JP7316082B2 - Server device, information system, information processing method, and program - Google Patents

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a server device or the like that detects code replacement in an information system that performs processing for settlement using a code such as a QR code (registered trademark; the same shall apply hereinafter).

Conventionally, the merchant terminal inputs the billing amount and displays the two-dimensional code on the display, and the user's portable terminal photographs the two-dimensional code and displays the billing amount on the display. and the user identification ID to the operation company server, and after the operation company server performs a security check of the user mobile terminal based on the user identification information, based on the card information acquired based on the card designation information Between the financial institution There is a settlement system that performs settlement procedures (see Patent Document 1, for example).

International publication WO2017/029824

In recent years, an incident occurred in which a legitimate QR code was replaced with a fake QR code by a group of criminals, and money was transferred to the bank account of the group of criminals.

Even in the conventional payment system as described above, there is a possibility that the code read by the terminal device is replaced and the payment is made to an illegal payee other than the original payee.

In the following description, "replacement" usually refers to changing a code to be read into another code, but it may also mean, for example, changing part or all of the code (so-called falsification). The replacement may be performed in any manner as long as at least part of the code to be read is changed as a result.

The server device of the first aspect of the invention captures the output code output by the generated code storage unit in which the generated code information about the generated code is to be stored and the output device for outputting the generated code. An output code receiving unit for receiving output code information including an image obtained by capturing the output code or an output code extracted from the image, stored code information stored in a generated code storage unit, and an output code receiving unit. a judgment unit for judging whether the output code matches the generated code by using the output code information received by the judgment unit; It is a server device comprising

The generated code information should be stored in the generated code storage unit, and the generated code information stored in the generated code storage unit is normally not replaced with incorrect code information.

With such a configuration, replacement of the code can be detected.

In addition, in the server device of the second invention, in contrast to the first invention, the generated code receiving unit receives generated code information from the code generation server that generates the code, and the generated code information received by the generated code receiving unit in the generated code storage unit.

With such a configuration, by receiving generated code information from the code generation server and storing it in the server device, variable code replacement can also be detected.

In the second invention, the code is a variable code, and the output code receiving unit receives generated code information about the new code each time the code generation server generates the new code, The storage unit may update the stored code information stored in the generated code storage unit with the received generated code information in response to the generated code receiving unit receiving the generated code information about the new code. .

With such a configuration, the capacity of the generated code storage unit can be reduced.

Further, in the server device of the third invention, in contrast to the first or second invention, the output device displays the generated code on the display, and the imaging device captures the code displayed on the display. The terminal device is a server device that performs processing for settlement using the output code.

With such a configuration, when the code displayed on the display is used for payment, payment to an unauthorized payee due to replacement of the code can be prevented.

In addition, in the server device of the fourth invention, in contrast to the third invention, the output device is a store terminal that is a terminal of the store, the display is a display of the store terminal, and the terminal device is: A user terminal is a user terminal.

With such a configuration, it is possible to prevent payment to an unauthorized payee due to replacement of the code when the code displayed on the display of the store terminal is used to make a payment at the user terminal.

Further, in the server device of the fifth invention, in contrast to the fourth invention, the photographing device is a surveillance camera that monitors the output code displayed on the display.

With this configuration, when the code displayed on the display of the store is used to make a payment at the user terminal, the displayed code is monitored by the surveillance camera, thereby preventing unauthorized payment to the payment destination by replacing the code. payment can be prevented.

In addition, in the server device of the sixth invention, in contrast to the fifth invention, the monitor camera regularly or irregularly captures the output code displayed on the display and accumulates the captured image in the memory. , determine whether the captured image has changed from the image stored in the memory, and if it is determined that the captured image has changed from the image stored in the memory, change the captured image and an extracting unit for extracting the output code from the image included in the output code information in response to the output code receiving unit receiving the output code information from the surveillance camera, the determining unit comprising: The server device determines whether or not the output code matches the generated code by using the stored code information stored in the generated code storage unit and the output code extracted by the extraction unit.

With this configuration, the output code information having the image is received only when the image captured by the surveillance camera changes, and the output code information is not received when the image does not change, so that the output code information is received from the surveillance camera. While suppressing the data amount of the output code information, it is possible to prevent payment to an unauthorized payee due to replacement of the code.

Further, the server device of the seventh invention is a server device in which the photographing device is a camera possessed by the user terminal, in contrast to the third invention.

With such a configuration, when the user terminal uses the code displayed on the display of the store to make a payment, the displayed code is photographed by the camera of the user terminal. It is possible to prevent payments to unauthorized payees due to replacement of

Further, in the server device of the eighth invention, in contrast to the seventh invention, the user terminal extracts the output code displayed on the display from an image captured by a camera, and converts the extracted output code to before performing processing for payment using the user terminal, the output code information having the extracted output code is transmitted, and the determination unit receives the generated code information stored in the generated code storage unit and the output code reception unit receives the user terminal It is a server device that judges whether or not the output code matches the generated code by using the output code included in the output code information received from.

With this configuration, before the user terminal makes a payment using the output code extracted from the image captured by the camera, the output code information having the extracted output code is received from the user terminal, and the output code is the generated code. Since it is determined whether or not the codes match, it is possible to suppress the data amount of the output code information received from the user terminal and prevent payment to an unauthorized payee due to code replacement.

Further, in the server device of the ninth invention, for any one of the first to eighth inventions, the generated code storage unit should store three or more pieces of generated code information corresponding to one generated code. including three or more storage means, and using the three or more stored code information stored in the three or more storage means, the determination unit stores, in the three or more stored codes corresponding to the three or more stored code information, a first judging means for judging whether or not one or more pairs of two or more matching stored codes exist; and when the first judging means judges that one or more pairs exist among the three or more stored codes. second judgment means for judging whether or not there is only one stored code that constitutes one group and that is a stored code that is larger in number than the stored codes that constitute any other group. and, when the second determining means determines that there is only one code stored in the largest number of stored codes, the determining means for determining the stored code in the largest number of stored codes as the generated code, the generated code determined by the determining means, and the output code receiving section, a third judging means for judging whether the output code matches the generated code using the received output code information.

With this configuration, by storing three or more generated code information corresponding to one generated code in three or more storage means, for example, three or more stored code information stored in three or more storage means Even if one of them is replaced with incorrect information, the stored code with the greatest number of stored codes of 3 or more is regarded as the generated code by majority vote, and it is determined whether the output code matches the generated code. can be done.

Therefore, even if there is a possibility that the generated code information stored in the generated code storage unit is replaced with illegal code information, the code replacement can be detected.

Further, in the server device of the tenth invention, in contrast to the ninth invention, when the first determination means determines that the set does not exist, or when the second determination means determines that the maximum number of stored code is present, or when the third determining means determines that the output code does not match the generated code, it transmits determination result information indicating a negative determination result.

With such a configuration, a mismatch between generated code and output code can be notified.

In addition, in any one of the first to tenth inventions, the judgment result information indicating a negative judgment result has a warning about the possibility that the code has been replaced, and the terminal device receives the judgment result information However, when judgment result information indicating a negative judgment result is received, a warning included in the judgment result information may be output.

With such a configuration, the operator of the terminal device can be warned of the possibility that the code has been replaced. In particular, for example, when the terminal device uses a code to perform processing for payment, by warning the user or store clerk operating the terminal device, payment to an unauthorized payee can be effectively prevented.

In addition, in any one of the third to tenth inventions, the terminal device may suppress execution of processing for settlement when receiving determination result information indicating a negative determination result from the server device. .

With such a configuration, it is possible to more effectively prevent payment to an unauthorized payee due to code replacement.

Further, the information system of the eleventh aspect of the present invention comprises an output device that outputs generated or generated generated code, a photographing device that captures the output code output by the output device, a server device, and a terminal device. The server device includes a generated code storage unit in which generated code information about the generated or generated generated code is to be stored, and an image obtained by capturing the output code from the imaging device or the output code extracted from the image. and the stored code information stored in the generated code storage unit and the output code information received by the output code receiving unit, the output code matches the generated code and a determination result transmission unit for transmitting determination result information on the result of determination by the determination unit to a terminal device.

With such a configuration, replacement of the code can be detected.

According to the present invention, code replacement can be detected. As a result, for example, payment to an unauthorized payee due to code replacement can be prevented.

Block diagram of an information system according to an embodiment Flowchart explaining the operation of the same server device Flowchart explaining the judgment process Flowchart explaining the operation of the terminal device Diagram showing the contents of the generated code storage unit A diagram showing an example of the screen of the terminal device A diagram showing another example of the screen of the terminal device Flowchart for explaining determination processing in modification 1 External view of computer system A diagram showing an example of the internal configuration of a computer system

Embodiments of a server device and the like will be described below with reference to the drawings. It should be noted that, since components denoted by the same reference numerals in the embodiments perform similar operations, repetitive description may be omitted.

