JP2014071721A - Confirmation system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a confirmation system capable of providing a legitimate target person with an information code including useful information and making it difficult for a person other than the legitimate target person to use the information code.SOLUTION: A confirmation system 1 reads identification information of an identification medium carried by a user, generates an information code recording the identification information or reflection information produced by reflecting the identification information, and issues the generated information code. An information code authentication apparatus, including a reading device for reading identification information from an identification medium carried by the user, and an imaging part capable of imaging an information code C in the case of the information code issued by an information code issuance part being indicated by the identification medium, tries to decode the imaged information code C, and determines applicability of authentication of the information code C on the basis of a usage result in the case of using the identification information obtained by the reading device in the decoding, or a result of comparison between the identification information obtained by the reading device and decoded data obtained by decoding the information code C.

Description

  The present invention relates to a confirmation system.

  In restaurants and retail stores, systems that provide points and discounts according to user consumption are operated. For example, an operating company (a store or other business entity) issues a user-specific card (such as an IC card or magnetic card on which a user ID is recorded), and the store side processes the card presented by the user during checkout. The user is identified by reading with the terminal, and the user's point is updated. The updated points are recorded on a card or recorded on a server or the like that can communicate with the information processing terminal. As a technique related to this type of system, there is a technique as described in Patent Document 1.

JP 2009-199268 A

  However, in a system such as Patent Document 1, a business card must always issue a dedicated card for giving points. In this way, in a system that requires the business entity to issue a dedicated card unique to each individual, a great deal of effort and cost is involved in the construction of the card issuance mechanism, the preparation of materials, and the card management and operation after issuance. Will be required.

  On the other hand, as a system that does not require issuing such a dedicated card, for example, point grant by a two-dimensional code can be cited. For example, if a point is issued by recording a two-dimensional code including point information on a receipt issued at the time of product purchase, the user who receives the receipt reads the two-dimensional code with his / her mobile terminal and accumulates the point. It is possible to perform such operations, or to present and store points received at the store and read the receipt at the store terminal to accumulate and utilize the points.

  However, in such a system, there is a problem that a third party other than the authorized subject who should give points can easily use the provided two-dimensional code. For example, since a two-dimensional code can generally be copied easily, there is a concern that a third party may copy the two-dimensional code and receive points illegally. Alternatively, it is assumed that the authorized person who received the points redistributes the two-dimensional code to a third party. In this case, even if the third party illegally uses the two-dimensional code, Since it cannot be determined whether or not there is a two-dimensional code, the use of the two-dimensional code may be permitted as it is.

  In addition, the above-mentioned problem that it cannot be determined whether or not a person who actually intends to use a two-dimensional code is a regular target person is not limited to a point system, but also in other systems (for example, a ticket providing system). obtain.

  The present invention has been made to solve the above-mentioned problems, and can provide an authorized person with an information code including useful information, and a person other than the authorized person can use the information code. It is an object to provide a confirmation system that is difficult to do.

The present invention has been made to solve the above-described problems,
An information code issuing device for issuing an information code and an information code authenticating device for authenticating the information code are provided, and the identity of a user of the information code is confirmed using an identification medium on which identification information unique to the medium is recorded. A confirmation system to perform,
The information code issuing device includes:
An identification information acquisition unit that reads the identification information of the identification medium possessed by the user;
An information code generating unit that generates the information code in which the identification information acquired by the identification information acquiring unit or the reflection information reflecting the identification information is recorded;
An information code issuing device for issuing the information code generated by the information code generating unit;
With
The information code authentication device includes:
An identification information reading unit that reads the identification information from the identification medium possessed by the user;
An imaging unit that images the information code when the information code issued by the information code issuing device is attached to the identification medium or displayed on the identification medium;
Trying to decode the information code imaged by the imaging unit, the use result when the identification information acquired by the identification information reading unit is used at the time of decoding, or the identification information acquired by the identification information reading unit and the Based on a comparison result with decrypted data obtained by decrypting the information code, a determination unit that determines success or failure of authentication of the information code imaged by the imaging unit;
It is characterized by having.

According to the first aspect of the present invention, in the information code issuing device, the identification information acquisition unit for reading the identification information of the identification medium possessed by the user, the identification information acquired by the identification information acquisition unit, or the reflection information reflecting the identification information An information code generating unit that generates the recorded information code and an information code issuing device that issues the information code generated by the information code generating unit are provided.
In this configuration, if the operator has an identification medium that the user generally uses, even if the company does not build a dedicated card issuing system developed in-house, information that records the identification information or reflection information of the identification medium A code, that is, an information code that can be recognized as unique to the user can be issued. Of course, even when the business operator constructs a card issuing system, a similar information code can be issued.
On the other hand, the information code authentication device can read the identification information from the identification medium possessed by the user, and the information code issued by the information code issuing device is attached to the identification medium, or When the information code is displayed on the medium, the information code can be imaged. Then, an attempt is made to decode the information code imaged by the imaging unit, and the usage result when the identification information acquired by the identification information reading unit is used at the time of decoding, or the identification information and information code acquired by the identification information reading unit are decoded. Based on the comparison result with the decrypted data obtained in this way, the success or failure of authentication of the information code imaged by the imaging unit is determined. In this configuration, when the user presents the information code issued by the information code issuing device to the identification medium used for the issuance or displayed on the identification medium, it is recorded on the identification medium. It is possible to determine whether the information code is used by a legitimate user based on the obtained identification information. As a result, when the information code is illegally used (when it is not used with the identification medium used for issuance), the fact can be confirmed, and unauthorized use by a third party who does not have a legitimate identification medium. Can be more reliably eliminated.

  According to a second aspect of the present invention, the information code issuing device generates, as the reflected information, encrypted basic information obtained by encrypting predetermined basic information with an encryption key based on the identification information acquired by the identification information acquisition unit. The information generation unit of the information code issuing device generates the information code recorded with the basic information generated by the basic information generation unit, The determination unit of the information code authentication device decrypts the encrypted basic information recorded in the information code captured by the imaging unit, using the identification information read by the identification information reading unit as a decryption key. And the authentication of the information code is successful on the condition that the decryption is successful.

  According to this configuration, highly confidential encryption information can be recorded in the information code, and information outflow (outflow of basic information) from the code can be suppressed. Further, since the information code cannot be decrypted unless a regular identification medium is provided, this is very advantageous in terms of security. Further, the regular user does not need to remember the decryption key for decrypting the information code, and does not need to manually input the decryption key, so that the labor for operation is further reduced.

