TWI806646B - Security swiping-code method and operation system - Google Patents

Abstract

A security swiping-code method is provided. An initial random code is generated. The initial random code is encrypted to an encrypted result. The encrypted result and ticket information are combined into a two-dimensional barcode. The two-dimensional barcode and the initial random code are provided to a server. The server decodes the two-dimensional barcode to determine key information and decrypts the key information to generate a decrypted code. The decrypted code and the initial random code are compared. When the decrypted code is the same as the initial random code, the ticket information is verified. When the decrypted code is different from the initial random code, the ticket information is rejected.

Description

Security flashing method and operating system

The invention relates to a method for safely swiping codes, in particular to a safety mechanism for swiping codes of two-dimensional barcodes.

At present, in daily life, there are some scenarios that use two-dimensional barcode verification, such as tickets, train tickets, consumption coupons and other tickets. After the two-dimensional barcode is generated in advance (the two-dimensional barcode at this time is also called the static two-dimensional barcode), when it is to be used, it will be presented to the store to scan the code for verification. The advantage of the static two-dimensional barcode is that the coupons can be used by family members. However, if the real-name system is required, once the two-dimensional barcode is copied or stolen by taking pictures, the problem of embezzlement will arise.

The invention discloses a security mechanism for swiping two-dimensional barcodes, the main purpose of which is to solve the problem that ticket barcodes rely on static two-dimensional barcodes in the prior art. Once the two-dimensional barcode is copied or stolen by taking pictures, the problem of embezzlement will arise. In order to achieve the above object, the present invention provides a method for safely swiping codes, including generating an initial random code; encrypting the initial random code to generate an encryption result; combining the encryption result with a ticket information to generate a two-dimensional Barcode; provide two-dimensional barcode and initial random code to a server; command the server to decode the two-dimensional barcode to obtain a password information, and decrypt the password information to obtain a decryption code; compare the decryption code and the initial random code code. When the decryption code is the same as the initial random code, the ticket information is canceled. When the decryption code is different from the initial random code, refuse to write off the ticket information.

In another embodiment, the present invention further provides an operating system, which includes a scanning terminal, a client terminal and a server terminal. The scanning end generates an initial random code. The user terminal receives and encrypts the initial random code to generate an encryption result, and combines the encryption result with a ticket information to generate a two-dimensional barcode. The server side decodes the two-dimensional barcode to obtain a password information, and decrypts the password information to obtain a decryption code, and compares the decryption code with the initial random code. When the decryption code is the same as the initial random code, the server side verifies the ticket information. When the decryption code is different from the initial random code, the server side refuses to write off the ticket information. The scanning end receives/scans the two-dimensional barcode generated by the user end and sends it to the server end.

The security flashing method of the present invention can be implemented through the operating system of the present invention, which is hardware or firmware that can perform specific functions, and can also be recorded in a recording medium through program codes, and combined with specific hardware. practice. When the program code is loaded and executed by the electronic device, processor, computer or machine, the electronic device, processor, computer or machine becomes an operating system for implementing the present invention.

In order to make the purpose, features and advantages of the present invention more comprehensible, the following specifically cites the embodiments, together with the accompanying drawings, for a detailed description. The description of the present invention provides different examples to illustrate the technical features of different implementations of the present invention. Wherein, the arrangement of each element in the embodiment is for illustration, not for limiting the present invention. In addition, the partial repetition of the symbols in the figures in the embodiments is for the purpose of simplifying the description, and does not imply the relationship between different embodiments.

Fig. 1 is a schematic flow chart of the method for safely swiping codes according to the present invention. First, an initial random code is generated (step S111). In a possible embodiment, step S111 is to use a scanning terminal to generate an initial random code, and provide the initial random code to a user terminal. In some embodiments, the user end triggers the scanning end, so that the scanning end generates an initial random code. The present invention does not limit how the scanner provides the initial random code to a user terminal. In a possible embodiment, the scanning end may use a telecommunication network to provide an initial randomness to the user end in the form of a short message. In a possible embodiment, the scanning end is a smart phone. In this example, when an application program (APP) of the smart phone is opened, the application program presents an initial random code.

Encrypt the initial random code to generate an encryption result (step S112). In a possible embodiment, step S112 is to use a client to encrypt the initial random code. In this example, the user terminal may use a scanning method to scan and input the initial random code. In another possible embodiment, the user terminal may detect information of an input interface (such as a keyboard or a touch panel), and obtain the initial random code according to the information. In other embodiments, the UE may receive the initial random code through a telecommunication network or an Internet. The present invention does not limit the type of the client. In a possible embodiment, the client is also a smart phone.

