Key code issuance method, key code issuance system, authentication system and program

Abstract

This invention provides a key code issuance method, key code issuance system, authentication system, and program that can improve the security of key codes. [Solution] The key code issuance method is a computer-operated key code issuance method that generates n (where n is a natural number greater than or equal to 2) optically readable information codes, and provides the user with m (where m is an m) of the n information codes.

Description

Technical Field

[0001] Embodiments of the present invention relate to a key code issuing method, a key code issuing system, an authentication system, and a program.

Background Art

[0002] In recent years, a key code issuing system has been used that issues an optically readable information code such as a barcode or a two-dimensional code as a key code, and only the holder of the key code can use services such as gate passage, seat use, locker use, item purchase, and identity confirmation. Since such a key code is optically readable, if it is illegally photographed, for example, over the shoulder from behind the user at the time of issuing the key code, the key code may be illegally used.

[0003] Regarding the technology for issuing a key code, an information code display device displays a part of the information code excluding it based on a rule transmitted by a server based on time, and an information code reading device captures a plurality of images at intervals based on a rule transmitted by the server based on time and decodes the information code. A technique is known (for example, see Patent Document 1).

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the above-described technology, since both the information code display device and the information code reading device need to communicate with the server, the processing has become complicated. In particular, the owner of the key code has to introduce a dedicated application for displaying the key code, making it difficult to use it easily. In view of the above circumstances, an embodiment of the present invention aims to provide a key code issuing method, a key code issuing system, an authentication system, and a program that can improve the security of key codes.

Means for Solving the Problem

[0006] According to a first aspect of the present invention, a key code issuing method is a key code issuing method executed by a computer, which generates n (n is a natural number of 2 or more) optically readable information codes, and prompts a user to image m (m is a natural number of m < n) of the n information codes, sequentially displays the generated n information codes, reads the m imaged information codes by the user, and when all of the read m information codes are included in the n information codes, sets the m information codes as valid key codes, and sets the information codes among the n information codes that are not the valid key codes as invalid key codes.

[0007] According to the above key code issuing method, when at least one of the m information codes is not included in the n information codes, all of the m information codes may be set as invalid key codes.

[0008] According to the above key code issuing method, the m information codes presented by the user are read, it is determined whether all of the read m information codes are valid key codes, and when all of the m information codes are valid key codes, information indicating that the user can use the service device may be output.

[0009] According to the above key code issuing method, each of the n information codes may be generated based on fixed information and random number information different from each other.

[0010] According to the above key code issuing method, the fixed information may be generated based on the user and the timing of generating the n information codes.

[0011] According to a second aspect of the present invention, a key code issuing system includes: a generation unit that generates n (n is a natural number of 2 or more) optically readable information codes; information that prompts a user to image m (m is a natural number where m < n) of the n information codes; an output unit that sequentially displays information indicating the n information codes generated by the generation unit; a reading unit that reads the m information codes imaged by the user; a determination unit that determines whether or not the m information codes read by the reading unit are included in the n information codes; and a setting unit that, when it is determined by the determination unit that all of the m information codes are included in the n information codes, sets the m information codes as valid key codes and sets the information codes that are not the valid key codes among the n information codes as invalid key codes.

[0012] According to the above key code issuing system, the setting unit may set all of the m information codes as invalid key codes when it is determined by the determination unit that at least one of the m information codes is not included in the n information codes.

[0013] According to the above key code issuing system, the reading unit reads the m information codes presented by the user, the determination unit determines whether or not all of the m information codes read by the reading unit are valid key codes, and the output unit outputs information indicating that the user can use a service device that provides a service when it is determined by the determination unit that all of the m information codes are valid key codes.

[0014] According to the above key code issuing system, each of the n information codes may be generated based on fixed information and random number information different from each other.

[0015] According to the above key code issuing system, the fixed information may be generated based on the user and the timing of generating the n information codes.

[0016] According to a third aspect of the present invention, an authentication system includes a generation unit that generates n (n is a natural number of 2 or more) optically readable information codes, a creation unit that creates display information for prompting a user to image m (m is a natural number where m < n) of the n information codes, an output unit that sequentially displays the display information created by the creation unit and the n information codes generated by the generation unit, a reading unit that reads the m information codes imaged by the user, a determination unit that determines whether or not the m information codes read by the reading unit are included in the n information codes, and a setting unit that sets the m information codes as valid key codes when it is determined by the determination unit that all of the m information codes are included in the n information codes, and sets information codes other than the valid key codes among the n information codes as invalid key codes. The reading unit reads the m information codes presented by the user, and the determination unit determines whether or not all of the m information codes read by the reading unit are valid key codes.

[0017] According to a fourth aspect of the present invention, a program causes a computer to execute a key code issuance method.

Advantages of the Invention

[0018] According to an embodiment of the present invention, it is possible to provide a key code issuance method, a key code issuance system, an authentication system, and a program that can improve the security of a key code.

Brief Description of the Drawings

[0019] [Figure 1] It is a diagram showing an example of a key code issuance system of an embodiment. [Figure 2] It is a diagram showing an example of a display screen according to the present embodiment. [Figure 3] It is a diagram showing an example of an information code displayed on the display screen according to the present embodiment. [Figure 4] It is a diagram showing an example of a display screen according to the present embodiment. [Figure 5] It is a diagram showing an example of the operation of the key code issuance system according to this embodiment. [Figure 6] It is a diagram showing an example of the operation of the key code issuance system according to this embodiment. [Figure 7] It is a diagram showing an example of the luggage storage system of the embodiment. [Figure 8] It is a diagram showing Example 1 of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 9] It is a diagram showing Example 2 of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 10] It is a diagram showing an example of the opening of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 11] It is a diagram showing an example of the mounting part of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 12] It is a diagram showing an example of the mounting part of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 13] It is a diagram showing an example of the moving device of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 14] It is a diagram showing an example of the moving device of the luggage storage device included in the luggage storage system according to this embodiment. [Figure 15] It is a flowchart showing Example 1 of the operation of the luggage storage system according to this embodiment. [Figure 16] It is a flowchart showing Example 2 of the operation of the luggage storage system according to this embodiment.

Mode for Carrying Out the Invention

[0020] Next, the key code issuance method, key code issuance system, authentication system, and program of this embodiment will be described while referring to the drawings. The embodiments described below are merely examples, and the embodiments to which the present invention is applied are not limited to the following embodiments. In all the figures used to illustrate the embodiments, components with the same function are given the same reference numerals, and repeated explanations are omitted. Furthermore, in this application, "based on XX" means "based on at least XX," and includes cases where it is based on another element in addition to XX. Also, "based on XX" is not limited to cases where XX is used directly, but also includes cases where it is based on something that has been calculated or processed from XX. "XX" is any element (for example, any information).

[0021] (Embodiment) (Key code issuance system) Figure 1 shows an example of a key code issuance system according to an embodiment. The key code issuance system 60 issues key codes. An example of a key code is an information code such as a one-dimensional code, a two-dimensional code, characters, icons, or illustrations. The key code may also be an information code that combines at least two of the following: a one-dimensional code, a two-dimensional code, characters, icons, or illustrations. An information code is an image linked to specific information. The information code may contain specific information. An example of specific information is information that enables user U to use the service, such as gate passage permission information, seat usage permission information, or locker usage permission information. An example of a one-dimensional code is a barcode, and an example of a two-dimensional code is a QR code (registered trademark) (Quick Response Code).

[0022] In Figure 1, the key code issuance system 60 is connected to the service device 80. The service device 80 is a device that enables user U to use predetermined services such as gate passage permission, seat usage permission, and locker usage permission. The service device 80 starts providing services when it receives availability information from the key code issuance system 60 indicating that user U is available. The service device 80 terminates providing services when it receives a service termination notice from the key code issuance system 60.

[0023] The key code issuance system 60 includes an operation unit 61, a reception unit 62, a generation unit 63, a creation unit 64, a reading unit 65, a determination unit 66, a setting unit 67, an output unit 68, a display unit 69, a storage unit 70, and an imaging unit 71. The key code issuance system 60 may include, for example, a stationary computer device, or it may utilize a portable computer device such as a smartphone or a tablet computer (tablet PC). The operation unit 61 is an input device that receives operations from user U. The operation unit 61 is composed of a display device such as a touch panel, and detects touch operations on the screen displayed on the display device.