  According to a third aspect of the present invention, the information code issuing device forms and issues an information code medium on which the information code is recorded and which can be attached to the identification medium.

  According to this configuration, an information code corresponding to an individual can be generated and attached to the identification medium of the individual without using a large-scale system.

  According to a fourth aspect of the present invention, the identification medium is a portable terminal including a display unit, and the information code issuing device uses the information code generated by the information code generation unit for generating the information code. The information code is issued by transmitting to the portable terminal as data that can be displayed on the display unit.

  According to this configuration, a medium (paper medium or the like) for forming the information code can be omitted, and labor and cost for operating the information code issuing device can be reduced. In addition, the user can save the unique information code in his / her portable terminal without any effort.

  According to a fifth aspect of the present invention, the information code issuing device includes a printing unit that issues a sheet medium on which a charge for goods or services is printed, and issues the information code by printing the information code on the sheet medium. The identification medium is a portable terminal including a display unit and a camera, and the information code is displayed by the display unit when the information code printed on the sheet medium is captured by the camera. Configured to be possible.

  In this configuration, an information code corresponding to an individual can be generated without using a large-scale system, and can be provided together with a sheet medium (such as a receipt issued at a cash register). In particular, since the information code can be printed together with information on the charge for goods or services, the information code issuance process can be performed quickly and the printing section can be used together, simplifying the device configuration and reducing the cost. Can be achieved.

  The invention of claim 6 further includes a profit information giving unit for giving profit information to an individual specified by the identification information on condition that the information code is successfully authenticated by the determination unit.

  According to this configuration, it is possible to construct a system that can give profit information (points, discount coupons, service tickets, etc.) to a user and more reliably prevent an unauthorized user from acquiring the profit information illegally. .

  In the invention of claim 7, the profit information giving unit includes a recording unit capable of recording the points given to each individual, and the identification information reading unit when the information code is successfully authenticated by the determination unit. And an update unit that updates the points of the individual to be recorded in the recording unit based on the points to be newly given to the individual specified by the identification information acquired in (1).

  According to this configuration, a system capable of appropriately giving points to each user can be constructed. In particular, since it is not necessary to put point information in the information code, the information code can be simplified, and the updating of points can be easily performed without complicated reading and writing of the information code.

  In claim 8, the information code authentication device, when a predetermined point grant condition for the individual specified by the identification information is satisfied, a calculation unit that calculates an update point of the individual specified by the identification information; When the authentication of the information code is successful, a new information code including the identification information or the new reflection information reflecting the identification information and including the update point calculated by the calculation unit as data is generated. An update code generation unit; and an update code issue unit that transmits the new information code generated by the update code generation unit to the identification medium that is a recording source of the identification information.

  In this configuration, the points given to each user can be managed in the information code given to each user, the amount of data on the information code authentication device side can be reduced, and the configuration and functions of the device are simplified can do.

FIG. 1 is a conceptual diagram schematically showing the overall configuration of the confirmation system according to the first embodiment of the present invention. FIG. 2 is a block diagram schematically illustrating an electrical configuration of the confirmation system of FIG. 3A is an explanatory diagram for mainly explaining a configuration of a part (information code reading unit) in the reading device in the confirmation system of FIG. 1, and FIG. It is explanatory drawing explaining the structure of the radio | wireless reader / writer in an apparatus. FIG. 4A is an explanatory diagram illustrating the appearance of an IC card used in the confirmation system of FIG. 1, and FIG. 4B is a block diagram illustrating the electrical configuration of the IC card. FIG. 5 is a flowchart illustrating a point grant process performed in the confirmation system of FIG. FIG. 6 is an explanatory diagram conceptually illustrating the configuration of the information code attached to the IC card. 7A is an explanatory diagram illustrating the data configuration of the information code in FIG. 6, and FIG. 7B is an explanatory diagram illustrating disclosure data recorded in the public area. FIG. FIG. 5 is an explanatory diagram illustrating cipher data recorded in a private area. FIG. 8A is a block diagram schematically illustrating a confirmation system according to a modification of the first embodiment, and FIG. 8B schematically illustrates a configuration of a management device used in the confirmation system. It is a block diagram illustrated. FIG. 9A is an external view schematically illustrating an identification medium (mobile terminal) used in the confirmation system according to the second embodiment, and FIG. 9B shows an electrical configuration of the mobile terminal. It is a block diagram illustrated. FIG. 10 is an explanatory diagram illustrating a data configuration of an information code used in the confirmation system according to the second embodiment.

[First embodiment]
Hereinafter, a first embodiment embodying the present invention will be described with reference to the drawings.
The confirmation system 1 according to the first embodiment has a function as an information code issuing device that issues an information code and a function as an information code authentication device that authenticates the information code. The system is configured as a system for confirming the identity of a user of an information code using a recorded identification medium. First, in the following representative example, an IC card 90 configured to be capable of non-contact communication is used as an identification medium, and the reading device 10, the computer 50, and the printer 60 are also used as an information code issuing device and an information code authentication device. Will be explained.

  The confirmation system 1 shown in FIG. 1 is realized by using an IC card 90 and an issuance / authentication system 2, and the issuance / authentication system 2 includes a reading device 10, a computer 50, and a printer 60. The issue / authentication system 2 is not limited in its form as long as it has the same functions as those of the reading device 10, the computer 50, and the printer 6 described below. The reading apparatus 10 and the printer 60 may be connected to the computer 50 so as to be capable of wired communication or wireless communication. For example, the computer 50 may be realized by an electronic register (POS register or the like), and the reading device 10 or the printer 60 may be provided in a form incorporated in the electronic register. May be connected externally. In addition, the computer 50 may be realized by a server device or the like that is capable of network communication via a communication network such as the Internet.

  As shown in FIG. 2, the reader 10 functions as an information code reader that reads information codes such as barcodes and two-dimensional codes, and as a wireless reader that reads wireless communication media (non-contact communication media) such as IC cards. And has a configuration in which reading can be performed by two methods. The reading apparatus 10 includes a control unit 11 that performs overall control, and a memory 12, a display unit 13, a communication unit 14, and the like are connected to the control unit 11.

