JP2018018261A - Authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system which prevents unauthorized use of a digital ticket.SOLUTION: An authentication system includes a mobile terminal (10) of a ticket user, a code reader (20), and an authentication server (30). The mobile terminal displays a face image of a user and a code having ticket identification information of a digital ticket, on one screen. The code reader reads the face image and the code displayed on the mobile terminal substantially simultaneously, and outputs face image data based on the face image and ticket identification information acquired from the code, to the authentication server. The authentication server includes a user information storage unit (302) which stores the ticket identification information and face image data and user information of legitimate users, in association with each other, and acquires face image data of a legitimate user associated with the ticket identification information transmitted from the code reader, from the user information storage unit, to collate the acquired face image data with the face image data output from the code reader.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication system that performs user authentication.

  In recent years, in order to purchase tickets for events such as concerts, an increasing number of cases adopting a method of issuing digital tickets that can be used with electronic devices such as personal computers and smartphones instead of conventional paper tickets (for example, Patent Document 1). ). Such a digital ticket has advantages such as easier ticket issuing processing than a conventional paper ticket.

  FIG. 6 is a diagram illustrating an example of a conventional digital ticket. For example, a purchaser who has purchased a concert ticket can display a digital ticket as shown in (a) and (b) on the screen 91 of a mobile terminal 90 such as a smartphone carried by the purchaser when entering the concert venue. 92 is displayed. The digital ticket 92 shown in FIG. 6 has a concert date and time, place, and concert name at the top of the ticket, and a QR code 93 near the center of the ticket. This QR code 93 includes information for uniquely identifying a ticket.

  The ticket purchaser causes the QR code 93 displayed on the screen 91 of the portable terminal 90 to be read by, for example, a QR reader (not shown) provided at the entrance of the concert hall. When the QR code 93 is read by the QR reader, information for uniquely identifying the ticket included in the QR code 93 is transmitted to an authentication server (not shown). The authentication server determines whether the ticket is a legitimate ticket based on the received information.

JP-A-10-63884

  However, since the digital ticket as shown in FIG. 6 does not confirm the user even if the ticket is obtained illegally, it is possible to enter the event venue. In addition, as a method for confirming the visitors, there is a method in which a face image is put on a digital ticket and an attendant visually confirms at the time of entrance.

  In view of the above problems, an object of the present invention is to provide an authentication system capable of preventing unauthorized use of a digital ticket.

  In order to solve the above problem, one aspect of the present invention is an authentication system for authenticating a user of a digital ticket, comprising: the user's mobile terminal; a code reader; and an authentication server. The portable terminal includes a display unit that displays a digital ticket including a face image of the user and a code having ticket identification information for uniquely identifying a digital ticket on one screen, and the code reader includes: A reading unit that reads the face image displayed on the display unit of the mobile terminal and the code substantially simultaneously; face image data based on the face image; and the ticket identification information acquired from the code; A usage information output unit that outputs the authentication information to the authentication server, wherein the authentication server includes the ticket identification information, the face image data of the legitimate user, and the legitimate usage. A user information storage unit that associates and stores the user information, and the face image data of the legitimate user associated with the ticket identification information output from the code reader is acquired from the user information storage unit An authentication system comprising: a collation unit that collates the acquired face image data and the face image data output from the code reader.

  Another aspect of the present invention is an authentication system for authenticating a user of a digital ticket, the ticket for uniquely identifying a portable terminal carried by the user, a code reader, and a digital ticket. This is a method executed by an authentication system comprising: an identification server, an authentication server having a user information storage unit that stores identification information, face image data of a legitimate user, and user information of the legitimate user in association with each other. The portable terminal displaying a digital ticket including the face image of the user and a code having the ticket identification information on a display unit on a single screen; and the code reader A step of reading the face image displayed on the display unit and the code at substantially the same time; a step of reading the face image data based on the face image by the code reader; Outputting the ticket identification information acquired from a code to the authentication server, and the authentication server sends the face image data of the legitimate user associated with the ticket identification information transmitted from the code reader. Is acquired from the user information storage unit, and the acquired face image data is collated with the face image data transmitted from the code reader.

  Moreover, the other aspect of this invention is a program for making the said authentication system perform said method.

