Information code reading device and information code reading system
The information code reader uses a display unit to replace captured codes with a dummy image when unauthorized recording is detected, preventing misuse and facilitating user verification, thus enhancing security in QR code payments and confidential information reading.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- DENSO WAVE INC
- Filing Date
- 2023-03-29
- Publication Date
- 2026-07-23
AI Technical Summary
Payment methods using information codes, such as QR codes, are vulnerable to unauthorized recording and misuse due to the possibility of secretly photographing the codes, even with privacy screens, and this issue extends to applications involving confidential information.
An information code reader with an imaging window, imaging unit, and display unit that generates a display image to replace the captured information code with a predetermined identification mark when unauthorized recording is detected, ensuring the user can still see the code's position correctly.
Prevents unauthorized photography of information codes while allowing users to easily locate the code, enhancing security by replacing the code with a dummy image when unauthorized capture is detected, and detecting fraudulent activities.
Smart Images
Figure 0007894017000001 
Figure 0007894017000002 
Figure 0007894017000003
Abstract
Description
Technical Field
[0001] The present invention relates to an information code reading device and an information code reading system that optically read information codes.
Background Art
[0002] Payment methods using information codes such as QR code payments, which have been increasing in recent years, are convenient but also have security risks. For example, in a payment method where a user (purchaser) reads an information code displayed on a screen of a smartphone or the like with a payment reading device installed in a store, the information code displayed on the screen may be illegally imaged and misused. In particular, in such a payment method, a function is adopted in which the reading device displays the image captured by the reading device on its display screen so that the user can perform the reading operation while confirming whether the user is correctly holding the information code against the reading device. Although such a function can be expected to improve the visibility and convenience for the user, there is a possibility that the image of the information code held against the display screen of the reading device may be illegally imaged and misused.
[0003] Regarding such problems, in the payment method disclosed in Patent Document 1 below, an expiration period is introduced for one-time response codes such as QR codes (registered trademarks) used once, and when the one-time response code received from the payment server at the user terminal is read by the merchant terminal, if the expiration period has passed, the payment process is discarded, thereby enhancing the security during payment.
Prior Art Documents
Patent Documents
[0004]
Patent Document 1
Summary of the Invention
Problems to be Solved by the Invention
[0005] However, as mentioned above, payment methods that utilize an expiration period have the problem that information codes, such as one-time response codes, can be illegally used if they are secretly photographed, as long as they are within that expiration period. Furthermore, even if a privacy screen is attached to the display screen of the reader that displays the information code, it is not possible to prevent the information code from being secretly photographed from a direction directly facing the screen. These problems are not limited to payments using information codes, but also arise in applications where confidential information, such as personal information, is read by a reader using information codes.
[0006] The present invention was made to solve the above-mentioned problems, and its objective is to provide a configuration that prevents the unauthorized recording of information codes while allowing the user to easily see the location where they are holding the information code. [Means for solving the problem]
[0007] To achieve the above objective, the invention described in claim 1 of the claims is: An information code reader (10) optically reads predetermined information recorded in an information code (C), A housing (11) having an imaging window (24a) on one side (11a), An imaging unit (24) that images the information code through the imaging window, A reading unit (21) performs a reading process to read predetermined information from the image of the information code captured by the imaging unit, The display unit (23) has a display screen (23a) on one side, A control unit (21) controls the display unit so that when reading the information code, the display images generated from the captured images captured by the imaging unit are sequentially displayed on the display screen, Equipped with, The control unit, A determination unit (21) determines whether or not the captured image captured by the imaging unit is in a code imaging state in which at least a part of the information code is included, When the determination unit determines that the code imaging state is in effect, the identification unit (21) identifies at least a portion of the information code as the code imaging range (Cr) in the captured image, A generation unit (21) generates a display image to match the captured image (P) captured by the imaging unit when the determination unit does not determine that the code is being captured, and generates a display image (Pr) to replace the code capturing range identified by the identification unit in the captured image with a predetermined identification display (D) that is different from the information code when the determination unit determines that the code is being captured. It is characterized by being equipped with [the following features]. The symbols within the parentheses above indicate the correspondence with the specific means described in the embodiments described later. [Effects of the Invention]
[0008] In the invention of claim 1, the control unit controls the display unit so that display images generated from captured images captured by the imaging unit when reading an information code are sequentially displayed on the display screen. When the determination unit determines that the captured image captured by the imaging unit contains at least a part of the information code and is in a code imaging state, the identification unit identifies at least a part of the information code as the code imaging range in the captured image. The generation unit then generates the display image to match the captured image captured by the imaging unit when the determination unit does not determine that it is in a code imaging state, and generates the display image to replace the code imaging range identified by the identification unit in the captured image with a predetermined identification display different from the information code when the determination unit determines that it is in a code imaging state.