FIG. 1 is a block diagram of an information system according to this embodiment. The information system includes a server device 1 , a code generation server 2 , one or more output devices 3 , one or more imaging devices 4 , and one or more terminal devices 5 .

The server device 1 includes, for example, a code generation server 2, one or more output devices 3, one or more photographing devices 4, and one or more terminal devices via a network such as a LAN or the Internet, or a wireless or wired communication line. 5 are communicatively connected. The server device 1 and the code generation server 2 are preferably connected via a dedicated communication line, for example.

The server device 1 is a server that detects code replacement. Specifically, the server device 1 uses the code generated by the code generation server 2 and the code output from the output device 3 to determine whether or not the code has been replaced, and information on the determination result (hereinafter referred to as , may be referred to as judgment result information) to the terminal device 5 .

The server device 1 is, for example, a server of an organization such as a company or an organization that manages an information system, but it may be a cloud server, an ASP server, or the like, regardless of its type or location.

The code generation server 2 is a server that generates code. A code may be said to be, for example, a code that expresses information. It can be said that the information is the original data for generating the code. The information is, for example, URL, payment information, etc., but the type is not limited. The payment information is information related to payment. The settlement information includes, for example, amount information regarding the amount of money, payee information regarding the payee (for example, account number, name of the holder, etc.), but any information regarding settlement may be used.

A code is, for example, a pattern in which information is embedded. This type of code is, for example, a QR code, but may be a two-dimensional code other than the QR code, or may be a one-dimensional code such as a bar code. A two-dimensional code other than a QR code is, for example, an SP code, a CP code, or the like, but the type is not limited. However, the code may be, for example, an array of one or more characters, symbols, or the like expressing information or associated with information, and any type of code may be used.

The code is preferably a variable code, for example. A variable code is a code that can change. A variable code is, for example, a code that changes periodically or irregularly, but may be a one-time code that can be used only for one payment. The variable code is usually displayed on a display device such as a display, but may be printed on the surface of paper, stickers, products, etc. (hereinafter referred to as "paper surface, etc.") each time it changes.

However, the code may be a fixed code. Fixed code is code that does not change. The fixed code, for example, is printed on paper or the like, but may be displayed on a display.

The code generation server 2 is, for example, a server of the above organization, but may be a server of another organization, a cloud server, or the like, regardless of its type or location. However, the code generation server 2 is not essential. For example, when using pre-generated code, the information system does not need to include the code generation server 2 .

The output device 3 is a device that outputs a code. The output device 3 normally outputs code generated by the code generation server 2 (hereinafter sometimes referred to as generated code), but may output code generated in advance. Note that the generated code is normal code, and the normal code can be said to be true code. Also, the output from the output device 3 is normally displayed on a display device, but may be printed by a printer.

A display device in the present embodiment is a display included in a store terminal. A store terminal is a terminal of a store. A store may be said to be a place where goods or services can be purchased. The stores are, for example, department stores, shopping malls, various shops, restaurants, accommodation facilities, etc., but the type is not limited.

The store terminal is, for example, a cash register terminal installed at a cash register in a store, but may be a store clerk's mobile terminal or the like, and the type is not limited. A portable terminal is a portable terminal. Note that the mobile terminal is, for example, a tablet terminal, a smart phone, a notebook PC, a mobile phone, or the like, but the type of mobile terminal does not matter.

The store terminal, for example, periodically or irregularly transmits the store identifier. A store identifier is information that identifies a store. The store identifier is, for example, a fixed telephone number, e-mail address, ID, etc., but any information that can identify the store may be used. However, the store terminal may, for example, transmit the store identifier in response to a request from the user terminal, regardless of the timing or trigger of transmission of the store identifier. Alternatively, the store identifier may be transmitted from, for example, the photographing device 4, which is a surveillance camera, and the source of the transmission is irrelevant as long as it is a device in the store.

The photographing device 4 is a device for photographing the code output by the output device 3 (hereinafter referred to as output code). Note that the output code is usually the same as the generated code, but there is a possibility that it is an illegal code replaced by a third party. Bad code can be said to be bogus code.

The photographing device 4 normally photographs the output code displayed on the display, but may photograph the code printed on paper or the like. In the latter case, the code-printed paper or the like is pasted on an appropriate place in the store (for example, cash register, display shelf, merchandise, etc.). The photographing device 4 photographs the output code, and normally transmits the output code information to the server device 1 together with the device identifier. The output code information is information about the output code. The output code information is, for example, a photographed image of the output code, but may be an output code extracted from the image.

A device identifier is information for identifying the imaging device 4 . The device identifier is, for example, an address such as a MAC address or an IP address, but may be a shop identifier, an ID, or any other information that can identify the photographing device 4 . In this embodiment, the device identifier is assumed to be a store identifier.

The photographing device 4 in this embodiment is normally a surveillance camera. The monitoring camera is a camera that monitors the output code displayed on the display of the store terminal. The monitoring camera captures the output code displayed on the display and transmits output code information including the captured image to the server device 1 .

The monitoring camera may, for example, periodically or irregularly photograph the displayed output code, and transmit two or more pieces of output code information corresponding to the two or more photographed images to the server device 1 .

Alternatively, the surveillance camera periodically or irregularly captures the displayed output code, detects a change in the captured two or more images, and detects one or more images corresponding to the one or more images before the change. It is preferable to transmit only the one or more output code information corresponding to the one or more images after the change without transmitting the output code information of the . As a result, the data amount of the output code information transmitted from the monitoring camera can be suppressed.

Specifically, for example, the surveillance camera periodically or irregularly captures the output code displayed on the display of the store terminal, accumulates the captured image in the memory, and stores the captured image in the memory. It may be determined whether or not there is a change in one or more stored images, and if it is determined that there is a change, the output code information having the captured image may be transmitted. As a result, the data amount of the output code information transmitted from the surveillance camera can be further reduced.

However, the photographing device 4 may be, for example, a mobile terminal of a store clerk. A photographing device 4, which is a store clerk's mobile terminal, shoots an output code displayed on the display of an output device 3, which is also a store clerk's mobile terminal. That is, the output device 3 and the photographing device 4 can be realized by one mobile terminal owned by a store clerk. For example, this mobile terminal captures a screen displayed on the display of the mobile terminal itself with a virtual camera, and obtains a captured image (a snapshot) of the screen including the output code. good too.

The terminal device 5 is, for example, a device that uses the output code output by the output device 3 to perform predetermined processing. The predetermined processing is, for example, processing for payment. The processing for payment is, for example, transmission of payment information to a payment server (not shown), but may be payment. Alternatively, the processing for payment may be, for example, user registration before payment, reception of notification that payment has been completed, or the like. In this way, the processing for payment may be processing that completes payment as a result, but may include processing necessary for payment, processing incidental to payment, and the like, regardless of the type or content thereof.

The terminal device 5 receives determination result information from the server device 1, and when the received determination result information indicates a negative determination result, performs processing for suppressing execution of processing for settlement (hereinafter referred to as suppression processing). conduct. Note that the suppression process will be described later.

Alternatively, when the determination result information received from the server device 1 indicates a negative determination result, the terminal device 5 may use the output code to perform processing for settlement.

However, the predetermined process may be, for example, a process of displaying a web page, or any process using code. Note that the process of displaying a web page using a code such as a QR code is well known and will not be described.

The terminal device 5 in this embodiment is, for example, a user terminal. A user terminal is a terminal of a user. A user terminal is usually a mobile terminal of a specific user, but may be a terminal that can be used by unspecified users who are customers shopping at a store, for example.

However, the terminal device 5 may be, for example, a terminal operated by an employee of the above organization, regardless of its type or location. This type of terminal device 5 receives, for example, determination result information from the server device 1 and outputs the received determination result information. If negative judgment result information is output, the staff should, for example, inform the store or financial institution that the code may have been replaced, and have them avoid making payments using the code. good too.

The server device 1 includes a storage unit 11 , a reception unit 12 , a reception unit 13 , a processing unit 14 and a transmission unit 15 . The storage unit 11 includes a generated code storage unit 111 . The receiver 13 includes an output code receiver 131 and a generated code receiver 132 . The processing unit 14 includes a determination unit 141 , an extraction unit 142 and an accumulation unit 143 . The transmitter 15 includes a determination result transmitter 151 .

The terminal device 5 includes a terminal storage section 51 , a terminal reception section 52 , a terminal processing section 53 , a terminal transmission section 54 , a terminal reception section 55 and a terminal output section 56 .

The storage unit 11 configuring the server device 1 can store various types of information. Various types of information are, for example, generated code information. Other information will be explained as appropriate.

The generated code information is stored in the generated code storage unit 111 . In the present embodiment, the generated code storage unit 111 stores, for example, two or more pieces of generated code information in association with store identifiers.

