JP4539340B2 - Authentication system - Google Patents

Description

  The present invention relates to an authentication system in which the validity of a user or an object is confirmed using a two-dimensional code.

  For example, a system that uses a card (tag) printed with a two-dimensional code like a tally in order to collate the checked baggage with the checked-in person at a baggage deposit box is considered (for example, Patent Document) 1). In this system, data such as date, time, ticketing number, etc. is divided into two according to a predetermined function on a card that can be separated into two by a perforation, and two two-dimensional codes obtained by coding each data are converted into the above-mentioned sewing machine. Print on both sides of the eye, attach one card A separated by the perforation to the checked baggage, and give it to the person who put the other card B. When the deposited person receives the package, the two-dimensional scanner sequentially writes the two-dimensional code recorded on the card B held by the person and the two-dimensional code recorded on the card A attached to the package. By reading the above, the contents of the entire data are confirmed and the validity is judged.

As a typical two-dimensional code, there is a “QR code”, which is currently most popular. One of the features of the “QR code” is an error correction (data restoration) function that allows data to be read even if a part of the code (for example, about 30% at the maximum) is dirty or damaged. Also in the above-described system, by using such an error correction function, the confirmation time is shortened and the reliability is improved.
JP 2001-266092 A

  However, when using a card on which a two-dimensional code is printed like a tally as in the prior art described above, the two-dimensional code written on each separated card reads the content of the data alone. As a result, the data of the two-dimensional code recorded on the other card can be easily guessed, and as a result, it can be used illegally, such as impersonating another person. For this reason, the conventional system has a problem in security, and is still insufficient for application to a system that requires higher security.

  The present invention has been made in view of the above circumstances, and its purpose is to confirm the legitimacy of a user or an object using a two-dimensional code, and to provide an authentication system capable of enhancing security. There is.

An authentication system of the present invention is a system for confirming the validity of a user or an object, and includes an authentication information generation device and an authentication device, and the authentication information generation device includes a two-dimensional code of authentication information. A generation unit configured to generate a pattern, a dividing unit that divides the generated two-dimensional code pattern into a plurality of divided code pieces, and a distribution unit that distributes the divided divided code pieces to a user or an object. The authentication device also includes a reading means for reading the divided code pieces, a combining means for combining the read image data into one two-dimensional code, and a right by decoding the combined two-dimensional code. Evaluation means for evaluating the characteristics, and the dividing means is arranged so that it cannot be decoded even if one of the divided code pieces divided from the two-dimensional code pattern is missing. Together are configured to divide the two-dimensional code pattern, the two-dimensional code pattern is composed has a specific pattern for position detection, wherein the dividing means includes the specific pattern in each divided cord piece The divided code pieces are generated as described above, and the synthesizing means is configured to perform synthesis while adjusting the size and position of each divided code piece so as to match the specific pattern. (Invention of claim 1)

  According to the authentication system of the present invention, in the authentication information generating device, the two-dimensional code pattern of the authentication information is generated by the generating unit, and the generated two-dimensional code pattern is divided into a plurality of divided code pieces by the dividing unit, These divided code pieces are distributed to the user or the object by the distribution means. On the other hand, in the authentication apparatus, the divided code fragment is read by the reading means, and the read image data is synthesized into one two-dimensional code by the synthesizing means, and the synthesized two-dimensional code is decrypted by the evaluating means, and the validity is obtained. Is evaluated.

At this time, when the two-dimensional code pattern is divided by the dividing means, it is configured such that the data cannot be decoded even if one of the divided code pieces is missing. At the same time, decryption is possible for the first time, and no data can be read from some of the distributed code fragments. Therefore, there is no possibility that the authentication information is estimated from some of the divided code pieces, and the security can be improved.
Since the specific pattern is included even in the divided code piece, the user can easily understand that it is the type of the two-dimensional code or the divided code piece by looking at it. Further, the specific pattern can be used as a reference for alignment at the time of synthesis. In addition, when the image data of the divided code pieces is synthesized by the synthesizing means, it is possible to easily adjust the size and position of each divided code piece so as to match the specific pattern of each divided code piece. Become.

