KR20170048767A - Apparatus for generating barcode using homomorphic encryption and Method thereof - Google Patents

Abstract

An identification code generating terminal using homomorphic encryption according to an embodiment of the present invention includes an input unit for receiving an identification code generation request, a storage unit for storing user information, a communication unit for transmitting the identification code generation request and the user information to a service server, an output unit for displaying a generated identification code, and a control unit for generating the identification code based on encryption information if the encryption information for the generation of the identification code is received from the service server, wherein the encryption information includes information generated based on an encryption result for each of time information for which the generation of the identification code is requested and the user information. Accordingly, the present invention can ensure security by generating the identification code.

Description

[0001] APPARATUS FOR GENERATING IDCODES USING CURRENT-BASED ENCRYPTION AND METHOD THEREOF [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and an apparatus for generating an identification code using the perturbed encryption. More particularly, the present invention relates to a method and apparatus for generating an identification code capable of minimizing the number of times of encryption and decryption using the perturbative encryption.

Identification codes are widely used as user processing information in transactions such as settlement, membership or coupon processing. Particularly, a barcode as a one-dimensional identification code and a QR code (Quick Response code) as a two-dimensional identification code are widely used as an identification code.

Such an identification code is not easy to use but is vulnerable to security. That is, when another user other than the user prints and copies the identification code of the user, or photographs and uses the identification code of the user in the transaction process, the identification code processing device can not determine this. Also, once the identification code is generated, it is not easy to add new information.

In order to solve such a problem, a method of adding different information to the identification code information and encrypting it may be considered.

However, also in this case, since the identification code has a limitation on the length of the information, there is a limit to the scalability of the information. That is, when new information is added to generate an identification code at the time of generating the identification code, the length of the identification code information is also increased due to the added information. In this case, the length of the identification code information may exceed the standard for processing.

Further, even when new information is added to generate an identification code at the time of generating the identification code, the existing information and the added information need to be encrypted together, resulting in an increase in the encryption throughput. Also, even when new information is added in the process of processing the identification code, it is inconvenient to perform the process of decrypting the existing encrypted identification code and then re-encrypting the additional information by adding the additional information.

Furthermore, even if an identification code to which new information is added is used, the integrity of the information is not ensured in the process of transmitting the information through the identification code processing device.

SUMMARY OF THE INVENTION An object of the present invention is to provide an identification code generating apparatus and method capable of ensuring security by generating an identification code based on user information and a current time when an identification code is generated.

More specifically, the present invention is directed to a method and apparatus for encrypting user information of an identification code and current time information in which an identification code is generated, wherein a tapered encryption method can be applied so that a relationship between both is maintained in a transaction Apparatus and method.

According to another aspect of the present invention, there is provided an apparatus and method for maintaining a length of information even when new information is added using a perceptual cryptosystem.

Another object of the present invention is to provide an apparatus and method for preventing encryption of an encrypted object from user information and current time information using a perceptual encryption.

It is another object of the present invention to provide an apparatus and a method for performing only encryption of new added information even when new information is added in the process of processing an identification code.

Another object of the present invention is to provide an apparatus and method for ensuring integrity in an information transmission process of an identification code.

The technical objects of the present invention are not limited to the above-mentioned technical problems, and other technical subjects not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a perceptual code generation terminal comprising an input unit for receiving a request for generating an identification code, a storage unit for storing user information, And a control unit for generating an identification code based on the encryption information when the encryption unit for generating the identification code is received from the service server, Information and information generated based on the encryption result for each of the time information for which the identification code is requested to be generated.

According to another aspect of the present invention, there is provided a method of processing a perceptual-type encrypted identification code performed by an identification code processing terminal, comprising the steps of scanning an identification code, acquiring time information on which the identification code is scanned, Generating second encryption information based on the first encryption information and the encrypted transaction information, and transmitting the transaction information, the scanned time information, and the generated second encryption information to a service server Wherein the step of scanning the identification code comprises processing the first encryption information as the identification code is scanned.

According to another aspect of the present invention, there is provided a business processing method using a perceptual encryption identification code performed by a service server, the method comprising: receiving time information of an ID code, transaction information, and encryption information; Extracting user information on the identification code based on the scanned time information, the transaction information, and the decoding result value; and processing the service based on the user information and the transaction information And transmitting the result of the processing to the identification code processing terminal. The encryption information is generated based on the first encryption information generated based on the encryption result of the user information and the encryption information of the time information requested to generate the identification code, and the encryption result of the transaction information Information.

According to another aspect of the present invention, there is provided a method of releasing a secure state of an object, the method comprising: displaying a secured object; receiving a touch input for fingerprint authentication from a user to authenticate the fingerprint of the user; Receiving a scratch touch input for releasing the security state consecutive to the touch input within a predetermined time while the touch input for the fingerprint authentication is maintained; and when the fingerprint of the user is authenticated And displaying the area where the scratch touch input is sensed in an unsecured state.

According to the present invention, security is maximized by generating an identification code based on user information and current time.

Further, according to the present invention, there is an effect that the length of the identification code information can be maintained within a certain range by using the crosstalk type encryption method.

In addition, according to the present invention, there is an effect that the encryption processing amount can be reduced by not encrypting the encrypted information among the user information and the current time information.

In addition, according to the present invention, even if new information is added in the process of processing the identification code, a method of performing encryption only on the added new information can be provided. That is, there is an effect that it is not necessary to perform a process of re-encrypting an existing encrypted identification code by adding additional information after decoding it.

Further, according to the present invention, the integrity of the identification code information can be ensured.

