Authentication system, authentication program and authentication method

Abstract

To provide an authentication system, an authentication program and an authentication method that perform authentication for alcohol concentration inspection.SOLUTION: There is provided a detection system 100 which performs authentication for alcohol concentration inspection for inspecting alcohol concentration of breathing, and the detection system comprises: a measurement part 23 which measures the alcohol concentration of blown breathing; display control means which displays inspection-related information, including concentration information representing the alcohol concentration measured by at least the measurement part 23, in the form of a two-dimensional code; acquisition means which reads the two-dimensional code displayed by the display control means to acquire the inspection-related information; and first authentication means which performs authentication related to the alcohol concentration inspection based upon the inspection-related information that the acquisition means acquires.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an authentication system, an authentication program, and an authentication method. [Background technology]

[0002] 2. Description of the Related Art Conventionally, breathalyzers that measure the alcohol concentration in breath have been known (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2009-257768 A Summary of the Invention [Problem to be solved by the invention]

[0004] Meanwhile, in the alcohol concentration test carried out using the breathalyzer or the like of Patent Document 1, there has been a demand for a technique for confirming the reliability or validity of the test.

[0005] The present invention has been made in consideration of the above, and has an object to provide an authentication system, an authentication program, and an authentication method that are capable of authenticating an alcohol concentration test. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems and achieve the objective, the authentication system described in claim 1 is an authentication system that performs authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and includes a measurement means for measuring the alcohol concentration of the sprayed breath, a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measurement means as a two-dimensional code, an acquisition means for acquiring the test-related information by reading the two-dimensional code displayed by the display control means, and a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means.

[0007] The authentication system described in claim 2 is the authentication system described in claim 1, and further comprises an alcohol detector that measures an alcohol concentration in breath and a terminal device separate from the alcohol detector, wherein the measurement means and the display control means are provided in the alcohol detector, and the acquisition means and the first authentication means are provided in the terminal device.

[0008] The authentication system described in claim 3 is the authentication system described in claim 1, and further comprises an alcohol detector that measures an alcohol concentration in breath, a terminal device separate from the alcohol detector, and an external device capable of communicating with the terminal device, wherein the measurement means and the display control means are provided in the alcohol detector, the acquisition means is provided in the terminal device, and the first authentication means is provided in the external device.

[0009] The authentication system described in claim 4 is the authentication system described in claim 1, further comprising an imaging means for imaging the user who has blown breath, wherein the acquisition means acquires the test-related information and a captured image which is an image of the user captured by the imaging means, and the first authentication means performs authentication regarding the alcohol concentration test based on the test-related information and the captured image acquired by the acquisition means.

[0010] The authentication system of claim 5 is the authentication system of claim 1, wherein the display control means performs a generation process of generating an authentication code for authenticating the test-related information and a display process of displaying the test-related information and the authentication code generated in the generation process as one two-dimensional code, the acquisition means acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means, and the first authentication means authenticates the alcohol concentration test based on the test-related information and the authentication code acquired by the acquisition means.

[0011] The authentication system of claim 6 is the authentication system of claim 1, further comprising an imaging means for imaging the user who blows breath, wherein the display control means performs a generation process for generating an authentication code for authenticating the test-related information and a display process for displaying the test-related information and the authentication code generated by the generation process as one two-dimensional code, the acquisition means acquires a captured image which is an image of the user captured by the imaging means, and acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means, and the first authentication means performs authentication regarding the alcohol concentration test based on the captured image, the test-related information, and the authentication code acquired by the acquisition means.

[0012] The authentication system described in claim 7 is the authentication system described in claim 1, and further comprises an alcohol detector that measures an alcohol concentration in breath and a terminal device separate from the alcohol detector, wherein the measurement means and the display control means are provided in the alcohol detector, the acquisition means is provided in the terminal device, and the authentication system further comprises a second authentication means that performs authentication regarding the alcohol concentration test based on information regarding a user of the terminal device inputted into the terminal device.

[0013] The authentication program described in claim 8 is an authentication program for performing authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and causes a computer to function as a measurement means for measuring the alcohol concentration of the sprayed breath, a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measurement means as a two-dimensional code, an acquisition means for acquiring the test-related information by reading the two-dimensional code displayed by the display control means, and a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means.

[0014] The authentication method described in claim 9 is an authentication method for performing authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and includes a measurement step of measuring the alcohol concentration of the sprayed breath, a display control step of displaying test-related information including at least concentration information indicating the alcohol concentration measured in the measurement step as a two-dimensional code, an acquisition step of acquiring the test-related information by reading the two-dimensional code displayed by the display control step, and a first authentication step of performing authentication regarding the alcohol concentration test based on the test-related information acquired in the acquisition step. Effect of the Invention

[0015] According to the authentication system of claim 1, the authentication program of claim 8, and the authentication method of claim 9, it becomes possible to perform authentication regarding, for example, an alcohol concentration test by performing authentication regarding an alcohol concentration test based on test-related information. Also, by displaying the test-related information including concentration information indicating a measured alcohol concentration as a two-dimensional code and acquiring the test-related information by reading the displayed two-dimensional code, it becomes unnecessary to perform manual work such as visually reading and manually recording the concentration information, thereby preventing human errors such as confirmation errors or entry errors and improving the reliability of the alcohol concentration test.

[0016] According to the authentication system described in claim 2, the measurement means and the display control means are provided in the breathalyzer, and the acquisition means and the first authentication means are provided in the terminal device, thereby making it possible, for example, to separate and arrange functions for alcohol concentration testing in different devices.

[0017] According to the authentication system of claim 3, the measurement means and the display control means are provided in the breathalyzer, the acquisition means is provided in the terminal device, and the first authentication means is provided in the external device, so that, for example, the functions for alcohol concentration testing can be arranged separately in different devices. Also, since the first authentication means is provided in the external device, for example, when the external device is configured as a device that is difficult for the test subject to directly operate, it is possible to prevent information used for authentication from being leaked unintentionally due to an operation error by the test subject, and therefore it is possible to improve security.

[0018] According to the authentication system described in claim 4, by authenticating an alcohol concentration test based on a captured image as well, it is possible to prevent, for example, impersonation or substitution by someone other than the legitimate test subject, thereby enabling authentication that ensures the legitimacy of the test.

[0019] According to the authentication system described in claim 5, by authenticating the alcohol concentration test based on the authentication code for authenticating the test-related information, it is possible to prevent, for example, tampering with the test-related information and perform authentication while ensuring the legitimacy of the test.

[0020] According to the authentication system described in claim 6, by authenticating the alcohol concentration test based on the authentication code for authenticating the test-related information and the captured image, it is possible to prevent, for example, tampering with the test-related information and ensure the authenticity of the test, and it is possible to prevent substitution or impersonation by persons other than the legitimate test subject and ensure the authenticity of the test.

[0021] According to the authentication system described in claim 7, by authenticating an alcohol concentration test based on information about a user input into a terminal device, it is possible to prevent, for example, substitution or impersonation by someone other than the legitimate test subject, and to authenticate the terminal device side while ensuring the legitimacy of the test. [Brief description of the drawings]

[0022] [Figure 1] 1 is a block diagram of a detection system according to an embodiment of the present invention. [Diagram 2] FIG. [Diagram 3] FIG. 2 is an explanatory diagram of various information. [Figure 4] FIG. 4 is a diagram illustrating registered device information. [Diagram 5] FIG. 4 is a diagram illustrating an example of account information. [Figure 6] 13 is a flowchart of a terminal device side process. [Figure 7] FIG. 13 is a diagram showing a display example of an examination screen. [Figure 8] FIG. 13 is a diagram illustrating an example of use of a detection device. [Figure 9] 13 is a flowchart of a process on the detection device side. [Figure 10] 13 is a flowchart of a server device side process. [Figure 11] FIG. 1 is a diagram illustrating a captured image. [Figure 12] FIG. 2 is an explanatory diagram of various information. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] Hereinafter, an embodiment of an authentication system, an authentication program, and an authentication method according to the present invention will be described in detail with reference to the drawings. However, the present invention is not limited to the embodiment. Here, the basic concept and terminology will be explained, and then a specific embodiment will be described.

[0024] (Basic concept) First, a basic concept will be described. The authentication system according to the present invention is a system for performing authentication related to an alcohol concentration test, which is a test of the alcohol concentration in breath, and is a concept indicating, for example, confirmation of the reliability or validity of the alcohol concentration test itself or various elements (information, equipment, etc.) related to the test.

[0025] The circumstances in which an alcohol concentration test may be conducted are arbitrary; however, it is anticipated that the test may be conducted, for example, before the start of various tasks, including driving or operating various moving objects (such as a vehicle or aircraft), or at any time other than before the start of tasks.

[0026] The authentication performed by the authentication system is based on, for example, examination-related information, but may also be based on photographed images in addition to the examination-related information. Note that the examination-related information and photographed images will be described later.

[0027] In the embodiment described below, a case where authentication is performed based on, for example, examination-related information will be described, and a case where authentication is performed based on a captured image in addition to the examination-related information will be described in a modified example.

[0028] (composition) First, a detection system according to the present embodiment will be described below. Fig. 1 is a block diagram of a detection system according to the present embodiment.

[0029] The number of terminal devices 1 and detection devices 2 provided in the detection system 100 is arbitrary, and may be the same as the number of test subjects (also referred to as "users") who are to undergo an alcohol concentration test. In the present embodiment, a case will be described in which each user is assigned a combination of a terminal device 1 and a detection device 2.

[0030] Moreover, when there is no need to distinguish between the terminal devices 101, 102, etc., they will be collectively referred to as the terminal device 1. Similarly, when there is no need to distinguish between the detection devices 201, 202, etc., they will be collectively referred to as the detection device 2.

[0031] The detection system 100 in FIG. 1 is an authentication system that performs authentication related to an alcohol concentration test, which is a test of the alcohol concentration in breath, and includes, for example, a terminal device 1, a detection device 2, and a server device 3.

[0032] (Configuration - Terminal Device) A terminal device 1 in FIG. 1 is a terminal device used by each user, and is, for example, a device capable of communicating with a detection device 2 and a server device 3, such as a smartphone.

[0033] As a variation, the terminal device 1 may be any device such as a tablet terminal or a personal computer.

[0034] The terminal device 1 in FIG. 1 includes, for example, a communication unit 11, an image capturing unit 12, a touch pad 13, a display 14, a recording unit 15, and a control unit 16.

[0035] (Configuration - Terminal Device - Communication Unit) 1 is a communication unit for communicating with other devices (the detection device 2 and the server device 3). The specific configuration of this communication unit 11 is arbitrary, and it can be configured, for example, to include a known wireless communication circuit or the like (the same applies to the communication units of other devices).

[0036] (Configuration - Terminal Device - Photographing Unit) 1 is a photographing means for photographing an image, specifically, a component corresponding to a so-called camera function, and capable of photographing, for example, still images or moving images. The specific configuration of this photographing unit 12 is arbitrary, but it can be configured, for example, using an imaging element including a known CCD or CMOS sensor, and optical elements such as a lens, etc.

[0037] (Configuration - Terminal Device - Touch Pad) 1 is an operation means for receiving various operation inputs from a user by being pressed by the user's finger, etc. The specific configuration of this touchpad 13 is arbitrary, but for example, a known one equipped with an operation position detection means using a resistive film method, a capacitive method, or the like can be used.

