JP2006053851A - Authentication system using two-dimensional code - Google Patents

Abstract

A realization of an authentication system capable of providing a product selected by a user with the same simplicity without distributing a two-dimensional code itself of important information to a mobile phone.
SOLUTION: means for issuing a transaction ID for product selection information transmitted from a mobile phone 14, means for converting the transaction ID into a two-dimensional code, and generating personalized data with a transaction ID added to electronic money data , Means for storing in the memory means, means for converting this into a two-dimensional code, means for dividing the black cell into a tally pattern and a sub tally pattern, and transmitting the two-dimensional code and the tally pattern of the transaction ID to the mobile phone 14 Means for associating the sub-tally pattern with the transaction ID and storing it in the storage means, means for reading the two-dimensional code on the display of the mobile phone 14, means for recognizing the transaction ID from now on, sub-tally pattern associated with the transaction ID Means for extracting the tally pattern displayed on the mobile terminal 14, means for restoring the individualized data from the tally pattern and the sub tally pattern, An authentication system 10 comprising means for outputting a product delivery command to the product providing mechanism when stored in the storage means.
[Selection] Figure 1

Description

  The present invention relates to an authentication system using a two-dimensional code. In particular, it is effective that contents of important information such as electronic money data expressed by a two-dimensional code such as a QR code are read by a general-purpose code reader. It relates to authentication technology that can be prevented.

A two-dimensional matrix type barcode represented by a QR (Quick Response) code has a higher recording density than a conventional one-dimensional barcode, so that it is required to save printing space in a semiconductor manufacturing process or the like. It has been widely used in the field.
Recently, mobile phones are equipped with a QR code reading function, and URLs, phone numbers, and email addresses of websites can be printed on business cards, magazines, etc. using QR codes. Access is also being made.
In addition, a service has been introduced in which a QR code is displayed on a display of a mobile phone, and by reading the code with a code reader, a product purchase price is settled and a ticket is issued.

Non-Patent Document 1 shows an example. When a user who has completed membership registration accesses a dedicated server from a mobile phone having an Internet connection function and selects a specific product or service from the service menu, A kind of electronic money called a C ticket is transmitted from the server in the form of a two-dimensional code.
When the user holds the image of the two-dimensional code over the authentication port of the dedicated vending machine in a state where the image of the two-dimensional code is displayed on the mobile phone display, the C ticket is read by the code reader, and the corresponding product is discharged or the corresponding software is downloaded. A corresponding ticket is issued.
Thereafter, the price of the product is withdrawn from the user's prepaid account, and the settlement is completed.

Non-Patent Document 2 shows another example. When a user reserves an air ticket via the Internet and completes payment by a predetermined settlement means, a two-dimensional code displaying the reserved information is transmitted to the mobile phone. Is done.
When the user holds the image of the two-dimensional code on the mobile phone display and holds it over an automatic check-in / ticketing machine in the airport, the checked-in air ticket is automatically issued.

Cmode / i-mode (registered trademark) is in operation with a coca cola (registered trademark) vending machine! [Search August 9, 2004] Internet URL: http://www.nttdocomo.co.jp/p_s/imode/cmode/ Domestic Ticketless Service [Search August 9, 2004] Internet URL: http://www.jal.co.jp/dom/service/ticketless_gift/flow.html

In this way, the two-dimensional code corresponding to the user's selection information is transmitted to the mobile phone, and the legitimacy of the user is confirmed by reading the two-dimensional code displayed on the display with the terminal device on the service providing side. With the establishment of a system for providing products and services, users have the advantage that they can easily and quickly obtain necessary products and services without cash.
In addition, the product / service provider (hereinafter referred to as “vendor”) also has the advantage of expanding sales of its own products and services without risk of bad debt.

However, since the two-dimensional code can be read very easily, the two-dimensional code itself including the important data as described above is distributed to the mobile phone and displayed on the display. There is a high risk of inducing unauthorized use.
Of course, since the data expressed by the two-dimensional code is normally encrypted, even if the original character string is restored by the code reader of the mobile phone, it cannot be easily exploited by an amateur. However, a person with a certain level of expertise and equipment can sufficiently decrypt the code and forge a legitimate two-dimensional code.

  The present invention has been made to solve the above-mentioned problems of the authentication system using the conventional two-dimensional code, and distributes the two-dimensional code itself including important information to the user's portable terminal. It is an object of the present invention to realize an authentication system that can provide products and services selected by a user with the same simplicity as using a two-dimensional code.

In order to achieve the above object, an authentication system using a two-dimensional code according to claim 1 includes means for issuing a unique transaction ID for product selection information transmitted from a mobile terminal of a user, A means for converting the data including the transaction ID into a two-dimensional code and the electronic certificate data indicating the validity of the delivery of the product selected by the user, and adding the transaction ID to the personalized electronic certificate data Generating means, means for storing the personalized electronic certificate data in the first storage means, means for converting the personalized electronic certificate data into a two-dimensional code, and black and white included in the two-dimensional code Layer dividing means for dividing one color cell in the dot pattern into a first tally pattern and a second tally pattern, a two-dimensional code including the transaction ID and the first tally pattern above Means for transmitting to the mobile terminal, means for storing the second tally pattern in association with the transaction ID in the second storage means, means for reading the two-dimensional code displayed on the display of the user's mobile terminal, Means for recognizing a transaction ID from the two-dimensional code, means for extracting a second tally pattern associated with the transaction ID from the second storage means, and a first displayed on the display of the user's portable terminal Means for reading the tally pattern, means for restoring the two-dimensional code of the personalized electronic certificate data by superimposing the first tally pattern and the second tally pattern, and the personalized electronic certificate data being the first Means for confirming whether or not it is stored in the storage means, and means for outputting a delivery command for the product selected by the user to the mechanism for providing the product if stored. It is characterized by having.
The “product” includes services (the same applies hereinafter).
The “electronic certificate data” corresponds to electronic money data, electronic voucher data, and the like.

  An authentication system using a two-dimensional code according to claim 2 is an authentication system comprising a server and a product providing device, wherein the server is unique to product selection information transmitted from a user's mobile terminal. The transaction ID for the means for issuing the transaction ID, the means for converting at least the data including the transaction ID into a two-dimensional code, and the electronic certificate data indicating the validity of the delivery of the product selected by the user Means for generating personalized electronic certificate data by adding the means, means for storing the personalized electronic certificate data in the first storage means, and means for converting the personalized electronic certificate data into a two-dimensional code And a layer dividing means for dividing one color cell in the monochrome dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern, and the transaction ID A means for transmitting the dimension code and the first tally pattern to the portable terminal; a means for storing the second tally pattern in association with the transaction ID in the second storage means; and a transaction ID from the product providing apparatus. Means for extracting the corresponding second tally pattern from the second storage means and transmitting it to the product providing device when the second tally pattern delivery request is transmitted; Means for confirming whether or not the certificate data is stored in the first storage means and transmitting the result to the commodity providing apparatus when the certificate data is transmitted, the commodity providing apparatus comprising Means for reading the two-dimensional code displayed on the display of the terminal, means for recognizing the transaction ID from the two-dimensional code, and transmitting the transaction ID to the server to exchange the corresponding second tally pattern. Requesting means, means for reading the first tally pattern displayed on the display of the user's portable terminal, and superimposing the first tally pattern and the second tally pattern transmitted from the server, A means for restoring the two-dimensional code of the certificate data, a means for sending the personalized electronic certificate data to the server and inquiring whether it is stored in the first storage means, and affirmation from the server And a means for outputting a delivery instruction for the product selected by the user to the mechanism for providing the product when a specific result is transmitted.