[0009] As a result, when a user holds an information code over the imaging window, the information code being held is replaced with a predetermined identification mark and displayed on the screen. Therefore, even if the screen is secretly photographed, the information code being held by the user cannot be secretly photographed. Furthermore, since the area of the predetermined identification mark on the screen corresponds to the area of the information code in the captured image, the user can recognize the position of the predetermined identification mark on the screen as the position of the information code. Therefore, the user can perform the reading operation while confirming that the information code is being held correctly over the imaging window. Thus, it is possible to realize an information code reading device that prevents the secret photography of information codes while allowing the user to easily see the position of the information code they are holding.
[0010] In the invention of claim 2, since the predetermined identification display is an information code of the same code type as the information code captured by the imaging unit, the replacement process becomes easier, and the user can more accurately visually confirm the position where the information code is being held.
[0011] In the invention of claim 3, the control unit controls the display unit so that the display image is not shown on the display screen when the determination unit does not determine that a code is being captured. This prevents at least a portion of the information code from being temporarily displayed on the display screen due to a time lag between when at least a portion of the information code enters the imaging range of the image unit and when it is determined that a code is being captured, thereby further enhancing security in preventing the unauthorized capture of information codes.
[0012] In the invention of claim 4, the control unit controls the display unit so that the display image is displayed blurred on the display screen when the determination unit does not determine that a code is being captured. As a result, before it is determined that a code is being captured, the captured image itself is displayed blurred on the screen, and after it is determined that a code is being captured, a predetermined identification display is displayed on the screen within the code capturing range. Therefore, at least a portion of the information code is not displayed on the display screen in a readable manner, thus further enhancing security in preventing the unauthorized capture of information codes.
[0013] In the invention of claim 5, the control unit controls the display unit so that the display image is not displayed on the display screen immediately after the decoding process by the reading unit is completed. This prevents the user's face from being captured and displayed on the display screen because the display image continues to be displayed on the display screen even after the decoding process is completed, in which case the user's face, which has moved the information code away from the imaging window, would be captured.
[0014] In the invention of claim 6, the predetermined identification display is a dummy code generated as an information code on which dummy information is recorded. As a result, when dummy information is read, it can be determined that an unauthorized user who illegally photographed the dummy code displayed on the display screen when another person's information code was being read is attempting to illegally use that other person's information code by holding the captured image of the dummy code over the imaging window. Therefore, the information code reader alone can detect and notify such unauthorized activity.
[0015] In the invention of claim 7, the management server manages a predetermined site to which a mobile terminal displaying an information code is connected using the URL information recorded in the information code when the information code is read by an information code reader, and a fraud detection site that is different from this predetermined site. The predetermined identification display is generated as an information code in which URL information for connecting to the fraud detection site is recorded.
[0016] This allows the management server to distinguish between mobile devices connected to a designated site and mobile devices connected to a fraud detection site. In particular, mobile devices connected to a fraud detection site utilize URL information read from another information code displayed on the screen as a designated identification display by an information code reader that reads the information code. Therefore, it can be determined that the designated identification display has been illegally captured. For this reason, mobile devices connected to a fraud detection site can be detected as devices intended for fraudulent purposes.
[0017] In the invention of claim 8, the fraud detection site is configured as a site that collects information of connected terminals. Therefore, in the management server, the information of the terminals collected by connecting to the fraud detection site can be managed as the information of the terminals of fraud users.
