JP2008312001A - Confidential data generating/reading system, and confidential data generating/reading method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a confidential data generating/reading system and a confidential data generating/reading method which are introduced, operated inexpensively and by which a user does not have to continuously store the confidential data and in addition, it is not required for placing additional information in a server, etc. <P>SOLUTION: The confidential data generating/reading system 10 by the present invention has: a confidential data generating means 103 for generating the confidential data; an encryption means 104 for encrypting the confidential data to generate encrypted data; a code conversion means 105 for converting the encrypted data into an image code; a first presentation means 106 for presenting the image code to the user; an image code acquisition means 202 for acquiring the image code; a code reverse conversion means 203 for performing reverse conversion of the acquired image code into the encrypted data; a decryption means 205 for decrypting the confidential data from the reversely converted encrypted data; and a second presentation means 206 for presenting the decrypted confidential data to the user. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a secret data generation and reading system and a secret data generation and reading method. More specifically, the present invention relates to a secret data generation / reading system and a secret data generation / reading method for encrypting secret data and further converting it into an image code to increase safety.

  Conventionally, many character strings have been used as secret data for authentication for devices that require authentication, such as a login password for a computer. At that time, the user must remember the character string determined as confidential data, so the number of characters should be set to a small number, or a character string or dictionary based on user-specific information such as the user's name or phone number should be used. There were security problems, such as using easy-to-remember character strings as described. In particular, secret data such as passwords that need to be changed periodically and that requires randomness has become a serious problem.

  On the other hand, in order to perform authentication by a method other than password input that does not require the user to store confidential data, authentication using a USB key, biometric authentication such as a fingerprint, authentication using an IC card, etc. is there. (For example, refer to Patent Documents 1 and 2 and Non-Patent Document 1)

  In addition, when the user forgets the confidential data without using the above method, a reminder system for reissuing the confidential data with a unique question set by the user or a plurality of confidential data as one confidential There is a system that assists the operation of a plurality of confidential data possessed by a user by making it possible to manage and view the data collectively.

JP 2004-320220 A (paragraphs [0006] to [0015], FIGS. 1 to 4) JP 2003-228705 A (paragraphs [0017] to [0036], FIGS. 1 to 4) "Information Security Technology in the Ubiquitous Era", written by Yoichi Seto, Nihon Kogyo Publishing, 2003

  However, if the user does not directly input the confidential data as a character string, a special device, additional software, a server on an external network, etc. for the target for generating or reading the confidential data And high initial costs and operational costs have been incurred for their introduction and operation.

  In addition, in a system that assists the operation of the confidential data of the user, additional information other than the original confidential data such as personal information of the user is necessary, and the additional information is a server that can be connected from an external network. In many cases, it is necessary to consider network security for these additional information.

  The present invention provides a secret data generation / reading system and a secret data generation / reading method that can be introduced and operated at low cost, and that does not require the user to continuously store secret data and that does not require additional information to be stored in a server or the like. The purpose is to provide.

  In order to solve the above-described problem, the secret data generation / reading system 10 according to the first aspect of the present invention encrypts the secret data and the secret data generation means 103 for generating the secret data as shown in FIG. A secret image code generation apparatus comprising: an encryption unit 104 that generates encrypted data; a code conversion unit 105 that converts the encrypted data into an image code; and a first presentation unit 106 that presents the image code to the user. 1, an image code acquisition unit 202 that acquires an image code, a code reverse conversion unit 203 that reversely converts the acquired image code into encrypted data, and a decryption unit 205 that decrypts confidential data from the reversely converted encrypted data And the secret data reading device 2 having the second presenting means 206 for presenting the decrypted secret data to the user.

  In this specification, the case where the secret data is mainly a password will be described. However, the secret data is not limited to a password, and includes encryption key, decryption key, encryption, and other secretly managed data. In this specification, the image code is mainly described as a QR code (registered trademark of DENSO WAVE INCORPORATED), but the present invention is not limited to this. One-dimensional barcode, two-dimensional barcode, and other figures on a two-dimensional plane And a code having self-other identification by a one-dimensional and two-dimensional array of black and white cells. The cell is generally a rectangle such as a square or a rod-like rectangle, but a triangle or a hexagon may be used, and white and black circles may be arranged vertically or horizontally or spirally. In addition to black and white, a multi-color and multi-tone code may be used. Further, these codes may be incorporated and used as a digital watermark. The image code typically corresponds to the secret data on a one-to-one basis, but one secret data may correspond to a plurality of image codes, and the image code includes information other than the secret data such as an access right. But it ’s okay. The image code is typically acquired by photographing with a photographing means such as a digital camera or a CCD camera. However, the image code may be obtained by reading an image with a scanner or the like. Although what is possessed by the reading device 2 itself is used, an image code photographed by another photographing means may be received via a communication means or may be obtained by reading via a recording medium such as a CD-ROM. However, when using another photographing means, it is desirable to perform management such as prohibiting the photographing means from being taken out of the room as a security measure. Further, the secret image code generation device 1 and the secret data reading device 2 do not necessarily have to be integrated. For example, the code reverse conversion unit 203 and the decoding unit 205 are installed in the personal computer main body together with the control unit of the secret data reading device. The image code acquisition unit 202 may be configured with a digital camera, and the second presentation unit 206 may be configured with a liquid crystal display. Further, the secret image code generation device 1 and the secret data reading device 2 may be integrated.

