Display unit, authentication device, information processing system, information processing method, and program

Abstract

To improve, for example, convenience in use of a display code and spread of the display code.SOLUTION: A display unit comprises an electronic paper module that can display a display code, and at a predetermined update timing, causes the electronic paper module to display a display code obtained by encrypting and coding information including identification information for identifying the effective time of the display code and the time of generation of the display code. An authentication device receives read information of the display code, decrypts the received read information, with the use of effective time information representing the effective time of the display code for every identification information set in advance, determines that authentication is successful when the time elapsed from the time of generation of the display code obtained through the decryption is within an effective time corresponding to the identification information obtained through the decryption, and determines that authentication fails when the time elapsed is not within the effective time corresponding to the identification information obtained through the decryption.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a display device, an authentication device, an information processing system, and a program. [Background technology]

[0002] Display codes such as two-dimensional codes are used in various places. By copying a display code, the copied display code can be read and used at a location other than the display location. Therefore, there are concerns about fraudulent use in services that require the code to be read at the display location. As a technology to prevent such fraudulent use, a technology that includes location information and time information in the information represented by the display code is known (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-032978 Summary of the Invention [Problem to be solved by the invention]

[0004] However, the conventional techniques do not anticipate the use of display codes in a variety of environments, and are not sufficiently convenient or widespread.

[0005] An object of the present invention is to improve the convenience and popularity of the use of display codes, for example. [Means for solving the problem]

[0006] The present invention provides, for example, Equipped with an electronic paper module that can display display codes, At a predetermined update timing, information including identification information for identifying the validity period of the display code and the time of generation of the display code is encrypted, and the coded display code is displayed on the electronic paper module. It is a display device.

[0007] The present invention provides, for example, receiving read information of a display code that is displayed on an electronic paper module included in the display device and updated at a predetermined update timing, the read information being obtained by encrypting and encoding information including identification information for identifying the validity period of the display code and information including the generation time of the display code; Decoding the received read information; Using validity time information indicating the validity time of the display code for each of the identification information set in advance, if the time elapsed from the time of generation of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, it is determined that the authentication is successful, and if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption, it is determined that the authentication is unsuccessful. It is an authentication device.

[0008] The present invention provides, for example, a display device including an electronic paper module capable of displaying a display code, the display device encrypting information including identification information for identifying the validity period of the display code and the time of generation of the display code at a predetermined update timing, and displaying the coded display code on the electronic paper module; an authentication device that receives read information of the display code, decodes the received read information, and determines that authentication is successful if the elapsed time from the generation time of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, using validity time information that indicates a validity time of the display code for each of the identification information that is set in advance, and determines that authentication is unsuccessful if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption; It is an information processing system having the above.

[0009] The present invention provides, for example, a step of displaying a coded display code obtained by encrypting information including identification information for identifying the validity period of the display code and the time of generation of the display code, on an electronic paper module included in the display device at a predetermined update timing; It is a program that causes a computer to execute the above.

[0010] The present invention provides, for example, receiving read information of a display code that is displayed on an electronic paper module included in the display device and updated at a predetermined update timing, the read information being generated by encrypting and encoding information including identification information that identifies the validity period of the display code and the time the display code was generated; decoding the received read information; using validity time information indicating a validity time of the display code for each of the identification information set in advance, determining that the authentication is successful if the elapsed time from the generation time of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, and determining that the authentication is unsuccessful if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption; It is a program that causes a computer to execute the above. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a diagram illustrating an example of the configuration of an information processing system according to an embodiment of the present invention. [Figure 2] FIG. 2 is a block diagram showing an example of the configuration of a code display device. [Figure 3] FIG. 2 is a block diagram illustrating a configuration example of a setting smartphone. [Figure 4] FIG. 10 is a block diagram illustrating a configuration example of a reading smartphone. [Figure 5] FIG. 2 is a block diagram illustrating an example of the configuration of a service providing server. [Figure 6] FIG. 2 is a block diagram illustrating a configuration example of an authentication server. [Figure 7] 10 is a flowchart showing a process flow relating to setting of a code display device. [Figure 8] 10 is a flowchart showing the flow of display processing of a code display device. [Figure 9] 10 is a flowchart showing a process flow relating to reading a two-dimensional code. [Figure 10] FIG. 10 is a diagram showing the steps involved in depositing luggage in a coin locker. [Figure 11] 10 shows an example of a display by a service application when depositing luggage. [Figure 12] FIG. 10 is a diagram showing the operation when retrieving items from a coin locker. [Figure 13] 10 shows an example of a display by a service application when retrieving. [Figure 14] FIG. 2 is a block diagram illustrating an example of a hardware configuration of an information processing device. DETAILED DESCRIPTION OF THE INVENTION

[0012] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0013] <1. One embodiment> [1-1. Example of overall system configuration] FIG. 1 shows an example of the configuration of an information processing system according to an embodiment of the present invention. The information processing system 1 in FIG. 1 can authenticate an operation performed by a user at a predetermined location P. Specifically, the user performs an operation to read a two-dimensional code 20 used to provide a service used by the user, and the predetermined location P is an area where the two-dimensional code 20 can be read. Services provided to users include, for example, attendance management at companies or construction sites, electronic stamp rallies, locking (unlocking) management for coin lockers, electronic shelf labels, and coin parking services. The information processing system 1 is intended to be operated by three parties: a user, a service provider, and an authenticator who provides the above-mentioned certification service. The number of service providers may be one or more (multiple providers are acceptable), and each service provider may have one or more users. A single service provider may provide multiple services (including multiple types). The user may be a specific or unspecified person. Furthermore, the service provider itself may be a user (i.e., a two-party operation). The two-dimensional code 20 is generated based on logic created by the authenticator, i.e., the processing content and processing procedure.

