JP2010244525A - Secret data display and reading system using mobile terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a secret data display and reading system using a mobile terminal which passes secret data with high security. <P>SOLUTION: A cellular phone 10 and a two-dimensional code reading device 20 share an encryption key 1-1. Only the cellular phone 10 is provided with an encryption key 2 used for duplexing encryption. The cellular phone 10 generates a two-dimensional code in which secret data generated by encrypting a number of a credit card using the unique encryption key 2 and encryption key data (data 1) generated by encrypting the encryption key 2 using the encryption key 1-1 shared with the two-dimensional reading device are respectively arranged in predetermined positions in a plurality of non-disclosed areas, and displays the two-dimensional code in a display section 19. The two-dimensional code reading device decodes the encryption key data from the read two-dimensional code using the encryption key 1-1 to generate the encryption key 2, and decodes the number of the credit card using the encryption key 2. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

The present invention has a secret area encrypted with an encryption key, and uses a two-dimensional code that can decode the data in the secret area with the encryption key used for encryption. The present invention relates to a confidential data display and reading system using a portable terminal that delivers confidential data to a two-dimensional code reader.

A method of displaying a two-dimensional code on a mobile phone, reading it with a reader and inputting data is widely implemented, for example, for air ticket tickets, concert tickets, discount tickets, and the like. However, since an ordinary two-dimensional code can be read by anyone, it has not been possible from the viewpoint of security to use the above input method for passing important data. For example, when a credit card member number is displayed using a two-dimensional code, the member number may be leaked to a malicious third party when the displayed image is taken.

JP 2009-009547 A JP 2003-79600 A

In order to ensure security, a two-dimensional code having a private area encrypted with the encryption key disclosed in Patent Document 1 and capable of decoding the data in the private area with the encryption key used for encryption It is conceivable to transfer confidential data such as a credit card membership number from a mobile phone to a two-dimensional code reader using a mobile phone. Here, Patent Document 2 discloses a method for collating personal identification information using a two-dimensional code.

However, in the case of using a two-dimensional code having a secret area encrypted with the above-described encryption key, it has become a problem how to notify the encryption key from the mobile phone to the two-dimensional code reader. On the other hand, if the encryption key is held on the two-dimensional code reader in advance, if the encryption key flows out of the two-dimensional code reader, a third party can decode the two-dimensional code, and the credit card Security of passing confidential data such as membership numbers cannot be maintained.

The present invention has been made in order to solve the above-described problems, and an object of the present invention is to have a private area encrypted with an encryption key, and to use the encryption key used for encryption. An object of the present invention is to provide a confidential data display and reading system using a portable terminal capable of delivering confidential data from a portable terminal to a two-dimensional code reader using a two-dimensional code capable of decoding data in a public area.

In order to achieve the above object, the invention of claim 1 is a two-dimensional code having a private area encrypted with an encryption key and capable of decoding data in the private area with the encryption key used for encryption. The mobile terminal 10 having the display unit 19 capable of displaying the mobile terminal 10 reads the two-dimensional code displayed on the display unit 19 of the mobile terminal 10 by the two-dimensional code reader 20 and decodes it with the encryption key. A confidential data display and reading system using:
The two-dimensional code reader 20 and the mobile terminal 10 share a first encryption key,
The portable terminal 10 encrypts the second encryption key with the confidential data obtained by encrypting the confidential data with the unique second encryption key and the first encryption key shared with the two-dimensional code reader 20. A two-dimensional code including the encrypted encryption key data in the non-public area and displaying it on the display unit 19 (S26, S28, S30),
The two-dimensional code reader 20 decodes the second encryption key from the read two-dimensional code using the first encryption key in the encryption key data (S52, S56), A technical feature is that the confidential data is decoded using an encryption key (S60).

The secret data display and reading system using the portable terminal according to claim 1 has a secret area encrypted with an encryption key, and the data in the secret area can be decoded with the encryption key used for encryption. Use a two-dimensional code. The two-dimensional code reader and the portable terminal share the first encryption key, and the portable terminal encrypts confidential data (for example, a credit card number) with the unique second encryption key. And a two-dimensional code including the encryption key data obtained by encrypting the second encryption key with the first encryption key shared with the two-dimensional code reader in a non-public area, and displayed on the display unit . The two-dimensional code reading device decodes the encryption key data from the read two-dimensional code using the first encryption key, decodes the second encryption key, and decodes the confidential data using the second encryption key. . That is, data is encrypted with a double encryption key using the first encryption key and the second encryption key 2, and the second encryption key is held only by the mobile terminal side. Even if the first encryption key shared by the portable terminal and the two-dimensional code reader leaks to a third party, the confidential information in the two-dimensional code cannot be decoded, and security is improved. Very expensive. Furthermore, since the two-dimensional code reading device holds the first encryption key, the two-dimensional code reading device is not connected to the network and the encryption key cannot be transferred. Can decode sensitive data. Here, since a mobile terminal such as a mobile phone is used, a two-dimensional code can be created and displayed each time. Unlike a printed two-dimensional code, data can be encrypted using two encryption keys.

In the confidential data display and reading system using the portable terminal according to claim 2, the portable terminal stores the password registered in advance, and determines whether the password received by the input unit matches the password registered in advance. If it is determined and matched, a two-dimensional code including a non-public area is generated and displayed on the display unit. For this reason, even if a third party obtains the mobile terminal illegally, confidential data (for example, a credit card number) cannot be displayed. For this reason, even if a situation such as dropping the mobile terminal occurs, the security is high.

In the confidential data display and reading system using the portable terminal according to the third aspect, there are a plurality of confidential data, and a first encryption key is prepared corresponding to each confidential data. When any of a plurality of types of confidential data is selected, the portable terminal encrypts the second encryption key using the first encryption key corresponding to the confidential data. For this reason, even when a plurality of confidential data (for example, a plurality of types of credit cards) are used in a single mobile terminal (mobile phone), the user can safely and easily desire without worrying about the encryption key. Confidential data (for example, a desired credit card number) can be selected and used.