1 is a block diagram of a perceptual-type encrypted identification code system according to an embodiment of the present invention.
2 is a block diagram of an identification code generation terminal according to another embodiment of the present invention.
4A and 4B are diagrams for explaining an identification code scanning function of an identification code processing terminal according to another embodiment of the present invention. It is a flowchart of the method.
5 is a flowchart for explaining a re-encryption method of an identification code generation terminal, which is referred to in some embodiments of the present invention.
Figure 6 is an illustration of a User Interface referenced in some embodiments of the present invention.
Figure 7 is another illustration of a user interface that is referenced in some embodiments of the present invention.
FIG. 8 is a flowchart of a perceptual encryption identification code processing method according to another embodiment.
9 is an exemplary diagram for explaining an identification code process referred to in some embodiments of the present invention.
10 is a flowchart of a task processing method using a perceptual encryption identification code according to another embodiment of the present invention.
Figure 11 is an illustration of identification code information referenced in some embodiments of the invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise. The terminology used herein is for the purpose of illustrating embodiments and is not intended to be limiting of the present invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification.

In the present specification, an identification code refers to a code that is visually displayed by encrypting various information such as a product, a user, and an event. The identification code may include a one-dimensional code such as a bar code, or a two-dimensional code such as a QR code, depending on the representation method. In addition, the identification code may include multidimensional codes of three or more dimensions.

In addition, in the present specification, the term " Homomorphic Encryption " may mean an encryption method in which new information is added to the encrypted information, and then the new information is not decrypted after the encrypted information is decrypted.

Assume that the encryption result for information A is E (A), and the encryption result for information B is E (B). Various encryption methods can be applied to a method of encrypting information A with E (A) and a method of encrypting information B with E (B). In such a case, according to the perceptual encryption scheme referred to in some embodiments of the present invention, the encryption information E (A) * E (B) = E (A * B).

On the other hand, the case where the user who intends to perform the encryption knows the encryption result E (A) for the information A in advance will be described in detail as an example. It is assumed that the user adds new information B to the information A to encrypt it. In other words, it is a case of generating E (A * B).

In order to generate E (A * B), according to a general encryption method, it is first required to decrypt E (A) which is the encryption result of information A. When information A is extracted by decryption on E (A), the user next adds information B to extracted information A to generate A * B, and then encrypts A * B. Accordingly, the user can obtain E (A * B).

On the other hand, using the perceptual encryption method according to an embodiment of the present invention, the user does not need to decrypt E (A) in order to obtain E (A * B). That is, after encrypting only information B to generate E (B), the user adds E (B) as the encryption result of information B to E (A) B) can be obtained. Since E (A) * E (B) is equal to E (A * B), the user can reduce the encryption and decryption throughput by using the perceptual encryption scheme rather than the general encryption scheme. That is, the user may not go through a decryption process for E (A), and if encryption is performed only on information B, E (A * B) can be obtained.

In the above example, it is understood that the general encryption method carries out the encryption process for A * B while the perceptual type encryption method carries out the encryption only for the information B, so that the encryption throughput is smaller than the general encryption method. Further, according to the perceptual encryption method, unlike the general encryption method, it is not necessary to perform decryption on E (A).

Meanwhile, the perceptual encryption according to another embodiment of the present invention may mean an encryption scheme that allows other information to be identified using existing information known to the user. According to the perceptual encryption scheme referred to in some embodiments of the present invention, the encryption information E (A) * E (B) is equivalent to E (A * B) as in the case of the perceptual encryption according to the embodiment of the present invention It can have properties. It is assumed that the user intends to obtain desired information B from the encryption information E (A) * E (B).

According to a general encryption method, information B can be obtained by extracting E (B) from encryption information E (A) * E (B) and then decrypting E (B) again to extract information B. In this case, whether or not the user knows the information A in the context of performing the decryption is irrelevant to the process of acquiring the information B. [

According to another embodiment of the present invention, the encryption information E (A) * E (B) is encrypted information E (A * B) when the information A is known in the decryption- , Information B can be obtained by decoding E (A * B). That is, when the encryption information E (A * B) is decrypted, the user can obtain the information A * B, and when the information A * B is divided by the previously known information A, the information B is obtained.

In the above example, the user can identify information B using previously known information A without needing to separately extract E (B).

Hereinafter, the configuration and operation of the perceptual-type encrypted identification code system according to one embodiment of the present invention will be described in detail with reference to FIG. 1 on the basis of the above-described cantilever-type cryptosystem. 1 is a block diagram of a perceptual-type encrypted identification code system according to an embodiment of the present invention.

Referring to FIG. 1, a perceptual-type encrypted identification code system according to an embodiment of the present invention may include an identification code generation terminal 100, an identification code processing terminal 200, and a service server 300. Here, the service server 300 may include an identification code generation server 400 and a task processing server 500. For the sake of convenience of description, the perceptual-type encrypted identification code system will be referred to as a system.

The identification code generation terminal 100 and the identification code processing terminal 200 may include a mobile computing device such as a fixed computing device such as a desktop PC, a notebook, a smart phone, and a tablet PC. The service server 300 may be a server that stores various data provided to the computing device. In addition, the service server 300 may include the aforementioned computing device.

According to an embodiment of the present invention, the identification code generation terminal 100 can generate the identification code itself using the above-described cadmium encryption method. According to another embodiment of the present invention, the ID code generation terminal 100 may request the ID code generation server 400 to generate an ID code.