[0014] The information processing system 1 shown in FIG. 1 includes a code display device 2, a setting smartphone 3, a reading smartphone 4, a service providing server 5, and an authentication server 6. For example, the code display device 2, setting smartphone 3, and service providing server 5 are managed by a service provider, the reading smartphone 4 is used by a user, and the authentication server 6 is managed by an authenticator. The code display device 2 is provided to the service provider by, for example, the authenticator. Note that if there are multiple service providers, there will be multiple sets of the code display device 2, setting smartphone 3, reading smartphone 4, and service providing server 5. For example, one authentication server 6 can support multiple (including multiple types of) service systems.

[0015] In the information processing system 1, the code display device 2 and the setting smartphone 3 are configured to be able to communicate with each other via a network N1, the reading smartphone 4 and the service providing server 5 are configured to be able to communicate with each other via a network N2, and the service providing server 5 and the authentication server 6 are configured to be able to communicate with each other via a network N3. The setting smartphone 3 and the authentication server 6 are also configured to be able to communicate with each other via a network N4. The network N1 is a wireless communication network using Wi-Fi (registered trademark), Bluetooth (registered trademark), ZigBee (registered trademark), or the like. The networks N2 to N4 are Internet communication networks. Connection to the Internet communication network is via, for example, a Wi-Fi router or a mobile phone communication network. Using the Internet communication network allows for easy and inexpensive construction of an environment. Note that the above-described networks N1 to N4 are merely examples, and other communication networks may also be used. For example, the network N1 may be a wired communication network using a USB (Universal Serial Bus) cable, and the networks N2 to N4 may each be a dedicated line network. However, since this allows for easy and inexpensive system construction, it is preferable that the system is compatible with the communication functions of general mobile terminals and server devices.

[0016] In this information processing system 1, a two-dimensional code 20 is displayed on a code display device 2, and the read information of the two-dimensional code 20 read by a reading smartphone 4 is sent to an authentication server 6 without any processing, and is authenticated (for example, application authentication). The authentication server 6 returns the authentication result to the sender, who then uses the authentication result. The configuration and processing of each device will be described below.

[0017] [1-2. Example of code display device configuration] The code display device 2 is a display device capable of displaying a two-dimensional code 20. The code display device 2 is, for example, a battery-powered device. This allows it to operate even during a power outage due to a disaster or other reason. The number of code display devices 2 (one or more) corresponds to the service, and they are installed in locations corresponding to the service. The installation location may be any environment in which the reader smartphone 4 can read the two-dimensional code 20. The code display device 2 can be installed anywhere, for example, outdoors, indoors, or underground. The code display device 2 is preferably small, lightweight, and inexpensive, for example, to accommodate a wide range of installation environments, such as installation location and number of installations, and to reduce the installation burden. Specifically, the two-dimensional code 20 is a QR code (registered trademark). Currently, QR codes can be read by most mobile devices equipped with cameras. Therefore, by using a QR code, the two-dimensional code 20 can be read using the standard functions of the reader smartphone 4 regardless of model. Note that the two-dimensional code 20 is not limited to a QR code, and may be, for example, DataMatrix (trademark), MaxiCode, or PDF (Portable Data File) 417. The two-dimensional code 20 may also be a barcode that can be displayed on the code display device 2, a next-generation so-called three-dimensional code, or other display code (a code displayed by image, printing, projection, or the like) such as Chameleon Code (registered trademark).

[0018] FIG. 2 is a block diagram showing an example of the configuration of a code display device 2. The illustrated code display device 2 is, for example, a device designed to display a two-dimensional code 20 at low cost with a small size, light weight, and low power consumption (e.g., a device homemade for authentication purposes). The code display device 2 includes a power supply module 21, a communication module 22, a clock module 23, an electronic paper module 24, and an encryption module 25. A module refers to a component (whether hardware or software) equipped with elements required for a function. The code display device 2 also includes hardware (e.g., a processor, memory, etc.) (not shown) required for its operation as a display device.

[0019] The code display device 2 stores an encryption key and a serial ID in a storage device such as the memory described above. The encryption key is, for example, a common key that is used for encryption and decryption, and is used for encryption in the encryption module 25. The encryption algorithm is not limited to the common key encryption method described above, and may be a public key encryption method that uses a public key as the encryption key and a private key as the decryption key. The serial ID is unique identification information of the code display device 2 that can identify the code display device 2. The serial ID is, for example, "0001 (display device A), "0002 (display device B)," etc. The information in parentheses is associated information. The serial ID identifies the code display device 2 (for example, display device A or B). This serial ID is used as identification information for identifying the validity period of the two-dimensional code 20. The identification information may be in any format, such as a combination of numbers only, or a combination of numbers, letters, and symbols.

[0020] The encryption key and serial ID are each set (stored) in advance in each code display device 2, for example, at the time of shipment. The encryption key stored in the code display device 2 can be rewritten later, for example. This rewriting can be performed using, for example, the setting smartphone 3. Making the encryption key rewritable can improve security.

[0021] The code display device 2 also has an OS (Operating System) 26 and a display device application (hereinafter, the application will be abbreviated as App) 27 as computer programs that operate the processor. For example, the code display device 2 has a microcontroller as hardware. For example, the microcontroller may be a "Raspberry Pi (registered trademark) Pico W" that has a wireless communication function and can be driven by a low voltage (1.8 to 5.5 V). Note that the microcontroller may also be, for example, an Arduino (registered trademark) or SPRESENSE (registered trademark) that does not require the OS 26.