In the confidential data display and reading system using the portable terminal according to claim 4, the two-dimensional code reader generates a two-dimensional code including the first encryption key and displays the two-dimensional code generated by the display unit. . The portable terminal shares the first encryption key with the two-dimensional code reader by capturing an image of the two-dimensional code generated by the imaging unit, and uses the first encryption key to include a secret area. A dimension code is generated and displayed on the display unit. For this reason, confidential data can be transferred from the portable terminal to the two-dimensional code reader even to the two-dimensional code reader using the first encryption key not held on the portable terminal side. Furthermore, by providing each two-dimensional code reader with a unique first encryption key, it is possible to make the first encryption key unavailable to other two-dimensional code readers.

In the confidential data display and reading system using the portable terminal according to the fifth aspect, the portable terminal generates a two-dimensional code by changing the unique second encryption key every time. For this reason, even if the second encryption key is known to a third party for some reason, the confidential information in the two-dimensional code cannot be decoded, and the security is high.

In the confidential data display and reading system using the portable terminal according to the sixth aspect, the two-dimensional code reader holds a plurality of first encryption keys. The two-dimensional code reader reads a plurality of first encryption keys held when the second encryption key is decoded from the read two-dimensional code using the first encryption key. The first encryption key that can decode the second encryption key is identified and decoded by sequentially selecting and decoding. For this reason, a plurality of encryption keys can be assigned and systematically supported. For example, the bank C can assign different encryption keys to the cash dispenser in the bank C and the cash dispenser in the convenience shop, and correspond to each other.

In the confidential data display and reading system using the portable terminal according to claim 7, since the two-dimensional code reading device includes an openable / closable lid for protecting the reading surface of the imaging unit, the reading surface can be protected by the lid. it can. In addition, since the display unit is provided on the back surface of the lid, the two-dimensional code including the first encryption key generated on the back surface can be displayed so that the two-dimensional code can be easily captured using the portable terminal. In addition, since the two-dimensional code cannot be imaged unless the lid is opened, it is difficult for a third party to image the two-dimensional code.

The secret data display and reading system using the portable terminal according to claim 8, wherein the two-dimensional code reader reads the two-dimensional code displayed on the display unit of the portable terminal by displaying the two-dimensional code on the display unit. Erase when completed. For this reason, it is no longer necessary to display a two-dimensional code including the first encryption key longer than necessary, and the probability that the two-dimensional code including the first encryption key will pass to a third party is lowered, thereby improving security. Can do. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

In the confidential data display and reading system using the portable terminal according to claim 9, the portable terminal including an IC chip capable of contactless communication is used for reading and writing to capture the two-dimensional code including the first encryption key. The two-dimensional code reader is brought close to a two-dimensional code reader having a loading unit, and the two-dimensional code reader displays the two-dimensional code generated on the display unit when communication with the IC chip of the portable terminal becomes possible. That is, since the two-dimensional code is displayed at the timing when imaging from the portable terminal becomes possible, the two-dimensional code including the first encryption key is not displayed before imaging becomes possible, and the third party can Since the probability that a two-dimensional code including one encryption key will be reduced, security can be improved.

In the confidential data display and reading system using the mobile terminal according to claim 10, the mobile terminal including the IC chip capable of non-contact communication is separated from the two-dimensional code reader including the reading / writing unit, and the two-dimensional code is provided. The reading device erases the two-dimensional code displayed on the display unit when communication with the IC chip of the portable terminal becomes impossible. That is, since the two-dimensional code is erased at the timing when imaging from the portable terminal becomes impossible, the two-dimensional code including the first encryption key is not displayed longer than necessary, and the first encryption is given to the third party. Since the probability that the two-dimensional code including the encryption key will be reduced, security can be improved. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

In the confidential data display and reading system using the mobile terminal according to claim 11, after the mobile terminal including the IC chip capable of non-contact communication reads the two-dimensional code displayed on the display unit of the two-dimensional code reader. Then, the specific area of the memory part of the IC chip is rewritten. Upon detecting the rewriting of the specific area of the IC chip, the two-dimensional code reader erases the two-dimensional code displayed on the display unit. That is, since the display of the two-dimensional code can be erased almost simultaneously with the imaging of the mobile terminal, the two-dimensional code is not displayed after the imaging is completed, and the two-dimensional code including the first encryption key for the third party The probability of crossing is reduced and security can be increased. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

13. The confidential data display and reading system using the portable terminal according to claim 12, wherein a portable terminal including an IC chip capable of non-contact communication is used for reading and writing to capture the two-dimensional code including the first encryption key. When the two-dimensional code reader is able to communicate with the IC chip of the portable terminal for a predetermined period of time after being brought close to a two-dimensional code reader equipped with a loading unit, the display unit Delete the displayed 2D code. In other words, since the two-dimensional code is deleted after a predetermined time has elapsed since the imaging from the mobile terminal became possible, it is necessary even if the owner of the mobile terminal stays in an area where it can communicate with the IC chip after imaging. Since the two-dimensional code including the first encryption key is not displayed for a long time, and the probability that the two-dimensional code including the first encryption key is transferred to a third party is reduced, security can be improved. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

FIG. 1A is a block diagram showing a configuration of a mobile phone and a two-dimensional code reading device according to the first embodiment of the present invention, and FIG. 1B is a diagram showing a reading system installed in a convenience store. It is explanatory drawing which shows the flow of a process. FIG. 2A is a chart showing the correspondence between the contents of the data 2 and the encryption key 1, and FIG. 2B is an explanatory diagram showing the flow of processing in the reading system provided in the ATM of the bank. It is. It is a flowchart which shows the two-dimensional code creation and display process with the mobile phone of 1st Embodiment. It is a flowchart which shows the two-dimensional code reading process in the two-dimensional code reader of 1st Embodiment. FIG. 5A is a block diagram showing a configuration of a mobile phone and a two-dimensional code reading device according to the second embodiment of the present invention, and FIG. 5B is a reading system installed in a convenience store. It is explanatory drawing which shows the flow of a process. 6A and 6B are perspective views of a two-dimensional code reader according to the second embodiment of the present invention. It is a flowchart which shows the two-dimensional code creation and display process with the mobile telephone of 2nd Embodiment. It is a flowchart which shows the two-dimensional code reading process in the two-dimensional code reader of 2nd Embodiment. It is a block diagram which shows the structure of the mobile telephone and 2D code reader which concern on 3rd Embodiment of this invention. It is a flowchart which shows the two-dimensional code reading process in the two-dimensional code reader of 3rd Embodiment. It is a flowchart which shows the two-dimensional code preparation and display process with the mobile telephone which concerns on the 1st modification of 3rd Embodiment. It is a flowchart which shows the two-dimensional code reading process in the two-dimensional code reader which concerns on the 1st modification of 3rd Embodiment. It is a flowchart which shows the two-dimensional code reading process in the two-dimensional code reader which concerns on the 2nd modification of 3rd Embodiment.