  The control unit 11 includes a CPU, a system bus, an input / output interface, and the like, and functions as an information processing device together with the memory 12. The display unit 13 includes an LED lamp, a display panel, and the like, and operates in response to a command from the control unit 11. The communication unit 14 is configured as an interface for performing data communication with the outside (for example, the computer 50) in a wired or wireless manner, and performs a communication process in cooperation with the control unit 11. Yes. Further, the reading device 10 is provided with a power supply unit 15 that receives power supply from an external commercial power supply or an external device and functions as an operation power supply. The power supply unit 15 supplies power to the control unit 11 and various electric components. Have been supplied.

As shown in FIG. 2, a wireless reader / writer 20 and an information code reading unit 30 are connected to the control unit 11.
As shown in FIG. 3A, the information code reading unit 30 includes a light receiving sensor 33 including a solid-state imaging device such as a CCD area sensor, an imaging lens 37, an illumination unit 31 including a plurality of LEDs and lenses. Etc., and functions to read the information code attached to the reading object in cooperation with the control unit 11. In the present embodiment, the information code C configured as a QR code (registered trademark) is used, but other known information codes may be used.

  In the information code reading unit 30, the reflected light Lr obtained by reflecting the illumination light Lf by the information code C is taken into the apparatus through the reading port, and is received by the light receiving sensor 33 through the imaging lens 37. The imaging lens 37 disposed between the reading port (not shown) and the light receiving sensor 33 is configured to form an image of the information code C on the light receiving sensor 33. The light receiving sensor 33 is configured with this information code. A light reception signal corresponding to the C image is output. The light reception signal output from the light reception sensor 33 is stored as image data in the memory 12 (FIG. 2) and used for decoding processing and the like. The information code reading unit 30 is provided with an amplifier circuit that amplifies the signal from the light receiving sensor 33, an AD converter circuit that converts the amplified signal into a digital signal, and the like. Is omitted.

  The wireless reader / writer 20 cooperates with the control unit 11 to perform electromagnetic wave communication with the IC card 90 as a non-contact communication medium, read data stored in the IC card 90, or read data to the IC card 90. Functions to write data. The wireless reader / writer 20 is configured, for example, as a circuit that performs transmission using a known radio wave system, and includes a transmission circuit 21, a reception circuit 22, a matching circuit 23, and the like as illustrated in FIG. . The transmission circuit 21 includes a carrier oscillator, an encoding unit, an amplifier, a transmission unit filter, a modulation unit, and the like, and has a configuration in which a carrier (carrier wave) having a predetermined frequency (for example, frequency 953 MHz) is output from the carrier oscillator. Yes. The encoding unit is connected to the control unit 11, encodes transmission data output from the control unit 11, and outputs the encoded transmission data to the modulation unit. The modulation unit receives a carrier (carrier wave) from the carrier oscillator and transmission data from the encoding unit, and encodes the carrier (carrier wave) output from the carrier oscillator when transmitting a command to the communication target. A modulated signal that is, for example, ASK (Amplitude Shift Keying) modulated by the encoded transmission code (modulated signal) output from the encoding unit is generated and output to the amplifier. The amplifier amplifies the input signal (the modulated signal modulated by the modulation unit) with a predetermined gain, and outputs the amplified signal to the transmission unit filter. The transmission unit filter outputs the amplified signal from the amplifier. The filtered transmission signal is output to the antenna 29 via the matching circuit 23. When a transmission signal is output to the antenna 29 in this manner, the transmission signal is radiated to the outside from the antenna 29 as an electromagnetic wave. On the other hand, the radio signal received by the antenna 29 is input to the receiving circuit 22 via the matching circuit 23. The reception circuit 22 is configured by a reception unit filter, an amplifier, a demodulation unit, a binarization processing unit, a decoding unit, and the like, and after filtering a signal received via the antenna 40 with a reception unit filter, The signal is amplified by an amplifier, and the amplified signal is demodulated by a demodulator. Then, the demodulated signal waveform is binarized by the binarization processing unit and decoded by the decoding unit, and then the decoded signal is output to the control unit 11 as received data.

  The IC card 90 is configured as a known IC card in terms of hardware, and as shown in FIG. 4B, an antenna 91, a power supply circuit 92, a demodulation circuit 93, a control circuit 94, a memory 95, a modulation circuit 96, The load modulation circuit 97 is used. A capacitor 98 is connected to the antenna 91 in parallel. When the IC card 90 receives a carrier wave (electromagnetic wave) transmitted from the reading device 10 via the antenna 91, the power supply circuit 92 rectifies the carrier wave to generate a power supply for operation, and a control circuit configured by a microcomputer. 94 and other components. The transmission data from the reading device 10 superimposed on the carrier wave is demodulated by the demodulation circuit 93 and output to the control circuit 94. When the operation power is supplied and activated, the control circuit 94 receives the transmission data from the reading device 10 and reads the data stored in the memory 95, and writes the data when a write command is transmitted. The modulation circuit 96 modulates the subcarrier obtained by dividing the received carrier by response data output from the control circuit 94. A series circuit of a resistor and a switch constituting the load modulation circuit 97 is connected to the antenna 91 in parallel. Then, the carrier wave is load-modulated by turning on / off the switch of the load modulation circuit 97 by the modulated signal of the sub-carrier wave output from the modulation circuit 96, and a response is returned.

  The computer 50 is connected to the reading device 10 and a printer 60 to be described later so as to be capable of wired communication or wireless communication, and is configured by an information processing device such as a known personal computer. The computer 50 has a configuration as shown in FIG. 2, for example, a control circuit 51 including a CPU, a storage unit 52 including a ROM, a RAM, an HDD, an operation unit 53 configured as various keys, a touch panel, and the like. A display unit 54 configured as a liquid crystal monitor or the like, and a communication unit 55 including a communication interface that communicates with the reading device 10 and the printer 60 by a known wired communication method or wireless communication method are provided.

  A printer 60 is connected to the computer 50. The printer 60 is configured as a known printer such as an ink method, a laser method, a thermal method, or a ribbon method. For example, print data from the computer 50 (such as image data of an information code C as shown in FIG. 1). ), An image corresponding to the print data is printed. In the following representative example, an example is shown in which the printer 60 is configured as a label printer that can print the information code C on a seal medium, but it may be a printer that can print a receipt or the like.

