JP2010257101A - User authentication system and method, scratch medium, and method for manufacturing the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an inexpensive medium that functions as a token for generating a one-time password to be used in two-factor authentication and the like. <P>SOLUTION: On a scratch card 2 of a user 8, one-time passwords are printed, which are generated according to predetermined password generation algorithm from each of a predetermined number of counter values obtained by incrementing an initial value of a counter by a set value from. A predetermined number of concealed areas 20, where the printed one-time password is covered with a concealing member, are arranged with the order of using the one-time passwords. A user authentication device 3 authenticates one of the one-time passwords printed on the scratch card 2 as well as a password of the user 8. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for authenticating a user, and more particularly to a technique for authenticating a user using a one-time password which is a disposable password.

  As a countermeasure against phishing and spyware, two-factor authentication is attracting attention in applications such as net banking. Two-factor authentication is a method for authenticating a user by combining two authentication factors having different properties.

  In cases where it is necessary to authenticate users with high security such as online banking, in addition to a password such as PIN (Personal Identification Number), which is an authentication factor related to “know”, It is considered to authenticate users by two-factor authentication using a one-time password (OTP), which is an authentication factor related to “has”.

  In addition to the authentication factor related to “has only”, biometric information (for example, fingerprints) that is the authentication factor related to “self” can be used. Since users have a strong sense of resistance to metrics information, the use of one-time passwords (OTP: One Time Password), which is an authentication factor related to “has only”, is increasing.

  There are two methods for generating an OTP using a token, a time synchronization method and a counter method. For example, Patent Document 1 discloses an invention related to a technique for generating an OTP by a counter synchronization method. 2 discloses an invention relating to a technique for generating an OTP by a time synchronization method.

  Patent Document 1 is an invention that increases the secrecy of a generated key used when generating a one-time password by advancing a counter used for a counter synchronization method based on a random number. Further, Patent Document 2 is an invention that prevents illegal use of a one-time password by including a second or a counter value indicating the number of times a one-time password is generated in the time used for the time synchronization method.

  Also, in Patent Document 3, when authenticating a user by two-factor authentication, a password such as a PIN (Personal Identification Number) which is an authentication factor related to “know” is used for the counter synchronization method. An invention has been disclosed in which a counter value is added to generate an OTP that serves as an authentication factor relating to “has only”.

JP 2001-352324 A JP 11-316740 A JP 2008-176383 A

  A token for generating a one-time password used in two-factor authentication is preferably realized by a device (for example, a USB key) with an electronic component built therein, but this increases the cost of the device. However, it is desired that the token can be realized at a low cost.

  In addition, if a token that generates a one-time password used for two-factor authentication is realized by a device with built-in electronic components, there is a problem that the algorithm for generating a one-time password and the generation key cannot be changed easily. .

  Accordingly, the present invention provides a scratch medium that functions as a token for generating a one-time password used in two-factor authentication and can be realized at low cost, and a user authentication system, a user authentication method, and a scratch using the scratch medium. An object is to provide a method for manufacturing a medium.

  The first invention for solving the above-mentioned problem is that the concealment area printed with the one-time password of the counter synchronization method visually concealed by covering with a concealment member that can be scratched off is A plurality of scratch media are provided in a state in which the order of use of one-time passwords is shown.

  Further, the second invention is a scratch medium according to the first invention, and serves as a seed for generating a generation key used to generate a one-time password printed on the scratch medium. The scratch medium is characterized in that different user information is printed for each.

  Further, according to a third aspect of the present invention, a concealment area printed with a counter-synchronized one-time password is visually concealed by covering with a concealing member that can be scraped off. A plurality of scratch media provided in the state of use, and an internal counter synchronized with a counter used when calculating the one-time password concealed in the scratch media, After acquiring the one-time password concealed in the concealment area from the client operated by the user authenticating the user, after generating the reference one-time password used for user authentication from the counter value of the internal counter according to the password generation algorithm , Predetermined password authentication algorithm Therefore, a user authentication system characterized in that it is at least composed of a user authentication device provided with a one-time password authentication means for authenticating said one-time password acquired by using the reference one-time password.

  Furthermore, a fourth invention is the user authentication system according to the third invention, which is a seed for generating a generation key used for generating the one-time password concealed in the concealment area. Different user information is printed for each user, and the one-time password authentication means of the user authentication device acquires the user information in addition to the one-time password, and generates the generated key from the user information according to a predetermined algorithm. And generating the reference one-time password using the generated key.

