WO2022180987A1

WO2022180987A1 - Service providing device and service providing system

Info

Publication number: WO2022180987A1
Application number: PCT/JP2021/045645
Authority: WO
Inventors: 望松本; 康夫森永; 達哉西▲崎▼; 怜央水田; 有希中村
Original assignee: 株式会社Ｎｔｔドコモ
Priority date: 2021-02-25
Filing date: 2021-12-10
Publication date: 2022-09-01
Also published as: JPWO2022180987A1

Abstract

The purpose of the present invention is to provide a service providing device, a mobile terminal, and a service providing system, which are capable of putting security on service information and providing the service information to a user.　A security processing unit 101 assigns security information (for example, a security code or numerical parameter) to a shared terminal 300 in advance. An activation control unit 103 then receives, from a mobile terminal 200, connection information (device ID) of the shared terminal 300 obtained by the mobile terminal 200 reading code information generated by using the security information in the shared terminal 300, and transmits service information corresponding to the user to the shared terminal 300 indicated by the connection information after the connection information has been verified on the basis of the security information.

Description

Service providing device and service providing system

The present invention relates to a service providing device and a service providing system that provide service information to users.

In Patent Document 1, the personal environment of the environment registration side PC is registered on the network server, and the registered environment is constructed in the environment construction side PC to realize the personal environment in a PC other than the one normally used. , there is a description of that.

JP-A-11-306121

However, with the technology of Patent Document 1, security is not applied, and a personal environment set by a certain user can be used by another person, which poses a security problem.

Therefore, an object of the present invention is to provide a service providing device and a service providing system that can provide security when providing service information to a user.

A service providing apparatus according to the present invention includes a provision unit that preliminarily provides security information to a terminal device used by a user; A receiving unit for receiving connection information of the device from the mobile terminal, and a transmitting unit for transmitting service information corresponding to the user to the connection information after verification based on the security information.

With this configuration, it is possible to cause the mobile terminal to read the information of the code including the security information, and prevent unauthorized occupation of the terminal device or unauthorized use of services in the terminal device by a third party.

According to the present invention, it is possible to prevent illegal occupation of a terminal device or illegal use of services in a terminal device by a third party.

1 is a diagram showing a system configuration of a service providing system in the present disclosure; FIG. 3 is a block diagram showing a functional configuration of a management server 100; FIG. 4 is a diagram showing a specific example of a security code management table 104a; FIG. FIG. 10 is a diagram showing a specific example of a portal management table 104b; FIG. 2 is a block diagram showing a functional configuration of mobile terminal 200. FIG. FIG. 4 is an explanatory diagram showing analysis processing by an analysis unit 202; 3 is a block diagram showing a functional configuration of shared terminal 300 of the present disclosure; FIG. 4 is a sequence diagram showing operations of shared terminal 300 and management server 100. FIG. FIG. 10 is a sequence diagram showing QR code update processing; 3 is a sequence diagram showing processing in management server 100, portable terminal 200, and shared terminal 300. FIG. 2 is a diagram illustrating an example of hardware configurations of management server 100, mobile terminal 200, and shared terminal 300 according to an embodiment of the present disclosure; FIG.

An embodiment of the present disclosure will be described with reference to the accompanying drawings. Where possible, the same parts are denoted by the same reference numerals, and overlapping descriptions are omitted.

FIG. 1 is a diagram showing the system configuration of the service providing system in the present disclosure. As shown in the figure, this service providing system includes a management server 100, a mobile terminal 200, and a shared terminal 300. FIG. Additionally, a user authentication server 400 may be provided. In the present disclosure, the mobile terminal 200 reads the QR code displayed on the display unit of the shared terminal 300 and acquires the device ID that serves as the output destination (shared terminal 300) of the user's remote work environment information (service information). do. It should be noted that it is not limited to a two-dimensional bar code such as a QR code, and any other coded image information may be used.

The management server 100 functions as a service providing device that provides services to the shared terminals 300 . This management server 100 outputs service connection information that allows access to the user's remote work environment information to the shared terminal 300 based on the device ID. A user operating shared terminal 300 accesses the service connection information. The management server 100 stores portal display content information in association with service connection information for portal display. When the user clicks the service connection information on the shared terminal 300 , the management server 100 transmits the portal display contents to the shared terminal 300 . This portal display content is, for example, remote work environment information (service information) for the user to use on the shared terminal 300 . In the above description, the management server 100 transmits the portal display content when the user clicks on the service connection information. may be

With such a configuration, the user can use the shared terminal 300 to perform work in the remote work environment set by the user using the mobile terminal 200 . It goes without saying that the present disclosure is not limited to the provision of a remote work environment, and can also be applied to the provision of other service information.