  An authentication system using a two-dimensional code according to claim 3 is an authentication system including a first server, a second server, and a product providing device, wherein the first server is a user's mobile phone. A means for issuing a unique transaction ID, a means for converting at least data including this transaction ID into a two-dimensional code, and a right to issue the user-selected product for the product selection information transmitted from the terminal Means for generating personalized electronic certificate data by adding the transaction ID to the electronic certificate data indicating the personality, means for storing the personalized electronic certificate data in the first storage means, and the personality Means for converting the digitized electronic certificate data into a two-dimensional code, and a cell of one color in the black and white dot pattern included in the two-dimensional code is divided into a first tally pattern and a second tally pattern. layer Dividing means, means for transmitting a two-dimensional code including the transaction ID and a first tally pattern to the portable terminal, means for transmitting the second tally pattern and transaction ID to a second server, and the product Means for confirming whether or not the personalized electronic certificate data is stored in the first storage means when the data is transmitted from the providing apparatus, and transmitting the result to the commodity providing apparatus, The server stores the second tally pattern transmitted from the first server in association with the transaction ID in the second storage means, and the second tally pattern accompanied by the transaction ID from the product providing apparatus. Means for extracting the corresponding second tally pattern from the second storage means and transmitting it to the product providing device when the request is transmitted, and the product providing device is provided on the display of the user's portable terminal. Displayed Means for reading the two-dimensional code, means for recognizing a transaction ID from the two-dimensional code, means for transmitting the transaction ID to the second server and requesting delivery of a corresponding second tally pattern; A means for reading the first tally pattern displayed on the display of the user's portable terminal, and superimposing the first tally pattern and the second tally pattern transmitted from the second server, to create a personalized electronic certificate Means for restoring the two-dimensional code of the data, means for transmitting the personalized electronic certificate data to the first server and inquiring whether or not it is stored in the first storage means, and the first server And a means for outputting a delivery command for the product selected by the user to the mechanism that provides the product when a positive result is transmitted from the device.

  An authentication system using a two-dimensional code according to claim 4 is provided with means for issuing a unique transaction ID for product selection information transmitted from a user's mobile terminal, and at least two data including the transaction ID. Means for converting to a dimension code, means for generating personalized electronic certificate data by adding the transaction ID to the electronic certificate data indicating the validity of delivery of the product selected by the user, and this individuality Means for storing the digitized digital certificate data in the first storage means, means for converting the personalized digital certificate data into a two-dimensional code, and one of the colors in the black-and-white dot pattern included in the two-dimensional code Layer dividing means for dividing the first cell into the first tally pattern and the second tally pattern, and one color cell is increased with respect to the first tally pattern and the second tally pattern. A dot pattern adjustment means for generating a first adjusted tally pattern and a second adjusted tally pattern in which the adjustment cells in which the adjustment cells are arranged in a predetermined pattern are commonly added and the distribution of each color is adjusted, respectively; Means for transmitting the two-dimensional code including the transaction ID and the first adjusted tally pattern to the portable terminal; means for storing the second adjusted tally pattern in association with the transaction ID in the second storage means; , A means for reading the two-dimensional code displayed on the display of the user's mobile terminal, a means for recognizing a transaction ID from the two-dimensional code, and a second adjusted tally pattern associated with the transaction ID Two means for extracting from the storage means, means for reading the first adjusted tally pattern displayed on the display of the user's portable terminal, and the first key Adjustment cell removing means for removing adjustment cells from the adjusted tally pattern and the second adjusted tally pattern and restoring the first tally pattern and the second tally pattern, and the first tally pattern and the second tally Means for restoring the two-dimensional code of the personalized electronic certificate data by superimposing the patterns, means for confirming whether or not the personalized electronic certificate data is stored in the first storage means, If there is, a means for outputting a delivery instruction for the product selected by the user to the mechanism for providing the product is provided.

  An authentication system using a two-dimensional code according to claim 5 is an authentication system comprising a server and a product providing device, wherein the server is unique to product selection information transmitted from a user's mobile terminal. The transaction ID for the means for issuing the transaction ID, the means for converting at least the data including the transaction ID into a two-dimensional code, and the electronic certificate data indicating the validity of the delivery of the product selected by the user Means for generating personalized electronic certificate data by adding the means, means for storing the personalized electronic certificate data in the first storage means, and means for converting the personalized electronic certificate data into a two-dimensional code Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern, and the first tally pattern. A first adjustment in which an adjustment pattern in which adjustment cells for increasing one color cell are arranged in a predetermined pattern is commonly added to the first and second tally patterns, and the distribution of each color is adjusted. Dot pattern adjusting means for generating a finished tally pattern and a second adjusted tally pattern, means for transmitting a two-dimensional code including the transaction ID and a first adjusted tally pattern to the portable terminal, and the second Means for storing the adjusted tally pattern in association with the transaction ID in the second storage means, and the second adjusted tally pattern issuing request accompanied by the transaction ID from the product providing apparatus; Extracting the corresponding second adjusted tally pattern from the storage means, and transmitting the extracted second tally pattern to the product providing device, and when the personalized electronic certificate data is transmitted from the product providing device. Means for confirming whether or not this is stored in the first storage means, and means for transmitting the result to the commodity providing apparatus, wherein the commodity providing apparatus is displayed on the display of the user's portable terminal. Means for reading the code, means for recognizing the transaction ID from the two-dimensional code, means for transmitting the transaction ID to the server and requesting the delivery of the corresponding second adjusted tally pattern, and the mobile terminal of the user Means for reading the first adjusted tally pattern displayed on the display, and removing the adjustment cell from the first adjusted tally pattern and the second adjusted tally pattern transmitted from the server, and the first tally The adjustment cell removing means for restoring the pattern and the second tally pattern, and superimposing the first tally pattern and the second tally pattern, Means for restoring the dimension code, means for sending the personalized digital certificate data to the server and inquiring whether it is stored in the first storage means, and sending a positive result from the server And a means for outputting a delivery instruction for the product selected by the user to the mechanism for providing the product.

