WO2020031245A1

WO2020031245A1 - Authentication object issuing device, authentication object issuing system, authentication object issuing method, and program

Info

Publication number: WO2020031245A1
Application number: PCT/JP2018/029494
Authority: WO
Inventors: 小川　雅雄; 福石李; 博豊泉; 東　陽一
Original assignee: 藤光樹脂株式会社; Ａ・Ｔコミュニケーションズ株式会社
Priority date: 2018-08-06
Filing date: 2018-08-06
Publication date: 2020-02-13
Also published as: JP6488434B1; JPWO2020031245A1

Abstract

According to the present invention, in response to receiving a ticket purchase request from a user terminal 2 via an Internet network 5, a management server 3 automatically makes a call to the telephone number of the user terminal 2 and notifies, via a telephone network 6, the user of confirmation information that requests an input by the user. In response to receiving the notified confirmation information from the user terminal 2 via the telephone network 6, the management server 3 issues an electronic ticket to the user who has entered the confirmation information, by transmitting the electronic ticket to the user terminal 2 via the Internet network 5. Thus, it is possible to issue an electronic ticket that can be authenticated without using a password.

Description

Authentication target issuing device, authentication target issuing system, authentication target issuing method, and program

The present invention relates to an authentication target issuance device, an authentication target issuance system, an authentication target issuance method, and a program, and more particularly, to an authentication target issuance device that can issue an authentication target that can be authenticated without using a password, and an authentication target issuance. The present invention relates to a system, an authentication target issuing method, and a program.

(4) Usually, only one element of an ID (identification) and a password is used for authentication on the Internet (for example, see Patent Documents 1 and 2). It is to be noted that the specifications of

Patent Documents

1 and 2, the claims, and the entire drawings are incorporated herein by reference.

JP 2012-164149 A JP 2013-105334 A

However, in the authentication described in

Patent Literatures

1 and 2, it is necessary not only to strictly manage the password but also to periodically update the password, but it is still impossible to completely prevent leakage. Then, once the ID and the password are leaked, there arises a problem that an unauthorized access act is performed by so-called spoofing. In order to solve such problems, it is best to enable authentication without using a password.

The present invention has been made to solve the above problems, and is an authentication target issuing apparatus, an authentication target issuing system, and an authentication target issuing method capable of issuing an authentication target that can be authenticated without using a password. , And to provide programs.

In order to achieve the above object, the authentication target issuing device (3) according to the first aspect of the present invention has received a request to issue an authentication target from a user terminal (2) via the Internet network (5). Confirmation information notifying means for notifying, via the telephone network (6), confirmation information requesting an input by the user to the telephone number of the user terminal (2) specified from the issuance request in response to the request (33) and in response to receiving the confirmation information notified by the confirmation information notification means (33) from the user terminal (2) via the telephone network (6), An authentication target issuing unit (33) for issuing the authentication target to the input user.

In the authentication target issuance device (3), the authentication target issuance means (33) includes an information area expressing a URL (Uniform Resource Locator) by a cell distribution pattern, and correction information for correcting an error of the cell. The authentication target may be generated by embedding authentication information in the correction area of the data code (100) including the correction area expressed by the distribution pattern.

In the authentication target issuing device (3), the authentication target issuing unit (33) obtains an embedding bit string from a part of the correction area and excludes the embedding bit string from the authentication bit string indicating the authentication information. The authentication information may be embedded in the correction area by obtaining a first exclusive OR that is a logical OR and replacing a part of the correction area with the first exclusive OR.

In the authentication target issuing device (3), the authentication target issuing unit (33) embeds all or a part of the telephone number of the user terminal (2) as the authentication information in the correction area. You may.

The authentication target issuing device (3) may be the authentication target in which the telephone number of the user terminal (2) and all or a part of the telephone number are embedded in the correction area as the authentication information. A database (320) for registering the URL indicated by the data code (100) in association with the URL, and the reading terminal (4) accesses the URL via the Internet network (5), and reads from the reading terminal (4). In response to receiving the authentication information, the telephone number reading means (33) for reading the telephone number corresponding to the URL from the database (320), and the authentication information received from the reading terminal (4) A telephone number discriminating means (33) for discriminating whether or not the telephone number matches all or a part of the telephone number read by the telephone number reading means (33); If it is determined by the telephone number reading means (33) that there is a match, the fact that the authentication target has been successfully authenticated is addressed to the telephone number read by the telephone number reading means (33) via the telephone network (6). And an authentication success notification unit (33) for notifying.

In the authentication target issuing device (3), the authentication target issuing unit (33) may transmit the authentication target to the user terminal (2) via the Internet network (5). .

The authentication target issuance system (1) according to a second aspect of the present invention provides the authentication target issuance request for specifying the telephone number of the user terminal (2) via the Internet network (5). The user inputs the issuance request transmitting means (25) for transmitting to the target issuing device (3) and the confirmation information notified from the authentication target issuing device (3) via the telephone network (6). A user terminal (2) including a confirmation information transmitting means (25) for transmitting to the authentication target issuing device (3) via the telephone network (6) in response to the authentication target issuance. Device (3).

An authentication target issuance system (1) according to a third aspect of the present invention includes an imaging unit (41) configured to capture the data code (100) and obtain an imaging bit sequence, and the imaging unit (41) configured to obtain the imaging bit sequence. A decoding unit (44) for decoding an imaging bit string to obtain an information bit string indicating the URL and a correction bit string indicating the correction information; an imaging bit string obtained by the imaging unit (41); Calculating a second exclusive OR that is an exclusive OR of the information bit string and the correction bit string acquired by the means (44), and calculating a second exclusive OR of the embedding bit string and the authentication bit string; An error detecting means (44) for detecting the first exclusive OR as an error, the embedded bit string included in the corrected bit string, and an error detected by the error detecting means (44). An authentication bit string obtaining means (44) for obtaining a third exclusive OR, which is an exclusive OR of the first exclusive OR detected as, and obtaining the authentication bit string, and the decoding means (44) Accessing the URL indicated by the imaging bit string acquired by the authentication bit string acquired by the authentication bit string acquisition means (44), by accessing the URL indicated by the imaging bit string acquired by the authentication network. The reading terminal (4) including an authentication information transmitting unit (44) that transmits the authentication information to the authentication target issuing device (3) via (5), and the authentication target issuing device (3). .

