Usage management device, usage management method, and program

Abstract

To provide a usage management device that manages the usage of a usage object by users owning a ticket in an offline manner while reducing security risks.SOLUTION: In a usage management system, a ticket 2 has a usage permit printed as a two-dimensional code 20 that contains transaction information defining use conditions of a usage object for users waiting in line at a simplified aisle 3 to enter this venue. A usage management device 1, which is carried by a staff 4, takes a photograph of the two-dimensional code 20 printed on the ticket 2 and reads the usage permit from the photographed data. It then verifies a signature added to the usage permit using a public key provided in advance by a provider of the usage object. If the signature verification is successful, transaction information contained in the usage permit is referenced, and if usage conditions specified by the transaction information are satisfied, the usage of the usage object by a user 5 is permitted.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a technology for managing the use of objects that are ticketed, such as admission management at venues where various events such as concerts, live shows, exhibitions, and fairs are held, and boarding management for various forms of transportation such as trains, airplanes, ships, and taxis. [Background technology]

[0002] Patent Document 1 discloses a system in which various services including unlocking and locking rooms can be used in facilities such as companies, hospitals, amusement parks, and public facilities by simply carrying a room key. This system includes a room key having a readable and writable RFID (Radio Frequency Identification) wireless tag that stores information such as a room number, a PIN number, and customer information, an RFID reader installed at various locations in the facility to read and write information from the RFID wireless tag of the room key, a database that stores information about each room and each facility in the facility, and a server that is connected to the RFID reader and the database via a network and manages each room and each facility in the facility. For example, the RFID reader installed on the door or inside of each room in the facility reads the information stored in the RFID wireless tag of the room key and transmits it to the server, and the server that receives it compares the room number included in the information received from the RFID reader with the room number of the room in which the RFID reader is installed, and unlocks and locks the room. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2003-132435 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, the system in Patent Document 1 is based on the premise that room keys are lent and returned at the reception desk of facilities such as companies, hospitals, amusement parks, and public facilities, and does not anticipate use with tickets owned by users, such as admission tickets, tickets, and boarding passes.

[0005] In addition, in the system of Patent Document 1, RFID readers installed in various places in the facility read the information stored in the RFID wireless tag of the room key and transmit it to a server via a network. In other words, it is assumed that the RFID reader is online, and offline application is not assumed.

[0006] The present invention has been made in consideration of the above circumstances, and its purpose is to manage offline the use of objects by ticket-holders, such as entry to venues where various events such as concerts, live shows, exhibitions, and fairs are held, and boarding of transportation such as trains, airplanes, ships, and taxis, while reducing security risks. [Means for solving the problem]

[0007] In order to solve the above problems, the usage management device of the present invention manages the usage of an object by a user by using a ticket to which a usage permit including transaction information (object of usage, period of usage, place of usage, section of usage, etc.) that defines the conditions of usage of the object by the user is added as a code (for example, a visible two-dimensional code). Here, the ticket may be a sheet-like medium made of paper, plastic, etc. on which a code is printed, or may be image data including an image representing the code that is displayed on the display panel of a mobile terminal such as a smartphone.

[0008] First, the license is read from the code attached to the ticket held by the user. Next, a public key provided in advance by the provider of the usage object is used to verify the signature attached to the license and generated with the private key of the provider of the usage object. If the signature verification is successful, the transaction information included in the license is obtained. The obtained transaction information is then referenced, and if the usage conditions specified by this transaction information are satisfied, the user is permitted to use the usage object.

[0009] Here, the biometric authentication information of the user (e.g., face authentication information) may be added to the ticket as a code together with the license. In this case, first, the biometric authentication information is acquired from the user, and the license and the biometric authentication information are read from the code added to the ticket. Then, the biometric authentication of the user is performed using the biometric authentication information acquired from the user and the biometric authentication information read from the code, and if the biometric authentication of the user is successful, the signature added to the license is verified.