  An authentication system using a two-dimensional code according to claim 6 is an authentication system including a first server, a second server, and a product providing device, wherein the first server is a user's mobile phone. A means for issuing a unique transaction ID, a means for converting at least data including this transaction ID into a two-dimensional code, and a right to issue the user-selected product for the product selection information transmitted from the terminal Means for generating personalized electronic certificate data by adding the transaction ID to the electronic certificate data indicating the personality, means for storing the personalized electronic certificate data in the first storage means, and the personality Means for converting the digitized electronic certificate data into a two-dimensional code, and a cell of one color in the black and white dot pattern included in the two-dimensional code is divided into a first tally pattern and a second tally pattern. layer A dividing unit and an adjustment pattern in which adjustment cells for increasing one color cell are arranged in a predetermined pattern are added in common to the first tally pattern and the second tally pattern, and the distribution of each color The dot pattern adjustment means for generating the first adjusted tally pattern and the second adjusted tally pattern adjusted respectively, and the two-dimensional code including the transaction ID and the first adjusted tally pattern are transmitted to the portable terminal. Means for transmitting the second adjusted tally pattern and transaction ID to the second server, and when the personalized electronic certificate data is transmitted from the product providing apparatus, this is the first storage means. The second adjusted tally transmitted from the first server to the product providing apparatus, and the second server transmits the result to the product providing apparatus. Means for associating a turn with a transaction ID in the second storage means, and when the delivery request for the second adjusted tally pattern with the transaction ID is transmitted from the commodity providing apparatus, the second storage means Means for extracting the corresponding second adjusted tally pattern from the above and transmitting it to the product providing device, wherein the product providing device reads the two-dimensional code displayed on the display of the user's portable terminal, Means for recognizing the transaction ID from the two-dimensional code, means for transmitting the transaction ID to the second server and requesting the delivery of the corresponding second adjusted tally pattern, and the display of the user's mobile terminal Means for reading the displayed first adjusted tally pattern, and the adjusted cell from the first adjusted tally pattern and the second adjusted tally pattern transmitted from the second server; And the adjustment cell removing means for restoring the first tally pattern and the second tally pattern, and the first tally pattern and the second tally pattern are overlapped to obtain a two-dimensional code of the personalized electronic certificate data , A means for transmitting the personalized electronic certificate data to the first server and inquiring whether it is stored in the first storage means, and a positive result from the first server And a means for outputting a delivery instruction for the product selected by the user to the mechanism that provides the product.

  An authentication system using a two-dimensional code according to claim 7 is based on the system according to claims 1 to 6, and the layer dividing means includes a black and white dot pattern included in the two-dimensional code of the electronic certificate data. A first mask cell that inverts only one color cell, a positive mask pattern in which a second mask cell that transmits both color cells as they are is arranged in a predetermined pattern, a first mask cell, and a second mask cell By alternately applying the sub mask pattern obtained by inverting the arrangement of the mask cells with respect to the positive mask pattern to the two-dimensional code of the electronic certificate data, one color cell is assigned to the first tally pattern and the second tally pattern. It is characterized by dividing it into tally patterns.

  An authentication system using a two-dimensional code according to claim 8 is premised on the system of claims 4 to 7, and the dot pattern adjustment means is arranged to distribute the other color in the two-dimensional code of the electronic certificate data. The adjustment pattern having the corresponding adjustment cell is commonly added to the first tally pattern and the second tally pattern, thereby generating the first adjusted tally pattern and the second adjusted tally pattern, The adjustment cell removal means is characterized in that the adjustment cell added to each of the first adjusted tally pattern and the second adjusted tally pattern is removed by performing an XOR operation process.

  An authentication system using a two-dimensional code according to claim 9 is based on the system of claims 4 to 7, and the dot pattern adjusting means is further adapted to distribute the other color in the two-dimensional code of the electronic certificate data. A first adjustment pattern is selected at random from a reference adjustment pattern having a corresponding adjustment cell and a plurality of types of sub-adjustment patterns obtained by partially removing the adjustment cell from the reference adjustment pattern. By adding the tally pattern and the second tally pattern in common, the first adjusted tally pattern and the second adjusted tally pattern are generated, and the adjustment cell removing unit includes the first adjusted tally pattern. The second adjusted tally pattern is subjected to XOR operation processing to remove the added adjustment cells.

According to the authentication system using the two-dimensional code described in claims 1 to 3, only the information such as a transaction ID is converted into a two-dimensional code and distributed to the user's mobile terminal, and an important electronic certificate The data two-dimensional code is divided into layers, and only one tally pattern is distributed to the user's mobile terminal.
For this reason, even if this tally pattern is read by a code reader, the electronic certificate data cannot be restored, and it becomes possible to effectively prevent the analysis and forgery.

In the authentication system using the two-dimensional code according to any one of claims 4 to 6, the two-dimensional code of important electronic certificate data is divided into layers, and one tally is added in a state where an adjustment cell is added. Only the pattern is distributed to the user's mobile terminal.
For this reason, it becomes possible to make it more difficult to restore the original two-dimensional code based on the tally pattern delivered to the user.
In addition, the addition of an extra adjustment cell invalidates the error correction function using the error correction code normally embedded in the two-dimensional code, resulting in an advantage that the safety is further increased.

  According to the authentication system using the two-dimensional code described in claim 7, by applying the primary mask pattern and the secondary mask pattern to the two-dimensional code of the electronic certificate data, the cell of one color is set to the first tally. It is possible to easily divide the pattern and the second tally pattern.

  According to the authentication system using the two-dimensional code according to claim 8, the adjustment cell added to the first tally pattern and the second tally pattern by the dot pattern adjustment unit is processed by the XOR operation processing by the adjustment cell removal unit. It becomes possible to remove very easily by performing.

According to the authentication system using the two-dimensional code described in claim 9, the dot pattern adjustment means adds the adjustment pattern irregularly selected from the reference adjustment pattern and the plurality of sub adjustment patterns. Since the adjusted tally pattern and the second adjusted tally pattern are generated, the difficulty of restoring the original two-dimensional code based on the tally pattern distributed to the user can be further increased.
Also in this case, the adjustment cell added to the first tally pattern and the second tally pattern in the dot pattern adjustment unit can be removed very easily by performing the XOR operation process in the adjustment cell removal unit. .

FIG. 1 is a conceptual diagram showing an overall configuration of a first authentication system 10 using a two-dimensional code according to the present invention, an issuer server 12 managed by an issuer of electronic certificate data, and a user's mobile phone. 14, a vendor server 16 managed by a vendor (here, a soft drink manufacturer) that provides products and services, and a vending machine 18 for providing products and services installed in various locations by the vendor.
The issuer server 12, the vendor server 16 and the vending machine 18 are network-connected via a dedicated line.
If the issuer of the two-dimensional code and the vendor are the same entity, the issuer server 12 can also function as the vendor server 16 (or vice versa).