FIG. 2 is a block diagram showing the functional configuration of the management server 100. As shown in FIG. As shown in the figure, the management server 100 includes a security processing section 101, a code update section 102, an activation control section 103, and a storage section 104 (security code management table 104a and portal management table 104b). Each configuration will be described below.

The security processing unit 101 is a part that receives a code acquisition request including the IP address and device ID of the shared terminal 300 from the shared terminal 300 and transmits the security code as a response process. The security code is information consisting of predetermined alphanumeric characters and other symbols. Security processing unit 101 also transmits a numeric parameter to shared terminal 300 . This numeric parameter is information to be used when making the QR code redundant in the shared terminal 300, as will be described later. Numerical parameters are not limited to numbers, and may be alphabetic symbols or the like.

The code update unit 102 newly issues a security code based on the timing determined by the next update timing managed by the security code management table 104a, and transmits the security code to the shared terminal 300. is the part that updates the Also, the code update unit 102 updates the security code stored in the security code management table 104a to the newly issued security code.

Activation control unit 103 receives an activation instruction for activating shared terminal 300 from mobile terminal 200, and establishes service connection for providing portal display content corresponding to the user of mobile terminal 200 based on the activation instruction. This is the part that transmits information to the shared terminal 300 . The activation instruction includes a user ID, device ID, and security code. The activation control unit 103 extracts the service connection information corresponding to the user ID from the portal management table 104b, and transmits it to the shared terminal 300 specified by the device ID.

Also, the activation control unit 103 performs authentication processing for the activation instruction as necessary. Also, when transmitting the service connection information, the activation control unit 103 refers to the portal management table 104b to acquire the service connection information.

The storage unit 104 is a part that stores a security code management table 104a and a portal management table 104b.

FIG. 3 is a diagram showing a specific example of the security code management table 104a. As shown in the figure, the security code management table 104a associates and stores device IDs, PC addresses, security codes, and next update timings. Device ID is an identifier for identifying shared terminal 300 . The PC address indicates the IP address of shared terminal 300 . The security code is information for authenticating the activation instruction transmitted from mobile terminal 200 . The next update timing indicates the update timing of the security code. In the figure, the time is shown, but the date and time may be used. Based on this timing, the security code held by shared terminal 300 is updated. The next update timing may be determined based on a predetermined rule, or may be random timing.

FIG. 4 is a diagram showing a specific example of the portal management table 104b. As shown in the figure, the portal management table 104b associates and stores user IDs, portal display names, services to be used, and service connection information. A user ID is an identifier for identifying a user of mobile terminal 200 . The portal display name is the full name of the user. The service to be used is the service name or its type provided to the user. Service connection information is connection information for providing services to users, and is, for example, a URL. In addition, there is information such as service ID, certificate, SP (Service Provider) metadata, and attribute mapping (which information is assigned to last name, first name, and email address).

It should be noted that when the mobile terminal 200 performs user authentication in advance using the user authentication server 400, the user ID here is a user ID with a time limit and corresponds to so-called token information. In this case, the user authentication server 400 assigns a time-limited user ID to the portable terminal 200 and updates the user ID in the portal management table 104b with the time-limited user ID. The portal management table 104b also provides identifiers for uniquely identifying users. Henceforth, it demonstrates as a mere user ID unless there is a notice in particular.

Next, the configuration of the mobile terminal 200 will be explained. FIG. 5 is a block diagram showing the functional configuration of the mobile terminal 200. As shown in FIG. As shown in the figure, mobile terminal 200 includes camera section 201 , analysis section 202 , authentication section 203 , and activation instruction section 204 .

The camera unit 201 is a part that takes an image of an object. In the present disclosure, the QR code displayed by shared terminal 300 is photographed.

The analysis unit 202 is a part that analyzes the QR code captured by the camera unit 201 and obtains the character string contained in the QR code. FIG. 6 is an explanatory diagram showing analysis processing by the analysis unit 202. As shown in FIG. FIG. 6(a) is a diagram showing a QR code. The camera unit 201 reads this QR code.

The analysis unit 202 acquires the character string shown in FIG. 6(b) from the QR code captured by the camera unit 201, and analyzes this character string. The analysis unit 202 has a so-called QR code reader function. The string includes a first string, a specific parameter, and a second string. The first character string is, for example, a URL serving as connection information to which the application is downloaded. This URL is information obtained by a standard QR code reader. The specific parameter is a character string for distinguishing between the first character string and the second character string. A standard QR code reader that does not have the function of the analysis unit 202 in the present disclosure acquires only the first character string by recognizing this specific parameter.