[0024] The display unit 69 is, for example, a display and includes a touch panel. The display unit 69 and the operation unit 61 may be integrated into a single unit. The imaging unit 71 generates image information by capturing images. Examples of the imaging unit 71 include a camera, a CCD (Charge Coupled Device) scanner, etc. The storage unit 70 is implemented using HDD (Hard Disk Drive), flash memory, RAM (Random Access Memory), ROM (Read Only Memory), etc. The storage unit 70 may also be implemented in the cloud.

[0025] When user U initiates service use by operating the control unit 61, the control unit 61 generates instruction information. The reception unit 62 receives and accepts instruction information from the operation unit 61. The generation unit 63 obtains instruction information from the reception unit 62 and generates reception information such as a reception number and n (where n is a natural number greater than or equal to 2) optically readable information codes based on the obtained instruction information. Here, n is predetermined and set. In this embodiment, as an example of the information code, the case where the generation unit 63 generates a QR code will be continued to be described. Specifically, the generation unit 63 generates a QR code based on fixed information and random number information. An example of the fixed information includes date and time information, a manufacturing number, and a reception number. An example of the date and time information is the date and time when the information code in a predetermined order, such as the first one among the n information codes, is generated. The date and time information may include minutes or seconds. The manufacturing number is the manufacturing number of the key code issuance system 60. The reception number is information for identifying the instruction information. The generation unit 63 associates the reception number with the n information codes, the fixed information, and the random number information and stores them in the storage unit 70.

[0026] The creation unit 64 acquires the reception number and the instruction information from the generation unit 63, and based on the acquired instruction information, creates a display screen for prompting the user U to image m (m is a natural number where m < n) information codes out of the n information codes and hold the imaged information codes up. Here, m is determined and set in advance. It is preferable that the value of m is plural (two or more). The larger the value of m, the higher the security for using a combination of multiple information codes, but it will take more effort for the user U to image. The output unit 68 acquires the display screen information from the creation unit 64 and outputs it to the display unit 69.

[0027] The display unit 69 displays a display screen for prompting the user U to image m information codes out of the n information codes and hold the imaged information codes up based on the display screen information output by the output unit 68. FIG. 2 is a diagram showing an example of the display screen according to this embodiment. The display screen shown in FIG. 2 includes a first part FP where information for prompting to image a photo inside the frame is displayed, and a second part SP where information for prompting to hold up the imaged information code is displayed. The first part of the FP (Fulfillment Plan) is a screen for providing the user U with a key (information code) generated to complete a service, such as retrieving deposited luggage. The displayed two-dimensional barcode changes sequentially according to specific rules. Since the two-dimensional barcode also contains date and time information, there are no duplicate barcodes among those displayed.

[0028] User U takes a picture of the two-dimensional barcodes that are displayed one after another in the first part FP at any time using a handheld imaging device (such as a smartphone). Since the act of imaging is performed by User U, the accuracy of the captured image (two-dimensional barcode) taken by User U (whether it is out of focus or not) is unknown at this point. In the second part SP, after imaging, the accuracy of the captured image (two-dimensional barcode) is checked by having the user U hold the captured two-dimensional barcode over the imaging unit installed in the key code issuance system 60. If it can be read as a two-dimensional barcode, it is checked whether there is one that matches the information code displayed in the first part FP, and if there is a matching two-dimensional barcode, the key exchange is considered complete. In this case, other two-dimensional barcodes displayed in the first part FP are rendered inoperable as keys. With this configuration, even if a malicious person attempts to capture an image from behind user U with the aim of stealing the key, it will be meaningless unless the two-dimensional barcode was captured at the same time as user U. Return to Figure 1 and continue the explanation.

[0029] The output unit 68 acquires information indicating n information codes from the generation unit 63, and based on the acquired information indicating n information codes, causes the display unit 69 to sequentially display the n information codes. Figure 3 is a diagram showing an example of information codes displayed on the display screen according to this embodiment. The n information codes are displayed sequentially at predetermined time intervals within the first part FP frame of the display screen shown in Figure 2. An example of a predetermined time interval is 1 second. By shortening the predetermined time interval, it becomes more difficult to recognize each of the sequentially displayed information codes, thus increasing security. From the perspective of increasing security, the interval may be 0.05 seconds to 1 second, or 0.1 seconds to 0.5 seconds, where human recognition is difficult to keep up with, while the shutter speed of the smartphone camera used by user U is sufficient to capture the image.

[0030] For example, the generation unit 63 generates information code (1) based on fixed information and random number information 1, generates information code (2) based on fixed information and random number information 2, generates information code (3) based on fixed information and random number information 3, and generates information code (n) based on fixed information and random number information n. Return to Figure 1 and continue the explanation.

[0031] User U images m information codes out of n information codes that are sequentially displayed on the display unit 69. After imaging the m information codes, User U sequentially points the imaged m information codes towards the imaging unit 71 and holds it over it to cause further imaging. Here, imaging may occur after the operation unit 61 has performed the operation to cause imaging. The imaging unit 71 images the m information codes based on the control of the reading unit 65. The reading unit 65 reads the m information codes based on the m information codes imaged by the imaging unit 71 and generates image information.

[0032] The determination unit 66 obtains the reception number and n information codes from the generation unit 63, and obtains image information of m information codes from the reading unit 65. The determination unit 66 determines whether the images of the m information codes obtained from the reading unit 65 are included in the n information code images. For example, the determination unit 66 uses image recognition technology to analyze each of the n information code images and each of the m information code images to extract feature point information of the information codes displayed in the information code images. For example, the determination unit 66 performs preprocessing on each of the m information code images, such as rotating them to align the up, down, left, and right directions of the information codes with a predetermined direction, removing noise, correcting distortion of the information code images, and adjusting saturation and brightness, before extracting feature point information.

[0033] Here, "feature points" include feature points unique to each image that can be distinguished by the human eye or a reading unit 65 such as a scanner. For example, this includes feature points of pattern shapes that differ depending on the information contained in the information code (code content). That is, "feature points" include feature points that identify the content of the information code and feature points that identify the information code itself. Specifically, "feature points" may be feature points that can uniquely identify the information code itself, such as differences in patterns (for example, the presence or absence of extra dark areas), aspect ratio of the outline, placement position and pattern size, etc.

[0034] The determination unit 66 compares the feature point information of each of the m information code images with the feature point information of each of the n information code images. The determination unit 66 determines whether all of the m information codes are included in the n information codes by determining whether all of the feature point information of the m information code images are included in the feature point information of the n information code images. By comparing each of the feature point information of the m information code images with the feature point information of the n information code images, it is possible to determine whether the key code is a one-dimensional code, a two-dimensional code, or even characters, icons, illustrations, etc.

[0035] The setting unit 67 acquires, from the determination unit 66, a determination result as to whether all of the received number and the m information codes are included in the n information codes. When the acquired determination result indicates that all of the m information codes are included in the n information codes, the setting unit 67 sets all of the m information codes as valid key codes. The setting unit 67 associates and stores in the storage unit 70 the received number, the n information codes, the fixed information, and the random number information, among which the m information codes set as valid keys, the fixed information, and the random number information are associated with the received number.

[0036] When the acquired determination result does not indicate that all of the m information codes are included in the n information codes, the setting unit 67 sets all of the m information codes as invalid key codes. That is, when the acquired determination result does not indicate that at least one of the m information codes is included in the n information codes, the determination unit 66 sets all of the m information codes as invalid key codes. The setting unit 67 deletes from the storage unit 70 the received number, the n information codes, the fixed information, and the random number information associated with the received number.

[0037] The output unit 68 acquires key setting information indicating whether a valid key has been set from the setting unit 67. When the key setting information indicates that a valid key has been set, the output unit 68 creates available information indicating that the user U can use it and outputs the available information to the service device 80. The available information includes the received number. When the service device 80 acquires the available information from the output unit 68, the service device 80 starts providing the service. When the key setting information indicates that an invalid key has been set, the output unit 68 notifies the creation unit 64 that an invalid key has been set. When the creation unit 64 is notified that an invalid key has been set from the output unit 68, the creation unit 64 performs the same processing as when it acquires service use start operation information from the reception unit 62. Specifically, the reception unit 62 creates display information for prompting the user U to image m (where m is a natural number less than n) of the n information codes.