  Furthermore, a fifth invention is the user authentication system according to the third invention or the fourth invention, wherein the user authentication device includes password authentication means for authenticating a password of a user who possesses the scratch card. This is a user authentication system.

  Further, according to a sixth aspect of the present invention, a concealment area printed with a counter-synchronized one-time password is visually concealed by covering with a concealing member that can be scraped off. A user authentication device that authenticates a user who possesses a plurality of scratch media provided in the order of use, and authenticates one of the one-time passwords concealed in one concealment area of the scratch media. Step a acquired from the client operated by the user, and used for user authentication from the value of the internal counter synchronized with the counter used when calculating the one-time password concealed in the scratch medium according to the password generation algorithm Generating a reference one-time password to be performed b In accordance with a predetermined password authentication algorithm, using the reference one-time password, a user authentication method, characterized in that to execute the steps c, authenticating the one-time password obtained in step a.

  Further, a seventh invention is a user authentication method according to the sixth invention, wherein the user authentication method is a seed for generating a generation key used for generating the one-time password, and user information that differs for each user. Is printed on the scratch medium, the user authentication device acquires the user information together with the one-time password in the step a, calculates the generated key from the user information in the step b, and The user authentication method is characterized in that the reference one-time password is generated using a generation key.

  Further, an eighth invention is the user authentication method according to the sixth invention or the seventh invention, wherein the user authentication device is configured to perform a user authentication of the user who possesses the scratch card before executing the step a. A user authentication method characterized by executing a step of authenticating a password.

  Furthermore, the ninth aspect of the present invention provides a concealment area printed with one counter-synchronized one-time password being visually concealed by covering with a concealment member that can be scraped off. A method of manufacturing a plurality of scratch media provided in the order of use, wherein the one-time password is obtained in association with user information of a user who possesses the scratch media, obtained from the scratch media issuer. Using the ticketing information in which the value of the counter at the time of generation is stored, printing on the scratch medium using the value of the counter associated with the user information for each of the user information included in the ticketing information A number of the one-time passwords generated according to a predetermined password generation algorithm, The scratch medium is manufactured by printing each one-time password in the area of the concealment area in a state in which the order of use of the password is indicated, and then performing printing for covering the respective concealment area with the concealment member. Is the method.

  Further, a tenth invention is a method for manufacturing a scratch medium according to the ninth invention, wherein the password generation algorithm generates the one-time password by using a generation key calculated from the user information. An algorithm, wherein when the one-time password to be printed on the scratch medium is generated, the generation key is calculated from the user information, and the user information is printed on the scratch medium. Is the method.

  According to the above-described invention, a medium functioning as a token for generating a one-time password used in two-factor authentication can be realized at low cost, and a user authentication system and method using the medium can be provided.

The figure explaining the structure of a user authentication system. The figure explaining a scratch card. The flowchart explaining the manufacturing process of a scratch card. The hard-block block diagram of a user authentication device. The functional block diagram of a user authentication apparatus. The flowchart which showed the procedure of the process which a user authentication apparatus performs user authentication. The figure explaining an example of the web page which a user authentication apparatus transmits.

  From here, the invention according to the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram for explaining the configuration of a user authentication system 1 when the scratch medium according to the present invention is used as a scratch card 2. The scratch card 2 possessed by the user 8, the client 4 operated by the user 8, and the web A user authentication device 3 that authenticates a user 8 who uses an application (for example, online banking), and the client 4 and the user authentication device 3 are connected via a network 5.

  A user authentication device 3 of the user authentication system 1 illustrated in FIG. 1 is a device that performs user authentication by two-factor authentication combining two authentication factors. In this embodiment, the user authentication includes a password of the user 8 and a scratch card. Two authentication factors of one-time password (OTP) obtained from 2 are used.

  The password of the user 8 (for example, PIN) corresponds to “know only”, and the scratch card 2 provided with a plurality of concealment areas 20 in which the OTP is concealed is mailed to the user 8. Therefore, the OTP obtained from the scratch card 2 corresponds to the authentication factor relating to “has only oneself”.

  When using OTP for user authentication in online banking or the like, unlike the present invention, it is common for the user 8 to have a device-type token (for example, a USB key) incorporating an electronic component.

  Device-type tokens with built-in electronic components can handle both time synchronization and counter synchronization methods, but when using the scratch card 2 as a token, the scratch card 2 itself uses OTP. Since it cannot be generated, the counter synchronous OTP is used in the present invention.