Generated code information is information about generated code. Generated code is code that is or has been generated. The generated code is, for example, code generated or generated by the code generation server 2 . Generated code information typically includes generated code, but may also include the original data (described above) that generates the code.

Alternatively, the generated code information may have values obtained from the original data, for example. A value obtained from original data is, for example, a value calculated by substituting the original data into a function. The function is, for example, a hash function, and the value obtained from the original data may be a hash value calculated by substituting the original data for the hash function. However, the type of function and the value calculated by the function do not matter.

Note that the generated code information may be stored in the generated code storage unit 111 in advance, for example. Alternatively, the generated code information may be received by the receiving unit 12 or received by the generated code receiving unit 132 and accumulated in the generated code storage unit 111 by the processing unit 14, for example.

Specifically, for example, original data is accepted or received, the processing unit 14 acquires a hash value from the original data using a hash function, and stores the acquired hash value in the generated code storage unit 111. may

Alternatively, for example, the storage unit 11 stores correspondence information that is a set of pairs of original data and values, and the processing unit 14 uses this correspondence information to acquire the value corresponding to the original data. It doesn't matter which method you use to get the value from the original data.

The pair of code identifier and generated code information may also be stored in the generated code storage unit 111 in advance, received by the reception unit 12 or received by the generated code reception unit 132, and processed by the processing unit 14. may be accumulated in the generated code storage unit 111 by

The reception unit 12 receives various kinds of information. Various types of information are, for example, original data. The reception unit 12 normally receives information input via an input device such as a keyboard or touch panel, but may receive information transmitted via a network or a communication line, or may receive information transmitted via a disk or semiconductor memory. Information read out from a recording medium such as a . This matter also applies to the terminal reception unit 52, which will be described later.

However, the original data may be received by, for example, a terminal receiving unit 52, which will be described later. Also, the server device 1 does not have to include the receiving unit 12 .

The receiving unit 13 receives various kinds of information. Various information includes output code information, generated code information, and the like. Further, the receiving unit 13 receives an inquiry from the terminal device 5, for example. An inquiry is an inquiry about the judgment result as to whether or not the code has been replaced. The inquiry has, for example, a store identifier and a user identifier.

The output code receiving unit 131 receives output code information transmitted from the imaging device 4 . The received output code information, as described above, typically comprises an image taken of the output code, but may also comprise the output code extracted from the image. In the latter case, the photographing device 4 has a function of extracting the output code from the photographed image.

The output code receiving unit 131 normally receives output code information transmitted from the photographing device 4 in combination with the shop identifier.

The generated code receiving unit 132 receives generated code information from the code generation server 2 . The generated code receiving unit 132 may receive the generated code information paired with the shop identifier, for example. The received generated code information includes, for example, the generated code, but instead of or in addition to the generated code, one or more types of original data of the generated code or values obtained from the generated code. may have.

Note that if the code is a variable code, the generated code receiving unit 132 receives generated code information about the new code from the code generation server 2 every time the code generation server 2 generates a new code. may

The processing unit 14 performs various types of processing. Various processes are, for example, processes of the determination unit 141, the extraction unit 142, the accumulation unit 143, and the like. In addition, the processing unit 14 also makes various judgments described in flowcharts, for example. Note that other processing will be explained as appropriate.

The determination unit 141 determines whether or not the output code matches the generated code using the stored code information stored in the generated code storage unit 111 and the output code information received by the output code reception unit 131. .

In this embodiment, the stored code information is generated code information. That is, the generated code storage unit 111 stores the legitimate code generated by the code generation server 2 or its original data, etc., and the legitimate code or its original data, etc., or the illegal code or its original data, etc. It is difficult to replace the

Also, in this embodiment, as described above, output code information typically comprising an image is received. In this case, for example, the extraction unit 142, which will be described later, extracts the output code from the image included in the received output code information, and the determination unit 141 uses the stored stored code information and the extracted output code. to determine whether the output code matches the generated code.

Note that when the output code information having the output code is received, the determination unit 141 generates the output code using the stored stored code information and the output code included in the received output code information. It suffices to determine whether or not the code matches.

On the other hand, the stored code information is usually the generated code as described above, but may be the original data of the generated code or a value obtained from the original data.

For example, when the stored code information is a generated code and output code information having an image is received, the determination unit 141 determines that the generated code stored in the generated code storage unit 111 and the extraction unit 142 (to be described later) receive the generated code. The output code extracted from the generated image is collated to determine whether the output code matches the generated code.

When the stored code information is the original data of the generated code and the output code information having an image is received, for example, the processing unit 14 generates the generated code from the original data stored in the generated code storage unit 111. Then, the determination unit 141 compares the generated generated code with the output code extracted from the image, and determines whether the output code matches the generated code.

Alternatively, if the stored code information is a value obtained from the original data of the generated code and the output code information having an image is received, for example, the processing unit 14 calculates the original data from the stored values, Generate generated code from the calculated original data. The determination unit 141 compares the generated generated code with the output code extracted from the image, and determines whether the output code matches the generated code.

The extraction unit 142 extracts the output code from the image included in the output code information received by the output code reception unit 131 . The extraction unit 142 extracts an output code, for example, by performing edge detection by binarization on the received image. It should be noted that the code extraction from the image is a well-known technique, and a detailed description thereof will be omitted.

The accumulation unit 143 accumulates the generated code information received by the generated code reception unit 132 in the generated code storage unit 111 . For example, the storage unit 143 associates the generated code information received by the generated code receiving unit 132 with the store identifier with the store identifier and stores the generated code information in the generated code storage unit 111 .

For example, when the code is a variable code, the storage unit 143 stores the code in the generated code storage unit 111 in response to the generated code reception unit 132 receiving the generated code information about the new code. The stored code information may be updated with the received generated code information. As a result, when a variable code is used for payment, payment to an unauthorized payee due to replacement of the code can be prevented.

The transmission unit 15 transmits various kinds of information. Various types of information are, for example, judgment result information.

The determination result transmission unit 151 transmits determination result information regarding the result of determination by the determination unit 141 to the terminal device 5 .

For example, when the receiving unit 13 receives an inquiry from the terminal device 5, the determination result transmitting unit 151 sends determination result information related to the stored code information corresponding to the store identifier included in the inquiry to the user identifier included in the inquiry. may be transmitted to the terminal device 5 corresponding to . Processing in response to an inquiry from the terminal device 5 will be explained using a flowchart.

Various types of information are stored in the terminal storage unit 51 that constitutes the terminal device 5 . Various types of information are, for example, a terminal identifier, warning information, and the like. A terminal identifier is information for identifying the terminal device 5 . The terminal identifier is, for example, an address such as a MAC address or an IP address, but may be a user identifier, an ID, or any other information that can identify the terminal device 5 . A user identifier is information that identifies a user of the terminal device 5 . The user identifier is, for example, a mobile phone number, e-mail address, address/name, etc., but any information that can identify the user may be used. In addition, in this embodiment, the terminal identifier is assumed to be a user identifier.

The warning information is information that warns the user of the terminal device 5 about the possibility that the code has been replaced. The warning information is, for example, a character string such as "the code may have been replaced", but it may be a mark suggesting the replacement of the code, or simply audio data of a warning sound. I don't mind.

The terminal reception unit 52 receives various information and various instructions. Various types of information are, for example, original data. Various instructions are, for example, payment instructions, cancellation instructions, and the like. A payment instruction is an instruction to execute processing for payment using a code. One is a cancel instruction and the other is an instruction to cancel processing for payment using a code.

The terminal processing unit 53 performs various types of processing. Various types of processing include, for example, reading of output codes, processing for payment, and the like. In addition, the terminal processing unit 53 also performs various determinations described in flowcharts, for example.

The terminal processing unit 53 reads, for example, the output code displayed on the display of the shop terminal with a built-in camera. Specifically, the terminal processing unit 53 takes an image of the displayed output code with the built-in camera and extracts the output code from the image taken or being taken. After reading the output code, the terminal processing unit 53 uses the output code to perform processing for settlement in response to the terminal accepting unit 52 accepting a settlement instruction.

Further, the terminal processing unit 53, for example, extracts an output code from an image that has been shot or is being shot, and in response to receiving a store identifier from the output device 3 that is a store terminal, the received store identifier, A query including the user identifier stored in the terminal storage unit 51 is transmitted to the server device 1 via the terminal transmission unit 54 .

Further, the terminal processing unit 53 executes the suppression process when, for example, the terminal receiving unit 55 receives judgment result information indicating a negative judgment result from the server device 1 in response to the transmission of the inquiry as described above. do. The suppression process is a process for suppressing the execution of the process for payment. The suppression process is, for example, a process of outputting a warning about the possibility of code replacement via the terminal output unit 56 using the warning information stored in the terminal storage unit 51 .