The authentication target issuance method according to the fourth aspect of the present invention is characterized in that the authentication target issuance device (3) responds to the reception of an authentication target issuance request from the user terminal (2) via the Internet network (5). Then, to the telephone number of the user terminal (2) specified from the issuance request, the user is notified via the telephone network (6) of confirmation information requesting an input by the user, and the notified confirmation is transmitted. In response to receiving information from the user terminal (2) via the telephone network (6), the authentication object is issued to the user who has input the confirmation information.

The program according to the fifth aspect of the present invention is specified from the issuance request in response to the computer receiving the issuance request for the authentication target from the user terminal (2) via the Internet network (5). A confirmation information notification procedure (33) for notifying confirmation information requesting an input by a user to the telephone number of the user terminal (2) via the telephone network (6); 33) In response to receiving the confirmation information notified by the user terminal (2) via the telephone network (6) from the user terminal (2), the user who has input the confirmation information is notified of the authentication target. The authentication target issuance procedure (33) to be issued is executed.

According to the present invention, it is possible to provide an authentication target issuance device, an authentication target issuance system, an authentication target issuance method, and a program that can issue an authentication target that can be authenticated without using a password.

It is a figure showing the example of composition of the ticket management system concerning this embodiment. FIG. 3 is a block diagram illustrating a configuration example of a user terminal. FIG. 3 is a block diagram illustrating a configuration example of a management server. It is a figure showing the example of composition of QR Code (registered trademark). FIG. 9 is a schematic diagram for explaining a procedure for embedding authentication information. It is a block diagram showing an example of composition of a reading terminal. 9 is a flowchart illustrating details of a ticket issuing process. It is a flowchart which shows the continuation of a ticket issuing process. It is a flowchart which shows the continuation of a ticket issuing process. 9 is a flowchart illustrating details of a ticket authentication process. It is a flowchart which shows the continuation of a ticket authentication process.

Hereinafter, the best mode for carrying out the present invention will be described.

First, the configuration of the ticket management system (authentication target issuing system) according to the embodiment of the present invention will be described with reference to the drawings. The ticket management system issues an electronic ticket (authentication target) of an event including a two-dimensional code such as a QR (Quick Response) code (registered trademark) or a data code such as a barcode.

FIG. 1 is a diagram showing a configuration example of a ticket management system according to the present embodiment.

As shown in FIG. 1, the ticket management system 1 includes a user terminal 2, a management server (authentication target issuing device) 3, and a reading terminal 4, which are connected to the Internet network 5 and the telephone network 6. Are communicably connected to each other.

The user terminal 2 is composed of, for example, a general-purpose smartphone. The user terminal 2 is used by a user who purchases an electronic ticket.

FIG. 2 is a block diagram showing a configuration example of a user terminal.

As shown in FIG. 2, the user terminal 2 includes an audio output unit 21, a touch panel 22, a communication unit 23, a storage unit 24, and a control unit 25, which are connected via a bus or the like. Have been.

The audio output unit 21 includes, for example, a general-purpose speaker or the like. The voice output unit 21 outputs a telephone ringtone, voice, and the like.

In the present embodiment, the voice output unit 21 outputs an automatic voice or the like for instructing input of confirmation information (“15” in the present embodiment) such as “Please input“ 15 ”for authentication.” You.

(4) The touch panel 22 includes, for example, a general-purpose touch panel that combines a liquid crystal display device and a pointing device. The touch panel 22 displays various screens and receives various operations by the user.

In the present embodiment, a ticket purchase page for purchasing an electronic ticket is displayed on the touch panel 22. On the ticket purchase page, the user inputs the user's name, address, telephone number of the user terminal 2, and the like, and instructs the purchase of an electronic ticket for the event. The user gives an instruction on the touch panel 22 to receive a telephone call from the management server 3.

(4) On the touch panel 22, a dial pad for inputting a telephone number or the like is displayed. The user operates the dial pad with the telephone connected to the management server 3 and inputs the confirmation information instructed by the automatic voice. Further, the electronic ticket purchased by the user is displayed on the touch panel 22.

The communication unit 23 includes, for example, a general-purpose wireless communication device. The communication unit 23 performs wireless communication with the management server 3 via the Internet network 5 and performs wireless communication via the telephone network 6.

The storage unit 24 is composed of, for example, a nonvolatile memory such as a general-purpose flash memory. The storage unit 24 stores the electronic ticket purchased by the user.

The control unit 25 includes, for example, a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory). The CPU controls various operations of the user terminal 2 by using the RAM as a work memory and appropriately executing programs and the like stored in the ROM and the storage unit 24.

In the present embodiment, the control unit 25 accesses the electronic ticket purchase site operated by the management server 3 from the communication unit 22 via the Internet 5 in response to the operation of the touch panel 22 by the user, and A purchase page is displayed on touch panel 22. In response to the user's instruction to purchase the electronic ticket, the control unit 25 requests the purchase of a ticket capable of specifying the user's name and address, the telephone number of the user terminal 2, and the like input on the touch panel 21. The request for issuance of the authentication target is transmitted from the communication unit 22 to the management server 3 via the Internet 5.

The control unit 25 outputs a ringtone from the voice output unit 21 in response to receiving a call automatically transmitted from the management server 3 via the telephone network 6. Then, the control unit 25 connects the telephone with the management server 3 in response to the instruction to receive the telephone from the management server 3 by the user. Subsequently, in response to the communication unit 23 receiving the audio data transmitted from the management server 3 via the telephone network 6, the control unit 25 outputs an automatic audio based on the audio data from the audio output unit 21. .

Then, in response to the confirmation information being input by the user, the control unit 25 transmits the confirmation information from the communication unit 23 to the management server 3 via the telephone network 6. Then, the control unit 25 receives the electronic ticket transmitted from the management server 3 via the Internet 5 and stores the electronic ticket in the storage unit 24.

The control unit 25 displays the electronic ticket stored in the storage unit 24 on the touch panel 22 in response to the operation of the touch panel 22 by the user.