[0038] (Configuration - Terminal Equipment - Display) 1 is an image display means for displaying various images or information under the control of the control unit 16. The specific configuration of the display 14 is arbitrary, and for example, a known flat panel display such as a liquid crystal display or an organic EL display can be used. In this embodiment, the touch pad 13 and the display 14 are integrally formed as a touch panel.

[0039] (Configuration - Terminal Device - Recording Unit) The recording unit 15 in FIG. 1 is a recording means for recording programs and various data necessary for the operation of the terminal device 1, and is configured, for example, using a flash memory as an external recording device (the same applies to the recording units of other devices).

[0040] The recording unit 15 stores, for example, a terminal ID.

[0041] (Configuration - Terminal Device - Recording Unit - Terminal ID) The "terminal ID" is terminal identification information (identification information is also referred to as "ID") for uniquely identifying the terminal device 1. In the example of Fig. 1, it is assumed that "ID101" and "ID102" are set and stored as the terminal IDs of the terminal devices 101 and 102, respectively.

[0042] (Configuration - Terminal Device - Control Unit) 1 is a control means for controlling the terminal device 1, and specifically, is a computer including a CPU, various programs interpreted and executed on the CPU (including basic control programs such as an OS, and application programs that are started on the OS and realize specific functions), and an internal memory such as a RAM for storing programs and various data (this also applies to the control units of other devices). In particular, the program according to the embodiment is installed in the terminal device 1 via an arbitrary recording medium or a network, thereby substantially configuring each unit of the control unit 16 (this also applies to the control units of other devices).

[0043] The control unit 16 conceptually includes, for example, an acquisition unit, a first authentication unit, and a second authentication unit.

[0044] ===Acquisition method=== The acquisition means is a means for acquiring the test-related information by reading the two-dimensional code displayed by the display control means. The acquisition means acquires the test-related information and the authentication code, for example, by reading the two-dimensional code displayed by the display control means. The two-dimensional code, the test-related information, and the authentication code will be described later. The display control means will also be described later.

[0045] ===First authentication method=== The first authentication means is a means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means. The first authentication means is a means for performing authentication regarding the alcohol concentration test based on, for example, the test-related information and the authentication code acquired by the acquisition means.

[0046] ===Second authentication method=== The second authentication means is a means for performing authentication regarding an alcohol concentration test based on information about a user of the terminal device (i.e., a user who uses the terminal device) inputted into the terminal device. The processes performed by each means of the control unit 16 will be described later.

[0047] (Configuration - Detection device) Fig. 2 is a diagram showing a detection device. Fig. 2(a) is a front view of the detection device 2, and Fig. 2(b) is a rear view of the detection device 2 (i.e., a view showing the back side of the side shown in Fig. 2(a)). Note that the configuration of the detection device 2 shown in Fig. 2 is an example, and any other configuration may be adopted.

[0048] The detection device 2 in Figure 1 is an alcohol detector that measures the alcohol concentration of breath blown by a user, and specifically, is a device separate from the terminal device 1 and is equipped with, for example, a communication unit 21, a display 22, a measurement unit 23, a recording unit 24, and a control unit 25.

[0049] (Configuration - Detection device - Communication unit) The communication unit 21 in FIG. 1 is a communication means for communicating with other devices (terminal device 1).

[0050] (Configuration - Detection device - Display unit) 1 and 2(a) is an image display means that displays various images or information under the control of the control unit 25. The display 22 is provided, for example, on the front side of the housing of the detection device 2 as shown in FIG.

[0051] (Configuration - Detection device - Measurement unit) The measurement unit 23 in Fig. 1 is a measurement means for measuring the alcohol concentration of breath sprayed onto a predetermined position (for example, the spray unit 231 in Fig. 2(b) in this embodiment) of the detection device 2. The measurement unit 23 is configured to start the measurement of the alcohol concentration when, for example, the start button 232 in Fig. 2(a) is pressed, which is one of the start conditions.

[0052] The specific configuration of the measurement unit 23 is arbitrary, but for example, it can be configured using a known alcohol detection (sensing) sensor or the like.

[0053] ===Variations=== 2, the display 22 and the start button 232 are provided on the front side of the detection device 2, and the spray unit 231 is provided on the back side, but the present invention is not limited to this. For example, all of these elements may be provided on one side (for example, the front side), or only the display 22 may be provided on the front side. Also, the start button 232 may be omitted, and pressing the start button 232 may be excluded from the start conditions.

[0054] (Configuration - Detection device - Recording unit) 1 is a recording unit that records programs and various data required for the operation of the detection device 2. The recording unit 24 stores, for example, a detection device ID and private key information.

[0055] (Configuration-Detection device-Recording unit-Detection device ID) The "detection device ID" is detection device identification information for uniquely identifying the detection device 2. In the example of Fig. 1, it is assumed that "ID201" and "ID202" are set and stored as the detection device IDs of the detection devices 201 and 202, respectively.

[0056] (Configuration - Detection device - Recording unit - Private key information) Fig. 3 is an explanatory diagram of various types of information, and explanations will be given with reference to Fig. 3 as appropriate.

[0057] The "private key information" is information used to generate an authentication code, and is, for example, the same information as the private key information recorded in the server device 3 (that is, common information).

[0058] The "authentication code" is information used to authenticate the test-related information. In this embodiment, as shown in Fig. 3, for example, a hash-based message authentication code (HMAC) generated by calculation using a hash function based on the private key information and the test-related information is used as the authentication code.

[0059] "Test-related information" refers to information related to an alcohol concentration test, and includes, for example, concentration information, a terminal ID, a detection device ID, timestamp information, and sequence information, as shown in Fig. 3. As a variation, one or more of these pieces of information may be excluded from the test-related information.

[0060] 3 is information indicating the alcohol concentration measured by the measurement unit 23, for example, information indicating the measurement result by the measurement unit 23.

[0061] The "Terminal ID" and "Detection Device ID" in FIG. 3 are as described above.

[0062] The "time stamp information" in FIG. 3 is information indicating the current time, and may be information determined based on a real-time clock value from a timing means such as a timer provided in the detection device 2, for example.

[0063] 3 is numerical information that is counted up by a predetermined number (e.g., "1") each time a measurement is performed by the detection device 2. As this sequence information, for example, numerical information that is counted up without being reset after the manufacture of the detection device 2 may be used, or numerical information that is reset by a predetermined operation (such as turning the power on and off), but in this embodiment, a case where the former is used will be described.

[0064] Regarding the sequence information in this embodiment, for example, after manufacturing the detection device 2, the first measurement will be "1", the second measurement will be "2", the third measurement will be "3", and the number will increase with each measurement thereafter. That is, the sequence information will be different from one another at the time of each measurement.

[0065] Incidentally, regarding this sequence information, the control unit 25 may be configured to count up and record the current sequence information in the recording unit 24, and the processing may be performed using this information.

[0066] (Configuration - Detection device - Control unit) The control unit 25 in FIG. 1 is a control means for controlling the detection device 2, and conceptually includes, for example, a display control means.

[0067] ===Display control methods=== The display control means is a means for displaying the test-related information including at least concentration information indicating the alcohol concentration measured by the measurement means as a two-dimensional code. The display control means performs, for example, a generation process for generating an authentication code for authenticating the test-related information, and a display process for displaying the test-related information and the authentication code generated by the generation process as one two-dimensional code. The processes performed by each means of the control unit 25 will be described later.

[0068] A "two-dimensional code" is a code that has information displayed two-dimensionally (vertically and horizontally), and is code information that indicates various information (for example, test-related information and authentication code in this embodiment). That is, for example, test-related information and authentication code can be read from the two-dimensional code of this embodiment. A case will be described in which a QR code (registered trademark) is used as this two-dimensional code, but any other type of two-dimensional code may also be used.

[0069] (Configuration - Server device) The server device 3 in FIG. 1 is an external device capable of communicating with the terminal device 1, and may be configured, for example, using only one computer, or may be configured using a so-called cloud computer consisting of multiple computers in a distributed arrangement.

[0070] The server device 3 in FIG. 1 includes, for example, a communication unit 31, a recording unit 32, and a control unit 33.

[0071] (Configuration - Server device - Communication unit) A communication unit 31 in FIG. 1 is a communication means for communicating with another device (terminal device 1).

[0072] (Configuration - Server Device - Recording Unit) 1 is a recording unit that records programs and various data necessary for the operation of the server device 3. The recording unit 32 stores, for example, private key information, registered device information, and account information.

[0073] (Configuration - Server device - Recording unit - Private key information) As described above, the “private key information” is information used to generate an authentication code, and is the same information as the private key information recorded in the detection device 2, for example.

[0074] (Configuration-Server device-Recording unit-Registered device information) 4 is a diagram illustrating an example of registered device information. The "registered device information" is information indicating a valid combination of the terminal device 1 and the detection device 2 used in the detection system 100, and is associated with each item of information shown in FIG.

[0075] The terminal ID and detection device ID in Fig. 4 are as described above. The information in the top row of this registered device information indicates that the terminal device 101 in Fig. 1 indicated by "Terminal ID" = "ID101" and the detection device 201 in Fig. 1 indicated by "Detection device ID" = "ID201" are registered in association with each other. The information in the second row of Fig. 4 indicates that the terminal device 102 in Fig. 1 indicated by "Terminal ID" = "ID102" and the detection device 202 in Fig. 1 indicated by "Detection device ID" = "ID202" are registered in association with each other.

[0076] Any method for storing the registered device information may be used, but for example, the registered device information may be stored by inputting information indicating a combination of the terminal device 1 and the detection device 2 assigned to each user. Specifically, when the terminal device 101 and the detection device 201 are assigned to one user, and the terminal device 102 and the detection device 202 are assigned to another user, an administrator or the like inputs information indicating these combinations, and the information exemplified in FIG. 4 is stored.

[0077] (Configuration-Server device-Recording unit-Account information) Fig. 5 is a diagram illustrating an example of account information. The "account information" is information about a user of the detection system 100 (i.e., a test subject who is the subject of an alcohol concentration test), and is associated with each item of information shown in Fig. 5, for example.

[0078] The user ID in FIG. 5 is user identification information that uniquely identifies a user (eg, "ID001" in FIG. 5).

[0079] The user identification information in Fig. 5 is information for identifying a user (in Fig. 5, the user's name "AA AA" etc.). Note that "AA AA" etc. are written for the convenience of explanation.

[0080] The device usage information in Figure 5 is information indicating the terminal device 1 and detection device 2 assigned to the user (in Figure 5, it is a combination of terminal ID and detection device ID indicating the terminal device 1 and detection device 2 assigned to the user, such as "ID101, ID201").

[0081] The test result related information in FIG. 5 is information indicating the test results of an alcohol concentration test conducted on a user (i.e., information indicating a measured alcohol concentration). As shown in FIG. 5, the test result related information stores the concentration information, timestamp information, and sequence information described in FIG. 3. Note that, for convenience of explanation, specific illustrations of each piece of information are omitted in FIG. 5. In reality, it is assumed that an alcohol concentration test is conducted multiple times on each user. In that case, multiple combinations of concentration information, timestamp information, and sequence information are stored and accumulated for each user.

[0082] The information at the top of Figure 5 for this account information indicates, for example, that the name of the user indicated by "ID0001" is "AA AA," that the terminal device 101 and the detection device 201 have been assigned to the user, and also indicates the test results of alcohol concentration tests previously conducted on the user (specific numerical values ​​are not shown in Figure 5).