The analysis unit 202 acquires the second character string by recognizing a specific parameter from the character string. The second string includes the device ID, security code and numeric parameters for identifying shared terminal 300 . To improve security, at least the device ID and security code portions of the second string are redundant. FIG. 6(b) shows "3" as a numeric parameter. Based on this numeric parameter, the analysis unit 202 determines which position to read as the start position from the second character string, and acquires the correct device ID and security code. The security code is character string information managed by the management server 100, and is time-limited information. In the management server 100, this security code can be used to prevent unauthorized use when reading the QR code.

In the present disclosure, numeric parameters are used to specify the position of the device ID when the device ID and the security code are concatenated, but this is not the only option. Security may be applied by a combination of a numeric parameter and a device ID without using a security code, or a security code may be applied by a combination of a device ID and a security code without using a numeric parameter.

In addition, numeric parameters are not limited to indicating the starting point of those character strings, they are used from the nth character to the n+mth character, are interpreted by skipping every s characters, and are indicated in advance on the server side and the terminal side. For example, analysis may be performed using the pattern x analysis method.

The authentication unit 203 is a part that performs authentication processing when the user of the mobile terminal 200 logs into the user authentication server 400 . The authentication unit 203 acquires a user ID with a time limit by authentication processing. Note that the authentication unit 203 may also perform authentication using biometric information registered in advance for the user to operate the terminal, such as biometric authentication.

The activation instruction unit 204 is a part that transmits an activation instruction to the management server 100 . The activation instruction includes the device ID and security code obtained by analysis by the analysis unit 202 and the user ID obtained by the authentication unit 203 .

In this way, the mobile terminal 200 reads the QR code displayed on the shared terminal 300 and analyzes the character string information to acquire the device ID of the shared terminal 300 to be activated and transmit it to the management server 100 . can do. At that time, by using the numeric parameter, it is possible to obtain the character string included in the redundant QR code with improved security, and obtain the device ID included in the character string. Note that a security code can also be obtained in addition to the device ID.

Next, the shared terminal 300 will be explained. FIG. 7 is a block diagram showing the functional configuration of shared terminal 300 of the present disclosure. As shown in the figure, shared terminal 300 includes device ID generator 301 , QR code generator 302 , display 303 , and service execution section 304 .

The device ID generation unit 301 is a part that acquires a device ID from the management server 100 when an application pre-installed in the shared terminal 300 is started. The management server 100 has a function of generating and assigning a unique device ID to each shared terminal 300 .

The QR code generator 302 is a part that receives the security code and numeric parameters from the management server 100 and generates the QR code shown in FIG. This QR code includes the website URL and device ID predetermined in shared terminal 300 and the received security code. A website URL indicates a download destination for downloading a predetermined application. A predetermined application is an application that includes the functions of the analysis unit 202 in the mobile terminal 200 .

Then, the QR code generation unit 302 makes the device ID and security code redundant when generating the QR code. For example, redundancy is achieved by randomly adding an unspecified number of character strings. Further, redundancy is provided so that the first character of the device ID or the like is placed at the position indicated by the received numerical parameter. It should be noted that the present invention is not limited to this, and it is sufficient if the redundancy can be made so that the device ID and the like can be acquired according to the rules indicated by the numerical parameters.

The QR code generation unit 302 generates a QR code by adding numeric parameters to the character string thus created.

The display unit 303 is a part that displays the QR code generated by the QR code generation unit 302.

The service execution unit 304 is a part that executes services provided by the management server 100 . In the present disclosure, the service execution unit 304 acquires remote work environment information determined for each user from the management server 100 and executes the remote work environment. The remote work environment indicates settings for operations on the shared terminal 300 . For example, an application that can be activated, a data file used by the user, information displayed on the display unit 303, and the like.

In this way, the user operates the portable terminal 200 to read the QR code, acquires the remote work environment information of the user from the management server 100 at the shared terminal 300 specified by the QR code, and sets the remote work environment. can be executed.

Next, the operation of the management server 100 according to the present disclosure will be described. FIG. 8 is a sequence diagram showing operations of shared terminal 300 and management server 100 . When the shared terminal 300 is activated for the first time, the device ID generation unit 301 acquires and assigns a device ID that does not overlap with other devices (including other shared terminals) from the management server 100 (S101). This device ID is stored in a storage unit (not shown) of shared terminal 300 .

After that, the QR code generator 302 transmits a code acquisition request to the management server 100 (S102). This code acquisition request includes the PC address (IP address, etc.) of shared terminal 300 and the device ID.

In the management server 100, when the security processing unit 101 receives the code acquisition request from the shared terminal 300, it associates the PC address with the device ID and stores it in the security code management table 104a. The security processing unit 101 then issues a numerical parameter, a security code, and the next update timing. The security processing unit 101 further stores the security code and the next update timing in the security code management table 104a in association with the PC address or the like. The code update unit 102 starts periodic security code update processing based on the next update timing (S103). The security code may be issued and updated randomly, or may be issued and updated based on a predetermined rule. In addition, the code update unit 102 also updates the numerical parameters. Numerical parameters may be defined by a predetermined rule, or may be random.