The control unit 25 receives a short mail indicating that the electronic ticket transmitted from the management server 3 via the telephone network 6 has been successfully authenticated, and displays the short mail on the touch panel 22.

The management server 3 shown in FIG. 1 is composed of, for example, a general-purpose server computer and a general-purpose database. The management server 3 issues and manages electronic tickets, and performs telephone authentication using an automatic voice response (Interactive \ Voice \ Response: IVR).

FIG. 3 is a block diagram showing a configuration example of the server device.

(3) As shown in FIG. 3, the management server 3 includes a communication unit 31, a storage unit 32, and a control unit 33, which are connected via a bus or the like.

The communication unit 31 is configured by, for example, an NIC (Network Interface Card) or the like. The communication unit 31 performs wireless communication with the user terminal 2 via the Internet network 5 and performs wireless communication via the telephone network 6.

The storage unit 32 is composed of, for example, a hard disk drive or the like. In the present embodiment, the storage unit 32 includes a ticket DB (Database) 320.

The ticket DB 320 includes a ticket ID (identification) for identifying an electronic ticket, a URL (Uniform Resource Locator) indicated by a two-dimensional code included in the electronic ticket, and the name, address, and use of the user who purchased the electronic ticket. The telephone number of the user terminal 2 is registered in association with the telephone number.

The control unit 33 includes, for example, a CPU, a ROM, a RAM, and the like. The CPU controls various operations of the management server 3 by using the RAM as a work memory and appropriately executing programs and the like stored in the ROM and the storage unit 32.

In the present embodiment, the control unit 33 determines the confirmation information in response to the communication unit 31 receiving a ticket purchase request transmitted from the user terminal 2 via the Internet 5. The confirmation information may be predetermined, or may be generated according to a predetermined algorithm in response to receiving the ticket purchase request. Subsequently, the control unit 33 automatically sends a call to the user terminal 2 via the telephone network 6. When the telephone connection with the user terminal 2 is established, the control unit 33 transmits voice data for outputting automatic voice instructing input of confirmation information from the communication unit 31 via the telephone network 6 to the user terminal 2. Send to

After that, the control unit 33 issues an electronic ticket to the user in response to the communication unit 31 receiving confirmation information transmitted from the user terminal 2 via the telephone network 6. Specifically, the control unit 33 registers the user's name, address, and telephone number of the user terminal 2 in the ticket DB 320 in association with the ticket ID indicating the electronic ticket purchased by the user. Next, the control unit 33 reads the URL and the telephone number corresponding to the ticket ID from the ticket DB 320.

Next, the control unit 33 generates a QR code (registered trademark) indicating the URL read from the ticket DB 320. Then, the control unit 33 embeds, as authentication information, all or a part (for example, the last four digits) of the telephone number read from the ticket DB 320 in a correction area of the QR code (registered trademark) indicating the URL, and stores the electronic ticket. Generate. Regarding a technique for embedding authentication information in a correction area of a QR code (registered trademark), Japanese Patent Application Laid-Open Nos. 2013-058965 and 2014-029659, WO2014 / 027424, and WO2015 / 001637 International Publications And the like. In this specification, Japanese Patent Application Laid-Open Nos. 2013-058965 and 2014-029659, and the specifications, claims, and the entirety of WO2014 / 027424 and WO2015 / 001637 are disclosed. Is taken in as a reference.

{Specifically, the control unit 33 embeds the authentication information in the correction area of the QR code (registered trademark) as follows.

FIG. 4 is a diagram showing a configuration example of a QR code (registered trademark).

As shown in FIG. 4, the QR code (registered trademark) 100 includes three

positioning symbols

104A, 104B, and 104C, an information code recording area 106, a timing cell 108, a format code 109, and the like. The information code recording area 106 includes a code pair of an information code (information area) Cd and a corresponding RS (Reed-Solomon) code (correction area) Ce. The information code Cd is obtained by encoding a URL read from the ticket DB 320, and expresses the URL by a cell distribution pattern (cell pattern) included in the information code Cd. The RS code Ce is obtained by encoding the URL read from the ticket DB 320 using RS (Reed-Solomon) and coded for correction information, and corrects an error by a cell pattern included in the RS code Ce. It expresses the information for correction. The information code recording area 106 includes, for example, a total of 134 symbols including 44 information symbols constituting the information code Cd and 90 RS symbols constituting the RS code Ce. The information code recording area 106 is divided into four blocks. Of these, two blocks are composed of a total of 33 symbols including 11 information symbols and 22 RS symbols corresponding to the information symbols. Are composed of a total of 34 symbols including 11 information symbols and 23 corresponding RS symbols.

The control unit 33 shown in FIG. 3 decodes each block of the QR code (registered trademark) having such a configuration in accordance with a predetermined code arrangement rule, thereby obtaining information including 11 information symbols from each block. A bit sequence and an RS bit sequence composed of 22 or 23 RS symbols are acquired. Next, the control unit 33 extracts two RS symbols from a predetermined position of the RS bit sequence of each block, and from each block, a bit sequence of 16 bits consisting of two RS symbols (embedding bit sequence). ) Mi (i = 1 to 4) are obtained respectively. Subsequently, the control unit 33 compares the bit string mi (i = 1 to 4) with a bit string (authentication bit string) ni (i = 1 to 4) having a bit length of 16 indicating the last four digits of the telephone number. The exclusive OR is calculated to generate a bit string m′i (i = 1 to 4) (first exclusive OR).

FIG. 5 is a schematic diagram for explaining a procedure for embedding authentication information.

The control unit 33 replaces the bit string mi (i = 1 to 4) with the bit string m′i (i = 1 to 4), as shown in FIGS. (I = 1 to 4) are embedded as authentication information.

The control unit 33 shown in FIG. 3 arranges the information bit string and the RS bit string in which the authentication information is embedded according to the code arrangement rule of the QR code (registered trademark), so that the QR code in which the authentication information is embedded in the correction area. An electronic ticket including a code (registered trademark) is generated. Then, the control unit 33 transmits the electronic ticket from the communication unit 31 to the user terminal 2 via the Internet 5.