[0083] The account information in FIG. 5 may also be associated with other information related to the user (for example, information indicating age, sex, or department). In this embodiment, a case where one detection device 2 is assigned to one user will be mainly described, but this is not limiting, and multiple detection devices 2 may be assigned to one user. The same applies to the terminal device 1. The used device information in the account information in FIG. 5 stores information indicating all terminal devices 1 and detection devices 2 assigned to each user. The same applies to the registered device information in FIG. 4.

[0084] The method of storing the account information is arbitrary, but for example, the user ID, user identification information, and information on the device used may be stored based on information input by an administrator, and the test result related information may be stored by executing a process on the server device side, which will be described later.

[0085] (Configuration - Server device - Control unit) 1 is a control means for controlling the server device 3, and conceptually includes, for example, a first authentication means (described above). The processes performed by each means of such control means 33 will be described later.

[0086] (process) Next, the terminal device side process, the detection device side process, and the server device side process performed by the detection system 100 configured as above will be described.

[0087] (Processing - Terminal device side processing) First, the terminal device side processing will be described. Fig. 6 is a flowchart of the terminal device side processing (hereinafter, each step will be referred to as "S"). The terminal device side processing is processing performed by the terminal device 1, and is generally processing related to an alcohol concentration test. The timing for executing this terminal device side processing is arbitrary, but for example, it is started when the power of the components of the detection system 100 is turned on and is executed repeatedly, and the description will begin from the point where it is started (the same applies to each processing described later).

[0088] Here, we will mainly explain an example in which a user of "ID001" in Figure 5 carries and holds the terminal device 101 and detection device 201 assigned to him / her, and performs an alcohol concentration test using each of these devices (the same applies to other processes).

[0089] ===SA1=== 6, the control unit 16 of the terminal device 1 performs identity authentication for a user using the terminal device 1 used in the alcohol concentration test (i.e., performs authentication for the alcohol concentration test). Specifically, the control unit 16 determines whether or not the user using the terminal device 1 is a legitimate user.

[0090] The detailed determination method is arbitrary, but for example, the following first determination method or second determination method may be used.

[0091] =First judgment method= The first determination method is a determination method using a biometric authentication technique. For example, it is assumed that biometric information (e.g., information indicating a face, fingerprint, or voice, etc.) of a legitimate user (i.e., a user to whom the terminal device 1 is assigned) is recorded in the recording unit 15 of the terminal device 1, and the terminal device 1 is provided with a function for acquiring information indicating the user's face or fingerprint (biometric information) or a function for acquiring the user's voice information (biometric information). When the first determination method is adopted, the control unit 16 compares the biometric information recorded in the recording unit 15 with the biometric information acquired from the user (information about the user input to the terminal device 1), and if they match, it determines that the user is a legitimate user (YES in SA1) and proceeds to SA2, while if they do not match, it determines that the user is not a legitimate user (NO in SA1) and executes SA1 again. Note that if it is determined that the user is not a legitimate user (NO in SA1), it may be configured to display information indicating that authentication was not possible on the display 14 and then end the process (the same applies when the second determination method is adopted).

[0092] =Second judgment method= The second determination method is a determination method using personal information. For example, it is assumed that personal information of a legitimate user (for example, information stored in each IC chip of a driver's license or a My Number card, such as information indicating a name, date of birth, or current address) is recorded in the recording unit 15 of the terminal device 1, and that the terminal device 1 is provided with a function for reading information (personal information) stored in each IC chip of the driver's license or the My Number card. When the second determination method is adopted, the control unit 16 compares the personal information recorded in the recording unit 15 with the personal information (information about the user inputted into the terminal device 1) read from each IC chip of the driver's license or the My Number card, and if they match, it is determined that the user is a legitimate user (YES in SA1) and proceeds to SA2, while if they do not match, it is determined that the user is not a legitimate user (NO in SA1) and executes SA1 again.

[0093] =Variations= Moreover, the above-mentioned first and second determination methods may be combined, and it may be determined that a legitimate user exists only when it is determined that a legitimate user exists by both the first and second determination methods.

[0094] =Specific examples= Here, for example, a specific example in which the first determination method is adopted will be described. Assume that biometric information indicating the fingerprint of the user of "ID001" in Fig. 5 is stored in the recording unit 15 of the terminal device 101, and the terminal device 101 is provided with a function for reading and acquiring the user's fingerprint. When the user places his / her finger on the fingerprint sensor provided in the terminal device 101, the control unit 16 reads the user's fingerprint, acquires information indicating the read fingerprint, and compares the biometric information indicating the fingerprint previously stored in the recording unit 15 with the information indicating the read fingerprint. Since they match, it is determined that the user of "ID001" is a legitimate user of the terminal device 101.

[0095] ===SA2=== 6, the control unit 16 of the terminal device 1 acquires the terminal ID recorded in the recording unit 15, generates a terminal ID signal including the acquired terminal ID, and outputs it via the communication unit 11. Specifically, the terminal ID signal may be wirelessly output using a communication standard with a relatively short communication distance, or may be output using another output method, although this is optional. The terminal ID transmitted from the terminal device 1 then reaches the detection device 2 held by the user together with the terminal device 1, and is received by the detection device 2.

[0096] =Specific examples= Here, for example, the control unit 16 of the terminal device 101 outputs a terminal ID signal including the terminal ID "ID101" recorded in the recording unit 15, and the terminal ID signal reaches and is received by the detection device 201.

[0097] ===SA3=== At SA3 in FIG. 6, the control unit 16 of the terminal device 1 determines whether or not to switch to the reading mode.

[0098] FIG. 7 is a diagram showing a display example of the test screen, and FIG. 8 is a diagram showing an example of the use of the detection device. Note that in FIG. 7, a part of the display of the test screen is omitted for the sake of convenience. Also, FIG. 8(a) shows a simplified view of the user, and FIG. 8(b) shows a state in which a two-dimensional code 900 (only one two-dimensional code) is displayed on the display 22 immediately after the user blows breath onto the blowing portion 231 in FIG. 2(b). Also, the display of the two-dimensional code 900 in FIG. 8(b) is shown for the sake of convenience.

[0099] =Inspection screen= The test screen in Fig. 7 is a screen for performing an alcohol concentration test, and is also a screen displayed on the display 14 of the terminal device 1. This test screen has an "alcohol amount" field (a field corresponding to the rectangular area in Fig. 7). The "alcohol amount" field is a field that is tapped by the user to switch the terminal device 1 to the alcohol mode, and is also a field that displays the measurement result of the alcohol concentration.

[0100] =Reading mode= The reading mode is a mode for reading a two-dimensional code. When the terminal device 1 is switched to the reading mode, for example, the camera function of the photographing unit 12 in FIG. 1 is activated, and an image of the two-dimensional code can be photographed and imported into the terminal device 1.

[0101] =Processing= Specifically, regarding the process of SA3 in FIG. 6, for example, when a user performs a predetermined operation via the touch pad 13, the control unit 16 of the terminal device 1 displays the test screen (FIG. 7) on the display 14 and monitors whether or not the "alcohol amount" field on the test screen has been tapped. If the "alcohol amount" field on the test screen has been tapped by the user, information indicating that the tap has been made is input to the terminal device 1, in which case it is determined that the mode should be switched to the reading mode (YES in SA3), and the process proceeds to SA4. On the other hand, if the "alcohol amount" field on the test screen has not been tapped by the user, information indicating that the tap has been made is not input to the terminal device 1, in which case it is not determined that the mode should be switched to the reading mode (NO in SA3), and SA3 is executed again.

[0102] =Specific examples= Here, for example, if a user of "ID001" displays the test screen of Figure 7 on the terminal device 101 carried by the user, and then taps the "Alcohol Amount" column, the control unit 16 of the terminal device 101 determines that it should switch to reading mode.

[0103] ===SA4=== At SA4 in Fig. 6, the control unit 16 of the terminal device 1 switches to a reading mode. Specifically, although this is optional, for example, by starting the camera function of the photographing unit 12 in Fig. 1, the terminal device 1 is brought into a state in which it is possible to photograph an image of the two-dimensional code and import it into the terminal device 1.

[0104] =Specific examples= Here, for example, the control unit 16 of the terminal device 101 activates the camera function of the photographing unit 12 in FIG.

[0105] In this case, when the user of "ID001" points the lens constituting the photographing unit 12 of the terminal device 101 toward the two-dimensional code 900 displayed on the display 22 of the detection device 2 in Figure 8 (b), an image of the two-dimensional code 900 is photographed by the photographing unit 12 and imported into the terminal device 101 to be acquired.

[0106] ===SA5=== At SA5 in FIG. 6, the control unit 16 of the terminal device 1 reads and acquires information indicated in the two-dimensional code (in this embodiment, test-related information and authentication code) from the two-dimensional code captured and acquired by the imaging unit 12.

[0107] =Specific examples= Here, for example, as described above, when the photographing unit 12 of the terminal device 101 photographs an image of the two-dimensional code 900 in FIG. 8(b), the control unit 16 of the terminal device 101 reads and acquires the test-related information and authentication code indicated in the two-dimensional code 900.

[0108] ===SA6=== At SA6 in Fig. 6, the control unit 16 of the terminal device 1 authenticates the test-related information acquired at SA5 (i.e., performs authentication regarding the alcohol concentration test). Specifically, the control unit 16 determines whether or not the test-related information acquired at SA5 has not been tampered with and is legitimate information, based on the test-related information acquired at SA5 and the authentication code. Details of the processing here will be described after the description of the detection device side processing (Fig. 9) described later.

[0109] If it is determined that the test-related information acquired in SA5 has not been tampered with and is valid (YES in SA6), the process proceeds to SA7. On the other hand, if it is determined that the test-related information acquired in SA5 has been tampered with and is therefore invalid (NO in SA6), the process ends.

[0110] =Specific examples= Here, for example, when the control unit 16 of the terminal device 101 acquires the test-related information and authentication code shown in the two-dimensional code 900 in Figure 8 (b), it determines that the acquired test-related information has not been tampered with and is legitimate information.

[0111] ===SA7=== In SA7 of FIG. 6, the control unit 16 of the terminal device 1 generates an examination-related signal including the examination-related information acquired in SA5, and transmits the signal to the server device 3 via the communication unit 11.

[0112] =Specific examples= Here, for example, the control unit 16 of the terminal device 101 generates a test-related signal including the test-related information shown in the two-dimensional code 900 in Fig. 8(b) and transmits it to the server device 3. In this case, the control unit 16 of the terminal device 101 may display the concentration information included in the test-related information acquired in SA5 in the "alcohol amount" column in Fig. 7. This concludes the explanation of the terminal device side processing.

[0113] (Processing - Processing on the detector side) Next, the detection device side process will be described. Fig. 9 is a flowchart of the detection device side process. The detection device side process is a process performed by the detection device 2, and generally relates to an alcohol concentration test.

[0114] ===SB1=== At SB1 in Fig. 9, the control unit 25 of the detection device 2 determines whether or not to start measuring the alcohol concentration. Although the specific conditions are arbitrary, for example, the description will be given assuming that the start conditions are that the terminal ID signal output at SA2 in Fig. 6 has been received and that the start button 232 in Fig. 2(a) has been pressed.

[0115] In detail, for example, if the terminal ID signal outputted at SA2 in Fig. 6 has been received and the start button 232 in Fig. 2(a) has been pressed, it is determined that the alcohol concentration measurement should be started (YES in SB1) and the process proceeds to SB2. On the other hand, if the terminal ID signal outputted at SA2 in Fig. 6 has not been received or the start button 232 in Fig. 2(a) has not been pressed, it is determined that the alcohol concentration measurement should not be started (NO in SB1) and SB1 is executed again.