The security processing unit 101 transmits a code acquisition response to the shared terminal 300 (S104). This get code response contains a security code and a numeric parameter.

In shared terminal 300, QR code generator 302 generates a QR code including the website URL, device ID, security code, and numeric parameters held in shared terminal 300 according to the numeric parameters (S105). ). That is, the QR code generator 302 concatenates the website URL, device ID, security code and numeric parameter. Then, the character strings of the device ID and the security code are made redundant so that the first character of the device ID appears at the position indicated by the numerical parameter. Then, the QR code of the character string including the redundant character string is generated. It should be noted that the device ID and the security code are assumed to be concatenated so that the device ID and the security code can be identified by one numerical parameter. It should be noted that the position of each first character may be specified by two numeric parameters.

This website URL indicates the download source of the QR code reader having the function of the analysis unit 202 in the mobile terminal 200 of the present disclosure. The URL is stored in advance in shared terminal 300 . Then, the display unit 303 of the shared terminal 300 displays the QR code.

The display unit 303 displays the generated QR code (S106).

In this way, a QR code is generated and displayed on the shared terminal 300 and made readable by the portable terminal 200. This QR code is updated periodically. FIG. 9 is a sequence diagram showing the updating process.

As shown in the figure, in the management server 100, the code update unit 102 periodically updates the security code and numeric parameters (S201). Code update unit 102 transmits a code acquisition response including the updated security code and numeric parameter to shared terminal 300 (S202). The code acquisition response also serves as a health check function for shared terminal 300, but the health check may be performed as a separate process.

In shared terminal 300, QR code generation unit 302 generates and displays a QR code based on a pre-stored website URL, a device ID, a security code, and numeric parameters included in the acquired code acquisition response. (S203).

In this way, the security of the QR code can be improved by regularly updating it. For example, even if a malicious third party illegally acquires an old QR code, the QR code is updated and the security code and numeric parameters are different, so the device ID and the like cannot be acquired correctly.

Next, the processing when the user uses the mobile terminal 200 to cause the shared terminal 300 to acquire the remote work environment will be described. FIG. 10 is a sequence diagram showing processing in management server 100, portable terminal 200, and shared terminal 300. As shown in FIG.

When a predetermined authentication application is activated in the mobile terminal 200, the authentication unit 203, which is one of its functions, acquires a user ID from the user authentication server 400 through user authentication (S301). The user ID here is a user ID with a time limit and is a user ID issued by the user authentication server 400 . Note that this process may be omitted, and a predetermined user ID may be used. In that case, the management server 100 manages it accordingly.

Next, the camera unit 201 reads the QR code displayed on the shared terminal 300 according to the user's operation. Then, the analysis unit 202 analyzes the character string obtained from the read QR code (S302). The analysis unit 202 acquires the device ID and security code by analyzing the character string. Then, biometric authentication is performed by the authentication unit 203 (S303). This biometric authentication is, for example, face authentication or fingerprint authentication, and is a process of matching with a predetermined user.

The activation instruction unit 204 transmits an activation instruction to the management server 100 (S304). This activation instruction includes a user ID, device ID, and security code.

On the other hand, the user authentication server 400 manages the user ID (user ID with expiration date) transmitted to the mobile terminal 200 by the table management unit (not shown), the service to be used, the service connection information, etc., during the user authentication process. It is stored in the portal management table 104b in the server 100 (S305). This processing is always performed during user authentication processing.

In the management server 100, the activation control unit 103 verifies the validity of the user ID and the validity of the combination of the device ID and the security code (S306). Regarding the verification of the user ID, the activation control unit 103 verifies the legitimacy of the user ID based on whether the user ID is stored in the portal management table 104b. For verification of the combination of the device ID and the security code, the activation control unit 103 refers to the security code management table 104a to perform the verification.

When the activation control unit 103 determines that the verification process is OK, it transmits an activation instruction (PC address and service connection information) to the shared terminal 300 (S307). In order to specify the shared terminal 300 that is the transmission destination, the activation control unit 103 refers to the security code management table 104a and acquires the PC address corresponding to the device ID. Also, for the transmission, the portal management table 104b is referenced to acquire the connection information corresponding to the user ID. In addition, the activation control unit 103 transmits an activation result notification (in this case, an OK notification) to the mobile terminal 200 (S308).

In the shared terminal 300, when the service execution unit 304 receives the activation instruction, the display unit 303 displays a portal display screen for allowing the user to select service connection information. When the user clicks on the service connection information, the service execution unit 304 transmits an HTTP request for receiving the portal display content to the management server 100 (S309).