[0038] When user U terminates the use of the service by operating the control unit 61, the control unit 61 creates instruction information. For example, when user U enters a reception number into the control unit 61 and terminates the use of the service, the control unit 61 creates instruction information including the reception number. The reception unit 62 receives and accepts instruction information from the operation unit 61. The creation unit 64 acquires instruction information from the reception unit 62 and, based on the acquired instruction information, creates a display screen to prompt the user U to hold up m information codes. The output unit 68 acquires display screen information from the creation unit 64 and outputs it to the display unit 69. Figure 4 is a diagram showing an example of a display screen according to this embodiment. The display screen shown in Figure 4 includes information prompting the user to hold up the captured information codes. Returning to Figure 1, the explanation continues.

[0039] User U sequentially points the m information codes that have been captured towards the imaging unit 71 and holds them up to capture them. Here, the imaging may be performed after the operation unit 61 has initiated the imaging operation. The imaging unit 71 captures the m information codes based on the control of the reading unit 65. The reading unit 65 reads the m information codes captured by the imaging unit 71 and generates image information.

[0040] The determination unit 66 obtains instruction information from the reception unit 62 and obtains the reception number included in the obtained instruction information. The determination unit 66 obtains m information codes set in the valid key code stored in association with the obtained reception number from the storage unit 70. The determination unit 66 obtains image information of the m information codes from the reading unit 65. The determination unit 66 determines whether the m information codes obtained from the reading unit 65 are included in the m information codes set in the valid key code obtained from the storage unit 70. For example, the determination unit 66 uses image recognition technology to analyze each of the m information code images obtained from the reading unit 65 and each of the m information code images set in the valid key code, and extracts feature point information of the information code. The determination unit 66 performs preprocessing such as rotating the information code images to align the up, down, left, and right directions of the information code with a predetermined direction, removing noise, correcting distortion of the information code images, and adjusting saturation and brightness, before extracting feature point information.

[0041] The determination unit 66 compares the feature point information of each image of the m information codes obtained from the reading unit 65 with the feature point information of each image of the m information codes set in the effective key code. The determination unit 66 determines whether all of the feature point information of each image of the m information codes obtained from the reading unit 65 are included in the feature point information of each image of the m information codes set in the effective key code, thereby determining whether all of the m information codes obtained from the reading unit 65 are included in the m information codes set in the effective key code.

[0042] The determination unit 66 creates a service termination notice to terminate the provision of the service if all m information codes obtained from the reading unit 65 are included in the m information codes set in the valid key code. The determination unit 66 determines not to terminate the service if it does not indicate that all m information codes obtained from the reading unit 65 are included in the m information codes set in the valid key code. In other words, the determination unit 66 determines not to terminate the service if the obtained determination result does not indicate that at least one of the m information codes obtained from the reading unit 65 is included in the m information codes set in the valid key code.

[0043] The output unit 68 receives a service termination notification from the determination unit 66 and outputs it to the service device 80. The service device 80 terminates the service if it is notified by the output unit 68 that the service will be terminated. The output unit 68 does not output to the service device 80 if it receives information indicating that the service will not be terminated. The service device 80 continues to provide the service.

[0044] All or part of the receiving unit 62, generating unit 63, creation unit 64, reading unit 65, determination unit 66, setting unit 67, and output unit 68 are functional units (hereinafter referred to as software functional units) that are realized by a processor such as a CPU (Central Processing Unit) executing a program stored in the storage unit 20.

[0045] Furthermore, all or part of the receiving unit 62, generating unit 63, creation unit 64, reading unit 65, determination unit 66, setting unit 67, and output unit 68 may be implemented by hardware such as LSI (Large Scale Integration), ASIC (Application Specific Integrated Circuit), or FPGA (Field-Programmable Gate Array), or by a combination of software functions and hardware.

[0046] (Operation of the key code issuance system 60) Figure 5 shows an example of the operation of the key code issuance system according to this embodiment. Referring to Figure 5, the case in which user U starts using the service will be explained. When user U starts using the service, the key code issuance system 60 performs information code issuance processing. (Step S1-1) The operation unit 61 generates instruction information when user U performs an operation to start using the service by operating the operation unit 61. (Step S2-1) The reception unit 62 receives and accepts instruction information from the operation unit 61.

[0047] (Step S3-1) The generation unit 63 obtains instruction information from the reception unit 62 and generates a reception number and n information codes based on the obtained instruction information. The generation unit 63 associates the reception number, the n information codes, fixed information, and random number information and stores them in the storage unit 70. (Step S4-1) The creation unit 64 obtains the reception number and instruction information from the reception unit 62, and based on the obtained instruction information, creates a display screen that prompts the user U to capture images of m information codes out of n information codes and hold up the captured information codes.

[0048] (Step S5-1) The output unit 68 acquires display screen information from the creation unit 64 and outputs it to the display unit 69. Based on the display screen information output by the output unit 68, the display unit 69 displays a display screen prompting the user U to capture m information codes out of n information codes and hold the captured information codes over the imaging unit. (Step S6-1) The output unit 68 obtains information representing n information codes from the generation unit 63 and causes the display unit 69 to sequentially display the n information codes.

[0049] (Step S7-1) User U images m information codes out of the n information codes that are sequentially displayed on the display unit 69. User U then sequentially points the m information codes towards the imaging unit 71 and holds them up to capture them. The imaging unit 71 captures m information codes based on the control of the reading unit 65. The reading unit 65 reads the m information codes captured by the imaging unit 71 and generates image information.

[0050] (Step S8-1) The determination unit 66 obtains the reception number and n information codes from the generation unit 63, and obtains image information of m information codes from the reading unit 65. The determination unit 66 determines whether the images of the m information codes obtained from the reading unit 65 are included in the n information code images. (Step S9-1) The setting unit 67 obtains from the determination unit 66 whether the reception number and all m information codes are included in the n information codes. If the obtained determination result indicates that all m information codes are included in the n information codes, the setting unit 67 sets all m information codes as valid key codes.

[0051] (Step S10-1) The setting unit 67 sets the information codes other than the m information codes set as valid key codes from among the n information codes as invalid key codes. (Step S11-1) The output unit 68 generates availability information indicating that user U can use the service.

[0052] (Step S12-1) The output unit 68 outputs the available information to the service device 80. (Step S13-1) The setting unit 67 obtains from the determination unit 66 whether the reception number and all m information codes are included in the n information codes. If the obtained determination result does not indicate that all m information codes are included in the n information codes, the setting unit 67 sets all m information codes to invalid key codes. After that, the process proceeds to step S1-1.

[0053] Figure 6 shows an example of the operation of the key code issuance system according to this embodiment. Referring to Figure 6, the case in which user U terminates the use of the service will be explained. When user U performs the operation to terminate the use of the service, the key code issuance system 60 performs information code determination processing. (Step S1-2) When user U enters a reception number into the operation unit 61 and performs an operation to end the use of the service, the operation unit 61 creates instruction information including the reception number. (Step S2-2) The reception unit 62 receives and accepts instruction information from the operation unit 61.

[0054] (Step S3-2) The creation unit 64 obtains instruction information from the reception unit 62 and, based on the obtained instruction information, creates a display screen to prompt the user U to hold up m information codes. (Step S4-2) The output unit 68 obtains display screen information from the creation unit 64 and displays the display screen on the display unit 69.

[0055] (Step S5-2) User U sequentially points the m information codes that have been captured towards the imaging unit 71 and holds them up to capture them. The imaging unit 71 captures the m information codes based on the control of the reading unit 65. The reading unit 65 reads the m information codes based on the m information codes captured by the imaging unit 71 and generates image information. (Step S6-2) The determination unit 66 obtains instruction information from the reception unit 62 and obtains m information codes from the storage unit 70 that are set in the valid key code stored in association with the reception number included in the obtained instruction information. The determination unit 66 obtains image information of the m information codes from the reading unit 65. Based on the image information of the m information codes obtained from the reading unit 65, the determination unit 66 determines whether the images of the m information codes are included in the m information codes set in the valid key code. If there are any images of the m information codes that are not included in the m information codes set in the valid key code, the process proceeds to step S1-2.

[0056] (Step S7-2) The determination unit 66 determines that the service should be terminated if all m information codes obtained from the reading unit 65 are included in the m information codes set in the valid key code, and creates a service termination notice. (Step S8-2) The output unit 68 receives a service termination notification from the determination unit 66 and outputs it to the service equipment 80. The service device 80 receives a service termination notice from the output unit 68 and terminates the provision of the service.