[0116] =Specific examples= Here, for example, when the detection device 201 receives a terminal ID signal including "ID101" output at SA2 in FIG. 6 and the user of "ID001" presses the start button 232 in FIG. 2(a), it determines that the alcohol concentration measurement should be started.

[0117] ===SB2=== 9, the control unit 25 of the detection device 2 measures the alcohol concentration in the measurement unit 23 by performing measurement of the alcohol concentration in the measurement unit 23 of FIG.

[0118] Here, for example, when a user brings his / her mouth (FIG. 8(a)) close to and faces the blowing part 231 (FIG. 2(b)) of the detection device 201 and blows his / her breath onto the blowing part 231, the measurement part 23 of the detection device 2 measures the alcohol concentration of the breath blown onto the blowing part 231. As an example, the alcohol concentration in the breath is measured to be "0.001 mg / L" (hereinafter, the unit "mg / L" will be omitted as appropriate), etc.

[0119] ===SB3=== At SB3 in FIG. 9, the control unit 25 of the detection device 2 generates the test-related information (FIG. 3) and the authentication code (FIG. 3).

[0120] =Inspection related information= The specific method for generating the test-related information is arbitrary, but for example, information indicating the alcohol concentration measured by SB2 is generated as concentration information, and the terminal ID included in the terminal ID signal output from the terminal device 1 at SA2 in FIG. 6 and received is acquired, and the detection device ID recorded in its own recording unit 24 is acquired. Also, time stamp information is identified based on a real-time clock value by its own timing means. Also, it is assumed that numerical information that is counted up every time a measurement of SB2 is performed is recorded in the recording unit 24, and information indicating the numerical value indicated in this numerical information is identified as sequence information. Then, information that correlates the generated concentration information, the acquired terminal ID, the acquired detection device ID, the identified time stamp information, and the identified sequence information is generated as test-related information.

[0121] =Specific examples= Here, for example, information in which "concentration information" = "0.001," "terminal ID" = "ID101," "detection device ID" = "ID201," "timestamp information" = "Ts1" (description for convenience), and "sequence information" = "1" are mutually associated is generated as test-related information.

[0122] =Authentication Code= The specific method for generating the authentication code is arbitrary, but for example, the authentication code may be generated by obtaining the private key information of its own recording unit 24 and also obtaining the test-related information generated as described above, and then using a predetermined hash function to perform a calculation to derive an HMAC corresponding to the combination of the obtained private key information and the test-related information, and using the derived HMAC as the authentication code.

[0123] =Specific examples= Here, for example, if a predetermined hash function is used to derive "HMAC1" (denoted for convenience) as an HMAC corresponding to the combination of the private key information recorded in the detection device 201 and the aforementioned "concentration information" = "0.001", "terminal ID" = "ID101", "detection device ID" = "ID201", "timestamp information" = "Ts1", and "sequence information" = "1", then "HMAC1" will be generated as the authentication code.

[0124] The process of generating an authentication code at SB3 in FIG. 9 may be interpreted as corresponding to the "generation process."

[0125] ===SB4=== At SB4 in Figure 9, the control unit 25 of the detection device 2 acquires the test-related information and authentication code generated at SB3, generates a two-dimensional code indicating the acquired test-related information and authentication code, and displays the generated two-dimensional code via the display 22.

[0126] =Specific examples= Here, for example, a two-dimensional code 900 shown in FIG. 8(b) is generated as a two-dimensional code indicating the test-related information generated by SB2 ("0.001", "ID101", "ID201", "Ts1", and "1") and the authentication code ("HMAC1"), and is displayed on the display 22.

[0127] It should be noted that the process of displaying the two-dimensional code 900 at SB4 in Fig. 9 may be interpreted as corresponding to the "display process." This concludes the explanation of the process on the detection device side.

[0128] ===Details of SA6 processing in Figure 6=== In the terminal device-side processing described above, for example, at SA5 in FIG. 6, the test-related information ("0.001", "ID101", "ID201", "Ts1", and "1") and authentication code ("HMAC1") shown in the two-dimensional code 900 in FIG. 8(b) described in SB4 in FIG. 9 are read and acquired, and at SA6 in FIG. 6, based on the test-related information and authentication code, it is determined whether the test-related information acquired at SA5 has not been tampered with and is legitimate information.

[0129] Regarding the process of SA6 in FIG. 6, for example, first, the control unit 16 of the terminal device 1 communicates with the server device 3 and acquires from the server device 3 the same secret key information (common secret key information) as the secret key information recorded in the detection device 2 with which the terminal device 1 is combined. Next, the control unit 16 of the terminal device 1 performs a calculation to derive an HMAC based on the secret key information acquired from the server device 3 and the test-related information acquired in SA5, and generates the authentication code by using the derived HMAC as an authentication code. Next, the control unit 16 of the terminal device 1 compares the generated authentication code (i.e., the authentication code generated by the terminal device 1) with the authentication code acquired in SA5 (i.e., the authentication code generated by the detection device 2). If the authentication codes match, the control unit 16 determines that the test-related information acquired in SA5 has not been tampered with and is legitimate (YES in SA6). On the other hand, if the authentication codes do not match, the control unit 16 determines that the test-related information acquired in SA5 has been tampered with and is not legitimate (NO in SA6).

[0130] =Specific examples= Here, for example, the control unit 16 of the terminal device 101 communicates with the server device 3 and acquires from the server device 3 the same private key information as the private key information recorded in the detection device 201 with which the terminal device 101 is combined (the private key information is common to the private key information recorded in the detection device 201). Next, the control unit 16 of the terminal device 1 performs a calculation for deriving HMAC based on the private key information acquired from the server device 3 and the test-related information acquired in SA5 ("0.001", "ID101", "ID201", "Ts1", and "1"), thereby deriving "HMAC1" and generating "HMAC1" as an authentication code. Next, since the generated authentication code "HMAC1" and the authentication code "HMAC1" acquired in SA5 match each other, it is determined that the test-related information acquired in SA5 has not been tampered with and is valid information (YES in SA6).

[0131] =Details about private key information= The detection devices 2 may store the same private key information, or may store different private key information. In the latter case, the recording unit 24 of the server device 3 stores the private key information stored in each detection device 2 and the detection device ID indicating the detection device 2 in which the private key information is stored in a mutually associated state. In the process of SA6 in FIG. 6 described above, when the terminal device 1 obtains from the server device 3 the same private key information as the private key information recorded in the detection device 2 with which the terminal device 1 is combined, the terminal device 1 transmits a request signal including its own terminal ID to the server device 3. Meanwhile, the server device 3 refers to the registered device information in FIG. 4 to identify the detection device ID associated with the terminal ID transmitted from the terminal device 1, and transmits the private key information associated with the identified detection device ID to the terminal device 1. The terminal device 1 receives and obtains the same private key information as the private key information recorded in the detection device 2 with which the terminal device 1 is combined, and performs the above-mentioned process.

[0132] (Processing - Server device side processing) Next, the server device side process will be described. Fig. 10 is a flowchart of the server device side process. The server device side process is a process performed by the server device 3, and generally relates to an alcohol concentration test.

[0133] ===SC1=== 10, the control unit 33 of the server device 3 receives the examination-related signal transmitted from the terminal device 1 at SA7 in FIG. 6, thereby receiving the examination-related information contained in the examination-related signal.

[0134] Here, for example, when the terminal device 1 in SA7 of FIG. 6 transmits a test-related signal corresponding to test-related information including the aforementioned "concentration information" = "0.001", "terminal ID" = "ID101", "detection device ID" = "ID201", "timestamp information" = "Ts1", and "sequence information" = "1", the server device 3 in SC1 of FIG. 10 receives the test-related signal and thereby receives the test-related information contained in the signal ("0.001", "ID101", "ID201", "Ts1", and "1").

[0135] ===SC2=== 10, the control unit 33 of the server device 3 authenticates the test-related information received at SC1 (i.e., authenticates the alcohol concentration test). Specifically, the control unit 33 performs first to third determinations, and determines whether the test-related information received at SC1 is valid or not based on the determination results.

[0136] =1st judgment= The first determination is a determination as to whether or not the inspection was performed using the legitimate terminal device 1 and detection device 2, and is a determination made mainly focusing on the terminal ID and detection device ID included in the inspection-related information. In this first determination, the control unit 33 acquires the terminal ID and detection device ID included in the inspection-related information received by SC1, and makes a determination based on whether or not the combination of the acquired terminal ID and detection device ID is stored as the terminal ID and the detection device ID associated with the terminal ID in the registered device information in FIG. 4, with reference to the registered device information in FIG.

[0137] Then, if the combination of the terminal ID and detection device ID acquired from the test-related information received by SC1 is stored in the registered device information of Fig. 4, it is determined that the test was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the first determination"). On the other hand, if the combination of the terminal ID and detection device ID acquired from the test-related information received by SC1 is not stored in the registered device information of Fig. 4, it is determined that the test was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the first determination").

[0138] =Second judgment= The second judgment is a judgment as to whether the test was performed at a valid timing (a specified time period), and is a judgment made mainly by focusing on the time stamp information included in the test-related information. In this second judgment, it is assumed that timing information indicating a valid timing for performing the test (for example, information indicating a time period from 7:00 a.m. to 8:00 a.m.) is recorded in the recording unit 32. Then, the control unit 33 acquires the time stamp information included in the test-related information received by SC1, and makes a judgment based on whether the time indicated by the acquired time stamp information is included in the specified time period indicated by the timing information recorded in the recording unit 32.

[0139] If the time indicated by the timestamp information acquired from the test-related information received by SC1 is included in the predetermined time period indicated by the timing information, it is determined that the test was performed at a valid timing (hereinafter, "YES in the second determination"). On the other hand, if the time indicated by the timestamp information acquired from the test-related information received by SC1 is not included in the predetermined time period indicated by the timing information (i.e., the time indicated by the timestamp information is outside the predetermined time period), it is determined that the test was not performed at a valid timing (hereinafter, "NO in the second determination").

[0140] =Third Judgment= The third judgment is a judgment as to whether the concentration information included in the test-related information is valid concentration information (i.e., whether it is not reused concentration information), and is made mainly by focusing on the sequence information included in the test-related information. Note that "reusing concentration information" may be interpreted as a concept indicating, for example, retransmitting concentration information previously transmitted to and recorded in the server device 3 to the server device 3 in order to record it in the server device 3 at a different timing.

[0141] In this third determination, the control unit 33 acquires the terminal ID, the detection device ID, and the sequence information included in the test-related information received by SC1, and then refers to the account information in Fig. 5 to identify the test result-related information associated with the used device information in which the same information as the acquired terminal ID and the detector ID is recorded. Next, a determination is made based on whether the identified test result-related information stores the same information as the acquired sequence information.

[0142] If the identified test result related information does not contain the same information as the sequence information obtained from the test related information received by SC1, the concentration information contained in the test related information is not reused, and the concentration information is determined to be valid (hereinafter, "YES in the third determination"). On the other hand, if the identified test result related information contains the same information as the sequence information obtained from the test related information received by SC1, the concentration information contained in the test related information is reused, and the concentration information is determined to be invalid (hereinafter, "NO in the third determination").

[0143] =SC2 Overall Verdict= Then, if the first to third judgments are all judged as "YES" (i.e., if it is judged that the inspection was performed using valid terminal device 1 and detection device 2 (YES in the first judgment), and that the inspection was performed at a valid timing (YES in the second judgment), and that the concentration information is valid concentration information (YES in the third judgment)), it is judged that the inspection-related information received in SC1 is valid (YES in SC2), and proceeds to SC3.