Brief Description of the Drawings
[0018] [Figure 1] It is a perspective view showing a reading terminal according to the first embodiment. [Figure 2] It is a plan view showing the reading terminal of FIG. 1. [Figure 3] It is a side view showing the reading terminal of FIG. 1. [Figure 4] It is a front view of the reading terminal of FIG. 1 as seen from the insertion port side. [Figure 5] It is a block diagram schematically illustrating the electrical configuration of the reading terminal of FIG. 1. [Figure 6] It is an explanatory diagram for explaining a state in which a mobile terminal with a QR code for settlement displayed on the screen is directed to the imaging window of the reading terminal. [Figure 7] It is a flowchart showing the flow of information code reading processing executed by the control unit of the reading terminal in the first embodiment. [Figure 8] It is an explanatory diagram for explaining an imaging image when a QR code for settlement is held in the first embodiment and a display image generated from this imaging image and displayed on the screen. FIG. 8(A) shows the imaging image, and FIG. 8(B) shows the reading terminal on which the display image is displayed on the screen. [Figure 9] It is a flowchart showing the flow of information code reading processing executed by the control unit of the reading terminal in the first modification of the first embodiment. [Figure 10] It is a flowchart showing the flow of information code reading processing executed by the control unit of the reading terminal in the third modification of the first embodiment. [Figure 11] It is a flowchart showing the flow of information code reading processing executed by the control unit of the reading terminal in the second embodiment. [Figure 12]This is an explanatory diagram illustrating the schematic configuration of the information code reading system in the third embodiment. [Modes for carrying out the invention]
[0019] [First Embodiment] A first embodiment of the information code reading device according to the present invention, applied to a reading terminal, will be described below with reference to the drawings. The reading terminal 10 according to this embodiment functions as an information code reader that optically reads payment information recorded in a payment information code, and is configured to perform payment processing for information code payments using the payment information read from the information code. In this embodiment, the reading terminal 10 is configured as a touch panel terminal that allows the user (purchaser) to select from multiple payment methods, including not only information code payments (such as QR payments) using a payment information code, but also IC card payments using an IC card. The reading terminal 10 is placed on a store counter so that the user can touch and operate it, and is used in connection with a higher-level device, a POS terminal (not shown).
[0020] As shown in Figures 1 to 4, the reading terminal 10 has a display screen 23a on the top surface 11a of the housing 11 that constitutes its outer casing, which also functions as a touch panel operating surface. A slot 12 for magnetic cards is provided on the right side of the display screen 23a from the user's perspective (left side from the store clerk's perspective), and an IC card slot 13 is provided on the front side from the user's perspective (one side in the longitudinal direction of the roughly rectangular top surface 11a: the lower side in Figure 2). In addition, an imaging window 24a for the imaging unit 24 is provided on the top surface 11a at a position behind the display screen 23a from the user's perspective (the other side in the longitudinal direction of the top surface 11a: the upper side in Figure 2). Note that the top surface 11a of the housing 11 may correspond to an example of "one side of the housing".
[0021] The enclosure 11 houses a control unit 21 that controls the entire reading terminal 10. This control unit 21 is mainly composed of a microcontroller and has a CPU, system bus, input / output interface, etc., and together with a storage unit 22 consisting of semiconductor memory, etc., it constitutes an information processing device. The storage unit 22 has programs for executing various payment processes and programs for executing information code reading processes, which will be described later, pre-stored in a manner that can be executed by the control unit 21.
[0022] Furthermore, as shown in Figure 5, in addition to the control unit 21 and storage unit 22 described above, the reading terminal 10 includes a display unit 23, an imaging unit 24, an operation unit 25, a notification unit 26, an external interface 27, a payment information reading unit 28, and the like. The display unit 23 is configured as a known touch panel type display device and includes a display means configured as a known display device such as a liquid crystal display, and a transparent operation panel superimposed on the display screen 23a of the display means, which can detect the area being pressed (contacted) with respect to the display screen 23a as an operation surface. The display content of the display unit 23 is controlled by the control unit 21.
[0023] The imaging unit 24 is configured as a camera equipped with a light-receiving sensor (for example, a C-MOS area sensor, a CCD area sensor, etc.) and is controlled by the control unit 21, and is configured to output captured image data captured through the imaging window 24a to the control unit 21. The imaging unit 24 is positioned inside the housing 11 so that the area outside the imaging window 24a is the imaging range. When the imaging unit 24 captures a QR code for payment (hereinafter also simply referred to as QR code C) through the imaging window 24a, the control unit 21 performs an information code reading process to optically read the payment information recorded as predetermined information in the QR code C from the captured image of the QR code C. In this embodiment, the imaging window 24a is provided on the upper surface 11a at a position behind the display screen 23a from the user's perspective. However, it is not limited to this, and the imaging window 24a may be provided so as to face the same direction as the display screen 23a, for example, on another surface different from the upper surface 11a that is easily visible to the user, and so as to be on the same plane as the display screen 23a in its vicinity. The control unit 21 and imaging unit 24 that perform the information code reading process may correspond to an example of a "reading unit".