Alternatively, the suppression process may, for example, output the received determination result information. Note that the judgment result information to be output does not have to be the same as the received judgment result information. The judgment result information that is output is, for example, "The displayed code does not match the regular code" or "The displayed code matches the regular code". I don't mind.

Alternatively, the suppression process may be, for example, not performing the process for payment. Specifically, for example, when the terminal receiving unit 55 receives determination result information indicating a negative determination result from the server device 1, the terminal processing unit 53 receives the settlement instruction even if the terminal receiving unit 52 receives the settlement instruction. You do not have to process

Alternatively, the suppression process may be, for example, not accepting payment instructions. Specifically, the terminal processing unit 53 accepts the payment instruction input via the terminal accepting unit 52 only when the terminal receiving unit 55 receives determination result information indicating a positive determination result from the server device 1, for example. If the determination result information indicating the acceptance or negative determination result is received, the settlement instruction need not be accepted.

In this way, if the suppression process is such that the execution of the process for payment is suppressed as a result when determination result information indicating a negative determination result is received from the server device 1, Any processing can be used.

The terminal transmission unit 54 transmits various kinds of information and various instructions received by the terminal reception unit 52 to the server device 1 . The terminal transmission unit 54 may transmit the received various information and various instructions to the server device 1 in pairs with the terminal identifiers stored in the terminal storage unit 51, for example.

The terminal reception unit 55 receives determination result information from the server device 1 . In addition, the terminal receiving unit 55 receives a store identifier from the output device 3, which is a store terminal, for example.

The terminal output unit 56 outputs various information. Various types of information are, for example, an image captured by a built-in camera or an output code extracted from the image, a warning, judgment result information, and the like.

For example, when the terminal receiving unit 55 receives judgment result information indicating a negative judgment result from the server device 1, the terminal output unit 56 outputs a warning based on the warning information stored in the terminal storage unit 51. .

The storage unit 11, the generated code storage unit 111, and the terminal storage unit 51 are preferably non-volatile recording media such as hard disks and flash memories, but can also be realized by volatile recording media such as RAM.

Note that the process of storing information in the storage unit 11 or the like does not matter. For example, information may be stored in the storage unit 11 or the like via a recording medium, or information transmitted via a network, a communication line, or the like may be stored in the storage unit 11 or the like. Alternatively, information input via an input device may be stored in the storage unit 11 or the like. Any input device such as a keyboard, mouse, touch panel, or the like may be used.

The reception unit 12 and the terminal reception unit 52 may or may not include input devices. The reception unit 12 and the like can be realized by the driver software of the input device, or by the input device and its driver software.

The receiving unit 13, the output code receiving unit 131, the generated code receiving unit 132, and the terminal receiving unit 55 are usually realized by wired or wireless communication means (for example, a communication module such as a NIC (Network interface controller) or a modem). However, it may be realized by a means for receiving broadcasts (for example, a broadcast reception module).

The processing unit 14, the determination unit 141, the storage unit 143, and the terminal processing unit 53 can usually be implemented by an MPU, memory, or the like. The processing procedure of the processing unit 14 and the like is normally realized by software, and the software is recorded in a recording medium such as a ROM. However, the processing procedure may be realized by hardware (dedicated circuit).

The transmitting unit 15, the determination result transmitting unit 151, and the terminal transmitting unit 54 are usually implemented by wired or wireless communication means, but may be implemented by broadcasting means (for example, a broadcasting module).

The terminal output unit 56 may or may not include an output device such as a display or speaker. The terminal output unit 56 can be realized by the driver software of the output device, or by the output device and its driver software.

Next, the operation of the information system will be explained using the flow charts of FIGS. 2 to 4. FIG. In the flowcharts of FIGS. 2 to 4, values obtained from the original data of the generated code are stored in the generated code storage unit 111, and output code information having an image is transmitted from the imaging device 4. Processing is shown.

FIG. 2 is a flow chart for explaining the operation of the server device 1 according to this embodiment.

(Step S201) The processing unit 14 determines whether or not the output code receiving unit 131 has received the output code information paired with the store identifier. If it is determined that the output code receiving unit 131 has received the output code information paired with the store identifier, the process proceeds to step S202, and if it is determined that the output code information has not been received, the process proceeds to step S207.

(Step S202) The extraction unit 142 extracts the output code from the image included in the output code information received in step S201.

(Step S203) The determination unit 141 and the like perform determination processing for determining whether or not the output code extracted in step S202 matches the generated code. Note that this determination processing will be described with reference to the flowchart of FIG.

(Step S204) The processing unit 14 determines whether or not the determination result of step S203 is affirmative using variables described later. If the determination result of step S203 is affirmative, the process proceeds to step S205, and if negative, the process proceeds to step S206.

(Step S205) The processing unit 14 stores judgment result information indicating a positive judgment result in the storage unit 11 in association with the store identifier received in step S201. After that, the process returns to step S201.

(Step S206) The processing unit 14 stores judgment result information indicating a negative judgment result in the storage unit 11 in association with the store identifier received in step S201. After that, the process returns to step S201.

(Step S207) The processing unit 14 determines whether or not the generated code receiving unit 132 has received the generated code information paired with the store identifier. If it is determined that the generated code receiving unit 132 has received the generated code information paired with the store identifier, the process proceeds to step S208, and if it is determined that the generated code information has not been received, the process proceeds to step S209.

(Step S208) The storage unit 143 associates the generated code information received in step S207 with the store identifier in the generated code storage unit 111 in association with the store identifier. After that, the process returns to step S201.

(Step S209) The processing unit 14 determines whether or not the receiving unit 13 has received an inquiry. If it is determined that the receiving unit 13 has received the inquiry, the process proceeds to step S210, and if it is determined that the inquiry has not been received, the process returns to step S201.

(Step S<b>210 ) The processing unit 14 acquires from the storage unit 11 determination result information corresponding to the store identifier included in the inquiry received in step S<b>209 .

(Step S211) The determination result transmitting unit 151 transmits the determination result information acquired in step S210 to the terminal device 5 identified by the user identifier included in the inquiry received in step S209. Note that the transmitted determination result information may not be the same as the determination result information acquired in step S210. For example, the processing unit 13 may convert the format of the determination result information acquired in step S210 into a format for transmission, and the determination result transmission unit 151 may transmit the converted determination result information. After that, the process returns to step S201.

In the flowchart of FIG. 2, the process starts when the power of the server device 1 is turned on or when the program is started, and the process ends when the power is turned off or an interruption to end the process occurs. However, the trigger for starting or ending processing does not matter.

FIG. 3 is a flowchart for explaining the judgment processing in step S203.

(Step S301) The processing unit 14 refers to the stored code information corresponding to the store identifier received in step S201 among the one or more pieces of generated code information stored in the generated code storage unit 111 .

(Step S302) The processing unit 14 acquires a value from the generated code information referred to in step S301.

(Step S303) The processing unit 14 acquires original data from the values acquired in step S302.

(Step S304) The processing unit 14 generates generated code from the original data acquired in step S303.

(Step S305) The determination unit 141 determines whether or not the output code extracted in step S202 matches the generated code reconstructed in step S304. If it is determined that the output code matches the generated code, the process proceeds to step S306, and if it is determined that they do not match, the process proceeds to step S307.

(Step S306) The determination unit 141 sets the variable indicating the determination result to "positive". After that, it returns to the upper processing.

(Step S307) The determination unit 141 sets "negative" to the variable. After that, it returns to the upper processing.

FIG. 4 is a flow chart for explaining the operation of the terminal device 5 according to this embodiment. A built-in camera of the terminal device 5, which is the user's portable terminal, is aimed at the display of the output device 30, and the terminal processing unit 53 captures the output code displayed on the display.

(Step S401) The terminal processing unit 53 determines whether or not the output code has been extracted from the image being captured. If it is determined that the output code has been extracted from the image being captured, the process proceeds to step S402, and if it is determined that the output code has not been extracted, the process returns to step S401.

(Step S402) The terminal processing unit 53 determines whether or not the terminal receiving unit 55 has received the store identifier. If it is determined that the terminal receiver 55 has received the store identifier, the process proceeds to step S403, and if it is determined that the terminal receiver 55 has not received the shop identifier, the process returns to step S401.

(Step S<b>403 ) The terminal transmission unit 54 transmits to the server device 1 an inquiry having the store identifier received in step S<b>402 and the user identifier stored in the terminal storage unit 51 .

(Step S404) The terminal processing unit 53 determines whether or not the terminal receiving unit 55 has received the determination result information. If it is determined that the terminal receiving section 55 has received the determination result information, the process proceeds to step S405, and if it is determined that the terminal receiving section 55 has not received the determination result information, the process returns to step S404.