In the present invention, the distribution means of the authentication information generation apparatus can be configured to distribute the divided code pieces by printing them on a medium such as paper (invention of claim 7 ). It is possible to distribute the divided code pieces without fail. Alternatively, the distribution means can be configured to distribute the divided code pieces as electronic data (invention of claim 8 ). Thereby, the electronic data of the divided code pieces can be distributed to a remote user or the like by a method such as data communication, and convenience can be improved.

The reading means before Symbol authentication device can be configured with a means for obtaining a means for reading the divisional code pieces printed on the medium optically, the electronic data has been divided cord piece from the outside (according Item 9 ). According to this, it is possible to deal with both the divided code piece printed on the medium and the divided code piece converted into electronic data.

In the first aspect of the invention, the dividing unit is configured to divide the two-dimensional code pattern based on the data amount, and the synthesizing unit performs synthesis by adding the data of the divided code pieces, The evaluation means may be configured to determine that the verification is impossible when the synthesized two-dimensional code cannot be decoded and decoded (invention of claim 2 ). According to this, since the two-dimensional code pattern is not physically divided, it is difficult to understand from the outside that it is a divided code piece, and higher security can be obtained. It is possible to reliably determine that the evaluation means cannot perform collation.

In the present invention, the dividing means is configured to divide so that the joined portions of the divided code pieces form an uneven shape, and the evaluation means is configured to combine the divided portions when the divided code pieces are synthesized by the synthesizing means. It can be configured that it is determined that the collation is not possible when the irregularities of the two are not meshed (invention of claim 3).

Or, the dividing means, the junction between the split piece of code configured to divide so as to partially overlap, the evaluation unit, when the divided code fragment is synthesized by the synthesizing means, present in the joint It can also be configured that it is determined that the collation is impossible when the data of the overlapping portion to be matched does not match (the invention of claim 4 ). According to these, before the two-dimensional code is decoded, it is possible to easily and promptly determine whether or not collation is possible.

If thus providing a joint, the combining means may be configured to perform synthesis while adjusting the size and position of each divided code fragment so as to match the junction between the divisional code piece (claim 5 invention). According to this, at the time of synthesizing the image data of the divided code pieces by the synthesizing means, the size and position of each divided code piece can be automatically adjusted by matching the joint portions of the divided code pieces. Is possible.

Further, in the present invention, the dividing means can be configured to add a reference pattern for synthesis that serves as a reference for size and positioning at the time of synthesis to each divided code piece (invention of claim 10 ). At this time, the synthesizing means can be configured to synthesize while adjusting the size and position of each divided code piece so that the synthesizing reference pattern matches (invention of claim 11 ). According to this, by adding a reference pattern for synthesis to each divided code piece, it is easy to automatically adjust the size and position of each divided code piece when the image data of the divided code piece is synthesized by the synthesis means. It becomes possible.

In the present invention, the combining means adjusts the size of each divided code piece based on the undivided side of each divided code piece, and determines the position of each divided code piece based on the joint portion of each divided code piece. It can also comprise so that it may synthesize | combine while adjusting (invention of Claim 6 ). This also makes it possible to automatically adjust the size and position of each divided code piece when the image data of the divided code pieces is synthesized by the synthesis means without adding an extra reference pattern or the like.

In the present invention, the reading means includes a display means for simultaneously displaying a plurality of read divided code pieces on the screen, and the combining means manually adjusts the size and position of each divided code piece. It is also possible to configure so that the composition is performed based on an instruction to enlarge, reduce and move the divided code pieces on the screen by the operation means (invention of claim 12 ). Thereby, the operator who operates the operation means can synthesize the divided code pieces while checking on the screen.

In the present invention, the synthesizing means can be configured to perform synthesis in a state where each divided code piece is converted into light and dark pattern data (the invention of claim 13 ), and the synthesis process can be performed more easily. Can do.

As a more specific configuration of the evaluation means in the present invention, when the authentication apparatus is provided with a storage device storing valid authentication information, the evaluation means searches the decoded authentication information from the storage device. The authentication can be determined to be successful if they match (invention of claim 14 ). Alternatively, in the case where the authentication device is provided with a communication unit that performs communication with an external server that stores valid authentication information in advance, the evaluation unit searches for the decoded authentication information from the external server and matches In this case, it can be configured to determine that the authentication is successful (invention of claim 15 ). According to these, high security can be obtained and authentication can be performed reliably.

