KR20200145176A - Method, computer program and apparatus for classifiying and processing quick response codes - Google Patents

Abstract

Provided are a method for classifying and processing QR codes, a computer program, and a device thereof. The method for classifying and processing QR codes is a method performed by a computer. The method comprises the steps of: scanning a QR code to obtain a data bit string; parsing the data bit string based on a pre-stored syntax database; determining a service type corresponding to the QR code among a plurality of service types according to the parsing result; and processing a job corresponding to the QR code and the service type.

Description

How to classify and process QR codes, computer programs and devices {METHOD, COMPUTER PROGRAM AND APPARATUS FOR CLASSIFIYING AND PROCESSING QUICK RESPONSE CODES}

The present invention relates to a method, a computer program, and a device for classifying and processing a QR code, and more particularly, to a method, a computer program, and a device capable of scanning and classifying various types of QR codes and performing corresponding processing. .

The QR code (Quick Response Code) is a code system that can record information using an irregular black and white grid pattern. Unlike a one-dimensional barcode, a QR code is a matrix-type two-dimensional composition that utilizes the width and length. Due to this, the QR code has the advantage of storing more numbers and characters, and reading recorded data through scanning using a camera provided in a mobile device without a special reader device. Therefore, QR codes are widely used both offline and online as a means of providing advertisements and information in various fields.

In general, a QR code is composed of a cell forming a black and white grid pattern, a position detection pattern, a timing pattern, format information, version information, an alignment pattern, and a blank space. It is possible to generate QR codes of various designs including these basic components. Meanwhile, QR codes are standardized in national or international standards, and anyone can use the specifications with confidence.

The way QR codes store data is the same as barcodes. Depending on whether the'checkerboard pattern' in the data area is black or white, it is divided into '0' and '1', which are expressed as computer binary numbers, and stored as a bit string.

Recently, many companies are applying QR codes as part of the simple payment system. The payment system using the QR code is as follows. The user inputs and stores payment information in advance through an application on the user terminal. The user displays a QR code on the user terminal through the application or the like in a situation where payment is required. A scanner equipped with an affiliate store scans the QR code to obtain recorded payment information and proceeds with payment.

Currently, there are a wide variety of financial companies and card companies that provide QR codes as payment methods, and each company's QR code can be scanned only through a corresponding QR code scanner. That is, in the case of scanning a QR code with a QR code scanner, the phrase recorded in the QR code cannot be analyzed even if formal image capturing is performed.

On the other hand, as QR codes are used in various fields, there are frequent cases of victims of illegal activities using QR codes. For example, a phishing scam that disguises the QR code as being transmitted from a financial institution, etc., a pharming scam that steals personal information by misrecognizing it as a real site, and memory hacking, etc. Is also used.

Registered Patent Publication No. 10-1450013, 2014.10.06

The problem to be solved by the present invention is a method of scanning and classifying a QR code for QR codes provided by various service providers according to the origin of the QR code generation and processing corresponding tasks, and a computer It is to provide programs and general purpose devices.

In addition, the problem to be solved by the present invention is to provide a method, a computer program and a device that can be protected from malicious attacks such as malicious QR codes and forged QR codes that may occur when using QR codes.

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems that are not mentioned will be clearly understood by those skilled in the art from the following description.

A method of classifying and processing a QR code according to an aspect of the present invention for solving the above-described problem is a method performed by a computer, comprising the steps of obtaining a data bit string by scanning a QR code, in a pre-stored syntax database Analyzing the syntax of the data bit string based on the parsing result, determining a service type corresponding to the QR code from among a plurality of service types according to the parsing result, and processing the QR code and a task corresponding to the service type Includes steps.

A computer program for classifying and processing a QR code according to another aspect of the present invention for solving the above-described problem is combined with a computer as hardware to execute a method of classifying and processing the aforementioned QR code, and computer-readable recording It is stored on the medium.

An apparatus for classifying and processing a QR code according to another aspect of the present invention for solving the above-described problem includes a data management unit for storing and managing a syntax database, a scanning unit for scanning a QR code, and a communication unit for transmitting and receiving a data bit string. , A syntax analysis unit that analyzes the syntax of the data bit string based on the syntax database, a service classification unit that determines a service type corresponding to the QR code among a plurality of service types according to the syntax analysis result, and the QR code and And a processing unit that processes a job corresponding to the service type.

Other specific details of the present invention are included in the detailed description and drawings.

According to the present invention, even a QR code having a different origin can be scanned through one device and a job corresponding to the information recorded in the QR code can be processed. In other words, it is not necessary to have a QR code scanner corresponding to the QR code generation subject. Accordingly, a service user using a QR code can use a service using a QR code anywhere, not only at a designated affiliated store, but also anywhere equipped with equipment that can scan a QR code.