[0057] In the embodiment described above, the determination unit 66 was described as comparing the feature point information of each of the m information code images with the feature point information of each of the n information code images. However, it is not limited to this example. For example, the determination unit 66 may compare the information read from each of the m information code images with the information read from each of the n information code images. For example, if the information codes are one-dimensional codes and two-dimensional codes, the information read from each of them may be compared. In this case, the setting unit 67 sets all m information codes as valid key codes if the determination unit 66 determines that all of the information read from each of the m information code images is included in the information read from each of the n information code images. On the other hand, the setting unit 67 sets all m information codes as invalid key codes if the determination unit 66 does not determine that all of the information read from each of the m information code images is included in the information read from each of the n information code images.

[0058] In the embodiment described above, the generation unit 63 was described as storing in the storage unit 70 an association between the reception number, n information codes, fixed information, and random number information. However, the invention is not limited to this example. For example, the generation unit 63 may store in the storage unit 70 an association between the reception number and fixed information. In this case, the determination unit 66 confirms the reliability (information consistency) of the information codes using the fixed information excluding the random number information. That is, the determination unit 66 confirms reliability (information consistency) by determining whether all of the fixed information read from each of the m information codes is included in the fixed information read from each of the n information codes. In this case, if the reliability is confirmed by the determination unit 66, which determines that all of the fixed information read from each of the m information codes is included in the fixed information read from each of the n information codes, the setting unit 67 sets the authentication key with the entire information including random information (fixed information + random information A). By configuring it in this way, authentication cannot be performed with other information codes stolen by others (for example, fixed information + random information B). The aforementioned key code issuance system may be configured as an authentication system for authenticating user U.

[0059] (Examples of application) The application examples of the aforementioned key code issuance system 60 will now be described. The key code issuance system 60 can be applied to various systems that determine whether or not to permit the provision of a service. Below, as an example, the case in which the key code issuance system 60 is applied to a luggage storage system will be described. In other words, the luggage storage system is applied as the service equipment 80. Figure 7 is a diagram showing an example of a luggage storage system of the embodiment. The luggage storage system 100 of the embodiment comprises a luggage storage device 100a, a control device 100b, and a key code issuance system 60. The luggage storage device 100a has multiple loading compartments for storing luggage. When an operation is performed to deposit luggage into the luggage storage system 100, the key code issuance system 60 performs an information code issuance process. The control device 100b assigns one of the multiple loading compartments to user U.

[0060] When availability information is input from the key code issuance system 60, the luggage storage device 100a stores the luggage to be stored in the loading section assigned by the control device 100b. The control device 100b obtains the reception number included in the available information from the luggage storage device 100a. When the luggage is stored in the loading unit that has been transported to the luggage storage location and payment has been made, the control device 100b stores in its storage unit storage information that associates the loading unit ID of the assigned loading unit with the reception information and information indicating the date and time the luggage was received (hereinafter referred to as "storage start date and time information").

[0061] User U, who has come to retrieve their luggage, enters the reception number into the key code issuance system 60 and performs the operation to terminate the use of the service. The key code issuance system 60 performs information code determination processing. When the provision of the service is to be terminated, the key code issuance system 60 creates a service termination notice and outputs it to the luggage storage device 100a.

[0062] The luggage storage device 100a obtains a service termination notice from the key code issuance system 60 and retrieves the reception number included in the obtained service termination notice. The luggage storage device 100a outputs the retrieved reception number to the control device 100b. The control device 100b receives the reception number output by the luggage storage device 100a, compares the received reception number with the reception number included in the storage information stored in the memory unit, and obtains the mounting unit ID associated with the storage information containing the matching reception number. The control device 100b outputs control information containing the obtained mounting unit ID to the luggage storage device 100a. The control device 100b identifies the storage information containing the obtained mounting unit ID and associates the storage information that does not have any associated vacancy information with it. The luggage storage device 100a transports the loading unit corresponding to the loading unit ID to the position where the luggage is to be retrieved, based on the reception number.

[0063] The luggage storage device 100a and the control device 100b included in the luggage storage system 100 will be described in order below. (Luggage storage device 100a) An example of the luggage storage device 100a is used to store luggage N (items to be stored) such as suitcases in public facilities such as train stations and airports, or in exhibition facilities. The luggage storage device 100a functions as a locker for temporarily storing luggage N. As shown in Figure 7, the luggage storage device 100a includes a communication unit 110a, an operation unit 115a, an imaging unit 120a, a transport unit 135a, and a processing unit 160a.

[0064] The communication unit 110a is implemented by a communication module. The communication unit 110a is connected to the control device 100b via a cable CA. The communication unit 110a communicates with devices such as the control device 100b using a communication method such as a wired LAN. The communication unit 110a may also communicate with the control device 100b via a network NW using a wireless communication method such as wireless LAN, Bluetooth®, or LTE®.

[0065] The operation unit 115a is equipped with an input device and accepts operations from user U. This input device includes a device for inputting character information such as a keyboard, a pointing device such as a touch panel, buttons, etc. The operation unit 115a may also be equipped with a display device to display messages to user U. The operation unit 115a may be integrated with the operation unit 61 of the key code issuance system 60. When depositing luggage, user U inputs information to instruct the start of storage by operating the control unit 115a.

[0066] Figure 8 shows an example 1 of a luggage storage device included in the luggage storage system according to this embodiment. Figure 8 mainly shows the hardware configuration of the luggage storage device 100a. The luggage storage device 100a comprises an outer shell 11, a plurality of mounting sections 2 that are movable within the outer shell 11 and store luggage N, a storage rack 3 that stores these mounting sections 2 in predetermined positions, an entrance / exit 4 that serves as a transfer point when loading and unloading predetermined luggage N, and a moving device 5 that moves the mounting sections 2 between the storage rack 3 and the entrance / exit 4.

[0067] The luggage storage device 100a, whose details will be described later, includes an inner door 21 of the loading section 2 and an outer door 40 of the loading / unloading exit 4. When loading or unloading luggage N, the outer door 40 and the inner door 21 (see Figures 10 and 11) of the luggage storage device 100a slide in conjunction, opening and closing to match the size of the loading section 2. The luggage storage device 100a is used to load and unload luggage N into and out of the device from the loading / unloading outlet 4 for storage and safekeeping. The outer shell 11 is formed in a box shape with walls on the front, back, left, right, and top, and the loading / unloading outlet 4 is located on one of its side walls (the unloading surface 11A). In other words, a user U who stores luggage N can store luggage N in a predetermined position in the storage rack 3 by operating the operation panel 12 located near the loading / unloading outlet 4, and when needed, the stored luggage N can be unloaded from the loading / unloading outlet 4 and retrieved.

[0068] In this embodiment, in the luggage storage device 100a, the direction lateral to the loading / unloading port 4 is referred to as the left-right direction X1, and the direction perpendicular to the left-right direction X1 in a plan view from above is referred to as the front-rear direction X2. In the front-rear direction X2, the side in front of the user U facing the loading / unloading port 4 is referred to as the front, and the opposite side is referred to as the rear.

[0069] Figure 9 shows an example 2 of a luggage storage device included in the luggage storage system according to this embodiment. As shown in Figures 8 and 9, the outer shell 11 has a base plate 13, an outlet surface 11A located on the front side of the side walls erected on the outer circumference of the base plate 13, and an upper wall (not shown) that covers the space surrounded by the four side walls from above. The outer shell 11 is formed in a long rectangular shape in the left-right direction X1. Here, in Figures 8 and 9, the base plate 13 and the outlet surface 11A of the outer shell 11 are shown for the sake of clarity.

[0070] Inside the outer shell 11, storage racks 3 (storage rack 3A, storage rack 3B) are arranged along the inner surface of the outer shell 11 on both sides in the front-rear direction X2, and a moving passage T is provided between the front and rear storage racks 3A and storage rack 3B, where a moving device 5 is positioned. The front storage rack 3A, located on the front side of the moving passage T, has an opening formed in the center in the left-right direction X1.

[0071] Figure 10 shows an example of an opening in a luggage storage device included in the luggage storage system according to this embodiment. As shown in Figures 8 and 10, the opening has an inlet / outlet 4 on the inside, and an outlet 4A is provided that allows the mounting section 2 to move in and out of the inlet / outlet 4. Figure 10 further shows the aforementioned operating unit 115a.