(Information code issuance process)
Next, the information code issuing process will be described.
This information code issuance process is executed by the control circuit 51 when a predetermined operation is performed on the operation unit 53 of the computer 50, for example.
In this process, first, as a first step, the computer 50 gives an IC card reading instruction to the reading device 10, and the wireless reader / writer 20 starts non-contact reading of the IC card in response to the reading instruction. For example, the wireless reader / writer 20 performs reading by a known reading method, and acquires identification information (identifier) recorded on the IC card. If identification information (identifier) can be acquired, specific data may or may not be acquired. The IC card can be suitably used from an entity other than the entity providing the system, a country, a municipality, or other entity, and is provided from the entity providing the system. May be. For example, it may be an IC card used as a commonly used electronic money card or a boarding ticket, or may be an IC card such as a driver's license or a basic resident register card.

  Specifically, the reading device 10 is configured as a multi-type reader that can use a Type A method, a Type B method, a Felica method, or the like as a reading method. For example, the presented IC card 90 method is a FeliCa IC. In the case of a card, the unique ID of a plurality of digits unique to the card used in this FeliCa method is read. Further, when the presented IC card 90 system is a Type A system IC card, the unique ID of a plurality of digits unique to the card used in this Type A system is read. Thus, in the first stage, the unique ID corresponding to the presented card type method is read as identification information (identifier).

  In the second stage, encrypted data is generated so that the unique ID (identification information) acquired from the IC card 90 is used as an encryption key. As data (basic information) from which encryption is performed, for example, a business name, business code, store information, and the like are used, and these data are stored in the storage unit 52 of the computer 50 in advance. In addition, personal information (name, date of birth, age, etc.) of the individual who presented the IC card 90 may be included in the original data (basic information). In this case, personal information (name, date of birth, age, etc.) is obtained from the individual through documents, hearings, etc., and the operator inputs it using the operation unit 53 of the computer 50, or via the Web from the individual. The computer 50 can acquire personal information by pre-registration, post-registration, or input operation on the computer 50.

  Then, such basic information (original data) is encrypted, and an information code C in which the encrypted data is recorded is generated. Specifically, the basic information (operator information, etc.) that should be kept secret as the encryption key is the identification information acquired in the first stage (that is, unique information uniquely assigned to each IC card 90), The information code C is encrypted so as to be encrypted by a known encryption method (common key encryption method, public key encryption method, etc.) using a predetermined encryption algorithm, and the encrypted data is recorded in a private area in the code. Generate. In FIG. 6, information in which a partial area is a private area Cb (an area where encrypted data is recorded) and another area is a public area Ca (an area where unencrypted data is recorded). A code C (two-dimensional code) is conceptually shown. In FIG. 6, the information code C is conceptually shown, but the appearance of the information code C is similar to, for example, a known QR code, and a known position detection pattern is arranged at three corners, In the other areas, light cells and dark cells are arranged. In this information code C, the public area Ca is configured as an area that can be read even by a reader that does not have a decryption key, and includes various disclosed data that can be disclosed to a third party. Can do. Alternatively, the data in the public area Ca may be omitted.

  Some areas are private areas (areas that can be read on the condition that a decryption key corresponding to the encryption key is obtained), and other areas are read without using the decryption key corresponding to the encryption key. As a specific method for generating an information code and a specific configuration of the generated information code, for example, a technique disclosed in Japanese Patent Application Laid-Open No. 2009-9547, Japanese Patent Application Laid-Open No. 2008-299422, or the like is preferably used. Can do. FIG. 7A illustrates the data configuration of an information code when the techniques of these publications are used. Among these, “disclosure code” is the disclosure data shown in FIG. Is encoded according to the basic specification (JISX0510: 2004). The “secret code” is a JIS basic specification (JISX0510) for each encrypted data (encrypted data obtained by encrypting each of the business information, business code, store information, personal information, etc.) as shown in FIG. : 2004).

  In the methods disclosed in Japanese Patent Application Laid-Open Nos. 2009-9547 and 2008-299422, the secret code recorded in the non-public area includes the decryption key and the decryption key check data that can specify the decryption key. The decryption key and the decryption key check data can be prevented from being included in the private area. Further, the method of generating the information code C and the specific configuration of the generated information code C are not limited to this example, and any method capable of generating a two-dimensional code in which encrypted data is recorded at least in a partial area. For example, it may be generated by a method other than the method described in these publications. For example, the basic information is encrypted by a known encryption method (common key encryption method or the like) using the identification information as an encryption key, and a data matrix code or a maxi code in which the encrypted data is recorded in the data area is generated. It may be. In any case, if the decryption side (in the present embodiment, the same reading device 10 as the generated device) has a decryption algorithm corresponding to the encryption algorithm and an encrypted encryption key, it can be decrypted. Become.

  Then, after such data of the information code C (specifically, drawing data for drawing the information code C) is generated, the information code C is printed as a third step. In the example of FIG. 1, the information code C is printed as a sticker by the printer 60 described above. After the information code C is printed in this way, the user or business operator attaches the information code C to the IC card 90 (the IC card from which the identification information has been acquired in order to generate the information code C). The advance preparation is complete. On the other hand, in the computer on the store side, before or after printing the information code C, correspondence information (identification information and identification information) is associated with the identification information (unique information acquired from the IC card 90 in order to generate the information code C). Registration processing in the database is performed so as to record the name and point information to be registered in association with each other.

  In the present embodiment, the reading device 10, the computer 50, and the printer 60 correspond to an example of an “information code issuing device”. The reading device 10 corresponds to an example of an “identification information acquisition device” and functions to read identification information of an identification medium (IC card in the example of FIG. 1) possessed by the user.

  In addition, the control circuit 51 of the computer 50 corresponds to an example of an “information code generation unit”, and functions to generate an information code C in which reflection information reflecting the identification information acquired by the identification information acquisition device is recorded. Specifically, the control circuit 51 corresponds to an example of an “encryption basic information generation unit”, and the identification information acquired by the identification information acquisition device as predetermined reflected information (provider information, personal information, etc.) as reflected information. The control circuit 51, which functions to generate encrypted basic information encrypted by the information-based encryption key, and corresponds to the “information code generating unit”, has an information code C that records the generated encrypted basic information. Function to generate.

  The computer 50 and the printer 60 correspond to an example of an “information code issuing unit” and function to issue the information code C generated by the information code generation unit. Specifically, the information code C is recorded. In addition, it functions to issue (that is, seal print) while forming the information code medium 70 (seal medium) that can be attached to the identification medium (IC card 90).