  With this configuration, the user holds the secret data reading device 2, knows the decryption key corresponding to the input encryption key, and is in an environment where the image code printed on the paper can be photographed. Unless it is a limited case, since the secret data cannot be known, high security can be maintained for the secret data. For example, if the decryption key is input only at the first use, the user does not need to always store the secret data and the additional information related to the secret data. As described above, the secret data generation / reading system according to the present embodiment can be introduced and operated at low cost, and the user does not need to continuously store the secret data, and additional information needs to be placed on the server or the like. A secret data generation / reading system can be provided.

  Further, according to the second mode, in the secret data generation / reading system 10 of the first mode, for example, as shown in FIG. 1, the secret image code generation device 1 includes an encryption key input unit 101 for a user to input an encryption key. And encryption key data generation means 102 for generating encryption key data from the encryption key input by the encryption key input means 101, and the encryption means 104 encrypts the secret data using the encryption key data. If comprised in this way, the safety | security of an encryption key can be improved by converting a user's encryption key into encryption key data.

  Further, according to a third aspect, in the secret data generation / reading system according to the first aspect or the second aspect, the secret data generation unit 103 automatically generates secret data randomly by a random number generator. With this configuration, it is possible to configure confidential data with user-specific information such as the user's name and telephone number, and character strings that are not related to words as described in the dictionary. , The security at the time of operation of the generated secret data can be improved.

  Further, a fourth aspect is the secret data generation / reading system according to any one of the first aspect to the third aspect, wherein the code conversion means 105 converts the encrypted data into a two-dimensional barcode, and the code reverse conversion means. 203 reversely converts the two-dimensional barcode into encrypted data. When configured in this manner, an existing and widely used two-dimensional bar code reader such as a portable terminal with a camera incorporating a two-dimensional bar code reader function can be used, and a secret data generation / read system can be realized at low cost. It can be introduced and operated.

  The fifth aspect is the secret data generation and reading system according to any one of the first to fourth aspects, wherein the first presenting means 106 prints and presents the image code on a print medium such as paper. The image code acquisition means captures and acquires the printed image code. If comprised in this way, the confidential image code production | generation apparatus 1 can be easily shown by printing the image code containing confidential data on paper etc. Moreover, the confidential data reading apparatus 2 photographed the printed image code. Can be obtained more easily.

  The sixth aspect is the secret data generation / reading system according to any one of the first to fifth aspects. For example, as shown in FIG. 1, the secret data reading apparatus 2 has a user input a decryption key. And a decryption key data generation unit 204 that generates decryption key data from the decryption key input by the decryption key input unit 201. The decryption unit 205 encrypts using the decryption key data. Decrypt the data. If comprised in this way, the security of a decryption key can be improved by converting a user's decryption key into decryption key data.

  The secret image code generation device according to the seventh aspect is the secret image code generation device 1 in the secret data generation and reading system 10 according to the first aspect.

  Further, the secret data reading device of the eighth aspect is the secret data reading device 2 in the secret data generating / reading system 10 of the first aspect.

  In order to solve the above-described problem, the secret data generation and reading method according to the ninth aspect of the present invention includes a secret data generation step S103 for generating secret data 1004 and secret data 1004 as shown in FIGS. Encryption step S104 for generating encrypted data 1005, code conversion step S105 for converting the encrypted data 1005 into an image code 1006, and a first presentation step S106 for presenting the image code 1006 to the user A secret image code generation step S1, an image code acquisition step S202 for acquiring an image code 1006, a code reverse conversion step S203 for reversely converting the acquired image code 2002 into encrypted data 2003, and a reverse conversion Decryption step S205 for decrypting the secret data 2005 from the encrypted data 2003, and the decrypted secret And a second presentation step S206 that presents over data 2005 to a user, and a secret data reading step S2.

  With this configuration, the secret data generation and reading method according to the present embodiment can be introduced and operated at low cost, and the user does not need to continue storing secret data, and places additional information on a server or the like. It is possible to provide a secret data generation and reading method that is not required.

The tenth aspect is the secret data generation and reading method according to the ninth aspect. For example, as shown in FIGS. 2 and 4, the secret image code generation step S <b> 1 includes an encryption key in which the user inputs the encryption key 1001. It has an input step S101 and an encryption key data generation step S102 that generates encryption key data 1003 from the encryption key 1001 input in the encryption key input step S101. Print on the print media,
The image code acquisition step S202 captures and acquires the printed image code, the encryption step S104 encrypts the secret data 1004 using the encryption key data 1003, and the secret data read step S1 is decrypted by the user. A decryption key input step S201 for inputting the key 2001, and a decryption key data generation step S204 for generating the decryption key data 2004 from the decryption key 2001 input in the decryption key input step S201. The encrypted data 2003 is decrypted using the data 2004.

  The secret image code generation method of the eleventh aspect is a secret image code generation method in the secret data generation and reading method of the ninth aspect.

  The secret data reading method according to the twelfth aspect is the secret data reading method in the secret data generating / reading method according to the ninth aspect.

  A thirteenth aspect is a program for causing a computer to execute the secret data generation and reading method according to the ninth aspect or the tenth aspect.

  The fourteenth aspect is a computer-readable recording medium on which the program according to the thirteenth aspect is recorded.