[0022] The power supply module 21 includes a battery 21A as a power source for the code display device 2. The power supply module 21 converts the power from the battery 21A into a power source suitable for each module and supplies it to each module as appropriate. The battery 21A is, for example, one or more button or coin batteries that can be attached to or detached from the code display device 2. The battery 21A is preferably a commercially available general-purpose battery for low cost and easy replacement, but may also be a dry cell battery or a rechargeable secondary battery. The code display device 2 is not limited to being battery-powered by the battery 21A. For example, the code display device 2 may be equipped with a USB connector and be powered by an external mobile battery via the USB connector. This allows for longer operation time. Furthermore, the power supplies of multiple code display devices 2 can be centrally managed. The communication module 22 is an electronic component that integrates elements necessary for communication functions. The communication module 22 is preferably a module that performs short-range wireless communication such as Wi-Fi, Bluetooth, or ZigBee, but may also use other communication methods, such as wired communication.

[0023] The communication module 22 is capable of communicating with other devices via, for example, an ad-hoc network or a peer-to-peer network. This eliminates the need for a router for connecting to the Internet or a connection configuration to a mobile phone network in the code display device 2, thereby enabling power savings. The clock module 23 has a clock function for managing (keeping) time (for example, year, month, date, hour, minute, and second). The clock module 23 has, for example, an RTC (Real Time Clock) to achieve continuous clock function independent of other modules.

[0024] The electronic paper module 24 is a so-called electronic paper display capable of displaying various information, including the two-dimensional code 20 (in the example shown in FIG. 1 , it also displays the date (4 / 1)). Electronic paper displays are lightweight, thin display devices with characteristics similar to those of paper. Electronic paper displays consume power only when switching between different displays and can maintain their display even without a power supply. This means that they consume significantly less power than LCD or OLED displays and can be battery-powered. Furthermore, because they display in a reflective manner similar to paper, they have a viewing angle of approximately 180° and excellent visibility even in sunlight. Thus, electronic paper displays can be battery-powered, provide excellent display regardless of location, and maintain their display even without a power supply, making them suitable for a variety of installation environments. While electronic paper displays may be monochrome, they may also be capable of color display. Using a color display allows for a variety of expressions, such as highlighting different parts with different colors. Furthermore, by configuring the code display device 2 with a color display, the capacity of code information can be increased, for example. Specifically, by configuring the device to have a color display, it can be made compatible with the display of color barcodes.

[0025] The encryption module 25 reads and acquires the encryption key from the storage device, encrypts input information using the acquired encryption key, generates encrypted information, and outputs it.

[0026] The OS 26 included in the code display device 2 is a computer program that controls the operation of the code display device 2. The OS 26 has an API (Application Programming Interface) 26A that enables applications running on the OS 26 to link with other applications. Although not shown here, the OS 26 also has drivers for controlling each module implemented in the code display device 2. The display device App 27 is a computer program that runs on the OS 26 included in the code display device 2. The display device App 27 has, as functional blocks, a setting processing unit 27A that performs setting processing for the code display device 2, and a display processing unit 27B that performs display processing to generate and display display data including the two-dimensional code 20. Each process (as well as other processes described below) will be explained together later.

[0027] [1-3. Example of smartphone configuration] FIG. 3 is a block diagram showing an example of the configuration of the setting smartphone 3. FIG. 4 is a block diagram showing an example of the configuration of the reading smartphone 4. The setting smartphone 3 has a communication module 31 and a clock module 32. The reading smartphone 4 has a communication module 41 and a camera module 42. The communication module 31 of the setting smartphone 3 has a communication function (e.g., Wi-Fi, Bluetooth, ZigBee, etc.) that enables communication with the code display device 2. The communication module 31 of the setting smartphone 3 also has a communication function that enables communication with the authentication server 6 via the Internet. The communication module 41 of the reading smartphone 4 has a communication function that enables communication with the service providing server 5 via the Internet. For example, communication standards that enable Internet connection include mobile communications such as LTE (Long Term Evolution) and 5G (5th Generation), and wireless LANs (Local Area Networks) such as Wi-Fi.

[0028] The clock module 32 of the setting smartphone 3 has a clock function for managing (keeping time). The setting smartphone 3 is configured to be able to acquire its own current location information from the communication status with a base station, GPS (Global Positioning System) information, etc., and is configured to automatically acquire and set the time according to the current location information (time zone). The camera module 42 of the reading smartphone 4 is an electronic component that integrates elements including a camera capable of reading the two-dimensional code 20.

[0029] The setting smartphone 3 and the reading smartphone 4 each have hardware (e.g., a processor, memory, etc.) not shown that is necessary for smartphone operation. The setting smartphone 3 has an OS 33 and a setting management App 34 as computer programs that operate the processor. The reading smartphone 4 has an OS 43 and a service App 44 as computer programs that operate the processor.

[0030] 3, the OS 33 of the setting smartphone 3 is a computer program that controls the operation of the setting smartphone 3, and has an API 33A that enables applications running on the OS 33 to link with other applications. Although not shown here, the OS 33 also has drivers for controlling each module implemented in the setting smartphone 3. The setting management App 34 is a computer program that runs on the OS 33 of the setting smartphone 3. The setting management App 34 has, as a functional block, a setting management processing unit 34A that performs setting management processing for the code display device 2.

[0031] 4, the OS 43 of the reader smartphone 4 is a computer program that controls the operation of the reader smartphone 4, and has an API 43A that enables applications running on the OS 43 to link with other applications. Although not shown here, the OS 43 also has drivers for controlling each module implemented in the reader smartphone 4. The service App 44 is a computer program that runs on the OS 43 of the reader smartphone 4. The service App 44 has, as a functional block, a service app processing unit 44A that performs service app processing that can authenticate the user's operation to read the two-dimensional code 20.