In addition, according to the present invention, since the scanned QR code is filtered, it can be protected from forgery QR and malicious attacks such as phishing, pharming, and memory hacking. Therefore, it is possible to more safely use services such as a payment system using a QR code.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a block diagram schematically showing the configuration of a system for classifying and analyzing a QR code according to an embodiment of the present invention.
2 is a block diagram of a processor terminal according to an embodiment of the present invention.
3 is a flowchart schematically showing a process of a method of classifying and analyzing a QR code according to an embodiment of the present invention.
4 is a detailed flowchart illustrating a step of analyzing a syntax of a data bit string according to another embodiment of the present invention.
5 is a detailed flowchart illustrating a step of filtering a data bit stream according to another embodiment of the present invention.
6 is a conceptual diagram schematically illustrating a process of classifying and processing a QR code by a processor terminal according to an embodiment of the present invention.
7 is an exemplary diagram illustrating a syntax information table for a service identifier stored in a syntax database according to an embodiment of the present invention.
8 is a flowchart schematically illustrating a method of classifying and processing a QR code using a two-way QR code according to an embodiment of the present invention.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms, only the present embodiments are intended to complete the disclosure of the present invention, It is provided to fully inform the technician of the scope of the present invention, and the present invention is only defined by the scope of the claims.

The terms used in the present specification are for describing exemplary embodiments and are not intended to limit the present invention. In this specification, the singular form also includes the plural form unless specifically stated in the phrase. As used in the specification, “comprises” and/or “comprising” do not exclude the presence or addition of one or more other elements other than the mentioned elements. Throughout the specification, the same reference numerals refer to the same elements, and “and/or” includes each and all combinations of one or more of the mentioned elements. Although "first", "second", and the like are used to describe various elements, it goes without saying that these elements are not limited by these terms. These terms are only used to distinguish one component from another component. Therefore, it goes without saying that the first component mentioned below may be the second component within the technical idea of the present invention.

In the present specification, "user terminal" refers to an electronic device capable of displaying a QR code and transmitting and receiving information. For example, the user terminal may be a mobile device such as a smart phone, a tablet, or a personal digital assistant (PDA), but is not limited thereto.

In the present specification, the term "processor terminal" refers to an electronic device that is provided in an affiliated store so that a clerk of the affiliated store can scan a QR code to obtain information and process a corresponding task. As a specific example, there is a device such as a QR code scanner, but is not limited thereto. Like a user terminal, a smartphone and a tablet are also included. That is, it includes any electronic device capable of scanning a QR code through image capturing.

In the present specification, "affiliated store" refers to a store, store, or unmanned device that is affiliated with a company that provides a service associated with a specific QR code.

In this specification, "service server" refers to a server operated and managed by a company that provides a service linked to a QR code.

In the present specification, "Data Bit String" refers to a shape in which bits representing data as 0 or 1 are connected and arranged to indicate special information.

In this specification, "syntax" refers to the structure of the data bit stream and rules governing the structure.

In the present specification, "syntax database" means a set of data for the phrase. In one embodiment, the syntax database is pre-stored in the processor terminal 20, and the processor terminal 20 communicates with the service server 30 to update the syntax database periodically or in real time to maintain the latest information.

In this specification, "abnormal QR code" means a QR code excluding a normal QR code. For example, there are forged and altered QR codes and malicious QR codes for the purpose of phishing, pharming, and memory hacking. However, the present invention is not limited thereto, and all QR codes in which information that may cause damage to a user or a processor is recorded are included in the category of abnormal QR codes.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used as meanings that can be commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not interpreted ideally or excessively unless explicitly defined specifically.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically showing the configuration of a system for classifying and analyzing a QR code according to an embodiment of the present invention.

Referring to FIG. 1, a system for classifying and analyzing a QR code of the present invention includes a user terminal 10, a processor terminal 20, and a service server 30.

The user terminal 10 is an electronic device provided by a user requesting a service. The user terminal 10 has a display capable of displaying a QR code, and serves to display the generated QR code on the display so that the processor terminal 20 can scan the QR code.

The user terminal 10 generates and displays a QR code through software such as an embedded or installed application. The QR code generated by the user terminal 10 records user information and service information requested by the user, but is not limited thereto, and one or more arbitrary pieces of information necessary for service provision may be included.

For example, when a user uses a payment service using a QR code, an application of a company providing a corresponding payment system is embedded or installed in the user terminal 10. The user may run the application on the user terminal 10 to access a screen for payment to generate and display a QR code. The generated QR code may include information on user information, card number, bank information of the linked account, account number of the linked account, and balance of the linked account.

