since it has a message recovery part as a signature method, for example, as described above, if data is signed so that the data of the company name S and the service name A can be recovered, The company name S and service name A decrypted from the signature verification unit 6 as shown by the broken line are input and displayed on the display unit 50, and at the same time, as shown by the broken line in FIG. From 88, the data of the company name S and the service name A are input and displayed on the display unit 89.

  Since it often operates in a situation where the storage capacity is very small compared to a general electronic storage medium, such as a two-dimensional barcode, the signature length is as in the configuration example described in the third embodiment. It is desirable to use a signature scheme that is short and has a message recovery portion (eg, ECAO signature). This is because in the case of a signature scheme that does not have a message recovery part, the signature is used only for whether or not the signature is correct and does not have any message. Conventionally, (f) the message field contains only the URL. Was filled in, and there was not much room to fill in a lot of data. However, in the case of a signature scheme having a message recovery part, if the data of the company name S and the service name A is decrypted in the signature R part, the company name S and service can be obtained when the signature is verified. The data of name A is recovered and the company name S and service name A are displayed. Therefore, it is possible to obtain an effect that the capacity that can be used as a message is increased. When the storage capacity is small, this difference is as large as 10 to 20%, which is more effective.

  If the recovery part is not long enough to display the company name, for example, the following may be performed. If the name of ABCDEF Co., Ltd., which is the company name, is too long to enter the recovery part, for example, a company identifier table is created in advance as shown in FIG. For example, a relationship of “00001” is set, and the company name ID is entered in the recovery portion instead of the company name S input by referring to the company identifier table in CA6. In the user terminal 8, the company name ID decrypted from the signature verifying unit 88 decrypted from the signature verifying unit 88 is converted into a company name, for example, ABCDEF Corporation, with reference to the company identifier table 93, and the display unit 89. To be supplied to. A verification application is created so as to perform such processing.

  In addition, when the data structure of the two-dimensional barcode is shown in FIG. 5, when used on a platform that does not support the verification application, that is, the two-dimensional barcode can be analyzed, but the signature cannot be verified. Even in this case, when the two-dimensional barcode is analyzed, the user can read the message portion, that is, the address T of the website of the company S. Therefore, it is not necessary to recreate the 2D barcode data for a platform that does not support the verification application. In that case, even if the signature expiration date is attached to the message recovery part, if the platform cannot verify the signature, the expiration date is not required, so it is not necessary to create a two-dimensional code for the platform that cannot verify the signature. .

Example 4
In the above description, the intuitive object has been described as the company name and the specific object as the address of the company's website. However, the present invention is not limited to this, and various combinations of intuitive objects and specific objects are assumed. Intuitive objects and specific objects are just numbers and symbols as data. Since it is an arrangement of characters or the like, an application identifier table is prepared which shows what kind of intuitive object (type) and what kind (type) of the specific object is. An intuitive object is expressed as X, a specific object is expressed as Y, and a combination of these is expressed as (X, Y). In the example shown in FIG. 7, the application identifier “1” is (company name, e-mail address), the application identifier “2” is (organization name, telephone number), the application identifier “3” (person name, residence number), etc. is there. The application identifiers “1” and “2” can be distributed with a two-dimensional barcode attached to the medium as in the first to third embodiments. The usage status of the provision target such as the application identifier “3” is as follows.

  An example of using the application identifier “3”, that is, the case where the intuitive target is the person name and the specific target is the residence number will be described. For example, when Party B asks you about your Juki number, and sends it to you via e-mail, a malicious third party may impersonate you and send you an unjust Juki number. is there. However, if the two-dimensional barcode processing of the present invention is used, since it is signed, it is possible to prevent spoofing of a malicious third party.

  In the present invention, when the user uses this system for the second time or later, since the verification application has already been downloaded (stored in the verification application storage unit 87), the user needs to request the CA 6 for the verification application. Can be omitted. Therefore, the user has to pay close attention when downloading the verification application, but if he / she pays attention only once, the user can use it with peace of mind. This is effective in terms of time, safety and communication costs. As a matter of course, this effect can also be obtained for two-dimensional barcode data created by the same CA6.