Hereinafter, embodiments embodying the present invention will be described with reference to the drawings.
<1> First Embodiment First, a first embodiment of the present invention will be described with reference to FIGS. In this embodiment, as a specific example, an authentication system for unlocking a room (or a safe or the like) that needs to be kept secret by allowing a plurality of authorized persons to gather. The present invention is applied. In this embodiment, “QR code” is adopted as the two-dimensional code.

  FIG. 2 schematically shows the configuration of the authentication system according to the present embodiment. Here, the authentication system includes an authentication information generation device 1 and an authentication device 2. Among them, the authentication information generation apparatus 1 is configured by a microcomputer as a main body and controls the whole, and an electronic data distribution apparatus 4, a card issuing apparatus 5, an input operation apparatus 6, a storage apparatus 7, connected thereto, A communication device 8 for communicating with the authentication device 2 is provided.

  On the other hand, the authentication device 2 is composed mainly of a microcomputer and controls the whole, and a two-dimensional code reading device 10, an input operation device 11, a storage device 12, and the authentication information generation connected thereto. A communication device 13 for performing communication with the device 1 is provided. And this authentication apparatus 2 (control apparatus 9) is connected to the locking / unlocking control apparatus 14 which controls the locking / unlocking of the room which needs to keep secret.

  More specifically, in the authentication information generating device 1, the control device 3 uses the authentication information 2 as shown in FIG. 1 or the like based on the operation of the input operation device 6 by the system administrator. A pattern of a dimension code C (known QR code) is generated, and at the same time, a plurality of patterns of the two-dimensional code C are divided into two divided code pieces Sa and Sb in this case. The authentication information is stored in the storage device 7 and further sent to the authentication device 2 via the communication device 8.

  The divided code pieces Sa and Sb are printed on a card as a medium such as paper by the card issuing device 5, and the card on which the divided code pieces Sa and Sb are printed is as shown in FIG. These are distributed to user A and user B (hand delivery, home delivery, mail, etc.), respectively. Further, the divided code pieces Sa and Sb can be distributed as electronic data (image data) to the user terminal device by the electronic data distribution device 4.

  Therefore, the control device 3 functions as a generating unit and a dividing unit, and the card issuing device 5 and the electronic data distribution device 4 function as a distribution unit. As for the distribution of electronic data, electronic mail, download through a network such as the Internet, communication between terminals by general protocol (TCP / IP), communication between terminals by peer-to-peer (IrDA, USB), memory, magneto-optical Various means such as distribution via a storage medium such as a storage medium can be employed.

  Here, the “QR code” as the two-dimensional code C will be briefly described. As shown in FIG. 1A and FIG. 7D, the QR code has a square shape as a whole, and a specific pattern (cutout symbol) P indicating the data arrangement direction at the three corners of the upper right, upper left, and lower left. The remaining portion is a data area in which black and white data cells are arranged vertically and horizontally. In this embodiment, data such as an ID number, a password, and a date are recorded in this data area as authentication information. As is well known, this QR code has an error correction (data recovery) function based on Reed-Solomon codes, and even if 30% of the area is dirty or damaged at the highest level, Can be restored and read.

  In the present embodiment, the control device 3 of the authentication information generation device 1 divides the two-dimensional code C into two vertically (left and right), but there are three divided code pieces Sa and Sb. The specific pattern P is included. Then, as shown in FIG. 1B and FIG. 3, only the data region portion is divided into right and left so that the area is substantially divided into two equal parts, and the joint (divided portion) has an uneven shape. It is designed to be divided as you would expect. At this time, in one divided code piece Sa, Sb, almost 50% of the area of the data area is missing, so that it cannot be decoded even by the error correction function.

  On the other hand, in the authentication device 2, authentication information transmitted from the authentication information generation device 1 (communication device 8) and received by the communication device 13 is stored in the storage device 12. The two-dimensional code reader 10 includes a CCD image sensor, for example, and can optically read the two-dimensional code. In this embodiment, the divided code pieces Sa and Sb are sequentially read by the two-dimensional code reading device 10, and the read data (image data) is input to the control device 9.