In the management server 100, the activation control unit 103 refers to the portal management table 104b and generates portal display contents that reflect the portal display name linked to the user ID, the service used, etc. (S310). This portal display content corresponds to a remote work environment. The activation control unit 103 transmits the portal display content to the shared terminal 300 (S311).

On the shared terminal 300, a remote work environment is constructed according to the portal display contents.

In this way, the user can use the portable terminal 200 to build his/her own remote work environment on the shared terminal 300.

It is possible that the user's mobile terminal 200 does not have a specific QR code reader with functions such as the analysis unit 202 installed. Therefore, a URL for installing a specific QR code reader having functions such as the analysis unit 202 is described in the QR code. A general QR code reader is configured to recognize a specific parameter (?pr=) and access the URL described in the character string up to that point. It can be used to install a specific QR code reader application.

Next, the operational effects of the management server 100, the mobile terminal 200, the shared terminal 300, and the service providing system including these of the present disclosure will be described.

In the management server 100 of the present disclosure, the security processing unit 101 functions as a granting unit and grants the shared terminal 300 security information (for example, a security code or numeric parameters) in advance. Activation control unit 103 then receives, from mobile terminal 200, the device ID of shared terminal 300 obtained by reading code information generated in shared terminal 300 using security information in mobile terminal 200. When the device ID is verified based on, the service connection information (service information) corresponding to the user is transmitted to the shared terminal 300 indicated by the device ID. Although the management server 100 transmits the service connection information to the shared terminal, the remote environment information (service information) itself, which is the service content, may be transmitted instead of the service connection information.

With this configuration, security processing can be performed on the shared terminal 300 based on the security information, and when services are provided on the shared terminal 300, unauthorized occupation of the shared terminal or unauthorized use of services on the shared terminal by a third party can be prevented. can do. In the above disclosure, a service that provides a remote work environment is taken as an example, but it is not limited to this, and can be applied to various service provision. Also, although it is called a shared terminal, it does not have to be a terminal that is shared by a plurality of people.

In the present disclosure, shared terminal 300 is configured to generate a QR code based on information sent from management server 100, but this is not the only option. The QR code may be generated by the management server 100 or another device, transmitted to the shared terminal 300, and shared terminal 300 may display it.

In addition, in the management server 100 of the present disclosure, the portal management table 104b (service information storage) stores a user ID with a time limit as user authentication information and service connection information (service information) for providing services to users. part). Activation control unit 103 further receives a time-limited user ID (authentication information) obtained by user authentication in portable terminal 200 . The activation control unit 103 acquires service connection information (service information) corresponding to the user according to the time-limited user ID (authentication information), and transmits the service connection information to the shared terminal 300 indicated by the device ID.

With this configuration, it is possible to use user authentication via a user authentication server or the like, and it is possible to prevent unauthorized use by a third party of service information associated with a user.

In addition, the management server 100 of the present disclosure further includes a security code management table 104a (security information storage unit) that stores a combination of the device ID (connection information) of the shared terminal 300 and the security code (first security information). Prepare. Activation control unit 103 further receives a security code from mobile terminal 200, and determines the validity of the combination of the device ID and the security code based on security code management table 104a. Then, if it is valid, the service connection information is transmitted to the shared terminal 300 indicated by the device ID.

With this configuration, it is possible to check the device ID based on the security code and prevent unauthorized use by a third party. For example, an old QR code can be saved and connections using it can be prevented.

In addition, the management server 100 further includes a code update unit 102 that updates the security code and/or numeric parameters that are the security information given to the shared terminal 300 .

With this configuration, the shared terminal 300 can generate code information such as a QR code based on the updated security code and/or numeric parameters. Therefore, security can be improved.

Also, the management server 100 of the present disclosure functions as a service providing system in combination with the mobile terminals 200 used by users.

The mobile terminal 200 includes an authentication unit 203 that performs user authentication and acquires a user ID (user ID with a time limit) from the user authentication server in advance, and a QR code ( A camera unit 201 and an analysis unit 202 that read code information) and acquire a device ID, and a start instruction unit 204 that transmits a user ID (user ID with a time limit: authentication information) and a device ID (connection information) to the management server 100. And prepare.

Also, in the mobile terminal 200, the camera unit 201 reads the QR code, and the analysis unit 202 acquires the security code in addition to the device ID. Then, the activation instruction unit 204 further transmits the security code to the management server 100 .

With this configuration, it is possible to perform security checks using security codes.

Also, in the mobile terminal 200, the camera unit 201 reads the QR code, and the analysis unit 202 acquires the device ID as well as the numeric parameter, which is the second security information.