The control unit 33 responds to the reception of the authentication information transmitted via the Internet network 5 by the communication unit 31 after the access from the reading terminal 4, and responds to the user corresponding to the URL accessed by the reading terminal 4. The telephone number of the terminal 2 is read from the ticket DB 320. Then, the control unit 33 determines whether or not the authentication information received by the communication unit 31 matches the last four digits of the telephone number of the user terminal 2 read from the ticket DB 320.

When the authentication information does not match the last four digits of the telephone number of the user terminal 2, the control unit 33 determines that the information has been tampered with, and sends an authentication failure notification indicating that the authentication of the electronic ticket has failed, The data is transmitted from the communication unit 31 to the reading terminal 4 via the Internet 5. On the other hand, if the authentication information matches the lower four digits of the telephone number of the user terminal 2, the control unit 33 determines that the electronic ticket has not been tampered with and notifies the user that the electronic ticket has been successfully authenticated. The short mail shown is transmitted from the communication unit 31 to the telephone number of the user terminal 2 via the telephone network 6.

The reading terminal 4 shown in FIG. 1 is composed of, for example, a QR code (registered trademark) reader having a communication function, a smartphone or a tablet computer having a QR code (registered trademark) reading function, or the like. The reading terminal 4 is used by a staff member near the entrance of the event venue to read an electronic ticket displayed on the touch panel 22 of the user terminal 2. Note that the reading terminal 4 may be installed near the entrance of the event venue. In this case, the user may hold the reading terminal 4 to read the electronic ticket displayed on the touch panel 22 of the user terminal 2.

FIG. 6 is a block diagram showing a configuration example of the reading terminal.

As shown in FIG. 6, the reading terminal 4 includes an imaging unit 41, a communication unit 42, a display unit 43, and a control unit 44, and these are connected via a bus or the like.

The imaging unit 41 includes a light receiving element such as a CCD (Charge Coupled Device). The image capturing section 41 captures an image of an electronic ticket displayed on the touch panel 22 of the user terminal 2.

The communication unit 42 includes, for example, a general-purpose wireless communication device. The communication unit 42 performs wireless communication with the management server 3 via the Internet 5.

The display unit 43 is composed of, for example, a general-purpose liquid crystal display. The display unit 43 displays various screens.

The control unit 44 includes, for example, a CPU, a ROM, a RAM, and the like. The CPU controls various operations of the reading terminal 4 by using the RAM as a work memory and appropriately executing a program or the like stored in the ROM.

In the present embodiment, the control unit 44 takes an image of the electronic ticket displayed on the touch panel 22 of the user terminal 2 with the imaging unit 41 in response to the instruction of the authentication of the electronic ticket by the attendant. The control unit 44 decodes the imaging bit sequence obtained by imaging the electronic ticket by the imaging unit 41 in accordance with the above-described code arrangement rule, thereby obtaining 11 information symbols from each block of the QR code (registered trademark). , And an RS bit string composed of 22 or 23 RS symbols. Next, the control unit 44 obtains an exclusive OR (second exclusive OR) of the imaging bit sequence, the information bit sequence, and the RS bit sequence, thereby obtaining four bit sequences m ′ including two RS symbols. i (i = 1 to 4) (first exclusive OR) is detected as an error. Subsequently, the control unit 44 performs exclusive control of the four bit strings mi (i = 1 to 4) included in the RS bit string and the four bit strings m′i (i = 1 to 4) detected as errors. By calculating the logical sum, four bit strings ni (i = 1 to 4) embedded as the authentication information are obtained.

The control unit 44 accesses the URL indicated by the information bit string from the communication unit 42 via the Internet 5. Then, the control unit 44 transmits the authentication information including the four bit strings ni (i = 1 to 4) from the communication unit 42 to the management server 3 via the Internet 5.

The control unit 44 displays an authentication failure screen indicating that the authentication of the electronic ticket has failed in response to the communication unit 42 receiving the authentication failure notification transmitted from the management server 3 via the Internet 5. 43.

Next, various processes executed by the ticket management system 1 having the above configuration will be described with reference to the drawings.

In response to the user inputting the user's name, address, telephone number of the user terminal 2, and the like on the ticket purchase page displayed on the touch panel 22, in response to instructing the purchase of an electronic ticket for the event, The ticket management system 1 executes a ticket issuing process.

FIGS. 7 to 9 are flowcharts showing details of the ticket issuing process.

In the ticket issuing process, first, as shown in FIG. 7, the control unit 25 of the user terminal 2 issues a ticket capable of specifying the name and address of the user, the telephone number of the user terminal 2 and the like input on the touch panel 21. The purchase request is transmitted from the communication unit 22 to the management server 3 via the Internet 5 (step S1).

The control unit 33 of the management server 3 determines the confirmation information in response to the receipt of the ticket purchase request transmitted from the user terminal 2 via the Internet 5 by the communication unit 31 (step S2) (step S2). S3).

Next, the control unit 33 automatically sends a call to the user terminal 2 via the telephone network 6 (step S4).

The control unit 25 of the user terminal 2 outputs a ringtone from the voice output unit 21 in response to receiving an automatic call from the management server 3 via the telephone network 6 (step S5) (step S5). S6).

Then, in response to the user's instruction to receive a telephone call from the management server 3 (step S7; Yes), the control unit 25 connects the telephone with the management server 3 (step S8).

When the telephone connection with the user terminal 2 is established, the control unit 33 of the management server 3 transmits voice data for outputting automatic voice instructing input of confirmation information from the communication unit 31 to the user via the telephone network 6. The data is transmitted to the terminal 2 (step S9).

The control unit 25 of the user terminal 2 responds to the reception of the voice data transmitted from the management server 3 via the telephone network 6 by the communication unit 23 (step S10), and outputs an automatic voice based on the voice data. Output from the output unit 21 (step S11).

Thereafter, as shown in FIG. 8, the control unit 25 responds to the input of the confirmation information by the user (Step S12; Yes), and transmits the confirmation information from the communication unit 23 to the management server via the telephone network 6. 3 (step S13).