The user requests the identification code generation terminal 100 to generate an identification code. The ID code generation terminal 100 may request the ID code generation server 400 to generate a perceptual encryption ID code in response to the request. At this time, the identification code generation terminal 100 transmits the user information of the identification code generation terminal 100 to the identification code generation server 400.

In response to this, the identification code generation server 400 transmits the encryption information to the identification code generation terminal 100. Here, the encryption information is information that is generated based on the result of encrypting the user information of the identification code generating terminal 100 and the result of encrypting the time information in which the identification code generating terminal 100 has input the identification code generating request .

The identification code generation terminal 100 may receive the encryption information and generate a perceptual encryption identification code. Also, the identification code generating terminal 100 can display the above-mentioned perceptual type encryption identification code (hereinafter referred to as an identification code). The identification code displayed through the terminal 100 may be processed through the identification code processing terminal 200.

The identification code processing terminal 200 can scan the identification code. Accordingly, the identification code processing terminal 200 can acquire the time information of the identification code. In addition, the identification code processing terminal 200 can identify the encryption information by scanning the identification code.

The encryption information identified by the identification code processing terminal 200 is referred to as first encryption information in order to distinguish it from the encryption information generated by the identification code processing terminal 200. [ The encryption information generated by the identification code processing terminal 200 is referred to as second encryption information in a concept distinguished from the first encryption information.

The identification code processing terminal 200 may encrypt the transaction information obtained by the user of the identification code generating terminal 100. [ The identification code processing terminal 200 can generate the second encryption information based on the first encryption information and the encrypted transaction information.

The ID code processing terminal 200 can transmit a transaction request to the transaction processing server 500 for the transaction. At this time, the identification code processing terminal 200 can transmit the second encryption information to the task processing server 500. The identification code processing terminal 200 may also transmit the time information on which the identification code was scanned and the transaction information to the task processing server 500. [

The task processing server 500 can decrypt the second encryption information received from the identification code processing terminal. The business processing server 500 may obtain the user information on the first encryption information based on the result of decoding the second encryption information, the time at which the received identification code was scanned, and the transaction information.

The task processing server 500 processes tasks based on the user information and the transaction information. Accordingly, the transaction processing server 500 can transmit the result of the transaction to the ID code processing terminal 200. Specific tasks performed by the task processing server 500 will be described later.

A specific method by which the identification code generation terminal 100 generates the identification code and a specific method by which the identification code processing terminal 200 processes the identification code will be described later.

The case where the identification code generation server 400 and the task processing server 500 operate separately has been described above. However, the identification code generation server 400 and the task processing server 500 may be integrated into the service server 300, which is one subject. That is, there is a service provider that provides the specific service related to the generated ID code through the service server 300. The service provider can manage both the identification code generation process and the transaction process using the generated identification code. In this case, the service provider may provide the specific service using the service server 300 in which the identification code generation server 400 and the task processing server 500 are integrated.

Hereinafter, embodiments of the present invention will be described with reference to a case where the service server 300 performs both the transmission of the encryption information for generating the identification code and the business process according to the identification code process.

2 is a block diagram of an identification code generation terminal 100 according to another embodiment of the present invention. 2, the ID code generation terminal 100 may include a communication unit 110, an input unit 120, an output unit 130, a storage unit 140, and a control unit 150.

The communication unit 110 supports the wired / wireless Internet communication of the identification code generation terminal 100 and can exchange various information with the identification code processing terminal 200 and the service server 300. In particular, the communication unit 110 can receive the encryption information from the service server 300. [ The communication unit 110 may also transmit user information to the service server 300. [

The input unit 120 receives various data, commands, and / or information from a user of the identification code generating terminal 100. In particular, the input unit 120 may include various modules for receiving user information. The input unit 120 may receive an identification code generation request from a user. When the output unit 130 to be described later includes a touch sensor for receiving a touch input from a user and is configured as a touch screen, the input unit 120 may be provided as a touch screen. In this case, the input unit 120 may be provided in the identification code generating terminal 100 in a form integrated with the output unit 130. [ The input unit 120 may include any type of input means well known in the art.

The output unit 130 notifies the user of the identification code generating terminal 100 of various data, commands, and / or information. The output unit 130 may include a display unit. The display unit can display various data and the like. In particular, the display unit can display the generated identification code.

According to some embodiments of the present invention, the display unit may include a touch sensor and be configured as a touch screen, in order to recognize a touch input of a user. The output unit 130 may further include output means of any type well known in the art.

The storage unit 140 stores various data, commands, and / or information. The storage unit 140 may store one or more programs for providing the identification code generation method using the perceptual encryption according to the embodiments of the present invention. In particular, the storage unit 140 may store encryption information received from the service server 300, information on transaction results, and the like. Also, the storage unit 140 may store the generated identification code. In particular, the storage unit 140 may store the generated identification code for a preset period of time. For example, if the generated identification code exists in response to the input identification code generation request before receiving the identification code generation request from the user at the current time, the storage unit 140 may store the identification code for a preset period. Here, the predetermined period may be determined by the user or the manufacturer.

The storage unit 140 may temporarily or non-provisionally store data or the like transmitted from an external device. The storage unit 140 may be a nonvolatile memory such as a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electrically Erasable Programmable ROM), a flash memory and the like, a hard disk, a removable disk, And may include any type of well-known computer-readable recording medium.

The control unit 150 controls the overall operation of each configuration of the identification code generating terminal 100. The control unit 150 may be configured to include a CPU (Central Processing Unit), an MPU (Micro Processor Unit), an MCU (Micro Controller Unit), or any type of processor well known in the art. In addition, the control unit 150 may store at least one application or program for executing the method according to the embodiment of the present invention. The functions and operations of the control unit 150 will be described in detail in the following description of embodiments of the present invention.