  In the case of device type tokens with built-in electronic components, the OTP generation event is realized by using the scratch card 2 while the device type token button is pressed. At this time, the event for generating the OTP is an operation of deleting one concealment area 20 provided in the scratch card 2, and the user 8 obtains one OTP from the scratch card 2 by deleting one concealment area 20. .

  As described above, the scratch card 2 functions in the same manner as a device-type token incorporating an electronic component, but the number of OTPs that can be obtained from the scratch card 2 is provided in the scratch card 2. It is limited to the number of concealment areas 20. For example, in FIG. 1, since ten concealment areas 20 are provided in the scratch card 2, the number of OTPs that can be obtained from the scratch card 2 is limited to ten.

  The user authentication device 3 illustrated in FIG. 1 is a server provided on the network 5 for performing user authentication of a user 8 who uses a web service such as online banking. The user authentication device 3 executes user authentication. The user 8 is requested to input two authentication factors, here, the password of the user 8 and one OTP obtained from the scratch card 2 possessed by the user 8, and authentication of the two authentication factors. Only when it succeeds, the user 8 is permitted to use the web service.

  If a token that generates an OTP is realized with a device-type token that incorporates an electronic component, the device-type token becomes expensive. If the device-type token is distributed to all users 8 who use the web service, Although the burden on the service operator side is very high, when the token for generating OTP is realized by the scratch card 2 that can be realized by the paper medium as in the present invention, the scratch card 2 that can be realized by the paper medium is obtained. Since it is cheap, the burden on the web service operator can be reduced.

  In addition, when there is a need to change the algorithm for generating OTP or the encryption key used to generate OTP, and in the case of a device-type token with built-in electronic components, the computer program stored in the device-type token However, when the scratch card 2 is used, the scratch card 2 on which the OTP generated by applying the updated algorithm or encryption key is printed is transmitted to the user 8. You just need to.

  From here, each of the scratch card 2 and the user authentication device 3 shown in FIG. 1 will be described in detail.

  First, the scratch card 2 serving as the scratch medium of the present invention will be described in detail. FIG. 2 is a diagram for explaining the scratch card 2, FIG. 2 (a) is a diagram for explaining the scratch card 2 in a state where the OTP is not concealed, and FIG. 2 (b) is a diagram in which the OTP is concealed. It is a figure explaining the scratch card.

  As shown in FIG. 2, the scratch card 2 is a small token, and the material and shape of the scratch card 2 are arbitrary, but the material of the scratch card 2 is generally paper, and the user 8 carries the scratch card 2. As possible, the scratch card 2 may have the same shape as the cash card.

  As shown in FIG. 2A, the scratch card 2 is derived from a user ID for identifying the user 8 from each of a predetermined number of counter values obtained by incrementing the initial value of the counter by a set value. A different OTP is printed in each concealment area 20 by being generated and calculated by an algorithm using the generated key.

  Further, the scratch card 2 serves as a seed for generating a generation key used when generating an OTP in addition to the plurality of concealment areas 20, and a user ID (for example, different user information) The membership number of the user 8 is printed, and a number indicating the order in which the concealed OTP is used is printed on the left side of the concealment area 20.

  For example, the OTP printed in the concealment area 20 with the left number “1” (here, “A0A1A2A3A4A5”) is the OTP to be used first, and is printed in the concealment area 20 with the left number “3”. OTP 8 (here, “C0C1C2C3C4C5”) is the third OTP to be used.

  As shown in FIG. 2B, in the scratch card 2 transmitted to the user 8, the OTP printed in the concealment area 20 is covered with a concealment member (latex) such as latex, and the concealment area 20 contains the OTP. The printed OTP is hidden so that it cannot be seen through. When the user 8 obtains an OTP from the scratch card 2, the OTP concealed by the concealing member is exposed by scraping off the concealing member in numerical order.

  The manufacturing process of the scratch card 2 will be described. In FIG. 1, the apparatus used for manufacturing the scratch card 2 is the scratch card printer 6 shown in FIG. 1. The scratch card printer 6 is installed in the printing company, and the scratch printed by the scratch card printer 6 is used. The card 2 is mailed to the user 8.