(Information code authentication process)
Next, the information code authentication process will be described.
FIG. 5 corresponds to an example of information code authentication processing. In the following example, authentication processing at the time of point grant performed at the time of payment when purchasing a product or receiving a service is given as an example. I will explain.

  In this process, for example, payment amount input (for example, payment amount input by manual input operation or payment amount input by reading a bar code, etc.) is performed by the computer 50 or an external device (not shown) such as a cash register or a reader. Is executed, for example, by the control circuit 51 of the computer 50. First, identification information (identifier) is read from the IC card and a determination is made (S1). For example, a reading instruction is given to the reading device 10 at the start of the processing, and the IC card 90 is read by the wireless reader / writer 20 when the identification medium (IC card 90) is placed within the communication range of the reading device 10. . Also in this case, the unique ID corresponding to the presented card type method is read as identification information (identifier) as in the case of information code generation. If the identification information (identifier) can be read, the process proceeds to Yes in S1, and if it cannot be read, the process proceeds to No in S1. When it progresses to No by S1, it is set as the normal payment which does not perform profit provision (point provision) (S9), and the said process is complete | finished.

  When the process proceeds to Yes in S1, the information code reading unit 30 of the reading device 10 tries to read the information code C indicated by the identification medium. Specifically, for example, an attempt is made to read the information code C attached to the IC card 90 and a determination is made (S2). In S2, it is determined whether or not the image of the information code C can be acquired. If it can be acquired, the process proceeds to Yes in S2, and if it cannot be acquired, the process proceeds to No in S2. There are various determination methods in S2. For example, it may be determined whether or not a QR code (registered trademark) position detection pattern is detected, and whether or not a rectangular area that is assumed to be a code image is detected. You may judge. If the image of the information code) can be acquired, the process proceeds to Yes in S2, and if it cannot be acquired, the process proceeds to No in S2. When it progresses to No in S2, it is set as the normal payment which does not perform profit provision (point provision) (S10), and the said process is complete | finished.

  When the process proceeds to Yes in S2, the identification information (identifier) read in S1 is used as a decryption key (S3), and the encrypted data recorded in the information code C is decrypted using this decryption key (identification information). Try (S4). The computer 50 has a decryption program corresponding to the encryption program used for encryption when generating the information code C corresponding to the identification information of the IC card 90 (the encrypted data generated by the encryption program can be decrypted). The identification information (encryption key) acquired in S1 matches the encryption key (identification information) used for the encrypted data of the information code C recognized in S2. If the IC code 90 attached with the information code C is used for encryption of the information code C recognized in S2 when the information code is issued, it is recognized in S2. It becomes possible to decrypt the encrypted data of the information code C.

  After S4, the success or failure of the decryption is verified (S5). If the decryption of the encrypted data of the information code C recognized in S2 is successful, the process proceeds to "normal" in S5. On the other hand, if the decryption of the encrypted data of the information code C recognized in S2 has failed, the process proceeds to “abnormal” in S5. When the process proceeds to “abnormal”, it is specified that the information code C is issued by another identification medium (identification medium different from the identification medium recognized in S1), and no profit is granted (point is granted). (S11), and the process ends. The fact specified in S11 may be displayed on the display unit 54 of the computer 50.

  When the process proceeds to “normal” in S <b> 5, the operator code recorded in the decrypted data (basic information) is compared with the operator code stored in advance in the computer 50. If the operator codes match, the process proceeds to S8, and if they do not match, the process proceeds to S12. In the case of proceeding to S12, it is specified that the information code C is issued by another business operator, and it is assumed that the payment is a normal payment that does not give a profit (point grant) (S12), and the process ends. The fact specified in S12 may be displayed on the display unit 54 of the computer 50.

  If it is determined in S6 that the business operator codes match, point calculation processing is performed. The point calculation process can be used in various known methods. For example, the present grant point may be calculated so as to multiply the above-mentioned payment amount input before the process of FIG. 5 by a predetermined multiplier. The points may be calculated by an arithmetic expression using the amount of payment as a parameter (in this case, the arithmetic expression and the multiplier need only be registered in advance). Or you may calculate the point according to the object goods and service of the said payment (in this case, the number of points should just be matched with the kind of goods or service). Or you may make it give the point of a fixed value per payment. In this way, in S7, the number of points to be given this time is calculated.

  After S7, the number of points calculated in S7 is reflected in the individual points. Specifically, in a database provided in the computer 50 or a server (not shown), the accumulated point number is stored so as to be associated with the above-described identification information (identifier). In S8, the number of points calculated in S7 Is added to the number of points already accumulated for the individual (that is, the number of points already accumulated in association with the identification information (identifier) acquired in S1). Become.

  In the present embodiment, the reading device 10 and the computer 50 correspond to an example of an “information code authentication device”. The reading device 10 corresponds to an example of an “identification information reading unit” and functions to read identification information from an identification medium (IC card 90) possessed by the user. In addition, the light receiving sensor 33 corresponds to an example of an “imaging unit”, and images the information code C when the information code C issued by the information code issuing unit is attached to the identification medium (IC card 90). To work.

  Further, the control circuit 51 corresponds to an example of a “determination unit”, and attempts to decode the information code C imaged by the light receiving sensor 33 and use when the identification information acquired by the identification information reading unit is used at the time of decoding. Based on the result, it functions to determine success or failure of authentication of the information code imaged by the light receiving sensor 33. More specifically, using the identification information read by the identification information reading unit as a decryption key, the decryption basic information recorded in the information code C imaged by the light receiving sensor 33 is attempted to be decrypted. It functions to make the authentication of the information code C successful on condition that it succeeds.

  The control circuit 51 and the storage unit 52 correspond to an example of a “profit information adding unit”, and give profit information to an individual specified by the identification information on the condition that the authentication of the information code C by the determination unit is successful. To function. The storage unit 52 corresponds to an example of a “recording unit” that can record points given to each individual. Furthermore, the control circuit 51 and the storage unit 52 correspond to an example of an “update unit”, and when the information code is successfully authenticated by the determination unit, the control circuit 51 and the storage unit 52 are newly added to the individual specified by the identification information acquired by the identification information reading unit. This function functions to update the individual points to be recorded in the recording unit based on the points to be given to (for example, the points calculated in S7).