[0032] [1-4. Example of configuration of each server device] FIG. 5 is a block diagram showing an example of the configuration of the service providing server 5. FIG. 6 is a block diagram showing an example of the configuration of the authentication server 6. The service providing server 5 has a communication module 51. The authentication server 6 has a communication module 61, a clock module 62, and a decryption module 63. This authentication server 6 is an authentication device that authenticates the reading operation of the two-dimensional code 20. The communication module 51 of the service providing server 5 has a communication function that allows it to communicate with the reading smartphone 4 and the authentication server 6, respectively, and the communication module 61 of the authentication server 6 has a communication function that allows it to communicate with the setting smartphone 3 and the service providing server 5. For example, the service providing server 5 and the authentication server 6 are configured to be able to connect to the Internet via an internal or external router. The clock module 62 of the authentication server 6 has a clock function that manages (keeps) time. The authentication server 6 is configured to be able to automatically obtain and set the current time of its own location via the Internet, for example. The service providing server 5 and the authentication server 6 each have hardware (e.g., a processor, memory, etc.) not shown that is necessary for server operation.

[0033] The authentication server 6 stores a decryption key in a storage device such as the memory described above. The decryption key is, for example, a common key stored in each of the code display devices 2 described above, and is used for decryption by the decryption module 63. As described above, the encryption algorithm may be a public key cryptosystem using a private key as the decryption key. The encryption key and the decryption key pair are set (stored) in advance in the authentication server 6 under the management of the authenticator, for example, and the encryption key is stored in the storage device of each code display device 2 via the setting smartphone 3. The decryption key of the authentication server 6 is rewritable along with the encryption key described above. This improves security. The decryption module 63 reads and acquires the decryption key from the storage device, and decrypts and outputs input information using the acquired decryption key.

[0034] 5, the OS 52 of the service providing server 5 is a computer program that controls the operation of the service providing server 5, and has an API 52A that enables applications running on the OS 52 to link with other applications. Although not shown here, the OS 52 also has drivers for controlling each module implemented in the service providing server 5. The service providing app 53 is a computer program that runs on the OS 52 of the service providing server 5. The service providing app 53 has a service providing processing unit 53A that performs service provision processing as a functional block.

[0035] 6, the OS 64 of the authentication server 6 is a computer program that controls the operation of the authentication server 6, and has an API 64A that enables applications running on the OS 64 to link with other applications. Although not shown here, the OS 64 also has drivers for controlling each module implemented in the authentication server 6. The authentication App 65 is a computer program that runs on the OS 64 of the authentication server 6. The authentication App 65 has an authentication processing unit 65A that performs authentication processing as a functional block.

[0036] [1-5. Code display settings] Fig. 7 is a flowchart showing the flow of processing related to setting the code display device 2. Specifically, Fig. 7 shows the flow of the setting management processing of the setting smartphone 3 and the setting processing of the code display device 2. The conditions for generating the two-dimensional code 20 by the code display device 2 are set by the setting smartphone 3 as follows.

[0037] First, when the setting smartphone 3 starts processing, it sends a connection request to the code display device 2 and starts communication with the code display device 2 (step S1). As a result, the code display device 2 connects to the setting smartphone 3 (step S11) and sends a connection completion notification to the setting smartphone 3. For example, if this communication is performed via Bluetooth, low power consumption can be achieved by adopting the extended standard BLE (Bluetooth Low Energy).

[0038] When this connection is made, setting authentication using a login function can be performed to prevent unauthorized persons from changing the settings of the code display device 2. This setting authentication process is performed, for example, on the setting smartphone 3 side. Note that this process may be performed on the code display device 2 side, or on the authentication server 6 side via the network N4.

[0039] The setting smartphone 3, which has received the connection completion notification from the code display device 2, generates display device setting information for changing the settings of the code display device 2 (step S2). The display device setting information is information including the update timing of the two-dimensional code 20, the current time (specifically, the current time managed by the setting smartphone 3), etc. The display device setting information is generated by a setting person, such as a service provider, operating the setting smartphone 3 while viewing the operation screen.

[0040] The two-dimensional code 20 is updated, for example, at the 0th minute of every hour (updated at 0:00, 1:00, 2:00, etc.). This update timing may be any timing that suits the service provided to the user, and may be, for example, regular (every 10 minutes, etc.) or irregular (every time a specified event occurs, etc.). Information indicating this update timing is, for example, "T010 (every 10 minutes)," "T030 (every 30 minutes), "T090 (when *** event occurs)," etc. Information indicating the current time is, for example, "20240101023456 (January 1, 2024, 2:34:56)."

[0041] Next, the setting smartphone 3 transmits the generated display device setting information to the code display device 2 (step S3). The code display device 2 receives the display device setting information transmitted from the setting smartphone 3 (step S12) and updates various settings (such as the update timing of the two-dimensional code 20 and the current time) based on the received display device setting information (step S13). The update timing of the two-dimensional code 20 is determined, for example, by setting the clock module 23 to RTC. By updating the current time, the time managed by the code display device 2 can be corrected even if the code display device 2 does not have functions such as GPS, internet communication, or mobile communication.

[0042] Next, after updating the various settings, the code display device 2 transmits a setting completion notification to the setting smartphone 3 (step S14), and ends the process. The setting smartphone 3 receives the setting completion notification from the code display device 2 (step S4), stores a setting log indicating the display device settings (step S5), and ends the process. The setting log is, for example, information that associates a serial ID with information on each setting item (update timing, current time, etc.). By storing the setting log, it can be transmitted to the service providing server 5 or the authentication server 6 for confirmation and use. For example, this setting log is transmitted from the setting smartphone 3 to the authentication server 6 via the network N4 and managed by the authentication server 6.

[0043] [1-6. Display using a code display device] FIG. 8 is a flowchart showing the flow of the display process of the code display device 2. The code display device 2 starts up when it is time to update the two-dimensional code 20 and begins display processing. The code display device 2 automatically starts up when the two-dimensional code 20 is updated, for example, using the RTC of the clock module 23. When processing begins, the code display device 2 reads and acquires the serial ID stored in the storage device (step S21). Next, the code display device 2 encrypts information including the acquired serial ID and the time the two-dimensional code 20 was generated (step S22). Note that this generation time may be any predetermined deemed time, such as the encryption time, the start time of the generation process, the end time of the generation process, or the display time of the two-dimensional code 20. If the time between the generation and display of the two-dimensional code 20 is relatively long, the display time can be regarded as the generation time, allowing for processing that takes into account the time lag in processing.