  According to the present invention, a secret data generation / reading system and secret data generation that can be introduced and operated at low cost, and the user does not need to continuously store secret data and does not need to store additional information on a server or the like. A reading method can be provided.

[First Embodiment]
Next, embodiments of the present invention will be described in detail with reference to the drawings. In the first embodiment, an example in which secret data is a password and an image code is a QR code will be described. An example in which an image code is printed by a printer will be described.

  FIG. 1 shows a configuration example of a secret data generation / reading system according to an embodiment of the present invention. The secret data generation / reading system 10 includes a secret image code generation device 1 and a secret data reading device 2. In FIG. 1, a configuration example of the secret image code generation device 1 is shown on the left, and a configuration example of the secret data reading device 2 is shown on the right. The secret image code generation device 1 includes an encryption key input unit 101 for a user to input an encryption key, an encryption key data generation unit 102 for generating encryption key data from an encryption key input by the encryption key input unit 101, and a secret Secret data generating means 103 for generating data, encryption means 104 for encrypting the secret data to generate encrypted data, code conversion means 105 for converting the encrypted data into an image code, and the image code for the user The first presentation means 106 to be presented and the secret image code generation center that controls each of these means to cause the secret image code generation device 1 to perform its function, that is, generates a secret image code from the secret data and presents it. And a processing device 107.

  The secret data reader 2 also includes a decryption key input unit 201 for a user to input a decryption key, an image code acquisition unit 202 for capturing and acquiring an image code, and inverse conversion of the acquired image code into encrypted data. Code reverse conversion means 203, decryption key data generation means 204 for generating decryption key data from the decryption key input by the decryption key input means 201, and secret data from encrypted data reversely converted using the decryption key data Decryption means 205 for decrypting data, second presentation means 206 for presenting the decrypted secret data to the user, and controlling each of these means to cause the secret data reader 2 to perform its function, that is, a secret image The secret data generated by the secret data generation unit 103 is restored from the secret image code generated by the code generation central processing unit 107, and the secret data is presented. And a reading central processing unit 207.

  Next, each unit of the secret image code generation device 1 will be described. FIG. 2 shows an example of a processing flow of a secret image code generation / reading method to be described later. Refer to FIG. 2 for the processing flow and codes of data, codes, and the like.

  The encryption key input means 101 is composed of, for example, an input means such as a keyboard and a mouse and a display means such as a liquid crystal display. The user inputs an encryption key using the keyboard and mouse while looking at the liquid crystal display. A condition for a password 1004 is set. In addition, you may input using a touch pen and a voice input as an input means.

  The encryption key 1001 is typically composed of a character string made up of alphabets and numbers, but is not limited to this, and may include kana characters and symbols, as well as images, sounds, and their characteristic values (characteristics of fingerprints). , Cepstrum, etc.) and the order of button operations, etc., data usable by a computer may be used. Examples of setting items for character type include setting which type to include in confidential data among uppercase alphabetic characters, lowercase alphabetic characters, numbers, and symbols, and distinguishing at the time of display such as alphabetic O and number 0 There is a setting that does not include difficult characters in the confidential data.

  FIG. 3 shows a display example of the encryption key input screen D1. The encryption key input screen D1 includes an encryption key input text box T101, a generation number text box T102, a password length input text box T103, a character type selection check box C104, and a generation print button B105. The user inputs an arbitrary character string (alphabet, number, symbol) as the encryption key 1001 into the encryption key input text box T101 using the keyboard and the mouse, and generates a password as secret data in the generation number text box T102. Enter the number as a numerical value, enter the character string length of the password to be generated in the password length T103 as a numerical value, check the type of the character you want to use for the password in the character type selection check box C104, and press the print generation button B1 Instruct password generation and printing.

  The encryption key data generation unit 102 generates encryption key data 1003 based on part or all of the encryption key 1001 input by the user using the encryption key input unit 101. For example, the encryption key 1001 may be used as it is to obtain the encryption key data 1003, or the result of computing the encryption key 1001 with a specific function may be used as the encryption key data 1003, or a user-specific ID (identification information) in advance. May be added to the encryption key data generation unit 102, and the ID and the encryption key 1001 may be combined with a part or all of the ID, and the result calculated by a specific function may be used as the encryption key data 1003. Examples of specific functions include replacement of predetermined partial data, application of a one-way function, and data conversion based on a conversion table in which input / output values are set to 1: 1 in advance. The encryption key data 1003 uses, for example, a well-known common key encryption method common key (Camellia encryption, AES encryption, etc.) or a public key encryption public key (RSA encryption, Elgamal encryption, etc.). (For example, “128-bit block cipher Camellia”, Aoki et al., IEICE Technical Report ISEC 2000-6, May 2000, U.S. Pat. No. 4,405,829, “Cryptographic communications system and method”, Ronald L. Rivest et al., reference)

  The secret data generation unit 103 generates a password 1004 that is secret data according to the generation setting item 1002 input from the encryption key input screen D1 (see FIG. 3). In this embodiment, a random number is automatically generated randomly using a random number generator. Typically, pseudorandom numbers such as 256 bits and 512 bits output from a polynomial time calculator are used as random numbers, but natural random numbers based on natural phenomena such as noise may be used. In order to generate a password, for example, a random number generator (uniform random number) limited to a certain range is generated by a random number generator, and the random number is replaced with a character string (for example, using a JIS code or an ASCII code). By repeating, a plurality of passwords 1004 are generated. Further, a plurality of password candidates may be generated based on a plurality of random numbers generated by the random number generator and presented to the user, and a candidate selected by the user from the plurality of password candidates may be used as the password 1004. A large number of such password candidates may be stored in advance on a recording medium such as a hard disk of a personal computer, and a part of the stored data may be used as the password 1004. Because this multi-digit random number is used as a password, the password is composed of user-specific information such as the user's name and telephone number, and character strings that are not related to easy-to-remember words such as those described in the dictionary. It is possible to increase the security at the time of password operation.