[0144] On the other hand, if any of the first to third judgments is judged as "NO" (i.e., if it is judged that the inspection was not performed using a valid terminal device 1 and detection device 2 (NO in the first judgment), or if it is judged that the inspection was not performed at a valid timing (NO in the second judgment), or if it is judged that the concentration information is not valid concentration information (NO in the third judgment)), then it is judged that the test-related information received in SC1 is invalid (NO in SC2), and the processing is terminated. In this case, it may be configured to record information indicating that the test-related information is invalid in the recording unit 32, or to transmit the information to a terminal (not shown) used by the administrator to notify the administrator.

[0145] =Specific examples= Here, for example, we will explain a case where the time indicated by the "timestamp information" = "Ts1" in the test result related information received by SC1 is 7:30 a.m., and the "sequence information" = "1" is not stored in the test result related information in the top row of Figure 5.

[0146] In this case, in the first judgment, "ID101" and "ID201" are obtained as the terminal ID and detection device ID included in the inspection-related information received by SC1, and since these are stored as the top-level information in the registered device information in FIG. 4, it is judged that the inspection was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the first judgment").

[0147] Furthermore, in the second judgment, since the time indicated by the "timestamp information" = "Ts1" included in the test-related information received by SC1 is 7:30 AM, which falls within the specified time period of 7:00 AM to 8:00 AM, it is judged that the test was performed at a valid time (hereinafter, "YES in the second judgment").

[0148] In the third judgment, the "Terminal ID"="ID101", "Detection device ID"="ID201", and "Sequence information"="1" contained in the test-related information received by SC1 are acquired, and then the account information in Fig. 5 is referenced to identify the test result-related information in the top row of Fig. 5 as the test result-related information associated with the used device information ("ID101, ID201" in Fig. 5) in which the same information as the acquired "ID101" and "ID201" is recorded. Next, since "Sequence information"="1" is not stored in the identified test result-related information, it is judged that the concentration information is valid concentration information (hereinafter, "YES in the third judgment").

[0149] Then, since the first to third determinations are all judged as "YES", it is judged that the examination-related information received at SC1 is valid (YES at SC2).

[0150] =Variations= Here, the case where the SC2 process is performed based on all the judgment results of the first to third judgments has been described, but the present invention is not limited to this. For example, the SC2 process may be configured to be performed based on only one of the judgment results of the first to third judgments, or the SC2 process may be configured to be performed based on any two of the judgment results. In other words, any one or any two of the first to third judgments may be omitted.

[0151] ===SC3=== 10, the control unit 33 of the server device 3 stores in the recording unit 32 a part of the test-related information received in SC1.

[0152] Specifically, although the details are arbitrary, for example, the account information in Figure 5 is referenced to identify the used equipment information in which the same information as the terminal ID and detector ID contained in the test-related information received by SC1 is recorded, and the concentration information, timestamp information, and sequence information contained in the test-related information received by SC1 are stored as the test result-related information associated with the identified used equipment information.

[0153] Here, for example, by referring to the account information in Fig. 5, the "Used device information" = "ID101, ID201" (top row of Fig. 5) in which the same information as "ID101" and "ID201" contained in the test-related information received by SC1 ("Concentration information" = "0.001", "Terminal ID" = "ID101", "Detection device ID" = "ID201", "Time stamp information" = "Ts1", and "Sequence information" = "1") is recorded is identified, and information in which "Concentration information" = "0.001", "Time stamp information" = "Ts1", and "Sequence information" = "1" are mutually associated is stored and accumulated as test result-related information associated with "Used device information" = "ID101, ID201". This concludes the explanation of the server device side processing.

[0154] (Usage example) Next, a usage example of the detection system 100 will be described. Here, for example, a case will be described in which the user of "ID001" in Fig. 5 (a user who holds the terminal device 101 and the detection device 201) is a subject of inspection. Note that it is assumed that each of the above-mentioned processes executed in the detection system 100 has been started.

[0155] First, the user places his / her finger on the fingerprint sensor provided on the terminal device 101. In this case, the terminal device 101 determines that the user is a valid user of the terminal device 101 (YES at SA1 in FIG. 6), and outputs a terminal ID signal including its own terminal ID "ID101" (SA2 in FIG. 6), and the terminal ID signal reaches the detection device 201 held by the user, and the detection device 201 receives the terminal ID signal.

[0156] Next, the user performs a predetermined operation via the touchpad 13 to display the test screen of FIG. 7, and then taps the “Alcohol Amount” column to switch the terminal device 101 to reading mode (YES at SA3, SA4 in FIG. 6).

[0157] Next, the user brings the blowing unit 231 of the detection device 2 in Fig. 2(b) close to his / her mouth, and presses the start button 232 while continuing to blow his / her breath from the mouth onto the blowing unit 231. In this case, since the detection device 201 has already received the terminal ID signal as described above, when the start button 232 is pressed, the start condition is satisfied and the alcohol concentration of the breath of the user blown onto the blowing unit 231 is measured (YES in SB1, SB2 in Fig. 9). Then, the detection device 201 generates test-related information and an authentication code based on the alcohol concentration measurement result and the like (SB3 in Fig. 9), and displays a two-dimensional code 900 indicating the generated information on the display 22 (Fig. 8(b)) (SB4 in Fig. 9).

[0158] Next, the user points the lens constituting the photographing unit 12 of the terminal device 101 toward the display 22 of the detection device 2 in Fig. 8(b). In this case, the terminal device 101 switched to the reading mode photographs an image of the two-dimensional code 900 (Fig. 8(b)) displayed on the display 22 using the photographing unit 12, reads and acquires information indicated by the two-dimensional code 900 in the image (in this embodiment, the test-related information and the authentication code) (SA5 in Fig. 6), performs authentication in SA6 in Fig. 6 using the acquired authentication code, etc., and transmits the acquired test-related information to the server device 3 (SA7 in Fig. 6).

[0159] On the other hand, the server device 3 receives the test-related information transmitted by the terminal device 101 (SC1 in FIG. 10), performs authentication at SC2 in FIG. 10, and then stores part of the test-related information received at SC1 in the recording unit 32 (SC3 in FIG. 10). In this manner, a series of alcohol concentration tests are performed, and information on the test results is stored.

[0160] (Effects of the embodiment) Thus, according to the present embodiment, by performing authentication regarding an alcohol concentration test based on the test-related information, it becomes possible to perform authentication regarding an alcohol concentration test, for example. Also, by displaying the test-related information including concentration information indicating a measured alcohol concentration as a two-dimensional code 900 and acquiring the test-related information by reading the displayed two-dimensional code 900, for example, manual work such as visually reading and manually recording the concentration information becomes unnecessary, so that human errors such as confirmation errors or entry errors can be prevented, and the reliability of the alcohol concentration test can be improved.

[0161] In addition, since the measurement unit 23 and the display control means are provided in the detection device 2, and the acquisition means and the first authentication means are provided in the terminal device 1, it becomes possible, for example, to separate and arrange the functions for alcohol concentration testing in different devices.

[0162] In addition, by authenticating the alcohol concentration test based on an authentication code for authenticating the test-related information, it is possible to prevent, for example, tampering with the test-related information and perform authentication while ensuring the legitimacy of the test.

[0163] In addition, by authenticating the alcohol concentration test based on information about the user entered into the terminal device 1, it is possible to prevent, for example, substitution or impersonation by someone other than the legitimate test subject, and to enable authentication on the terminal device 1 side while ensuring the legitimacy of the test.

[0164] [Modifications to the embodiment] Although the embodiment of the present invention has been described above, the specific configuration and means of the present invention can be modified and improved as desired within the scope of the technical idea of ​​the present invention described in the claims. Such modifications will be described below.

[0165] (About the problem to be solved and the effects of the invention) First, the problems that the invention aims to solve and the effects of the invention are not limited to those described above, and may vary depending on the implementation environment of the invention and the details of the configuration, and may solve only some of the problems described above or achieve only some of the effects described above.

[0166] (Regarding decentralization and integration) In addition, each of the above-mentioned components is functionally conceptual, and does not necessarily have to be physically configured as shown in the drawings. In other words, the specific form of distribution or integration of each part is not limited to that shown in the drawings, and all or part of them can be functionally or physically distributed or integrated in any unit depending on various loads, usage conditions, etc. In addition, the term "device" in this application is not limited to one configured by a single device, but includes one configured by multiple devices.

[0167] (shape, number, structure, time series) The components illustrated in the embodiments and drawings may be modified and improved as desired within the scope of the technical concept of the present invention with respect to the shape, numerical values, or structure or chronological relationships of multiple components.

[0168] (Decision based on authentication code) In the above embodiment, at SA6 in FIG. 6, authentication based on the authentication code is performed on the terminal device 1 side. However, this is not limiting, and the authentication may be performed on the server device 3 side, for example.

[0169] ===Outline=== In this case, for example, generally speaking, in SA6 in FIG. 6, the terminal device 1 may make an authentication request to the server device 3, the server device 3 may perform processing related to the authentication, and the terminal device 1 may be notified of the processing result.

[0170] ===Details=== Specifically, at SA6 in FIG. 6, the control unit 16 of the terminal device 1 transmits to the server device 3 an authentication request signal including the test-related information and authentication code acquired at SA5, and its own terminal ID.

[0171] On the other hand, the control unit 33 of the server device 3 first receives the authentication request signal transmitted from the terminal device 1, and acquires the test-related information, the authentication code, and the terminal ID included in the authentication request signal.

[0172] Next, the control unit 33 of the server device 3 obtains from the recording unit 32 the same private key information as the private key information recorded in the detection device 2 with which the terminal device 1 indicated by the obtained terminal ID is combined.

[0173] Next, the control unit 33 of the server device 3 performs a calculation to derive an HMAC based on the private key information acquired from the recording unit 32 and the above-mentioned acquired test-related information, and generates the authentication code by using the derived HMAC as the authentication code.

[0174] Next, the control unit 33 of the server device 3 compares the generated authentication code (i.e., the authentication code generated by the server device 3) with the previously acquired authentication code (i.e., the authentication code generated by the detection device 2), and if the authentication codes match each other, it determines that the test-related information has not been tampered with and is legitimate information, whereas if the authentication codes do not match each other, it determines that the test-related information has been tampered with and is not legitimate information.

[0175] Next, the control unit 33 of the server device 3 transmits an authentication response signal (a signal that is a response to the above-mentioned authentication request signal) including judgment result information, which is information indicating the above-mentioned judgment result, to the terminal device 1 that transmitted the authentication request signal.

[0176] Meanwhile, the control unit 16 of the terminal device 1 receives the authentication response signal transmitted from the server device 3, and makes a judgment based on the judgment result information included in the authentication response signal. Specifically, if the judgment result information indicates that the information has been judged to be legitimate, it judges that the test-related information acquired in SA5 has not been tampered with and is legitimate (YES in SA6), and proceeds to SA7. On the other hand, if the judgment result information does not indicate that the information has been judged to be legitimate, it judges that the test-related information acquired in SA5 has been tampered with and is therefore not legitimate (NO in SA6), and ends the process.

[0177] In this configuration, since there is no need to transmit private key information to the terminal device 1, it is possible to reduce the risk of private key information being leaked and improve security.