[First embodiment]
A confidential data display and reading system using the portable terminal according to the first embodiment of the present invention will be described with reference to FIGS.
FIG. 1 shows a confidential data display in which a two-dimensional code including a credit card number is displayed on a display unit of a mobile phone according to a first embodiment of the present invention, read by a two-dimensional code reader, and transmitted to a server. It is explanatory drawing of a reading system. FIG. 1A is a block diagram showing a configuration of a mobile phone and a two-dimensional code reader, and FIG. 1B is an explanatory diagram showing a flow of processing in the reading system installed in a convenience store. is there. The mobile phone 10 includes an imaging unit 14 that includes a camera (not shown) that captures an image, an input unit 11 that includes an input key (not illustrated), a storage unit 16 that stores information, and a liquid crystal display that can display a two-dimensional code. A display unit 19, a communication control unit 18 that controls communication with a mobile phone base station, and a control unit 12 that controls these units.

The two-dimensional code reading device 20 is a communication control for controlling communication with an image pickup unit 24 for picking up a two-dimensional code displayed on the display unit 19 of the mobile phone, a storage unit 26 for storing information, and a server 30. A unit 28 and a control unit 22 for controlling them are provided. The server 30 is for performing bank ATM settlement processing in addition to credit card settlement processing.

FIG. 1 (B) is an explanatory diagram showing the flow of processing in the reading system installed at a convenience store, and FIG. 2 (B) shows the processing in the reading system attached to the ATM in the bank. It is explanatory drawing which shows a flow. FIG. 2A is a chart showing the correspondence between the contents of the data 2 and the encryption key 1.

The mobile phone side of the first embodiment has a private area encrypted with the encryption key proposed by the present applicant in Japanese Patent Application Laid-Open No. 2009-009547, and the private key is encrypted by the encryption key used for encryption. Using a two-dimensional code that can decode data in the open area, a two-dimensional code in which a credit card number is encrypted is created and displayed. The two-dimensional code reader reads the two-dimensional code and decodes the encrypted credit card number in the non-public area using the encryption key.

Here, the outline of the system of the first embodiment will be described in more detail with reference to FIGS. 1B and 2A.
FIG. 2A is a chart showing the correspondence between the contents of the data 2 held on the mobile phone side and the encryption key 1. The data 2 stores the number of the credit card 1 (Company A credit card) and the correspondence with the encryption key (here, the encryption key 1-1) used when encrypting the credit card number. keeping. Furthermore, the number of the credit card 2 (company B credit card) is stored, and the correspondence with the encryption key (encryption key 1-2 in this case) used for encrypting the credit card number is retained. The bank card (bank C) number is stored, and the correspondence with the encryption key (encryption key 1-3 in this case) used when encrypting the bank card number is held.

On the other hand, the two-dimensional code reader uses an encryption key (encryption key 1-1 in this case) used when encrypting a credit card 1 (company A credit card) number and a credit card 2 (company B credit). An encryption key (here, encryption key 1-2) used when encrypting the card number and an encryption key (here, encryption key) used when encrypting the bank card (C bank) number. Hold key 1-3A). Furthermore, the encryption key (here encryption key 1-4) used when encrypting the number of the bank card (D bank) which is not provided on the mobile phone side in the first embodiment is held, It is set to be compatible with mobile phones having a bank D card function.

FIG. 1B described above is an explanatory diagram showing a flow of processing in the two-dimensional code reader at the convenience store, and FIG. 2B is a two-dimensional provided attached to the ATM of the C bank. It is explanatory drawing which shows the flow of a process in a code reader. The two-dimensional code reader at the convenience store in FIG. 1B holds an encryption key (encryption key 1-3A in this case) used to encrypt the bank card (C bank) number. Yes. On the other hand, the two-dimensional code reading device provided in the ATM of C bank shown in FIG. 2B has an encryption key (here, encryption key 1- 1) used for encrypting the number of the C bank card. 3B). Both the encryption key 1-3A and the encryption key 1-3B can decode the bank card number encrypted with the encryption key for the bank C on the mobile phone side (here, the encryption key 1-3). However, by assigning different encryption keys to the cash dispenser in the bank C and the cash dispenser in the convenience shop and making them correspond to each other, assigning a plurality of encryption keys, It is possible to respond systematically.

With reference to FIG. 1B again, the flow of processing in the system will be described by exemplifying a case where payment is made with the credit card 1 (company A credit card).
As described above, the mobile phone 10 and the two-dimensional code reader 20 share the encryption key 1 (encryption key 1-1) for encrypting and decoding the number of the credit card 1. Here, only the cellular phone 10 has the encryption key 2 used for encryption duplication. The mobile terminal 10 uses confidential data obtained by encrypting the number of the credit card 1 with the unique encryption key 2 and the encryption key 2 with the encryption key 1 (encryption key 1-1) shared with the two-dimensional code reader. Is generated and is displayed on the display unit 19 by generating a two-dimensional code in which the encrypted key data (data 1) obtained by encrypting the data is arranged at a predetermined part in a plurality of private areas. The two-dimensional code reader 20 decodes the encryption key data from the read two-dimensional code with the encryption key 1 (encryption key 1-1), takes out the encryption key 2, and uses the encryption key 2 To decode the credit card 1 number. That is, data is encrypted with a double encryption key using the encryption key 1 and the encryption key 2, and the encryption key 2 is held only on the mobile terminal side. Even if the encryption key 1 shared with the two-dimensional code reader leaks to a third party, the confidential information in the two-dimensional code cannot be decoded, and the security is very high.