The mobile phone 14 has at least an Internet connection function and an image display / registration function.
The user can also use a PDA, a notebook personal computer or the like having an Internet connection function and an image display / registration function as a mobile terminal instead of the mobile phone 14.

FIG. 2 is a block diagram showing a functional configuration of the issuer server 12, and includes a basic DB group 20, an original data generation unit 21, a QR code generation unit 22, a QR code storage unit 23, and a tally code generation unit 24. A tally code storage unit 25, a generated data distribution unit 26, an authentication processing unit 27, and a communication interface 28.
The original data generation unit 21, the QR code generation unit 22, the tally code generation unit 24, the generation data distribution unit 26, and the authentication processing unit 27 are required by the CPU of the issuer server 12 according to the OS, a dedicated application program, and the like. This is realized by executing the process.
The basic DB group 20, the QR code storage unit 23, and the tally code storage unit 25 are provided in the hard disk or memory of the issuer server 12.

FIG. 3 is a block diagram showing the functional configuration of the vending machine 18, and includes a code reader 30, an image recognition unit 31, a tally code request unit 32, a QR code restoration unit 33, a QR code storage unit 34, An authentication request unit 35, a business processing unit 36, a product providing mechanism 37, a communication interface 38, and a display 39 are provided.
The image recognition unit 31, the tally code request unit 32, the QR code restoration unit 33, the authentication request unit 35, and the business processing unit 36 allow the CPU of the vending machine 18 to perform necessary processing according to the OS, a dedicated application program, etc. It is realized by executing.
The QR code storage unit 34 is provided in the hard disk or memory of the vending machine 18.

The product providing mechanism 37 includes hardware having a function of specifically providing a user-selected product or service. For example, when the vending machine 18 is a soft drink sales machine, a can or pet This includes stockers that store soft drinks filled in bottles, and devices that transport specific products to the outlet.
In addition, when the vending machine 18 also provides a service for selling admission tickets for neighboring facilities, a roll paper storage unit, a feed roller, a printing device, a cutter, and the like are applicable.

The processing procedure in the authentication system 10 will be described below with reference to the flowcharts of FIGS.
First, the user connects to the issuer server 12 from the mobile phone 14 via the Internet, and displays a service menu on the display. When the user selects a soft drink of 120 yen, for example, from this menu, product selection information is transmitted from the mobile phone 14 to the issuer server 12 (S01 in FIG. 4).

Receiving this, the issuer server 12 generates various necessary data (S02).
The required data generation process in the issuer server 12 will be described in detail below with reference to the flowchart of FIG.
First, in the issuer server 12 that has received the product selection information from the user, the original data generation unit 21 is activated, and a transaction ID relating to the current product sale is generated (S30 in FIG. 5).
As shown in FIG. 6, this transaction ID is made up of the user's account name (t.sato #) + date and time information (0408120012), and the original data generation unit 21 obtains the account name from the user DB included in the basic DB group 20. The transaction ID is generated by extracting the date and time data output from a clock circuit (not shown).
As a premise, the user needs to complete user registration in advance.
The original data generation unit 21 generates the first original data by adding the character string of \ 120 which is the face value of the product to the transaction ID (S31), and outputs this to the QR code generation unit 22.
However, the addition of the face value can be omitted, and only the transaction ID can be output to the QR code generating unit 22 as the first original data. Further, the transaction ID can be generated by data other than the above (for example, simple serial number + date and time information).

Next, the original data generation unit 21 refers to the electronic money DB included in the basic DB group 20 and extracts electronic money data (for example, consisting of a 140-digit encrypted character string) with a face value of 120 yen (S32), By combining the above transaction ID with this, personalized electronic money data = second original data is generated (S33).
In this electronic money data, contents indicating the validity of delivering a product or service specifically or comprehensively selected by the user (for example, that it can be exchanged for a beverage worth 120 yen) are described.
This second original data is also output from the original data generator 21 to the QR code generator 22.

The QR code generation unit 22 performs code conversion processing on the first original data and the second original data passed from the original data generation unit 21 according to a predetermined algorithm, and a large number of black and white data cells are arranged in a matrix. The generated QR code is generated (S34).
In addition to this data cell, the QR code includes a cutout symbol for position detection, format information, a timing pattern, an error correction code, and the like.
The first QR code and the second QR code generated by the QR code generation unit 22 are stored in the QR code storage unit 23 together with the first original data and the second original data (S35).

Next, the tally code generation unit 24 is activated, and the second QR code generated from the second original data (transaction ID + electronic money data) is extracted from the QR code storage unit 23 and is subjected to layer division processing. (S36).
Here, the layer division process is a normal tally obtained by dividing a black and white dot pattern of a data cell into two layers by applying a positive mask pattern application process and a sub mask pattern application process to the data cell portion in the QR code. This means that a pattern and a sub tally pattern are generated (S37).

FIG. 7 is a conceptual diagram showing the image. By applying the positive mask pattern 41 and the sub mask pattern 42 to the dot pattern 40 of the original matrix, respectively, the original black cell 43 becomes the normal tally pattern 44 and the sub tally. A state of being separated into patterns 45 is depicted.
The positive mask pattern 41 and the sub mask pattern 42 are arranged so that a black mask cell 46 and a white mask cell 47 are inverted with respect to each other as shown in the figure. The black cell 43 is inverted without being transmitted to the white cell 48 (the white cell 48 is transmitted), and the white mask cell 47 has a property of transmitting the black cell 43 and the white cell 48.
For this reason, when the positive mask pattern 41 is applied to the original pattern 40, a normal tally pattern 44 in which the black cells 43 that were six in the original pattern 40 are reduced to two is obtained. Similarly, when the sub mask pattern 42 is applied to the original pattern 40, a sub tally pattern 45 in which the black cells 43 are reduced to four is obtained. Eventually, the original black cell 43 is separated into a regular tally pattern 44 and a sub tally pattern 45, and the original pattern 40 is reproduced when they are overlapped.

In the above description, a 3 × 3 matrix is used for convenience of illustration. However, since an actual QR code includes a large number of data cells, a normal tally pattern and a sub tally pattern having a more complicated dot pattern can be obtained. It becomes.
In the above example, the black cell 43 of the original pattern 40 is divided into two layers, but the operation (logical operation) of the primary mask pattern 41 and the secondary mask pattern 42 is described as “Each black mask cell 46 is an original. If the white cell 48 of the pattern 40 is not transmitted but is inverted to the black cell 43 (the black cell 43 is transmitted) and the white mask cell 47 is transmitted through the white cell 48 and the black cell 43, the white cell 48 side Can be obtained as a normal tally pattern and a sub tally pattern.
Note that the above-described normal mask pattern application process and sub-mask pattern application process are realized only by logical operations in the tally code generation unit 24, and an optical mask is applied to a QR code expressed as an image. Needless to say, it doesn't make it happen.