[0178] In other words, in this case, since the first authentication means is provided in the server device 3, for example, if the server device 3 is configured as a device that is difficult for the test subject to directly operate, it is possible to prevent information used for authentication (for example, private key information recorded in the recording unit 32) from being unintentionally leaked due to erroneous operation by the test subject, thereby improving security.

[0179] (Private key information) Further, in the above embodiment, a case where the private key information is stored in the server device 3 has been described, but this is not limited thereto. As a variation, for example, the private key information may be pre-stored in the terminal device 1, and the terminal device 1 may be configured to perform processing using the private key information.

[0180] (About Certification (Part 1)) In the above embodiment, the case where authentication is performed for an alcohol concentration test is described in SA1 and SA6 in FIG. 6 and SC2 in FIG. 10. However, for example, any one or any two of the three processes, SA1 and SA6 in FIG. 6 and SC2 in FIG. 10, may be omitted.

[0181] (About Certification (Part 2)) In the above embodiment, SA1 in FIG. 6 may be interpreted as corresponding to the process by the second authentication means, and SA6 in FIG. 6 and SC2 in FIG. 10 may be interpreted as corresponding to the process by the first authentication means.

[0182] (About the photographed images (part 1)) In the above embodiment, SA6 in FIG. 6 may be configured to perform authentication regarding the alcohol concentration test while taking into consideration the captured image.

[0183] Fig. 11 is a diagram showing an example of a captured image. In Fig. 11, a captured image showing the face of a user blowing breath onto the blowing unit 231 (Fig. 2(b)) as shown in Fig. 8(b) is shown. The term "captured image" refers to an image captured by the imaging unit 12, and is a concept including, for example, the captured image shown in Fig. 11.

[0184] ===SA4 Processing=== Specifically, although the method is arbitrary, for example, when the terminal device 1 is switched to the reading mode at SA4 in Fig. 6, when the user blows breath onto the blowing section 231 (Fig. 2(b)) as shown in Fig. 8(b), and performs a predetermined operation via the touch pad 13 while pointing the lens constituting the photographing section 12 of the terminal device 1 toward the user's face while blowing breath so that both the user's face and the detection device 2 are captured (more specifically, so that the two-dimensional code 900 displayed on the detection device 2 is also captured), the photographing section 12 captures a photographed image that captures both the user's face and the detection device 2 as shown in Fig. 11. More specifically, the two-dimensional code 900 (Fig. 8(b)) is also captured in the photographed image.

[0185] ===SA5 Processing=== Next, the control unit 16 of the terminal device 1 reads and acquires the test-related information and the authentication code from the two-dimensional code shown in the above-mentioned captured image in SA5 of Fig. 6 in the same manner as described in the embodiment. Also, the control unit 16 of the terminal device 1 acquires the captured image (Fig. 11) itself captured by the above-mentioned imaging unit 12 in SA5 of Fig. 6.

[0186] ===SA6 Processing=== Next, the control unit 16 of the terminal device 1 performs authentication for the alcohol concentration test based on the acquired test-related information, the authentication code, and the captured image in SA6 of Fig. 6. Specifically, although it is optional, for example, a first terminal-side determination and a second terminal-side determination are performed, and processing is performed based on the results of these determinations.

[0187] =First terminal determination= The first terminal-side judgment is a judgment made based on the test-related information and authentication code information acquired as described above, and is specifically the same as the judgment described in the embodiment, that is, it judges that the test-related information acquired in SA5 is legitimate information (hereinafter, "YES in the first terminal-side judgment"), or it judges that the test-related information acquired in SA5 is not legitimate information (hereinafter, "NO in the first terminal-side judgment").

[0188] = Terminal side second judgment = The second terminal-side determination is a determination based on the above-mentioned acquired photographed image, and determines whether or not a measurement of breath blown by a legitimate user has been performed, for example, from the viewpoint of preventing substitute or spoofing. In the second terminal-side determination, it is assumed that a user photo image, which is an image of a face photo of the legitimate user to whom the terminal device 1 is assigned, is stored in the recording unit 15. Then, the control unit 16 determines whether the user appearing in the above-mentioned acquired photographed image and the user appearing in the user photo image are the same person, and makes a determination based on the determination result.

[0189] Note that the specific method for making the judgment here is arbitrary, and for example, a method of making a judgment by performing known image processing (including processing using AI-related techniques such as machine learning) may be used. In particular, since it is expected that part of the user's face will be hidden by the detection device 2 in the captured image, the judgment may be made based on the characteristics of the part that is not hidden.

[0190] If it is determined that the user in the captured image and the user in the user photo image are the same person, it is determined that the breath blown by the legitimate user was measured (hereinafter, "YES in the terminal-side second determination"). On the other hand, if it is determined that the user in the captured image and the user in the user photo image are not the same person, it is determined that the breath blown by the legitimate user was not measured (hereinafter, "NO in the terminal-side second determination").

[0191] =SA6 Overall Judgment= Then, if the first terminal-side judgment and the second terminal-side judgment are all judged as "YES" (i.e., if it is judged that the test-related information acquired in SA5 is valid (first terminal-side judgment: YES) and it is judged that the measurement was performed on breath blown by a valid user (second terminal-side judgment: YES), it is judged that the alcohol concentration test is valid (SA6: YES) and proceeds to SA7.

[0192] By configuring in this manner and authenticating an alcohol concentration test based on a captured image, it is possible to prevent, for example, substitution or impersonation by someone other than the legitimate test subject, thereby enabling authentication that ensures the legitimacy of the test.

[0193] On the other hand, if the terminal-side first judgment or the terminal-side second judgment returns "NO" (i.e., if it is determined that the test-related information acquired in SA5 is not valid (terminal-side first judgment: NO), or if it is determined that the breath blown by a valid user has not been measured (terminal-side second judgment: NO), the alcohol concentration test is determined to be invalid (SA6: NO), and the process ends without proceeding to SA7.

[0194] ===Variation (part 1)=== The user photo image recorded in the recording unit 15 is arbitrary, but may be input by an administrator or the like and recorded in advance, or a photo of the user displayed on a driver's license or My Number card may be used. Specifically, in the latter case, when it is determined in the process of SA1 in Fig. 6 that the user is a valid user (YES in SA1), the control unit 16 of the terminal device 1 displays an operation guidance message on the display 14 or outputs the message by voice using a speaker (not shown) of the terminal device 1, for prompting the user to perform an operation to take an image of the user's photo displayed on the driver's license or My Number card.

[0195] Then, when the user activates the camera function of the photographing unit 12 by performing a predetermined operation via the touchpad 13 and then performs an operation to take a photograph of the user's face as displayed on the driver's license or My Number card, the photographing unit 12 takes an image of the face photo, and the control unit 16 records the taken image in the recording unit 15 as a user photo image.

[0196] ===Variation (part 2)=== 6, a configuration may be adopted in which the same process as in the embodiment is performed (i.e., only the process of the terminal-side first judgment described above is performed), and in SA7, the captured image acquired in SA5 is transmitted together with the examination-related information to the server device 3. In this case, in SC1 in Fig. 10, the control unit 33 of the server device 3 may be configured to acquire the captured image together with the examination-related information, and in addition to the first to third judgments, a judgment similar to the terminal-side second judgment (hereinafter referred to as "fourth judgment") is also performed in SC2.

[0197] =Fourth judgment= The fourth determination is a determination based on the captured image acquired by SC1, and determines whether or not a measurement has been performed on breath blown by a legitimate user from the viewpoint of preventing substitute use. In the fourth determination, the account information in Fig. 5 further includes an item of "photo image", and a user photo image (i.e., a facial image of the legitimate user to whom the terminal device 1 and detection device 2 recorded in the used device information are assigned) is stored as information corresponding to the item.

[0198] Then, the control unit 33 refers to the account information in Fig. 5, identifies the used device information storing the same information as the terminal ID and detection ID included in the test-related signal acquired by SC1, and acquires a user photo image (not shown in Fig. 5) associated with the used device information. Next, the control unit 33 judges whether the user appearing in the captured image acquired by SC1 and the user appearing in the acquired user photo image are the same person, and makes a judgment based on the judgment result.

[0199] If it is determined that the user in the captured image and the user in the user photo image are the same person, it is determined that the breath blown by the legitimate user was measured (hereinafter, "fourth determination: YES"). On the other hand, if it is determined that the user in the captured image and the user in the user photo image are not the same person, it is determined that the breath blown by the legitimate user was not measured (hereinafter, "fourth determination: NO").

[0200] =SC2 Overall Verdict= If the first to fourth judgments are all judged as "YES", the test-related information received in SC1 is judged to be valid, the alcohol concentration test is judged to be valid (YES in SC2), and the process proceeds to SC3. On the other hand, if any of the first to fourth judgments is judged as "NO", the test-related information received in SC1 is judged to be invalid, the alcohol concentration test is judged to be invalid (NO in SC2), and the process ends.

[0201] ===Variation (3)=== In addition, the user photo image stored and recorded in the "photo image" item (not shown) of the account information in FIG. 5 is arbitrary, but may be input by an administrator or the like and recorded in advance, or a photo of the user displayed on a driver's license or a My Number card may be used. Specifically, as described in the above "Variation (part 1)", when the terminal device 1 takes an image of a face photo, it transmits its own terminal ID and the image of the taken face photo to the server device 3. Meanwhile, the server device 3 refers to the registered device information in FIG. 4 to identify the detection device ID associated with the terminal ID transmitted from the terminal device 1. Next, the server device 3 refers to the account information in FIG. 5 to identify the use device information in which the same information as the identified detection device ID and the terminal ID transmitted from the terminal device 1 is stored, and may be configured to store the image of the face photo transmitted from the terminal device 1 as the user photo image associated with the identified use device information.

[0202] ===Variation (4)=== In addition, in combination with the technology described above in "(Regarding judgment based on authentication code)", at SA6 in Figure 6, the terminal device 1 may be configured to request the server device 3 to perform processing related to authentication based on the captured image, and the processing may be performed on the server device 3 side.

[0203] (About the images taken (part 2)) In the above "(Regarding the captured image (part 1))", an example has been described in which the test-related information and authentication code shown in the two-dimensional code are read and acquired based on one capture of an image (for example, the capture of the image in FIG. 11), but this is not limiting. For example, a configuration may be used in which a captured image is acquired based on the first capture, and the test-related information and authentication code shown in the two-dimensional code are read and acquired based on the second capture, or the order may be reversed. In particular, when the spray unit 231 in FIG. 2(b) is provided on the front side of the detection device 2 (the side on which the display 22 in FIG. 2(a) is provided), it may be difficult to capture the two-dimensional code and the user's face at the same time. In such a case, it is effective to configure the processing to be performed sequentially as described above.

[0204] (About the images taken (part 3)) In addition, in the above "(Regarding the captured image (Part 1))" and "(Regarding the captured image (Part 2))", it is assumed that a still image is used as the captured image. However, this is not limited to this, and a video may be used as the captured image.

[0205] (About the number of 2D codes) In the above embodiment, the case where the test-related information and the authentication code are represented in one two-dimensional code has been described, but the present invention is not limited to this. For example, a two-dimensional code representing only the test-related information and a two-dimensional code representing only the authentication code may be displayed, and the information may be acquired by reading each two-dimensional code in sequence. Also, each piece of information (see FIG. 3) included in the test-related information and the authentication code may be divided into multiple (three or more) two-dimensional codes, and then the multiple two-dimensional codes may be used for processing.