3A and 3B are exemplary diagrams for explaining an identification code scan function of the identification code processing terminal 200 according to another embodiment of the present invention. The operation of the identification code processing terminal 200 will be described in detail with reference to FIGS. 3A and 3B. FIG. The identification code processing terminal 200 may be the same terminal as the identification code generating terminal 100. In particular, the identification code processing terminal 200 may be a POS (Point Of Sales) terminal.

Referring to FIG. 3A, the identification code processing terminal 200 includes an identification code processing device 210 in an input unit. The identification code generation terminal 100 may display the identification code 301 through the output unit 130. [ The identification code generating terminal 100 may output the identification number information 302 related to the identification code 301 and the time information 302 in which the identification code was generated together with the identification code 301. [ The identification number information 302 may be information for identifying the user with respect to the service to which the service server 300 subscribes. The identification number information 302 may be a card number associated with the identification code 301.

The identification code processing terminal 200 can scan the identification code 301 displayed through the output unit 130 of the identification code generating terminal 100 via the identification code processing apparatus 210. Accordingly, The processing terminal 200 can detect the identification code 301 and acquire the encrypted encryption information in the identification code 301. The identification code processing terminal 200 can also recognize the time when the identification code 301 was scanned Information may be obtained.

3B or the identification code processing terminal 200 may include a camera 220. [ The identification code processing terminal 200 may photograph the identification code 305 via the camera and acquire the identification code information as the identification code 305 is photographed.

Although not shown, the identification code processing terminal 200 can include an input unit, an output unit, a storage unit, and a control unit in the same manner as the identification code generation terminal 100. Each of the components can perform the same function as the component of the ID code generation terminal 100. [

4 is a flowchart of a method of generating a cryptogram identifying code according to another embodiment of the present invention. Referring to FIG. 4, the process of generating the identification code by the identification code generating terminal 100 upon receipt of the encryption information from the service server 300 will be described.

Referring to FIG. 4, the identification code generation terminal 100 may receive an identification code generation request from a user. The control unit 150 receives the identification code generation request (S401), and can detect the user information (S402). At this time, the user information may be information stored in the storage unit 140 in advance. The user information may include user identification information such as a name, a sex, an age, a residence area, and an ID. In addition, the user information may include various kinds of information generated due to a user's transaction activity or service utilization. For example, the user information may include point information for a specific service, coupon information, user rating information, transaction history information, and the like.

The ID code generation terminal 100 may send an ID code generation request to the service server 300. At this time, the identification code generating terminal 100 may transmit the user information to the service server 300 (S403). Or the user information may be stored in the service server 300 in advance.

The control unit 150 may control the user information to be synchronized with the user information on the service server 300 according to a predetermined period. That is, when the user information is changed, the control unit 150 may control the changed information to be transmitted to the service server 300. [ Also, the control unit 150 may control the service server 300 to receive the changed information.

Next, the identification code generating terminal 100 can receive the encryption information from the service server 300 (S404). Here, the encryption information may include information generated based on the encryption result for each of the user information and the time information for which the identification code is requested to be generated.

The control unit 150 can control to generate an identification code based on the received encryption information (S405). In addition, the control unit 150 may control to display the generated identification code (S406).

The generated identification code may be processed by the identification code processing terminal 200 and the generated identification code may be used in the transaction of the user.

The control unit 150 may control the generated identification code to be stored in the storage unit 140 for a preset period of time. This is because, even in receiving the identification code generation request in step S401, if an identification code is not generated as in step S405, an identification code to be used in advance for the transaction progress may be required.

For example, there may be a case where the communication between the service server 300 and the ID code generation terminal 100 is not smooth and the ID code generation request is not transmitted. There may be a case where the generated encryption information is not transmitted from the service server 300 to the identification code generating terminal 100. [ Or even if the identification code generation request is transmitted, the service server 300 may fail to generate the encryption information.

In such a case, the identification code generation terminal 100 fails to generate the identification code even in the identification code generation request. Even if the identification code is not generated, the user can use the stored identification code for the transaction when the user has to proceed with the transaction. The stored identification code may be an identification code generated for a transaction that occurred prior to a transaction in progress by the user.

For example, it is assumed that the user performs the first transaction two hours ago using the ID code generation terminal 100 and then performs the second transaction at the present time. For the second transaction, the user can select the stored identification code when the identification code generating terminal 100 fails to generate the identification code even though the user has input the identification code generating request into the identification code generating terminal 100. [ For the selection of the user, the control unit 150 may control the display unit 130 to display at least one identification code stored in advance. The user can proceed with the second transaction using the stored identification code.

In this example, the pre-stored at least one identification code may include an identification code generated through the identification code terminal 100 prior to the identification code generation request for the second transaction. In addition, the at least one pre-stored identification code may include an emergency identification code received from the service server 300. That is, the ID code generating terminal 100 may receive the emergency ID code for failing to generate the ID code from the service server 300 periodically or non-periodically.

The case where the ID code generation has failed at all times has been described. Next, the case where the identification code generation is successful will be described.

In this example, when the user inputs an identification code generation request to the ID code generation terminal 100 for the second transaction, the controller 150 receives the identification code generation request (S401), and then, in steps S402 to S (S406) can be repeatedly performed.