It is a figure which shows an example of a structure of the authentication system which concerns on one Embodiment of this invention. It is a figure which shows an example of the digital ticket which concerns on one Embodiment of this invention. An example of the data memorize | stored in the user information storage part which concerns on one Embodiment of this invention is shown. It is a figure which shows an example of the hardware constitutions of the portable terminal and authentication server which concern on one Embodiment of this invention. It is a sequence diagram which shows an example of the process in the authentication system which concerns on one Embodiment of this invention. It is a figure which shows an example of the conventional digital ticket.

Embodiments of the present invention will be described below with reference to the drawings. In the drawings referred to in the following description, the same parts as those in the other drawings are denoted by the same reference numerals.
(Configuration of authentication system)
First, the configuration of the authentication system according to the present embodiment will be described. FIG. 1 is a diagram illustrating an example of a configuration of an authentication system according to the present embodiment. In the authentication system 1 according to the present embodiment, when a ticket user (ticket purchaser or the like) enters the venue in a place where a ticket is required to enter like a concert venue, the user is authorized. This is a system for authenticating whether a user is a valid user. A legitimate user is a person who has the title to use a ticket. For example, in addition to a person who has purchased a ticket, a legitimate user may be a person who has received a ticket from a person who has purchased a ticket.

  The authentication system 1 illustrated in FIG. 1 includes a mobile terminal 10 of a digital ticket user, a two-dimensional code reader 20, and an authentication server 30 that executes user authentication processing.

  In the authentication system 1 according to the present embodiment, the user is authenticated, but before that, the user performs a procedure for obtaining a ticket legitimately by purchasing a digital ticket in advance. That is the premise. For example, it is assumed that the ticket purchase procedure is mainly performed online, but the user enters his / her face image and personal data such as name / address / phone number on the purchase site. Do. When the purchase procedure is completed normally, the user obtains a digital ticket issued by the ticket issuer by a method such as download and stores it in the portable terminal 10. Then, the portable terminal 10 is carried to the concert venue and the entrance procedure is performed. (However, these are merely examples, and the present invention is not limited to these.)

Hereinafter, the configuration of each apparatus will be described.
(Configuration of mobile device)
A mobile terminal 10 illustrated in FIG. 1 is a mobile terminal possessed by, for example, a digital ticket user and purchaser, and includes a terminal storage unit 102 and a display unit 104.

  The terminal storage unit 102 stores a digital ticket obtained by purchasing in advance. Here, the digital ticket used in the authentication system of the present embodiment includes a user's face image and a two-dimensional code such as a QR code (registered trademark) issued by the digital ticket issuer.

  The display unit 104 displays a digital ticket including a user's face image and a two-dimensional code having ticket identification information for uniquely identifying the digital ticket on a single screen. The ticket identification information is, for example, a ticket ID. In this embodiment, a two-dimensional code (QR code) is used as an example, but the present invention is not limited to this. Any one having (showing) ticket identification information may be used. For example, a one-dimensional code such as a barcode may be used. In that case, the authentication system 1 may include a one-dimensional code reader instead of the two-dimensional code reader 20.

  FIG. 2 is a diagram illustrating an example of a digital ticket according to the present embodiment. In FIG. 2, the digital ticket 12 is displayed on the display unit (display) 104 of the terminal device 10. The digital ticket 12 includes a QR code 13 and a face image 14 of the user, and these are displayed on the display unit 104 in one screen. In the example of FIG. 2, the QR code 13 and the user's face image 14 are arranged one above the other, but this is only an example, and the arrangement of both is not limited to this. For example, the positions of the face image 14 and the QR code 13 may be reversed, or both may be displayed side by side on one screen.

  The QR code 13 and the user's face image 14 only need to be displayed on one screen when displayed on the display unit 104. For example, the data may be stored as separate data in the terminal storage unit 102 and may be displayed on a single screen by combining them when displayed on the display unit 104. Further, when displayed on the display unit 104, the digital ticket 12 may not be configured as one image. That is, the QR code 13 and the face image 14 may be composed of separate image data, and these may be displayed on the display unit 104 at the same time so as to be seen as one digital ticket.

  Further, the user's face image is the same as that stored in the authentication server 30 as will be described later by the purchaser providing the ticket seller with the ticket purchase. As will be described later, this face image is used to confirm the validity of the ticket.