[0206] (Information about testing (part 1)) Also, the information included in the test-related information in Fig. 3 may be changed as desired. Fig. 12 is an explanatory diagram of various information. For example, in the test-related information in Fig. 3, the terminal ID and time stamp information may be omitted, and the password information in Fig. 12 may be added, so that the concentration information, password information, detection device ID, and sequence information are also used as the test-related information. In this case, each component may be changed as appropriate, as shown below.

[0207] The "password information" in Fig. 12 is a password for authenticating the terminal device 1 and the detection device 2, and is, for example, information corresponding to a character string (including numerical values) of a predetermined number of digits that is generated and issued by the server device 3. Although a case will be described in which information corresponding to a so-called one-time password that is issued only once is used as this password information, for example, information corresponding to any password other than a one-time password may also be used. Note that, here, an example will be described in which four-digit numerical information consisting of the numerical values ​​"1" to "4" is used as the password information.

[0208] The following describes an example of processing of each component when using the test-related information in Fig. 12. Note that only the changed parts are described here, and each component performs the same processing as that described in the embodiment or the modified example, unless otherwise specified.

[0209] === Terminal device side processing (Fig. 6) ~ Part 1 ~=== 6, after determining that the user is a valid user (YES in SA1), the control unit 16 of the terminal device 1 displays the password information on the display 22 without executing SA2. Specifically, although this is arbitrary, for example, the terminal device 1 requests the server device 3 to issue password information. Meanwhile, the server device 3 generates password information, for example, "1233" in response to the request, and transmits the generated password information "1233" to the terminal device 1 that made the issuance request. Meanwhile, the terminal device 1 receives and acquires the password information from the server device 3, and displays the acquired password information on the display 14. Here, for example, "1233" is displayed on the display 14. Then, after this, SA3 is executed.

[0210] That is, in this modified example, the terminal device 1 does not transmit information to the detection device 2, and therefore the detection device 2 does not need to communicate with the terminal device 1, and therefore the communication unit 21 (FIG. 1) of the detection device 2 is omitted. In addition, since it is necessary to input password information to the detection device 2, the detection device 2 is provided with information input means consisting of, for example, four physical buttons operated by a user. In detail, for example, a first button that inputs "1" when pressed, a second button that inputs "2" when pressed, a third button that inputs "3" when pressed, and a fourth button that inputs "4" when pressed are provided. Note that the positions where the first to fourth buttons are provided are arbitrary, and for example, the following description will be given assuming that the first to fourth buttons are provided on the front side (the side where the display 22 is provided) of the housing of the detection device 2 in FIG. 2(a), but this is not limited thereto, and they may be provided on the back side (FIG. 2(b)), or some of the buttons may be provided on the front side and the other buttons may be provided on the back side.

[0211] The user visually checks the display 14 of the terminal device 1, confirms the issued password information "1233", and then inputs the confirmed "1233" into the detection device 2. Here, for example, the input is made by operating each button (not shown) provided on the front side (FIG. 2(a)) of the detection device 2. That is, by pressing the first button, the second button, the third button, and the third button in this order, "1233" is input into the detection device 2 as the password information. Note that the detection device 2 may be configured to display on the display 22 a number corresponding to the pressed button, and in this case, the aforementioned "1233" will be displayed on the display 22.

[0212] ===Detector side processing (Fig. 9)=== In SB1 of FIG. 9, it is assumed that the start conditions are defined as a button being pressed and password information, which is four-digit numerical information, being input, and that start button 232 of FIG. 2(a) being pressed.

[0213] In detail, for example, when password information has been input and the start button 232 in Fig. 2(a) has been pressed, the control unit 25 of the detection device 2 determines that the alcohol concentration measurement should be started (YES in SB1) and proceeds to SB2. On the other hand, when password information has not been input or the start button 232 in Fig. 2(a) has not been pressed, the control unit 25 determines that the alcohol concentration measurement should not be started (NO in SB1) and executes SB1 again.

[0214] Here, for example, since the password information "1233" is entered, it is determined that the measurement of the alcohol concentration is to be started when the start button 232 in FIG. 2(a) is pressed.

[0215] Next, in SB2 of FIG. 9, the control unit 25 of the detection device 2 performs the same process as that described in the embodiment.

[0216] Next, in SB3 of FIG. 9, the control unit 25 of the detection device 2 generates test-related information (FIG. 12) and an authentication code (FIG. 12).

[0217] =Inspection related information= The specific generation of the test-related information is arbitrary, but for example, information indicating the alcohol concentration measured by SB2 is generated as concentration information, password information input to the detection device 2 is acquired, and the detection device ID recorded in its own recording unit 24 is acquired. As described in the embodiment, numerical information that is counted up every time a measurement of SB2 is performed is recorded in the recording unit 24, and information indicating the numerical value indicated in this numerical information is identified as sequence information. Then, information that correlates the generated concentration information, the acquired password information, the acquired detection device ID, and the identified sequence information is generated as test-related information.

[0218] =Specific examples= Here, for example, information in which "concentration information" = "0.001", "password information" = "1233", "detection device ID" = "ID201", and "sequence information" = "1" are mutually associated is generated as test-related information.

[0219] =Authentication Code= The specific generation of the authentication code is arbitrary and is similar to the process described in the embodiment, but for example, the private key information of its own recording unit 24 is obtained, and also the test-related information generated as described above is obtained, and then a calculation is performed using a predetermined hash function to derive an HMAC corresponding to the combination of the obtained private key information and the test-related information, and the derived HMAC is used as the authentication code, thereby generating the authentication code.

[0220] =Specific examples= Here, for example, if a predetermined hash function is used to derive "HMAC101" (denoted for convenience) as an HMAC corresponding to the combination of the private key information recorded in the detection device 201 and the aforementioned "concentration information" = "0.001", "password information" = "1233", "detection device ID" = "ID201", and "sequence information" = "1", then "HMAC101" will be generated as the authentication code.

[0221] Next, in SB4 of Figure 9, the control unit 25 of the detection device 2 acquires the test-related information and authentication code generated in SB3, generates a two-dimensional code indicating the acquired test-related information and authentication code, and displays the generated two-dimensional code via the display 22.

[0222] =Specific examples= Here, for example, a two-dimensional code indicating the test-related information generated by SB2 ("0.001", "1233", "ID201", and "1") and the authentication code ("HMAC101") is generated and displayed on the display 22.

[0223] === Terminal device side processing (Fig. 6) ~ Part 2 ~===

[0224] At SA3 to SA6 in FIG. 6, the control unit 16 of the terminal device 1 performs processing similar to that described in the embodiment, and at SA7, transmits a test-related signal corresponding to test-related information including, for example, “concentration information” = “0.001”, “password information” = “1233”, “detection device ID” = “ID201”, and “sequence information” = “1”.

[0225] ===Server device side processing (Figure 10)=== 10, the control unit 33 of the server device 3 receives the examination-related signal transmitted from the terminal device 1 at SA7 in FIG. 6, thereby receiving the examination-related information contained in the examination-related signal.

[0226] 10, the control unit 33 of the server device 3 authenticates the test-related information received at SC1 (i.e., authenticates the alcohol concentration test). Specifically, in addition to the third judgment described in the embodiment, the control unit 33 performs the fifth and sixth judgments described below, and determines whether the test-related information received at SC1 is valid or not based on the judgment results.

[0227] =Third Judgment= The third determination is a determination as to whether the concentration information included in the test-related information is valid concentration information (i.e., whether the concentration information is not reused), and is a determination made mainly focusing on the sequence information included in the test-related information. The specific contents are as described in the embodiment.

[0228] =5th judgment= The fifth judgment is a judgment as to whether or not the inspection was performed using the legitimate terminal device 1 and detection device 2, and is a judgment made mainly by focusing on the password information included in the inspection-related information. In this fifth judgment, as explained in the above-mentioned "Terminal Device Side Processing (FIG. 6) - Part 1 -", it is assumed that when the server device 3 generates password information in response to a password information issuance request, the generated password information is recorded in the recording unit 32. Then, the password information included in the inspection-related information received by SC1 is compared with the password information recorded in the recording unit 32, and if the password information matches, it is judged that the inspection was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the fifth judgment"). On the other hand, if the password information does not match, it is judged that the inspection was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the fifth judgment").

[0229] =6th judgment= The sixth judgment is a judgment as to whether or not the inspection was performed using the legitimate terminal device 1 and detection device 2, and is a judgment made mainly by focusing on the detection device ID included in the inspection-related information. In this sixth judgment, it is assumed that, in SA7 in FIG. 6, the terminal device 1 additionally transmits the terminal ID stored therein, and the server device 3 also receives the terminal ID. Then, the judgment is made in the same manner as the "first judgment" described in the embodiment. Specifically, the detection device ID included in the inspection-related information received in SC1 is acquired, and the above-mentioned received terminal ID is also acquired, and then, with reference to the registered device information in FIG. 4, a judgment is made based on whether or not the combination of the above-mentioned acquired terminal ID and detection device ID is stored as the terminal ID in the registered device information in FIG. 4 and the detection device ID associated with the terminal ID.

[0230] Then, if the acquired combination of terminal ID and detection device ID is stored in the registered device information of Fig. 4, it is determined that the inspection was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the sixth judgment"). On the other hand, if the acquired combination of terminal ID and detection device ID is not stored in the registered device information of Fig. 4, it is determined that the inspection was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the sixth judgment").

[0231] =SC2 Overall Verdict= If the third, fifth, and sixth judgments are all judged as "YES", the test-related information received at SC1 is judged as valid (YES at SC2), and the process proceeds to SC3. On the other hand, if the third, fifth, or sixth judgments are judged as "NO", the test-related information received at SC1 is judged as invalid (NO at SC2), and the process ends.

[0232] =Variation (5th judgement)= Also, the fifth judgment may be partially modified as follows. For example, in the fifth judgment, as explained in "Terminal Device Side Processing (FIG. 6) -Part 1-", it is assumed that when the terminal device 1 makes a request to issue password information, it transmits its own terminal ID to the server device 3, and when the server device 3 generates password information in response to the request to issue password information, the generated password information and the transmitted terminal ID are recorded in the recording unit 32 in a combined state in association with each other. Also, it is assumed that, similarly to the assumption explained in the sixth judgment, in SA7 in FIG. 6, the terminal device 1 additionally transmits the terminal ID stored therein, and the server device 3 also receives the terminal ID.

[0233] Then, the password information contained in the inspection-related information received by SC1 is obtained, and the terminal ID received as described above is also obtained. The combination of the obtained password information and terminal ID is then compared with the combination of the password information and terminal ID recorded in the recording unit 32, and if the combinations match, it is determined that the inspection was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the fifth judgment"). On the other hand, if the combinations do not match, it is determined that the inspection was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the fifth judgment").

[0234] In SC3 in FIG. 10, the control unit 33 of the server device 3 performs the same process as that described in the embodiment.

[0235] (Information about testing (part 2)) In addition, the process described in "(Regarding the test-related information (part 1))" may be partially modified. For example, the terminal device 1 may be configured to perform a determination corresponding to the fifth determination (a determination mainly using password information). For example, the terminal device 1 is assumed to have recorded the password information it displayed (i.e., the password information received from the server device 3) in the recording unit 15. Then, in SA6 of FIG. 6, the password information included in the test-related information acquired in SA5 is compared with the password information recorded in the recording unit 15, and if the password information matches, it is determined that the test was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the fifth determination"). On the other hand, if the password information does not match, it is determined that the test was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the fifth determination").