  Then, the control device 9 combines the image data of the two divided code pieces Sa and Sb so as to return to the original two-dimensional code C pattern (add the two divided data areas back to one). Then, the synthesized two-dimensional code C is decoded to evaluate the validity. Therefore, the two-dimensional code reading device 10 functions as a reading unit, and the control device 9 functions as a synthesizing unit and an evaluation unit. Further, the authentication device 2 (control device 9) outputs an unlock signal to the locking / unlocking control device 14 when authentication is properly performed. The locking / unlocking control device 14 normally locks the door of the room and performs unlocking according to the unlocking signal. The input operation device 11 includes a display device, and performs notification when the collation is impossible.

  At this time, as will be described in detail in the following description of the operation (flowchart), the control device 9 uses the software configuration (execution of the authentication program) to synthesize the image data of the divided code pieces Sa and Sb. After storing the image data in order, each specific pattern P is detected, and based on the position of each specific pattern P, the size and position (direction) of each divided code piece Sa, Sb so as to match each specific pattern P (Including) is adjusted automatically.

  At this time, it is determined that the collation is impossible when the unevenness of the joint portion of the divided code pieces Sa and Sb is not meshed. Further, the control device 9 decodes the synthesized two-dimensional code C, and determines that the collation is impossible when it cannot be decoded. Then, when the synthesized two-dimensional code C is decrypted, the control device 9 compares the decrypted information (authentication information) with the authentication information stored in advance in the storage device 12 and agrees. In this case, it is determined that the authentication is successful.

  Next, the operation of the authentication system configured as described above will be described. FIG. 1 schematically shows a series of processes in the authentication system of this embodiment. That is, as described above, in the authentication information generation apparatus 1 (control apparatus 3), first, as shown in FIG. 1A, authentication information is generated based on the input predetermined information, and the authentication information is generated. Is generated in the data area. Next, as shown in FIGS. 1B and 3, divided code pieces Sa and Sb are generated by dividing the pattern of the two-dimensional code C into two.

  Next, two cards on which the divided code pieces Sa and Sb are printed are issued by the card issuing device 5 and, as shown in FIG. These cards are distributed to user A and user B, respectively. At this time, since the divided code pieces Sa and Sb printed on each card cannot be decoded alone, the authentication information (the other data) is obtained from one of the divided code pieces Sa and Sb. There is no risk of guessing, and the security is high.

  When the user A and the user B want to enter a room that needs to be kept secret, they bring their respective cards together, and as shown in FIG. 1 (d), the two-dimensional code of the authentication device 2 The reading device 10 is operated to sequentially read the divided code pieces Sa and Sb printed on each card. Then, the control device 9 of the authentication device 2 executes the process of combining the read data as shown in FIG. 1 (e), and the validity of the combined data as shown in FIG. 1 (f). Is evaluated.

  The flowchart of FIG. 4 shows a processing procedure (main routine) from reading to decoding of the divided code pieces Sa and Sb, which is executed by the control device 9 of the authentication device 2 at that time. 5 and 6 show the detailed processing procedure of the two-dimensional code reading process (step S1) and the two-dimensional code composition process (step S3) in the flowchart of FIG. . Further, FIG. 7 schematically shows a flow in the synthesis process of the two-dimensional code.

  In the flowchart of FIG. 4, first, in step S <b> 1, a two-dimensional code (divided code piece) reading process is executed by the two-dimensional code reader 10. In the next step S2, it is determined whether or not all the two-dimensional codes have been read. If not (No), the process in step S1 is repeated. Here, in the reading process of step S1, as shown in the flowchart of FIG. 5, the two-dimensional code (divided code fragment) is first read as an image (step S11), and then the read image data is read. Is stored in the storage device (step S12).

  Returning to FIG. 4, if all the two-dimensional codes have been read (Yes in step S <b> 2), the process proceeds to the two-dimensional code synthesis process in step S <b> 3. This synthesizing process is executed in detail according to the procedure shown in the flowchart of FIG. That is, first, in step S21, image data of one two-dimensional code (divided code piece) is read, and in the next step S22, the positions of three specific patterns P in the image data are detected. In step S23, the size of the specific pattern P (distance between adjacent specific patterns P) is obtained and stored. The above processing is performed in order until all the two-dimensional codes (divided code pieces) are finished (step S24).