(Step S405) The terminal processing unit 53 determines whether or not the determination result information received in step S404 indicates a negative determination result. If it is determined that the received determination result information indicates a negative determination result, the process proceeds to step S406, and if it is determined that the received determination result information indicates a positive determination result, the process proceeds to step S407.

(Step S406) The terminal output unit 56 outputs a warning about the possibility that the code has been replaced.

(Step S407) The terminal processing unit 53 determines whether or not the terminal accepting unit 52 has accepted a settlement instruction. If it is determined that the terminal reception unit 52 has received the payment instruction, the process proceeds to step S408, and if it is determined that the payment instruction has not been received, the process proceeds to step S409.

(Step S408) The terminal processing unit 53 executes processing for payment using the output code extracted in step S401. After that, the process returns to step S401.

(Step S409) The terminal processing unit 53 determines whether or not the terminal accepting unit 52 has accepted a cancel instruction. If it is determined that the terminal reception unit 52 has received the cancellation instruction, the process returns to step S401, and if it is determined that the cancellation instruction has not been received, the process returns to step S407.

In the flowchart of FIG. 4, the process starts when the power of the terminal device 5 is turned on or when the program is started, and ends when the power is turned off or an interrupt to end the process is detected. However, the trigger for starting or ending processing does not matter.

A specific operation example of the information system according to the present embodiment will be described below. Various modifications are possible in the following description, and the scope of the present invention is not limited in any way.

The information system in this example includes a server device 1 , a code generation server 2 , two or more output devices 3 , two or more photographing devices 4 , and two or more terminal devices 5 .

One of the two or more output devices 3 (hereinafter referred to as output device 3X) is a cashier terminal of store X, and displays a code for store X on the display of the cashier terminal. Another one of the two or more output devices 3 (output device 3Y hereinafter) is a mobile terminal of a store clerk at store Y, and displays a code for store Y on the display of the mobile terminal.

The store identifier "X" is periodically transmitted from the output device 3X, and the store identifier "Y" is periodically transmitted from the output device 3Y.

One of the two or more photographing devices 4 (hereinafter referred to as photographing device 4X) is a surveillance camera of store X, and periodically photographs a code displayed on the display of output device 3X, which is a cash register terminal of store X. are doing.

The other one of the two or more photographing devices 4 (hereinafter referred to as photographing device 4Y) is a mobile terminal of a store clerk at store Y, and is displayed on the display of output device 3Y, which is also a mobile terminal of a store Y store clerk. I regularly shoot the code that I have. In other words, the output device 3Y and the photographing device 4Y are implemented by a single mobile terminal owned by the store clerk of the store Y, and this mobile terminal is a screen displayed on the display of the mobile terminal itself and includes a code. The screen is periodically captured by a virtual camera.

Of the two or more terminal devices 5, one (hereinafter referred to as terminal device 5A) is user A's mobile terminal, and the other (hereinafter referred to as terminal device 5B) is user B's mobile terminal.

The storage unit 11 stores, for example, screen configuration information. Screen configuration information is information for configuring a screen. Screen configuration information includes, for example, one or more objects, layout information, and the like. An object is an element that configures a screen. An object is, for example, an image. The image is, for example, an image of a button. The button is, for example, a "settlement" button for inputting a settlement instruction. Alternatively, the object can be a string. A character string is, for example, a warning message. Layout information is information indicating the arrangement of one or more objects within the screen. The layout information is, for example, a set of information (for example, coordinates) indicating the positions of one or more objects within the screen, but the data structure of the information does not matter.

The storage unit 11 stores, for example, a set of pairs of shop identifiers and generated code information as shown in FIG. The pair of store identifier and generated code information is, for example, a pair of store identifier “X” and generated code information “aaaa”, a pair of store identifier “Y” and generated code information “bbbb”, and the like.

The generated code information “aaaa” is a hash value calculated from the original data of the code generated for the store X by the code generation server 2 using a hash function. The generated code information “bbbb” is a hash value calculated from the original data of the code generated for the store Y by the code generation server 2 using a hash function. Therefore, the generated code information "aaaa" and the generated code information "bbbb" are both normal generated code information.

A user identifier "A" is stored in the terminal storage section 51 of the terminal device 5A, and a user identifier "B" is stored in the terminal storage section 51 of the terminal device 5B.

At store X, a code is displayed on the display of output device 3X, which is a cash register terminal, and photographing device 4X, which is a surveillance camera, regularly photographs the code displayed on the display. The photographing device 4X transmits the output code information including the photographed image to the server device 1 together with the store identifier “X” each time the photographing device 4X photographs the code.

In the server device 1, the output code receiving section 131 receives the output code information paired with the shop identifier "X", and the extracting section 142 extracts the output code from the image included in the received output code information.

The processing unit 14 refers to the generated code information corresponding to the received store identifier “X” among the two or more pieces of generated code information stored in the generated code storage unit 111 . Then, a hash value "aaaa" is obtained from the generated code information, original data is calculated using a hash function from the obtained hash value, and a code is generated from the calculated original data.

The determination unit 141 determines whether or not the output code extracted from the image matches the generated code generated based on the generated code information. Here, it is determined that the output code matches the generated code, and the processing unit 14 stores determination result information indicating a positive determination result in the storage unit 11 in association with the store identifier “X”.

For store Y, the same process as described above is performed, and determination result information indicating a positive determination result is stored in the storage unit 11 in association with the store identifier "Y".

User A is shopping at store X and is about to make a payment using a code. The user A directs the built-in camera of the terminal device 5A, which is his mobile terminal, toward the display of the output device 3X, and photographs the displayed code.

In the terminal device 5A, when the terminal processing unit 53 extracts the code from the image being captured and the terminal receiving unit 55 receives the store identifier “X” from the output device 3X, the terminal transmitting unit 54 receives An inquiry having a store identifier “X” and a user identifier “A” stored in the terminal storage unit 51 is transmitted to the server device 1 .

In the server device 1 , the receiving section 13 receives the inquiry, and the processing section 14 acquires from the storage section 11 the determination result information corresponding to the store identifier “X” included in the received inquiry. The determination result transmitting unit 151 transmits the acquired determination result information to the terminal device 5A identified by the user identifier "A" included in the received inquiry.

In the terminal device 5A, the terminal receiving unit 55 receives the determination result information, and the terminal processing unit 53 receives the determination result information indicating a positive determination result. Construct a screen with a " button. The terminal output unit 56 outputs the configured screen through the display.

As a result, a screen having a "settlement" button as shown in FIG. 6, for example, is displayed on the display of the terminal device 5A. When the user A presses the "settlement" button, the terminal accepting unit 52 accepts the settlement instruction, and the terminal processing unit 53 uses the extracted output code to execute processing for settlement.

The operation when the generated code information is replaced with an invalid code is as follows. For example, if the output code output from the output device 3Y of the store Y is replaced with an illegal code by a third party, at the store Y, the display of the output device 3Y, which is the clerk's mobile terminal, will not display until then. An unauthorized code is displayed instead of the legitimate code that was displayed.

The photographing device 4Y, which is the mobile terminal of the same store clerk, acquires the captured image of the screen containing the unauthorized code, and transmits the output code information including the acquired captured image to the server device 1 together with the store identifier "Y".

In the server device 1, the output code receiving section 131 receives the output code information paired with the shop identifier "Y", and the extracting section 142 extracts the output code from the captured image included in the received output code information. The processing unit 14 refers to the generated code information corresponding to the received store identifier “Y”, acquires the hash value “bbbb” from the generated code information, and extracts the original data from the acquired hash value using the hash function. is calculated, and generated code is generated from the calculated original data.

Here, the determination unit 141 determines that the output code does not match the generated code, and the processing unit 14 associates determination result information indicating a negative determination result with the shop identifier “Y” and stores it in the storage unit 11. accumulate.

After shopping at the store Y, the user B directs the built-in camera of the terminal device 5B, which is his mobile terminal, to the display of the output device 3Y, which is the clerk's mobile terminal, and photographs the displayed code.

In the terminal device 5B, when the terminal processing unit 53 extracts the code from the image being captured and the terminal receiving unit 55 receives the store identifier “Y” from the output device 3Y, the terminal transmitting unit 54 transmits the received store identifier “ Y” and the user identifier “B” of the terminal storage unit 51 is transmitted to the server device 1 .

In the server device 1, the receiving unit 13 receives the inquiry, the processing unit 14 acquires judgment result information corresponding to the store identifier “Y” included in the inquiry, and the judgment result transmission unit 151 transmits the acquired judgment The result information is transmitted to the terminal device 5B identified by the user identifier "B" included in the inquiry.

In the terminal device 5B, the terminal receiving unit 55 receives the determination result information, and the terminal processing unit 53 issues a warning about the possibility that the code has been replaced because the determination result information indicates a negative determination result. Configure a screen with The terminal output unit 56 outputs the configured screen through the display.