The analysis unit 202 acquires a predetermined character string by analyzing the QR code information, acquires the description position of the device ID from the character string according to the specification of the numeric parameter, and acquires the device ID. It should be noted that the device ID may be acquired by an acquisition method determined based on the numerical parameter.

As a result, by changing the numeric parameter, the acquisition position of the device ID can be changed. Therefore, if the numeric parameter cannot be acquired correctly, the device ID cannot be acquired, so that security can be improved.

In addition, the service providing system in the present disclosure further includes a plurality of shared terminals 300. Each of the shared terminals 300 has a display unit 303 that presents a QR code that can be read by the mobile terminal 200 . The QR code includes the device ID (connection information) of the shared terminal 300 .

Also, the plurality of shared terminals 300 further includes a QR code generation unit 302 that acquires security information from the management server 100 and generates a QR code using the security information.

Also, the plurality of shared terminals 300 generate a QR code by making the device ID (connection information) redundant and using the numeric parameter, which is the second security information, as the security information. Mobile terminal 200 obtains a device ID based on the location according to the numeric parameter.

The block diagram used in the description of the above embodiment shows blocks for each function. These functional blocks (components) are realized by any combination of at least one of hardware and software. Also, the method of implementing each functional block is not particularly limited. That is, each functional block may be implemented using one device that is physically or logically coupled, or directly or indirectly using two or more devices that are physically or logically separated (e.g. , wired, wireless, etc.) and may be implemented using these multiple devices. A functional block may be implemented by combining software in the one device or the plurality of devices.

Functions include judging, determining, determining, calculating, calculating, processing, deriving, investigating, searching, checking, receiving, transmitting, outputting, accessing, resolving, selecting, choosing, establishing, comparing, assuming, expecting, assuming, Broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, assigning, etc. can't For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. In either case, as described above, the implementation method is not particularly limited.

For example, the management server 100, the mobile terminal 200, the shared terminal 300, etc. according to the embodiment of the present disclosure may function as a computer that performs the terminal authentication method of the present disclosure. FIG. 11 is a diagram illustrating an example of hardware configurations of the management server 100, mobile terminal 200, and shared terminal 300 according to an embodiment of the present disclosure. Management server 100, mobile terminal 200, and shared terminal 300 described above are physically computer devices including processor 1001, memory 1002, storage 1003, communication device 1004, input device 1005, output device 1006, bus 1007, and the like. may be configured.

In the following explanation, the term "apparatus" can be read as a circuit, device, unit, or the like. The hardware configuration of the management server 100, mobile terminal 200, and shared terminal 300 may be configured to include one or more of each device shown in the figure, or may be configured without some of the devices. good too.

Each function of the management server 100, the portable terminal 200, and the shared terminal 300 is performed by the processor 1001 by loading predetermined software (program) onto hardware such as the processor 1001 and the memory 1002, and the communication device 1004. and control at least one of data reading and writing in the memory 1002 and the storage 1003 .

The processor 1001, for example, operates an operating system and controls the entire computer. The processor 1001 may be configured by a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic device, registers, and the like. For example, the above-described security processing unit 101, code update unit 102, and the like may be implemented by the processor 1001. FIG.

Also, the processor 1001 reads programs (program codes), software modules, data, etc. from at least one of the storage 1003 and the communication device 1004 to the memory 1002, and executes various processes according to them. As the program, a program that causes a computer to execute at least part of the operations described in the above embodiments is used. For example, the security processing unit 101 may be implemented by a control program stored in the memory 1002 and running on the processor 1001, and other functional blocks may be implemented similarly. Although it has been explained that the above-described various processes are executed by one processor 1001, they may be executed simultaneously or sequentially by two or more processors 1001. FIG. Processor 1001 may be implemented by one or more chips. Note that the program may be transmitted from a network via an electric communication line.

The memory 1002 is a computer-readable recording medium, and is composed of at least one of, for example, ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), RAM (Random Access Memory), etc. may be The memory 1002 may also be called a register, cache, main memory (main storage device), or the like. The memory 1002 can store executable programs (program codes), software modules, etc. for implementing a terminal authentication method according to an embodiment of the present disclosure.

The storage 1003 is a computer-readable recording medium, for example, an optical disc such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disc, a magneto-optical disc (for example, a compact disc, a digital versatile disc, a Blu-ray disk), smart card, flash memory (eg, card, stick, key drive), floppy disk, magnetic strip, and/or the like. Storage 1003 may also be called an auxiliary storage device. The storage medium described above may be, for example, a database, server, or other suitable medium including at least one of memory 1002 and storage 1003 .