[0072] Figures 11 and 12 show an example of a mounting section for a luggage storage device included in the luggage storage system according to this embodiment. As shown in Figures 11(a), (b) and 12(a), (b), the mounting section 2 consists of multiple box shapes (two types, large and small, in this embodiment) with different length dimensions (i.e., height dimensions) in the sliding direction E. It is movably mounted within the outer shell 11 by the moving device 5 and is also storable in the storage rack 3 by the moving device 5. Hereinafter, the mounting section 2 with the larger height dimension will be referred to as the large mounting section 2A, and the mounting section 2 with the smaller height dimension will be referred to as the small mounting section 2B.

[0073] The opening 2a of the mounting section 2 is provided with an inner door 21 that is slidable in a predetermined sliding direction E (up and down direction X3), and is formed to have a different length dimension in the sliding direction E to match the mounting section 2 which has a different length dimension in the sliding direction E. On the outer surface 21a of the inner door 21, an engaging projection 22 (first engaging member, first projection) is provided at the tip 21b of the outer surface 21a of the inner door 21 in the sliding direction (up and down direction X3), projecting forward from the outer surface 21a. The engaging projection 22 is a strip-shaped piece extending along the left-right direction X1. The engaging projection 22 is provided on each inner door 21 such that its mounting position differs in the sliding direction E for each inner door 21 with a different length dimension in the sliding direction E. In other words, the position of the engaging projection 22 provided on the upper part of the inner door 21 differs in height from the lower surface of the mounting section 2 between the large mounting section 2A shown in Figures 10(b) and 11(a) and (b), and the small mounting section 2B shown in Figures 10(c) and 12(a) and (b). The inner door 21 slides without any driving force in conjunction with the sliding of the outer door 40, which will be described later and is located at the loading / unloading exit 4, opening and closing the opening 2a of the mounting section 2.

[0074] The storage rack 3 has multiple storage spaces 31 arranged vertically and horizontally, which allow for the individual loading and unloading of the mounting units 2. These storage spaces 31 are arranged in three tiers vertically, with the top two tiers capable of storing large mounting units 2A and the bottom tier capable of storing small mounting units 2B. The mounting units 2 are loaded and unloaded from the moving passage T side of storage racks 3A and 3B using a moving device 5. All mounting units 2 stored in storage racks 3A and 3B are stored with their inner doors 21 facing forward. This eliminates the need for the moving device 5 to change the orientation of the mounting units 2 when they move between the storage rack 3 and the loading / unloading position P1.

[0075] Figures 13 and 14 show an example of a mobile device for a luggage storage device included in the luggage storage system according to this embodiment. As shown in Figures 13 and 14, the moving device 5, positioned in the moving passage T, is controlled by a transport unit 135a and includes a transport lift 51 that holds the loading unit 2 and transports it between a predetermined storage space 31 of the storage rack 3 and an inlet / outlet 4, a lateral movement guide 52 that moves the transport lift 51 in the left-right direction X1, and a lifting guide 53 that raises and lowers the lateral movement guide 52 in the up-down direction X3. Furthermore, the moving device 5 is provided with an extrusion device (not shown) for moving the transport lift 51 forward and backward from the moving passage T to each storage space 31 in the storage rack 3 and to the inlet / outlet 4.

[0076] The lateral movement guide 52 and the lifting guide 53 are supported by a gate-shaped support frame 54 erected on the base plate 13 inside the outer shell 11. The lifting guide 53 is provided with a pair of left and right vertical rails 55 that extend along the vertical direction X3 on the inner surface of the support frame 54. The lateral movement guide 52 comprises sliding parts 56 slidably supported on the upper and lower rails 55 at both left and right ends, and two left and right rails 57 extending along the left-right direction X1 so as to bridge the left and right sliding parts 56. The sliding parts 56 are provided to be movable in the vertical direction along the upper and lower rails 55 by a driving means such as a drive motor (not shown). This allows the lateral movement guide 52 to move up and down while maintaining a horizontal position.

[0077] The transport lift 51 has a drive mechanism such as a drive motor (not shown) and is used to transfer the loading unit 2 between the storage rack 3 and the loading / unloading position P1 by moving it to an appropriate position along the lateral movement guide 52 and the lifting / unloading guide 53 while holding the loading unit 2 from below. The aforementioned extrusion device moves the transport lift 51 back and forth in the front-rear direction X2, pushing the mounting section 2 out from the lateral movement guide 52 in the front-rear direction X2 and then pulling it back. The symbol F in the figure indicates the direction of movement in the extrusion device. The extrusion device can be configured such that, for example, the transport lift 51 on which the mounting section 2 is mounted is moved along the sliding axis via a transmission member such as a timing belt using the driving force of a drive motor (not shown).

[0078] As shown in Figures 11 and 12, the unloading section 4A, which has an loading / unloading port 4, is located outside the inner door 21 of the loading section 2 when it is stopped at a predetermined position (loading / unloading position P1). The unloading section 4A is provided at the opening of the loading / unloading port 4 formed at the loading / unloading position P1 where the loading section 2 stops, and is equipped with an outer door 40 that is slidable in the sliding direction E. The loading / unloading position P1 is the position on the inside (rear side) of the outer door 40 at the loading / unloading port 4, where cargo N is loaded into and unloaded from the loading section 2. The outer door 40 is sized to close the opening that connects the inside and outside of the outlet surface 11A of the outer shell 11 at the loading / unloading exit 4, and is the same size as the large inner door 21A of the large mounting section 2A (at least the length dimension in the vertical direction X3 is the same). The size of the opening at the loading / unloading exit 4 is approximately the same as the size of the opening 2a of the large mounting section 2A.

[0079] On the rear surface 40a of the outer door 40 facing the inner door 21, there is an engaging recess 41 (second engaging member) that can engage with the engaging projection 22 when the inner door 21 moves in the sliding direction E (up and down direction X3 in this embodiment) toward the open position Q2 where the opening 2a of the mounting section 2 is fully open, from a closed position Q1 where the inner door 21 closes the opening 2a of the mounting section 2 when the mounting section 2 is stopped at the loading / unloading position P1. The engaging recesses 41 (41A, 41B) are provided at multiple locations on the inner door 21, which are of different sizes, to engage with the respective engaging protrusions 22. Each engaging recess 41 is a groove-shaped recess in which a pair of strip-shaped upper pieces 41a and lower pieces 41b (second protrusions) extending along the left-right direction X1 are arranged with a vertical gap between them, and a gap is formed between the upper pieces 41a and lower pieces 41b for the engaging protrusions 22.

[0080] As shown in Figures 11(a) and (b), the first engaging recess 41A, provided at the upper end of the outer door 40, engages with the first engaging projection 22A, provided at the upper part of the large inner door 21A of the large mounting section 2A. As shown in Figures 12(a) and (b), the second engaging recess 41B, provided in the center of the outer door 40 in the vertical direction X3, engages with the second engaging projection 22B, provided at the upper part of the small inner door 21B of the small mounting section 2B.

[0081] The outer door 40 has a drive mechanism (not shown) and is provided to interlock with the inner door 21, which does not have a drive force, and is configured to stop sliding when the inner door 21 is fully open. As mentioned above, the outer door 40 is formed to be approximately the same size as the large inner door 21A of the large mounting section 2A. Furthermore, the loading / unloading port 4 is provided with an engagement detection sensor (not shown) that detects when the engagement recess 41 and the engagement projection 22 are engaged. The engagement detection sensor is positioned near the engagement position of the engagement recess 41 and the engagement projection 22 when the door is closed. Based on the result detected by the engagement detection sensor, the size of the mounting section 2 is identified, and the outer door 40 is controlled to slide by a sliding amount based on the identified size of the mounting section 2. For example, a photoelectric sensor can be used as the engagement detection sensor. Furthermore, the type of mounting section 2 identified based on the results detected by the engagement detection sensor (in this embodiment, either the large mounting section 2A or the small mounting section 2B) may be displayed on the operation panel 12. Return to Figure 1 and continue the explanation.

[0082] The transport unit 135a moves the loading unit 2 between the storage rack 3 and the loading / unloading port 4 by controlling the moving device 5. When user U deposits luggage, the processing unit 160a acquires information that user U has entered into the operation unit 115a instructing the user to start storage, and creates instruction information that includes the acquired information instructing the user to start storage. When the processing unit 160a obtains available information from the key code issuance system 60, it creates instruction information that includes the reception number contained in the available information. The processing unit 160a then transmits the created instruction information from the communication unit 110a to the control device 100b.