[0024] The operation unit 25 is configured to include the operation panel and one or more keys provided on the side of the housing 11, and is configured to output signals to the control unit 21 in response to touch operations on the operation surface (display screen 23a) of the touch panel and key operations.
[0025] The notification unit 26 is equipped with light-emitting parts such as LEDs, a speaker, a buzzer, etc., and is configured to provide predetermined notifications according to the results of payment processing, etc., by controlling the illumination state of the light-emitting parts, the voice guidance of the speaker, the sounding state of the buzzer, etc., under the control of the control unit 21.
[0026] The external interface 27 is configured as an interface for data communication with external devices such as payment servers and POS terminals, and functions to perform communication processing in cooperation with the control unit 21.
[0027] The payment information reading unit 28 includes a card reader for contact IC cards (hereinafter also referred to as IC card reader 28a), a card reader for magnetic cards (hereinafter also referred to as magnetic card reader 28b), and a contactless reading unit 28c for contactless payment.
[0028] The IC card reader 28a is configured to output payment information read from the IC chip of an IC card, which has been inserted into the slot 13 to a specified position, to the control unit 21 via a card reading terminal connected to the external connection terminal of the IC card.
[0029] The magnetic card reader 28b is configured to output payment information read from the magnetic card swiped through slot 12 to the control unit 21.
[0030] The contactless reader unit 28c has a near-field communication (NFC) function and is configured to output payment information read from a contactless communication medium for payment (such as a contactless IC card, a mobile terminal with contactless payment functionality, or a medium for electronic money) held over the top surface 11a, using a contactless payment antenna (not shown) provided on the top surface 11a inside the housing 11, to the control unit 21.
[0031] In the reading terminal 10 configured in this way, payment information is obtained after selecting one of the following: optical reading of the payment QR code C by the information code reading process, reading from the IC card by the IC card reader 28a, reading from the magnetic card by the magnetic card reader 28b, or reading from the contactless communication medium by the contactless reader 28c. The control unit 21 then performs payment processing using this payment information.
[0032] In this embodiment, when information code payment is selected, during the information code reading process performed by the control unit 21, as illustrated in Figure 6, a payment QR code C displayed on the screen of a mobile terminal 30 or the like with a payment application running is held over the imaging window 24a provided on the upper surface 11a of the housing 11. At that time, in order to clearly indicate to the user the position where the QR code C should be held, the display unit 23 is controlled so that display images generated from the captured images captured by the imaging unit 24 are sequentially displayed on the display screen 23a. Then, when payment information is read from the QR code C held in the correct position, information code payment is executed using the read payment information.
[0033] In particular, in this embodiment, in order to prevent unauthorized photography of the QR code C displayed on the display screen 23a while clearly indicating the position where the QR code C should be held, the imaging range occupied by the QR code C (hereinafter also referred to as the code imaging range Cr) is identified from the captured image, and a display image Pr is generated by replacing the image of this identified code imaging range Cr with a predetermined identification display described later, and this is displayed on the display screen 23a.
[0034] The information code reading process performed by the control unit 21 in this embodiment will be described in detail below with reference to the flowchart shown in Figure 7. In this embodiment, information code payment involves the reading terminal 10 reading payment information from the QR code C and transmitting it to a payment server, etc. Once the payment processing using the payment information is completed at the payment server, etc., payment completion information is transmitted from the payment server, etc. to the reading terminal 10.
[0035] When the user selects information code payment, the control unit 21 starts the information code reading process. First, the imaging process shown in step S101 of Figure 7 is performed, and the imaging unit 24 captures the information code through the imaging window 24a. Next, in the image display process shown in step S103, a display image is generated to match the image obtained by the above imaging process, and the generated display image is displayed on the display screen 23a. In step S103, no display image generation process, such as those described later, is performed on the image, and the image is displayed on the display screen 23a almost as is.