[0010] For example, the utilization management device of the present invention includes: A usage management device that manages usage of a usage object by a user using a ticket issued to the user, a license containing transaction information that defines the conditions of use of the object of use for the user is attached as a code to the ticket; The usage management device includes: a hole data storage means for storing hole data including a public key necessary for verifying the license; a code reading means for reading the license from the code added to the ticket; a signature verification means for verifying a signature added to the license read by the code reading means, using the public key included in the hole data stored in the hole data storage means; and a usage condition determination means for, when the signature verification means has succeeded in verifying the signature, referring to the transaction information contained in the license read by the code reading means, and determining whether or not the usage conditions specified by the transaction information are satisfied. Effect of the Invention

[0011] The present invention can prevent falsification of a license and can verify the legitimacy of the provider of the object of use offline by verifying the signature of the license read from the code added to the ticket using a public key included in pre-stored hall data. Also, since it is determined whether the conditions of use specified by the transaction information included in the license are satisfied or not, even if the validity of the provider of the object of use is proven, if the conditions of use are not satisfied, the use of the object of use by this user can be denied, so there is no need to have the user return the license.

[0012] Therefore, according to the present invention, the use of the objects by ticket holders, such as admission management for various events such as concerts, live shows, exhibitions, and fairs, and boarding management for various forms of transportation such as trains, airplanes, ships, and taxis, can be managed offline while reducing security risks. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a schematic diagram of a usage management system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a schematic functional configuration diagram of the usage management device 1. As shown in FIG. [Diagram 3] FIG. 3 is a flow diagram for explaining the operation of the usage management device 1. As shown in FIG. [Figure 4] FIG. 4 is a flow diagram for explaining the operation of the usage management device 1, and is a continuation of FIG. [Diagram 5] FIG. 13 is a schematic configuration diagram of a modified example of a usage management system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will now be described with reference to the accompanying drawings. In the following, a concert providing service will be given as an example of a target of use.

[0015] FIG. 1 is a schematic diagram of a usage management system according to the present embodiment.

[0016] As shown in the figure, the usage management system of this embodiment is configured to include a usage management device 1 carried by a staff member 4 stationed at the entrance (not shown) of a venue where the concert provision service to be used is provided, and a ticket 2 carried by a user (a visitor using the concert provision service) 5 waiting in line on a simplified passage 3 leading to the entrance of the venue to enter the venue.

[0017] The ticket 2 is a sheet-like medium made of, for example, paper, plastic, etc., and has printed on at least one side a two-dimensional code 20 representing a license including transaction information defining the conditions of use of the object of use (such as the name of the concert to be used, the name of the concert venue to be used, and the date and time of use to be used) set for the user 5 who is the owner of the ticket 2, and face authentication information of the user 5. A signature generated using the private key of the concert organizer or concert venue operator who is the provider of the object of use is added to the license.

[0018] The usage management device 1 is a mobile terminal with a camera, such as a smartphone or a tablet PC (Personal Computer), and uses a two-dimensional code 20 printed on a ticket 2 issued to a user 5 to determine whether or not the user 5 is permitted to use the target facility (attend a concert), and notifies staff 4 of the result of the determination.

[0019] FIG. 2 is a schematic functional configuration diagram of the usage management device 1. As shown in FIG.

[0020] As shown in the figure, the usage management device 1 includes a man-machine interface unit 10, a setting information memory unit 11, a camera unit 12, a face authentication information acquisition unit 13, a code reading unit 14, a face authentication unit 15, a signature verification unit 16, a usage condition judgment unit 17, a usage permission notification unit 18, and a main control unit 19.

[0021] The man-machine interface unit 10 is an interface for displaying information to an operator (staff member 4) and accepting various operations from the operator, and is configured, for example, with a touch panel.

[0022] The setting information storage unit 11 stores setting information including hall data required for verifying the license and the conditions of use of the object of use (concert name, concert venue name, date and time, etc.). Here, the hall data is provided in advance by the provider of the object of use, the concert organizer or concert venue manager, and includes the provider's private key and a paired public key.