[0083] The processing unit 160a acquires the control information received by the communication unit 110a. The processing unit 160a acquires the mounting unit ID of the mounting unit 2 to be assigned to user U, which is included in the acquired control information. The processing unit 160a outputs a transport command to the transport unit 135a, which is a command to transport the mounting unit 2 corresponding to the acquired mounting unit ID from the storage rack 3 to the loading / unloading port 4, and to transport the mounting unit 2 that has been transported to the loading / unloading port 4 back to the storage rack 3. The transport unit 135a transports the mounting unit 2 corresponding to the mounting unit ID from the storage rack 3 to the loading / unloading port 4 by controlling the moving device 5. The processing unit 160a outputs a transport command to the transport unit 135a and then processes a request for payment from the user U. For example, the processing unit 160a determines the fee based on the size and weight of the package. The transport unit 135a controls the moving device 5 to transport the loading unit 2, which has been transported to the loading / unloading port 4, to the storage rack 3. After confirming receipt of payment, the processing unit 160a creates notification information including the reception number, the mounting unit ID, and information indicating that a transport command has been output. The processing unit 160a then transmits the created notification information from the communication unit 110a to the control device 100b.

[0084] When user U comes to pick up their package, the processing unit 160a obtains the service termination notice output by the key code issuance system 60. The processing unit 160a obtains the reception number included in the obtained service termination notice. The processing unit 160a creates instruction information including the obtained reception number and transmits it from the communication unit 110a to the control device 100b. The communication unit 110a receives control information transmitted by the control device 100b. The processing unit 160a obtains the control information from the communication unit 110a and obtains the mounting unit ID included in the obtained control information. The processing unit 160a then outputs a transport command to the transport unit 135a, which is a command to transport the mounting unit 2 corresponding to the obtained mounting unit ID from the storage rack 3 to the loading / unloading port 4, and then transport the mounting unit 2 that has been transported to the loading / unloading port 4 back to the storage rack 3. The transport unit 135a controls the moving device 5 to transport the mounting unit 2 corresponding to the mounting unit ID from the storage rack 3 to the loading / unloading port 4, and then transports the mounting unit 2 that has been transported to the loading / unloading port 4 back to the storage rack 3.

[0085] The aforementioned transport unit 135a and processing unit 160a are realized, for example, by a hardware processor such as a CPU executing a computer program (software) stored in a storage unit (not shown). Furthermore, some or all of these functional units may be realized by hardware (including circuitry) such as LSIs, ASICs, FPGAs, and GPUs, or by the cooperation of software and hardware. The computer program may be pre-stored in a storage device such as an HDD or flash memory, or it may be stored in a removable storage medium such as a DVD or CD-ROM and installed when the storage medium is inserted into a drive device.

[0086] (Control device 100b) The control device 100b is implemented by a device such as a personal computer, server, smartphone, tablet computer, or industrial computer. The control device 100b comprises a communication unit 110b, an allocation unit 130b, an acquisition unit 150b, a processing unit 160b, a reception unit 170b, an extraction unit 180b, and a storage unit 190b. The communication unit 110b is implemented by a communication module. The communication unit 110b is connected to the luggage storage device 100a via a cable CA. The communication unit 110b communicates with devices such as the luggage storage device 100a using a communication method such as a wired LAN. The communication unit 110b may also communicate with the luggage storage device 100a via a network NW using a wireless communication method such as wireless LAN, Bluetooth®, or LTE®. The storage unit 190b is implemented using an HDD, flash memory, RAM, ROM, etc. One or more pieces of storage information are stored in the storage unit 190b.

[0087] When user U deposits luggage, the communication unit 110b receives instruction information transmitted by the luggage storage device 100a. The allocation unit 130b obtains the instruction information from the communication unit 110b and, based on the reception number and information instructing the start of storage included in the obtained instruction information, refers to the storage information stored in the storage unit 190b and allocates an available loading unit 2. The allocation unit 130b outputs the loading unit ID of the loading unit 2 to be allocated to the processing unit 160b.

[0088] The processing unit 160b acquires the mounting unit ID of the mounting unit 2 output by the allocation unit 130b, creates control information including the acquired mounting unit ID, and transmits it from the communication unit 110b to the luggage storage device 100a. The communication unit 110b receives notification information transmitted by the luggage storage device 100a. The processing unit 160b obtains the notification information from the communication unit 110b and retrieves the reception number, the loading unit ID of the loading unit 2, and information indicating that a transport command has been output, which are included in the retrieved notification information. The processing unit 160b obtains the storage start date and time information, creates storage information by associating the retrieved loading unit ID of the loading unit 2 with the storage start date and time information, and stores the created storage information in the storage unit 190b.

[0089] When user U comes to pick up their package, the communication unit 110b receives instruction information transmitted by the package storage device 100a. The reception unit 170b receives the instruction information from the communication unit 110b and accepts the reception number included in the received instruction information. The extraction unit 180b obtains a reception number from the reception unit 170b, compares the obtained reception information with the reception numbers contained in each of the one or more storage information stored in the storage unit 190b, and obtains the mounting unit ID associated with the storage information containing the matching reception number. The extraction unit 180b creates control information containing the obtained mounting unit ID and transmits the created control information from the communication unit 110b to the luggage storage device 100a. The extraction unit 180b identifies the storage information containing the obtained mounting unit ID from the storage information stored in the storage unit 190b, and associates the storage information that does not have any associated free information with it.

[0090] The aforementioned allocation unit 130b, acquisition unit 150b, processing unit 160b, reception unit 170b, and extraction unit 180b are realized, for example, by a hardware processor such as a CPU executing a computer program (software) stored in the storage unit 190b. Furthermore, some or all of these functional units may be realized by hardware (including circuitry) such as LSIs, ASICs, FPGAs, and GPUs, or by the cooperation of software and hardware. The computer program may be stored in advance in a storage device such as an HDD or flash memory, or it may be stored in a removable storage medium such as a DVD or CD-ROM and installed when the storage medium is inserted into a drive device.

[0091] (Operation of luggage storage system 100) Figure 15 is a flowchart showing example 1 of the operation of the luggage storage system according to this embodiment. Referring to Figure 15, the operation when user U deposits luggage into the luggage storage system 100 will be explained. (Steps S1-3) In the luggage storage device 100a, the processing unit 160a acquires information that user U has entered into the operation unit 115a to instruct the start of storage, and creates instruction information that includes the acquired information to instruct the start of storage. (Step S2-3) In the luggage storage device 100a, the processing unit 160a outputs the created instruction information to the key code issuance system 60.

[0092] (Step S3-3) The key code issuance system 60 obtains instruction information from the luggage storage device 100a and performs information code issuance processing based on the obtained instruction information. (Step S4-3) The key code issuance system 60 creates available information and transmits it to the luggage storage device 100a.

[0093] (Step S5-3) In the luggage storage device 100a, the communication unit 110a receives availability information. The processing unit 160a obtains the availability information from the communication unit 110a and retrieves the reception number included in the obtained availability information. The processing unit 160a creates instruction information including the retrieved reception number. (Step S6-3) In the luggage storage device 100a, the processing unit 160a transmits the created instruction information from the communication unit 110a to the control device 100b.

[0094] (Step S7-3) In the control device 100b, the communication unit 110b receives instruction information transmitted by the luggage storage device 100a. The allocation unit 130b obtains the instruction information from the communication unit 110b and, based on the reception number and information instructing the start of storage included in the obtained instruction information, refers to the storage information stored in the storage unit 190b and allocates an available loading unit 2. (Step S8-3) In the control device 100b, the processing unit 160b obtains the mounting unit ID of the mounting unit 2 to be assigned from the allocation unit 130b and creates control information including the obtained mounting unit ID.

[0095] (Step S9-3) In the control device 100b, the communication unit 110b acquires control information from the processing unit 160b and transmits it to the luggage storage device 100a. (Step S10-3) In the luggage storage device 100a, the communication unit 110a receives control information. The processing unit 160a acquires the control information from the communication unit 110a. The processing unit 160a acquires the mounting unit ID of the mounting unit 2 to be assigned to user U, which is included in the acquired control information. The processing unit 160a outputs a transport command to the transport unit 135a, which is a command to transport the mounting unit 2 corresponding to the acquired mounting unit ID from the storage rack 3 to the loading / unloading port 4. The transport unit 135a transports the mounting unit 2 corresponding to the mounting unit ID from the storage rack 3 to the loading / unloading port 4 by controlling the moving device 5.