The present invention does not limit how to encrypt the initial random code in step S112. In a possible embodiment, step S112 uses a symmetric encryption method or an asymmetric encryption method to encrypt the initial random code. Symmetric encryption uses a security key to encrypt an initial random code. In some embodiments, the symmetric encryption method is an Advanced Encryption Standard (Advanced Encryption Standard; AES), a stream encryption algorithm (such as ChaCha20 or Salsa20), a triple data encryption algorithm (Triple Data Encryption Algorithm; 3DES) , Data Encryption Standard (Data Encryption Standard; DES), block encryption algorithm (such as Blowfish), International Data Encryption Algorithm (International Data Encryption Algorithm; IDEA), symmetric block encryption algorithm (such as RC5, RC6) or Camellia algorithm. The asymmetric encryption method utilizes a private key (private key) or a public key (public) to encrypt the initial random code. In some embodiments, the asymmetric encryption method is RSA algorithm or Elliptic Curve Cryptography (ECC) algorithm.

Next, combine the encrypted result with a ticket information to generate a two-dimensional barcode (step S113). In a possible embodiment, the client combines the encryption result with a ticket information through encoding. In this example, although the ticket information is a kind of static information, because the encryption result is a kind of dynamic information, the two-dimensional barcode generated after the combination of the two is a kind of dynamic information. In some embodiments, when the user terminal receives different initial random codes, the user terminal generates different two-dimensional barcodes for the same ticket information.

Provide the two-dimensional barcode and the initial random code to a server (step S114). In a possible embodiment, the scanning end receives the two-dimensional barcode generated by the user end, and provides the initial random code generated by itself to the server end. In another possible embodiment, the user end uses the unencrypted initial random code as an output code, and provides the output code and the two-dimensional barcode to the scanning end. In this example, the scanner first determines whether the output code from the user terminal is the same as the initial random code generated by itself. When the output code is different from the initial random code, it means that the UE does not belong to a legal UE. Therefore, the scanner does not provide the 2D barcode to the server. When the output code is the same as the initial random code, it means that the user terminal is a legitimate user terminal. Therefore, the scanner provides the initial random code and the two-dimensional barcode to the server. In some embodiments, since the scanning side makes a simple judgment first, the load on the server side can be reduced.

Next, instruct the server to decode the two-dimensional barcode to obtain a password, and decrypt the password to obtain a decryption code (step S115). In a possible embodiment, the server side decodes the two-dimensional barcode to obtain a ticket information and a password information. The server side performs a decryption operation on the password information to obtain a decryption password. The present invention does not limit how the server side performs the decryption operation. In a possible embodiment, when the client uses a symmetric encryption method to encrypt the initial random code, the server uses the same key (same as the key used to encrypt the initial random code) to decrypt the encrypted information. In another possible embodiment, when the client uses an asymmetric encryption method, the server uses a private key or a public key to decrypt the encrypted information. For example, when the client uses a private key to encrypt the initial random code, the server uses a public key disclosed by the client to decrypt the encrypted information. However, when the client uses the public key to encrypt the initial random code, the server uses the private key (corresponding to the public key used by the client) to decrypt the encrypted information.

Next, it is judged whether the decryption code is the same as the initial random code (step S116). When the decryption code is the same as the initial random code, it means that the two-dimensional barcode comes from a legal client. Therefore, the ticket information is verified according to the ticket information of the two-dimensional barcode (step S117). When the decryption code is different from the initial random code, it means that the two-dimensional barcode comes from an illegal client. Therefore, the ticket information of the two-dimensional barcode is rejected (step S118). In a possible embodiment, the verification action is performed by the server. The scanning side proceeds to the next step according to the verification result of the server side. For example, ticket information may be tickets for high-speed rail companies. In this example, when the server informs that the verification result is legal, the gate on the vehicle will automatically open. When the server informs that the verification result is invalid, the vehicle gate does not open and displays an exception.

Since the general two-dimensional barcode is a static two-dimensional barcode, if it is copied or stolen by taking pictures, the server cannot tell whether the two-dimensional barcode is from a legitimate client, thus allowing illegal clients to use tickets (such as high-speed rail tickets or movie tickets). However, the user end of the present invention encrypts a dynamic information (ie, the initial random code) and combines it with ticket information to generate a two-dimensional barcode with dynamic information. After the server side decodes the two-dimensional barcode, the ticket information and password information can be obtained. The server side decrypts the password information to obtain a decryption password. The server side compares the decryption code with the initial random code generated by the scanning side. When the decryption code is the same as the initial random code, it can be known that the ticket information comes from a legal client, so the server or the scanning terminal will cancel the ticket information. Since the random code provided by the scanner is unpredictable, and the key used by the client is also unpredictable, so even if the ticket information is stolen by taking pictures, the thief cannot provide a legal initial random code to the server, so Ticket information cannot be used, thus greatly improving the security of electronic tickets.