The processor terminal 20 is a device capable of obtaining recorded information by scanning a QR code provided at an affiliated store.

The processor terminal 20 serves to scan a QR code, obtain and analyze a recorded data bit string, determine a service type and a service identifier, and process a corresponding task. A detailed description will be given later with reference to FIG. 2.

The service server 30 is a server operated and managed by a service providing company. The service server 30 serves to receive service request information from the processor terminal 20 and provide a corresponding service or process a task.

According to an embodiment of the present invention, the service server 30 processes a task corresponding to the service to provide a corresponding service to the user, and transmits only the processing information to the processor terminal 20. Alternatively, the service server 30 may determine whether to provide the requested service and transmit it to the processor terminal 20, and the processor terminal 20 may directly provide a corresponding service to the user.

Meanwhile, unlike shown in FIG. 1, the service server 30 may be individually constructed for each service provider and connected to the processor terminal 20. That is, in FIG. 1, for convenience, only one service server 30 is connected to the processor terminal 20, but a plurality of service servers 30 may be connected to the processor terminal 20. In addition, in some embodiments, one service server 30 rather than a plurality of service servers 30 may be integrated and connected to the processor terminal 20 in relation to two or more services.

The management entity of the service server 30 is each service provider. However, the present invention is not limited thereto, and a service provider providing a processor terminal and system may be a management subject of the service server 30. That is, the management entity of the service server 30 may also manage the processor terminal and the system.

2 is a block diagram of a processor terminal 20 according to an embodiment of the present invention.

Referring to FIG. 2, the processor terminal 20 includes a data management unit 21, a scan unit 22, a communication unit 23, a syntax analysis unit 24, a filter unit 25, a service classification unit 26, and a processing unit. It includes (27).

The data management unit 21 serves to store and manage the syntax database. The syntax database is a set of information on syntax, which is a structure of a data bit string and rules governing the structure. The syntax database may match and store syntax information with a service type and a service identifier.

Meanwhile, the syntax database may be updated periodically or in real time by the processor terminal 20 communicating with the service server 30.

As an embodiment of the present invention, the service type includes a payment system using a QR code, a cryptocurrency related service, and the like, but is not limited thereto, and all services that can be provided using a QR code are included. The syntax database can be managed by grouping syntax information according to service type. That is, it can be managed as a syntax information group for a payment system, a syntax information group for a cryptocurrency-related service, and a syntax information group for other self-identifying services.

Accordingly, the processor terminal 20 analyzes the phrase included in the data bit string obtained by scanning the QR code, and matches the service type matching specific phrase information to identify and classify the type of service provided through the QR code. can do.

In one embodiment of the present invention, the specific syntax information includes an identification code. The data bit string is a concatenation and arrangement of bits that indicate data as 1 or 0. That is, 1 and 0 are connected according to a specific rule. In this case, a code value located at a specific digit that is always included in a specific service type may be used as an identification code.

That is, specific syntax information capable of distinguishing a service type and a service identifier includes information on the number of digits in which the corresponding code is located in the entire data bit string, as well as a code value consisting of an array of 1 or 0.

As a specific example, the identification code for the payment service using the QR code is '1011' and may be characterized in that it is located in the 5th to the 8th digit in the data bit string. In this case, not only '1011' is included in the data bit string, but also exactly the location to be recognized as a corresponding service type or service identifier.

Accordingly, although a data bit string such as '10110010101011' includes '1011', it is located in the 1st to 4th digits and thus the digits do not match, so it will be determined that it does not correspond to a matching service type or service identifier. On the other hand, since a data bit string such as '101010110101011' includes '1011' and matches the location, it can be analyzed that it corresponds to a matching service type or service identifier.

The identification code may be received by the data management unit 21 of the processor terminal 20 from the service server 30 and stored and managed.

The scanning unit 22 is provided with a means for image capturing for scanning a QR code, and serves to scan a QR code displayed on the user terminal 10 to obtain recorded information. The scanning unit 22 obtains a data bit string by scanning the QR code.

The communication unit 23 serves to transmit and receive information with the user terminal 10 and the service server 30.

The communication unit 23 includes a short-range communication device such as Bluetooth, Wi-Fi, and NFC capable of communicating with the user terminal 10 and the service server 30, and a broadband communication device such as 3G and LTE.

The communication unit 23 receives syntax information on a service type and a service identifier from the service server 30.

The communication unit 23 transmits and receives service request information, service provision information, and approval information with the user terminal 10 and the service server 30.

"Service request information" is information about a user requesting a specific service through the user terminal 10.

"Service provision information" is information about the service server 30 checking a service requested from a user and providing a corresponding service.