  The encryption unit 104 encrypts the secret data 1004 using the encryption key data 1003 as a key, and generates encrypted data 1005. For encryption, commonly used methods such as a common key method and a public key method can be adopted, but the method is not limited to this. For example, if there is a method operated in-house, this method can be used. good. The encrypted data 1005 is data that cannot be decrypted unless it is decrypted with a decryption key, and is typically a character string, but may be a binary numeric string.

  The code conversion means 105 converts the encrypted data into an image code. In this embodiment, a case where a QR code (one type of two-dimensional barcode) is used as an image code will be described. In addition, a two-dimensional barcode other than a one-dimensional barcode or QR code (stack type, matrix) Any other code can be used as long as it is drawn as a figure on a two-dimensional plane and has a self-other identification property by a one-dimensional or two-dimensional array of black and white cells. Further, these codes or the encrypted data itself may be incorporated and used as a digital watermark. A method of converting a character string (which may include numbers and symbols) as encrypted data 1005 into a QR code is also disclosed in the JIS standard (JIS standard “two-dimensional code symbol (QR code basic specification)”). No. JIS-X-0510), and software that converts character strings into QR codes and software that reversely converts QR codes into character strings are widespread in Japan, and are often transferred to mobile terminals. Rare or installable. The same applies to a method of converting a binary numeric string (binary data) into a QR code and inversely converting from the QR code. If such software is used, the encrypted data 1005 can be easily converted into the QR code, and the QR code can be easily converted into the encrypted data 1005, and the reverse conversion can be performed. With respect to other one-dimensional barcodes and two-dimensional barcodes, the encrypted data 1005 can be converted into a barcode, and the barcode can be converted into the encrypted data 1005 by using dedicated conversion software.

  The first presenting means 106 presents the image code to the user. In the present embodiment, a printing unit is used as the first presentation unit 106. The printing unit 106 prints the QR code, which is the image code 1006, on a sheet, a label, or the like and presents it to the user, and the user can see the print result 1007 on which the QR code has been printed. For example, QR code is formed in 21 mm x 21 cells to 177 cells x 177 cells in a few mm square, and it is usually possible to decipher the code by photographing the actual size with a digital camera, but this may be printed in actual size. The image may be enlarged for easy viewing, or may be reduced in size and photographed through a magnifying lens so as to be decipherable. The print result 1007 is used, for example, by pasting it on a server, router, terminal or the like that requires password login, and storing it in a drawer near these. It is desirable to perform management such as prohibiting it from being taken out.

  The secret image code generation central processing unit 107 controls each means 101 to 106 constituting the secret image code generation device 1 so that the secret image code generation device 1 performs its function. Among these means, the encryption key data generation means 102, the secret data generation means 103, the encryption means 104 and the code conversion means 105 can be realized by a program, and the display program in the encryption key input means 101, the first presentation means The presentation data output program in 106 can be realized by a program. These programs are installed in the built-in memory of the confidential image code generation central processing unit 107 together with the control program, and control the entire confidential image code generation central processing unit 107 and its constituent means. Control communication with peripheral devices according to Thereby, the secret image code generation device 1 can generate the secret image code 1006 from the secret data 1004 and present it to the user.

  Next, each means of the secret data reading device 2 will be described. FIG. 4 shows a processing flow example of a secret data reading method to be described later. Refer to FIG. 4 for the processing flow and codes such as data and code.

  The decryption key input unit 201 includes, for example, an input unit such as an input button attached to the terminal and an input / display unit such as a touch panel type liquid crystal display, and the user uses the touch pen to read the decryption key 2001 while looking at the touch panel of the input screen. Input and set with the setting button. Note that a keyboard, mouse, or voice input may be used as the input means. First, when the decryption key 2001 is not set or needs to be changed, such as when the decryption key is changed at the first activation or when the decryption key is changed, the user uses the decryption key input unit 201 to enter the decryption key 2001 corresponding to the encryption key 1001. Enter and change. If the decryption key does not need to be changed after the second use, the decryption key setting by the decryption key input unit 201 can be omitted.

  The decryption key 2001 is typically composed of a character string consisting of alphabets and numbers, but is not limited to this, and may include kana characters and symbols, as well as images, sounds, and their characteristic values (fingerprint characteristics). , Cepstrum, etc.) and the order of button operations, etc., data usable by a computer may be used. The input and changed decryption key 2001 is stored in a non-volatile information storage area inside the secret data reader 2.