[0044] Next, the code display device 2 generates display data including a display in which the encrypted information encrypted in step S22 is converted into a two-dimensional code (step S23). Subsequently, the code display device 2 displays the display data including the two-dimensional code 20 (step S24). Specifically, the code display device 2 displays the display data generated in step S23 using the electronic paper module 24 and ends the process. This updates, or rewrites, the two-dimensional code 20 on the code display device 2. Note that, because the electronic paper module 24 is used, even if the display process ends and power is no longer supplied to the electronic paper module 24, the current display is maintained until the next update timing. In this way, the code display device 2 can display the two-dimensional code 20 with low power consumption.

[0045] [1-7. Processing related to reading two-dimensional codes] Fig. 9 is a flowchart of processing related to reading the two-dimensional code 20. Specifically, Fig. 9 shows the flow of service application processing by the reading smartphone 4, service provision processing by the service providing server 5, and authentication processing by the authentication server 6. Note that the reading smartphone 4 and the service providing server 5, and the service providing server 5 and the authentication server 6 are controlled to be connected and able to communicate at appropriate times.

[0046] Before performing service application processing using the reading smartphone 4, the service providing server 5 and the authentication server 6 each perform the following pre-processing. As pre-processing, the service providing server 5 stores location information in which the serial ID of the code display device 2 is associated with a location ID (step S41). Note that the location information may also include other information. This location information is stored, for example, by a setting operation by the service provider via an interface possessed by the service providing server 5. The location ID can be arbitrarily set by the service provider depending on the installation location of the code display device 2. For example, the location ID may be "P001 (Tokyo)", "P002 (Osaka)", etc.

[0047] As a preliminary process, the authentication server 6 stores validity time information that associates the serial ID of the code display device 2 with the validity time of the two-dimensional code 20 (step S51). The validity time information may include other information. This validity time information is stored, for example, by a setting operation by the service provider via an interface of the authentication server 6. The validity time information may be, for example, "TA01 (1 minute)," "TA05 (5 minutes)," etc. The validity time may be the time until the next update timing of the two-dimensional code 20. In this case, the log information transmitted from the setting smartphone 3 described above can be used as the validity time information. The service app process by the reading smartphone 4 is performed after these preliminary processes.

[0048] When the service application process is started, the reader smartphone 4 determines whether the process is to read the two-dimensional code 20 (step S31). If it is determined that the process is to read the two-dimensional code 20 (YES), the reader smartphone 4 activates the camera module 42 (step S32). Then, the two-dimensional code 20 is read by a user operation (step S33), and the read information (encrypted read information) is transmitted to the service providing server 5 (step S34).

[0049] The service-providing server 5 receives the read information transmitted from the reader smartphone 4 (step S42), and transmits the received read information as is to the authentication server 6 (step S43).

[0050] The authentication server 6 receives the read information transmitted from the service providing server 5 (step S52) and decrypts the received read information using the decryption module 63 (step S53). Next, the authentication server 6 performs authentication using the validity period corresponding to the decrypted serial ID, using the validity period information stored in the storage device, the serial ID obtained by decryption, and the generation time of the two-dimensional code 20 (step S54). Specifically, the authentication server 6 acquires the validity period associated with the decrypted serial ID. Then, the authentication server 6 acquires the current time managed by the authentication server 6 and compares the acquired current time with the generation time of the two-dimensional code 20 obtained by decryption. If the elapsed time from the generation time is within the validity period corresponding to the decrypted serial ID, the authentication is determined to be successful (the read information is valid). If the elapsed time is not within the validity period (outside the validity period), the authentication is determined to be unsuccessful (the read information is invalid). The authentication server 6 then transmits the authentication result to the service providing server 5 (step S55) and ends the process. The authentication result is binary data indicating, for example, authentication success or authentication failure.

[0051] The service providing server 5 receives the authentication result sent from the authentication server 6 (step S44), sends the received authentication result to the reading smartphone 4 (step S45), and ends the process. For example, as for the software that reads the two-dimensional code 20 on the reading smartphone 4 and transmits the read information to the authentication server 6 of the service providing server 5, only the corresponding API43A and API52A are provided by the authenticator to the service provider, respectively.

[0052] The reading smartphone 4 receives the authentication result transmitted from the service-providing server 5 and performs processing according to the authentication result (step S35). For example, if the authentication fails, the processing is interrupted. Alternatively, for example, if the authentication is successful, the processing involving reading the two-dimensional code 20 continues as is. Subsequently, or if it is determined in step S31 that the processing is not to read the two-dimensional code 20 (NO), various processing not requiring authentication is performed (step S36). Then, the reading smartphone 4 determines whether the processing has ended, such as whether the service app has been terminated (step S37), and ends the processing if it is determined that the processing has ended (YES). If it is determined in step S37 that the processing has not ended (NO), the processing returns to step S31 and continues.

[0053] [1-8. Summary of one embodiment] As described above, the information processing system 1 of this embodiment includes a code display device 2 and an authentication server 6. The code display device 2 includes an electronic paper module 24 capable of displaying a two-dimensional code 20, and at a predetermined update timing, encrypts information including a serial ID that identifies the validity period of the two-dimensional code 20 and the time the two-dimensional code 20 was generated, and displays the coded two-dimensional code 20 on the electronic paper module 24. Meanwhile, the authentication server 6 receives read information of the display code, decodes the received read information, and, using validity period information that indicates the validity period of the two-dimensional code 20 for each serial ID that is set in advance, determines that authentication is successful if the elapsed time since the generation time of the two-dimensional code 20 obtained by decryption is within the validity period corresponding to the serial ID obtained by decryption, and determines that authentication is unsuccessful if the elapsed time is not within the validity period corresponding to the serial ID obtained by decryption.