[0023] The camera unit 12 captures an image of the face of the user 5 and the two-dimensional code 20 printed on the ticket 2.

[0024] The face authentication information acquisition unit 13 extracts face authentication information (feature amount) from the photographed data of the face of the user 5 photographed by the camera unit 12.

[0025] The code reading unit 14 reads the license and face authentication information from the photographed data of the two-dimensional code 20 photographed by the camera unit 12.

[0026] The face authentication unit 15 performs face authentication of the user 5 using the face authentication information extracted from the photographed data of the face of the user 5 by the face authentication information acquisition unit 13 and the face authentication information read from the photographed data of the two-dimensional code 20 by the code reading unit 14. Specifically, it analyzes the degree of matching between the face authentication information extracted from the photographed data of the face of the user 5 and the face authentication information read from the photographed data of the two-dimensional code 20, and determines that face authentication is successful if the degree of matching is equal to or greater than a predetermined value, and determines that face authentication is not successful if the degree of matching is less than the predetermined value.

[0027] The signature verification unit 16 verifies the signature attached to the license read from the photographed data of the two-dimensional code 20, using the public key included in the hole data stored in the setting information storage unit 11. Specifically, it decrypts the signature using the public key, and if the decryption result matches the message digest (hash value) generated from the license or a part of it, it determines that the signature verification is successful, and if they do not match, it determines that the signature verification is unsuccessful.

[0028] The usage conditions judgment unit 17 refers to the transaction information contained in the usage license read from the photographed data of the two-dimensional code 20, and judges whether the usage conditions specified by this transaction information satisfy the usage conditions of the target of use contained in the setting information stored in the setting information memory unit 11.

[0029] The availability notification unit 18 outputs to the man-machine interface unit 10 whether the user 5 who holds the ticket 2 can use the object of use (whether the user can watch the concert).

[0030] The main control unit 19 comprehensively controls the units 10 to 18 of the usage management device 1.

[0031] The schematic functional configuration of the usage management device 1 shown in Fig. 2 is realized by a camera-equipped mobile terminal such as a smartphone or tablet PC, which includes a CPU (Central Processing Unit), a memory, an auxiliary storage device such as a flash memory, and a camera, and the CPU loads a predetermined program from the auxiliary storage device onto the memory and executes it. The schematic functional configuration of the usage management device 1 shown in Fig. 2 may be realized in hardware using an integrated logic IC such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array), or may be realized in software using a computer such as a DSP (Digital Signal Processor).

[0032] 3 and 4 are flow charts for explaining the operation of the usage management device 1. FIG.

[0033] When the main control unit 19 receives a shooting operation from the staff member 4 via the man-machine interface unit 10 (YES in S100), it instructs the camera unit 12 to shoot. In response to this, the camera unit 12 shoots the subject and passes the shooting data to the main control unit 19 (S101).

[0034] The main control unit 19 analyzes the photographic data received from the camera unit 12 (S102). If the subject includes a human face ("Face" in S102), the photographic data is passed to the face authentication information acquisition unit 13 as photographic data of the face of the user 5. In response to this, the face authentication information acquisition unit 13 acquires face authentication information (feature amount) of the user 5 from the face shown in the photographic data received from the main control unit 19, and passes this face authentication information to the main control unit 19 (S103).

[0035] On the other hand, if the subject of the photographed data received from the camera unit 12 includes the two-dimensional code 20 printed on the ticket 2 ("Two-dimensional code" in S102), the main control unit 19 passes this photographed data to the code reading unit 14 as photographed data of the two-dimensional code on the ticket 2 owned by the user 5. In response to this, the code reading unit 14 reads the license and face authentication information represented by the two-dimensional code shown in the photographed data received from the main control unit 19, and passes this license and face authentication information to the main control unit 19 (S104).