  The scratch card printer 6 stores characters and numbers on a card medium, and then conceals a part or the entire surface of the card with a concealing member, and stores an encryption key therein. An HSM 61 (Host Security Module) that performs cryptographic operations using an ID and an issuing computer that uses the ticketing information received from the web service operator to instruct the printing unit to print the scratch card 2 that is mailed to each user 8 62 is provided. The encryption key stored in the HSM 61 of the scratch card printer 6 and the ticket issuing information stored in the issuing computer 62 are transmitted from the web service operator to the printing company according to a predetermined rule, and stored in each device.

  The ticket issuing information stored in the issuing computer 62 stores an initial value of a counter when generating an OTP to be printed on the scratch card 2 to be mailed to the user 8 specified by the user ID in association with the user ID. . The initial value of the counter may be the same for each user 8, or may be different for each user 8. In addition, when printing a plurality of scratch cards 2 for each user, ticket issuing information corresponding to the number of sheets printed for each user is stored in the issuing computer 62.

  When one user ID and counter value included in the ticket issuing information is transmitted to the HSM 62 of the scratch card printer 6, the user ID is obtained from the user ID according to a predetermined algorithm using an encryption key stored therein. A computer program for generating an individual generation key for each and generating an OTP according to a predetermined one-time password generation algorithm using the generated key is stored.

  FIG. 3 is a flowchart for explaining the manufacturing process of the scratch card 2. In the scratch card printer 6, the scratch card 2 is printed for each user ID included in the ticket issuing information stored in the issuing computer 62, and the scratch card 2 corresponding to one user ID is manufactured according to the procedure of FIG. The

  When the printing computer 62 prints one scratch card 2, the initial value of the counter associated with the user ID that manufactures the scratch card 2 is used as the counter value, and the user ID and the counter value are transmitted to the HSM 61 ( S1), the HSM 61 generates an individual key of the user 8 from the user ID, generates an OTP based on the counter value using the generated key, and transmits the OTP to the issuing computer 62 (S2).

  When the issuing computer 62 receives the OTP from the HSM 61, the issuing computer 62 stores the OTP in the order received from the HSM 61 (S3), and then confirms whether a predetermined number (here, 10) of OTPs has been generated (S4).

  When the issuing computer 62 has not generated a predetermined number (here, 10) of OTPs, the issuing computer 62 increments a counter value associated with the user ID for manufacturing the scratch card 2 by a set value (for example, +2) ( S5), the user ID for manufacturing the scratch card 2 and the incremented counter value are transmitted to the HSM 61 (S6), and the process returns to S2 in FIG.

  Further, when a predetermined number (here, 10) of OTPs is generated in S3 of FIG. 3, the issuing computer 62 arranges and prints the OTPs in the predetermined order in the order received from the HSM 61, and then conceals the OTPs. By executing the printing covered with the member, a predetermined number of concealment areas 20 are generated in the scratch card 2 (S7), and this procedure is terminated.

  The flow illustrated in FIG. 3 is a flow for printing one scratch card 2. When printing a plurality of scratch cards 2 for each user, the flow illustrated in FIG. 3 is repeatedly executed.

  From here, the user authentication apparatus 3 illustrated in FIG. 1 will be described. FIG. 4 is a hard block diagram of the user authentication device 3, and FIG. 5 is a functional block diagram of the user authentication device 3.

  As shown in FIG. 4, the user authentication device 3 includes, as hardware, a CPU 3a, a RAM 3b, a ROM 3c, a hard disk 3e that is a large-capacity data storage device, a network interface 3d, a display 3f, a keyboard 3g, a mouse 3h, and the like. The HSM 30 having the same function as the scratch card printer 6 is connected to the user authentication device 3, and the hard disk 3e of the user authentication device 3 is a computer program that performs user authentication by two-factor authentication. In addition, various information necessary for user authentication is stored.

  As shown in FIG. 5, the hard disk 3e of the user authentication device 3 is provided with a user database 302 for storing information necessary for user authentication and a ticket issuing information database 304 for storing ticket issuing information transmitted to the printing company. As functions realized by the computer program using the hardware resources shown in FIG. 4, an OTP authentication means 300 for authenticating the OTP obtained from the user 8 using the web service, and a password for authenticating the password of the user 8 An authentication unit 301 and a ticket issuing information generating unit 303 that generates ticket issuing information required when the scratch card 2 is manufactured in the scratch card printer 6 are provided. In this embodiment, the user database 302 includes a user ID. , The counter value of user 8 and user 8 Reference password is stored.

  First, the OTP authentication unit 300 and the password authentication unit 301 provided in the user authentication device 3 will be described with reference to a user authentication procedure.