  In the above-described example, an example in which a database in which identification information or other information (personal information or the like) is associated with point information is provided in the computer 50 is shown. However, as shown in FIG. A management apparatus 200 capable of wireless communication (for example, communication via the Internet or a dedicated line) may be provided, and the above-described database may be provided in the management apparatus 200. In this case, when the information code C is issued, personal data corresponding to the IC card 90 used to generate the information code C (specifically, the identification information of the IC card 90 and the identification information associated with the identification information) Data) is transmitted from the computer 50 to the management apparatus 200 and registered in the memory 202, and each time the point calculation in S7 when the identification information is read in the reading process of FIG. The identification information and the calculated point value in S7 are transmitted in association with each other, and the management apparatus 200 manages the point data associated with the identification information.

(Main effects of the first embodiment)
In this embodiment, in the information code issuing device, the identification information acquisition device that reads the identification information of the identification medium possessed by the user, the identification information acquired by the identification information acquisition device, or the reflection information that reflects the identification information is recorded. An information code generating unit that generates the information code C and an information code issuing unit that issues the information code C generated by the information code generating unit are provided.
In this configuration, if the operator has an identification medium that the user generally uses, even if the company does not build a dedicated card issuing system developed in-house, information that records the identification information or reflection information of the identification medium A code, that is, an information code that can be recognized as unique to the user can be issued. Of course, even when the business operator constructs a card issuing system, a similar information code can be issued.

  On the other hand, the information code authentication device can read the identification information from the identification medium possessed by the user and the information code C issued by the information code issuing unit is attached to the identification medium, or The information code C can be imaged when displayed on the identification medium. Then, an attempt is made to decode the information code C imaged by the light receiving sensor 33, the use result when the identification information acquired by the identification information reading unit is used at the time of decoding, or the identification information and the information code C acquired by the identification information reading unit. Whether or not the authentication of the information code C imaged by the light receiving sensor 33 is successful is determined based on the comparison result with the decrypted data obtained by decrypting. In this configuration, when the user presents the information code C issued by the information code issuing device attached to the identification medium used for the issuance or displayed on the identification medium, it is recorded on the identification medium. It is possible to determine whether the information code C is used by the authorized user based on the obtained identification information. As a result, when the information code C is illegally used (when it is not used with the identification medium used for issuance), the fact can be confirmed, and the illegality by a third party who does not have a legitimate identification medium. Use can be more reliably excluded.

The information code issuing device also includes an encryption basic information generation unit that generates encrypted basic information obtained by encrypting predetermined basic information with an encryption key based on the identification information acquired by the identification information acquisition device as reflected information. The information code generation unit of the information code issuing device generates an information code C that records the basic encryption information generated by the basic encryption information generation unit, and the determination unit of the information code authentication device is an identification information reading unit. Using the read identification information as a decryption key, the encryption basic information recorded in the information code C imaged by the light receiving sensor 33 is tried to be decrypted, and the decryption of the information code C is performed on condition that the decryption is successful. Authentication succeeds.
According to this configuration, highly confidential encryption information can be recorded in the information code, and information outflow (outflow of basic information) from the code can be suppressed. Further, since the information code C cannot be decrypted unless a regular identification medium is provided, it is very advantageous in terms of security. Furthermore, since the authorized user does not need to remember the decryption key for decrypting the information code C, and does not need to manually input the decryption key, the labor for operation is further reduced.

  Further, the information code issuing unit forms and issues an information code medium 70 on which the information code C is recorded and can be pasted on the identification medium. According to this configuration, the information code C corresponding to an individual can be generated and attached to the identification medium of the individual without using a large-scale system.

  Further, in the present embodiment, the profit information providing unit is provided that provides the profit information to the individual specified by the identification information on condition that the authentication of the information code C by the determination unit is successful. According to this configuration, it is possible to construct a system that can provide profit information to a user and more reliably prevent an unauthorized user from acquiring the profit information illegally.

  In addition, the profit information giving unit is specified by the identification information acquired by the identification information reading unit when the authentication of the information code C by the recording unit capable of recording the points given to each individual and the determination unit is successful. And an updating unit for updating the individual points to be recorded in the recording unit based on the points to be newly given to the individual. According to this configuration, a system capable of appropriately giving points to each user can be constructed. In particular, since it is not necessary to put point information in the information code, the information code can be simplified, and the updating of points can be easily performed without complicated reading and writing of the information code.

[Second Embodiment]
Next, a second embodiment of the present invention will be described.
In the present embodiment, a mobile terminal 80 (for example, a mobile phone, a smartphone, a tablet terminal, other mobile electronic terminals, etc.) as shown in FIGS. 9A and 9B is used as an identification medium. For example, as shown in FIG. 9B, the portable terminal 80 is configured as a camera including a control circuit 81 including a CPU and a light receiving sensor (for example, a C-MOS area sensor, a CCD area sensor, etc.). An imaging unit (not shown), a display unit 84 including a liquid crystal display and the like, and a communication unit 82 configured as a communication interface for performing communication via a communication network such as the Internet are provided. In addition, a memory 83 including a ROM, a RAM, a nonvolatile memory, and the like, an operation unit (not shown) configured by various operation keys, and the like are also provided.

  In the present embodiment, when the information code C is issued, the reading device 10 performs the payment of the mobile terminal 80 (specifically, a non-contact communication unit (for example, non-contact communication) in the mobile terminal 80 presented by the user. Non-contact communication is performed with the information obtained from the mobile terminal 80. The information of the first embodiment is basically obtained. Information code C (data obtained by encrypting the identification information acquired from the portable terminal 80 as an encryption key) by performing the same processing as the code issuance processing (first step, second step) and generating in the second step in the computer 50 The information code) is transmitted as image data to the mobile terminal 80. The address of the destination mobile terminal 80 is compiled by the user in writing or verbally. It may be transmitted to an operator who operates the data 50 and input by the operator, or may be direct user input or pre-registration in the computer 50. In this case, an image of the information code C is acquired. The portable terminal 80 stores this image in the memory 82.

  In the present embodiment, the computer 50 corresponds to an example of an “information code issuing unit”, and the information code C generated by the information code generation unit is displayed on the display unit 84 for the portable terminal 80 used to generate the information code C. It functions to issue an information code by sending it as displayable data.