At this time, it is assumed that an identification code is generated by an identification code generation request for a first transaction, and an identification code generation request for a second transaction is input to the ID code generation terminal 100 within a predetermined time range . At this time, even though the service server 300 receives the identification code generation request from the identification code generation terminal 100, it may not transmit the encryption information to the identification code generation terminal 100. Accordingly, the control unit 150 can control not to generate the ID code even if the ID code generation request for the second transaction is received.

That is, if the encryption information is not received, the control unit 150 can determine that there is no change to the time information, which is an element of the encryption information. The control unit 150 may determine the identification code generated by the identification code generation request for the first transaction to be the identification code for the second transaction. In this case, even if a request for generating an ID code for a second transaction is input from the user to the ID code generation terminal 100, the controller 150 controls the ID code generated by the ID code generation request for the first transaction to be displayed can do. The predetermined time range may be determined by a user or a manufacturer.

Next, a case will be described in which an identification code is generated by a request for generating an identification code for a first transaction, and an identification code generation request for a second transaction is input to the identification code generation terminal 100 out of a preset time range . That is, the time information for which the identification code generation is requested is changed.

At this time, when the identification code generation request is transmitted from the identification code generation terminal 100, the service server 300 can identify the identification code generation request that is out of the preset time range. The service identification code generation terminal 100 can receive the encryption information reflecting the changed time information from the server 300. [ Specifically, the service server 300 can proceed with the new encryption for the changed time information. At this time, if there is no change in the user information, the service server 300 can generate the encryption information based on the encryption result for the existing user information and the encryption result for the changed time information. Accordingly, the control unit 150 can control the generation of the identification code based on the encryption information reflecting the changed time information.

Meanwhile, in the above example, the user information may be changed according to the first transaction. That is, the purchase history of the user is changed in at least one of the service server 300 and the identification code generating terminal 100 according to the first transaction. Alternatively, changes to the user rating, coupon information, point information, and the like may be included in the user information change.

Alternatively, a change in user identification information due to an increase in the age of the user, an address transfer, or the like may be included in the user information change.

When the user information is changed, the ID code generating terminal 100 can transmit the change to the service server 300, and the service server 300 can also transmit the change information to the ID code generating terminal 100 . In particular, the control unit 150 can receive the encryption information reflecting the changed user information from the service server 300. Specifically, the service server 300 can perform new encryption for the changed user information. At this time, the change of the user information may be dependent on the change of the time information. That is, the user information change does not occur without changing the time information. The service server 300 may generate the encryption information based on the encryption result for the changed user information and the encryption result for the changed time information.

In addition, the control unit 150 may control the generation of the identification code based on the encryption information reflecting the changed user information.

Meanwhile, according to the perceptual encryption scheme referred to in some embodiments of the present invention, the above-described encryption information may include a result of the encryption of the user information and a result of the multiplication of the encryption result of the time information.

For example, if the user information is information A and the time information is information T, the encryption result of information A may be E (A) and the encryption result of information A may be E (T). At this time, the encryption information (first encryption information) may be E (A) * E (T).

The data size value of the encryption information E (A) * E (T) may be smaller than or equal to a predetermined size value of the public key. For example, assume that the size of the public key is preset to 256 bytes. It is also assumed that the size of the information A is 100 bytes and the size of the information T is 200 bytes. In such a case, the data size value of E (A) * E (T), which is a value obtained by encrypting and multiplying information A and information T, respectively, can be 256 bytes or less.

On the other hand, when the perturbed cipher system is not used, if the information T is added to the information A, the length of the data increases. When encrypting the thus-increased data, the length of the encrypted information may exceed the size of the predetermined public key. For example, when the size of the information A is 100 bytes and the size of the information T is 200 bytes, the data size value of E (A * T) may be 512 bytes exceeding 256 bytes.

According to another embodiment of the present invention, the encryption information described above may include a result of encryption for user information and a result of addition of encryption results for the time information. In this case, the encryption information may be, for example, encryption information E (A) + E (T).

5 is a flowchart for explaining a re-encryption method of an identification code generation terminal, which is referred to in some embodiments of the present invention. In particular, with reference to FIG. 5, a description will be given of a process in which the identification code generating terminal 100 independently generates an identification code. That is, the ID code generation terminal 100 generates the identification code without receiving the encryption information from the service server 300. [ Hereinafter, the description of the contents overlapping with those described in FIG. 4 will be omitted.

Referring to FIG. 5, the identification code generation terminal 100 may receive an identification code generation request from a user. The control unit 150 receives the identification code generation request (S501), and can detect the user information. In addition, the control unit 150 can encrypt the detected user information (S502). The control unit 150 may encrypt the current time information in which the identification code generation request is received (S503). The controller 150 may generate the encryption information based on the result of encrypting the user information in step S502 and the result of encrypting the current time information in step S503. The control unit 150 can generate an identification code based on the generated encryption information. In addition, the controller 150 may control the display of the generated identification code.

After generating the identification code, the control unit 150 may determine whether a new identification code generation request is input (S505). If a new identification code generation request is detected, the controller 150 may determine whether the encrypted current time information has been changed in step S502 (S506). If there is a change in the current time information, the controller 150 may control the current time information changed in step S503 to be encrypted.

Alternatively, if there is a change in the current time information, the control unit 150 may determine whether the user information has been changed (S507). If there is a change in the user information, the control unit 150 can control so that the changed user information is encrypted in step S502.

Figure 6 is an illustration of a User Interface referenced in some embodiments of the present invention. In Fig. 6, a bar code is shown as an example of an identification code. Referring to FIG. 6, the controller 150 may control the various user interfaces 600 and 610 to be displayed through the output unit 130.