  Here, for example, as shown in FIG. 7A, the size of the image data for the two divided code pieces Sa and Sb differs depending on the reading distance, and the direction of the image data differs depending on the reading direction. There are circumstances to come. Therefore, in the next step S25, first, the size of the image data of each divided code piece Sa, Sb is adjusted. In the present embodiment, as shown in FIG. 7B, the smaller image data is enlarged so as to match the larger one in accordance with the size ratio obtained in step S23. Of course, the larger one may be reduced to the smaller one.

  In the next step S26, as shown in FIG. 7C, based on the position of the specific pattern P, a process of rotating the image data so that the vertical and horizontal directions of the image data are aligned is executed. In step S27, the two image data are synthesized as shown in FIG. 7D by taking the logical sum of the two image data. Although not shown in FIG. 6, if the concavities and convexities of the joint portions of the two images are not meshed at the time of synthesis, it is determined that collation is not possible, and this is notified by display or the like.

  When this synthesizing process is completed, returning to FIG. 4, decoding of the synthesized data is executed in step S4. If the synthesized data can be decoded (Yes in step S5), the decoded data is displayed in step S6, and this process is terminated. On the other hand, if the synthesized data cannot be decoded (No in step S5), a display indicating that the decoding has failed is made in step S7. As described above, when the composite data is decrypted, the decrypted authentication information is collated with the authentication information stored in advance, and if the collation result matches, the room is unlocked. Will be made. If they do not match, a notification to that effect is also made.

  As described above, according to the authentication system of this embodiment, the authenticity of the user is confirmed using the two-dimensional code C (QR code), and one of the divided code pieces Sa and Sb is missing. Since it is configured to be unbreakable, high security can be obtained. In particular, in the present embodiment, when the two-dimensional code C is divided, all the divided code pieces Sa and Sb are configured to include the specific pattern. Therefore, the size and position of the image data of the divided code pieces at the time of synthesis. Can be easily adjusted automatically. Further, particularly in the present embodiment, it is checked whether or not the joint portion matches when the divided code pieces Sa and Sb are combined, it is determined whether or not the code can be decoded after the combination, and whether the authentication information matches the authentic authentication information after the decoding. In other words, since the verification is performed in three steps, it is extremely effective in preventing fraud.

<2> Second to Eighth Embodiments and Other Embodiments FIGS. 8 to 14 sequentially show second to eighth embodiments of the present invention. These second to eighth embodiments should be modifications of the first embodiment. Therefore, the same parts as those of the first embodiment are denoted by the same reference numerals and new. Illustrations and explanations are omitted, and only differences from the first embodiment will be described below.

  FIG. 8 shows a second embodiment of the present invention. In the second embodiment, when the two-dimensional code C is divided into two parts, for example, the joining part of the divided code pieces Sa and Sb is divided so as to partially overlap at, for example, a lap part L of several dots. Has been. In this case, when the divided code pieces Sa and Sb are combined, if the data of the lap portion L existing at the joint does not match, it is determined that the collation is impossible. According to this configuration, before the two-dimensional code C is decoded, it is possible to easily and promptly determine whether or not collation is possible.

  FIG. 9 shows a third embodiment of the present invention. In the third embodiment, when the two-dimensional code C is divided into two, for example, the data in the data area is divided based on the data amount. Specifically, the odd-numbered column among the columns extending in the vertical direction of the data cell. The divided code piece Sc is formed from the set of the divided code pieces, and the divided code piece Sd is formed from the even-numbered set. According to this, since the two-dimensional code pattern is not physically divided, it is difficult to understand from the outside that it is the divided code pieces Sc and Sd, and higher security can be obtained. Also in this case, if the synthesized two-dimensional code cannot be decoded and decoded, it is determined that the collation is impossible, and the determination can be made reliably.