  FIG. 5 shows a display example of the decryption key input screen D2 when the decryption key input means 201 is realized on a mobile phone. The decryption key input screen D2 includes a decryption key input text box T201 and a setting button B202. The user inputs an arbitrary character string as the decryption key 2001 corresponding to the encryption key 1001 in the decryption key input text box T201, and selects the setting button B202. The decryption key decrypts the data encrypted with the encryption key into the original data, and has a one-to-one correspondence with the encryption key. For security reasons, it is desirable to update the encryption key and the decryption key as needed.

  The image code acquisition unit 202 acquires a QR code that is an image code 1007 printed on a print medium such as paper. To obtain the image code, a photographing means such as a digital camera or a CCD camera can be used to digitally record a photographed image in units of cells, or an input means that can be used to digitally record a scanned image in units of cells. Also, digital cameras and scanners attached to portable terminals such as PDAs (Personal Digital Assistants) and notebook computers can be used. In addition, you may image | photograph through a magnifying lens.

  The code reverse conversion unit 203 reversely converts the acquired image code 2002 into encrypted data 2003. In this embodiment, a QR code is used as the image code 2002, but a one-dimensional barcode, a two-dimensional barcode other than the QR code, and the like can also be used. A lot of software that reversely converts a QR code into a character string (which may include numbers and symbols) as encrypted data 2003 can be incorporated or installed in a mobile terminal. If such software is used, the QR code 2002 can be easily converted back into the encrypted data 2003. For other one-dimensional barcodes and two-dimensional barcodes, the barcodes can be converted back into encrypted data 2003 using dedicated conversion software. If reverse conversion is made normal, the encrypted data 2003 is the same as the encrypted data 1005.

  The decryption key data generation unit 204 reads the decryption key 2001 input by the user using the decryption key input unit 201 from the nonvolatile information storage area, and generates the decryption key data 2004 based on a part or all of the decryption key 2001. The decryption key 2001 may be used as it is, the result calculated by a specific function may be used as the decryption key data 2004, or a user-specific ID is added to the decryption key data generation unit 204 in advance, and the ID The decryption key data 2004 may be obtained by combining a part or all of the decryption key 2001 with a specific function. Examples of specific functions include replacement of predetermined partial data, application of a one-way function, and data conversion based on a conversion table in which input / output values are set to 1: 1 in advance.

  The decrypting means 205 decrypts the password, which is the secret data 2005, from the encrypted data 2003 that has been reversely converted using the decryption key data 2004 as a key. For decryption, commonly used methods such as a common key method and a public key method can be adopted, but the present invention is not limited to this. For example, if there is a method operated in-house, this method may be used. good. Here, the decryption key 2001 has a one-to-one correspondence with the encryption key 1001 to return the ciphertext to plaintext, and the decryption key data 2004 has a one-to-one correspondence with the encryption key data 1003. . If the decryption is successful, the secret data 2005 is the same as the secret data 1004.

  The second presenting means 206 presents the decrypted confidential data 2005 to the user. A password 2005, which is confidential data, is displayed on second display means such as a liquid crystal display. For example, when the print result 1007 pasted on the server represents the QR code of the login password of the server, the user can log in to the server using the confidential data 2005 presented by the second presentation unit 206. . After presenting the password 2005, when the user finishes presenting the password 2005 presented by the second presenting means 206, the confidential data reading device 2 erases the confidential data 2005 that has been presented and does not remain on the device. To.

  The secret data reading central processing unit 207 controls each means 201 to 206 constituting the secret data reading device 2 so that the secret data reading device 2 performs its function. Among these means, the code reverse conversion means 203, the decryption key data generation means 204, the encryption means 104 and the decryption means 205 can be realized by a program, the display program in the decryption key input means 201, and the second presentation means 206. The presentation data output program can be realized by a program. These programs are installed in the built-in memory of the confidential data reading central processing unit 207 together with a control program (including the control program of the image code obtaining unit 202), and control the entire confidential data reading central processing unit 207 and its constituent means. The communication with the secret image code generation central processing unit 107 and peripheral devices is controlled as necessary. Thereby, the secret data reading device 2 can restore the secret data generated by the secret data generation unit 103 and present it to the user.

  FIG. 2 shows an example of the processing flow of the secret image code generation step S1 in the present embodiment. For the configuration, refer to FIG. 1 as appropriate.

  First, the user inputs the encryption key 1001 by the encryption key input means 101 (encryption key input step: S101). On the encryption key input screen D1, the encryption key 1001 and the number of passwords 1004 that are secret data to be generated, the length of each data, and the generation setting items 1002 such as the character type to be included in the password 1004 are entered or changed, and an enter key or This is set by pressing a confirmation key (not shown). By pressing the generation print button B 1, the generation setting item 1002 is transmitted to the secret data generation unit 103.

  Next, the encryption key data generation unit 102 generates encryption key data 1003 from the encryption key 1001 input in the encryption key input step S101 (encryption key data generation step: S102). The encryption key data 1003 may be generated based on a part of the input encryption key 1001 or may be generated based on the whole.

  Next, the secret data generation unit 103 generates secret data 1004 (secret data generation step: S103). The secret data 1004 is generated in accordance with the generation setting item 1002 set in the encryption key input step S101. In this embodiment, a password is handled as the confidential data 1004, and a random number generator is used to generate the confidential data 1004. Since a multi-digit random number is used as a password, the security at the time of password operation can be improved.