The control unit 33 of the management server 3 responds to the reception of the confirmation information transmitted from the user terminal 2 via the telephone network 6 by the communication unit 31 (step S14), and deletes the electronic ticket purchased by the user. The user's name, address, and telephone number of the user terminal 2 are registered in the ticket DB 320 in association with the indicated ticket ID (step S15).

Next, the control unit 33 reads the URL and the telephone number corresponding to the ticket ID from the ticket DB 320 (Step S16).

Next, the control unit 33 generates a QR code (registered trademark) indicating the URL read from the ticket DB 320 (Step S17).

Then, the control unit 33 decodes each block of the QR code (registered trademark) in accordance with a predetermined code arrangement rule, thereby obtaining an information bit string including 11 information symbols and 22 or 23 information symbols from each block. An RS bit string composed of RS symbols is obtained (step S18).

Next, the control unit 33 extracts two RS symbols from a predetermined position of the RS bit sequence of each block, and from each block, a bit sequence mi (i = i = i = 2) composed of two RS symbols and having a bit length of 16 1) to 4) are obtained (step S19).

Subsequently, the control unit 33 performs an exclusive OR operation on the bit sequence mi (i = 1 to 4) and the bit sequence ni (i = 1 to 4) having a bit length of 16 indicating the last four digits of the telephone number. Are calculated, and a bit string m′i (i = 1 to 4) is generated (step S20).

The control unit 33 embeds the bit string ni (i = 1 to 4) as authentication information by replacing the bit string mi (i = 1 to 4) with the bit string m′i (i = 1 to 4) (step S1). S21).

The control unit 33 embeds the authentication information in the correction area by arranging the information bit string and the RS bit string in which the authentication information is embedded according to the QR code (registered trademark) code arrangement rule, as shown in FIG. An electronic ticket including the acquired QR code (registered trademark) is generated (step S22).

Then, the control unit 33 transmits the electronic ticket from the communication unit 31 to the user terminal 2 via the Internet 5 (step S23).

The control unit 25 of the user terminal 2 receives the electronic ticket transmitted from the management server 3 via the Internet 5 (step S24), stores the electronic ticket in the storage unit 24 (step S25), and issues the ticket. To end.

Thereafter, the user displays the electronic ticket issued in the ticket issuing process on the touch panel 22 of the user terminal 2 and presents it to the attendant near the entrance of the event venue. Then, in response to the clerk instructing the electronic ticket displayed on the touch panel 22 of the user terminal 2 with the imaging unit 41 of the reading terminal 4 instructing authentication of the electronic ticket, the ticket management system 1 Execute the ticket authentication process.

FIGS. 10 and 11 are flowcharts showing details of the ticket authentication process.

In the ticket authentication process, the control unit 44 captures an electronic ticket displayed on the touch panel 22 of the user terminal 2 by the imaging unit 41 as shown in FIG. 10 (step S31).

The control unit 44 decodes the imaging bit sequence obtained by imaging the electronic ticket by the imaging unit 41 in accordance with the above-described code arrangement rule, thereby obtaining 11 information symbols from each block of the QR code (registered trademark). , And an RS bit string composed of 22 or 23 RS symbols (step S32).

Next, the control unit 44 obtains an exclusive OR of the imaging bit sequence, the information bit sequence, and the RS bit sequence, thereby obtaining four bit sequences m′i (i = 1 to 4) including two RS symbols. Is detected as an error (step S33).

Subsequently, the control unit 44 performs exclusive control of the four bit strings mi (i = 1 to 4) included in the RS bit string and the four bit strings m′i (i = 1 to 4) detected as errors. By calculating the logical sum, four bit strings ni (i = 1 to 4) embedded as the authentication information are obtained (step S34).

The control unit 44 accesses the URL indicated by the information bit string from the communication unit 42 via the Internet 5 (step S35).

Then, the control unit 44 transmits the authentication information including the four bit strings ni (i = 1 to 4) from the communication unit 42 to the management server 3 via the Internet 5 (step S36).

After the access from the reading terminal 4, the control unit 33 of the management server 3 responds to the reception of the authentication information transmitted via the Internet 5 by the communication unit 31 (step S <b> 37). The telephone number of the user terminal 2 corresponding to the URL is read out from the ticket DB 320 (step S38).

Then, the control unit 33 determines whether the authentication information received by the communication unit 31 matches the last four digits of the telephone number of the user terminal 2 read from the ticket DB 320 (Step S39).

If the authentication information does not match the last four digits of the telephone number of the user terminal 2 (step 39; No), the control unit 33 determines that the electronic information has been tampered with and notifies that the electronic ticket authentication has failed. The authentication failure notification is transmitted from the communication unit 31 to the reading terminal 4 via the Internet 5 (step S40).

The control unit 44 of the reading terminal 4 responds to the reception of the authentication failure notification transmitted from the management server 3 via the Internet 5 by the communication unit 42 (step S41), and informs that the authentication of the electronic ticket has failed. Is displayed on the display unit 43 (step S42), and then the ticket authentication process ends.

On the other hand, if the authentication information matches the last four digits of the telephone number of the user terminal 2 (step 39; Yes), the control unit 33 determines that the tampering has not been performed as shown in FIG. Then, a short mail indicating that the electronic ticket has been successfully authenticated is transmitted from the communication unit 31 to the telephone number of the user terminal 2 via the telephone network 6 (step S43).

The control unit 25 of the user terminal 2 receives the short mail indicating that the electronic ticket transmitted from the management server 3 via the telephone network 6 has been successfully authenticated (step S44), and displays the short mail on the touch panel 22. From (step S45), the ticket authentication process ends.

(4) The user can prove that the electronic ticket has been legally purchased and not resold by presenting the short mail displayed on the touch panel 22 to the attendant. After checking the presented short mail, the attendant determines that the electronic ticket has been purchased and permits the user to enter the event site.

As described above, the ticket management system 1 according to the present embodiment includes the user terminal 2, the management server (authentication target issuing device) 3, and the reading terminal 4, which are the Internet network 5 and the They are communicably connected via a telephone network 6.