[0036] Next, if the camera unit 12 has already photographed both the face of the user 5 and the two-dimensional code 20 printed on the ticket 2 (YES in S105), the main control unit 19 proceeds to S106, and if not (NO in S105), it returns to S100.

[0037] In S106, the main control unit 19 passes the facial authentication information acquired by the facial authentication information acquisition unit 13 and the facial authentication information read by the code reading unit 14 to the facial authentication unit 15. In response to this, the facial authentication unit 15 performs facial authentication of the user 5 by analyzing the degree of matching between the facial authentication information acquired by the facial authentication information acquisition unit 13 and the facial authentication information read by the code reading unit 14 (S106). Then, the main control unit 19 is notified of the authentication result of the facial authentication.

[0038] When the authentication result of the face authentication notified from the face authentication information acquisition unit 13 is "face authentication not established" (NO in S107), the main control unit 19 notifies the use permission notifying unit 18 of the authentication result of the face authentication "face authentication not established." In response to this, the use permission notifying unit 18 outputs a message indicating that the use of the target is not permitted (viewing of the concert is not permitted) to the man-machine interface unit 10 together with the reason (face authentication not established) (S108).

[0039] On the other hand, if the authentication result of the face authentication notified from the face authentication information acquisition unit 13 is "face authentication successful" (YES in S107), the main control unit 19 passes the public key (the public key of the concert organizer or concert venue manager who is the provider of the target of use) included in the license acquired by the code reading unit 14 and the hall data stored in the setting information storage unit 11 to the signature verification unit 16. In response to this, the signature verification unit 16 uses the public key included in the hall data to verify the signature added to the license read by the code reading unit 14 (S109). Then, the signature verification unit 16 notifies the main control unit 19 of the verification result of the signature verification.

[0040] Next, when the signature verification result notified from the signature verification unit 16 is "signature verification not established" (NO in S110), the main control unit 19 notifies the usage permission notifying unit 18 of the signature verification result "signature verification not established." In response to this, the usage permission notifying unit 18 outputs a message to the man-machine interface unit 10 indicating that the usage of the target (viewing a concert) is not permitted, together with the reason (signature verification not established) (S111).

[0041] On the other hand, if the signature verification result notified from the signature verification unit 16 is "signature verification successful" (YES in S110), the main control unit 19 passes the usage conditions of the target of use included in the license acquired by the code reading unit 14 and the setting information stored in the setting information storage unit 11 to the usage condition determination unit 17. In response to this, the usage condition determination unit 17 determines whether the usage conditions specified by the transaction information included in the license acquired by the code reading unit 14 satisfy the usage conditions of the target of use included in the setting information stored in the setting information storage unit 11 (S112). Then, the usage condition determination unit 17 notifies the main control unit 19 of the determination result of the usage conditions.

[0042] When the result of the judgment of the use conditions notified by the use condition judgment unit 17 is "unsatisfied" (NO in S113), the main control unit 19 notifies the use permission notification unit 18 of the judgment result of the use conditions "unsatisfied." In response to this, the use permission notification unit 18 outputs a message to the man-machine interface unit 10 indicating that the use of the target (viewing a concert) is not permitted, together with the reason (use conditions unsatisfied) (S114).

[0043] On the other hand, if the judgment result of the usage conditions notified by the usage condition judgment unit 17 is "satisfied" (YES in S113), the main control unit 19 notifies the usage permission notification unit 18 of the judgment result of the usage conditions being "satisfied". In response to this, the usage permission notification unit 18 outputs a message to the man-machine interface unit 10 indicating that the usage of the target (viewing the concert) is permitted (S115).

[0044] One embodiment of the present invention has been described above.