  Next, the encryption unit 104 encrypts the confidential data 1004 to generate encrypted data 1005 (encryption step: S104). Using the encryption key data 1003 generated in the encryption key data generation step S102 as a key, the secret data 1004 generated in the secret data generation step S103 is encrypted to generate encrypted data 1005. For encryption, commonly used methods such as a common key method and a public key method can be adopted.

  Next, the code conversion means 105 converts the encrypted data 1005 into an image code 1006 (code conversion step: S105). The encrypted data 1005 generated in the encryption step S104 is converted into a printable image code 1006. As the image code 1006, there are a two-dimensional barcode, a one-dimensional barcode, and the like. In the present embodiment, a QR code is used. The user can easily convert the encrypted data 1005 into a QR code using a terminal or the like in which software for converting to QR code is incorporated.

  Next, the first presenting means 106 presents the image code 1006 to the user (first presenting step: S106). In the present embodiment, a printing unit is used as the first presentation unit 106, and a QR code as the image code 1006 is printed on a sheet, a label, or the like, and the user can acquire a printing result 1007. The printed image may be an actual size so that the QR code cell can be taken and decoded, but it may be enlarged.

  FIG. 4 shows an example of the processing flow of the confidential data reading step S2 in the present embodiment. For the configuration, refer to FIG. 1 as appropriate.

  First, the user inputs the decryption key 2001 using the decryption key input means 201 (decryption key input step: S201). The decryption key 2001 is input and set in the decryption key input screen D2. At this time, in the decryption key input / change necessity determination step S200, it is determined whether the decryption key is input or changed. If input or change is required, the process proceeds to the decryption key input step S201. If the decryption key does not need to be changed after the second use, the decryption key input step S201 can be omitted.

  Next, the user acquires the image code 1007 presented by the first presentation unit 106 of the secret image code generation unit 1 by the image code acquisition unit 202 (image code acquisition step: S202). In this embodiment mode, a QR code 1007 printed on a sheet or the like by the printing unit 106 is photographed with a digital camera.

  Next, the code reverse conversion means 203 reversely converts the image code 2002 acquired in the image code acquisition step S202 into the encrypted data 2003 (code reverse conversion step: S203). As the image code 2002, there are a two-dimensional barcode, a one-dimensional barcode, and the like. In this embodiment, a QR code is used. The user can easily convert the QR code 2002 into the encrypted data 2003 using a terminal in which QR code reverse conversion software is incorporated. If reverse conversion is made normal, the encrypted data 2003 becomes the same as the encrypted data 1005.

  Next, the decryption key data generation unit 204 generates decryption key data 2004 from the decryption key 2001 input in the decryption key input step S201 (decryption key data generation step: S204). The decryption key data 2004 may be generated based on a part of the decryption key 2001 input in the decryption key input step S201, or may be generated based on the whole.

  Next, the decryption means 205 decrypts the confidential data 2005 from the inversely converted encrypted data 2003 (decryption step: S205). Using the decryption key data 2004 generated in the decryption key input step S201 as a key, the encrypted data 2003 restored in the code reverse conversion step S203 is decrypted to restore the confidential data 2005. If the decryption is successful, the secret data 2005 becomes the same as the secret data 1004. The second presenting means 206 presents the decrypted confidential data 2005 to the user (second presenting step: S206). A password 2005, which is confidential data, is displayed on second display means such as a liquid crystal display. The user can log in to the server using the presented password 2005. After the presentation is completed, the password 2005 is deleted.

  As a result, according to the present invention, the confidential data can be safely recorded on an inexpensive print medium such as paper or a label without the user always storing the confidential data, and for example, a mobile phone with a camera can be obtained. It is a person who can read the secret data with an easy portable terminal or the like, has the secret data reader 2 and knows the decryption key, and knows that the pasted code represents the secret data. Since confidential data can only be read in limited cases, the confidential data generation and reading system and the confidential data generation and reading can be performed safely, at low cost, while maintaining the security of the confidential data Can provide a method.

  In addition, there is no need to maintain additional information related to confidential data such as questions and answers when reminders are used on an external network in case the confidential data is forgotten. There is no need to deal with it. In addition, by incorporating conversion and inverse conversion into a two-dimensional bar code for image code generation and reading, widely used personal computers, camera-equipped mobile terminals, printers, etc. can be used for the configuration of the above-mentioned generation reading system, Both introduction cost and operation cost can be provided low.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In the first embodiment, the user inputs part or all of the encryption key and the decryption key with the encryption key input means 101 and the decryption key input means 201. However, in this embodiment, the user encrypts the encryption key and the decryption key. An example in which the key input unit 101 and the decryption key input unit 201 are not directly input will be described. Here, parts different from the first embodiment will be described (the same applies to the following embodiments). The secret data generating device 1 and the secret data reading device 2 hold in advance an ID uniquely assigned to a user, an ID uniquely assigned to a mobile terminal, and the like, and an encryption key input unit 101 or a decryption key The input means 201 applies the held ID as part or all of the encryption key and decryption key instead of the user inputting. When applied as a part, for example, it is used in combination with other held IDs. Further, a result obtained by calculating these IDs by a specific function may be applied as an encryption key or a decryption key. Other configurations and processing flow are the same as those in the first embodiment, and the same effects are obtained.