The "approval information" is information about approval of the user terminal 20 to process a task corresponding to the requested service when using the two-way QR code method. A detailed description of the two-way QR code method will be described later.

The syntax analysis unit 24 analyzes the syntax of the acquired data bit string, and analyzes whether it matches the previously stored syntax information based on the syntax database.

As described above, the data bit string is an arrangement of 1 or 0 to be transmitted in a specific order.

According to an embodiment of the present invention, a data bit string may include a specific code value for identifying a format of a data bit string, a service type, a service identifier, etc. according to a specific rule. That is, the data bit string may include a specific bit string or pattern that can be used for parsing the corresponding data bit string. Meanwhile, the data bit stream may further include information necessary for providing a service.

As a specific example, the format of the data bit string includes a URL format, a standardized data standard, other data standards, and a ciphertext format. The processor terminal 20 may process a task corresponding to the format analyzed by the syntax analysis unit 24. For example, in the case of a URL format including "http://", as information that can be recognized, the same code value (such as an identification value of an address format) is included in the same number of digits in the data bit string. Accordingly, it can be seen that the format of the data bit string acquired based on this corresponds to the URL format.

The syntax analysis unit 24 analyzes the syntax of the data bit sequence to determine the format, service type, and service identifier in the data bit sequence based on the previously stored syntax database. The service classification unit 26 searches for a service type and a service identifier based on the syntax information analyzed by the syntax analysis unit 24. A detailed description of the search process will be given in the description of the service classification unit 26.

The order of parsing the syntax proceeds in the order of analyzing the format of the data bit string, the service type, and the service identifier. However, it is not limited thereto, and it is possible to proceed simultaneously or in a different order.

In an embodiment of the present invention, an RSA encryption system can be used. That is, the present invention can be applied to a QR code in which a data bit string in a ciphertext format is recorded in order to enhance the security of the QR code.

The RSA encryption system is one of the public key encryption systems that encrypt and decrypt using a public key and a private key as a set. When a ciphertext in which specific information is encrypted through specific encryption information is generated and transmitted, information can be obtained by decrypting the encrypted information and generating a plaintext only when there is specific decryption information corresponding thereto. That is, it can be seen that the encryption information and the decryption information are composed of a set.

As a specific example, the data management unit 21 of the processor terminal 20 may receive a private key corresponding to each service identifier from the service server 30 to store and manage a private key database. In addition, the private key database may be updated periodically or in real time.

When the processor terminal 20 scans the QR code in which the encrypted data bit string is recorded using the public key of the service identifier, the data bit string in the form of an encrypted text acquired using the private key of the pre-stored service identifier is plain text. It is possible to decrypt in the form. Through this, damage caused by abnormal QR codes such as forged and altered QR codes can be prevented, and information leakage that may occur in the process of using services using QR codes can be prevented.

The filter unit 25 serves to filter an abnormal QR code such as a malicious QR code or a forged QR code from the acquired data bit string.

As QR codes are widely spread, illegal activities such as fraud using QR codes are emerging as an important issue. Compared to barcodes, QR codes have a greater amount of information that can be recorded and are easy to distribute with malicious codes or harmful website addresses. Therefore, it is very important to have a device that prevents such damage in advance.

In this specification, a malicious QR code refers to a QR code created for the purpose of phishing, pharming, memory hacking, etc., and a forgery QR code modulates a normally generated QR code, or forged in an illegal way. It means the generated QR code. Meanwhile, the abnormal QR code is a term that includes a malicious QR code and a forged QR code. However, it is not limited thereto, and includes all types of illegal QR codes that can damage users and processors for illegal purposes.

In an embodiment of the present invention, the filter unit 25 uses a method similar to packet filtering as a method of filtering malicious QR codes.

Packet Filtering is a filtering technique that restricts the passage of packets having a specific address. Packet filtering is performed based on the sender's IP address, Transmission Control Protocol (TCP), and User Datagram Protocol (UDP) port number.

As a specific example, the data management unit 21 of the processor terminal 20 stores and manages the abnormal QR code database. The abnormal QR code database is a collection of information on a specific bit string or pattern recorded in various types of malicious QR codes. The abnormal QR code database can be updated periodically or in real time. In addition, information about the filtered abnormal QR code (a specific bit string or pattern) that is classified as an abnormal QR code during the filtering process can be additionally stored and managed. Through this, when an abnormal QR code with a filtered history is scanned again, it is possible to respond by filtering effectively.

The filter unit 25 receives the acquired data bit string from the parsing unit 24. The filter unit 25 identifies whether the received data bit string corresponds to an abnormal QR code based on the abnormal QR code database. As a result of the identification, if the acquired data bit string corresponds to an abnormal QR code, the filter unit 25 filters the data bit string by blocking it without transmitting it to the QR code processing unit 27. It is responsible for determining the type of service and service identifier.