  FIG. 6 is a flowchart showing a procedure of processing for user authentication by the user authentication device 3. First, when the user 8 accesses the web service, the user authentication device 3 transmits a web page that allows the user 8 to input a password and OTP to the client 4 and requests the user 8 to input the password and OTP (S10). ).

  FIG. 7 is a diagram for explaining an example of the web page 7 transmitted from the user authentication device 3 to the client 4. The web page 7 includes a form 70 for inputting the user ID, a form 71 for inputting the password of the user 8, a form 72 for inputting the OTP obtained from the scratch card 2, and a button object that is clicked when transmitting the user ID and the like. 73, a button object 74 that is clicked when transmission of a user ID or the like is canceled is included.

  The user 8 inputs the user ID of the user 8 into the form 70, inputs the password of the user 8 into the form 71, and the concealment member of the concealment area 20 is not cut, and the left concealment area has the smallest number. When an OTP exposed by scraping the 20 concealing members is input to the form 72 and then the button object 73 is clicked, the password of the user 8 and the OTP are transmitted from the client 4 to the user authentication device 3.

  Returning to the description of FIG. When the user authentication device 3 receives the user ID of the user 8, the password of the user 8, and the OTP from the client 4 (S11), first, the user authentication unit 301 is activated to authenticate the password of the user 8 (S12).

  The user authentication unit 301 refers to the user database 302 and collates the reference password associated with the user ID received from the client 4 with the password received from the client 4, so that “only you know (know The password of the user 8 that is the authentication factor related to “)” is authenticated.

  The user authentication device 3 branches the process according to the authentication result of the password of the user 8 (S13). If the user authentication fails, the user authentication device 3 terminates the procedure of FIG. 6 without permitting the user 8 to use the web application. If the authentication is successful, the user authentication device 3 activates the OTP authentication unit 300 to start authentication of the OTP acquired from the client (S14).

  The OTP authentication unit 300 of the user authentication device 3 refers to the user database 302, acquires a counter value associated with the user ID received from the client 4, transmits the user ID and the counter value to the HSM 30, The counter value is incremented by a predetermined number (for example, +2) (S15).

  When the HSM 30 connected to the user authentication device 3 receives the user ID and the counter value from the user authentication device 3, it generates an individual key of the user 8 from the user ID and then generates an OTP from the generated key and the counter value. Then, the OTP is transmitted to the user authentication device 3 (S16).

  When receiving the OTP from the HSM 30, the user authentication device 3 verifies the OTP received from the client 4 and the OTP received from the HSM 30, thereby authenticating the OTP corresponding to the authentication factor “has only oneself”. (S17).

  The user authentication device 3 branches the process according to the OTP authentication result (S18). When the OTP received from the client 4 is successfully authenticated, the user authentication apparatus 3 executes a process for allowing the user 8 to use the web service (S19). If the authentication of the OTP received from the server fails, the procedure illustrated in FIG. 6 is terminated without allowing the user 8 to use the web service.

  Next, the ticket issuing information generation unit 303 provided in the user authentication device 3 will be described while showing the procedure for user authentication. The ticket issuing information generating means 303 provided in the user authentication device 3 is a new ticket issuing stored in the issuing computer 62 of the scratch card printer 6 based on the ticket issuing information stored in the ticket issuing information database 304 of the user authentication device 3. It is a means for generating information.

  The ticket issue information database 304 of the user authentication device 3 stores the ticket issue information transmitted to the printing company possessing the scratch card printer 6 in association with the generation date and time of the ticket issue information. The user authentication device 3 includes a keyboard 3g and a mouse. When generation of ticketing information is instructed by operating 3h or the like, the ticketing information generating unit 303 is activated, and the ticketing information generating unit 303 uses the latest ticketing information stored in the ticketing information database 304. Then, a process for newly generating ticket issuing information to be transmitted to the printing company is executed.

  The ticket issuing information generating unit 303 of the user authentication device 3 sets one scratch to the initial value of the counter associated with the user ID for each user ID included in the latest ticket issuing information stored in the ticket issuing information database 304. By adding the number of OTPs to be printed in the concealment area 20 on the card 2 (here, 10), ticket issue information to be transmitted to the printing company is newly generated, and the generated ticket issue information is set to the generation date and time. The information is stored in the ticketing information database 304 in association with each other.

  In addition, when printing a plurality of scratch cards 2 for each user, the above-described contents are repeatedly executed.