[Third Embodiment]
Next, a third embodiment of the present invention will be described. In the first embodiment, only the confidential data is presented by the presenting means 206, but in the present embodiment, a presentation example for preventing the secret data from being seen is described. The presenting means 206 presents a plurality of simulated data mixed with the original secret data. If the location of the original secret data is fixed and the user knows the location in advance, the user can know the original secret data, but whoever is peeking from behind It becomes difficult to know whether it is secret data. Further, a plurality of simulated data is mixed with the original secret data to form one data so that the original secret data appears, for example, every three characters. Other configurations and processing flow are the same as those in the first embodiment, and the same effects are obtained.

[Fourth Embodiment]
Next, a fourth embodiment of the present invention will be described. In the first embodiment, the user obtains the print result 1007 by printing on a sheet, label, or the like by the printing means 106. However, in this embodiment, the user prints on a print medium such as a sheet or label. An example in which the user can acquire the image code without any problem will be described. The image code 1006 is displayed on, for example, electronic paper or a liquid crystal screen, and the user shoots the image code displayed on the electronic paper, liquid crystal screen, or the like instead of paper or a label. Other configurations and processing flow are the same as those in the first embodiment, and the same effects are obtained.

[Fifth Embodiment]
Next, a fifth embodiment of the present invention will be described. In the first embodiment, the relationship between the secret image code generation device 1 and the server or the like to which the print result 1007 is pasted is not defined, but in this embodiment, the secret image code generation device 1 displays the print result 1007. An example of changing the password for the pasted server account will be described. Assuming that the server or the like can be accessed from the generation device 1, the secret image code generation device 1 generates a login password, for example, and accesses the server to be pasted at the same time as the generation to update the password. As described above, according to the present exemplary embodiment, it is not necessary for the user to acquire the print results 1007 before and after the change when the login password is changed and to change the print result manually. Other configurations and processing flow are the same as those in the first embodiment, and the same effects are obtained. Since the password changes, the print result before the change cannot be reproduced, and the print result after the change can be reproduced until the next login password change. Other configurations and processing flow are the same as those in the first embodiment, and the same effects are obtained.

[Sixth Embodiment]
Next, a sixth embodiment of the present invention will be described. In the first embodiment, the example in which the secret data is encrypted and the encrypted data is converted into the image code has been described. However, in this embodiment, an example in which information other than the secret data is included in the image code 1006 will be described. A two-dimensional barcode such as a QR code has a large memory capacity of, for example, 2 Kbytes, and can store a large amount of information. In addition to a password, it is convenient to record, for example, access without having to conceal it. Other information related to the identification information such as the right, model and user may be recorded simultaneously. These pieces of information may be added and encrypted after the password, or may be added without being encrypted after the password is encrypted. If these are handled in the same manner as the encrypted data of the first embodiment, the processing flow from the code conversion step S105 to the code reverse conversion step S203 in the first embodiment can be applied. In the case of partial encryption, other information can be separated in the code reverse conversion step S203, and in the case of full encryption, other information can be separated and used in the decryption step S205.

[Seventh Embodiment]
Next, a seventh embodiment of the present invention will be described. In the first embodiment, the example in which the confidential data 1004 is converted into one image code 1006 has been described. In this embodiment, an example in which the confidential data 1004 is divided into a plurality of image codes 1006 will be described. If converted into a plurality of image codes 1006, security is improved. In this case, the secret data 1004 itself such as a password may be divided and then encrypted and converted into a plurality of image codes 1006, or the encrypted data 1005 may be divided and converted into a plurality of image codes 1006. The plurality of generated image codes 1006 may be printed on the same sheet. However, printing in random order or printing on individual sheets is better for security. When the encrypted data 1005 is divided, the image code 2002 is combined and then decrypted to restore the password 2005. When the secret data 1004 itself is divided, the image code 2002 is decrypted and combined to restore the password 2005. To do.

  The present invention can also be realized as a program for causing a computer to execute the above-described secret data generation and reading method, and also as a computer-readable recording medium storing such a program. The program may be recorded in a fixed memory built in the central processing unit, may be used by reading from an external recording device, a recording medium such as a CD-ROM, DVD or memory card, or from an external network such as the Internet. You may download and use it.

  Although the embodiment of the present invention has been described above, the embodiment is not limited to the above, and it is obvious that various modifications can be made without departing from the spirit of the present invention. For example, in the above embodiment, the case where the secret data is a password and the image code is a QR code has been mainly described. However, the secret data is not limited to a password, and is managed as an encryption key, a decryption key, encryption, and other secrets. The image code is not limited to a QR code, but it is drawn as a figure on a two-dimensional plane, such as a one-dimensional barcode, a two-dimensional barcode, etc. A code having distinguishability may be used. In the above embodiment, the example in which the encryption key and the decryption key are converted into data has been described. However, the encryption key and the decryption key may be used as they are without being converted into data. The secret image code generation device 1 and the secret data reading device 2 may be combined into one device, and may share presentation means such as a computer and a liquid crystal display, input means such as a keyboard and a mouse, and the like. Further, the order of the encryption key data generation step S102 and the secret data generation step S103 in the first embodiment may be changed, or the image code acquisition in the image code acquisition step S202 is performed immediately after the start of the secret data reading device 2, Thereafter, the decryption key input in the decryption key input step S201 may be performed, or the order of the code reverse conversion step S203 and the decryption key data generation step S204 may be switched. Further, the setting items and style of the encryption key input screen D1 and the decryption key input screen D2 can be changed.