(Configuration of two-dimensional code reader)
Returning to FIG. 1, an example of the configuration of the two-dimensional code reader 20 will be described. A two-dimensional code reader 20 illustrated in FIG. 1 is a device installed at an entrance of a concert hall, for example, and includes a reading unit 202 and a usage information output unit 204.

  The reading unit 202 reads the face image displayed on the display unit 104 of the mobile terminal 10 and the two-dimensional code almost simultaneously. “Substantially simultaneous” means that it is sufficient if it is not exactly the same, but almost the same. Many people come to the concert venue, etc., and visitors must be seated by the entrance time of the concert, etc., and the time allowed for the entrance process is limited. In view of such a situation, in this embodiment, when the user displays a digital ticket on the display unit 104 of the mobile terminal 10, the user's face image and the two-dimensional code are displayed on one screen. It has become. As a result, the two-dimensional code reader 20 can read both of them almost simultaneously without switching the screen of the mobile terminal 10 in order to display the face image and the two-dimensional code. It is possible to proceed with the admission process. When the reading unit 202 reads the face image and the two-dimensional code, for example, the face image and the two-dimensional code may be cut out after the two images are integrally photographed with a camera ( However, it is not limited to such a method). The two-dimensional code interprets data (ticket identification information) represented by the code in accordance with the standard.

  The usage information output unit 204 outputs face image data based on the face image and ticket identification information acquired from the two-dimensional code to the authentication server 30. Note that “output to the authentication server 30” corresponds to a case where the authentication server 30 is remote from the two-dimensional code reader 20 and output by network communication. In addition, when the two-dimensional code reader 20 and the authentication server 30 are physically integrated, a case where data is internally transferred to the authentication server 30 is applicable.

(Configuration of authentication server)
An authentication server 30 illustrated in FIG. 1 is a server installed at any outside via a concert hall entrance or a network, for example, and includes a user information storage unit 302, a verification unit 304, a result output unit 306, A ticket issuing unit 308 and a user information changing unit 310 are provided.

  The user information storage unit 302 stores ticket identification information, legitimate user face image data, and legitimate user information in association with each other. FIG. 3 shows an example of data stored in the user information storage unit 302. In FIG. 3, a ticket ID (ticket identification information) for uniquely identifying a digital ticket, a user ID for uniquely identifying a (legitimate) user of the ticket, a user's name, address, telephone number, and face image data File names (user information) are associated in a database format. Further, the face image data having the file name indicated in the “face image data” field of FIG. 3 is stored in the user information storage unit 302. When the purchaser purchases the ticket information, for example, online (including his / her own face image), the information is stored in the user information storage unit 302 in a format as shown in FIG. Further, the “legitimate user” means a person who has the title to use the ticket. For example, there are cases where the purchaser of a ticket for a concert or the like and the person who actually goes to the concert or the like are different. However, if a ticket purchase is performed by legitimate means or a ticket is transferred, the person who obtained the ticket is a “legitimate user”. In this case, after the ticket purchase, the face image data and user information of the new user may be notified to the ticket issuer by a user change procedure or the like. The ticket issuer rewrites the contents of the user information storage unit 302 when a user change procedure or the like is performed. At this time, the user information changing unit 310 (to be described later) executes processing for changing the face image data and user information in the user information storage unit 302.

  The collation unit 304 acquires the face image data of the legitimate user associated with the ticket identification information output from the two-dimensional code reader 20 from the user information storage unit 302, and the acquired face image data and the two The face image data output from the dimension code reader 20 is collated. Specifically, for example, the collation unit 304 searches the user information storage unit 302 using the ticket identification information (ticket ID or the like) output from the two-dimensional code reader 20 as a key, and is associated with the ticket identification information. Search user face image data. Then, the extracted face image data is collated with the face image data output from the two-dimensional code reader 20. In addition, collation of these image data can be performed using a prior art. In addition, the determination of the coincidence or disagreement between the two may be, for example, that a certain threshold value is provided, and a matching result “match” is obtained when the coincidence rate of both is equal to or greater than the threshold value.