[0236] The overall determination of SA6 in Fig. 6 may be configured to be executed taking this determination result into consideration. Specifically, if the result of the fifth determination is "YES" and the authentication codes match each other (as described in the embodiment), the authentication code is determined to be authentic (YES in SA6) and the process proceeds to SA7. If the result of the fifth determination is "NO" or if the authentication codes do not match each other (as described in the embodiment), the authentication code is determined to be invalid (NO in SA6) and the process ends.

[0237] As a variation, for example, the terminal device 1 may be configured to generate and issue password information by itself. In this case, the password information included in the inspection-related information acquired in SA5 may be compared with the password information issued by the terminal device 1, and if the password information matches, it may be determined that the inspection was performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "YES in the fifth judgment"); on the other hand, if the password information does not match, it may be determined that the inspection was not performed using the legitimate terminal device 1 and detection device 2 (hereinafter, "NO in the fifth judgment").

[0238] (About each decision) In addition, the judgments described in the above embodiment and modified examples may be omitted or arbitrarily combined. For example, the first to sixth judgments have been described with respect to SC2 in FIG. 10, but only one of these judgments may be used, or multiple judgments may be used in an arbitrary combination. Then, for the processing of each judgment used, if all are "YES" (if there are no "NO"s and only "YES"s are present as a result), it may be determined that the processing is valid in SC2 (YES in SC2), and on the other hand, if at least some are "NO" (if there are "NO"s as a result), it may be determined that the processing is invalid in SC2 (NO in SC2).

[0239] (combination) Furthermore, the features of the above-described embodiments and modifications may be combined in any manner.

[0240] (Additional Note) The authentication system of Appendix 1 is an authentication system that performs authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and comprises a measurement means for measuring the alcohol concentration of the sprayed breath, a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measurement means as a two-dimensional code, an acquisition means for acquiring the test-related information by reading the two-dimensional code displayed by the display control means, and a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means.

[0241] The authentication system of Appendix 2 is the authentication system described in Appendix 1, and includes an alcohol detector that measures an alcohol concentration in breath and a terminal device separate from the alcohol detector, wherein the measurement means and the display control means are provided in the alcohol detector, and the acquisition means and the first authentication means are provided in the terminal device.

[0242] The authentication system of Appendix 3 is the authentication system described in Appendix 1, and further comprises an alcohol detector that measures an alcohol concentration in breath, a terminal device separate from the alcohol detector, and an external device capable of communicating with the terminal device, wherein the measurement means and the display control means are provided in the alcohol detector, the acquisition means is provided in the terminal device, and the first authentication means is provided in the external device.

[0243] The authentication system of Appendix 4 is the authentication system described in Appendix 1, further comprising an imaging means for imaging the user who blows breath, wherein the acquisition means acquires the test-related information and a captured image which is an image of the user captured by the imaging means, and the first authentication means performs authentication regarding the alcohol concentration test based on the test-related information and the captured image acquired by the acquisition means.

[0244] The authentication system of Appendix 5 is the authentication system described in Appendix 1, wherein the display control means performs a generation process of generating an authentication code for authenticating the test-related information, and a display process of displaying the test-related information and the authentication code generated in the generation process as one two-dimensional code, the acquisition means acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means, and the first authentication means authenticates the alcohol concentration test based on the test-related information and the authentication code acquired by the acquisition means.

[0245] The authentication system of Appendix 6 is the authentication system described in Appendix 1, further comprising an imaging means for imaging the user who blows breath, wherein the display control means performs a generation process for generating an authentication code for authenticating the test-related information, and a display process for displaying the test-related information and the authentication code generated in the generation process as one two-dimensional code, the acquisition means acquires a captured image that is an image of the user captured by the imaging means, and acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means, and the first authentication means performs authentication regarding the alcohol concentration test based on the captured image, the test-related information, and the authentication code acquired by the acquisition means.

[0246] The authentication system of Appendix 7 is the authentication system described in Appendix 1, and includes an alcohol breathalyzer that measures an alcohol concentration in breath and a terminal device separate from the alcohol breathalyzer, wherein the measurement means and the display control means are provided in the alcohol breathalyzer and the acquisition means is provided in the terminal device, and the authentication system further includes a second authentication means that performs authentication regarding the alcohol concentration test based on information regarding a user of the terminal device input into the terminal device.

[0247] The authentication program of Appendix 8 is an authentication program for performing authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and causes a computer to function as a measurement means for measuring the alcohol concentration of the sprayed breath, a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measurement means as a two-dimensional code, an acquisition means for acquiring the test-related information by reading the two-dimensional code displayed by the display control means, and a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means.

[0248] The authentication method of Appendix 9 is an authentication method for performing authentication regarding an alcohol concentration test, which is a test of the alcohol concentration in breath, and includes a measurement step of measuring the alcohol concentration of the sprayed breath, a display control step of displaying test-related information including at least concentration information indicating the alcohol concentration measured in the measurement step as a two-dimensional code, an acquisition step of acquiring the test-related information by reading the two-dimensional code displayed by the display control step, and a first authentication step of performing authentication regarding the alcohol concentration test based on the test-related information acquired in the acquisition step.

[0249] (Effect of supplementary notes) According to the authentication system described in Supplementary Note 1, the authentication program described in Supplementary Note 8, and the authentication method described in Supplementary Note 9, it becomes possible to perform authentication regarding, for example, an alcohol concentration test by performing authentication regarding the alcohol concentration test based on the test-related information. Also, by displaying the test-related information including concentration information indicating the measured alcohol concentration as a two-dimensional code and acquiring the test-related information by reading the displayed two-dimensional code, it becomes unnecessary to perform manual work such as visually reading and manually recording the concentration information, thereby preventing human errors such as confirmation errors or entry errors and improving the reliability of the alcohol concentration test.

[0250] According to the authentication system described in Appendix 2, the measurement means and the display control means are provided in the breathalyzer, and the acquisition means and the first authentication means are provided in the terminal device, so that, for example, it is possible to separate and arrange the functions for alcohol concentration testing in different devices.

[0251] According to the authentication system described in Supplementary Note 3, the measurement means and the display control means are provided in the breathalyzer, the acquisition means is provided in the terminal device, and the first authentication means is provided in the external device, so that, for example, the functions for alcohol concentration testing can be arranged separately in different devices. Also, since the first authentication means is provided in the external device, for example, when the external device is configured as a device that is difficult for the test subject to directly operate, it is possible to prevent information used for authentication from being leaked unintentionally due to an erroneous operation by the test subject, and therefore security can be improved.

[0252] According to the authentication system described in Appendix 4, by authenticating an alcohol concentration test based on a photographed image as well, it is possible to prevent, for example, impersonation or substitution by someone other than the legitimate test subject, thereby enabling authentication that ensures the legitimacy of the test.

[0253] According to the authentication system described in Appendix 5, by authenticating an alcohol concentration test based on an authentication code for authenticating test-related information as well, it is possible to prevent, for example, tampering with the test-related information and perform authentication while ensuring the legitimacy of the test.

[0254] According to the authentication system described in Appendix 6, by authenticating an alcohol concentration test based on an authentication code for authenticating test-related information and a captured image, it is possible to prevent, for example, tampering with the test-related information and ensure the legitimacy of the test, and to perform authentication while preventing substitution or impersonation by persons other than the legitimate test subject, thereby enabling authentication while ensuring the legitimacy of the test.

[0255] According to the authentication system described in Appendix 7, by authenticating an alcohol concentration test based on information about a user entered into a terminal device, it is possible to prevent, for example, substitution or impersonation by someone other than the legitimate test subject, and to perform authentication on the terminal device side while ensuring the legitimacy of the test. [Explanation of symbols]

[0256] 1 Terminal equipment 2. Detection Device 3. Server equipment 11 Communications Department 12. Photography Department 13. Touchpad 14 Display 15 Recording section 16 Control section 21 Communications Department 22 Display 23 Measuring part 24 Recording Section 25 Control Unit 31 Communications Department 32 Recording Section 33 Control Unit 100 Detection System 101 Terminal Equipment 102 Terminal Equipment 201 Detection device 202 Detection Device 231 Spraying section 232 Start button 900 2D Code

Claims

1. An authentication system for performing authentication regarding an alcohol concentration test, which is a test of the alcohol concentration of breath, comprising: A measuring means for measuring the alcohol concentration of the breath sprayed; a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measuring means as a two-dimensional code; an acquisition means for acquiring the examination-related information by reading the two-dimensional code displayed by the display control means; a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means; An authentication system comprising:

2. An alcohol detector that measures the alcohol concentration in breath; A terminal device separate from the breathalyzer, The measurement means and the display control means are provided in the breathalyzer, the acquiring means and the first authentication means are provided in the terminal device, The authentication system according to claim 1 .

3. An alcohol detector that measures the alcohol concentration in breath; A terminal device separate from the breathalyzer; an external device capable of communicating with the terminal device; The measurement means and the display control means are provided in the breathalyzer, The acquiring means is provided in the terminal device, The first authentication means is provided in the external device. The authentication system according to claim 1 .

4. The device further includes an imaging means for imaging the user who has blown his / her breath, The acquisition means acquires the examination-related information and a captured image that is an image of the user captured by the imaging means, The first authentication means performs authentication regarding the alcohol concentration test based on the test-related information and the captured image acquired by the acquisition means. The authentication system according to claim 1 .

5. The display control means generating an authentication code for authenticating the test-related information; a display process for displaying the test-related information and the authentication code generated in the generation process as one two-dimensional code; the acquiring means acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means; The first authentication means performs authentication regarding the alcohol concentration test based on the test-related information and the authentication code acquired by the acquisition means. The authentication system according to claim 1 .

6. The device further includes an imaging means for imaging the user who has blown his / her breath, The display control means generating an authentication code for authenticating the test-related information; a display process for displaying the test-related information and the authentication code generated in the generation process as one two-dimensional code; the acquiring means acquires a captured image of the user captured by the photographing means, and acquires the test-related information and the authentication code by reading the two-dimensional code displayed by the display control means; The first authentication means performs authentication regarding the alcohol concentration test based on the photographed image, the test-related information, and the authentication code acquired by the acquisition means. The authentication system according to claim 1 .

7. An alcohol detector that measures the alcohol concentration in breath; A terminal device separate from the breathalyzer, The measurement means and the display control means are provided in the breathalyzer, The acquiring means is provided in the terminal device, The authentication system includes: and a second authentication means for performing authentication regarding the alcohol concentration test based on information about a user of the terminal device input to the terminal device. The authentication system according to claim 1 .

8. A certification program for certifying alcohol concentration tests, which are tests of breath alcohol concentration, Computer, A measuring means for measuring the alcohol concentration of the breath sprayed; a display control means for displaying test-related information including at least concentration information indicating the alcohol concentration measured by the measuring means as a two-dimensional code; an acquisition means for acquiring the examination-related information by reading the two-dimensional code displayed by the display control means; a first authentication means for performing authentication regarding the alcohol concentration test based on the test-related information acquired by the acquisition means; A certification program that serves as a.

9. An authentication method for performing authentication regarding an alcohol concentration test, which is a test of an alcohol concentration in breath, comprising: A measuring step of measuring an alcohol concentration of the breath sprayed; a display control step of displaying test-related information including at least concentration information indicating the alcohol concentration measured in the measuring step as a two-dimensional code; an acquisition step of acquiring the examination-related information by reading the two-dimensional code displayed by the display control step; a first authentication step of authenticating the alcohol concentration test based on the test-related information acquired in the acquisition step; Authentication methods, including:

Images