In other embodiments, the secure flashing method in FIG. 1 further includes step S119. Step S119 displays or responds to the verification/write-off result. For example, when the decryption code is the same as the initial random code, step S117 verifies the ticket information, and then step S119 displays the verification/verification result, such as indicating that the verification is successful and/or that the verification is successful. In some embodiments, step S119 responds to the verification/verification result, such as opening the gate of the station. When the decryption code is different from the initial random code, step S118 refuses to cancel the ticket information, and step S119 then displays or responds to the verification result, such as displaying verification failure or verification failure. In some embodiments, step S119 responds to the verification/verification result, such as not opening the gate of the station.

In some embodiments, the user terminal and the scanning terminal are two electronic devices, such as smart phones. In this example, when an application program (APP) on the scanning end is opened, the application program provides an initial random code. The client scans and encrypts the initial random code, and generates a two-dimensional barcode according to the encrypted initial random code and a ticket information. The scanning end scans the two-dimensional barcode and provides it together with the initial random code to the server end for the server end to verify whether the user end uses the ticket information legally.

In other embodiments, there is a membership relationship between the user end and the server end (such as the server end of the high-speed rail company). In this example, the server provides a key to the member's electronic device (ie, the client). The key will be tied to the member's electronic device. The server side also records the key. Then, when the server receives the two-dimensional barcode provided by the corresponding electronic device (that is, the member's electronic device), the server first decodes the two-dimensional barcode to obtain password information, and then uses the key corresponding to the member to Decrypt the password information. In another embodiment, the client and the server are not in a membership relationship. In this example, when a member purchases a ticket, the key is attached with the ticket information (the key is tied to the ticket). The server side records the key. When the server receives the two-dimensional barcode provided by the corresponding electronic device, the server first decodes the two-dimensional barcode to obtain password information, and then uses the key corresponding to the ticket to decrypt the password information.

In other embodiments, the scanning end may be an electronic signage. Electronic signage may be located at high-speed rail stations. The electronic signboard presents a random code at regular intervals (such as 5 minutes), and uploads the random code to a server. In this example, the user may open an application on the mobile phone and enter a random code on the digital signage. The mobile phone encrypts the random code, and integrates the encrypted result and a ticket information into a two-dimensional barcode, and uploads it to the same server. The server side decodes the two-dimensional barcode to obtain ticket information and password information. The server side decrypts the password information and judges whether the decryption result is the same as the random code provided by the electronic signage. If so, the server side opens the gates of the station to allow the user to pass.

In other embodiments, when the electronic device logs into a specific server (such as the server of the high-speed rail company), the server provides a key to the electronic device. In this example, the server side records the key. When the server receives the two-dimensional barcode provided by the corresponding electronic device, the server first decodes the two-dimensional barcode to obtain password information, and then uses the corresponding key to decrypt the password information. In this example, the server may send different keys to different registrants.

Fig. 2 is a structural schematic diagram of the operating system of the present invention. As shown in the figure, the operating system 200 includes a client terminal 210 , a scanning terminal 220 and a server terminal 230 . The scanning end 220 generates an initial random code RNC. In a possible embodiment, the user terminal 210 requires the scanning terminal 220 to generate an initial random code RNC.

The UE 220 receives the initial random code RNC. The present invention does not limit how the UE 220 receives the initial random code RNC. In a possible embodiment, the UE 220 receives the initial random code RNC according to an input interface. In another possible embodiment, the UE 220 scans the initial random code RNC. In this embodiment, the UE 220 encrypts the initial random code RNC to generate an encryption result ER. In this example, the UE 220 stores a key KY_A, and uses the key KY_A to encrypt the initial random code RNC.

The client 220 combines the encryption result ER with a ticket information TK to generate a two-dimensional barcode QRC. The user terminal 220 outputs the two-dimensional barcode QRC to the scanning terminal 220 . The scanning end 220 receives the two-dimensional barcode QRC, and outputs it to the server end 230 together with the initial random code RNC. In some embodiments, the user terminal 210 and the scanning terminal 220 are two independent electronic devices, such as two smart phones.