Next, the display process of the two-dimensional code on the mobile phone will be described with reference to the flowchart of FIG. 3 and FIG.
The mobile phone 10 is previously input and registered with a password for displaying a credit card. When the same password as the previously registered password is input via the input unit 11, the credit card number is indicated. It is configured to display a two-dimensional code. In this example, input of a personal identification number is illustrated, but other authentication methods such as fingertip authentication can also be used.

First, when a password is entered by the user via the input unit 11, it is input (S12). Then, it is determined whether or not the entered password number matches the previously registered password number (S14). If they do not match (S14: No), the process returns to S12. If they match (S14: Yes), an input for selecting one of credit card 1 (A company credit card), credit card 2 (B company credit card), and bank card (C bank) is received (S16). . Here, the description is continued assuming that the credit card 1 (A company credit card) is selected as described above. In response to this selection, the number of the credit card 1 (A company credit card) held in the storage unit 16 is read (S18), and the encryption key 1 (encryption) corresponding to the credit card 1 (A company credit card) is read. Key 1-1) is read (S20). Then, a random number for generating the encryption key 2 is generated (S22), and the encryption key 2 is generated based on the random number (S24). Thereafter, encryption key data (data 1) obtained by encrypting the encryption key 2 with the encryption key 1 (encryption key 1-1) shared with the two-dimensional code reader is generated (encoded) (S26), Confidential data obtained by encrypting the number of the credit card 1 with the generated encryption key 2 is generated (S28), and a two-dimensional code in which these two data are respectively arranged in a predetermined part in a plurality of private areas is generated. And it displays on the display part 19 (S30).

Next, two-dimensional code decoding processing on the two-dimensional code reader side will be described with reference to the flowchart of FIG. 4 and FIG.
The two-dimensional code reading device 20 images the two-dimensional code displayed on the display unit 19 of the mobile phone 10 by the imaging unit 24 (S52). First, the encryption key 1-1 is read from the storage unit 26 (S54), and the encrypted private area of the encryption key 2 is decoded by the encryption key 1-1. Read (S56). Then, it is determined whether the encryption key 2 has been successfully read (S58). When the encryption key 1-1 cannot be read (S58: No), the next encryption key, here, the encryption key 1-2 is read (S59), and the encryption key 1-2 is used for encryption. An attempt is made to read the conversion key 2 (S56). If the decoding cannot be performed (S58: No), the next encryption key 1-3B is further read (S59), and the encryption key 1-3B is tried to read the encryption key 2 (S56).

Here, as described above, since it is encrypted with the encryption key 1-1 and can be decoded (S58: Yes), the credit card 1 (A company credit card) is used with the decoded encryption key 2. The private area where the number is encrypted is decoded and the number is read (S60). It is determined whether the decoding of the number has succeeded (S62). If the decoding has failed (S62: No), the process returns to S52 and tries to decode the two-dimensional code again. On the other hand, when the decoding is successful (S62: Yes), the number of the credit card 1 (company A credit card) is transmitted to the server (control computer) 30 side together with the settlement information (S64), and the process is terminated.

In the confidential data display and reading system using the mobile phone 10 of the first embodiment, the mobile phone 10 stores a pre-registered personal identification number, and the personal identification number received by the input unit 11 and the personal identification number registered in advance. Are matched (S14). If they match (S14: Yes), a two-dimensional code including a non-public area is generated and displayed on the display unit 19. For this reason, even if a third party obtains the mobile phone 10 illegally, confidential data such as a credit card number cannot be displayed. For this reason, even if a situation such as dropping the mobile phone 10 occurs, the security is high.

In the confidential data display and reading system using the mobile phone 10 according to the first embodiment, there are a plurality of confidential data (credit card 1 number, credit card 2 number, bank card number), which correspond to each confidential data. First encryption keys (encryption key 1-1, encryption key 1-2, and encryption key 1-3) are prepared. The cellular phone 10 encrypts using the first encryption key corresponding to the selected confidential data among the plurality of types of confidential data. For this reason, even when a plurality of credit cards and bank cards are used in one mobile phone 10, the user selects a desired credit card and bank card safely and easily without being aware of the encryption key. Can be used.

In the confidential data display and reading system using the mobile phone 10 according to the first embodiment, the mobile phone 10 generates a unique second encryption key by using a random number each time to create a two-dimensional code ( S22, S24). For this reason, even if the second encryption key is known to a third party for some reason, the confidential information in the two-dimensional code cannot be decoded, and the security is high.

[Second Embodiment]
Subsequently, a confidential data display and reading system using the portable terminal according to the second embodiment of the present invention will be described with reference to FIGS.
FIG. 5A is a block diagram showing a configuration of a mobile phone and a two-dimensional code reading device according to the second embodiment of the present invention, and FIG. 5B shows the reading system installed at a convenience store. It is explanatory drawing which shows the flow of this process. FIG. 6 is a perspective view of the two-dimensional code reader according to the second embodiment, and FIG. 6A shows a state where the lid portion 44 of the two-dimensional code reader 20 is closed. In the two-dimensional code reading device, a lid portion 44 is attached to a main body portion 40 via a hinge 42 so as to be opened and closed. FIG. 6B shows a state where the lid 44 is opened. A display unit 29 for displaying a two-dimensional code (encryption key), which will be described later, is provided on the back surface of the lid unit 44, and the imaging unit 24 is disposed on the top of the main body unit 40. The reading surface is protected.

In the first embodiment described above with reference to FIG. 1, the mobile phone 10 shares the encryption key 1 with the two-dimensional code reader 20 in advance. On the other hand, in the second embodiment, the mobile phone 10 does not include the encryption key 1, and the encryption key is displayed as information in the two-dimensional code on the display unit 29 of the two-dimensional code reader 20. Then, the mobile phone 10 reads the two-dimensional code by the imaging unit 14 and acquires the encryption key 1.

Next, the display process of the two-dimensional code on the mobile phone will be described with reference to the flowchart of FIG. 7 and FIG.
Like the first embodiment, the mobile phone 10 is previously input and registered with a password for displaying a credit card, and the same password as the previously registered password is input via the input unit 11. In the case, a two-dimensional code indicating a credit card number is displayed.