[0096] (Step S11-3) In the luggage storage device 100a, the processing unit 160a processes a request for payment of the fee from the user U. (Step S12-3) In the cargo storage device 100a, the processing unit 160a outputs a transport command to the transport unit 135a, which is a command to transport the loading unit 2 that has been transported to the loading / unloading port 4 to the storage rack 3. The transport unit 135a transports the loading unit 2 that has been transported to the loading / unloading port 4 to the storage rack 3 by controlling the moving device 5. (Step S13-3) In the luggage storage device 100a, the processing unit 160a, after confirming receipt of payment, creates notification information including the reception number, the loading unit ID, and information indicating that a transport order has been issued. The processing unit 160a then transmits the created notification information from the communication unit 110a to the control device 100b.

[0097] (Step S14-3) In the control device 100b, the communication unit 110b receives notification information transmitted by the luggage storage device 100a. The processing unit 160b obtains the notification information from the communication unit 110b and acquires the reception number, the loading unit ID of the loading unit 2, and information indicating that a transport command has been output, which are included in the acquired notification information. The processing unit 160b also acquires the storage start date and time information. (Step S15-3) In the control device 100b, the processing unit 160b creates storage information by associating the acquired mounting unit ID of the mounting unit 2 with the storage start date and time information, and stores the created storage information in the storage unit 190b.

[0098] Figure 16 is a flowchart showing example 2 of the operation of the luggage storage system according to this embodiment. Referring to Figure 16, the operation when user U retrieves luggage stored in the luggage storage system 100 will be explained. (Steps S1-4) The key code issuance system 60 performs information code determination processing. (Step S2-4) The key code issuance system 60 creates a service termination notice including the reception number and transmits it to the luggage storage device 100a.

[0099] (Step S3-4) In the luggage storage device 100a, the communication unit 110a receives a service termination notice transmitted by the key code issuance system 60. The processing unit 160a obtains the reception number included in the service termination notice. (Step S4-4) In the luggage storage device 100a, the processing unit 160a creates instruction information including the acquired reception number and transmits it from the communication unit 110a to the control device 100b.

[0100] (Step S5-4) In the control device 100b, the communication unit 110b receives instruction information transmitted by the luggage storage device 100a. The reception unit 170b obtains the instruction information from the communication unit 110b, obtains the reception number included in the obtained instruction information, and accepts it. The extraction unit 180b compares the reception number received by the reception unit 170b with the reception numbers included in each of the one or more storage information stored in the storage unit 190b, and obtains the mounting unit ID associated with the storage information containing the matching reception number. (Step S6-4) In the control device 100b, the extraction unit 180b creates control information including the acquired mounting unit ID, and transmits the created control information from the communication unit 110b.

[0101] (Step S7-4) In the cargo storage device 100a, the communication unit 110a receives control information transmitted by the control device 100b. The processing unit 160a obtains the control information from the communication unit 110a and obtains the mounting unit ID included in the obtained control information. The processing unit 160a outputs a transport command to the transport unit 135a, which is a command to transport the mounting unit 2 corresponding to the obtained mounting unit ID from the storage rack 3 to the loading / unloading port 4, and to transport the mounting unit 2 that has been transported to the loading / unloading port 4 back to the storage rack 3. The transport unit 135a transports the mounting unit 2 corresponding to the mounting unit ID from the storage rack 3 to the loading / unloading port 4. (Step S8-4) In the cargo storage device 100a, the transport unit 135a transports the loading unit 2, which has been transported to the loading / unloading port 4, to the storage rack 3. (Step S9-4) In the control device 100b, the extraction unit 180b identifies the storage information, including the acquired mounting unit ID, from the storage information stored in the storage unit 190b, and associates the free information with the storage information that is not associated with free information among the identified storage information.

[0102] In the embodiments described above, the luggage storage system 100 was described as including a luggage storage device 100a, a control device 100b, and a key code issuing system 60, but it is not limited to this example. For example, the luggage storage system 100 may be configured by integrating the luggage storage device 100a, the control device 100b, and the key code issuing system 60, or the luggage storage system 100 may be configured with three or more devices. For example, one control device 100b may control multiple luggage storage devices 100a. Alternatively, multiple control devices 100b may control one luggage storage device 100a, or multiple control devices 100b may control multiple luggage storage devices 100a. When the system includes multiple control devices 100b, the control devices 100b may be configured in a master-slave manner. For example, one key code issuing system 60 may issue information codes to multiple luggage storage devices 100a and control devices 100b.

[0103] In the embodiments described above, the luggage storage system 100 was described as including one luggage storage device 100a, but the invention is not limited to this example. For example, the luggage storage system 100 may include multiple luggage storage devices 100a. In this case, the multiple luggage storage devices 100a may be controlled by one control device 100b, or by multiple control devices 100b.

[0104] In the above-described embodiment, in the storage rack 3 of the luggage storage device 100a, a plurality of storage spaces 31 for storing the mounting portions 2 individually in a vertically and horizontally arrayed manner are provided. Although the case where these storage spaces 31 are provided in three upper and lower stages, the upper two stages are capable of storing the large mounting portion 2A, and the lowermost stage is capable of storing the small mounting portion 2B has been described, the present invention is not limited to this example. For example, the storage space 31 may be divided so that the large mounting portion 2A can be stored, or may be divided so that the small mounting portion 2B can be stored. Further, the number of large mounting portions 2A and the number of small mounting portions 2B stored in the storage space 31 may be appropriately changed.

[0105] According to the key code issuing system 60 according to the present embodiment, a generation unit 63 that generates n (n is a natural number of 2 or more) optically readable information codes, and a user U are caused to image m (m is a natural number of m < n) of the n information codes. A creation unit 64 that creates display information for prompting, an output unit 68 that sequentially displays the display information created by the creation unit 64 and the n information codes generated by the generation unit 63, and m pieces of the information imaged by the user U. A reading unit 65 that reads the code, a determination unit 66 that determines whether or not the m information codes read by the reading unit 65 are included in the n information codes, and when it is determined by the determination unit 66 that all of the m information codes are included in the n information codes, the m information codes are set as valid key codes, and a setting unit 67 that sets the information codes that are not valid key codes among the n information codes as invalid key codes.

[0106] By configuring the system in this way, among multiple information codes displayed sequentially, only the information code captured by user U can be set as a valid key code, while other information codes can be set as invalid key codes. Even if another person illegally captures an information code, unless they capture it at the exact same time as user U, that information code will be an invalid key code, thus reducing the possibility of the key code being known to others through illegal capture. This improves the security of the key code. Furthermore, even if another person illegally captures an information code as a video, they will not be able to determine which of the multiple information codes in the video is a valid key code, thus reducing the possibility of the key code being known to others. User U can use a device equipped only with an imaging means and a display means as a key display device, making it easy to obtain the key code.

[0107] Furthermore, according to the key code issuance system 60, if the determination unit 66 determines that at least one of the m information codes is not included in the n information codes, the setting unit 67 sets all of the m information codes to invalid key codes. By configuring the system in this way, if at least one of the m information codes provided by user U cannot be confirmed as a valid key code due to an imaging error or other reason, all information codes can be invalidated. This ensures that the system is only valid if all m information codes captured by user U are included in the n information codes, thereby enhancing security. To enhance security, it is appropriate to provide the service only if all m information codes provided by user U when receiving the service are determined to be valid key codes.

[0108] Furthermore, according to the key code issuance system 60, the reading unit 65 reads m information codes presented by the user, the determination unit 66 determines whether all of the m information codes read by the reading unit 65 are valid key codes, and the output unit 68 outputs information indicating that user U can use the service equipment that provides the service if the determination unit 66 determines that all of the m information codes are valid key codes. This configuration allows the same device that issued the key code to determine whether the service equipment is available. Therefore, compared to having separate devices for issuing the key code and determining whether the service is available, the device can be made smaller and less expensive.

[0109] Furthermore, according to the key code issuance system 60, each of the n information codes is generated based on fixed information and mutually different random number information. By configuring the information codes in this way, each of the n information codes can be configured so that only the random number information differs. Compared to the case where other information in addition to the random number information differs, this makes it easier to determine the information code after reading it.

[0110] Furthermore, according to the key code issuance system 60, fixed information is generated based on the timing of generating user U and n information codes. This configuration prevents multiple users U from sharing the same key. It also prevents the same key from being shared even within the same user U. Therefore, it offers a higher level of security compared to cases where multiple users U or the same user U share the same key.