As a result, the display of the terminal device 5B has, for example, a warning message "The QR code may have been replaced with an unauthorized code. Please make a payment using another method" as shown in FIG. A screen appears. For example, when user B presses the home button, a cancel operation is accepted and the payment using the code is cancelled.

(Modification 1)

In the embodiment, the stored code information stored in the generated code storage unit 111 is information related to legitimate code and is not replaced with unauthorized code. , may be replaced with information about malicious code.

In Modification 1, the generated code storage unit 111 includes three or more storage means (not shown). It should be noted that the three or more storage units are preferably realized by, for example, three or more recording media, but may be realized by one or two recording media.

Three or more storage means constituting the generated code storage unit 111 store three or more pieces of generated code information corresponding to one generated code. The three or more storage means may store three or more pieces of generated code information corresponding to the generated code for each of the two or more store identifiers. For example, when a code corresponding to one store identifier is generated by the code generation server 2, the processing unit 14 configures three or more pieces of stored code information related to the generated code, associates the terminal identifier with three store code information, It accumulates in the storage means described above. In the following, it is assumed that the generated code information is generated code.

The three or more pieces of generated code information stored in the three or more storage means in association with one store identifier are usually all information related to legitimate codes, but one or more of them are third party identifiers. There is a possibility that it will be replaced with an illegal code by an unauthorized person.

In Modified Example 1, the number of storage units constituting the generated code storage unit 111 is normally three. If the number of storage means is two, it is not easy to determine which of the two pieces of stored code information is the true code when one piece of stored code information is replaced. On the other hand, if the number of storage means is three, even if one stored code information is replaced, the other two stored code information are the same. can be said to be the majority), and it can be easily judged that it is a true code.

However, the number of storage means may be four or more. Even then, the number of storage means is preferably an odd number (eg, 5, 7, etc.). If the number of storage means is 2m (for example, m=2), and m pieces of stored code information are replaced with the same illegal code information, a set of m pieces of stored code information that have not been replaced; It becomes difficult to determine which of the replaced sets of m pieces of code information is the true code set. On the other hand, if the number of storage means is 2m+1, when the stored code information of m stored codes is replaced, the remaining m+1 stored code information is the same. It has the largest number of code information and can be easily determined to be a true code.

For example, when the number of storage means is 3m (for example, m=2), m stored code information is replaced with the same first illegal code information, and the other m stored code information is replaced with the same first illegal code information. When replaced with the second incorrect code information, a set of m pieces of stored code information that have not been replaced, a set of m pieces of code information that have been replaced with the first incorrect code information, and a second Since the set of m pieces of code information replaced with the incorrect code information in the above has the same number of pieces of stored code information that constitute it, the largest number of stored codes, which is the largest number of stored codes, cannot be uniquely determined. It becomes difficult to determine whether the set of stored code information is a true code.

On the other hand, if the number of storage means is 3m+1, the stored code information of m storage means is replaced with the same first illegal code information, and the stored code information of other m storage means is the same. When replaced with the second incorrect code information, since the other m+1 stored code information is the largest number, the largest number of stored codes is uniquely determined, and the true code can be easily determined.

In this way, if the number of storage means is an odd number of 3 or more, compared to the case of an even number of 2 or more, the probability that the most stored code is uniquely determined increases, and the true code can be easily determined.

The first determination means constituting the determination unit 141 uses the three or more stored code information stored in the three or more storage means, and among the three or more stored codes corresponding to the three or more stored code information, It is determined whether there is one or more sets of two or more matching stored codes.

If the first determination means determines that one or more of the above-described sets exist among the three or more stored codes, the second determination means determines which of the stored codes constitutes one set, and which other set. It is determined whether or not there is only one stored code having the largest number of stored codes, which is more stored codes than the stored codes forming the set.

The determining means determines the most stored code to be the generated code when the second determining means determines that there is only one most stored code.

The third determining means determines whether or not the output code matches the generated code using the generated code determined by the determining means and the output code information received by the output code receiving section 131 .

For example, when three pieces of generated code information are stored and there is a set of two or more matching stored codes among the three stored codes corresponding to them, the stored code that constitutes the set has the largest number of stored codes. Since it is a large amount of stored code, it is determined to be the generated code.
(2n+1) pieces of generated code information are stored, and if there is only one set of two or more matching stored codes among the corresponding (2n+1) stored codes, the stored codes that make up that set is the stored code with the largest number, so it is determined to be the generated code.
If there are 2 to n sets of two or more matching stored codes among the corresponding (2n+1) stored codes, then the stored code constitutes one set and any other set. The stored code with the largest number of stored codes, which is larger in number than the stored codes to be generated, is determined to be the generated code. If two or more pairs have the same number of stored codes, it is determined that the largest number of stored codes does not exist even if the number of stored codes is the largest.

For example, when the first determining means determines that the above set does not exist, or when the second determining means determines that the largest number of stored codes do not exist, or when the third determining means determines that the output code does not match the generated code, it sends determination result information with a warning about the possibility that the code has been replaced.

Further, for example, when the third determining means determines that the output code matches the generated code, the determination result transmitting unit 151 transmits information permitting processing for settlement using the output code. good too.

The operation of the information system in Modification 1 is the same as that of the embodiment except for the judgment processing in step S203 and the accumulation processing in step S208.

In step S208, three or more pieces of generated code information that are the same as the received generated code information are configured and stored in three or more storage means in association with the shop identifier.

FIG. 8 is a flowchart for explaining the judgment processing in step S203 in the first modification.

(Step S801) The processing unit 14 acquires three or more pieces of stored code information corresponding to the shop identifier received in step S201 from three or more storage means that constitute the generated code storage unit 111. FIG.

(Step S802) The first determination means constituting the determination unit 141 uses the three or more stored code information stored in the three or more storage means to store three or more stored code information corresponding to the three or more stored code information. , it is determined whether or not there is one or more sets of two or more matching stored codes. If it is determined that there is at least one matching set of two or more stored codes, the process advances to step S803, and if it is determined that there is not even one set, the process advances to step S807.

(Step S803) The second determination means is the stored code that constitutes one of the above one or more sets, and is the stored code that is greater in number than the stored codes that constitute any of the other sets. Determine if the code is unique. If it is determined that there is only one maximum number of stored codes, the process proceeds to step S804, and if it is determined that there are two or more, the process proceeds to step S807.

(Step S804) The determining means determines the code stored in the largest number determined to exist alone in step S804 to be the generated code.

(Step S805) The third determination means determines whether or not the output code extracted in step S202 matches the generated code determined in step S804. If it is determined that the output code matches the generated code, the process proceeds to step S806, and if it is determined that they do not match, the process proceeds to step S807.

(Step S806) The third judging means sets "positive" to the variable indicating the judgment result. After that, it returns to the upper processing.

(Step S807) The third determination means sets "negative" to the variable. After that, it returns to the upper processing.

(Modification 2)

In the embodiment, the output device 3 is a store terminal (for example, a cash register terminal or a clerk's mobile terminal), and the terminal device 5 is a user terminal (for example, a user's mobile terminal). Then, for example, the user's portable terminal is the output device 3, and the cash register terminal or the clerk's portable terminal is the terminal device 5. FIG.

Therefore, in Modification 2, the device identifier is the user identifier, and the terminal identifier is the store identifier. The display is, for example, a display of a user's mobile terminal, and the imaging device 4 is, for example, a scanner of a cash register terminal or a built-in camera of a store clerk's mobile terminal. The generated code is displayed on the display of the mobile terminal of the user and captured by the scanner of the cash register terminal or the built-in camera of the mobile terminal of the clerk. Output code information having the captured image is then sent to the server device 1 . Note that the operation of the server device 1 is the same as that of the embodiment.

The judgment result information transmitted from the server device 1 is received by the cashier terminal or the mobile terminal of the salesclerk, and the cashier terminal or the mobile terminal of the salesclerk performs the suppression process when the received judgment result information indicates a negative judgment result. I do.

The mobile terminal of the user extracts the output code displayed on the display of the cash register terminal, etc., from the image captured by the camera, and extracts the output code before performing processing for payment using the extracted output code. Output code information having an output code is transmitted to the server device 1 .

The output code receiving unit 131 constituting the server device 1 receives the output code information transmitted from the user terminal, and the determining unit 141 receives the generated code information stored in the generated code storage unit 111 and the received output. Using the output code included in the code information, it is determined whether the output code matches the generated code.

In the flow chart of the information system, the output device 3, which is a cash register terminal or a clerk's mobile terminal in the embodiment, is a user's mobile terminal in the third modification, and is a user's mobile terminal in the embodiment. 2 to 4 except that the terminal device 5 is a cash register terminal or a store clerk's mobile terminal in the third modification. As a specific example, in the specific example of the embodiment, the output device 3 is changed from the cashier terminal or the clerk's mobile terminal to the user's mobile terminal, and the terminal device 5 is changed from the user's mobile terminal to the cashier terminal or the clerk's mobile terminal. do it.