[0036] Next, in the determination process shown in step S105, it is determined whether the captured image contains at least a part of an information code such as a QR code C, and whether the image is in a code imaging state. If it is determined that the image is not in a code imaging state because a QR code C or the like has not been captured (No in S105), the process from step S101 is repeated until a QR code C or the like is captured, and the state in which the captured image is displayed on the display screen 23a is maintained. In this embodiment, the image is determined to be in a code imaging state if a specific pattern of a predetermined shape in the information code to be read is captured in a recognizable manner. More specifically, for example, the image is determined to be in a code imaging state if a specific pattern of the three corners, such as the corner position detection pattern (finder pattern), which is a specific pattern of a QR code C for payment, is captured in a recognizable manner. The control unit 21 that performs the determination process in step S105 may correspond to an example of a "determination unit".
[0037] Subsequently, if it is determined that a code is being captured because the specific pattern described above is captured in a recognizable manner (Yes in S105), the code capture range identification process shown in step S107 is performed, and processing is carried out to identify the code capture range Cr occupied by the QR code C in the captured image. The control unit 21 that performs the code capture range identification process in step S107 may correspond to an example of a "identification unit".
[0038] If the code imaging range Cr is successfully identified by utilizing the positions of the position detection patterns of the three corners within the captured image (Yes in S109), the display image generation process shown in step S111 is performed. In this process, a display image Pr is generated so as to replace the code imaging range Cr identified as described above within the captured image with a predetermined identification display. In this embodiment, a dummy code D, which is generated with the same code type (QR code) as the QR code C so as to record predetermined dummy information, is used as the predetermined identification display, and the display image Pr is generated so as to replace the code imaging range Cr within the captured image with the dummy code D. In this embodiment, for example, a terminal ID that can identify the reading terminal 10 is used as the dummy information. The control unit 21 that performs the display image generation process in step S111 may correspond to an example of a "generation unit".
[0039] Next, the image display processing shown in step S113 is performed, and the display image Pr generated as described above is displayed on the display screen 23a of the display unit 23. For example, if a QR code C is captured as in the captured image P shown in Figure 8(A), a display image Pr is generated in which the QR code C (code capture range Cr) of the captured image P is replaced with a dummy code D, and is displayed on the display screen 23a of the display unit 23 as shown in Figure 8(B). Note that the display image Pr may be displayed in the entire display area of the display screen 23a. Alternatively, the display image Pr may be displayed in the upper area of the display screen 23a close to the capture window 24a, or in the lower area of the display screen 23a so as not to be obscured by the mobile terminal 30 held over the capture window 24a. In this case, instructions such as "Please hold your device over the QR code." may be displayed in the area where the display image Pr is not displayed, as exemplified in Figure 8(B).
[0040] As described above, with the display image Pr displayed on the display screen 23a, the decoding process shown in step S115 is performed to decode payment information from the QR code C of the captured image P. Upon successful decoding of the payment information (Yes in S117), the payment information transmission process shown in step S119 is performed. In this process, the payment information read as described above, along with information such as the time of reading, is transmitted to a POS terminal or the like via the external interface 27, and the information code reading process ends.
[0041] When a POS terminal receives payment information from the reading terminal 10, it starts information code payment processing, such as sending the payment information along with the purchased item information (product name, price information, etc.) to a payment server. The reading terminal 10 may also notify the success or failure of the payment processing via the display unit 23 or the notification unit 26, assuming that it receives information regarding the success or failure of the payment processing from the POS terminal via the external interface 27.
[0042] On the other hand, if decoding fails, or if information different from the payment information is decoded (i.e., if decoding of a QR code different from the payment QR code C is successful), the decoding of the payment information is considered to have failed (No in S117), and the process from step S101 is performed. Also, if the identification of the code imaging range Cr fails (No in S109), the process from step S101 is performed.
[0043] As described above, in the reading terminal 10 according to this embodiment, in the information code reading process performed by the control unit 21, if it is determined that the captured image P captured by the imaging unit 24 contains at least a part of the information code, then at least a part of the information code is identified as the code imaging range Cr in the captured image P. If it is not determined that it is a code imaging state, a display image is generated to match the captured image P captured by the imaging unit 24. If it is determined that it is a code imaging state, a display image Pr is generated so as to replace the code imaging range Cr identified by the code imaging range identification process in the captured image P with a dummy code D.