The user interface 600 is a display example for the generated identification code. The control unit 150 may control the display of the generated identification code 601, the time information 603 requested to generate the identification code, and various menu information 605 through the user interface 600. Menu information 605 may include user information 606, 607, and 608. The member information 606 may be a menu for identifying and editing information such as user identification information, points, coupon information, and user class. Further, the card information 607 may be a menu for confirming and editing the payment card information of the user. Or a menu for registering a point card or the like. The purchase history 608 may be a menu for confirming and editing information on the user's past purchase history.

Meanwhile, the stored identification code 609 may be a menu for confirming and editing information on the identification code generated for the transaction performed before the input of the identification code generation request. When the stored identification code 609 menu is selected from the user, the controller 150 controls the user interface 610 to be provided to the user.

The interface 610 may include a predetermined number of pre-stored identification code information 611. It may also include a menu 613 for editing the identification code information 611 and a menu 613 for accessing the identification code information other than the identification code information 611. [

4, if the user inputs an identification code generation request to the identification code generation terminal 100 but the control unit 150 fails to generate the identification code, The user interface 610 can be controlled to be displayed. When the user selects any one of the identification code information 611, the control unit 150 can control to display the selected identification code information. The ID code processing terminal 200 can scan the displayed ID code information, and the user can proceed with the transaction using the ID code information.

Figure 7 is another illustration of a user interface that is referenced in some embodiments of the present invention. In accordance with the progress of the transaction, the control unit 150 may control various user interfaces 700 and 710 to be displayed. The user interface 700 may include a notification 701 of the purchase processing result in accordance with the progress of the transaction. And link information 702 for accessing detailed information on the announcement 701 purchase result. In addition, the interface 700 may include a point notification 703 according to the transaction progress. The point notification 703 may include link information 704 for detailed information access to the point.

The user interface 710 may include a notification 711 on the result of the member rating update according to the transaction progress. And link information 712 for accessing detailed information on the known (711) member information.

On the other hand, the interface 710 may include an interface 713 that provides an identification code update.

4 and 5, it has been described that a new identification code can be generated if there is a change in at least one of the user information, which is the element of the encryption information, and the time information in which the identification code generation request is input. The control unit 150 may control the interface 713 to be displayed when there is a change in at least one of the user information and the input time information of the ID code generation request. Alternatively, the control unit 150 may control the interface 713 to be displayed according to the user's selection.

For example, the user may select a menu that causes the interface 713 to be displayed while waiting for a transaction at the store. Accordingly, when the selection of the link 714 supporting the identification code update is detected, the control unit 150 can control the identification code update to proceed. If there is no change in the user information, the control unit 150 may control the identification code update to be performed based on the change of the time information. Accordingly, the identification code generation terminal 100 can transmit a new identification code generation request to the service server 300. [ The service server 300 can newly encrypt the time information in which the new identification code generation request is input and generate the encryption information based on the encrypted time information. The identification code generation terminal 100 can receive this encryption information and generate a new identification code.

The operation of the identification code generation terminal 100 and the method of generating the trivial encryption identification code of the identification code generation terminal 100 have been mainly described above. Hereinafter, the operation of the identification code processing terminal 200 and the method of processing the perceptual type encryption identification code will be described with reference to Figs. 8 and 9. Fig. The description of the contents overlapping with those described above will be omitted.

FIG. 8 is a flowchart of a perceptual encryption identification code processing method according to another embodiment. Referring to FIG. 8, the identification code processing terminal 200 may scan the identification code displayed on the output 130 of the identification code generating terminal 100 (S801). The identification code processing terminal 200 can identify the first encryption information by scanning the identification code. For example, when the first encryption information is E (A) * E (T), the identification code processing terminal 200 can identify E (A) * E (T) according to the identification code scan.

At this time, the identification code processing terminal 200 may obtain the time information on which the identification code is scanned (S802). The identification code processing terminal 200 can encrypt the transaction information (S803). The transaction information is information on a transaction performed by the user of the ID code generating terminal 100. For example, the transaction information may include information such as a purchased product, a place of purchase, a purchase time, a price of the product, a payment method, and card information used in the transaction. The purchase processing terminal 200 can perform encryption of the transaction information at the time of the transaction. Alternatively, encryption of the transaction information may be performed before either step S802 or step S801.

Subsequently, the identification code processing terminal 200 can generate the second encryption information based on the first encryption information and the encrypted transaction information (S804). The identification code processing terminal 200 can transmit the generated second encryption information to the service server 300 (S805). At this time, the identification code processing terminal 200 may transmit the transaction information and the scanned time information together with the second encryption information. The transaction information and the scanned time information may be unencrypted information.

Here, the second encryption information may include the result of the multiplication of the first encryption information and the encryption result for the transaction information. In this example, it is assumed that the first encryption information is E (A) * E (T) and the transaction information is M. At this time, the encryption information for the transaction information is E (M). Accordingly, the second encryption information may include E (A) * E (T) * E (M).

According to another embodiment of the present invention, the first encryption information may include an encryption result for the user information and an addition result of the encryption result for the time information. That is, the first encryption information may be encryption information E (A) + E (T), for example. In this case, the second encryption information may include the first encryption information and the addition result of the encryption result to the transaction information. For example, the second encryption information may be encryption information E (A) + E (T) + E (M), for example.

9 is an exemplary diagram for explaining an identification code process referred to in some embodiments of the present invention. In Fig. 9, a bar code is shown as an example of an identification code. 9, the identification code processing terminal 200 displays the user interfaces 900 and 910 for the user of the identification code processing terminal 200 through the output unit 220 of the identification code processing terminal 200 can do.