(Modification 3)

The photographing device 4 in the embodiment is a monitoring camera or a built-in camera of the store clerk's mobile terminal, but the photographing device 4 in Modification 3 is a built-in camera of the user's mobile terminal.

Other elements may be the same as in the embodiment. That is, the output device 3 is, for example, a store terminal (eg, a cash register terminal or a user's mobile terminal), the display is, for example, a display of the store terminal, and the terminal device 5 is, for example, a user's mobile terminal. Terminal. That is, in Modification 3, the photographing device 4 and the terminal device 5 are realized by one portable terminal owned by the user. Therefore, in Modification 3, both the device identifier and the terminal identifier are user identifiers.

The terminal processing unit 53 constituting the terminal device 5 captures, for example, an output code displayed on the display of the store terminal with a built-in camera, extracts the output code from the captured image, and uses the extracted output code. Before performing processing for payment, the output code information having the extracted output code is transmitted to the server device 1 via the terminal output unit 56 . Then, it is preferable that the terminal processing unit 53 receives the determination result information from the server device 1 via the terminal transmission unit 54 and performs the suppression process when the received determination result information indicates a negative determination result. is.

Therefore, in Modification 3, step S401 in FIG. 4 is replaced with step S401a below.

(Step S402a) The terminal transmission unit 54 transmits the output code extracted in step S401 to the server device 1 in combination with the shop identifier received in step S402 and the user identifier stored in the terminal storage unit 51.

The operation of the server device 1 is the same as that of the embodiment except that it is unnecessary to extract the output code from the image. Therefore, in the present modified example 3, step S202 is deleted from the flowchart of FIG.

As described above, according to the present embodiment, the generated code information regarding the generated code that is generated or generated should be stored in the generated code storage unit 111, and the server device 1 is an output device that outputs the generated code. 3, receives output code information having an image obtained by capturing the output code or an output code extracted from the image, and stores the stored code in the generated code storage unit 111. Information and the received output code information are used to determine whether or not the output code matches the generated code, and the determination result information regarding the determination result is transmitted to the terminal device, whereby code replacement can be detected. .

Further, the server device 1 receives generated code information from the code generation server 2 that generates code, and stores the received generated code information in the generated code storage unit 111, thereby detecting variable code replacement.

In the above configuration, the code is a variable code, and each time a new code is generated by the code generation server 2, the server device 1 receives generated code information about the new code, and generates a new code. In response to receiving the generated code information about the code, the stored code information stored in the generated code storage unit 111 may be updated with the received generated code information. capacity can be reduced.

In the above configuration, the output device 3 displays the generated code on the display, the image capturing device 4 captures the code displayed on the display, and the terminal device 5 uses the output code for payment. By performing the processing of (1), when the terminal device 5 uses the code displayed on the display device to make a payment, the server device 1 can prevent payment to an unauthorized payee due to replacement of the code.

In the above configuration, the output device 3 is a store terminal that is a terminal of the store, the display is a display that the store terminal has, and the terminal device 5 is a user terminal that is a user terminal. When a user terminal makes a payment using a code displayed on a display of a store terminal, the server device 1 can prevent payment to an unauthorized payee due to code replacement.

Further, in the above configuration, the photographing device 4 is a surveillance camera that monitors the output code displayed on the display. By monitoring the displayed code with a surveillance camera, the server device 1 can prevent payment to an unauthorized payee due to replacement of the code.

In the above configuration, the surveillance camera periodically or irregularly captures the output code displayed on the display, accumulates the captured image in the memory, and stores the captured image in the memory. If it is determined that the photographed image has changed with respect to the image stored in the memory, the server device 1 transmits the output code information having the photographed image, and the server device 1 monitors In response to receiving the output code information from the camera, the output code is extracted from the image included in the output code information, and using the stored code information stored in the generated code storage unit 111 and the extracted output code, Determine whether the output code matches the generated code. Thus, the server apparatus 1 receives the output code information having the image only when the image captured by the surveillance camera changes, and does not receive the output code information when the image does not change. While suppressing the data amount of the output code information received from, it is possible to prevent payment to an unauthorized payee due to code replacement.

Further, in the above configuration, the imaging device 4 is a camera that the user terminal has. The configuration can prevent payments to fraudulent payees due to code replacement.

In the above configuration, the user terminal extracts the output code displayed on the display from the image captured by the camera, and extracts the output code before performing processing for payment using the extracted output code. Output code information having an output code is transmitted, and the server apparatus 1 uses the generated code information stored in the generated code storage unit 111 and the output code included in the output code information received from the user terminal to generate the output code. matches the generated code, it is possible to suppress the data amount of the output code information received from the user terminal and prevent payment to an unauthorized payee due to code replacement.

In the above configuration, the generated code storage unit 111 includes three or more storage means in which three or more pieces of generated code information corresponding to one generated code are to be stored, and the server device 1 stores the three or more storage means. Using three or more stored code information stored, whether or not one or more sets of two or more matching stored codes exist among the three or more stored codes corresponding to the three or more stored code information is determined, and if it is determined that one or more sets exist among three or more stored codes, the stored code that constitutes one set and has a larger number of stored codes than those that constitute any other set It is determined whether or not there is only one code storing the largest number of codes, and if it is determined that there is only one code storing the largest number of codes, the code storing the largest number of codes is determined to be the generated code, and the determined generated code is , and the received output code information to determine whether the output code matches the generated code.

By storing three or more pieces of generated code information corresponding to one generated code in three or more storage means in this manner, any one of the three or more stored code information stored in the three or more storage means is illegal. Even if the code information is replaced with such code information, the server device 1 regards the stored code with the largest number of stored codes of 3 or more as the generated code by majority vote, and determines whether the output code matches the generated code. It can be carried out.

Therefore, even if there is a possibility that the generated code information stored in the generated code storage unit 111 will be replaced, the code replacement can be detected.

If the server device 1 determines that the above set does not exist, or determines that there are two or more stored codes, or determines that the output code does not match the generated code, the server device 1 makes a negative determination. A discrepancy between the generated code and the output code can be notified by transmitting judgment result information indicating the result.

In the above configuration, the judgment result information indicating a negative judgment result has a warning about the possibility that the code has been replaced, and the terminal device 5 receives the judgment result information and By outputting a warning contained in the determination result information when information is received, the operator of the terminal device 5 can be warned of the possibility that the code has been replaced. For example, by warning a user or a store clerk who operates the terminal device 5 that performs processing for settlement using a code, it is possible to effectively prevent payment to an unauthorized payee.

Further, the terminal device 5, which performs processing for settlement using a code, suppresses the execution of the processing for settlement when receiving determination result information indicating a negative determination result. Payments to unauthorized payees can be prevented.

Further, the information system includes an output device 3 for outputting the generated generated code, a photographing device 4 for capturing the output code output by the output device 3, a server device 1, and a terminal device 5. The storage unit 111 should store generated code information related to the generated or generated generated code. receiving output code information having a code, determining whether the output code matches the generated code using the stored code information stored in the generated code storage unit 111 and the received output code information; By transmitting judgment result information about the judgment result to the terminal device 5, the replacement of the code can be detected. As a result, for example, payment to an unauthorized payee due to code replacement can be prevented.

Furthermore, the processing in this embodiment may be realized by software. Then, this software may be distributed by software download or the like. Also, this software may be recorded on a recording medium such as a CD-ROM and distributed.

The software that implements the server device 1 in this embodiment is, for example, the following program. That is, the computer-accessible recording medium has a generated code storage unit 111 in which generated code information about the generated or generated generated code is stored, and this program causes the computer to store the generated code. an output code receiving unit 131 for receiving an image obtained by capturing the output code or output code information including the output code extracted from the image, from the image capturing device 4 capturing the output code output by the output device 3 for output; Judgment for judging whether the output code matches the generated code by using the stored code information stored in the generated code storage unit 111 and the output code information received by the output code receiving unit 131 It is a program for functioning as a unit 141 and a determination result transmission unit 151 that transmits determination result information regarding the result of determination by the determination unit 141 to the terminal device 5 .

The software that implements the terminal device 5 may be, for example, the following program. That is, this program causes the computer to function as a terminal receiving section 55 for receiving the determination result information from the server device 1 and a terminal output section 56 for outputting the determination result information received by the terminal receiving section 55. It's a program.

Further, in the above configuration, the determination result information indicating a negative determination result has a warning about the possibility that the code has been replaced, and the terminal output unit 56 receives the negative determination result from the terminal reception unit 55. A program for outputting a warning contained in judgment result information when judgment result information indicating a result is received.