  The authentication process of this embodiment is basically the same as that of the first embodiment, and is performed according to the flow of FIG. In this case, the user may display the image of the information code C on the display unit 84 by performing a predetermined operation on the mobile terminal 80 and display it on the reading device 10. And non-contact communication is performed, acquisition of identification information (identifier) is attempted from the portable terminal 80, and determination is performed. In S <b> 2, an attempt is made to capture and recognize a code image of the information code C (see FIG. 9A) displayed on the display unit 84 of the mobile terminal 80. The processes after S3 (S3 to S7) after the code image of the information code C is acquired are the same as those in the first embodiment.

  Also in this embodiment, the light receiving sensor 33 of the reading device 10 corresponds to an example of an “imaging unit”, and the information code C issued by the information code issuing unit is displayed on the identification medium (the portable terminal 80). It functions to image the information code C.

  In addition, the information code authenticating device of the present embodiment is also specified by the identification information when a predetermined point granting condition is established for the individual specified by the identification information (that is, when it is determined to be a match in S6). An individual update point is calculated (S7). The control circuit 51 of the computer 50 corresponds to an example of “calculation unit”.

  In S8, the points are reflected in such a manner that the calculated points are recorded in the code. Specifically, data as shown in FIG. 10 is recorded in the information code C in an encrypted form. In S8, the number of points recorded in the information code C decrypted in S2 to S6 is recorded. The number of points calculated in S7 is added, and a new information code C updated so as to be a new number of points is generated. Specifically, the data including the new number of points and other information shown in FIG. 10 is re-encrypted using the identification information acquired in S1 as an encryption key, and the encrypted data is newly recorded. Information code C is generated. Then, the new information code C is transmitted to the mobile terminal 80 to be authenticated. In this case, on the portable terminal 80 side, when a new information code C is transmitted from the computer 50, processing is performed so that the data of the old information code C is discarded.

  In the present embodiment, the control circuit 51 corresponds to an example of an “update code generation unit”. When the information code is successfully authenticated, the control circuit 51 includes identification information or new reflection information reflecting the identification information, and is calculated by the calculation unit. It functions to generate a new information code including the calculated update point as data. The control circuit 51 and the communication unit 55 correspond to an example of an “update code issuing unit”, and a new information code C generated by the update code generating unit is transferred to an identification medium (portable terminal 80) from which the identification information is recorded. ) To send to.

(Main effects of the second embodiment)
In this example, the identification medium is the portable terminal 80 provided with the display unit 84, and the information code issuing unit applies the information code generated by the information code generating unit to the portable terminal 80 used for generating the information code. On the other hand, the information code is issued by transmitting as data that can be displayed on the display unit 84. According to this configuration, a medium (paper medium or the like) for forming the information code can be omitted, and labor and cost for operating the information code issuing device can be reduced. Further, the user can save the unique information code in his / her mobile terminal 80 without any effort.

In addition, the information code authentication device includes a calculation unit that calculates an update point of the individual specified by the identification information when a predetermined point granting condition for the individual specified by the identification information is satisfied, An update code generation unit that generates identification information or new information information that includes the new reflection information that reflects the identification information and that includes the update point calculated by the calculation unit as data when successful, and an update code generation unit And an update code issuing unit that transmits the new information code generated by the method to the identification medium that is the recording source of the identification information.
In this configuration, the points given to each user can be managed in the information code given to each user, the amount of data on the information code authentication device side can be reduced, and the configuration and functions of the device are simplified can do.

[Other Embodiments]
The present invention is not limited to the embodiments described with reference to the above description and drawings. For example, the following embodiments are also included in the technical scope of the present invention.

In the second embodiment, the information code issuing unit is configured as a part of an electronic register (POS register) or an external device, for example, and a sheet medium (receipt of paper or the like) on which a charge for goods or services is printed. You may provide the printing part to issue. In this case, the information code C is issued by printing the information code C on the sheet medium, and the identification medium (portable terminal 80) images the information code C printed on the sheet medium by a camera (not shown in FIG. 9). Thus, an image of the information code C may be acquired and stored in the memory 83. Then, at the time of authentication, the information code C may be displayed on the display unit 84 by a predetermined operation of the user, and the information code C may be read by the reading device 10.
In this configuration, an information code corresponding to an individual can be generated without using a large-scale system, and can be provided together with a sheet medium (such as a receipt issued at a cash register). In particular, since the information code can be printed together with information on the charge for goods or services, the information code issuance process can be performed quickly and the printing section can be used together, simplifying the device configuration and reducing the cost. Can be achieved.

  In the above example, points (for example, points that can be exchanged for products or points that can be discounted according to the number of points) are exemplified as profit information, but discount coupons, service tickets, etc. can also be used as profit information. Good. For example, instead of giving points in the processing of S7 and S8, or in combination with this, discount and payment processing such as discounting a fixed amount from the payment price may be performed. Further, instead of giving points in the processing of S7 and S8, or in combination with this, a service ticket or the like may be provided by electronic data or paper media.

  Further, the control circuit 51 corresponding to the “determination unit” attempts to decode the information code C imaged by the light receiving sensor 33 and uses the identification information acquired by the identification information reading unit at the time of decoding (specific example). In this example, the success or failure of authentication is determined based on the decryption result), but the present invention is not limited to such an example. For example, when the information code is issued, the information code C is issued so as to record the identification information acquired from the IC card 90, and at the time of authentication, the identification information acquired from the IC card 90 and the information code C are decoded by the identification information reading unit. The success or failure of authentication of the information code captured by the light receiving sensor 33 may be determined based on the comparison result with the decoded data obtained in this way. For example, when the identification information acquired from the IC card 90 at the time of authentication is included in the decrypted information code C, it may be determined that the authentication is successful. In this system, encryption may not be performed, and encryption may be performed using an encryption key stored in the reader 10 (in this case, the information code C is used by using the encryption key at the time of authentication). Can be decrypted).

  In the above-described embodiment, the configuration in which the information code issuing device and the information code authentication device are combined is shown, but these may be configured as separate devices. For example, the information code C is issued by the reading device 10, the computer 50, and the printer 60, and the authentication is performed by providing a reading device and a computer similar to the reading device 10 and the computer 50 described above. May be.