  FIG. 10 shows a fourth embodiment of the present invention. In the fourth embodiment, several divided reference patterns R1 to R4, which are sizes and positioning references at the time of synthesis, are added to the divided code pieces Sa and Sb. In other words, in the example of FIG. 10A, a vertically long synthetic reference pattern R1 that forms horizontal stripes at regular intervals is added along the entire left side of the divided code pieces Sa and Sb. In the example of FIG. 10B, in addition to the synthesis reference pattern R1, a horizontally long synthesis reference pattern R2 that forms horizontal stripes is added along the entire upper side of the divided code pieces Sa and Sb. I am doing so.

  In the example of FIG. 10C, a small composition reference pattern R3 forming a horizontal stripe is added at the upper end of the left side of the divided code pieces Sa and Sb. In the example of FIG. 10D, in addition to the synthesis reference pattern R3, a small synthesis reference pattern R4 forming a horizontal stripe is added at the lower end of the right side of the divided code pieces Sa and Sb. I am doing so. According to these fourth embodiments, the composition reference patterns R1 to R4 are overlapped at the time of composition of the image data of the divided code pieces Sa and Sb, so that the size of each divided code piece Sa and Sb and It becomes possible to easily adjust the position automatically.

  FIG. 11 shows a fifth embodiment of the present invention. In the fifth embodiment, when the divided code pieces Sa and Sb are combined, the combined image data is converted into light and dark pattern data for each data cell in the data area. ing. Thereby, the synthesis process and the subsequent decoding process can be performed more easily.

  FIG. 12 shows a sixth embodiment of the present invention. In the sixth embodiment, a two-dimensional code reading device 21 as a reading means includes a reading mechanism for optically reading a two-dimensional code C, a display section 22 as a display means, and a key operation section as an operation means (not shown). ), A processing circuit capable of even decoding processing, and a so-called handy terminal including a communication device for performing data communication with the outside (authentication device main body).

  For example, when the image data of one divided code piece Sa is read, the two-dimensional code reader 21 stores the image data in one end storage device or the work area, and then reads the image data of the other divided code piece Sb. Are displayed on the screen of the display unit 22 at the same time. The operator can manually adjust the size and position of the divided code pieces Sa and Sb by operating the key operation unit, and the division code pieces Sa and Sb are instructed to be enlarged, reduced, and moved. The composition can be performed on the screen based on the above.

  FIG. 13 shows a seventh embodiment of the present invention, and FIG. 14 shows an eighth embodiment of the present invention. In the seventh embodiment shown in FIG. 13, the two-dimensional code C is divided into three divided code pieces Se, Sf, Sg. In the eighth embodiment shown in FIG. 14, the two-dimensional code C is divided into four divided code pieces Sh, Si, Sj, and Sk. In the case of the four divisions, it is desirable to set the error correction level slightly lower. In this way, the two-dimensional code C can be divided into three or more divided code pieces as long as one of the divided code pieces is lost even if it is lost.

  In the above embodiment, the case where the divided code piece is used as a room key is described as a specific example. However, the authentication system of the present invention can be used for various purposes. For example, in addition to the authentication information, important information (for example, land registration information) is two-dimensionally encoded and divided into code fragments Sa and Sb, one of which is managed by itself and the other is stored in a bank safe deposit box. You can use it. According to this, it is impossible to obtain important information without both divided codes.

  As another application, for example, a half-division code fragment of a discount ticket is stored in the store (stored in a database), and the remaining half-division code fragment of the purchased user side is read. It can be applied to a system that determines whether or not a purchaser of Alternatively, in a personal certificate (license, insurance card, etc.), the side that issues the certificate stores half of the divided code pieces and prints the other half of the divided code pieces on the certificate. It can be applied to a system that confirms the validity of a certificate.

  In the above embodiment, the physically printed divided code piece is configured to be optically read. However, when the image data of the divided code piece is converted into electronic data, the reading means includes electronic data. May be acquired via communication or a network. Alternatively, for example, a divided code piece may be displayed on a screen of a mobile terminal such as a mobile phone and optically read.

  In each of the above embodiments, the division code piece includes the specific pattern P (or the reference patterns for synthesis R1 to R4) so that the size and alignment are used as a reference. May be configured to automatically adjust the size and position based on (unevenness), or the side where the divided code piece is not divided (the left side of the divided code piece Sa in the above example) Further, the size and position may be automatically adjusted based on the right side of the divided code piece Sb.