In addition, the program causes the computer to further function as a terminal processing unit 53 that performs processing for settlement using the output code output by the output device 3, and the terminal processing unit 53 performs the terminal receiving unit 55 is a program for suppressing execution of the processing for settlement when receiving judgment result information indicating a negative judgment result.

FIG. 9 is an external view of a computer system 900 that implements the server device 1 and the like by executing the program in this embodiment. The embodiments can be implemented by computer hardware and computer programs executed thereon. In FIG. 9, computer system 900 comprises computer 901 including disk drive 905 , keyboard 902 , mouse 903 and display 904 . The entire system including the keyboard 902, mouse 903, and display 904 may be called a computer.

FIG. 10 is a diagram showing an example of the internal configuration of the computer system 900. As shown in FIG. In FIG. 10, a computer 901 includes a disk drive 905, an MPU 911, a ROM 912 for storing programs such as a boot-up program, and a computer 901 connected to the MPU 911 for temporarily storing application program instructions and temporarily A RAM 913 that provides storage space, a storage 914 that stores application programs, system programs, and data, a bus 915 that interconnects the MPU 911, ROM 912, etc., and provides connections to networks such as external networks and internal networks. a network card 916; The storage 914 is, for example, a hard disk, SSD, flash memory, or the like.

A program that causes the computer system 900 to execute the functions of the server device 1 or the like may be stored in a disk 921 such as a DVD or CD-ROM, inserted into the disk drive 905 , and transferred to the storage 914 . Alternatively, the program may be transmitted to computer 901 over a network and stored in storage 914 . Programs are loaded into RAM 913 during execution. Note that the program may be loaded directly from disk 921 or from the network. Also, the program may be read into the computer system 900 via another removable recording medium (eg, DVD, memory card, etc.) instead of the disk 921 .

The program does not necessarily include an operating system (OS) or a third-party program that causes the functions of the server device 1 or the like to be executed in the computer details 901 . A program may contain only those portions of instructions that call the appropriate functions or modules in a controlled manner to produce the desired result. How the computer system 900 operates is well known and will not be described in detail.

The computer system 900 described above is a server or a stationary PC, but the terminal device 5 may be realized by a portable terminal such as a tablet terminal, a smartphone, or a notebook PC. In this case, for example, it is desirable to replace the keyboard 902 and mouse 903 with a touch panel, the disk drive 905 with a memory card slot, and the disk 921 with a memory card. The computers of the output device 3 and the imaging device 4 may also have the same basic hardware configuration as the computer 901 in FIG. However, the above is just an example, and the hardware configuration of the computer that implements the server device 1 and the like is irrelevant.

In the above program, the transmission step for transmitting information and the reception step for receiving information are performed by hardware. not included).

Also, the number of computers that execute the above programs may be singular or plural. That is, one computer may perform centralized processing, or a plurality of computers may perform distributed processing.

Further, in the above embodiments, two or more communication means (receiving unit 13, transmitting unit 15, etc.) existing in one device may be physically realized by one medium.

In the above embodiments, each process (each function) may be implemented by centralized processing by a single device (system), or may be implemented by distributed processing by a plurality of devices. may

It goes without saying that the present invention is not limited to the above-described embodiments, and that various modifications are possible and are also included within the scope of the present invention.

INDUSTRIAL APPLICABILITY As described above, the server device according to the present invention has the effect of being able to detect code replacement, and is useful as a server device or the like.

1 server device 2 code generation server 3 output device 4 photographing device 5 terminal device 11 storage unit 12 reception unit 13 reception unit 14 processing unit 15 transmission unit 51 terminal storage unit 52 terminal reception unit 53 terminal processing unit 54 terminal transmission unit 55 terminal reception Unit 56 Terminal output unit 111 Generated code storage unit 131 Output code reception unit 132 Generated code reception unit 141 Judgment unit 142 Extraction unit 143 Storage unit 151 Judgment result transmission unit

Claims (13)

a generated code storage unit in which generated code information relating to generated or generated code is to be stored;
an output code receiving unit that receives an image obtained by capturing the output code or output code information having the output code extracted from the image, from a capturing device that captures the output code output by the output device that outputs the generated code; ,
a determination unit that determines whether the output code matches the generated code using the generated code information stored in the generated code storage unit and the output code information received by the output code receiving unit; ,
A server device comprising a determination result transmission unit that transmits determination result information regarding a result of determination by the determination unit to a terminal device. a generated code receiving unit that receives the generated code information from a code generation server that generates code;
2. The server device according to claim 1, further comprising an accumulation unit for accumulating the generated code information received by said generated code receiving unit in said generated code storage unit. The output device displays the generated code on a display,
The photographing device photographs the code displayed on the display,
3. The server device according to claim 1, wherein said terminal device performs processing for settlement using said output code. The output device is a store terminal that is a store terminal,
The display is a display that the store terminal has,
4. The server device according to claim 3, wherein said terminal device is a user terminal which is a user's terminal. 5. The server device according to claim 4, wherein said photographing device is a monitoring camera for monitoring output codes displayed on said display. The surveillance camera regularly or irregularly captures the output code displayed on the display, accumulates the captured image in a memory, and changes the captured image with respect to the image stored in the memory. If it is determined that the captured image has changed from the image stored in the memory, transmitting output code information having the captured image,
further comprising an extracting unit for extracting an output code from an image included in the output code information in response to the output code receiving unit receiving the output code information from the surveillance camera;
The determination unit
6. The server according to claim 5, wherein the generated code information stored in the generated code storage unit and the output code extracted by the extraction unit are used to determine whether the output code matches the generated code. Device. 4. The server device according to claim 3 , wherein the photographing device is a camera of a user terminal. The user terminal extracts the output code displayed on the display from the image captured by the camera, and before performing the processing for the settlement using the extracted output code, extracts the extracted output code. and send the output code information having
The determination unit
whether the output code matches the generated code by using the generated code information stored in the generated code storage unit and the output code included in the output code information received by the output code receiving unit from the user terminal; 8. The server device according to claim 7, which determines whether or not. The generated code storage unit
three or more storage means for storing three or more pieces of generated code information corresponding to one generated code;
The determination unit
using the three or more pieces of generated code information stored in the three or more storage means, and among the three or more pieces of generated code corresponding to the three or more pieces of generated code information, a pair of two or more pieces of generated code that match each other; a first determination means for determining whether or not one or more pairs exist;
If the first determination means determines that one or more of the sets exist in the three or more generated codes, the generated code that constitutes one set is more than the generated code that constitutes any other set. a second judgment means for judging whether or not there is only one largest stored code, which is a generated code with a large number;
determination means for determining the maximum number of stored codes to be the generated code when the second determination means determines that there is only one stored code of the highest number;
a third determining means for determining whether the output code matches the generated code by using the generated code determined by the determining means and the output code information received by the output code receiving section; The server device according to any one of claims 1 to 8. The judgment result transmission unit is
When the first determination means determines that the set does not exist, or when the second determination means determines that two or more of the most stored codes exist, or when the third determination means determines that the output code is the generated 10. The server device according to claim 9, which transmits judgment result information indicating a negative judgment result to said terminal device when it judges that the code does not match. an output device that outputs the generated generated code;
a photographing device for photographing the output code output by the output device;
a server device;
a terminal device;
The server device
a generated code storage unit in which generated code information relating to generated or generated code is to be stored;
an output code receiving unit that receives output code information having an image obtained by capturing the output code or an output code extracted from the image, from the imaging device;
a determination unit that determines whether the output code matches the generated code using the generated code information stored in the generated code storage unit and the output code information received by the output code receiving unit; ,
and a determination result transmitting unit configured to transmit determination result information regarding a result of determination by the determination unit to the terminal device. An information processing method implemented by a generated code storage unit, an output code receiving unit, a determining unit, and a determination result transmitting unit in which generated code information about generated or generated code is to be stored, comprising:
The output code receiving unit receives output code information having an image obtained by photographing the output code or an output code extracted from the image from a photographing device that photographs the output code output by the output device that outputs the generated code. a receiving output code receiving step;
The determining unit determines whether the output code matches the generated code using the generated code information stored in the generated code storage unit and the output code information received by the output code receiving unit. a judgment step for judging;
and a determination result transmission step in which the determination result transmission unit transmits determination result information regarding a result of determination by the determination unit to a terminal device. a computer having access to a generated code store in which generated code information relating to the generated code that is or has been generated is to be stored;
an output code receiving unit that receives an image obtained by capturing the output code or output code information having the output code extracted from the image, from a capturing device that captures the output code output by the output device that outputs the generated code; ,
a determination unit that determines whether the output code matches the generated code using the generated code information stored in the generated code storage unit and the output code information received by the output code receiving unit; ,
A program for functioning as a determination result transmission unit that transmits determination result information regarding a result of determination by the determination unit to a terminal device.

Images