The communication device 1004 is hardware (transmitting/receiving device) for communicating between computers via at least one of a wired network and a wireless network, and is also called a network device, a network controller, a network card, a communication module, or the like. The communication device 1004 includes a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc., in order to realize at least one of, for example, frequency division duplex (FDD) and time division duplex (TDD). may consist of For example, transmit and receive antennas, etc. may be implemented by communication device 1004 . The transceiver may be physically or logically separate implementations for the transmitter and receiver.

The input device 1005 is an input device (for example, keyboard, mouse, microphone, switch, button, sensor, etc.) that receives input from the outside. The output device 1006 is an output device (eg, display, speaker, LED lamp, etc.) that outputs to the outside. Note that the input device 1005 and the output device 1006 may be integrated (for example, a touch panel).

Each device such as the processor 1001 and the memory 1002 is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses between devices.

In addition, the management server 100, the mobile terminal 200, and the shared terminal 300 include a microprocessor, a digital signal processor (DSP), an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), an FPGA (Field Programmable Gate). Array), etc., and part or all of each functional block may be implemented by the hardware. For example, processor 1001 may be implemented using at least one of these pieces of hardware.

Notification of information is not limited to the aspects/embodiments described in the present disclosure, and may be performed using other methods. For example, notification of information includes physical layer signaling (e.g. DCI (Downlink Control Information), UCI (Uplink Control Information)), upper layer signaling (e.g. RRC (Radio Resource Control) signaling, MAC (Medium Access Control) signaling, It may be implemented by broadcast information (MIB (Master Information Block), SIB (System Information Block))), other signals, or a combination thereof. RRC signaling may also be called an RRC message, and may be, for example, an RRC connection setup message, an RRC connection reconfiguration message, or the like.

Each aspect/embodiment described in the present disclosure includes LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system) system), FRA (Future Radio Access), NR (new Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark) )), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark), and other suitable systems and extended It may be applied to at least one of the next generation systems. Also, a plurality of systems may be applied in combination (for example, a combination of at least one of LTE and LTE-A and 5G, etc.).

The order of the processing procedures, sequences, flowcharts, etc. of each aspect/embodiment described in the present disclosure may be changed as long as there is no contradiction. For example, the methods described in this disclosure present elements of the various steps using a sample order, and are not limited to the specific order presented.

Information and the like can be output from a higher layer (or a lower layer) to a lower layer (or a higher layer). It may be input and output via multiple network nodes.

Input/output information may be stored in a specific location (for example, memory) or managed using a management table. Input/output information and the like can be overwritten, updated, or appended. The output information and the like may be deleted. The entered information and the like may be transmitted to another device.

The determination may be made by a value represented by one bit (0 or 1), by a true/false value (Boolean: true or false), or by numerical comparison (for example, a predetermined value).

Each aspect/embodiment described in the present disclosure may be used alone, may be used in combination, or may be used by switching along with execution. In addition, the notification of predetermined information (for example, notification of “being X”) is not limited to being performed explicitly, but may be performed implicitly (for example, not notifying the predetermined information). good too.

Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be practiced with modifications and variations without departing from the spirit and scope of the present disclosure as defined by the claims. Accordingly, the description of the present disclosure is for illustrative purposes and is not meant to be limiting in any way.

Software, whether referred to as software, firmware, middleware, microcode, hardware description language or otherwise, includes instructions, instruction sets, code, code segments, program code, programs, subprograms, and software modules. , applications, software applications, software packages, routines, subroutines, objects, executables, threads of execution, procedures, functions, and the like.

In addition, software, instructions, information, etc. may be transmitted and received via a transmission medium. For example, the software uses at least one of wired technology (coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), etc.) and wireless technology (infrared, microwave, etc.) to website, Wired and/or wireless technologies are included within the definition of transmission medium when sent from a server or other remote source.

The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may refer to voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, light fields or photons, or any of these. may be represented by a combination of

The terms explained in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings. For example, the channel and/or symbols may be signaling. A signal may also be a message. A component carrier (CC) may also be called a carrier frequency, a cell, a frequency carrier, or the like.

The terms "system" and "network" used in this disclosure are used interchangeably.

In addition, the information, parameters, etc. described in the present disclosure may be expressed using absolute values, may be expressed using relative values from a predetermined value, or may be expressed using other corresponding information. may be represented. For example, radio resources may be indexed.

The names used for the parameters described above are not restrictive names in any respect. Further, the formulas, etc., using these parameters may differ from those expressly disclosed in this disclosure.

In the present disclosure, terms such as "Mobile Station (MS)", "user terminal", "User Equipment (UE)", "terminal", etc. may be used interchangeably. .

A mobile station is defined by those skilled in the art as a subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless It may also be called a terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable term.