  In addition, the present invention is not limited to the embodiment described above and shown in the drawings. For example, when verifying authentication information, access to an external server (database) by communication or a network and the necessary authentication information is required. In addition to “QR code”, various types of two-dimensional codes can be adopted, and the hardware configuration of the authentication information generation device and the authentication device can also be used. Various modifications are possible, and the present invention can be implemented with appropriate modifications within the scope not departing from the gist.

The 1st Example of this invention is a figure which shows schematically a series of flows of the process in an authentication system. Block diagram schematically showing the configuration of the authentication system Diagram showing how the two-dimensional code is divided Flow chart showing processing procedure from reading to decoding of divided code fragment Flow chart showing detailed procedure of reading process of two-dimensional code Flow chart showing the detailed procedure of 2D code composition processing Diagram schematically showing the flow of 2D code composition processing The figure which shows the 2nd Example of this invention and shows a mode that a two-dimensional code is divided | segmented FIG. 8 equivalent view showing a third embodiment of the present invention. The 4th Example of this invention is a figure which shows a mode that the reference | standard pattern for a synthesis | combination was added to the division | segmentation code about four types of (a)-(d). The figure which shows the 5th Example of this invention and shows a mode that the image data of the division | segmentation code | cord | chord was converted into the light / dark pattern data. The figure which shows the 6th Example of this invention, and shows the mode at the time of the reading of a divided code and a synthesis | combination. FIG. 3 equivalent view showing the seventh embodiment of the present invention FIG. 3 equivalent view showing an eighth embodiment of the present invention.

Explanation of symbols

In the drawings, 1 is an authentication information generation device, 2 is an authentication device, 3 is a control device (generation means, dividing means), 4 is an electronic data distribution device (distribution means), 5 is a card issuing device (distribution means), and 7 is Storage device, 8 is a communication device, 9 is a control device (synthesizing means, evaluation means), 10 and 21 are two-dimensional code reading devices (reading means), 12 is a storage device, 13 is a communication device, and 22 is a display unit (display) Means), C is a two-dimensional code, Sa, Sb, Sc, Sd, Se to Sk are divided code pieces, P is a specific pattern, and R1 to R4 are reference patterns for synthesis.

Claims (15)