The service classification unit 26 determines a service type and a service identifier of the acquired data bit string based on the result of analyzing the data bit string by the syntax analyzer 24 and the syntax database pre-stored in the data management unit 21.

Types of services include, but are not limited to, a payment system using a QR code, a cryptocurrency-related service using a QR code, and a login system using a QR code as other self-identifying services, a payment system, and an ATM service. Includes any service that can use code.

The service identifier includes the service provider that provides the service according to each service type. For example, a payment system using a QR code may have identifiers such as A pay, B payment, C card, and D remittance, and identifiers such as A coin, B currency, and C market as a provider of cryptocurrency related services. There may be.

7 is an exemplary diagram illustrating a syntax information table for a service identifier stored in a syntax database according to an embodiment of the present invention.

Referring to FIG. 7, syntax information matching each service identifier is stored in a syntax database. Accordingly, when the syntax analysis unit 24 analyzes syntax information for determining the service identifier, the service classification unit 26 searches and matches the service ID corresponding to the syntax information.

For example, when the type of service is a payment system using a QR code, the service classification unit 26 may additionally determine an identifier of the service. Referring to FIG. 7, as a service provider providing a payment system using a QR code, Pay A, Pay B, and Pay C are included in the syntax database. The service provider is matched with service identifiers 1, 2, and 3, respectively. In addition, each service identifier is matched with specific syntax information through the syntax information table. The specific syntax information includes information on a specific code value and the number of digits in which the code value is located.

Referring to the example shown in FIG. 7, when the QR code displayed on the user terminal 10 is a payment QR code of a Pay A operator, the matching service identifier is '1'. In addition, a code value of '1000' as unique syntax information will be included in the 5th to 8th digits in the data bit string recorded in the QR code. Therefore, the parsing unit 24 analyzes this and based on the database pre-stored in the data management unit 21, the data bit string recorded in the QR code scanned by the scanning unit 22 corresponds to the QR payment service, and the service The operator can see that it is A Pay.

The processing unit 27 serves to process a job corresponding to the QR code and service type.

In an embodiment of the present invention, the processing unit 27 transmits the data bit string recorded in the QR code to the service server 30. The service server 30 processes a task for a service requested by a user based on the received data bit string. For example, in the case of a payment system using a QR code, information necessary for payment is included in the data bit string, so that the service server 30 approves payment based on the data bit string and transmits the payment information to the payment server. .

In another embodiment of the present invention, the processing unit 27 may directly process a service requested by a user. That is, based on the analyzed service type and service identifier, a task corresponding to the data bit string recorded in the QR code is processed. In the case of a payment system using a QR code, the processing unit 27 of the processor terminal 20 can directly check payment information and proceed with the payment.

3 is a flowchart schematically showing a process of a method of classifying and analyzing a QR code according to an embodiment of the present invention.

3, a method of classifying and processing a QR code includes obtaining a data bit string (S110), analyzing the syntax of the data bit string (S120), filtering the data bit string (S130), and service. It includes a step (S140) of determining the type and a step (S150) of processing the corresponding operation.

In the step of obtaining the data bit string (S110), the scanning unit 22 of the processor terminal 20 scans the QR code displayed on the user terminal 10 to obtain the data bit string recorded in the QR code. Step.

In the step of analyzing the syntax of the data bit string (S120), the syntax analysis unit 24 of the processor terminal 20 analyzes the syntax of the acquired data bit string, and in detail, the format of the data bit string and the service This is the step of analyzing syntax information that can identify the type and service identifier.

The syntax analysis unit 24 analyzes whether a feature of syntax information included in the syntax database pre-stored in the data management unit 21 is included in the data bit string. Features of the syntax information include an arrangement of a specific identification code or the number of digits located in the entire data bit string.

In an embodiment of the present invention, when the RSA encryption system is applied, the parsing unit 24 recognizes that the data bit string recorded in the QR code is a ciphertext format using the RSA encryption system. The syntax analysis unit 24 obtains a data bit string in a plain text format by decoding a data bit string in the form of an encrypted text based on a private key database previously stored in the data management unit 21.

Specifically, the parsing unit 24 searches for a private key matching a public key that encrypted the cipher text in the private key database previously stored in the data management unit 21. If there is a matching private key, the encrypted data bit stream may be decrypted using the corresponding private key.

The private key database may be updated periodically or in real time by communicating with the service server 30.

In the step of filtering the data bit string (S130), the filter unit 25 of the processor terminal 20 receives the data bit string from the parsing unit 24 to identify whether it corresponds to an abnormal QR code, and This is the step of filtering if applicable to the code.