The terms "determining" and "determining" used in this disclosure may encompass a wide variety of actions. "Judgement" and "determination" are, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (eg, lookup in a table, database, or other data structure), ascertaining as "judged" or "determined", and the like. Also, "judgment" and "determination" are used for receiving (e.g., receiving information), transmitting (e.g., transmitting information), input, output, access (accessing) (for example, accessing data in memory) may include deeming that a "judgment" or "decision" has been made. In addition, "judgment" and "decision" are considered to be "judgment" and "decision" by resolving, selecting, choosing, establishing, comparing, etc. can contain. In other words, "judgment" and "decision" may include considering that some action is "judgment" and "decision". Also, "judgment (decision)" may be read as "assuming", "expecting", "considering", or the like.

The terms "connected", "coupled", or any variation thereof, mean any direct or indirect connection or coupling between two or more elements, It can include the presence of one or more intermediate elements between two elements being "connected" or "coupled." Couplings or connections between elements may be physical, logical, or a combination thereof. For example, "connection" may be read as "access". As used in this disclosure, two elements are defined using at least one of one or more wires, cables, and printed electrical connections and, as some non-limiting and non-exhaustive examples, in the radio frequency domain. , electromagnetic energy having wavelengths in the microwave and optical (both visible and invisible) regions, and the like.

The term "based on" as used in this disclosure does not mean "based only on" unless otherwise specified. In other words, the phrase "based on" means both "based only on" and "based at least on."

Any reference to elements using the "first," "second," etc. designations used in this disclosure does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, reference to a first and second element does not imply that only two elements can be employed or that the first element must precede the second element in any way.

Where "include," "including," and variations thereof are used in this disclosure, these terms are inclusive, as is the term "comprising." is intended. Furthermore, the term "or" as used in this disclosure is not intended to be an exclusive OR.

In this disclosure, if articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are plural.

In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean that "A and B are different from C". Terms such as "separate," "coupled," etc. may also be interpreted in the same manner as "different."

DESCRIPTION OF SYMBOLS 100... Management server, 200... Portable terminal, 300... Shared terminal, 400... User authentication server, 101... Security process part, 102... Code update part, 103... Start control part, 104... Storage part, 104a... Security code management table , 104b... portal management table, 201... camera unit, 202... analysis unit, 203... authentication unit, 204... activation instruction unit, 301... device ID generation unit, 302... QR code generation unit, 303... display unit, 304... service executive part.

Claims

a granting unit that grants security information in advance to a terminal device used by a user;
a receiving unit configured to receive, from the mobile terminal, connection information of the terminal device obtained by reading the code information generated using the security information in the mobile terminal;
a transmission unit configured to transmit service information corresponding to the user to the connection information after verification based on the security information;
A service providing device comprising:
further comprising a service information storage unit that stores user authentication information and service information for providing services to the user;
The receiving unit further receives authentication information obtained by user authentication in the mobile terminal,
The transmission unit acquires service information corresponding to the user according to the authentication information, and transmits the service information to the connection information.
The service providing device according to claim 1.
further comprising a security information storage unit that stores a combination of the connection information and first security information as the security information;
The receiving unit further receives first security information from the mobile terminal,
The transmission unit determines the validity of the combination of the connection information and the first security information based on the information in the security information storage unit, and transmits the service information.
3. The service providing device according to claim 1 or 2.
further comprising an updating unit that updates the security information given to the terminal device;
The service providing device according to any one of claims 1 to 3.
In a service providing system including a mobile terminal used by a user and the service providing device according to any one of claims 1 to 4,
The mobile terminal is
a user authentication unit that performs user authentication and acquires authentication information in advance from an authentication server;
a reading unit that reads code information displayed on the terminal device that the user intends to use and acquires connection information;
a transmission unit that transmits the authentication information and the connection information to the service providing device;
A service delivery system with
In the mobile terminal,
The reading unit reads the code information to acquire first security information as security information in addition to the connection information,
the transmission unit further transmits the first security information to the service providing device;
The service providing system according to claim 5.
In the mobile terminal,
the reading unit reads the code information to acquire second security information as security information in addition to the connection information;
the reading unit obtains a predetermined character string by analyzing the code information, and obtains the connection information from the character string according to the second security information;
The service providing system according to claim 5 or 6.
The service providing system further includes a plurality of terminal devices,
Each of the plurality of terminal devices,
A presentation unit that presents code information readable by the mobile terminal,
The code information includes connection information of the terminal device,
The service providing system according to claim 7.
The plurality of terminal devices acquire security information from the service providing device,
further comprising a generating unit that generates code information using the security information;
The service providing system according to claim 8.
The plurality of terminal devices generate the code information using second security information as the security information after making the connection information redundant,
the mobile terminal acquires connection information based on the second security information;
The service providing system according to claim 9.