  The present invention is used in a secret data generation and reading system using a computer and a mobile terminal with a camera.

It is a figure which shows the structural example of the secret data production | generation reading system in 1st Embodiment. It is a figure which shows the example of a processing flow of the secret image code production | generation process in 1st Embodiment. It is a figure which shows the example of a display of the encryption key input screen in 1st Embodiment. It is a figure which shows the example of a processing flow of the secret data reading process in 1st Embodiment. It is a figure which shows the example of a display of the decryption key input screen in 1st Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Secret image code generation apparatus 2 Secret data reading apparatus 10 Secret data generation reading system 101 Encryption key input means 102 Encryption key data generation means 103 Secret data generation means 104 Encryption means 105 Code conversion means 106 1st presentation means (printing means) )
107 Secret image code generation central processing unit 201 Decryption key input unit 202 Image code acquisition unit 203 Code reverse conversion unit 204 Decryption key data generation unit 205 Decryption unit 206 Second presentation unit 207 Secret data reading central processing unit 1001 Encryption key 1002 generation Setting item 1003 Encryption key data 1004 Confidential data 1005 Encrypted data 1006 Image code 1007 Print result 2001 Decryption key 2002 Image code 2003 Encrypted data 2004 Decryption key data 2005 Confidential data B105 Generated print button B202 Setting button C104 Character type selection check box D1 Encryption Key input screen D2 Decryption key input screen T101 Encryption key input text box T102 Generated number input text box T103 Password length input text box T201 Decryption key input Text box

Claims (14)

Secret data generating means for generating secret data;
Encryption means for encrypting the secret data to generate encrypted data;
Code conversion means for converting the encrypted data into an image code;
First presenting means for presenting the image code to a user;
A secret image code generation device;
Image code obtaining means for obtaining the image code;
Code reverse conversion means for reversely converting the acquired image code into the encrypted data;
Decryption means for decrypting secret data from the inversely transformed encrypted data;
Second presenting means for presenting the decrypted confidential data to a user;
A secret data reader;
Secret data generation and reading system. The secret image code generation device includes: an encryption key input unit for a user to input an encryption key;
Encryption key data generation means for generating encryption key data from the encryption key input by the encryption key input means,
The encryption means encrypts the secret data using the encryption key data;
The secret data generation and reading system according to claim 1. The secret data generating means automatically and randomly generates the secret data by a random number generator;
The secret data generation and reading system according to claim 1 or 2. The code conversion means converts the encrypted data into a two-dimensional barcode,
The code reverse conversion means reversely converts the two-dimensional barcode into the encrypted data;
The secret data generation and reading system according to any one of claims 1 to 3. The first presenting means prints and presents the image code on a print medium such as paper,
The image code acquisition means captures and acquires the printed image code;
The secret data generation and reading system according to any one of claims 1 to 4. The secret data reader includes a decryption key input means for a user to input a decryption key;
Decryption key data generating means for generating decryption key data from the decryption key input by the decryption key input means,
The decryption means decrypts the encrypted data using the decryption key data;
The secret data generation / reading system according to any one of claims 1 to 5. Secret data generating means for generating secret data;
Encryption means for encrypting the secret data to generate encrypted data;
Code conversion means for converting the encrypted data into an image code;
First presenting means for presenting the image code to a user;
Secret image code generation device. Image code acquisition means for acquiring an image code;
Code reverse conversion means for reversely converting the acquired image code into encrypted data;
Decryption means for decrypting secret data from the encrypted data;
Second presenting means for presenting the decrypted confidential data to a user;
Secret data reader. A secret data generation step for generating secret data;
An encryption step of encrypting the secret data to generate encrypted data;
A code conversion step of converting the encrypted data into an image code;
A first presentation step of presenting the image code to a user.
A secret image code generation process;
An image code obtaining step for obtaining the image code;
A code reverse conversion step of reversely converting the acquired image code into the encrypted data;
A decryption step of decrypting secret data from the inversely converted encrypted data;
A second presentation step of presenting the decrypted secret data to a user,
A secret data reading process;
Secret data generation and reading method. The secret image code generation step includes an encryption key input step in which a user inputs an encryption key;
An encryption key data generation step of generating encryption key data from the encryption key input by the encryption key input step;
In the first presentation step, the image code is printed on a print medium such as paper,
The image code acquisition step captures and acquires the printed image code,
The encryption step encrypts the secret data using the encryption key data;
The secret data reading step includes a decryption key input step in which a user inputs a decryption key;
A decryption key data generation step for generating decryption key data from the decryption key input in the decryption key input step,
The decrypting step decrypts the encrypted data using the decryption key data;
The secret data generation and reading method according to claim 9. A secret data generation step for generating secret data;
An encryption step of encrypting the secret data to generate encrypted data;
A code conversion step of converting the encrypted data into an image code;
A first presentation step of presenting the image code to a user.
Secret image code generation method. A code acquisition process for acquiring an image code;
A code reverse conversion step of reversely converting the acquired image code into encrypted data;
A decryption step of decrypting secret data from the inversely converted encrypted data;
A second presentation step of presenting the decrypted secret data to a user,
Secret data reading method.   A program for causing a computer to execute the secret data generation and reading method according to claim 9 or 10.   A computer-readable recording medium on which the program according to claim 13 is recorded.

Images