[0111] According to the authentication system according to this embodiment, a generation unit that generates n (n is a natural number of 2 or more) optically readable information codes, and a user U are provided with m (m is a natural number where m < n) of the n information codes. A creation unit that creates display information for prompting imaging, an output unit that sequentially displays the display information created by the creation unit and the n information codes generated by the generation unit, a reading unit that reads the m information codes imaged by the user U, and a determination unit that determines whether or not the m information codes read by the reading unit are included in the n information codes. When the determination unit determines that all of the m information codes are included in the n information codes, a setting unit that sets the m information codes as valid key codes and sets the information codes that are not valid key codes among the n information codes as invalid key codes is provided. The reading unit reads the m information codes presented by the user U, and the determination unit determines whether or not all of the read m information codes are valid key codes.

[0112] By configuring in this way, among the plurality of information codes that are continuously and sequentially displayed, only the information codes imaged by the user U can be set as valid key codes, and other information codes can be set as invalid key codes. Even if others illegally image the information codes, unless they image at exactly the same timing as the imaging timing of the user U, the information codes will be invalid key codes, so the possibility that the key codes will be known to others due to illegal imaging can be reduced. Therefore, the security of the key codes can be improved. Also, even if others illegally image the information codes as a video, it is not possible to know which of the multiple information codes included in the video are valid key codes, and the possibility that the key codes will be known to others can be reduced. The user U can use a device equipped with only imaging means and display means as a key display device, and can easily obtain the key codes. Furthermore, the user U can be authenticated by the same device that issued the information code. For this reason, compared with the case of separately providing a device that issues the information code and a device that authenticates the user U, the device can be miniaturized and the device can be made inexpensive.

[0113] Although embodiments have been described above, these embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, modifications, and combinations are possible without departing from the spirit of the invention. These embodiments are included in the scope and spirit of the invention, as well as in the claims and their equivalents. Furthermore, the key code issuance system 60, luggage storage device 100a, control device 100b, and authentication system described above may be implemented using a computer. In that case, a program for implementing the functions of each functional block is recorded on a computer-readable recording medium. The program recorded on this recording medium may be loaded into a computer system and executed by the CPU. The term "computer system" here includes hardware such as an OS (Operating System) and peripheral devices. Furthermore, "computer-readable recording media" refers to portable media such as flexible disks, magneto-optical disks, ROMs, and CD-ROMs. It also includes storage devices such as hard disks built into computer systems.

[0114] Furthermore, "computer-readable recording media" may include those that dynamically hold programs for a short period of time. Examples of those that dynamically hold programs for a short period of time include communication lines used when transmitting programs via networks such as the Internet or communication lines such as telephone lines. Furthermore, "computer-readable recording media" may include volatile memory within a server or client computer system that retains programs for a certain period of time. The program itself may also be intended to implement some of the functions described above. Additionally, the program may be capable of implementing the aforementioned functions in combination with programs already recorded in the computer system. Furthermore, the program may be implemented using a programmable logic device. An example of a programmable logic device is an FPGA (Field Programmable Gate Array).

[0115] Furthermore, the aforementioned key code issuance system 60, luggage storage device 100a, control device 100b, and authentication system each have a computer inside. The processes of each of the aforementioned key code issuance system 60, luggage storage device 100a, control device 100b, and authentication system are stored in program format on a computer-readable recording medium, and the above processes are performed when the computer reads and executes this program. Here, computer-readable recording media refer to magnetic disks, magneto-optical disks, CD-ROMs, DVD-ROMs, semiconductor memory, etc. Alternatively, this computer program may be distributed to a computer via a communication line, and the computer that receives the program may execute it. Furthermore, the above program may be intended to implement some of the functions described above. It may also be a so-called differential file (differential program) that can implement the aforementioned functions in combination with programs already recorded in the computer system. [Explanation of symbols]

[0116] 1, 1A...Door device, 2...Mounting section, 2a...Opening, 2A...Large mounting section, 2B...Small mounting section, 3...Storage rack, 4...Loading / unloading exit, 4A...Retrieval section, 5...Moving device, 10...Luggage storage device (conveying system), 11...Outer shell, 12...Operation panel, 21, 21A, 21B...Inner door, 21a...Outer surface, 22...Engaging projection (first engaging member, first projection), 40...Outer door, 41, 41A, 41B...Engaging recess (second engaging member), 41b...Lower piece (second projection), 51...Conveying lift, 60...Key code issuance system, 61...Operation section, 62...Reception section, 63...Generation section, 64...Creation section, 65...Reading section, 66...Determination section, 67...Setting section, 68... Output unit, 69…Display unit, 70…Storage unit, 71…Imaging unit, 80…Service equipment, 100…Luggage storage system, 100a…Luggage storage device, 100b…Control device, 110a, 110b…Communication unit, 115a…Operation unit, 120a…Imaging unit, 130b…Assignment unit, 135a…Transportation unit, 150b…Acquisition unit, 160a, 160b…Processing unit, 170b…Reception unit, 180b…Extraction unit, 185a…Sensor, 190b…Storage unit, 195a…Notification unit, 205a…Sterilization unit, E…Slide direction, F…Forward / backward direction, N…Luggage, Q1…Closed position, Q2…Open position, T…Movement passage, X1…Left / right direction, X2…Front / back direction, X3…Up / down direction

Claims

1. A method for issuing key codes that can be performed by a computer, Generate n (where n is a natural number greater than or equal to 2) optically readable information codes, The user is prompted to image m (where m is a natural number such that m < n) of the n information codes. The n generated information codes are displayed sequentially. The user reads the m information codes captured by the user, If all m of the read information codes are included in the n of the information codes, the m of those information codes are set as valid key codes, and any of the n of the information codes that are not valid key codes are set as invalid key codes. How to issue a key code.

2. The key code issuance method according to claim 1, wherein if at least one of the m information codes is not included in the n information codes, all of the m information codes are set to invalid key codes.

3. The m information codes presented by the user are read, Determine whether all m of the information codes read are valid key codes. A key code issuance method according to claim 1 or claim 2, wherein if all m of the aforementioned information codes are valid key codes, information indicating that the user can use the service equipment is output.

4. The key code issuance method according to claim 1 or claim 2, wherein each of the n information codes is generated based on fixed information and mutually different random number information.

5. The key code issuance method according to claim 4, wherein the fixed information is generated based on the user and the timing of generating n information codes.

6. A generation unit that generates n (where n is a natural number greater than or equal to 2) optically readable information codes, A creation unit that creates display information to prompt the user to capture images of m (where m is a natural number such that m < n) of the n information codes, An output unit that sequentially displays the display information created by the creation unit and the information indicating the n information codes generated by the generation unit, A reading unit that reads m information codes captured by the user, A determination unit that determines whether the m information codes read by the reading unit are included in the n information codes, If the determination unit determines that all m information codes are included in n information codes, the setting unit sets the m information codes as valid key codes and sets any of the n information codes that are not valid key codes as invalid key codes. A key code issuance system equipped with the following features.

7. The key code issuance system according to claim 6, wherein the setting unit sets all of the m information codes to invalid key codes when the determination unit determines that at least one of the m information codes is not included in the n information codes.

8. The reading unit reads the m information codes presented by the user. The determination unit determines whether all of the m information codes read are valid key codes. The key code issuance system according to claim 6, wherein the output unit displays information indicating that the user can use the service equipment that provides the service when the determination unit determines that all m of the information codes are valid key codes.

9. The key code issuance system according to claim 6, wherein each of the n information codes is generated based on fixed information and mutually distinct random information.

10. The key code issuance system according to claim 9, wherein the fixed information is generated based on the user and the timing of generating n information codes.

11. A generation unit that generates n (where n is a natural number greater than or equal to 2) optically readable information codes, A creation unit that creates display information to prompt the user to capture images of m (where m is a natural number such that m < n) of the n information codes, The output unit sequentially displays the display information created by the creation unit and the n information codes generated by the generation unit. A reading unit that reads m information codes captured by the user, A determination unit that determines whether the m information codes read by the reading unit are included in the n information codes, If the determination unit determines that all m information codes are included in n information codes, the setting unit sets the m information codes as valid key codes and sets any of the n information codes that are not valid key codes as invalid key codes. Equipped with, The reading unit reads the m information codes presented by the user, The determination unit determines whether all of the m information codes read are valid key codes, and this is an authentication system.

12. On the computer, A program for causing the key code issuance method described in claim 1 or claim 2 to be executed.

Images