The user interface 900 is an example of transaction information. The user interface 900 may include scanned identification code information 901, user information, and transaction information 902. The transaction information may include time information on which the identification code was scanned. In addition, the user interface 900 may include information 903 about a business process state using the second encryption information after the second encryption information is transmitted to the service server 300 in step S805. When the service processing is completed in the service server 300, the ID processing terminal 200 can receive the task completion information. Upon receiving the task completion information, the identification code processing terminal 200 may display a screen such as the user interface 910. [

8 and 9 mainly describe the operation of the identification code processing terminal 200 and the method of processing the perceptual type encryption identification code. Below. With reference to FIG. 10, a description will be given of the operation of the service server 300 and the business processing method using the perturbed encryption identification code. The description of the contents overlapping with those described above will be omitted.

10 is a flowchart of a task processing method using a perceptual encryption identification code according to another embodiment of the present invention. 10, the service server 300 can receive the time information T1, the transaction information M, and the encryption information of which the identification code has been scanned from the identification code processing terminal 200 (S1001). Here, the encryption information is the second encryption information described in FIG. That is, for example, the encryption information may be E (A) * E (T) * E (M).

The service server 300 can decrypt the encryption information E (A) * E (T) * E (M) (S1002). E (A) * E (T) * E (M) = E (A * T * M) according to the perceptual encryption method according to an embodiment of the present invention. Therefore, when the encryption information E (A) * E (T) * E (M) is decrypted, the service server 300 can obtain the value of A * T * M.

The service server 300 may extract the user information A for the identification code based on the scanned time information T1, the transaction information M and the decryption result value A * T * M S1003). Here, the time information T1 in which the identification code is scanned means time information in which the identification code processing terminal 200 scans the identification code generated by the identification code generation terminal 100. [ In this case, the time information T1 is different from the time information T reflected in the encryption information E (A) * E (T) * E (M) in the above example. The time information T reflected in the encryption information indicates a time when a request for generating an identification code is input from the user through the identification code generating terminal 100.

In this case, according to an embodiment of the present invention, the service server 300 may determine the time information T 1 as time information T.

For example, it is assumed that the time information T has a time difference of 5 seconds or less from the time information T1. This is the case where the user inputs an identification code generation request to the identification code generation terminal 100 immediately before purchase and the generated identification code information is scanned through the identification code processing terminal 200 within 5 seconds.

In this example, the relationship of time information (T1) = time information (T) + 5 seconds is established. At this time, the service server 300 can recognize the time information T 1 as time information T.

Accordingly, the service server 300 divides the decoded result value A * T * M by using the scanned time information T and the transaction information M, Can be extracted.

Meanwhile, in another embodiment of the present invention, when the encryption information is E (A) + E (T) + E (M), the decryption result of the encryption information may be (A + T + M). At this time, the service server 300 can extract the user information A by performing the subtraction processing using the scanned time information T and the transaction information M.

The service server 300 can process the service based on the extracted user information A and the transaction information M in step S904. And a settlement service corresponding to the transaction information M. The settlement service may be a service providing service,

For example, the service server 300 may determine whether the user's rating, point information, and the like have been changed based on the user information and the transaction information. That is, the service server 300 can determine whether or not the user on the user information changes the user information due to the transaction performed by the user. The service server 300 can perform user information update when a user information change is detected. The service server 300 may transmit the updated user information to the ID code generating terminal 100. [

In addition, when the transaction information includes payment information for a specific product or service, the service server 300 can detect the transaction information and perform the settlement service. The service server 300 can perform the payment service using the card information and the payment method used in the transaction included in the transaction information.

The service server 300 may transmit the task processing result to the identification code processing terminal 200 (S905). In addition, the service server 300 may transmit the result of the business process to the ID code generation terminal 100. [

Meanwhile, according to another embodiment of the present invention, in step S1003, the service server 300 may inquire whether there is a pre-processed job corresponding to the received encryption information (second encryption information). ID Code Generation When the terminal 100 fails to generate the ID code, it is assumed that the user has selected any one of the ID codes 611 previously stored in FIG. 6 for the current transaction.

At this time, the service server 300 may store the business process information at the time of generation of the one of the identification codes. That is, it is a case that the service processing server 300 stores business process information in the past when a user performs a transaction using one of the above-mentioned identification codes. The service server 300 may store the task processing and time information.

As a result of the inquiry, if the service server 300 has a history in which the identification code selected for the current transaction is used in past business processing, the service server 300 uses the selected identification code in the past for user transactions Identification code can be identified by. That is, the service server 100 can determine that the identification code is not an identification code normally generated from the identification code generating terminal 100. [

The service server 300 may identify the time information for which the identification code is requested based on the inquired service. The service server 300 may extract user information based on the decoded result of the identified time information, current transaction information, and second encryption information. At this time, the user information is information reflected in the identification code generated for the past transaction. Therefore, the processing result of the inquired pre-processed task is not reflected. At this time, it is assumed that the point information, the user class information, and the like can be changed when the user information is changed as a result of the pre-processed work, for example, when the result of the task processed in the past is reflected. In such a case, the service server 100 may update the user information by reflecting the result of the pre-processed service.

11 is a structure of the above-described cryptographic encryption identification code information. 11, in order to generate identification code information referred to in some embodiments of the present invention, user information 1110 is encrypted 1120 and time information 1130 is encrypted separately from user information 1110 (1130). That is, encryption is performed individually for the information, so that the encryption speed is faster than when the time information 1130 is added to the user information 1110 to perform encryption. When the time information 1130 is added to the user information 1110, the length of information to be encrypted becomes longer.