  And this is naturally true when you use the same offer object over and over, but also when you try to receive different offer objects corresponding to each 2D barcode from different 2D barcodes. . That is, even if it is a two-dimensional barcode based on different applicants, if it is a two-dimensional barcode created with the same CA6, the provision object, for example, the URL of the service providing apparatus can be correctly received. In other words, when the same CA signs with the (single) signature key, it is an intuitive object displayed by verifying using the same verification application for different two-dimensional barcodes. The target can be confirmed. When the specific target is a URL, it is possible to connect to an access destination intended by the user. Therefore, phishing scams can be prevented. The application identifier is incorporated into the (b) application identifier field in FIG. 5 described in the description of the third embodiment, so that the plurality of provision targets are distinguished in the form of application identifiers, and the plurality of provision targets are general-purpose signatures and verification applications. Can also be used. In this case, an application identification table is created in advance, and this table is held by the CA 6. Further, the verification application generation unit 68 of CA6 incorporates an application identifier table into the verification application to be generated. For example, in the user terminal 8, when the verification application is first downloaded, the application identifier table is stored in the area 87a in the verification application storage unit.

  For example, if the intuitive object is the company name a and the specific object is the mail address b, the CA 6 enters the application identifier “1” in the A column in the (b) application identifier column in FIG. Sign not only the company name a and mail address b but also the application identifier, and enter this signature in the column (d) in FIG. In this example, the application identifier is message-recovered in the verification process. The application identifier “1” obtained by the signature verification unit 88 of the user terminal 8 is referred to the application identifier table in the area 87a, the intuitive target is the company name, the specific target is the mail address, and the display unit 89 Is displayed.

In this way, an array of simple data (numbers, symbols, characters, etc.) is displayed by referring to the application identifier table to indicate what kind of intuitive object, what kind of specific object, and various The same verification application can be used for target provisioning.
The signature may be not only a data recovery signature scheme but also a general-purpose signature scheme, for example, an ECDSA signature using an elliptic curve. In this case, intuitive target data is also entered in the (g) message field in FIG.

The application identifier table 74 described above is indicated by a broken line in FIG. 3, and a combination of types to be provided is stored in the storage unit 72.
Next, the overall flow will be described with reference to FIG. The CA generates a signature key and a public key corresponding to the signature key using the key generation unit 65 (S800), and the verification application generation unit 68 generates a verification application including the public key (S802). Then, when the person in charge of the specific object providing device 4 submits the necessary document, which is the company name S and the website address T of the company S, to the CA (S804), the company name S and the website address T of the company S The validity and the like are confirmed by the validity confirmation unit 64 (S806), and a signature is generated by the signature unit 67 using a combination of the company name S and the website address T of the company S as a signature key (S808). The barcode generation unit 73 generates two-dimensional barcodes for the verification application link, signature, company name S, and company S website address T (S810). Then, the two-dimensional barcode data is transmitted to the specific object providing device 4 (S812), and the verification application is requested from the CA based on the link of the verification application (S816). The CA sends the verification application to the specific target providing device 4 (S818), and the specific target providing device 4 uses the received verification application to sign whether or not the signature of the two-dimensional barcode is valid. Verification is performed by the verification unit 46 (S820). If the verification is successful, the medium adding unit 51 adds a two-dimensional barcode to the image of the flyer or website (S822) and distributes both the advertisement and the advertisement (S824).

On the other hand, when the user captures the two-dimensional barcode with the barcode capture unit 80,
The barcode analysis unit 82 performs analysis (S826), and requests a verification application from the CA based on the verification application link (S828). When the CA sends the verification application to the user (S830), the user uses the verification application to verify whether the signature of the two-dimensional barcode is valid by the signature verification unit 88 (S832). If the verification is successful, the company name S and address T are confirmed (S834), an access request is sent to the specific object providing device 4 (S836), and the specific object providing device 4 publishes the site of the company S ( S838).