[0044] As a result, when a user holds a payment QR code C over the imaging window, the payment QR code C is replaced with a dummy code D and displayed on the display screen 23a. Therefore, even if the display screen 23a is secretly photographed, the payment QR code C held by the user cannot be secretly photographed. Furthermore, since the area occupied by the dummy code D on the display screen 23a corresponds to the area occupied by the payment QR code C in the captured image, the user can recognize the position of the dummy code D on the display screen 23a as the position of the payment QR code C. Therefore, the user can perform the reading operation while confirming whether the payment QR code C is correctly held over the imaging window 24a. Thus, it is possible to realize a reading terminal (information code reader) 10 that prevents the secret photography of the payment QR code C while allowing the user to easily see the position of the payment QR code C being held.
[0045] In particular, since the dummy code D is captured by the imaging unit 24 and is an information code of the same type (QR code) as the payment QR code C, the replacement process becomes easier, and the user can more accurately see the position where they are holding the payment QR code C.
[0046] In addition, the display image generation process in step S111 described above is not limited to generating a display image Pr in such a way that the identified code imaging range Cr is replaced with a dummy code D. The display image Pr may also be generated in such a way that the identified code imaging range Cr is replaced with other identification indicators, for example, a predetermined colored area shaped to match the four corners of the code imaging range Cr, or a predetermined colored curved area whose outer edge is a circle or ellipse passing through the four corners of the code imaging range Cr.
[0047] As a first modification of this embodiment, in the information code reading process performed by the control unit 21, as shown in the flowchart in Figure 9, if it is not determined that a code is being captured (No in S105), the captured image display process in step S103 is not performed, and the display unit 23 is controlled so that the captured image (display image) is not displayed on the display screen 23a.
[0048] As a result, at least a portion of the payment QR code C will not be temporarily displayed on the display screen 23a due to a time lag between when at least a portion of the payment QR code C enters the imaging range of the image unit and when it is determined that the code is being captured. Therefore, security regarding the prevention of unauthorized photography of payment QR codes C can be further enhanced.
[0049] As a second modification of this embodiment, in the captured image display processing of step S103 in the information code reading process performed by the control unit 21, the captured image is not limited to being displayed as a display image on the display screen 23a almost as is, but an image processed to blur the captured image may be displayed as a display image on the display screen 23a.
[0050] As a result, before it is determined that a code is being captured (No in S105), the captured image itself is displayed on the screen in an unclear manner, and after it is determined that a code is being captured (Yes in S105), a predetermined identification display such as a dummy code D is displayed on the screen in the code capturing area Cr. This prevents at least a portion of the payment QR code C from being displayed on the display screen 23a in a readable state, thus further enhancing security in preventing the unauthorized capture of the payment QR code C.
[0051] As a third modification of this embodiment, in the information code reading process performed by the control unit 21, as shown in the flowchart in Figure 10, after successfully decoding the payment information (Yes in S117), the image display may be stopped (S121) and then the processing from step S119 onwards may be performed. That is, immediately after the completion of the decoding process, the display unit 23 is controlled so that the display image Pr is not displayed on the display screen 23a.
[0052] This prevents the user's face from being captured and displayed on the display screen 23a even after the decoding process is complete, because the captured image continues to be displayed on the display screen 23a when the user moves the QR code C away from the imaging window 24a. Furthermore, it prevents the user's face image from being associated with the QR code C and stored in the reading terminal 10 that read the QR code C.
[0053] [Second Embodiment] Next, a second embodiment in which the information code reading device according to the present invention is applied to a reading terminal will be described with reference to the drawings. This second embodiment differs from the first embodiment in that it uses information recorded in dummy code D to detect fraud. Therefore, components that are substantially the same as those in the first embodiment are denoted by the same reference numerals, and their descriptions are omitted.
[0054] In this embodiment, a dummy code D on which the above-mentioned dummy information is recorded is used as a predetermined identification display for replacing the code imaging range Cr identified as described above in the captured image. When the above-mentioned dummy information is read during the information code reading process performed by the control unit 21 of the reading terminal 10, a predetermined notification is issued on the display screen 23a of the reading terminal 10 indicating that an unauthorized user who has illegally captured the dummy code D displayed on the screen is illegally using that dummy code D.
[0055] Specifically, as shown in the flowchart in Figure 11, if it is determined that decoding of the payment information has failed because information different from the payment information has been decoded (No in S117), the determination process in step S123 determines whether or not dummy information has been read. If no dummy information has been read, the process from step S101 above is performed.