An authentication system for confirming the validity of a user or an object,
An authentication information generation device and an authentication device are configured,
The authentication information generating apparatus includes a generating unit that generates a two-dimensional code pattern of authentication information, a dividing unit that divides the generated two-dimensional code pattern into a plurality of divided code pieces, and a divided divided code piece as a user. Or a distribution means for distributing to an object,
The authentication device includes: a reading unit that reads the divided code piece; a combining unit that combines the read image data into one two-dimensional code; and an evaluation that evaluates the validity by decoding the combined two-dimensional code Means and
The dividing means included in the authentication information generating device is configured to divide the two-dimensional code pattern so that it cannot be decoded even if one of the divided code pieces divided from the two-dimensional code pattern is missing. and along with that,
The two-dimensional code pattern is configured to have a specific pattern for position detection,
The dividing unit is configured to generate a divided code piece so that the specific pattern is included in each divided code piece,
2. The authentication system according to claim 1, wherein the synthesizing unit is configured to perform synthesis while adjusting the size and position of each divided code piece so as to match the specific pattern . The dividing means is configured to divide the two-dimensional code pattern based on a data amount,
The synthesizing means performs synthesis by adding the data of the divided code pieces,
2. The authentication system according to claim 1 , wherein the evaluation unit is configured to determine that the verification is impossible when the synthesized two-dimensional code cannot be decoded and decoded . An authentication system for confirming the validity of a user or an object,
An authentication information generation device and an authentication device are configured,
The authentication information generating apparatus includes a generating unit that generates a two-dimensional code pattern of authentication information, a dividing unit that divides the generated two-dimensional code pattern into a plurality of divided code pieces, and a divided divided code piece as a user. Or a distribution means for distributing to an object,
The authentication device includes: a reading unit that reads the divided code piece; a combining unit that combines the read image data into one two-dimensional code; and an evaluation that evaluates the validity by decoding the combined two-dimensional code Means and
The dividing means included in the authentication information generating device is configured to divide the two-dimensional code pattern so that it cannot be decoded even if one of the divided code pieces divided from the two-dimensional code pattern is missing. And
The dividing means performs division so that the joint portion between the divided code pieces forms an uneven shape,
The evaluation system is configured to determine that the collation is impossible when the unevenness of the joint portion is not engaged when the divided code pieces are combined by the combining unit. . An authentication system for confirming the validity of a user or an object,
An authentication information generation device and an authentication device are configured,
The authentication information generating apparatus includes a generating unit that generates a two-dimensional code pattern of authentication information, a dividing unit that divides the generated two-dimensional code pattern into a plurality of divided code pieces, and a divided divided code piece as a user. Or a distribution means for distributing to an object,
The authentication device includes: a reading unit that reads the divided code piece; a combining unit that combines the read image data into one two-dimensional code; and an evaluation that evaluates the validity by decoding the combined two-dimensional code Means and
The dividing means included in the authentication information generating device is configured to divide the two-dimensional code pattern so that it cannot be decoded even if one of the divided code pieces divided from the two-dimensional code pattern is missing. And
The dividing means performs the division so that the joint portions of the divided code pieces partially overlap,
The evaluation unit is configured to determine that the collation is impossible when the data of the overlapping portion existing in the joint portion does not match when the divided code pieces are combined by the combining unit. A featured authentication system. 5. The composition unit according to claim 3, wherein the composition unit is configured to perform composition while adjusting a size and a position of each divided code piece so as to match a joint portion between the divided code pieces. authentication system. An authentication system for confirming the validity of a user or an object,
An authentication information generation device and an authentication device are configured,
The authentication information generating apparatus includes a generating unit that generates a two-dimensional code pattern of authentication information, a dividing unit that divides the generated two-dimensional code pattern into a plurality of divided code pieces, and a divided divided code piece as a user. Or a distribution means for distributing to an object,
The authentication apparatus includes: a reading unit that reads the divided code piece; a combining unit that combines the read image data into one two-dimensional code; and an evaluation that evaluates the validity by decoding the combined two-dimensional code Means and
The dividing means included in the authentication information generating device is configured to divide the two-dimensional code pattern so that it cannot be decoded even if one of the divided code pieces divided from the two-dimensional code pattern is missing. And
The synthesizing unit adjusts the size of each divided code piece based on an undivided side of each divided code piece and combines the position of each divided code piece while adjusting the position of each divided code piece based on the joint portion of each divided code piece. An authentication system configured to perform authentication. 7. The authentication system according to claim 1, wherein the distribution unit distributes the divided code pieces by printing on a medium such as paper . The authentication system according to claim 1, wherein the distribution unit distributes the divided code pieces as electronic data . The reading means comprises: means for optically reading a divided code piece printed on a medium; and means for acquiring a divided code piece converted into electronic data from the outside. The authentication system according to any one of 1 to 8 . 10. The division unit according to claim 1, wherein the division unit is configured to add a reference pattern for synthesis that serves as a reference for size and positioning at the time of synthesis to each divided code piece. Authentication system. The authentication system according to claim 10, wherein the synthesizing unit is configured to perform synthesis while adjusting a size and a position of each divided code piece so as to match the reference pattern for synthesis . The reading means includes display means for simultaneously displaying a plurality of read divided code pieces on a screen,
The synthesizing unit includes an operation unit for manually adjusting the size and position of each divided code piece, and is based on an instruction to enlarge, reduce, and move the divided code piece on the screen by the operation unit. 12. The authentication system according to claim 1, wherein the authentication system is configured to perform synthesis . 13. The authentication system according to claim 1, wherein the synthesizing unit is configured to perform synthesis in a state where each divided code piece is converted into light / dark pattern data . The authentication device includes a storage device storing valid authentication information, and the evaluation unit is configured to retrieve the decrypted authentication information from the storage device, and determine that the authentication is successful if they match. The authentication system according to any one of claims 1 to 13, wherein The authentication device includes a communication unit that performs communication with an external server that stores valid authentication information in advance, and the evaluation unit retrieves the decrypted authentication information from the external server, and when the authentication information matches, The authentication system according to claim 1, wherein the authentication system is configured to determine that authentication is successful .

Images