First, when a password is entered by the user via the input unit 11, it is input (S112). Then, it is determined whether or not the entered password number matches the previously registered password number (S114). If they do not match (S114: No), the process returns to S112. If they match (S114: Yes), an input for selecting one of credit card 1 (A company credit card), credit card 2 (B company credit card), and bank card (C bank) is received (S116). . The description is continued here assuming that the credit card 1 (company A credit card) is selected as in the first embodiment. In response to this selection, the number of the credit card 1 (company A credit card) held in the storage unit 16 is read (S118). Next, as described above, a normal two-dimensional code displayed on the display unit 29 of the two-dimensional code reader 20 (a two-dimensional code that has no private area and is not encrypted (for example, a QR code)) Is imaged via the imaging unit 14 and decoded by the control unit 12 to obtain the encryption key 1 (S119). Then, a random number for generating the encryption key 2 is generated (S122), and the encryption key 2 is generated based on the random number (S124). Thereafter, encryption key data (data 1) obtained by encrypting the encryption key 2 with the encryption key 1 shared with the two-dimensional code reader is generated (encoded) (S126), and the generated encryption key 2 is used. Confidential data in which the number of the credit card 1 is encrypted is generated (S128), and a two-dimensional code in which these two data are respectively arranged in a predetermined part in a plurality of private areas is generated and displayed on the display unit 19. (S130).

Next, the decoding process of the two-dimensional code on the two-dimensional code reader will be described with reference to the flowchart of FIG. 8 and FIG.
The two-dimensional code reader 20 waits for the lid 44 to be opened (S144). When the lid 44 is opened (S144: Yes), a two-dimensional code for passing the encryption key 1 to the mobile phone is generated, and the back surface of the lid 44 described above with reference to FIG. The generated two-dimensional code QS is displayed on the display 29 on the side (S146). Then, as described above, the two-dimensional code displayed on the mobile phone side is read, the encryption key is decoded from the read two-dimensional code, and the two-dimensional code having a secret area is displayed. The two-dimensional code displayed on the display unit 19 of the mobile phone 10 is imaged by the imaging unit 24 (S152). Next, the encryption key 1 is first read from the storage unit 26 (S154), the encrypted private area of the encryption key 2 is decoded by the encryption key 1, and the encryption key 2 is read (S156). ). Then, it is determined whether the encryption key 2 has been successfully read (S158). If reading is not possible (S158: No), the process returns to S152 to image the two-dimensional code again. When reading is possible (S158: Yes), the two-dimensional code QS displayed on the display unit 29 on the back surface side of the lid 44 is erased (S159). Next, the encrypted private area of the credit card 1 (company A credit card) number is decoded with the decoded encryption key 2, and the number is read (S160). It is determined whether the decoding of the number has succeeded (S162). If the decoding has failed (S162: No), the process returns to S152 and tries to decode the two-dimensional code again. On the other hand, if the decoding is successful (S162: Yes), the number of the credit card 1 (company A credit card) is transmitted to the server (control computer) 30 side together with the settlement information (S164), and the process is terminated.

In the confidential data display and reading system using the mobile phone 10 of the second embodiment, the two-dimensional code reading device 20 displays the first encryption key on the display unit 29. When the mobile phone 10 captures an image with the image capturing unit 14, the first encryption key is shared with the two-dimensional code reader 20, and a two-dimensional code including a non-public area is generated using the first encryption key. And displayed on the display unit 19. For this reason, confidential data is transferred from the mobile phone 10 to the two-dimensional code reader 20 even to the two-dimensional code reader 20 using the first encryption key that is not held on the mobile phone 10 side. Can do.

Further, in the second embodiment, each two-dimensional code reader has a unique first encryption key. This makes it impossible to use the first encryption key with another two-dimensional code reader.

In the second embodiment, since the two-dimensional code reading device 20 includes the lid 44 that can be opened and closed to protect the reading surface of the imaging unit 24, the reading surface can be protected by the lid 44. Further, since the display unit 29 is provided on the back surface of the lid unit 44, the two-dimensional code including the first encryption key generated on the back surface can be displayed so that the two-dimensional code can be easily captured using a mobile phone. . Further, since the two-dimensional code cannot be imaged unless the lid 44 is opened, it is difficult for a third party to image the two-dimensional code.

Furthermore, in the second embodiment, the two-dimensional code reader 20 displays the two-dimensional code on the display unit 29 when the reading of the two-dimensional code displayed on the display unit of the mobile phone is completed (S158). : Yes), it erases (S159). For this reason, it is no longer necessary to display a two-dimensional code including the first encryption key longer than necessary, and the probability that the two-dimensional code including the first encryption key will pass to a third party is lowered, thereby improving security. Can do. In addition, compared to the method of deleting the display after a certain period of time, even if the mobile phone owner takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

[Third embodiment]
Subsequently, a confidential data display and reading system using the portable terminal according to the third embodiment of the present invention will be described with reference to FIGS. FIG. 9 is a block diagram showing a configuration of a mobile phone and a two-dimensional code reader according to the third embodiment of the present invention.

In the third embodiment, the mobile phone 10 includes an IC chip 50 capable of non-contact communication. The IC chip 50 is made of an RFID tag, for example, and includes a storage unit 52, a control unit 54, and a communication unit 56. The two-dimensional code reading device 20 includes a reading / writing unit 60 including an RFID reader / writer device for non-contact communication with the IC chip 50. The reading / writing unit 60 includes a storage unit 62, a control unit 64, and a communication unit 66. The mechanical configuration of the two-dimensional code reader 20 of the third embodiment is the same as that of the second embodiment described above with reference to FIG. 6, and the lid is attached to the main body so as to be openable and closable. Is provided with a display unit 29 for displaying a two-dimensional code (encryption key), and an imaging unit 24 is disposed on the top of the main body.

In the third embodiment, an encryption key is displayed as information in the two-dimensional code on the display unit 29 of the two-dimensional code reader 20 as in the second embodiment. The mobile phone 10 reads the two-dimensional code by the imaging unit 14 and acquires the encryption key 1. Furthermore, in the third embodiment, the IC chip 50 built in the mobile phone is detected by the reading / writing unit 60 of the two-dimensional code reader 20, and when the two-dimensional code is detected, the two-dimensional code is displayed on the display unit 29. When the detection becomes impossible, the two-dimensional code is deleted. That is, in the third embodiment, the two-dimensional code is displayed on the display unit 29 when the mobile phone 10 is brought close to the two-dimensional code reader 20, and the display is erased when the mobile phone 10 is released.