[0054] In other words, since the validity period can be set for each code display device 2, it can be applied to a variety of systems regardless of the purpose. Also, since the two-dimensional code 20 is displayed on the electronic paper module 24, it is possible to reduce the size, weight, cost, and power consumption of the code display device 2. As a result, the two-dimensional code 20 can be adapted to be used in a variety of environments, and the convenience and widespread use of the two-dimensional code 20 can be dramatically improved.

[0055] <2. Application Examples> (Application example 1) Below, application examples of the information processing system 1 will be described. Note that the application examples described below are merely illustrative and do not exclude applications other than the following application examples. The information processing system 1 can be applied as a lock management system. In other words, the lock manager is the service provider, and the person who uses the lock is the user. The code display device 2 is used as an operating device for lock management. Also, the application for lock management is the service App 44 of the reading smartphone 4. A specific description will be given below.

[0056] 10 to 13 are diagrams showing an example of an application of the information processing system 1 to a coin locker locking management service that supports smartphone payments (payments made via smartphone). FIG. 10 shows the actions taken when depositing (locking) luggage, and FIG. 11 shows an example of a display by the service app 44 on the reading smartphone 4 when depositing luggage. FIG. 12 shows the actions taken when retrieving (unlocking) luggage, and FIG. 13 shows an example of a display by the service app 44 on the reading smartphone 4 when retrieving luggage. The illustrated coin locker has a code display device 2 on each door 71 of each locker 7 (only one is shown in the figure). The code display device 2 may be attached not only to the door 71 but also to the periphery of the door 71, for example.

[0057] As shown in FIG. 10, when depositing luggage, the two-dimensional code 20 is read using the reading smartphone 4 to complete the deposit procedure. After completing the deposit procedure, the luggage is placed in the locker 7 and the door 71 is closed to lock the locker, completing the deposit (the lamp 72 lights up red, indicating that the locker is unavailable). As shown in FIG. 11, the deposit procedure begins with activating the camera module 42, as shown on display screen 45A, prompting the user to read the two-dimensional code 20 on the code display device 2. After the code is read (after the authentication is successful as described above), the user performs payment procedures (selection of payment method, confirmation of payment amount, etc.) using the reading smartphone 4, as shown on display screens 45B and 45C. After payment, information regarding locking and unlocking is provided to the user, as shown on display screen 45D.

[0058] On the other hand, as shown in FIG. 12, when retrieving luggage, the user reads the two-dimensional code 20 using the reading smartphone 4 to perform the retrieval procedure. After the retrieval procedure, the locker is unlocked, and the user completes the retrieval by removing the luggage from inside the locker 7 and closing the door 71. Note that when the door 71 is closed, it is locked again, and the light 72 changes from red, indicating that the locker is unavailable, to blue, indicating that the locker is available. As shown in FIG. 13, the retrieval procedure begins by activating the camera module 42 and prompting the user to read the two-dimensional code 20 on the code display device 2, as shown on display screen 45E. After the code is read (after the above-mentioned authentication is successful), the user performs the payment procedure for the fee that can be paid using the reading smartphone 4, as shown on display screens 45F and 45G. After the payment, information regarding unlocking and the like is provided to the user, as shown on display screen 45H.

[0059] If the authentication fails when locking or unlocking, a message may be displayed, for example, asking the user to read the two-dimensional code 20 again, or a message such as "Cannot be used" may be displayed. In such a process that uses reading of the two-dimensional code 20, the above-described authentication can be performed to prove that the user actually read the two-dimensional code 20 on-site. In other words, by using the information processing system 1 as a lock management system, the above-described authentication can prove that the lock user was present at the installation location of the code display device 2 as an operating device, thereby guaranteeing and assuring operation at the installation location. Furthermore, the use of the code display device 2 allows use even during a power outage.

[0060] (Application example 2) The information processing system 1 can be used as a time attendance management system. In other words, a time attendance manager serves as a service provider, and employees or other individuals whose time attendance is managed serve as users. The code display device 2 is used as a time clock for time attendance management. The time attendance management application is the service app 44 of the reader smartphone 4. For example, the validity period described above is set to a time corresponding to the communication time of the service app 44 (a relatively short time, such as two minutes), and the time when the two-dimensional code 20 is read is stored as the clock-in time or clock-out time. Setting the validity period appropriately can prevent fraudulent attempts, such as sending a photograph of the two-dimensional code 20 to a remote reader smartphone 4 and reading and transmitting it from a location other than the installation site. By using the information processing system 1 as a time attendance management system, the above-described authentication proves that the individual whose time attendance is managed was at the workplace, i.e., guarantees and guarantees operation at the installation site.

[0061] Web-based time-stamping systems typically use GPS location information to prove that employees were at the workplace. Therefore, in environments where GPS information cannot be obtained, such as under a roof, accurate location information cannot be obtained, making it impossible to prove that employees were at the workplace. Furthermore, time-stamping devices that use commonly available time cards or IC cards are specialized and expensive, making their introduction impractical in cases with multiple small work sites (where work is actually performed) due to cost and installation issues. There are also concerns about the size of the device. In contrast, the code display device 2 included in the information processing system 1 can be installed in any environment, is compact and lightweight, and can be manufactured inexpensively, thereby resolving these issues and enabling effective attendance management.