Next, the tally code generating unit 24 performs adjustment pattern addition processing on the regular tally pattern 44 and the sub tally pattern 45 (S38).
Here, the adjustment pattern addition process means a process of increasing the number of black cells 43 by superimposing the adjustment pattern 49 on the regular tally pattern 44 and the sub tally pattern 45 as shown in FIG.
That is, the adjustment pattern 49 includes a distribution adjustment cell 50 corresponding to the distribution of the white cells 48 in the original pattern 40. Since the adjustment cell 50 is a black cell, the adjustment cell 49 is a normal tally pattern 44 and a sub tally pattern 45. , The corresponding white cells 48 in both patterns are replaced with black cells 43, and the number of black cells 43 increases.

In the figure, since the number of white cells 48 in the original pattern 40 is 3, the adjustment pattern 49 includes three black adjustment cells 50. By superimposing these on the tally pattern 44, five black cells are provided. An adjusted secant pattern 51 having 43 is generated (S39).
In addition, by adjusting the same adjustment pattern 49 on the sub tally pattern 45, an adjusted sub tally pattern 52 including seven black cells 43 is generated.
Thus, by adding the adjustment pattern 49 to the regular tally pattern 44 and the sub tally pattern 45, the black and white distribution (dot pattern) in both patterns is adjusted.
The adjusted tally pattern 51 and adjusted sub tally pattern 52 generated by the tally code generator 24 are a normal tally code and a sub tally code having other elements constituting the QR code, such as a cutout symbol and format information. It is stored in the tally code storage unit 25 (S40).

Finally, the generated data distribution unit 26 is activated, and the transaction ID stored in the QR code storage unit 23 + the QR code of the face value (first QR code) and the adjusted tally pattern stored in the tally code storage unit 25 are displayed. The included tally code is transmitted as image data to the user's mobile phone 14 (S03, S04 in FIG. 4).
The user saves each image displayed on the display of the mobile phone 14 in the memory using the image registration function (S05).
At the same time, the generated data distribution unit 26 transmits the sub tally code including the adjusted sub tally pattern stored in the tally code storage unit 25 to the vendor server 16 together with the transaction ID (S06).
Receiving this, the vendor server 16 stores the sub tally code in a predetermined storage unit in association with the transaction ID (S07).

Next, the user approaches the dedicated vending machine 18 and holds the transaction ID displayed on the display of the mobile phone 14 + the QR code of the face value on the authentication port (S08).
As a result, the QR code is read by the code reader 30 of the vending machine 18 (S09), and the image data is output to the image recognition unit 31.
On the other hand, the image recognizing unit 31 pays attention to the cut symbol of the QR code, detects its position and inclination, and reads the dot pattern of the data cell.
Next, the image recognition unit 31 extracts the transaction ID described in the data cell (S10) and outputs it to the tally code requesting unit 32.

In response to this, the tally code requesting unit 32 transmits the transaction ID to the vendor server 16 (S11) and requests distribution of the corresponding sub tally code.
Receiving this, the vendor server 16 extracts the subtally code corresponding to the transaction ID from the storage unit and transmits it to the vending machine 18 (S12).
The sub tally code is output from the tally code requesting unit 32 to the QR code restoring unit 33.

Next, the tally code requesting unit 32 causes the display 39 of the vending machine 18 to display a message such as “Hold the tally code over the authentication port”.
On the other hand, when the user holds the tally code over the authentication port in a state where it is displayed on the display of the mobile phone 14 (S14), the tally code read by the code reader 30 (S15), the QR code restoring unit 33 Is output.

The QR code restoration unit 33 performs an XOR (exclusive OR) operation on the adjusted tally pattern of the above tally code and the adjusted sub tally pattern of the sub tally code, thereby obtaining the original transaction ID + electronic money. The QR code of the data is restored (S17).
FIG. 7 shows an image thereof. When the adjusted normal tally pattern 51 and the adjusted sub tally pattern 52 are superimposed, the corresponding cell remains as the black cell 43 only when either one is black. When black or both are white, a state where the original pattern 40 is restored as a result of replacement with the white cell 48 is expressed.
Through this XOR calculation process, the black adjustment cell 50 added in the issuer server 12 is automatically lost.
The QR code of the transaction ID + electronic money data restored by the QR code restoration unit 33 is temporarily stored in the QR code storage unit 34.

Next, the authentication request unit 35 is activated, decodes the QR code stored in the QR code storage unit 34, transmits the transaction ID + electronic money data to the issuer server 12, and requests authentication (S18).
In the issuer server 12 that has received this, if the authentication processing unit 27 searches the QR code storage unit 23 and confirms that the corresponding transaction ID + electronic money data is registered (S19), it is affirmative. The authentication result is transmitted to the vending machine 18 (S20).
Upon receiving this request, the authentication request unit 35 requests the business processing unit 36 to execute necessary processing.
In this case, since the user wants to purchase a 120-yen soft drink, the business processing unit 36 displays on the display 39 a message such as “Authentication completed. Please select your favorite drink.” Is displayed, and a lamp is lit on a selection switch for drinks that can be purchased for 120 yen, and the user waits until one of the switches is pressed.
Then, when a specific switch is pressed by the user, the product providing mechanism 37 is driven to discharge the necessary beverage (S21).

Thereafter, a message indicating that the product has been provided is transmitted from the business processing unit 36 to the vendor server 16, and sales completion information is transmitted from the vendor server 16 to the issuer server 12.
In response to this, the issuer server 12 withdraws 120 yen, which is the purchase price, from the user's prepaid account and sends it to the vendor's bank account monthly.

In the case of this authentication system 10, only the transaction ID and amount information consisting of “user account + date / time information” are QR-coded as described above and distributed to the user, and QR code of important electronic money data Is distributed to the user's mobile phone 14 as a tally code in a state where the adjustment cell is added after the layers are divided.
For this reason, even if the tally code displayed on the display of the mobile phone 14 is read by the QR code reader, the electronic money data cannot be reproduced, and it cannot be analyzed and illegally used.

Note that an error correction code generated according to the Reed-Solomon algorithm is embedded in the data cell in the QR code, and has the function of recovering the original data even if the data cell area is damaged up to 30%. .
On the other hand, since the adjustment pattern is added regardless of the Reed-Solomon algorithm as described above when generating the tally code, the error correction function does not work and the original QR code may be restored. There is no sex.
However, the adjustment pattern addition process can be omitted, and the tally pattern 44 can be delivered to the user's mobile phone 14 as it is. In this case, since the original pattern 40 can be restored simply by superimposing the normal tally pattern 44 and the sub tally pattern 45, the XOR operation processing in the QR code restoration unit 33 of the vending machine 18 is also unnecessary.