The decoding process of the two-dimensional code in the two-dimensional code reader according to the third embodiment will be described with reference to the flowchart of FIG.
The two-dimensional code reader 20 waits for the mobile phone to be brought closer (S202). Then, the mobile phone is brought close to a communicable distance for reading the QR code, and the IC chip 50 is detected, that is, within the communication range of the reading / writing unit 60 of the two-dimensional code reader 20, When the presence of the IC chip 50 of the telephone 10 can be detected (S204: Yes), a two-dimensional code for passing the encryption key 1 to the mobile phone side is generated, and the back surface side of the lid is formed as in the second embodiment. The generated two-dimensional code QS is displayed on the display unit 29 (S206). Then, it is confirmed again that the IC chip 50 can be detected (S208: No), the two-dimensional code displayed on the mobile phone side is read as described above, the encryption key is decoded from the read two-dimensional code, and is not disclosed. A two-dimensional code having a region is displayed. First, the two-dimensional code displayed on the display unit 19 of the mobile phone 10 is imaged by the imaging unit 24 (S252). Next, the encryption key 1 is first read from the storage unit 26 (S254), the encrypted private area of the encryption key 2 is decoded by the encryption key 1, and the encryption key 2 is read (S256). ). Then, it is determined whether the encryption key 2 has been successfully read (S258). If reading is not possible (S258: No), the process returns to S208, and after confirming that the IC chip 50 can be detected (S208: No), the two-dimensional code is imaged again. The confirmation that the IC chip 50 can be specifically detected is that the reading / writing unit 60 receives a response from the IC chip in response to an inquiry from the reading / writing unit 60 to the IC chip 50. Means.

When it is determined again whether the IC chip 50 can be detected (S208), if the mobile phone 10 is separated from the two-dimensional code reader 20 and the IC chip 50 cannot be detected (S208: Yes), the displayed two-dimensional The code QS is deleted (S274), and the process is terminated. Here, when the IC chip 50 cannot be detected, that is, communication with the IC chip is impossible, the IC chip 50 of the mobile phone 10 is within the communication range of the reading / writing unit 60 of the two-dimensional code reader 20. It means that the existence of the can not be detected.

On the other hand, when reading is possible (S258: Yes), it is determined whether the two-dimensional code is being displayed on the display unit 29 on the back side of the lid (S270), and when being displayed (S270: Yes), The displayed two-dimensional code QS is deleted (S272). Next, the private area where the credit card number is encrypted is decoded with the decoded encryption key 2, and the number is read (S260). It is determined whether the decoding of the number has succeeded (S262). If the decoding has failed (S262: No), the process returns to S208, and the decoding of the two-dimensional code is attempted again. On the other hand, if the decoding is successful (S262: Yes), the credit card number is transmitted together with the settlement information to the server (control computer) 30 side (S264), and the process is terminated.

In the third embodiment, the two-dimensional code reading in which the mobile phone 10 including the IC chip 50 capable of non-contact communication includes the reading / writing unit 60 in order to capture the two-dimensional code including the first encryption key. The two-dimensional code reader 20 is brought close to the device 20 and displays the two-dimensional code generated on the display unit 29 when communication with the IC chip 50 of the mobile phone 10 becomes possible. That is, since the two-dimensional code is displayed at the timing when imaging from the mobile phone 10 becomes possible, it is no longer necessary to display the two-dimensional code including the first encryption key before imaging becomes possible. Since the probability that the two-dimensional code including the first encryption key will be reduced, security can be improved.

In the third embodiment, the mobile phone 10 including the IC chip 50 capable of non-contact communication is separated from the two-dimensional code reading device 20 including the reading / writing unit 60, and the two-dimensional code reading device 20 is connected to the mobile phone. When communication with the IC chip 50 of the telephone 10 becomes impossible (S208: Yes), the two-dimensional code displayed on the display unit is deleted (S274). That is, since the two-dimensional code is erased at a timing at which imaging from the mobile phone 10 becomes impossible, the two-dimensional code including the first encryption key is not displayed longer than necessary, and the first party is notified to the third party. Since the probability that the two-dimensional code including the encryption key will be reduced, security can be improved. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

[First Modification of Third Embodiment]
Subsequently, a confidential data display and reading system using the portable terminal according to the first modification of the third embodiment will be described with reference to the flowcharts of FIGS. 11 and 12.
The configuration of the mobile phone and the two-dimensional code reader in the confidential data display and reading system using the portable terminal of the first modification of the third embodiment is the same as that of the third embodiment described above with reference to FIG. Therefore, the explanation is omitted while referring to FIG.

In the third embodiment described above, the IC chip 50 built in the mobile phone is detected by the reading / writing unit 60 of the two-dimensional code reading device 20, and when it is detected, the two-dimensional code is displayed on the display unit 29. The two-dimensional code was deleted when it could not be detected. In contrast, in the first modification of the third embodiment, when the mobile phone reads the two-dimensional code from the two-dimensional code reader, the data in the storage unit 52 is rewritten. The two-dimensional code reading device 20 erases the two-dimensional code displayed on the display unit 29 when detecting rewriting of data in the storage unit 52.

Next, the display process of the two-dimensional code on the mobile phone will be described with reference to FIG.
The processing from S112 to S128 is the same as that of the second embodiment described above with reference to FIG. In S128, after generating the confidential data obtained by encrypting the credit card number with the generated encryption key 2, the bit indicating the completion of decoding of the encryption key 1 in the storage unit 52 of the IC chip 50 is changed from “0”, for example. It is rewritten to “1” (S129). Then, a two-dimensional code in which the encryption key 2 and the confidential data obtained by encrypting the credit card number with the encryption key 2 are respectively arranged in predetermined portions in the non-public area is generated and displayed on the display unit 19. (S130).