Further, since the identification code information 1160 is generated by multiplying the individual encryption result by the individual encryption result (1150), if the division processing is performed based on the previously acquired information after performing the later decoding, The desired information can be easily obtained without complicated calculations.

The identification code information 1160 is transmitted to the service server 300 without being decoded by the identification code processing terminal 200. [ Therefore, the encryption 1120 for the user information 1110 and the encryption 1140 for the time information 1130 are not decoded to the service server 300. Even if transaction information is added in the identification code processing terminal 200, the decoding process is not performed. The identification code information 1160 is finally decoded by the service server 300. The value for each piece of information reflected in the identification code information 1160 is also finally obtained by the service server 300, so that the identification code information 1160 generated by the identification code generating terminal 100 is verified for integrity.

The methods according to embodiments of the present invention described above with reference to the accompanying drawings can be performed by the execution of a computer program embodied in computer readable code. The computer program may be transmitted from a first computing device to a second computing device via a network, such as the Internet, and installed in the second computing device, thereby enabling it to be used in the second computing device. The first computing device and the second computing device all include mobile computing devices such as a server device, a fixed computing device such as a desktop PC, a notebook, a smart phone, and a tablet PC.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, You will understand. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

Claims (17)

An input unit for receiving a request for generating an identification code;
A storage unit for storing user information;
A communication unit for transmitting the identification code generation request and the user information to a service server;
An output unit for displaying the generated identification code; And
And a control unit for generating an identification code based on the encryption information when encryption information for generating an identification code is received from the service server,
Wherein the encryption information includes information generated based on an encryption result for each of the user information and the time information for which the identification code is requested to be generated,
A peer - to - peer encryption identification code generation terminal. The apparatus of claim 1,
Receiving the encryption information reflecting the changed time information from the service server when the time information is changed and controlling the generation of the identification code based on the encryption information reflecting the changed time information,
A peer - to - peer encryption identification code generation terminal. The apparatus of claim 1,
Receiving the encrypted information reflecting the changed user information from the service server when the user information is changed and controlling the generation of the identification code based on the encrypted information reflecting the changed user information,
A peer - to - peer encryption identification code generation terminal. The apparatus of claim 1,
And controlling the generated identification code to be stored on the storage unit for a predetermined period of time,
A peer - to - peer encryption identification code generation terminal. The apparatus of claim 1,
If at least one identification code stored in advance is displayed, if encryption information for generating the identification code is not received from the service server,
Wherein the pre-stored identification code includes an identification code generated before the identification code generation request,
A peer - to - peer encryption identification code generation terminal. The information processing apparatus according to claim 1,
The encryption result for the user information, and the encryption result for the time information.
A peer - to - peer encryption identification code generation terminal. The information processing apparatus according to claim 1,
The encryption result for the user information, and the addition result of the encryption result for the time information.
A peer - to - peer encryption identification code generation terminal. 8. The method of claim 6 or 7, wherein the data size value of the encryption information is at least one of &
And the encryption key is smaller than or equal to a size of a preset public key,
A peer - to - peer encryption identification code generation terminal. An identification code processing method performed by an identification code processing terminal,
Scanning an identification code;
Obtaining the scanned time information by the identification code;
Encrypting the entered transaction information;
Generating second encryption information based on the first encryption information and the encrypted transaction information; And
And transmitting the transaction information, the scanned time information, and the generated second encryption information to a service server,
Wherein the step of scanning the identification code comprises:
And processing the first encryption information by scanning the identification code.
A method for processing a perturbed encryption identification code. The information processing apparatus according to claim 9,
Which is information generated based on an encryption result of user information of an ID code generation terminal and an encryption result of time information on which the ID code generation is requested,
A method for processing a perturbed encryption identification code. 10. The information processing apparatus according to claim 9,
And a result of the multiplication of the first encryption information and the encryption result for the transaction information,
A method for processing a perturbed encryption identification code. 10. The information processing apparatus according to claim 9,
The first encryption information, and the addition result of the encryption result for the transaction information,
A method for processing a perturbed encryption identification code. 1. A business processing method performed by a service server,
Receiving the scanned time information, transaction information, and encryption information of the identification code;
Decrypting the encryption information;
Extracting user information on the identification code based on the scanned time information, the transaction information, and the decoded result value;
Processing the business based on the user information and the transaction information; And
And transmitting the result of the processing to the identification code processing terminal,
The encryption information is information generated based on the first encryption information generated based on the encryption result for the user information and the encryption information for the time information requested to generate the identification code, and the encryption result for the transaction information ,
A method of processing work using a perturbed encryption identification code. 14. The method of claim 13, wherein extracting the user information comprises:
And determining the scanned time information as the requested time information for generating the identification code.
A method of processing work using a perturbed encryption identification code. 14. The method of claim 13,
The step of extracting the user information comprises:
Inquiring whether there is a pre-processed job corresponding to the received encryption information;
When the pre-processed task is inquired, identifying time information for which the identification code generation is requested based on the inquired task; And
And extracting the user information based on the identified time information, the transaction information, and the decoded result value.
A method of processing work using a perturbed encryption identification code. 16. The method of claim 15,
Extracting the user information based on the processed time information,
And updating the extracted user information based on the processed time information to reflect the result of the pre-processed task.
A method of processing work using a perturbed encryption identification code. 16. The method of claim 15,
And a payment service corresponding to the transaction information when the change of the user information is processed.
A method of processing work using a perturbed encryption identification code.

Images