JP7278667B2 - 2D barcode with anti-fraud function - Google Patents

Description

The present invention targets marketing functions such as payment or point systems using two-dimensional barcodes on media. The form of use includes a sticker storing store information and a card storing card information.

In recent years, payments using two-dimensional barcodes such as one-dimensional barcodes and QR codes (registered trademark) have rapidly spread in Japan. Therefore, by copying or duplicating image information, a third party pretends to be a legitimate ID holder and makes the legitimate ID holder pay for the third party's purchase of goods or services. Various security incidents can be expected, such as affixing an unauthorized two-dimensional barcode on top of the two-dimensional barcode that a retailer accepts for payment, thereby fraudulently exploiting the sales proceeds of legitimate retailers.

In these payments, prepaid payments that are not linked to individuals, or even prepaid/debit/credit payments that can be linked to individuals are predominantly signature/PIN-less, which are oriented toward express checkouts of a certain amount or less. One-factor authentication that provides the SYH [something you have] factor with only one is a vulnerability as a system, and it becomes a factor of the security incident mentioned above.

As a fundamental solution, applying EMV-standard IC transactions, which aims to ensure the safety of higher-value transactions, is also considered to be effective in the medium to long term.

In addition, according to this standard, a device with excellent physical security is used as the medium, the payment server is placed in a safe It adopts an end-to-end style authentication method that generates proofs and verifies the authenticity of payments by means of transaction proofs on the payment server.

However, if this method is adopted, it will be necessary to change the merchant infrastructure and back-office payment system, and the investment amount will be enormous, which is expected to be a hindrance to its introduction.

In addition, since many convenience stores, which are open 24 hours a day for payments using 2D barcodes, are affiliated stores, we cannot ignore the impact of service suspensions on users when the system is changed.

Therefore, in the present invention, security measures can be provided in the form of an ASP [application service provider] or SaaS [software as a service] as a front-end system for a payment system separate from the payment system, or as a cloud system specializing in authentication. The purpose is to provide a solution that is easy to accept in terms of risk management by providing an architect that is possible and capable of running changes, and by minimizing the cost of media such as stickers and cards.

In addition to payment, payment solutions using the present invention with security measures will be widely used by providing marketing functions that promote the use of payments, such as coupons and point programs, and functions that link or link payments. The purpose is to socially enhance the security of payments in

Two-dimensional barcode protection technology is being considered to apply encryption technology to protect the confidentiality of data, and electronic signatures or message authentication codes to protect the integrity of the data. In terms of cloning/masquerading protection, security comes down to cloning protection of image information.

As a countermeasure against duplication of image information, in the background of application to securities, etc., measures using the resolution limit on the duplication technology side, such as bleeding, parallel lines, or rainbow printing, or infrared rays by using special image forming materials. / Ultraviolet reflection / absorption rate methods have been developed, but unless the S/N [signal / noise] of the image formation and detection system is set appropriately, soundness [soundness] is required to detect duplication. ] is destined to degrade the completeness that determines authenticity.

There is also a risk that the adopted technology will become obsolete due to future development of reproduction technology.

In addition, although it is not RFID, the smart card, which is also used in the EMV standard mentioned above, has the world's highest level of duplication resistance that cannot be seen in other products due to the physical security of the device and the access control mechanism implemented. Although the strength is maintained, there is a problem that the investment amount is enormous as described above.

(1) In one aspect of the present invention, at least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and the data processing device An authentication system comprising an identification medium authentication server connected by wire or wirelessly,
The identification medium includes at least a two-dimensional barcode such as a QR code (registered trademark) or a one-dimensional barcode and an RFID,
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. An authentication system characterized by verifying the authenticity of the identification medium by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means,
is proposed.

(2) In one aspect of the present invention, the identification medium further stores filter information generated when the one-dimensional barcode or two-dimensional barcode and/or RFID is issued,
The data processing device further comprises filter information verification means using a filter information conversion algorithm used at the time of issuance or its inverse function,
The identification medium authentication server further
・Means for generating filter information from identification medium specific information by means of a filter information conversion algorithm such as a cryptographic function that makes it impossible for a third party to guess the relationship between input and output; comprising means for storing in a dimensional or two-dimensional barcode and/or RFID;
The authentication system according to (1) above, wherein when the identification medium is used, the data processing device verifies the read identification medium specific information and filter information offline, thereby confirming the authenticity of the identification medium.
is proposed.