A two-dimensional code decoding process in the two-dimensional code reader according to the first modification of the third embodiment will be described with reference to the flowchart of FIG.
The two-dimensional code reading device 20 generates a two-dimensional code for passing the encryption key 1 to the mobile phone, and displays the generated two-dimensional code QS on the display unit 29 (S210). Then, the reading / writing unit 60 reads the storage unit 52 of the IC chip 50 (S212) and detects rewriting of a specific area of the storage unit 52, specifically, encryption in the storage unit 52 of the IC chip 50. It is determined whether or not the bit “0” indicating completion of decoding of the key 1 has been rewritten to “1” (S214). Here, when rewriting of the bit indicating completion of decoding of the encryption key 1 in the storage unit 52 is detected (S214: Yes), the two-dimensional code displayed on the display unit 29 is deleted (S272). Here, the detection of the rewriting of the specific area of the storage unit described above means reading the memory area of the storage unit 52 of the IC chip 50 from the reading / writing unit 60, and the read content corresponds to the predetermined content. In addition to the above-described specific bit rewrite detection, the presence of two-dimensional code data generated by the mobile phone can also be detected.

Subsequently, the two-dimensional code displayed on the display unit 19 of the mobile phone 10 is imaged by the imaging unit 24 (S252). Next, the encryption key 1 is first read from the storage unit 26 (S254), the encrypted private area of the encryption key 2 is decoded by the encryption key 1, and the encryption key 2 is read (S256). ). Then, it is determined whether the encryption key 2 has been successfully read (S258). If reading is not possible (S258: No), the process returns to S252, and the two-dimensional code is imaged again.

On the other hand, when the reading is completed (S258: Yes), the encrypted private area of the credit card number is decoded with the decoded encryption key 2, and the number is read (S260). It is determined whether the decoding of the number has succeeded (S262). If the decoding has failed (S262: No), the process returns to S252 and tries to decode the two-dimensional code again. On the other hand, if the decoding is successful (S262: Yes), the credit card number is transmitted together with the settlement information to the server (control computer) 30 side (S264), and the process is terminated.

In the first modification of the third embodiment, after the mobile phone 10 including the IC chip 50 capable of non-contact communication reads the two-dimensional code displayed on the display unit 29 of the two-dimensional code reader 20, the IC The specific area of the storage unit 52 of the chip 50 is rewritten (S129). Upon detecting the rewriting of the specific area of the IC chip (S214: Yes), the two-dimensional code reader 20 erases the two-dimensional code displayed on the display unit 29 (S272). That is, since the display of the two-dimensional code can be deleted almost simultaneously with the imaging of the mobile phone 10, the two-dimensional code is not displayed after the imaging is completed, and the two-dimensional code including the first encryption key is included in the third party. The probability that the code will cross is reduced, and security can be increased. Compared with the method of deleting the display after a certain period of time, even if the owner of the mobile terminal takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

Furthermore, in the first modification of the third embodiment, after confirming that the two-dimensional code for passing the encryption key 1 has been received by the mobile phone side by detecting the rewriting of the specific area (S214: Yes) Since the two-dimensional code reading device 20 starts imaging the two-dimensional code displayed on the mobile phone 10 (S252), power consumption can be reduced. In addition, before the reading of the two-dimensional code displayed on the mobile phone is completed (S258: Yes), the specific area is rewritten so that the two-dimensional code for passing the encryption key 1 is received on the mobile phone side. After confirmation by detection (S214: Yes), the two-dimensional code displayed on the display unit 29 is erased (S272). For this reason, processing time can be shortened.

[Second Modification of Third Embodiment]
Next, a confidential data display and reading system using a portable terminal according to a second modification of the third embodiment will be described with reference to the flowchart of FIG.
The configurations of the mobile phone and the two-dimensional code reader in the confidential data display and reading system using the portable terminal of the second modification of the third embodiment are the same as those of the third embodiment described above with reference to FIG. Therefore, the explanation is omitted while referring to FIG.

In the third embodiment described above, the two-dimensional code is erased when the IC chip 50 built in the mobile phone cannot be detected by the reading / writing unit 60 of the two-dimensional code reader 20. On the other hand, in the second modification of the third embodiment, when the IC chip 50 can be detected continuously for a predetermined time, the two-dimensional code displayed on the display unit 29 is regarded as the completion of reading the two-dimensional code. Erase. In addition, the third embodiment and the first modification of the third embodiment could not cope with a mobile phone that does not incorporate an IC chip, but the second modification of the third embodiment incorporates an IC chip. It is configured to be compatible with not only mobile phones that do, but also mobile phones that do not have built-in.

A two-dimensional code decoding process in the two-dimensional code reader according to the second modification of the third embodiment will be described with reference to the flowchart of FIG.
The two-dimensional code reading device 20 generates a two-dimensional code for passing the encryption key 1 to the mobile phone, and displays the generated two-dimensional code QS on the display unit 29 (S210). Then, the IC chip 50 is detected by the reading / writing unit 60 (S224), and it is determined whether the IC chip 50 can be detected continuously for a predetermined time (S226). When the mobile phone is brought close to the two-dimensional code reader to capture the two-dimensional code displayed on the display unit 29 and can detect the IC chip 50 continuously for a predetermined time (S226: Yes), the two-dimensional code Assuming that the reading is completed, the two-dimensional code QS displayed on the display unit 29 is deleted (S250).

Subsequently, the two-dimensional code displayed on the display unit 19 of the mobile phone 10 is imaged by the imaging unit 24 (S252). Next, the encryption key 1 is first read from the storage unit 26 (S254), the encrypted private area of the encryption key 2 is decoded by the encryption key 1, and the encryption key 2 is read (S256). ). Then, it is determined whether the encryption key 2 has been successfully read (S258). If reading is not possible (S258: No), the process returns to S252, and the two-dimensional code is imaged again.

On the other hand, if the reading can be performed (S258: Yes), it is determined whether the two-dimensional code is being displayed on the display unit 29 (S270), and the IC chip 50 is detected because the mobile phone does not incorporate the IC chip. If the two-dimensional code is displayed without going through the above-described processing of S250 (S270: Yes), the displayed two-dimensional code QS is deleted (S272). Then, the private area where the credit card number is encrypted is decoded with the decoded encryption key 2, and the number is read (S260). It is determined whether the decoding of the number is successful (S262). If the decoding is successful (S262: Yes), the credit card number is transmitted to the server (control computer) 30 side together with the settlement information (S264). The process ends.