In the above, an example in which the white cell 48 of the original pattern 40 is inverted to the black adjustment cell 50 is used as the adjustment pattern 49. However, the present invention is not limited to this.
For example, as shown in FIG. 8, a plurality of sub-adjustment patterns in which the black adjustment cells 50 are partially thinned out from the reference adjustment pattern 49 are prepared, and the tally code generation unit 24 of the issuer server 12 stores them as electronic money. It may be programmed to be added irregularly at the time of issue.
As a result, even if the same 120 yen electronic money data is issued, a different adjustment pattern is added each time, and it becomes more difficult to detect the original QR code from the adjusted tally pattern.

By adjusting the white cell 48 of the original pattern 40 to the black adjustment cell 50 as described above, or by subtracting the adjustment cell 50 from this, the adjusted tally pattern as described above is used. Thus, there is an advantage that the adjustment cell can be automatically eliminated by performing the XOR operation processing on the adjusted sub tally pattern.
That is, the black cell 43 of the original pattern 40 is divided into the normal tally pattern 44 and the sub tally pattern 45 by the normal mask pattern application process and the sub mask pattern application process, and all or part of the white cells 48 in the original pattern 40 As a result of commonly adding the adjustment pattern 49 in which the black adjustment cell 50 is replaced, the black adjustment cell 50 is added to the same white cell 48 of the regular tally pattern 44 and the sub tally pattern 45. The black cells 43 and the black cells 43 overlap and disappear.

However, the present invention is not limited to this, and other adjustment patterns can be used.
In this case, the tally code generating unit 24 of the issuer server 12 adds the adjustment cell to the regular tally pattern 44 and the sub tally pattern 45 according to a certain rule, and the QR code restoring unit 33 of the vending machine 18 is the same as this. The adjustment cell may be specified according to the rule and removed.
Alternatively, when applying the adjustment pattern in the tally code generation unit 24, “If the black adjustment cell 50 of the adjustment pattern overlaps the black cell 43 of the normal tally pattern 44 or the sub tally pattern 45, the white cell 48 is inverted. If it is operated so as to apply the rule “Make”, the QR code restoration unit 33 of the vending machine 18 automatically performs the XOR operation processing on the adjusted tally pattern 44 and the adjusted sub tally pattern 45. Thus, the adjustment cell 50 can be removed.

FIG. 9 is a conceptual diagram showing the overall configuration of the second authentication system 60 according to the present invention, which includes an issuer server 12 managed by an issuer of electronic certificate data, a mobile phone 14 possessed by a user, and a vendor. A vendor server 16 managed by the airline (here, an airline) and an automatic ticketing machine 62 installed at an airport or the like by the vendor are provided.
The issuer server 12, the vendor server 16, and the automatic ticketing machine 62 are connected to each other via a dedicated line.

The second authentication system 60 is characterized in that an air ticket vending machine 62 is installed instead of the vending machine 18 of the first authentication system 10, and other configurations are substantially common. .
The vending machine 62 is different in that it issues a checked-in air ticket instead of a soft drink or a ticket, and its functional configuration is substantially the same as the functional configuration of the vending machine 18 shown in FIG. Is common.
Therefore, in the following, the processing procedure in the second authentication system 60 will be outlined according to the flowchart of FIG. 10, but the same reference numerals and names are used for portions common to both systems, and redundant description is omitted.

  First, the user connects to the issuer server 12 from the mobile phone 14 via the Internet, and displays a service menu on the display. When the user selects an air ticket at a specific date and time from the menu, air ticket reservation information is transmitted from the mobile phone 14 to the issuer server 12 (S51).

Receiving this, the issuer server 12 generates various necessary data (S52).
That is, the original data generation unit 21 generates a transaction ID (user account name + date / time information) related to the current air ticket sale.
The original data generation unit 21 generates a first original data by adding a character string indicating a flight name or the like to the transaction ID, and outputs the first original data to the QR code generation unit 22.

Next, the original data generation unit 21 refers to the electronic voucher ticket DB included in the basic DB group 20 and extracts corresponding electronic voucher data (consisting of an encrypted character string having a predetermined number of digits). By combining the transaction ID, personalized electronic voucher data = second original data is generated.
This second original data is also output from the original data generator 21 to the QR code generator 22.

The QR code generation unit 22 performs code conversion processing on the first original data and the second original data passed from the original data generation unit 21 according to a predetermined algorithm, and a large number of black and white data cells are arranged in a matrix. Generated QR code is generated.
The first QR code and the second QR code generated by the QR code generation unit 22 are stored in the QR code storage unit 23.

  Next, the tally code generation unit 24 is activated, and the second QR code generated from the second original data (transaction ID + electronic voucher data) is extracted from the QR code storage unit 23, and layer division processing is performed on this. As a result, a normal tally pattern 44 and a sub tally pattern 45 are generated by dividing the black cell 43 of the data cell into two layers.

  Next, the tally code generation unit 24 performs the addition process of the adjustment pattern 49 to the above normal tally pattern 44 and the sub tally pattern 45 to generate the adjusted tally pattern 51 and the adjusted sub tally pattern 52. The tally code and the subtally code including the are stored in the tally code storage unit 25.

Finally, the generated data distribution unit 26 is activated, and the QR code (first QR code) stored in the QR code storage unit 23, such as the transaction ID + flight number, and the normal tally code stored in the tally code storage unit 25 are displayed. The image data is transmitted to the user's mobile phone 14 (S53, S54 in FIG. 10).
The user saves each image displayed on the display of the mobile phone 14 in the memory using the image registration function (S55).
At the same time, the generated data distribution unit 26 transmits the sub tally code stored in the tally code storage unit 25 to the vendor server 16 together with the transaction ID (S56).
Receiving this, the vendor server 16 stores the sub tally code in a predetermined storage unit in association with the transaction ID (S57).

Next, the user approaches the dedicated automatic ticketing machine 62 and holds the QR code such as the transaction ID and the flight number displayed on the display of the mobile phone 14 over the authentication port (S58).
As a result, the QR code is read by the code reader 30 of the automatic ticketing machine 62 (S59), and the image data is output to the image recognition unit 31.
On the other hand, the image recognizing unit 31 pays attention to the cut symbol of the QR code, detects its position and inclination, and reads the pattern of the data cell.
Next, the image recognition unit 31 extracts the transaction ID described in the data cell (S60) and outputs it to the tally code requesting unit 32.

In response to this, the tally code requesting unit 32 transmits the transaction ID to the vendor server 16 (S61) and requests distribution of the corresponding sub tally code.
Receiving this, the vendor server 16 extracts the subtally code corresponding to the transaction ID from the storage unit and transmits it to the automatic ticketing machine 62 (S62).
The sub tally code is output from the tally code requesting unit 32 to the QR code restoring unit 33.