(3) In one aspect of the present invention, the data processing device further comprises means for updating its own software with software received from the outside,
The RFID of the identification medium further stores a URL necessary for software update of the data processing device,
The authentication system according to (1) or (2) above, wherein the data processing device reads a URL together with identification medium specific information, and updates software using the URL prior to or following authentication,
is proposed.

(4) In one aspect of the present invention, the data processing device further includes means for connecting to external resources and/or external equipment, and reflects data received from the connected external resources and/or external equipment in data processing. have the means to
The RFID of the identification medium stores the URL of the external resource and/or the information necessary to connect to the external device,
The data processing device reads the URL and/or the information necessary for connection together with the identification medium specific information, and uses the information prior to or following authentication to access the external site and/or external device specified by the URL. The authentication system according to (1) to (3), characterized by connecting
is proposed.

By using NFC technology, RFID devices equivalent to Type 1 to Type 5 Tags standardized by the NFC Forum are selected, and the optional WMRM area is coded in accordance with the NFC Data Exchange Format (NDEF) standard. By doing so, the following functions can be realized simply by holding the smartphone over the RFID.
・Guidance to specific sites for the purpose of attracting/sending customers ・Downloading payment applications and authentication applications ・Linking with marketing functions or applications such as coupons and point programs when using payment applications

In addition, by linking the authentication application with GPS, it is possible to perform a geographical check in the event of unauthorized replacement of stickers.

1 is a diagram showing the configuration of a two-dimensional barcode seal of the present invention; FIG. FIG. 4 is a diagram showing a memory image of the RFID device of the present invention; 1 is a diagram showing a conventional settlement flow of the present invention; FIG. It is a figure which shows the settlement flow which applied the authentication of this invention.

Using smartphones, which are increasingly used as data processing devices for two-dimensional bar code payments, we will describe the system used in overseas systems such as WeChat Pay, which is called "Membership on a member store seal with a user's mobile phone." An example of the configuration of the invention will be described by taking as an example a reading payment method in which store information [barcode] is read and transaction information is transferred from a mobile phone to a settlement company.

FIG. 1 shows the configuration of a two-dimensional barcode sticker 100, on the surface of which the same two-dimensional barcode 101 as that of the existing system is stored in a format recognizable by the camera of a smartphone, and at least the member store ID, etc. are stored in the code. identification target ID is included.

Therefore, the user interface for payment itself is the same as before, and there is no problem with user experience.

An RFID device 103 and an antenna 104 for magnetic coupling are arranged on the back surface 102, and the RFID device 103 and the antenna 104 are joined together to form an RFID 105. The purpose of using the RFID 105 is that the cost of duplication is lower than that of image information. is much higher, and it is possible to curb crime.

As for the configuration of the RFID 105, the antenna 104 is formed directly on the back surface 102 of the seal 100 with conductive ink or foil stamping, and the RFID device 103 is mounted with conductive paste or the like, or formed as a separate component called an inlet or inlay. The printed RFID 105 may be adhered or fused to the rear surface 102 of the seal 100, but the mounting method of the RFID 105 itself is well known and will not be described in detail here.

However, from a security point of view, the adhesive layer 110 that provides the adhesive strength as a sticker is made stronger than the adhesive strength between the RFID device 108 and the base material [seal material or inlet material], and when an attacker tries to replace the adhesive, etc. In this case, it is also effective to configure the RFID device 108 or the antenna 109 to be peeled off or destroyed.

Of the radio interfaces supported by smartphones, RFID105 does not require a fixed power supply and can be mounted thinly, but on the other hand, the communication distance is short, so it is compatible with ISO/IEC 18092 [NFCIP-18092], which is applicable to user's indication of payment intention. 1], or by adopting NFC [near field communication] technology that complies with ISO/IEC 21481 [NFCIP-2], market penetration can be accelerated.

Fig. 2 shows a memory image of an RFID device when using filter information 201. Here, it consists of three areas: a ROM area 203, a WORM area 205, and an optional rewritable WMRM [write many read many] area 205. The ROM area 203 is the individual medium specific information 200 defined by the device vendor, the WORM area 204 is the filter information 201, and the optional WMRM area 205 is the effect of the invention, which will be described later. Arbitrary information that can be used independently by member stores and/or URLs required for smartphone software update are stored.