In the ticket issuing process shown in FIG. 7, the control unit 25 of the user terminal 2 transmits a ticket purchase request capable of specifying the telephone number of the user terminal 2 to the management server 3 via the Internet network 5 (step S1). . In response to receiving the ticket purchase request from the user terminal 2 via the Internet network 5, the control unit 33 of the management server 3 automatically sends the request to the telephone number of the user terminal 2 specified from the ticket purchase request. A transmission is made, and confirmation information requesting an input by the user is notified via the telephone network 6 (step S9). The control unit 25 of the user terminal 2 transmits confirmation information notified from the management server 3 via the telephone network 6 to the management server 3 via the telephone network 6 in response to the user's input. (Step S13). The control unit 33 of the management server 3 transmits the electronic ticket to the user terminal 2 via the Internet network 5 in response to receiving the notified confirmation information from the user terminal 2 via the telephone network 6. As a result (step S23), an electronic ticket is issued to the user who has input the confirmation information.

Thereby, the ticket management system 1 can issue an electronic ticket that can be authenticated without using a password.

In the present embodiment, the control unit 33 of the management server 3 includes an information code (information area) Cd for expressing a URL by a cell distribution pattern and an RS code for expressing correction information for correcting an error by a cell distribution pattern. An electronic ticket is generated by embedding all or part of the telephone number of the user terminal 2 as authentication information in the RS code (correction area) Ce of the QR code (registered trademark) 100 including (correction area) Ce. (Step S22). Specifically, the control unit 33 acquires the bit string mi (i = 1 to 4) from a part of the RS code (correction area) Ce, and stores the bit string mi (i = 1 to 4) and the last four digits of the telephone number. And a bit string m'i (i = 1 to 4) which is an exclusive OR of the bit string ni (i = 1 to 4) indicating each number (step S20). Then, the control unit 33 replaces the bit string mi (i = 1 to 4) indicating a part of the RS code (correction area) Ce with the bit string m′i (i = 1 to 4), thereby forming the bit string ni. (I = 1 to 4) are embedded as authentication information (step S21).

By embedding the authentication information in the RS code Ce in this way, it is not necessary to make any change to the information code Cd representing the URL, and thus the data amount of the information represented by the QR code (registered trademark) is reduced. Can be prevented.

The management server 3 stores the telephone number of the user terminal 2 and a QR code (registered trademark) 100 which is an electronic ticket in which all or a part of the telephone number is embedded as authentication information in an RS code (correction area) Ce. It has a ticket DB 320 for registering the indicated URLs in association with each other. The reading terminal 4 includes an imaging unit 41 that captures an image of the QR code (registered trademark) 100 and obtains an imaging bit sequence.

In the ticket authentication process illustrated in FIG. 10, the control unit 44 of the reading terminal 4 decodes the imaging bit string acquired by the imaging unit 41 to acquire an information bit string indicating a URL and a correction bit string indicating correction information ( Step S32). The control unit 44 obtains a second exclusive OR that is an exclusive OR of the imaging bit sequence acquired by the imaging unit 41 and the information bit sequence and the correction bit sequence acquired in step S32, and obtains the bit sequence mi (i = 1 4) and a bit string m′i (i = 1 to 4) (first exclusive OR) which is an exclusive OR of the bit string ni (i = 1 to 4) is detected as an error (step S33). The control unit 44 performs a third exclusive logical operation which is an exclusive OR operation of the bit string mi (i = 1 to 4) included in the correction bit string and the bit string m′i (i = 1 to 4) detected as an error. The bit string ni (i = 1 to 4) is obtained by obtaining the sum (step S34).

Thereby, when the electronic ticket is tampered, the reading terminal 4 sets the bit string m′i (i = i = i = i), which is the exclusive OR of the bit string mi (i = 1 to 4) and the bit string ni (i = 1 to 4). 1 to 4) (first exclusive OR) cannot be detected as an error, so that forgery of the electronic ticket can be detected.

Then, the control unit 44 of the reading terminal 4 accesses the URL indicated by the imaging bit string acquired in step S32 via the Internet network 5 (step S35), and acquires the bit string ni (i = 1 to 4) acquired in step S34. ) Is transmitted to the management server 3 via the Internet network 5 (step S36). The control unit 33 of the management server 3 responds to the reading terminal 4 accessing the URL via the Internet 5 and receiving the authentication information from the reading terminal 4 (step S37), and changes the telephone number corresponding to the URL. It is read from the ticket DB 320 (step S38). The control unit 33 determines whether or not the authentication information received from the reading terminal 4 matches all or a part of the telephone number read in step S38 (step 39). If it is determined in step 39 that they match (step 39; Yes), the control unit 33 notifies the telephone number read out in step S38 that the electronic ticket has been successfully authenticated via the telephone network 6.

The ticket management system 1 according to the present embodiment does not use only one element of an ID and a password to authenticate with only one path of the Internet network 5 as in the related art, but uses a QR code (registered trademark) in the Internet network. For example, the electronic ticket can be authenticated by using two elements of the QR code (registered trademark) and the telephone number by two different routes, such as using the telephone number in the telephone network 6 and using the telephone number in the telephone network 6. As described above, the ticket management system 1 can authenticate an electronic ticket without using a password, so that it is not necessary to manage a password. In addition, although there is a possibility that the Internet network 5 is hacked and the password is leaked, the telephone network 6 is not hacked, so that the security of the authentication of the electronic ticket can be secured.

Furthermore, since the telephone number can be used by anyone anywhere, the electronic ticket can be authenticated overseas, for example. Since a third party cannot identify a user using only a telephone number, anonymity can be secured.

The management server 3 holds the operation history of the user and the transaction history of the electronic ticket, and the telephone company holds the transaction history of the electronic ticket in the call history. Since the history cannot be operated by the user, the security of the purchase of the electronic ticket can be secured. For example, when an incident or accident occurs, the telephone company can identify the user from the call history, so that the security of the purchase of the electronic ticket can be secured.

Further, conventionally, at the time of authentication, it was necessary to input an ID and a password. However, in the ticket management system 1 according to the present embodiment, it is only necessary to read the electronic ticket with the reading terminal 4, so that the authentication operation is simplified. can do. Further, according to the ticket management system 1 according to the present embodiment, the maintenance cost can be reduced as compared with the existing system using the ID and the password.

The present invention is not limited to the above embodiment, and various modifications and applications are possible. Hereinafter, modifications of the above-described embodiment applicable to the present invention will be described.