Next, after the user downloads the verification application, the second and subsequent flows will be described with reference to FIG. This specific object providing device is different from the specific object providing device 4 that distributed the two-dimensional barcode at the first time, and even if the content of the provided object is different from the first time, the two-dimensional created by the same CA Any barcode is acceptable. Here, the specific object providing device is different from the first time, and a two-dimensional barcode different from the previous one is distributed (S900), and the user takes in this two-dimensional barcode (S902), and the two-dimensional barcode is the same as the first time. The code is analyzed (S904), and the signature is verified (S906). A verification application is used for signature verification here, but the verification application used for the first time is used. With this alone, an intuitive object and a specific object can be confirmed (S908), and the same safety as the first time can be obtained.
The specific object providing device 4, the authentication device 6, and the user terminal 8 may each be functioned by a computer.

The block diagram which shows the structural example of the system of this invention. The block diagram which shows the function structural example of the specific object provision apparatus (service provider apparatus) 4. FIG. FIG. 3 is a block diagram showing a functional configuration example of an authentication device 6. The block diagram which shows the function structural example of the user terminal 8. FIG. The figure which shows the example of the data structure of a two-dimensional barcode. The figure which shows the example of a company identifier table. The figure which shows the example of an application identifier table. The flowchart figure which shows the whole flow at the time of the 1st download of a verification application. The flowchart figure which shows the flow between the user terminal 8 and the concrete object provision terminal 4 after downloading a verification application once.

Claims (10)