According to an embodiment of the present invention, the step of filtering the data bit string (S130) may be performed after the step of determining the service type (S140). That is, after determining the type of service and the identifier of the service, it is possible to filter by identifying whether the corresponding QR code corresponds to an abnormal QR code. In this case, it is possible to store more detailed data for the abnormal QR code. For example, it is possible to additionally identify and store the frequency of occurrence of an abnormal QR code by service type and service identifier, and the type of abnormal QR code to be found. In addition, based on this additional information, it is possible to store and manage a database of abnormal QR codes to be filtered for each service type and service identifier.

As described above, the data management unit 21 stores and manages the abnormal QR code database. The filter unit 25 identifies whether a bit string or a pattern included in the abnormal QR code database is included in the acquired data bit string, thereby identifying whether it corresponds to an abnormal QR code.

Meanwhile, the abnormal QR code database may be updated periodically or in real time.

A detailed description of the filtering process will be provided later.

In the step of determining the service type (S140), the service classification unit 26 of the processor terminal 20 determines a service type and a service identifier.

The service classification unit 26 determines the service type and service identifier matched with the analyzed syntax information based on the syntax information that the syntax analysis unit 24 analyzes the data bit string and the syntax database pre-stored in the data management unit 21 do.

The processing of the corresponding job (S150) is a step in which the processing unit 27 of the processor terminal 20 processes a job corresponding to the determined service type and service identifier and a QR code.

In an embodiment of the present invention, step S150 includes transmitting the corresponding data bit string to the service server 30 of the corresponding service identifier. The transmitted data bit string contains the user's service request information, and the service server 30 can directly process the corresponding task. However, the present invention is not limited thereto, and the service server 30 may transmit approval information to the processor terminal 20 by determining only whether to approve the service provision, and the processor terminal 20 may directly process the corresponding task.

4 is a detailed flowchart illustrating a step of analyzing a syntax of a data bit string according to another embodiment of the present invention.

4, the step of analyzing the format of the data bit stream (S120) includes analyzing the format of the data bit stream (S121), analyzing the service type (123), and analyzing the service identifier (S125). Includes.

That is, the syntax analysis unit 24 analyzes syntax information capable of distinguishing the format, service type, and service identifier of the data bit string obtained by the scan unit 22. The order of analysis is not limited to the order shown, and may be performed simultaneously or in a different order. It is also possible to analyze only some of the format, service type, and service identifier. As a specific example, when the syntax is standardized for each specific service type, only the format and service type may be analyzed and the service identifier may not be analyzed.

5 is a detailed flowchart illustrating a step of filtering a data bit string according to another embodiment of the present invention.

Referring to FIG. 5, the step of filtering the data bit string (S130) includes the step of receiving the data bit string by the filter unit (S131), and the step of identifying whether it corresponds to an abnormal QR code (S133). In addition, in the case of the abnormal QR code, the step of blocking the data bit string without passing it to the processor (S135) and storing the abnormal QR code information (S137) are further included.

The step of receiving the data bit string (S131) is a step in which the filter unit 25 of the processor terminal 20 receives the data bit string from the parsing unit 24.

The step of identifying whether it corresponds to the abnormal QR code (S133) includes whether the data bit string received by the filter unit 25 of the processor terminal 20 based on the pre-stored abnormal QR code database corresponds to the abnormal QR code. This is the step of determining whether or not.

In an embodiment of the present invention, filtering is performed using a packet filtering technique. The abnormal QR code database is a set of information about forged and altered QR codes, IP addresses for malicious QR codes, and TCP/UDP port numbers. Accordingly, the filter unit 25 determines whether the received data bit stream is transmitted from an IP address, a TCP/UDP port number, etc. stored in the abnormal QR code database.

In the case of transmission from an IP address, TCP/UDP port number, etc. stored in the abnormal QR code database, the filter unit 25 blocks the data bit string without passing it to the service classification unit 26 or the processing unit 27. Filtering is performed (S135). Therefore, by blocking the abnormal QR code for the purpose of malicious attack in advance, the abnormal QR code is not processed. Due to this, damage that may be caused by malicious QR codes and forged QR codes can be prevented.

The storing of the abnormal QR code information (S137) is a step of storing information on the abnormal QR code blocked by being identified as corresponding to the abnormal QR code in steps S133 and S135 in the data management unit 21.

The information on the abnormal QR code includes information on the unique bit string, pattern, IP address, TCP/UDP port number, etc. of the abnormal QR code. However, the present invention is not limited thereto, and any information capable of distinguishing an abnormal QR code or a data bit string recorded in the QR code from another QR code or other data bit string is included.