As the individual medium specific information 200, FeliCa IDm [8 bytes] and MIFARE UID [7 bytes], which are defined by the manufacturer when the RFID device 103 is manufactured, are well known.

The filter information 201 is the result of converting the individual medium specific information 200 according to an algorithm that cannot be known by a third party. In an environment with poor physical security such as a smartphone, a public key cryptographic algorithm such as RSA or ECC should be used. is desirable from a security point of view. In this case, the identification medium specific information 200 or the hash value for the identification medium specific information 200 is input, and the electronic signature derived using the private key of the identification medium authentication server administrator is used as the filter information. 201.

It should be noted that the public key of the administrator of the identification medium authentication server can be installed in the smart phone before it is used, and the method for doing so is well known in PKI and the like, so details will not be given here.

FIG. 3 is an example of data flow during a conventional read-and-pay scheme, and cash flow and settlement scheme switching are not described here for the sake of simplicity.

The payment application in the smartphone 302 generates transaction data from at least the user identification information, the member store 304 identification information corresponding to the identification target ID 303, and the transaction amount 301 entered by the user 300 (or store clerk), and sends it to the payment operator 311. The payment operator 311 performs a check corresponding to the payment scheme and transmits the result to the smart phone 302 as transaction approval or refusal.

FIG. 4 is an embodiment of an authentication system that verifies the authenticity of an identification medium without affecting the data flow of the payment itself.

When manufacturing the medium, the manufacturer such as the administrator of the identification medium authentication server 417 prints the two-dimensional barcode 411 including the identification target ID 413 on the two-dimensional barcode sticker 410, reads out the individual medium specific information 415 from the RFID 411, and identifies it. Object ID 413 and identification medium specific information 415 are associated and stored in identification medium authentication server 417 as issue log 418 .

In the authentication task, the identification medium specific information 415 and the filter information 414 are read from the RFID, the filter information 414 is verified 407, and the result of the verification 407 is notified to the settlement means 404, so that the tampered two-dimensional barcode sticker 410 is offline. can be detected by

When the above-described electronic signature is used as the filter information 414, the identification medium specific information 415 or the hash value for the identification medium specific information 415 is input in the same way as when generating, and then the identification medium authentication server 417 manages The electronic signature can be verified using the public key of the client.

These tasks may be incorporated into the payment application in the smart phone 402, or the tasks may be incorporated as an original authentication application and automatically started when the RFID 412 is detected, and after the verification 407 of the filter information 414 is successfully completed, the payment application is started. A structure is also possible.

In addition, in order to ensure fault tolerance as a system, when an abnormality is detected in the application and/or task in the payment application in the data processing device, NIST SP 800-193 Platform Firmware Resiliency Guideline requires Although it is necessary to have a recovery function, by restricting the trigger to the member store 409 whose authenticity has been confirmed, it is possible to prevent the user 400 from being guided to the wrong site when updating the software.

Furthermore, from the viewpoint of user experience, it is important to greatly simplify user operations, and there are security issues such as eavesdropping when in-band connection information is exchanged via WiFi or the like.

However, by using the present invention, it is possible to provide the data processing device with the information necessary for authentication and the information necessary to establish an interface with an external device such as a POS cash register, so that the external device can initiate a session at the same time as payment. It is also possible to solve the conventional security problem by establishing a session only between the data processors that have terminated and newly kicked the authentication.

100 2D barcode sticker [Surface]
101 2D barcode
102 2D barcode sticker [back side]
103 RFID devices
104 Antenna
105 RFID
106 2D barcode printing layer
107 Seal Material
108 RFID
109 Antenna Pattern
110 adhesive layer
200 Identification Medium Specific Information
201 Filter information
202 proprietary
203 ROM area
204 WORM area
205 WMRM area
300 users
301 Transaction Amount
302 Smartphone
303 Identification target ID
304 Merchants
305 2D barcode
306 2D barcode sticker
307 Input Means
308 two-dimensional barcode reading means
309 means of payment
310 means of communication
311 payment service providers
400 users
401 Transaction Amount
402 smart phone
403 Input Means
404 means of payment
405 Two-dimensional barcode reading means
406 RFID reading means
407 Filter Information Validator
408 means of communication
409 Merchants
410 2D barcode sticker
411 2D barcode
412 RFID
413 Identification target ID
414 Filter Information
415 Identification Medium Specific Information
416 Payment Service Providers
417 Identification Media Authentication Server
418 Publish Log
419 Authentication Means
420 payment service providers