In the second modification of the third embodiment, the mobile phone 10 including the IC chip 50 capable of non-contact communication uses the read / write unit 60 to capture the two-dimensional code including the first encryption key. When the two-dimensional code reader 20 is close to the provided two-dimensional code reader 20 and the two-dimensional code reader 20 can communicate with the IC chip 50 of the mobile phone 10 continuously for a predetermined time (S226: Yes), the two-dimensional code displayed on the display unit is erased (S250). In other words, since the two-dimensional code is deleted after a predetermined time has elapsed since the imaging from the mobile phone 10 became possible, for example, the owner of the mobile phone 10 remains in an area where communication with the IC chip is possible after imaging. Since the two-dimensional code including the first encryption key is not displayed longer than necessary, and the probability that the two-dimensional code including the first encryption key is transferred to a third party is reduced, security can be improved. . In addition, compared to the method of deleting the display after a certain period of time, even if the mobile phone owner takes time to acquire the display image, the display does not disappear before acquiring the two-dimensional code, which impairs convenience. There is no.

In the above-described embodiment, an example in which a two-dimensional code displayed on a mobile phone is read by a two-dimensional code reader is illustrated. However, the system of the present invention can be applied to various portable terminals capable of displaying a two-dimensional code. is there.

DESCRIPTION OF SYMBOLS 10 Mobile phone 11 Input part 12 Control part 14 Imaging part 16 Storage part 19 Display part 20 Two-dimensional code reader 22 Control part 24 Imaging part 26 Storage part 30 Server 50 IC chip 60 Reading / writing part

Claims (12)

Using a portable terminal having a display area capable of displaying a two-dimensional code having a private area encrypted with an encryption key and capable of decoding the data in the private area with the encryption key used for encryption, A confidential data display and reading system using a portable terminal that reads a two-dimensional code displayed on a display unit of a terminal by a two-dimensional code reader and decodes it with the encryption key:
The two-dimensional code reader and the portable terminal share a first encryption key;
The portable terminal encrypts the second encryption key with the confidential data obtained by encrypting the confidential data with the unique second encryption key and the first encryption key shared with the two-dimensional code reader. Generating a two-dimensional code including the encryption key data in the non-public area and displaying it on the display unit;
The two-dimensional code reading device decodes a second encryption key from the read two-dimensional code using the first encryption key in the encryption key data, and uses the second encryption key. A confidential data display and reading system using a portable terminal, wherein the confidential data is decoded. The portable terminal is
A storage unit for storing a pre-registered password;
An input unit for receiving a password,
A verification unit that determines whether the password received by the input unit matches the password registered in advance;
The two-dimensional code including the non-disclosure area is generated and displayed on the display unit when the password received by the input unit by the collation unit matches the password registered in advance. A confidential data display and reading system using the portable terminal according to Item 1. There are a plurality of confidential data, and the first encryption key is prepared for each confidential data,
The portable terminal encrypts the second encryption key using the first encryption key corresponding to the confidential data when any one of a plurality of types of the confidential data is selected. A confidential data display and reading system using the portable terminal according to claim 1. The two-dimensional code reader includes a generation unit that generates a two-dimensional code including the first encryption key, and a display unit that displays the generated two-dimensional code,
The portable terminal includes an imaging unit, and the first encryption key is shared with the two-dimensional code reading device by imaging the two-dimensional code generated by the generation unit with the imaging unit, and the first encryption key A secret data display and reading system using a portable terminal according to any one of claims 1 to 3, wherein a two-dimensional code including a non-disclosure area is generated and displayed on the display unit. . The secret data display using the portable terminal according to any one of claims 1 to 4, wherein the portable terminal generates the two-dimensional code by changing a unique second encryption key each time. Reading system. The two-dimensional code reader holds a plurality of first encryption keys,
The two-dimensional code reader has a plurality of first keys held when the second encryption key is decoded from the read two-dimensional code using the first encryption key. 7. The portable terminal according to claim 1, wherein an encryption key is sequentially selected and decoding is attempted, and a first encryption key that can decode the second encryption key is identified and decoded. Confidential data display and reading system. 5. The confidential information using a portable terminal according to claim 4, wherein the two-dimensional code reading device includes an openable / closable lid that protects a reading surface of the imaging unit, and the display is provided on a back surface of the lid. Data display and reading system. The two-dimensional code reader erases the display of the two-dimensional code on the display unit of the two-dimensional code reader when the reading of the two-dimensional code displayed on the display unit of the portable terminal is completed. A secret data display and reading system using the portable terminal according to claim 4 or 7. The portable terminal includes an IC chip capable of non-contact communication,
The two-dimensional code reader includes a reading / writing unit for non-contact communication with the IC chip,
The two-dimensional code reader displays the generated two-dimensional code on the display unit when communication with the IC chip of the portable terminal becomes possible. Item 9. A confidential data display and reading system using the mobile terminal according to any one of items 8. 10. The portable terminal according to claim 9, wherein the two-dimensional code reader erases the two-dimensional code displayed on the display unit when communication with the IC chip of the portable terminal becomes impossible. Confidential data display and reading system. The portable terminal includes an IC chip capable of non-contact communication,
The two-dimensional code reader includes a reading / writing unit for non-contact communication with the IC chip,
The portable terminal rewrites a specific area of the storage unit of the IC chip after reading the two-dimensional code displayed on the display unit of the two-dimensional code reader,
The two-dimensional code reader erases the two-dimensional code displayed on the display unit of the two-dimensional code reader when detecting rewriting of the specific area of the IC chip of the portable terminal. A confidential data display and reading system using the portable terminal according to any one of claims 4, 7, and 9. The portable terminal includes an IC chip capable of non-contact communication,
The two-dimensional code reader includes a reading / writing unit for non-contact communication with the IC chip,
The two-dimensional code reader displays the two-dimensional code displayed on the display unit of the two-dimensional code reader when the communication with the IC chip of the portable terminal is possible for a predetermined time continuously. 10. The secret data display and reading system using the mobile terminal according to claim 4, wherein the code is erased.

Images