Through step S137, even if it is exposed again to an abnormal QR code with a history filtered in the past, it can be easily filtered, and there is an effect that the abnormal QR code database can become a richer set of data.

Meanwhile, referring to FIG. 5, when it is identified that the data bit string received in step S133 does not correspond to an abnormal QR code, the service classification unit 26 determines a service type and a service identifier in the same manner as a general process. (S140), the processing unit 27 undergoes a step (S150) of processing a corresponding task.

6 is a conceptual diagram schematically showing a process of classifying and processing a QR code by a processor terminal according to an embodiment of the present invention.

6, the process of classifying and processing a QR code is a service type through a scan unit 22, a syntax analysis unit 24, a filter unit 25, and a service classification unit 26 of the processor terminal 20. And when the service identifier is determined, the process of processing a task corresponding to the service is sequentially performed. However, it is not restricted to this order and each process may be performed simultaneously or may be performed in a different order.

As a specific example, the service classification unit 26 may classify the service type and service identifier before the filter unit 25, and after that, the filter unit 25 may filter the abnormal QR code.

8 is a flowchart schematically showing a method of classifying and processing a QR code using a two-way QR code according to an embodiment of the present invention.

In the present invention, the method of using a two-way QR code is not only to generate a QR code on the user terminal 10 as described above, but to process a corresponding task, and to generate and display a separate QR code on the manager terminal 20 as well. This is the way to do it. This will be described in detail with reference to FIG. 8.

Compared with the one-way QR code method described above, the added steps will be mainly described.

Referring to Figure 8, the method of classifying and processing a QR code using a two-way QR code is compared to the one-way QR code method, before the step (S110) of obtaining a data bit string, the user terminal 10 is a first QR code The step of generating (S101), the step of transmitting the first QR code (S103), further comprising, the step of processing the corresponding operation (S150), the step of transmitting service request information (S151), service provision information The step of transmitting (S152), the step of generating a second QR code by the processor terminal 20 (S153), the step of transmitting the second QR code (S154), the user terminal 10 to the processor terminal 20 Transmitting approval information (S155), the processor terminal 20 transmitting the approval information to the service server 30 (S156), and the service server 30 to process the service (S157).

The step of generating the first QR code by the user terminal 10 (S101) is a step in which the user terminal 10 generates and displays the first QR code to request a service.

In the step of transmitting the first QR code (S103) and the step of acquiring a data bit string (S110), the processor terminal 20 scans the first QR code and stores the data bit string recorded in the first QR code. This is the stage to acquire.

See FIG. 3 for obtaining the data bit string (S110), analyzing the syntax of the data bit string (S120), filtering the data bit string (S130), and determining the service type (S140). Since it is the same as described above, a duplicate detailed description will be omitted.

In the step of transmitting the service request information (S151), the processor terminal 20 transmits the service request information of the user recorded in the first QR code to the service server 30.

The service request information is information about a user requesting a specific service through the user terminal 10.

In the step of transmitting the service provision information (S152), the service server 30 transmits the service provision information corresponding to the service request information to the processor terminal 20.

The service provision information is information about the service server 30 checking a service requested from a user and providing a corresponding service.

In the step of generating the second QR code by the processor terminal 20 (S153), the processing unit 27 of the processor terminal 20 processes the corresponding job, and provides service provision information received from the service server 30. This is the step of creating a second QR code by recording and displaying it so that the user can check it.

In one embodiment of the present invention, information on a provided service is recorded in the second QR code. For example, when the provided service is QR Pay (a payment system using a QR code), information such as user information, payment amount, payment affiliate store, connection account or card may be included.

In the step of transmitting the second QR code (S154), the user terminal 10 scans the second QR code displayed on the processor terminal 20 to obtain service provision information recorded in the second QR code. to be.

The user terminal 10 transmitting the approval information to the processor terminal 20 (S155) and the processor terminal 20 transmitting the approval information to the service server 30 (S156), the user's approval information Is a step of being transmitted from the user terminal 10 to the service server 30 through the processor terminal 20.

The approval information is information on approval of processing a task corresponding to the requested service by the user terminal 20 when using the two-way QR code method.

The user may determine whether to maintain and proceed with the service request based on the service provision information acquired in step S154. In other words, it confirms and approves information on the service to be finally provided. The service can be processed normally only when the user's approval information is transmitted to the processor terminal 20 or the service server 30.

In another embodiment of the present invention, although only the service server 30 processes the service is shown in the drawing, it is also possible that the subject that processes the service is the processor terminal 20.

The step of processing the service by the service server 30 (S157) is a step of processing a corresponding task according to the determined service content. As described above, it is also possible for the processor terminal 20 to process.