  The result output unit 306 outputs the collation result in the collation unit 304. When the collation result in the collation unit 304 is a result that the face image data does not match, for example, result data indicating that is transmitted to the terminal device 10. When the terminal device 10 receives the mismatch result data, for example, the display unit 104 may display a message indicating that the face image data does not match. Further, when the authentication server 30 is installed at the entrance of a concert hall or the like, the verification result may be displayed on a display (not shown) provided in the authentication server 30. Further, for example, the collation result may be displayed on a computer for an attendant at a venue entrance (including a mobile terminal such as a smartphone). If the collation result does not match, the attendant may compare the face image of the user at the time of ticket purchase stored in the authentication server 30 with the face of the user who has visited. . At this time, for example, the face image of the user stored in the authentication server 30 together with the collation result may be transmitted to the attendant computer, or stored in the authentication server 30 in advance in the attendant computer. A copy of the user's face image data may be stored.

  The ticket issuing unit 308 determines that the collation result in the collation unit 304 is that the face image data acquired from the user information storage unit 302 matches the face image data output from the two-dimensional code reader 20. Has a function of issuing another ticket related to the digital ticket. For example, a process for issuing seat tickets at a concert venue is executed. The ticket issuing unit 308 may print out a seat ticket or the like, or may output a command for issuing a ticket to an external ticket issuing device together with necessary information such as a seat number. In addition to issuing tickets on a paper basis, for example, a seat number may be transmitted to the mobile terminal 10 of the user. When printing out a seat ticket or the like, at least the printing device needs to be installed near the entrance to the concert venue, but the ticket issuing unit 308 itself may be a device separate from the authentication server 30.

  The user information changing unit 310 changes the legitimate user's face image data or user information stored in the user information storage unit 302. As described above, the legitimate user's face image data and user information are registered at the time of ticket purchase or the like, but the user may be changed due to transfer of the ticket or the like. In such a case, the face information or user information stored in the user information storage unit 302 is changed by the user information changing unit 310.

  As described above, in the authentication system according to the present embodiment, the user stores in the mobile terminal 10 the same data as the face image data registered in the authentication server 30 as data indicating a valid user in advance, It collates with the face image data of the authentication server 30 when entering. For example, if the attendant at the entrance of the venue simply identifies the face image on the digital ticket and the face of the visitor visually, the person who obtained the ticket illegally altered the face image of the digital ticket to his / her face image. If you try to enter, you can not judge that you are not a legitimate user. However, according to the authentication system of the present embodiment, even if the face image of the digital ticket is falsified, it does not match the face image of the legitimate user stored in the authentication server 30. It can be judged that it is not a person.

  Furthermore, in the authentication system according to the present embodiment, the face image and the two-dimensional code are displayed on one screen on the mobile terminal 10, and the two-dimensional code reader 20 includes the face image displayed on the display unit 104 of the mobile terminal 10. The two-dimensional code is read almost simultaneously. When verifying identity at a place that accommodates a large number of people, such as a concert venue, it is necessary to have the user sit down in the seat after the entrance confirmation after the opening of the concert until the concert starts , You need to quickly verify your identity. According to the authentication system according to the present embodiment, since the QR code and the face image are read by the two-dimensional code reader 20 substantially simultaneously, there is an advantage that the processing is much faster than reading them separately.

(Hardware configuration)
The portable terminal 10 and the authentication server 30 can be realized by a hardware configuration similar to a general computer device. FIG. 4 is a diagram illustrating an example of a hardware configuration of the mobile terminal 10 and the authentication server 30. As an example, the computer device 3 shown in FIG. 4 includes a processor 31, a RAM 32, a ROM 33, a hard disk device 34, a removable memory 35, a communication interface 36, a display / touch panel 37, a speaker 38, a keyboard / A keypad 39. The functions of the components of the mobile terminal 10 and the authentication server 30 according to the present embodiment can be realized by, for example, the processor 31 reading a program stored in advance in the hard disk device 34 into a memory and executing it. Note that the hardware configuration shown in FIG. 4 is merely an example, and the present invention is not limited to this.

  Further, the two-dimensional code reader 20 can apply the function of a conventional two-dimensional code reader. The two-dimensional code reader 20 has, for example, a photographing device capable of photographing both a face image and a two-dimensional code, cuts out a face image and a two-dimensional code from one photographed image, and Need only be able to interpret information like a conventional two-dimensional code reader. The two-dimensional code reader 20 has a wired or wireless communication interface capable of transmitting face image data and a two-dimensional code to the outside.

(Processing sequence)
FIG. 5 is a sequence diagram illustrating an example of processing in the authentication system according to the present embodiment.