Next, the tally code requesting unit 32 causes the display 39 of the automatic ticketing machine 62 to display a message such as “Hold the tally code over the authentication port”.
On the other hand, when the user holds the tally code on the authentication port in a state where it is displayed on the display of the mobile phone 14 (S64), the tally code read by the code reader 30 (S65), the QR code restoring unit 33 Is output.

The QR code restoration unit 33 performs an XOR (exclusive OR) operation on the adjusted tally pattern of the above tally code and the adjusted sub tally pattern of the sub tally code, thereby obtaining the original transaction ID + electronic The QR code of the voucher data is restored (S67).
The QR code of the transaction ID + electronic voucher restored by the QR code restoration unit 33 is temporarily stored in the QR code storage unit 34.

Next, the authentication request unit 35 is activated, decodes the QR code stored in the QR code storage unit 34, and transmits the transaction ID + electronic money data to the issuer server 12 to request authentication (S68).
In the issuer server 12 that has received this, the authentication processing unit 27 searches the QR code storage unit 23 and confirms that the corresponding transaction ID + electronic voucher data is registered (S69), affirmative The authentication result is transmitted to the automatic ticketing machine 62 (S70).
Upon receiving this request, the authentication request unit 35 requests the business processing unit 36 to execute necessary processing.
In this case, the business processing unit 36 drives the product providing mechanism 37 to discharge the checked-in air ticket corresponding to the electronic voucher (S71).

Thereafter, an electronic ticket issued message is transmitted from the business processing unit 36 to the vendor server 16, and sales completion information is transmitted from the vendor server 16 to the issuer server 12.
Receiving this, the issuer server 12 withdraws the price of the air ticket from the user's prepaid account and transfers it to the vendor's bank account monthly.

Even in the case of the second authentication system 60, only the transaction ID and the flight number including “user account + date and time information” are distributed to the user after being QR-coded as described above. The electronic voucher data is distributed to the user as a tally code with the layer divided and the adjustment pattern added.
For this reason, even if the tally code displayed on the display of the mobile phone 14 is read by the code reader, the electronic voucher data cannot be reproduced, and the air ticket cannot be obtained illegally by analyzing it.

It is a conceptual diagram which shows the whole structure of the 1st authentication system using a two-dimensional code. It is a block diagram which shows the function structure of an issuer server. It is a block diagram which shows the function structure of a vending machine and an automatic ticketing machine. It is a flowchart which shows the process sequence in a 1st authentication system. It is a flowchart which shows the process sequence in a 1st authentication system. It is a conceptual diagram which shows the various data produced | generated in an issuer server. It is a conceptual diagram which shows the image of a layer division | segmentation process, an adjustment pattern addition process, and an XOR calculation process. It is explanatory drawing which illustrates the variation of an adjustment pattern. It is a conceptual diagram which shows the whole structure of the 2nd authentication system using a two-dimensional code. It is a flowchart which shows the process sequence in a 2nd authentication system.

Explanation of symbols

10 First authentication system using two-dimensional code
12 Issuer server
14 Mobile phone
16 Vendor server
18 Vending machines
20 basic DB groups
21 Original data generator
22 QR code generator
23 QR code storage
24 Tally code generator
25 Tally code storage
26 Generated data distribution part
27 Authentication processing section
28 Communication interface
30 code reader
31 Image recognition unit
32 Tally code request part
33 QR code recovery unit
34 QR code storage
35 Authentication request section
36 Business Processing Department
37 Product provision mechanism
38 Communication interface
39 display
40 original pattern
41 Positive mask pattern
42 Sub mask pattern
43 Black cell
44 secant pattern
45 Subtally pattern
46 Black mask cell
47 White Mask Cell
48 white cell
49 Adjustment pattern
50 Black adjustment cell
51 Adjusted tally pattern
52 Adjusted subtally pattern
60 Second authentication system using two-dimensional code
62 Automatic ticketing machine

Claims (9)