Meanwhile, in an embodiment of the present invention, in order to solve a security problem that may occur in the process of transmitting and receiving information using a QR code, the user terminal 10 and the processor terminal 20 do not directly transmit and receive information, but the gateway Information can be transmitted and received through the server. That is, it is possible to transmit all the information to the user terminal 10 or the processor terminal 20 via the server.

In addition to this method, the RSA encryption system is applied as follows.

The processor terminal 20 scans the first QR code displayed on the screen of the user terminal 10, and based on the scan result, the identification information of the user terminal 10 recorded in the first QR code from the user terminal 10 And a data bit stream.

The processor terminal 20 transmits the received identification information of the user terminal 10 to the gateway server.

Based on the identification information of the user terminal 10 received from the processor terminal 20, the gateway server determines whether the software such as the user terminal 10 or the application embedded and installed in the user terminal 10 corresponds to the support target. Identify whether or not.

As a result of identification, it is possible to proceed to the next step only if it corresponds to the target of support. Therefore, through this process, there is an effect of being able to primarily block illegal acts of randomly creating or changing QR codes for the purpose of hacking and information leakage.

The gateway server transmits a result of identifying whether the user terminal 10 is a support target to the processor terminal 20. In the case of a support target, the processor terminal 20 classifies and processes the QR code by performing the above-described processes S110, S120, S130, S140 and S150 based on the received data bit string.

In addition, as shown in FIG. 8, it is also possible to apply a two-way QR method to include steps S151 to S157.

The steps of a method or algorithm described in connection with an embodiment of the present invention may be implemented directly in hardware, implemented as a software module executed by hardware, or a combination thereof. Software modules include Random Access Memory (RAM), Read Only Memory (ROM), Erasable Programmable ROM (EPROM), Electrically Erasable Programmable ROM (EEPROM), Flash Memory, hard disk, removable disk, CD-ROM, or It may reside on any type of computer-readable recording medium well known in the art to which the present invention pertains.

In the above, embodiments of the present invention have been described with reference to the accompanying drawings, but those skilled in the art to which the present invention pertains can be implemented in other specific forms without changing the technical spirit or essential features. You can understand. Therefore, the embodiments described above are illustrative in all respects, and should be understood as non-limiting.

10: user terminal
20: processor terminal
30: service server

Claims (10)

As a method performed by a computer,
Scanning a QR code to obtain a data bit stream;
Parsing the data bit string based on a pre-stored syntax database;
Determining a service type corresponding to the QR code from among a plurality of service types according to the parsing result; And
Comprising the step of processing a job corresponding to the QR code and the service type, QR code classification and processing method. The method of claim 1,
Further comprising the step of determining a service identifier corresponding to the QR code among the determined service types according to the parsing result,
The step of processing the operation corresponding to the QR code and the service type is to process the operation corresponding to the QR code and the service identifier, QR code classification and processing method. The method of claim 1,
The pre-stored syntax database,
A method of classifying and processing a QR code, storing at least one service type and at least one syntax information corresponding to the service type. The method of claim 1,
When the QR code corresponds to an abnormal QR code, the QR code further comprising the step of blocking and filtering without passing the data bit string to a QR code processing unit that processes a job corresponding to the QR code and the service type. How to classify and process. The method of claim 4,
The filtering step,
Identifying whether the QR code corresponds to the abnormal QR code based on an abnormal QR code database in which an abnormal QR code including a malicious QR code or a forged QR code is pre-stored; And
As a result of the identification, if the QR code corresponds to the abnormal QR code, the method of classifying and processing a QR code comprising the step of blocking and filtering the data bit string without passing the data bit string to the QR code processing unit. The method of claim 5,
A method for classifying and processing a QR code, further comprising the step of storing information on the abnormal QR code. The method of claim 1,
The step of processing the operation,
A method of classifying and processing a QR code comprising the step of transferring at least a portion of the data bit string to a service server corresponding to the service type. The method of claim 1,
The step of processing the operation,
A method of classifying and processing a QR code comprising the step of generating and displaying the QR code and a service QR code corresponding to the service type. A computer program combined with a computer as hardware and stored in a computer-readable recording medium to execute the method of any one of claims 1 to 8. A data management unit for storing and managing a syntax database;
A scanning unit that scans a QR code and obtains a data bit string recorded in the QR code;
A syntax analysis unit that analyzes the syntax of the data bit string based on the syntax database;
A service classification unit configured to determine a service type corresponding to the QR code from among a plurality of service types according to the parsing result; And
Device for classifying and processing a QR code, comprising a processing unit for processing a job corresponding to the QR code and the service type.

Images