In the above embodiment, the authentication target is described as an electronic ticket. However, the present invention is not limited to this, and the authentication target is arbitrary. For example, the authentication target may be a paper ticket. In this case, the control unit 33 of the management server 3 generates a paper medium ticket on which a QR code (registered trademark) in which the authentication information is embedded in the correction area is printed. Then, the ticket seller has to mail the paper ticket to the user's address specified from the ticket purchase request. The user made the reading terminal 4 read the QR code (registered trademark) printed on the paper medium ticket near the entrance of the event venue, and successfully authenticated the electronic ticket on the touch panel 22 of the user terminal 2. Display a short mail indicating that. Then, the user may present the short mail displayed on the touch panel 22 to the attendant together with the paper medium ticket.

認証 Also, the authentication target may be for authenticating the user. In this case, the management server 3 receives the authentication code issuance request transmitted from the user terminal 2 via the Internet 5, and responds to the confirmation information received via the telephone network 6. A unique URL to the user. The management server 3 embeds, as authentication information, all or a part of the telephone number of the user identified from the request for issuing the personal authentication code in the correction area of the QR code (registered trademark) indicating the URL, and generates the personal authentication code. I do. Then, the management server 3 issues the personal authentication code to the user by transmitting the personal authentication code to the user terminal 2 via the Internet network 5. Thereafter, when the user displays the personal identification code on the touch panel 22 of the user terminal 2 and holds it over the reading terminal 4, the user terminal 2 is automatically transmitted from the management server 3 via the telephone network 6. , A short mail is sent. Thereby, for example, it is possible to confirm that the settlement partner of the user is the user himself, so that settlement can be performed.

Further, a predetermined monetary value may be given to the personal identification code. In this way, both the user terminal 2 of the user himself and the personal identification code to which a monetary value has been assigned are required for the settlement. For this reason, cash can be provided in a digital currency using a QR code (registered trademark).

In the above embodiment, the confirmation information is described as being notified to the user by an automatic voice. However, the present invention is not limited to this, and the confirmation information is notified to the user by a short mail. It may be something. In addition, although the user has been notified that the electronic ticket has been successfully authenticated by a short mail, the user may be notified by an automatic voice.

In the above embodiment, the QR code (registered trademark) 100 constituting the electronic ticket is described as a general-purpose QR code (registered trademark) that represents a URL by a distribution pattern of white cells and black cells. . However, a two-dimensional code with a logo in which a two-dimensional code is superimposed on a visible logo image may be used.

For example, a two-dimensional code with a logo is a logo image of less than a predetermined brightness that is recognized as black by a general-purpose two-dimensional code reader, and a cell with a predetermined brightness or more that is recognized as white by a general-purpose two-dimensional code reader is superimposed. It may be something. In this case, the two-dimensional code 11 with a logo is a cell having a predetermined brightness or higher that is recognized as white by a general-purpose two-dimensional code reader, a logo image with a predetermined brightness that is recognized as black by a general-purpose two-dimensional code reader, (For example, refer to Japanese Patent Laid-Open Publication No. 2007-287004).

In addition, the two-dimensional code with a logo is a part of the logo image that has a predetermined brightness that is recognized as black by a general-purpose two-dimensional code reader and has a brightness equal to or higher than a predetermined brightness that is recognized as white by a general-purpose two-dimensional code reader. The cells are superimposed, and a portion having a predetermined brightness which is recognized as white by a general-purpose two-dimensional code reader is a cell in which cells having a predetermined brightness which is recognized as black by a general-purpose two-dimensional code reader are superimposed. (For example, see Japanese Patent Application Laid-Open No. 2008-15624).

Furthermore, the two-dimensional code with the logo is such that only the cells of the first type of brightness are superimposed on the portion of the logo image having a brightness lower than the first brightness, while the portion of the logo image having the brightness of the first brightness or higher is superimposed. May be a cell in which both cells of the first type of brightness and cells of the second type of brightness are superimposed. Further, the two-dimensional code with a logo is such that only a cell of the first type of brightness is superimposed on a portion of the logo image having a brightness lower than the first brightness, and a portion of the first brightness or higher and a portion of the logo brightness lower than the second brightness is used. , The cell of the first type of brightness and the cell of the second type of brightness are superimposed, and a portion of the second type or higher that is recognized as white by a general-purpose two-dimensional code reader has the second type of brightness. Only cells may be superimposed. In this case, the two-dimensional code with the logo is a cell of the first type of lightness that is recognized as white by the general-purpose two-dimensional code reader and a portion of the logo image that has the second lightness or higher, and is blackened by the general-purpose two-dimensional code reader. The URL is expressed by the distribution pattern of the cell of the second type of lightness and the part of the logo image which is recognized as being less than the first lightness (for example, see WO2011 / 118540).

In this specification, reference is made to Japanese Patent Application Laid-Open No. 2007-287004, Japanese Patent Application Laid-Open No. 2008-15654, and Japanese Patent Application Publication No. WO2011 / 118540, claims, and the entire drawings. It shall be taken as.

In the above embodiment, the two-dimensional code has been described as a QR code (registered trademark). However, the present invention is not limited to this. The two-dimensional code is, for example, another matrix type two-dimensional code such as a data matrix, an aztec code, a code one, an array tag, a box graphic code, a maxi code, a peri code, a soft strip, a CP code, a carla code, and an ultra code. There may be. Alternatively, a stack type two-dimensional code in which one-dimensional bar codes such as PDF417, code 49, code 16k, and coder block are vertically stacked may be used.

In the above embodiment, the programs executed by the CPUs of the

control units

25, 33, and 44 are described as being stored in advance in the ROM and the

storage units

24 and 32, but the present invention is not limited to this. Instead, by applying a program for executing the above-described processing to an existing general-purpose computer, the program is caused to function as the user terminal 2, the management server 3, and the authentication terminal 4 according to the above-described embodiment. Is also good.

The method of providing such a program is arbitrary. For example, the program may be stored in a computer-readable recording medium (such as a flexible disk, a CD (Compact Disc) -ROM, or a DVD (Digital Versatile Disc) -ROM) and distributed. Alternatively, the program may be stored in a storage on a network such as the Internet and provided by downloading the program.