A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first tally pattern to the mobile terminal;
Means for associating the second tally pattern with a transaction ID and storing it in a second storage means;
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for extracting a second tally pattern associated with the transaction ID from the second storage means;
Means for reading the first tally pattern displayed on the display of the user's mobile terminal;
Means for superimposing the first tally pattern and the second tally pattern to restore the two-dimensional code of the personalized electronic certificate data;
Means for confirming whether or not the personalized electronic certificate data is stored in the first storage means;
An authentication system using a two-dimensional code, comprising: means for outputting a delivery command for a product selected by a user to a mechanism for providing the product when stored. An authentication system comprising a server and a product providing device,
The server
A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first tally pattern to the mobile terminal;
Means for associating the second tally pattern with a transaction ID and storing it in a second storage means;
Means for extracting a corresponding second tally pattern from the second storage means and transmitting it to the commodity providing apparatus when a request for issuing a second tally pattern accompanied by a transaction ID is transmitted from the commodity providing apparatus; ,
When the personalized electronic certificate data is transmitted from the product providing device, it is confirmed whether or not it is stored in the first storage means, and the result is transmitted to the product providing device,
The product providing apparatus is
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for transmitting the transaction ID to the server and requesting delivery of a corresponding second tally pattern;
Means for reading the first tally pattern displayed on the display of the user's mobile terminal;
Means for superimposing the first tally pattern and the second tally pattern transmitted from the server to restore the two-dimensional code of the personalized electronic certificate data;
Means for sending the personalized electronic certificate data to the server and inquiring whether it is stored in the first storage means;
An authentication system using a two-dimensional code, comprising: means for outputting a delivery instruction of a product selected by a user to a mechanism for providing a product when a positive result is transmitted from the server . An authentication system including a first server, a second server, and a product providing device,
The first server is
A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first tally pattern to the mobile terminal;
Means for transmitting the second tally pattern and transaction ID to a second server;
When the personalized electronic certificate data is transmitted from the product providing device, it is confirmed whether or not it is stored in the first storage means, and the result is transmitted to the product providing device,
The second server is
Means for associating the second tally pattern transmitted from the first server with the transaction ID and storing it in the second storage means;
Means for extracting a corresponding second tally pattern from the second storage means and transmitting it to the commodity providing apparatus when a request for issuing a second tally pattern accompanied by a transaction ID is transmitted from the commodity providing apparatus; With
The product providing apparatus is
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for transmitting the transaction ID to the second server and requesting the delivery of the corresponding second tally pattern;
Means for reading the first tally pattern displayed on the display of the user's mobile terminal;
Means for superimposing the first tally pattern and the second tally pattern transmitted from the second server to restore the two-dimensional code of the personalized electronic certificate data;
Means for sending the personalized electronic certificate data to the first server and inquiring whether it is stored in the first storage means;
When a positive result is transmitted from the first server, there is used a two-dimensional code characterized by comprising means for outputting a delivery instruction of a product selected by the user to a mechanism that provides the product Authentication system. A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
An adjustment pattern in which adjustment cells for increasing one color cell are arranged in a predetermined pattern is commonly added to the first tally pattern and the second tally pattern, and the distribution of each color is adjusted. Dot pattern adjustment means for generating a first adjusted tally pattern and a second adjusted tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first adjusted tally pattern to the mobile terminal;
Means for associating the second adjusted tally pattern with a transaction ID and storing in a second storage means;
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for extracting a second adjusted tally pattern associated with the transaction ID from the second storage means;
Means for reading the first adjusted tally pattern displayed on the display of the user's mobile terminal;
Adjustment cell removing means for removing adjustment cells from the first adjusted tally pattern and the second adjusted tally pattern, and restoring the first tally pattern and the second tally pattern;
Means for superimposing the first tally pattern and the second tally pattern to restore the two-dimensional code of the personalized electronic certificate data;
Means for confirming whether or not the personalized electronic certificate data is stored in the first storage means;
If stored, means for outputting a delivery instruction for the product selected by the user to a mechanism that provides the product;
An authentication system using a two-dimensional code. An authentication system comprising a server and a product providing device,
The server
A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
An adjustment pattern in which adjustment cells for increasing one color cell are arranged in a predetermined pattern is commonly added to the first tally pattern and the second tally pattern, and the distribution of each color is adjusted. Dot pattern adjustment means for generating a first adjusted tally pattern and a second adjusted tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first adjusted tally pattern to the mobile terminal;
Means for associating the second adjusted tally pattern with a transaction ID and storing in a second storage means;
When a delivery request for a second adjusted tally pattern with a transaction ID is transmitted from the product providing device, the corresponding second adjusted tally pattern is extracted from the second storage means, and the product providing device Means for transmitting;
When the personalized electronic certificate data is transmitted from the product providing device, it is confirmed whether or not it is stored in the first storage means, and the result is transmitted to the product providing device,
The product providing apparatus is
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for sending the transaction ID to the server and requesting delivery of a corresponding second adjusted tally pattern;
Means for reading the first adjusted tally pattern displayed on the display of the user's mobile terminal;
Adjustment cell removing means for removing adjustment cells from the first adjusted tally pattern and the second adjusted tally pattern transmitted from the server, and restoring the first tally pattern and the second tally pattern;
Means for superimposing the first tally pattern and the second tally pattern to restore the two-dimensional code of the personalized electronic certificate data;
Means for sending the personalized electronic certificate data to the server and inquiring whether it is stored in the first storage means;
An authentication system using a two-dimensional code, comprising: means for outputting a delivery instruction of a product selected by a user to a mechanism for providing a product when a positive result is transmitted from the server . An authentication system including a first server, a second server, and a product providing device,
The first server is
A means for issuing a unique transaction ID for product selection information sent from the user's mobile device;
Means for converting data including at least the transaction ID into a two-dimensional code;
Means for generating personalized electronic certificate data by adding the transaction ID to electronic certificate data indicating the validity of delivering the product selected by the user;
Means for storing the personalized electronic certificate data in the first storage means;
Means for converting the personalized electronic certificate data into a two-dimensional code;
Layer dividing means for dividing one color cell in the black and white dot pattern included in the two-dimensional code into a first tally pattern and a second tally pattern;
An adjustment pattern in which adjustment cells for increasing one color cell are arranged in a predetermined pattern is commonly added to the first tally pattern and the second tally pattern, and the distribution of each color is adjusted. Dot pattern adjustment means for generating a first adjusted tally pattern and a second adjusted tally pattern;
Means for transmitting a two-dimensional code including the transaction ID and a first adjusted tally pattern to the mobile terminal;
Means for transmitting the second adjusted tally pattern and transaction ID to a second server;
When the personalized electronic certificate data is transmitted from the product providing device, it is confirmed whether or not it is stored in the first storage means, and the result is transmitted to the product providing device,
The second server is
Means for associating a second adjusted tally pattern transmitted from the first server with a transaction ID in a second storage means;
When a delivery request for a second adjusted tally pattern with a transaction ID is transmitted from the product providing device, the corresponding second adjusted tally pattern is extracted from the second storage means, and the product providing device Means for transmitting,
The product providing apparatus is
Means for reading the two-dimensional code displayed on the display of the user's mobile terminal;
Means for recognizing the transaction ID from the two-dimensional code;
Means for sending the transaction ID to the second server and requesting delivery of a corresponding second adjusted tally pattern;
Means for reading the first adjusted tally pattern displayed on the display of the user's mobile terminal;
Adjusted cell removal means for removing the adjusted cells from the first adjusted tally pattern and the second adjusted tally pattern transmitted from the second server, and restoring the first tally pattern and the second tally pattern; ,
Means for superimposing the first tally pattern and the second tally pattern to restore the two-dimensional code of the personalized electronic certificate data;
Means for sending the personalized electronic certificate data to the first server and inquiring whether it is stored in the first storage means;
When a positive result is transmitted from the first server, there is used a two-dimensional code characterized by comprising means for outputting a delivery instruction of a product selected by the user to a mechanism that provides the product Authentication system.   The layer dividing means includes a first mask cell that inverts only one color cell in the monochrome dot pattern included in the two-dimensional code of the electronic certificate data, and a second mask that transmits both color cells as they are. A positive mask pattern in which the mask cells are arranged in a predetermined pattern, and a sub mask pattern in which the arrangement of the first mask cell and the second mask cell is inverted with respect to the positive mask pattern are applied to the two-dimensional code of the electronic certificate data. The authentication using the two-dimensional code according to any one of claims 1 to 6, wherein the cell of one color is divided into a first tally pattern and a second tally pattern by applying alternately. system. The dot pattern adjustment means adds an adjustment pattern having an adjustment cell corresponding to the distribution of the other color in the two-dimensional code of the electronic certificate data in common to the first tally pattern and the second tally pattern. Generating the first adjusted tally pattern and the second adjusted tally pattern,
The adjustment cell removing means performs an XOR operation process on the first adjusted tally pattern and the second adjusted tally pattern, thereby removing the added adjustment cells. The authentication system using the two-dimensional code in any one of 4-7. The dot pattern adjustment means includes a reference adjustment pattern including an adjustment cell corresponding to the distribution of the other color in the two-dimensional code of the electronic certificate data, and a plurality of types of adjustment cells in which the adjustment cell is partially removed from the reference adjustment pattern. By randomly selecting one adjustment pattern from among the sub-adjustment patterns and adding it in common to the first tally pattern and the second tally pattern, the first adjusted tally pattern and the second tally pattern Generate an adjusted tally pattern,
The adjustment cell removing means performs an XOR operation process on the first adjusted tally pattern and the second adjusted tally pattern, thereby removing the added adjustment cells. The authentication system using the two-dimensional code in any one of 4-7.

Images