In a system in which a specific object providing device and an authentication device are connected through a network,
The authentication apparatus includes a key generation unit that generates a signature key and a public key corresponding to the signature key;
A signature unit that generates a signature with the signature key for the input intuitive object and specific object;
A barcode generation unit that generates the intuitive object, the specific object, the signature, and the connection link (address) of the authentication device as two-dimensional barcode data;
A verification application generation unit that generates a verification application that includes the public key and verifies the signature;
A verification application storage unit for storing the verification application;
A communication unit that transmits the two-dimensional barcode data to the specific object providing device, receives a verification application request, and sends the verification application to the request source of the received verification application;
The specific object providing device includes a barcode storage unit that stores the two-dimensional barcode data sent from the authentication device;
Based on the connection link from the two-dimensional barcode data, a verification application request signal generation unit that generates the verification application request signal in the authentication device;
A verification application storage unit that stores the verification application received by the communication unit;
A signature verification unit that verifies the signature included in the two-dimensional barcode data using the verification application;
If the signature verification is successful, a medium adding unit that adds the two-dimensional barcode to the medium;
A specific object assurance bar, comprising: a communication unit that receives the two-dimensional barcode data, transmits the verification application request signal to the authentication device, and receives the verification application from the authentication device. Code system. In a system in which a specific object providing device and an authentication device are connected through a network,
The authentication apparatus includes a key generation unit that generates a signature key and a public key corresponding to the signature key;
When the signature verification is successful for the input intuitive object and the specific object, the intuitive object generates a signature by a signature scheme having a message recovery part that is automatically decrypted, and
A barcode generation unit that generates a connection link (address) of the specific object, the signature, and the authentication device as two-dimensional barcode data;
A verification application generation unit that generates a verification application that includes the public key and verifies the signature;
A verification application storage unit for storing the verification application;
A communication unit that transmits the two-dimensional barcode data to the specific object providing device, receives a verification application request, and sends the verification application to the request source of the received verification application;
The specific object providing device includes a barcode storage unit that stores the two-dimensional barcode data sent from the authentication device;
Based on the connection link from the two-dimensional barcode data, a verification application request signal generation unit that generates the verification application request signal in the authentication device;
A verification application storage unit that stores the verification application received by the communication unit;
A signature verification unit that verifies the signature included in the two-dimensional barcode data using the verification application;
If the signature verification is successful, a medium adding unit that adds the two-dimensional barcode to the medium;
A specific object assurance bar, comprising: a communication unit that receives the two-dimensional barcode data, transmits the verification application request signal to the authentication device, and receives the verification application from the authentication device. Code system. The system according to claim 1 or 2,
A user terminal is connected to the network,
The user terminal includes a barcode capturing unit that captures a two-dimensional barcode attached to a medium as two-dimensional barcode data;
A barcode storage unit for storing the captured two-dimensional barcode as data;
A barcode analysis unit for analyzing the two-dimensional barcode data;
From the analyzed barcode data, a verification application request signal generation unit that requests the verification application from the authentication device;
A verification application storage unit for storing the received verification application;
A signature verification unit that verifies the signature included in the two-dimensional barcode data using the verification application;
If the signature verification is successful, a utilization unit that uses a specific object from the barcode system analysis unit, and
A display unit that displays the intuitive object and the specific object obtained from the barcode analysis unit or the signature verification unit;
A communication unit that transmits the verification application generation signal to the authentication device and receives a verification application from the authentication device;
A specific object-guaranteed bar code system comprising: The system according to any one of claims 1 to 3,
The barcode generation unit receives an application identifier for each pair of the intuitive object and the specific object, and incorporates the application identifier into the two-dimensional barcode data. Bar code system. In the system in any one of Claims 1-4,
The specific object providing device includes a display unit that displays the intuitive object and the specific object by data from the barcode analysis unit or the data from the signature verification unit in addition to the barcode analysis unit if the signature is successful. A specific object-guaranteed barcode system characterized by that. A specific object guarantee type barcode processing method by a system in which a specific object providing device and an authentication device are connected to a network,
The authentication device generates a signature by performing signature processing with a signature key on a set of input intuitive objects and specific objects,
Generating the intuitive object, the specific object, the signature, and the connection link (address) of the authentication device as two-dimensional barcode data;
Send the two-dimensional barcode data to the specific object providing device,
Including a public key corresponding to the signature key, generating and storing a verification application for verifying the signature;
Based on the connection link obtained from the two-dimensional barcode data, request a verification application from the authentication device,
Upon receiving the verification application request, the authentication device transmits the verification application to the specific target providing device,
The specific object providing apparatus performs signature verification processing on the two-dimensional barcode data using the received verification application,
A specific object-guaranteed barcode processing method, wherein the two-dimensional barcode is added to a medium if the verification process is successful. A specific object guarantee type barcode processing method by a system in which a specific object providing device and an authentication device are connected to a network,
When the verification apparatus succeeds in verifying the signature of the input intuitive object and specific object pair, the intuitive object generates a signature based on a signature scheme having a message recovery part that is automatically decrypted. ,
The specific object, the signature, and the connection link (address) of the authentication device are generated as two-dimensional barcode data,
Send the two-dimensional barcode data to the specific object providing device,
Including a public key corresponding to the signature key, generating and storing a verification application for verifying the signature;
Based on the connection link obtained from the two-dimensional barcode data, request a verification application from the authentication device,
Upon receiving the verification application request, the authentication device transmits the verification application to the specific target providing device,
The specific object providing apparatus performs signature verification processing on the two-dimensional barcode data using the received verification application,
A specific object-guaranteed barcode processing method, wherein the two-dimensional barcode is added to a medium if the verification process is successful. The method according to claim 6 or 7, wherein
A user terminal is connected to the network,
The user terminal captures the two-dimensional barcode attached to the medium as two-dimensional barcode data,
Store and analyze the imported 2D barcode as data,
From the analyzed barcode data, request the verification application to the authentication device,
Upon receiving the verification application request, the authentication device transmits the verification application to the user terminal,
The user terminal performs signature verification processing on the two-dimensional barcode using the received verification application,
A specific object guaranteed barcode processing method, wherein if the signature verification process is successful, the specific object is used and the intuitive object and the specific object are displayed. The method according to any one of claims 6-8,
The two-dimensional barcode is generated by inputting an application identifier for each pair of the intuitive object and the specific object, and incorporating the application identifier into the two-dimensional barcode data. Code processing method. In the method in any one of Claims 6-9,
The specific object guaranteeing barcode processing method, wherein the specific object providing device displays the intuitive object and the specific object by data from the signature verification if the signature is successful.

Images