[0062] (Application example 3) The information processing system 1 can be used as a system for electronic stamp rallies. In other words, the administrator of the electronic stamp rally is the service provider, and the person participating in the electronic stamp rally is the user. The code display device 2 is used as the stamp device for the electronic stamp rally. The application for the electronic stamp rally is the service App 44 of the reading smartphone 4. If the above-mentioned authentication is successful, it is processed as if the electronic stamp has been pressed. In this way, by using the information processing system 1 as a system for electronic stamps, the above-mentioned authentication can prove that the person participating in the electronic stamp rally was present at the location where the stamp device was installed, that is, it is possible to guarantee and ensure that the operation at the installation location was performed.

[0063] In addition, by using it as an electronic stamp rally system, it is possible to easily set and manage conditions such as limiting participation to one per person and the order of laps. Also, by acquiring the location ID and generation time of the two-dimensional code 20, it is possible to perform trace analysis of how participants went around each location.

[0064] (Application example 4) The information processing system 1 can be used as an electronic shelf label system. In other words, the person who installs the electronic shelf label becomes the service provider, and the person who views the electronic shelf label becomes the user. The code display device 2 is used as the electronic shelf label. Furthermore, the application that reads the information on the electronic shelf label is the service app 44 of the reader smartphone 4. In this way, by using the information processing system 1 as an electronic shelf label system, the above-mentioned authentication can prove that the person viewing the electronic shelf label was present at the location where the electronic shelf label was installed, that is, it is possible to guarantee and ensure that the operation at the installation location was performed.

[0065] The information processing system 1 can be applied in combination with various systems, and can determine the validity of the information read from the two-dimensional code 20 by appropriately changing the conditions (update timing, validity period of the two-dimensional code 20) depending on the service provider and the service app 44 provided by the service provider. For example, depending on the purpose of the provided service, the two-dimensional code 20 is updated every 10 minutes for lock management such as the above-mentioned lockers, every minute for attendance management, every 10 minutes for an electronic stamp rally, or every 10 minutes for coin parking, and the validity period information is set appropriately taking into account the update intervals. Of course, it is also possible to change the authentication conditions depending on the code display device 2 for the same service.

[0066] <3. Hardware configuration example> Fig. 14 is a block diagram showing an example of the hardware configuration of an information processing device (computer) that can be employed for the code display device 2, the setting smartphone 3, the reading smartphone 4, the service providing server 5, and the authentication server 6. The information processing device 100 shown in Fig. 14 has a control unit 101, a storage unit 102, an input unit 103, a communication unit 104, and an output unit 105, which are interconnected by a bus. As described above, it is preferable that the code display device 2 be small, lightweight, inexpensive, and low-power consuming, and therefore it is preferable that the configuration be the minimum necessary to perform the above-mentioned processing.

[0067] The control unit 101 is composed of, for example, a CPU (Central Processing Unit), RAM (Random Access Memory), and ROM (Read Only Memory). The ROM stores programs that are read and run by the CPU. The RAM is used as a work memory for the CPU. The CPU controls the entire information processing device 100 by executing various processes and issuing commands in accordance with the programs stored in the ROM. The control unit 101 executes various processes.

[0068] The storage unit 102 is a storage medium configured, for example, by an SSD (Solid State Drive) or semiconductor memory, and stores the OS, application programs, and data used by these (for example, transmitted / received data, various setting data, etc.). The storage device of the code display device 2 described above may be a memory included in the control unit 101, or may be included in the storage unit 102.

[0069] It should be noted that these programs and data do not have to be stored in the storage unit 102. For example, the information processing device 100 may read and use programs and data stored in an external storage medium that can be read by the information processing device 100. Examples of this storage medium include an optical disk, a magnetic disk, a semiconductor memory, and a hard disk drive that are detachable from the information processing device 100. Alternatively, the programs and data may be stored in a device connected to a network such as the Internet, and the information processing device 100 may read and use the programs and data from there. The programs may be, for example, plug-in programs that add part or all of the processing to an existing program.

[0070] The input unit 103 is a device for inputting various types of information to the information processing device 100. When information is input by the input unit 103, the control unit 101 performs various processes corresponding to the input information. The input unit 103 may be a mouse and a keyboard, a touch panel, a touch screen integrated with a monitor, physical buttons, etc. The input unit 103 may also be a sensor such as a microphone. Note that various types of information may be input to the information processing device 100 via the communication unit 104, which will be described later.

[0071] The communication unit 104 is a communication module that communicates with other devices and over the Internet using a predetermined communication standard. Communication methods include wireless LANs such as Wi-Fi, Bluetooth, ZigBee, LTE, 5G, and broadband. The communication by the communication unit 104 may be LPWA (Low Power Wide Area) communication. LPWA communication is a wireless communication method suitable for IoT (Internet of Things) applications that enables wide-area communication using low power. Examples of LPWA communication standards include LoRa and SIGFOX.

[0072] The output unit 105 is a device for outputting various types of information from the information processing device 100. The output unit 105 is a display for displaying images and videos, a speaker for outputting sound, etc. Note that the output of various types of information from the information processing device 100 may be configured to be performed via the communication unit 104. The above-mentioned modules are implemented in each of these units of the information processing device 100 as appropriate.

[0073] <4. Modifications> Although the embodiments of the present invention have been specifically described above, the content of the present invention is not limited to the above-described embodiments, and various modifications based on the technical concept of the present invention are possible. For example, the configurations, processes, operations, methods, etc. of the above-described embodiments can be combined or replaced with each other without departing from the spirit of the present invention. Furthermore, one thing can be divided into two or more parts, and some parts can be omitted. Furthermore, as long as the present invention is applicable, the above-described content may be appropriately deleted, changed, or added.

[0074] For example, in the above-described embodiment, the serial ID of the code display device 2 is used as the identification information for identifying the validity period of the two-dimensional code 20, but the identification information is not limited to this. For example, the identification information for identifying the validity period of the two-dimensional code 20 may be information that identifies the code display device 2 of a specific group. In this case, examples of the identification information include identification information that identifies the service App 44 (service app ID), identification information that identifies the service provider (provider ID), the location ID described above, or identification information that combines these. This allows for detailed authentication suited to each group.