Claims (6)

At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An authentication system comprising a server,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means, and
The identification medium further stores filter information generated when the one-dimensional barcode or two-dimensional barcode and/or RFID is issued,
The data processing device further comprises filter information verification means using a filter information conversion algorithm used at the time of issuance or its inverse function,
The identification medium authentication server further
- Means for generating filter information from identification medium-specific information by means of a filter information conversion algorithm such as a cryptographic function that makes it impossible for a third party to guess the relationship between input and output; comprising means for storing in a dimensional or two-dimensional barcode and/or RFID;
When the identification medium is used, the data processing device verifies the read identification medium specific information and filter information offline, thereby confirming the authenticity of the identification medium.
Authentication system. At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An authentication system comprising a server,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium specific information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means, and
The data processing device further comprises means for updating its own software with software received from the outside,
The RFID of the identification medium further stores a URL necessary for software update of the data processing device,
The data processing device reads the URL together with the identification medium-specific information, and updates the software using the URL prior to or following authentication.
Authentication system. At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An authentication system comprising a server,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means,
The data processing apparatus further comprises means for connecting to external resources and/or external equipment, and means for reflecting data received from the connected external resources and/or external equipment in data processing,
The RFID of the identification medium stores the URL of the external resource and/or the information necessary to connect to the external device,
The data processing device reads the URL and/or the information necessary for connection together with the identification medium specific information, and uses the information prior to or following authentication to access the external site and/or external device specified by the URL. is designed to connect,
Authentication system. At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An identification medium authentication server that configures an authentication system comprising a server by combining the identification medium and the data processing device,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means, and
The identification medium further stores filter information generated when the one-dimensional barcode or two-dimensional barcode and/or RFID is issued,
The data processing device further comprises filter information verification means using a filter information conversion algorithm used at the time of issuance or its inverse function,
The identification medium authentication server further
- Means for generating filter information from identification medium-specific information by means of a filter information conversion algorithm such as a cryptographic function that makes it impossible for a third party to guess the relationship between input and output; comprising means for storing in a dimensional or two-dimensional barcode and/or RFID;
When the identification medium is used, the data processing device verifies the read identification medium specific information and filter information offline, thereby confirming the authenticity of the identification medium.
Identity Media Authentication Server. At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An identification medium authentication server that configures an authentication system comprising a server by combining the identification medium and the data processing device,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means, and
The data processing device further comprises means for updating its own software with software received from the outside,
The RFID of the identification medium further stores a URL necessary for software update of the data processing device,
The data processing device reads the URL together with the identification medium-specific information, and updates the software using the URL prior to or following authentication.
Identity Media Authentication Server. At least an identification medium storing information related to an identification target, a data processing device such as a mobile phone capable of accessing the information stored in the identification medium, and an identification medium authentication connected to the data processing device by wire or wirelessly. An identification medium authentication server that configures an authentication system comprising a server by combining the identification medium and the data processing device,
The identification medium comprises at least an RFID and a two-dimensional or one-dimensional barcode such as a QR code (registered trademark),
・At least an identification object ID logically associated with an identification object is stored in a one-dimensional barcode or two-dimensional barcode.
・RFID includes a non-writable ROM [read only memory] or non-rewritable WORM [write once read many] area, in which there is at least a unique identification for each identification medium that is unrelated to the identification target ID. media-specific information is stored,
The data processing device has at least
- reading means corresponding to each of the identification target ID and the identification medium unique information of the identification medium; and - communication means with the identification medium authentication server;
The identification medium authentication server has at least
- communication means with the data processing device;
- A log means for storing an identification target ID and identification medium specific information in association when an identification medium is issued as an issuance log; with authentication means to
The data processing device reads the identification object ID and identification medium specific information, transmits the information to the identification medium authentication server using the communication means, and the identification medium authentication server receives the information using the communication means. authenticity of the identification medium is verified by verifying the relationship between the identification target ID and the identification medium specific information using the authentication means,
The data processing apparatus further comprises means for connecting to external resources and/or external equipment, and means for reflecting data received from the connected external resources and/or external equipment in data processing,
The RFID of the identification medium stores the URL of the external resource and/or the information necessary to connect to the external device,
The data processing device reads the URL and/or the information necessary for connection together with the identification medium specific information, and uses the information prior to or following authentication to access the external site and/or external device specified by the URL. is designed to connect,
Identity Media Authentication Server.

Images