  The present invention is not limited to the embodiments described so far, and various modifications and changes can be made.

  For example, the form of the scratch medium is not limited to the scratch card 2, and can be realized in the form of a post-bonded postcard such as direct mail.

1 User authentication system 2 Scratch card 20 Concealment area 3 User authentication device 30 HSM
300 OTP Authentication Unit 301 Password Authentication Unit 4 Client 5 Network 6 Scratch Card Printer 60 Card Printing Unit 61 HSM
62 Issuing computer

Claims (10)

  By covering with a concealing member that can be scraped off, a plurality of concealment areas printed in a state in which one one-time password of the counter synchronization method is visually concealed are displayed in the state in which the one-time passwords are used. A provided scratch medium.   The scratch medium according to claim 1, wherein the scratch medium is a seed for generating a generation key used for generating the one-time password concealed in the concealment area, and different user information is printed for each user. A scratch medium characterized by the above.   By covering with a concealing member that can be scraped off, a plurality of concealment areas printed in a state in which one one-time password of the counter synchronization method is visually concealed are displayed in the state in which the one-time passwords are used. A scratch medium provided, and an internal counter synchronized with a counter used when calculating the one-time password concealed in the scratch medium, and concealed in one concealment area of the scratch medium When a one-time password is obtained from a client operated by a user authenticating a user, a reference one-time password used for user authentication is generated from a counter value of the internal counter according to the password generation algorithm, and then according to a predetermined password authentication algorithm. Reference one User authentication system characterized in that it is at least composed of a user authentication device which includes a one-time password authentication means for authenticating said one-time password acquired using im password.   4. The user authentication system according to claim 3, wherein the user authentication system is a seed for generating a generation key used for generating the one-time password concealed in the concealment area, and different user information is printed for each user. The one-time password authentication means of the user authentication device acquires the user information in addition to the one-time password, calculates the generated key from the user information according to a predetermined algorithm, and uses the generated key And generating the reference one-time password.   5. The user authentication system according to claim 3 or 4, wherein the user authentication device includes password authentication means for authenticating a password of a user who possesses the scratch card. .   By covering with a concealing member that can be scraped off, a plurality of concealment areas printed in a state in which one one-time password of the counter synchronization method is visually concealed are displayed in the state in which the one-time passwords are used. A user authentication device for authenticating a user possessing a scratch medium provided obtains the one-time password concealed in one concealment area of the scratch medium from a client operated by the user authenticating the user. In step a, in accordance with the password generation algorithm, a reference one-time password used for user authentication is generated from the value of an internal counter synchronized with the counter used when calculating the one-time password hidden in the scratch medium. Step b, predetermined password authentication According algorithm, using the reference one-time password, the user authentication method, characterized in that to execute the steps c, authenticating the one-time password obtained in step a.   The user authentication method according to claim 6, wherein the user authentication method is a seed for generating a generation key used to generate the one-time password, and different user information for each user is printed on the scratch medium. The user authentication device acquires the user information together with the one-time password in the step a, calculates the generated key from the user information in the step b, and uses the generated key to generate the reference one-time A user authentication method characterized by generating a password.   8. The user authentication method according to claim 6 or 7, wherein the user authentication device executes a step of authenticating a password of a user possessing the scratch card before executing the step a. A featured user authentication method. By covering with a concealing member that can be scraped off, a plurality of concealment areas printed in a state in which one one-time password of the counter-synchronization method is visually concealed are displayed in the state in which the one-time passwords are used. A scratch medium manufacturing method provided, comprising:
The ticket issuing information is obtained from the scratch medium issuer, and is associated with the user information of the user who owns the scratch medium and stores the value of the counter when generating the one-time password. For each of the user information included, the number of the one-time passwords to be printed on the scratch medium is generated according to a predetermined password generation algorithm using the value of the counter associated with the user information, and the one-time password A method of manufacturing a scratch medium, wherein after each one-time password is printed in the area of the concealment area in a state in which the order of use is indicated, printing is performed to cover each concealment area with the concealment member. . 10. The method for manufacturing a scratch medium according to claim 9, wherein the password generation algorithm is an algorithm for generating the one-time password using a generation key calculated from the user information, and the scratch medium is stored in the scratch medium. A method of manufacturing a scratch medium, wherein when the one-time password to be printed is generated, the generation key is calculated from the user information and the user information is printed on the scratch medium.

Images