[0075] For example, in the above-described embodiment, the configuration in which the code display device 2 is configured by the setting smartphone 3 is exemplified, but this is not limiting, and the code display device 2 itself may have a setting function. This makes it possible to eliminate the need for the setting smartphone 3. In this case, for example, by using a code display device 2 that has a router function, the current time can be automatically obtained via the Internet.

[0076] For example, in the above-described embodiment, the read information of the two-dimensional code 20 is transmitted from the reading smartphone 4 to the authentication server 6 via the service providing server 5, but the read information may be transmitted directly from the reading smartphone 4 to the authentication server 6. Also, the authentication result is transmitted from the authentication server 6 to the reading smartphone 4 via the service providing server 5, but the authentication result may be transmitted directly from the authentication server 6 to the reading smartphone 4. The service App 44 of the reading smartphone 4 may not require the service providing server 5.

[0077] For example, in the above-described embodiment, the setting smartphone 3 is used as the terminal for performing setting management processing, and the reading smartphone 4 is used as the terminal for performing service application processing, but these are not limited to smartphones, and other mobile terminals such as tablet terminals, camera devices, mobile phones, wearable terminals, etc. may also be used. Furthermore, the setting smartphone 3 may be configured as a box computer.

[0078] For example, the method of setting the time of each device does not have to be the one described above, as long as the times managed by the code display device 2 and the authentication server 6 are synchronized to the extent necessary for authenticating the validity period. Furthermore, the service providing server 5 described above may have a function for displaying a map of the installation location of the code display device 2, a function for displaying billing information, a function for displaying a verification log, etc., and the authentication server 6 may have a device management function (a function for managing a serial ID for each customer, a function for managing various setting information for each customer), a customer management function, an agency management function, a billing management function, a function for displaying a map of the installation location, a function for displaying a verification log, a contract management function, etc.

[0079] It should be noted that the rate of fraud increases as the update interval of the two-dimensional code 20 described above becomes longer. To prevent this, in addition to the configuration, functions, and processing of the above-described embodiment, the information processing system 1 may be provided with a configuration, functions, and processing that also uses GPS information to prevent fraud. For example, the GPS information may be obtained from the GPS function of the reader smartphone 4. Specifically, in addition to the read information transmitted to the service providing server 5, location information of the reader smartphone 4 at the time of reading may be added to determine whether the reading occurred at the installation location, thereby further preventing fraudulent use. [Explanation of symbols]

[0080] 1 Information processing system, 2 Code display device, 3 Setting smartphone, 4 Reading smartphone, 5 Service provision server, 6 Authentication server, 7 Locker, 20 Two-dimensional code, 24 Electronic paper module, 27A Setting processing unit, 27B Display processing unit, 34A Setting management processing unit, 42 Camera module, 44A Service application processing unit, 53A Service provision processing unit, 65A Authentication processing unit

Claims

1. Equipped with an electronic paper module that can display display codes, At a predetermined update timing, information including identification information for identifying the validity period of the display code and the time of generation of the display code is encrypted, and the coded display code is displayed on the electronic paper module. Display device.

2. It is a battery-powered device The display device according to claim 1 .

3. a communication module capable of communicating with other devices via an ad-hoc network or a peer-to-peer network; The communication module can be used to configure the device itself, including the predetermined update timing, from the other device. The display device according to claim 1 .

4. a clock module that manages the generation time of the display code; The setting of the device itself includes the time setting of the clock module. The display device according to claim 3 .

5. Used in multiple applications The display device according to claim 1 .

6. The plurality of types of applications include any one of a lock management service, a time attendance management service, an electronic stamp rally, and an electronic shelf label service. The display device according to claim 5 .

7. The read information of the display code of each of the plurality of types of applications is transmitted to a common authentication device, and each of the applications is authenticated by the common authentication device. The display device according to claim 5 .

8. The identification information is a serial ID assigned to the device itself. The display device according to claim 1 .

9. receiving read information of a display code that is displayed on an electronic paper module included in the display device and updated at a predetermined update timing, the read information being obtained by encrypting and encoding information including identification information for identifying the validity period of the display code and information including the generation time of the display code; Decoding the received read information; Using validity time information indicating the validity time of the display code for each of the identification information set in advance, if the time elapsed from the time of generation of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, it is determined that the authentication is successful, and if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption, it is determined that the authentication is unsuccessful. Authentication device.

10. a display device including an electronic paper module capable of displaying a display code, the display device encrypting information including identification information for identifying the validity period of the display code and the time of generation of the display code at a predetermined update timing, and displaying the coded display code on the electronic paper module; an authentication device that receives read information of the display code, decodes the received read information, and determines that authentication is successful if the elapsed time from the generation time of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, using validity time information that indicates a validity time of the display code for each of the identification information that is set in advance, and determines that authentication is unsuccessful if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption; An information processing system having the above.

11. a step of displaying a coded display code obtained by encrypting information including identification information for identifying the validity period of the display code and the time of generation of the display code, on an electronic paper module included in the display device at a predetermined update timing; A program that causes a computer to execute the following.

12. receiving read information of a display code that is displayed on an electronic paper module included in the display device and updated at a predetermined update timing, the read information being generated by encrypting and encoding information including identification information that identifies the validity period of the display code and the time the display code was generated; decoding the received read information; using validity time information indicating a validity time of the display code for each of the identification information set in advance, determining that the authentication is successful if the elapsed time from the generation time of the display code obtained by the decryption is within the validity time corresponding to the identification information obtained by the decryption, and determining that the authentication is unsuccessful if the elapsed time is not within the validity time corresponding to the identification information obtained by the decryption; A program that causes a computer to execute the following.

Images