For example, the client 210 may be a first smart phone with a first application program (APP), and the scanning terminal is a second smart phone with a second application program. When the second application program is opened, the second smart phone provides an initial random code RNC. In a possible embodiment, the second smart phone may send the initial random code RNC to the first smart phone, such as sending a short message to the first smart phone by using a telecommunication network. In another possible embodiment, the second smartphone may present an initial random code RNC. In this example, the user manually inputs the initial random code RNC into the second smart phone. In other embodiments, the second smart phone presents the initial random code RNC in the form of a barcode. In this example, the user holds the first smart phone and uses the scanning software of the first smart phone to scan the initial random code RNC presented by the second smart phone. In some embodiments, the first smart phone encrypts the initial random code RNC, and combines the encryption result ER with the ticket information TK to generate a two-dimensional barcode QRC. The second smart phone then scans and inputs the two-dimensional barcode QRC, and uploads it to the server 230 together with the initial random code RNC.

The server end 230 receives the initial random code RNC and the two-dimensional barcode QRC transmitted from the scanning end 220 . The server 230 decodes the two-dimensional barcode QRC to obtain a ticket information and a password information. The server 230 decrypts the password information to obtain a decryption code DR, and verifies whether the decryption code DR is the same as the initial random code RNC. The present invention does not limit how the server 230 decrypts the two-dimensional barcode QRC. In this embodiment, the server 230 uses a key KY_B to decrypt the password information of the two-dimensional barcode QRC. Key KY_B may be the same as or different from key KY_A. For example, when the client 210 uses a symmetric encryption method to encrypt the initial random code RN, the key KY_B is the same as the key KY_A. When the UE 210 uses an asymmetric encryption method to encrypt the initial random code RN, the key KY_B is different from the key KY_A. In this example, one of the keys KY_A and KY_B is a public key, and the other is a private key.

The server 230 verifies whether the decryption code DR is the same as the initial random code RNC. When the decryption code DR is the same as the initial random code RNC, the server 230 cancels the ticket information TK. When the decryption code DR is different from the initial random code RNC, the server 230 refuses to cancel the ticket information TK. In a possible embodiment, the server 230 sends the verification result or the result of canceling the ticket information to the scanner 220 . The scanning terminal 220 decides whether to cancel the coupon information or display the verification result according to the verification result.

In other embodiments, the user terminal 210 uses the unencrypted initial random code as an output code OTC, and provides the output code OTC and the two-dimensional barcode QRC to the scanning terminal 220 . In this example, the scanning terminal 220 determines whether the output code OTC is the same as the initial random code RNC. When the output code OTC is different from the initial random code RNC, the scanning end 220 does not output the initial random code RNC and the two-dimensional barcode QRC to the server end 230 . When the output code OTC is the same as the initial random code RNC, the scanning end 220 outputs the initial random code RNC and the two-dimensional barcode QRC to the server end 230 .

FIG. 3 is a schematic diagram of the operation of the operating system 200 of the present invention. First, the scanning terminal 220 generates an initial random code. In a possible embodiment, the client 210 requires the scanner 220 to display the initial random code. In this example, the user terminal 210 requests to use the coupon and requires the scanning terminal 220 to display the initial random code.

The client 220 inputs or scans the initial random code. The client 220 encrypts the initial random code, and generates a two-dimensional barcode together with the ticket information. In a possible embodiment, the client 220 encrypts the initial random code with a private key. The scanning end 220 receives the two-dimensional barcode. In a possible embodiment, the scanning terminal 220 scans the two-dimensional barcode generated by the user terminal 210 . The scanning end 220 transmits the initial random code and the two-dimensional barcode generated by the user end 210 to the server end 230 .

The server end 230 receives the initial random code transmitted from the scanning end 220 and the two-dimensional barcode of the user end 210 . The server 230 decodes the two-dimensional barcode to obtain ticket information and password information. The server 230 decrypts the password information to obtain a decryption code, and verifies whether the decryption code is the same as the initial random code. The present invention does not limit how the server 230 decrypts the encrypted information. In a possible embodiment, the server 230 uses a public key disclosed by the client 210 to decrypt the encrypted information. In another possible embodiment, when the client 210 encrypts the initial random code using a symmetric encryption method, the server 230 uses the same key (same as the key used by the client 210 to encrypt the initial random code) to encrypt the password The information is decrypted.

When the decryption code is the same as the initial random code, the server 230 cancels the ticket information. When the decryption code is different from the initial random code, the server 230 refuses to write off the ticket information. In a possible embodiment, the server 230 sends the verification result or the result of canceling the ticket information to the scanner 220 . In this example, the scanner 220 receives the verification result from the server 230 and displays the verification result. In some embodiments, the scanning end 220 responds to the user end 210 according to the verification result, such as opening a gate.