In the case where the above-described processing is executed by sharing an OS (Operating System) and an application program, or when the OS and the application program cooperate with each other, only the application program may be stored in a recording medium or a storage. It is also possible to superimpose a program on a carrier wave and distribute it via a network. For example, the program may be posted on a bulletin board (BBS: Bulletin Board System) on a network, and the program may be distributed via the network. Then, the above-described processing may be executed by activating this program and executing it in the same manner as other application programs under the control of the OS.

The present invention allows various embodiments and modifications without departing from the broad spirit and scope of the present invention. Further, the above-described embodiment is for describing an example of the present invention, and does not limit the scope of the present invention.

1 ticket management system (authentication target issuing system)
2 User terminal 3 Management server (authentication target issuing device)
4 reading terminal 5 Internet network 6 telephone network 21 voice output unit 22 touch panel 23 communication unit 24 storage unit 25 control unit 31 communication unit 32 storage unit 33 control unit 41 imaging unit 42 communication unit 43 display unit 44 control unit 100 QR code (registration) Trademark)
104 Positioning symbol 106 Information code recording area 108 Timing cell 109 Format code 320 Ticket DB

Claims

In response to receiving the issuance request for authentication from the user terminal (2) via the Internet network (5), addressing the telephone number of the user terminal (2) specified from the issuance request, Confirmation information notifying means (33) for notifying confirmation information requesting an input by the user via the telephone network (6);
The user who inputs the confirmation information in response to receiving the confirmation information notified by the confirmation information notification means (33) from the user terminal (2) via the telephone network (6). An authentication object issuing means (33) for issuing the authentication object;
An authentication target issuing device (3) comprising:
The authentication target issuing means (33) includes an information area for expressing a URL (Uniform Resource Locator) by a cell distribution pattern, and a correction area for expressing correction information for correcting an error by a cell distribution pattern. Generating authentication target by embedding authentication information in the correction area of the data code (100);
The authentication target issuance device (3) according to claim 1.
The authentication target issuing means (33) acquires an embedded bit string from a part of the correction area,
Calculating a first exclusive OR that is an exclusive OR of the embedded bit string and an authentication bit string indicating the authentication information;
Embedding the authentication information in the correction area by replacing a part of the correction area with the first exclusive OR;
An authentication target issuance device (3) according to claim 2.
The authentication target issuing unit (33) embeds all or a part of the telephone number of the user terminal (2) in the correction area as the authentication information.
The authentication target issuing device (3) according to claim 3.
The telephone number of the user terminal (2) and the URL indicated by the data code (100) to be authenticated, in which all or part of the telephone number is embedded in the correction area as the authentication information. A database (320) to be registered in association with;
The URL is accessed by the reading terminal (4) via the Internet network (5), and in response to receiving the authentication information from the reading terminal (4), the telephone number corresponding to the URL is stored in the URL. Telephone number reading means (33) for reading from the database (320);
A telephone number determining unit (33) for determining whether the authentication information received from the reading terminal (4) matches all or a part of the telephone number read by the telephone number reading unit (33); ,
If it is determined by the telephone number determination means (33) that they match, the telephone network (6) is notified to the telephone number read by the telephone number reading means (33) that the authentication of the authentication target has been successful. Authentication success notification means (33) for notifying via
The authentication target issuing device (3) according to claim 4, further comprising:
The authentication target issuing means (33) transmits the authentication target to the user terminal (2) via the Internet network (5);
The authentication target issuance device (3) according to claim 1.
Issuance request transmitting means (25) for transmitting an issuance request for the authentication target capable of specifying the telephone number of the user terminal (2) to the authentication target issuance device (3) via the Internet network (5);
In response to the user inputting the confirmation information notified from the authentication target issuing device (3) via the telephone network (6), the authentication target is transmitted via the telephone network (6). Confirmation information transmitting means (25) for transmitting to the issuing device (3);
A user terminal (2) having
An authentication target issuance device (3) according to claim 1,
An authentication target issuance system (1) comprising:
An imaging unit (41) that captures the data code (100) to obtain an imaging bit sequence;
Decoding means (44) for decoding the imaging bit sequence acquired by the imaging unit (41) to obtain an information bit sequence indicating the URL and a correction bit sequence indicating the correction information;
A second exclusive OR, which is an exclusive OR of the imaging bit sequence acquired by the imaging unit (41) and the information bit sequence and the correction bit sequence acquired by the decoding unit (44), is obtained. Error detecting means (44) for detecting the first exclusive OR, which is the exclusive OR of the embedded bit string and the authentication bit string, as an error;
Calculating a third exclusive OR, which is an exclusive OR of the embedded bit string included in the correction bit string and the first exclusive OR detected as an error by the error detection means (44); An authentication bit string acquisition unit (44) for acquiring the authentication bit string;
The URL indicated by the imaging bit string acquired by the decoding means (44) is accessed via the Internet network (5), and the authentication indicated by the authentication bit string acquired by the authentication bit string acquisition means (44). Authentication information transmitting means (44) for transmitting information to the authentication target issuing device (3) via the Internet network (5);
The reading terminal (4) comprising:
An authentication target issuance device (3) according to claim 5,
An authentication target issuance system (1) comprising:
The authentication target issuing device (3)
In response to receiving the issuance request for authentication from the user terminal (2) via the Internet network (5), addressing the telephone number of the user terminal (2) specified from the issuance request, Notify via a telephone network (6) confirmation information requesting user input,
In response to receiving the notified confirmation information from the user terminal (2) via the telephone network (6), issuing the authentication target to the user who has input the confirmation information. ,
Authentication target issuance method.
On the computer,
In response to receiving the issuance request for authentication from the user terminal (2) via the Internet network (5), addressing the telephone number of the user terminal (2) specified from the issuance request, A confirmation information notification procedure (33) for notifying confirmation information requesting an input by the user via the telephone network (6);
The user who has input the confirmation information in response to receiving the confirmation information notified by the confirmation information notification procedure (33) from the user terminal (2) via the telephone network (6). An authentication object issuance procedure (33) for issuing the authentication object;
A program for executing