  First, according to the operation of the ticket user, the display unit 104 of the portable terminal 10 displays a digital ticket including the user's face image and a two-dimensional code (step S102). Then, when the user holds the display unit 104 of the mobile terminal 10 on which the digital ticket is displayed over the two-dimensional code reader 20 (step S104), the two-dimensional code reader 20 displays a two-dimensional code such as a face image and a QR code. Are read substantially simultaneously (step S106). When the reading of the face image and the two-dimensional code is not normally performed (step S108: No), the fact that the reading is NG is output (step S110). The output may be performed by various methods such as displaying a message on the display of the two-dimensional code reader, outputting by voice, or indicating by lighting / flashing of a lamp. Then, the face image and the two-dimensional code are read again through steps S104 and S106.

  When the reading of the face image and the two-dimensional code is normally performed (step S108: Yes), the face image data constituting the face image and the ticket identification information acquired from the two-dimensional code are output to the authentication server 30. (Step S112).

  When the authentication server 30 acquires the face image data and the ticket identification information from the two-dimensional code reader 20, the user is referred to with reference to a database or the like stored in the user information storage unit 302 using the acquired ticket identification information as a key. Search for face image data. The extracted face image data is collated with the face image data acquired from the two-dimensional code reader 20 (step S114). If the collation results in a mismatch (step S116: No), for example, data indicating that fact is transmitted to the mobile terminal 10 (step S118). If the collation results in a match (step S116: Yes), a process for issuing a seat ticket such as issuing a seat ticket or outputting related data for issuing a ticket is executed (step S120). ).

  Up to this point, one embodiment of the present invention has been described. However, the present invention is not limited to the above-described embodiment, and it is needless to say that the present invention may be implemented in various forms within the scope of the technical idea.

  In addition, the scope of the present invention is not limited to the illustrated and described exemplary embodiments, and includes all embodiments that provide the same effects as those intended by the present invention. Further, the scope of the invention is not limited to the combinations of features of the invention defined by the claims, but may be defined by any desired combination of particular features among all the disclosed features. .

DESCRIPTION OF SYMBOLS 10 Mobile terminal 20 Two-dimensional code reader 30 Authentication server 102 Terminal storage part 104 Display part 202 Reading part 204 Usage information output part 302 User information storage part 304 Verification part 306 Result output part 308 Ticket issuing part 310 User information change part

Claims (5)

An authentication system for authenticating a user of a digital ticket,
The user's mobile terminal, a code reader, and an authentication server,
The portable terminal is
A display unit for displaying the digital ticket including the face image of the user and a code having ticket identification information for uniquely identifying the digital ticket on one screen;
The code reader is
A reading unit that reads the face image displayed on the display unit of the mobile terminal and the code substantially simultaneously;
A use information output unit that outputs the face image data based on the face image and the ticket identification information acquired from the code to the authentication server,
The authentication server is
A user information storage unit that associates and stores the ticket identification information, the face image data of the legitimate user, and the user information of the legitimate user;
The face image data of the legitimate user associated with the ticket identification information output from the code reader is acquired from the user information storage unit, and the acquired face image data and the code reader are output A collation unit for collating face image data,
An authentication system comprising:   The authentication system according to claim 1, further comprising a result output unit that outputs a verification result in the verification unit.   The authentication system according to claim 1, wherein the authentication server further includes a user information changing unit that changes face image data or user information of a legitimate user stored in the user information storage unit. . An authentication system for authenticating a user of a digital ticket, the portable terminal carried by the user, a code reader, ticket identification information for uniquely identifying a digital ticket, and a face of a legitimate user An authentication system comprising: an authentication server having a user information storage unit that stores image data and user information of the legitimate user in association with each other,
The portable terminal displaying a digital ticket including the face image of the user and a code having the ticket identification information on a display unit on a single screen;
The code reader reading the face image displayed on the display unit of the mobile terminal and the code substantially simultaneously;
The code reader outputting face image data based on the face image and the ticket identification information acquired from the code to the authentication server;
The authentication server acquires face image data of the legitimate user associated with the ticket identification information transmitted from the code reader from the user information storage unit, and the acquired face image data and the code Collating the face image data transmitted from the reader;
A method comprising:   The program for making the said authentication system perform the method of Claim 4.

Images