[0045] In this embodiment, the usage management device 1 performs face authentication of the user 5 using face authentication information acquired from the user 5 and face authentication information read from the two-dimensional code 20 printed on the ticket 2, so that the legitimacy of the user 5 who holds the ticket 2 as a ticket owner can be verified offline. Furthermore, the usage management device 1 can prevent tampering with the usage license by verifying the signature added to the usage license read from the two-dimensional code 20 printed on the ticket 2 using a public key included in the hall data stored in advance, and can verify offline the legitimacy of the provider of the usage object who guarantees the usage right of the usage object to the user 5 by the ticket 2. In addition, the usage management device 1 determines whether the usage conditions specified by the transaction information included in this usage license satisfy the usage conditions of the usage object included in the setting information stored in advance, and if the usage conditions are not met even if the legitimacy of both the user 5 who holds the ticket 2 and the provider of the usage object is proven, the usage management device 1 notifies the staff 4 to that effect, so that the staff 4 can refuse the usage of the usage object by the user 5. Therefore, there is no need to have the user 5 return the license.

[0046] Therefore, according to this embodiment, concert admission management can be realized offline using the ticket 2 issued to the user 5 while reducing security risks.

[0047] Furthermore, in this embodiment, the usage management device 1 is provided with a camera unit 12, and the usage management device 1 acquires facial authentication information of the user 5 from photographed data of the face of the user 5 photographed by the camera unit 12, and reads the usage permit and facial authentication information from photographed data of the two-dimensional code 20 of the ticket 2 photographed by the camera unit 12. Therefore, according to this embodiment, a mobile terminal with a camera such as a smartphone or a tablet PC can be used as the usage management device 1.

[0048] The present invention is not limited to the above-described embodiment, and various modifications are possible within the scope of the present invention.

[0049] For example, as shown in FIG. 5, an automatic gate 6 may be placed at the entrance (not shown) of the venue where the concert is held, and communication may be established between the usage management device 1 and the automatic gate 6 via short-range wireless communication such as IrDA or Bluetooth (registered trademark). In S115 of FIG. 4, the usage management device 1 may send a gate open instruction to the automatic gate 6, and in response, the automatic gate 6 that is in a closed or locked state may be opened (opened or the auto-lock released) for a predetermined period of time.

[0050] In the above embodiment, the usage management device 1 may be composed of a plurality of devices. For example, the usage management device 1 may be composed of a mobile terminal such as a smartphone or tablet PC, and an information processing device such as a notebook PC or desktop PC. The mobile terminal executes S100 to S108 (see FIG. 3), and if face authentication is successful in S107 (YES in S107), transmits a usage permit read from the two-dimensional code 20 printed on the ticket 2 to the information processing device, and the information processing device executes S109 to S113 (see FIG. 4), and further transmits the result of the determination on the usage conditions to the mobile terminal so that a message according to the result of the determination on the usage conditions is output from the mobile terminal in S114 and S115.

[0051] In the above embodiment, the authenticity of the user 5 who holds the ticket 2 is verified using the facial authentication information acquired from the photographed data of the face of the user 5 and the facial authentication information read from the two-dimensional code 20 printed on the ticket 2, but the present invention is not limited to this. Any method may be used as long as the authenticity of the user 5 who holds the ticket 2 is verified using the biometric authentication information read from the user 5 and the biometric authentication information read from the two-dimensional code 20 printed on the ticket 2. For example, the feature amount of a part of the face (nose, lips, etc.) may be used as the biometric authentication information. In addition, a vein authentication sensor may be connected to the usage management device 1, and the authenticity of the user 5 who holds the ticket 2 may be verified using the vein authentication information acquired from the user 5 via the vein authentication sensor and the vein authentication information read from the two-dimensional code 20 printed on the ticket 2.

[0052] Similarly to the usage permit, the facial authentication information printed on the ticket 2 may also be affixed with a signature generated using a private key of the concert organizer or concert venue manager who is the provider of the intended use. In this case, the facial authentication unit 15 verifies the signature affixed to the facial authentication information read by the code reading unit 14 using a public key included in the hall data prior to executing facial authentication of the user 5 (S106), and if the verification result is not established, the facial authentication of the user 5 is not executed, but the verification result is notified to the main control unit 19, and a message indicating that the intended use (viewing the concert) is not permitted is output to the man-machine interface unit 10 together with the reason (signature authentication not established), thereby making it possible to exclude the use of the ticket 2 on which fraudulent facial authentication information is printed.