  The identification medium may be a medium other than the IC card described above. For example, a magnetic card in which unique information (ID or the like) is recorded may be used as an identification medium, and a known magnetic card reader may be provided in the reading device 10. Alternatively, a mobile terminal capable of displaying information (a mobile phone, a smartphone, a tablet terminal, or other portable information processing terminal) is used as an identification medium, and unique information (ID) uniquely assigned to the mobile terminal is used as an information code or other information. The mark may be displayed on the screen on the mobile terminal side, and the reader may capture such information code or mark to acquire unique information (identification information). Further, the reader may be provided with these plural types of identification information acquisition units. In this case, for example, in the process of S1 in FIG. 5, the identification information can be read by each type of identification information acquisition unit (for example, the above-described wireless reader / writer 20, a magnetic card reader, an imaging unit that images a portable terminal, or the like). If the identification information (identifier) is read by any of the identification information acquisition units, the process proceeds to Yes in S1, and if the identification information (identifier) is not read by any of the identification information acquisition units, the determination is No in S1. What is necessary is just to set it as normal payment (S9) which does not give profit (point grant etc.).

  In the above embodiment, the computer 50 corresponding to the information code generation unit generates the information code that records the reflection information that reflects the identification information acquired by the identification information acquisition device. It is not limited to. That is, other types of reflection methods may be used as long as the identification information is reflected in some form and the identification information can be specified directly or indirectly by a method based on the reflection method. For example, it may be reflection information in which the identification information acquired at the time of generating the information code is encrypted with a predetermined encryption key. When the information code C is generated in such a manner that the reflection information is recorded, If the encryption key exists in the authentication device, it can be decrypted without any trouble by performing decryption processing based on the encryption key instead of the processing of S3 and S4 at the time of authentication. Further, in the process of S6, it is only necessary to determine whether or not the operator code matches as in the first embodiment, and to determine whether or not the identification information acquired in S1 matches the decoded identification information.

  In the above embodiment, the computer 50 corresponding to the information code generation unit generates the information code recording the reflection information reflecting the identification information acquired by the identification information acquisition device. However, the identification information itself acquired at the time of generating the information code is used. A recorded information code may be generated. In this case, in the process of FIG. 5, S3 to S5 are omitted, and in the process of S6, it is determined whether or not the operator code matches as in the first embodiment, and the identification information obtained by decoding the identification information acquired in S1 It is sufficient to determine whether or not they match.

  In the above-described embodiment, the point system that requires identity verification is illustrated, but the confirmation system according to the present invention may be applied to a ticket system or the like.

DESCRIPTION OF SYMBOLS 1 ... Confirmation system 10 ... Reading apparatus (Information code issuing apparatus, information code authentication apparatus, identification information acquisition part)
20: Wireless reader / writer (reading unit)
33. Light receiving sensor (imaging unit)
50. Computer (information code issuing device, information code authenticating device, information code generating unit, information code issuing device, profit information giving unit)
51... Control circuit (determination unit, encryption basic information generation unit, calculation unit, update code generation unit, update code issue unit)
60. Printer (information code issuing device, information code authenticating device, information code issuing device, printing unit)
70 ... Information code medium 80 ... Mobile terminal (identification medium)
84 ... Display unit 90 ... IC card (identification medium)
200 ... management device (profit information giving unit)
201... Control circuit (update unit, calculation unit)
202 ... Memory (recording unit, update unit)

Claims (8)

An information code issuing device for issuing an information code and an information code authenticating device for authenticating the information code are provided, and the identity of a user of the information code is confirmed using an identification medium on which identification information unique to the medium is recorded. A confirmation system to perform,
The information code issuing device includes:
An identification information acquisition unit that reads the identification information of the identification medium possessed by the user;
An information code generating unit that generates the information code in which the identification information acquired by the identification information acquiring unit or the reflection information reflecting the identification information is recorded;
An information code issuing device for issuing the information code generated by the information code generating unit;
With
The information code authentication device includes:
An identification information reading unit that reads the identification information from the identification medium possessed by the user;
An imaging unit that images the information code when the information code issued by the information code issuing device is attached to the identification medium or displayed on the identification medium;
Trying to decode the information code imaged by the imaging unit, the use result when the identification information acquired by the identification information reading unit is used at the time of decoding, or the identification information acquired by the identification information reading unit and the Based on a comparison result with decrypted data obtained by decrypting the information code, a determination unit that determines success or failure of authentication of the information code imaged by the imaging unit;
A confirmation system characterized by comprising: The information code issuing device generates, as the reflected information, an encrypted basic information generating unit that generates encrypted basic information obtained by encrypting predetermined basic information with an encryption key based on the identification information acquired by the identification information acquiring unit. With
The information code generating unit of the information code issuing device generates the information code recording the encrypted basic information generated by the encrypted basic information generating unit;
The determination unit of the information code authentication device decrypts the encrypted basic information recorded in the information code imaged by the imaging unit using the identification information read by the identification information reading unit as a decryption key. 2. The confirmation system according to claim 1, wherein the information code is successfully authenticated on the condition that the authentication is attempted and the decryption is successful.   3. The confirmation system according to claim 1, wherein the information code issuing device forms and issues an information code medium on which the information code is recorded and can be attached to the identification medium. . The identification medium is a mobile terminal including a display unit,
The information code issuing device transmits the information code generated by the information code generating unit as data that can be displayed on the display unit to the portable terminal used for generating the information code. The confirmation system according to claim 1, wherein the confirmation system is issued. The information code issuing device includes a printing unit that issues a sheet medium on which a product or service fee is printed, and issues the information code by printing the information code on the sheet medium.
The identification medium is a portable terminal including a display unit and a camera, and the information code can be displayed by the display unit when the information code printed on the sheet medium is captured by the camera. The confirmation system according to claim 1 or 2, wherein:   6. The profit information adding section for adding profit information to an individual specified by the identification information on condition that the information code is successfully authenticated by the determination section. The confirmation system according to claim 1. The profit information giving unit
A recording unit capable of recording the points given to each individual,
When the authentication of the information code by the determination unit is successful, the point to be recorded in the recording unit based on the point to be newly given to the individual specified by the identification information acquired by the identification information reading unit The confirmation system according to claim 6, further comprising an update unit that updates individual points. The information code authentication device includes:
A calculation unit that calculates an update point of the individual specified by the identification information when a predetermined point grant condition for the individual specified by the identification information is satisfied;
When the authentication of the information code is successful, a new information code including the identification information or the new reflection information reflecting the identification information and including the update point calculated by the calculation unit as data is generated. An update code generator,
An update code issuing unit that transmits the new information code generated by the update code generating unit to the identification medium from which the identification information is recorded;
The confirmation system according to claim 6, further comprising:

Images