In other embodiments, the user terminal 210 uses the unencrypted initial random code as an output code, and provides the output code and the two-dimensional barcode to the scanning terminal 220 . In this example, the scanning terminal 220 determines whether the output code is the same as the initial random code. When the output code is different from the initial random code, the scanning end 220 does not output the initial random code and the two-dimensional barcode to the server end 230 . When the output code is the same as the initial random code, the scanning end 220 outputs the initial random code and the two-dimensional barcode to the server end 230 .

The security brush code method of the present invention, or a specific type or part thereof, may exist in the form of program code. The code may be stored on a physical medium, such as a floppy disk, a CD, a hard disk, or any other machine-readable (such as a computer-readable) storage medium, or a computer program product without limitation in an external form, wherein, When the code is loaded and executed by a machine, such as a computer, the machine becomes an operating system for participating in the present invention. Code may also be sent via some transmission medium, such as wire or cable, optical fiber, or any type of transmission in which, when the code is received, loaded, and executed by a machine, such as a computer, the machine becomes the one used to participate in this Invented operating system. When implemented on a general-purpose processing unit, the code combines with the processing unit to provide a unique device that operates similarly to application-specific logic circuits.

Unless otherwise defined, all terms (including technical and scientific terms) used herein are to be understood by those of ordinary skill in the art to which this invention belongs. In addition, unless expressly stated, the definition of a word in a general dictionary should be interpreted as consistent with the meaning in the article in its related technical field, and should not be interpreted as an ideal state or an overly formal voice. Although terms such as 'first' and 'second' may be used to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another.

Although the present invention has been disclosed above with preferred embodiments, it is not intended to limit the present invention. Any person with ordinary knowledge in the technical field may make some changes and modifications without departing from the spirit and scope of the present invention. . For example, the system, device or method described in the embodiments of the present invention can be implemented in physical embodiments of hardware, software, or a combination of hardware and software. Therefore, the scope of protection of the present invention should be defined by the scope of the appended patent application.

S111~S119: steps 200: operating system 210: client 220: scanning terminal 230: server side RNC: initial random code QRC: Two-dimensional barcode OTC: output code ER:encrypted result TK: Ticket Information KY_A, KY_B: key DR: decrypt code VR: Verification Results

Fig. 1 is a schematic flow chart of the method for safely swiping codes according to the present invention. Fig. 2 is a structural schematic diagram of the operating system of the present invention. Fig. 3 is a schematic diagram of the operation of the operating system of the present invention.

S111~S119: steps

Claims (9)

A computer program product, which executes the following steps after being loaded into a computer: generating an initial random code; encrypting the initial random code to generate an encryption result; combining the encryption result with a ticket information to generate a two provide the two-dimensional barcode and the initial random code to a server; order the server to decode the two-dimensional barcode to obtain a password, and decrypt the password to obtain a decryption result; comparing the decryption result with the initial random code; when the decryption result is the same as the initial random code, canceling the coupon information; and when the decryption result is different from the initial random code, refusing to cancel the coupon information. The computer program product according to claim 1, wherein the step of encrypting the initial random code is to encrypt the initial random code by using a symmetric encryption method or an asymmetric encryption method. The computer program product as claimed in claim 1, wherein: the step of generating the initial random code is to trigger a scanning terminal, ordering the scanning terminal to generate the initial random code; the step of encrypting the initial random code is completed through a user terminal. The computer program product according to claim 3, wherein the client scans and inputs the initial random code. Such as the computer program product of claim 3, wherein the client generates the A two-dimensional barcode, the scanning terminal receives the two-dimensional barcode generated by the client, and outputs the initial random code and the two-dimensional barcode to the server. An operating system, including: a scanning terminal, which generates an initial random code; a user terminal, which receives and encrypts the initial random code to generate an encryption result, and combines the encryption result with a ticket information for generating a two-dimensional barcode; and a server side, decoding the two-dimensional barcode to obtain a password information, and decrypting the password information to obtain a decryption result, and comparing the decryption result with the initial random code, wherein When the decryption result is the same as the initial random code, the server side cancels the coupon information, and when the decryption result is different from the initial random code, the server side refuses to cancel the coupon information; wherein the scanning The terminal provides the two-dimensional barcode and the initial random code to the server. The operating system according to claim 6, wherein the client uses a symmetric encryption method or an asymmetric encryption method to encrypt the initial random code. The operating system as claimed in claim 6, wherein the client triggers the scanning end so that the scanning end generates the initial random code. The operating system of claim 6, wherein the client provides the two-dimensional barcode to the scanner.

Images