[0053] In the above embodiment, the transaction information includes the concert name, concert venue name, date and time, etc., but the transaction information may include different information depending on the target of use. If the target of use is a transportation service provided by a transportation facility, the transaction information may include, for example, the name of the transportation service, the section used, and the period of use. Depending on the target of use, the transaction information may also include information indicating the validity of the ticket (used, unused).

[0054] In addition, in the above embodiment, a sheet-like medium on which a two-dimensional code 20 is printed is used as the ticket 2, but the ticket 2 may also be electronic data that includes the two-dimensional code 20 and can be displayed on a display panel of a mobile terminal such as a smartphone or tablet PC.

[0055] In the above embodiment, the case where the license and biometric authentication information are coded and added to the ticket 2 has been described as an example, but the present invention is not limited to this. The present invention is sufficient as long as the license is coded and added to the ticket 2, and the biometric authentication information does not have to be coded and added to the ticket 2.

[0056] In this case, the usage management device 1 reads the usage certificate from the code attached to the ticket 2, and verifies the signature attached to the read usage certificate using a public key included in the pre-stored hall data. If the signature verification is successful, the device obtains and refers to the transaction information included in the usage certificate, and permits the user to use the target of use if the usage conditions specified by the transaction information are satisfied.

[0057] Even in this case, by verifying the signature of the license, it is possible to prevent the license from being tampered with and to verify the legitimacy of the provider of the object of use offline. In addition, since it is determined whether the conditions of use specified by the transaction information included in the license are satisfied or not, even if the legitimacy of the provider of the object of use is proven, if the conditions of use are not satisfied, it is possible to deny the use of the object of use by this user.

[0058] Furthermore, in the above embodiment, the license attached as a code to the ticket 2 may be encrypted with a common key that is secretly shared between the issuer of the ticket 2 and the concert organizer or concert venue manager who is the provider of the intended use. In this case, this common key is included in advance in the hall data stored in the setting information storage unit 11 of the usage management device 1. The usage management device 1 then reads the encrypted license from the code attached to the ticket 2 and decrypts it with the common key included in the hall data stored in the setting information storage unit 11. In this way, it is possible to more effectively prevent tampering with the license attached as a code to the ticket 2.

[0059] In the above embodiment, the use management system is used to manage admission to a venue where a concert is held, but the present invention is not limited to this. The present invention is widely applicable to admission management at venues where various events such as live shows, exhibitions, and fairs are held, and boarding management for transportation such as trains, airplanes, and ships, and other use management of users who prove their right to use by tickets. In this case, the use of the user may be restricted by closing or locking the door, and the use management device may release the use restriction of the user when it is determined that the use conditions are satisfied. Furthermore, the use target is not limited to services, and may be movable property or real estate. [Explanation of symbols]

[0060] 1: Usage management device 2: Ticket 3: Simple passage 4: Staff 5: Users 10: Man-machine interface section 11: Setting information storage section 12: Camera unit 13: Face recognition information acquisition unit 14: Code reading unit 15: Face authentication unit 16: Signature verification unit 17: Usage conditions determination unit 18: Availability notification unit 19: Main control unit 20: Two-dimensional code

Claims

[Claim 1] A usage management device that manages usage of a usage object by a user using a ticket issued to the user, a license containing transaction information that defines the conditions of use of the object of use for the user is attached as a code to the ticket; The usage management device includes: a hole data storage means for storing hole data including a public key necessary for verifying the license; a code reading means for reading the license from the code added to the ticket; a signature verification means for verifying a signature added to the license read by the code reading means, using the public key included in the hole data stored in the hole data storage means; and a usage condition determination means for, when the signature verification means has verified the signature, referring to the transaction information included in the license read by the code reading means, determining whether or not the usage condition specified by the transaction information is satisfied. A usage management device comprising:

Images