[0056] On the other hand, if a fraudulent user who has illegally photographed the dummy code D displayed on the display screen 23a of the reader terminal 10 during someone else's purchase attempts to illegally use that person's QR code for payment by holding the image of the dummy code D over the image window 24a, dummy information will be read from the dummy code D (No in S117, Yes in S123).
[0057] In this case, the notification process shown in step S125 is performed. In this process, information indicating that the dummy code D has been read is notified using the display screen 23a by the display unit 23, the illumination status of the light-emitting unit and the voice guidance of the speaker by the notification unit 26, the buzzer sounding status, etc.
[0058] Thus, in this embodiment, when dummy information is read by the reading terminal 10, it can be determined that a fraudulent user who illegally photographed the dummy code D displayed on the display screen 23a when reading someone else's QR code C is attempting to illegally use that person's QR code C by holding the captured image of the dummy code D over the imaging window 24a. Therefore, the reading terminal 10 alone can detect and notify such fraudulent activity.
[0059] [Third Embodiment] Next, an information code reading system according to a third embodiment of the present invention will be described with reference to the drawings. This third embodiment differs from the first embodiment in that it collects information about fraudulent users at a fraud detection site connected using URL information recorded in dummy code D. Therefore, components that are substantially the same as those in the first embodiment are denoted by the same reference numerals, and their descriptions are omitted.
[0060] As shown in Figure 12, the information code reading system 1 according to this embodiment is configured to include a reading terminal 10 that functions as the information code reading device described above, and a payment server 40 that functions as a management server for managing payment sites (predetermined sites), etc.
[0061] The information code payment method in this embodiment is based on the premise that a user (purchaser) has a payment QR code C displayed on the screen of a touch-panel mobile terminal 30 using a predetermined payment application, and then has the store's reader terminal 10 read the QR code C, after which the user performs a predetermined operation in the payment application. For this reason, the payment QR code C records payment information such as a user ID that has been pre-registered for payment and user-specific URL information for a payment site managed by the payment server 40. In the payment application on the mobile terminal 30, when the user taps the payment QR code C after it has been read by the reader terminal 10, the application connects to the payment site identified from the URL information via the internet N, and the information management screen of that payment site is displayed on the screen. In other words, the payment site is the site to which the mobile terminal 30, which displays the payment QR code C on its screen, connects when it has the reader terminal 10 read the QR code C. The payment server 40 processes the payment based on account information for payment processing, such as the personal ID and name entered by the user on the information management screen, and the user ID and purchased product information received from the reader terminal 10 that reads the QR code C.
[0062] With this type of payment method, if the QR code C used for payment is secretly photographed or otherwise compromised, the user's personal information can be accessed and stolen from the payment site accessed by illegally using the user-specific URL information recorded in the QR code C.
[0063] Therefore, in this embodiment, the dummy code D that replaces the QR code C for payment contains, in addition to the terminal ID mentioned above, URL information for connecting to a fraud detection site managed by the payment server 40, as dummy information. As a result, a fraudulent user who fraudulently photographs the dummy code D displayed on the display screen 23a when reading someone else's QR code C will attempt to view personal information etc. on the payment site connected using the URL information recorded in that person's QR code C, and will connect to the fraud detection site.
[0064] Therefore, the payment server 40 can distinguish between mobile devices connected to the payment site and mobile devices connected to the fraud detection site. Furthermore, since mobile devices connected to the fraud detection site use URL information read from the dummy code D displayed on the screen of the reader terminal 10 that is reading the QR code C, it can be determined that the dummy code D has been illegally scanned. For this reason, mobile devices connected to the fraud detection site can be detected as devices intended for fraudulent purposes.
[0065] In particular, in this embodiment, the fraud detection site appears at first glance to be the same form as the information management screen site described above, and is configured to prompt fraudulent users, who are visitors, to enter personal information such as their name, address, and credit card number. Therefore, the payment server 40 can not only collect the information entered on the fraud detection site as the personal information of fraudulent users, but can also use it for subsequent fraud detection by creating a blacklist or the like.
[0066] Furthermore, the aforementioned fraud detection site is configured to automatically collect information about connected devices (such as MAC addresses and IP addresses) without obtaining permission from the fraudulent user who is viewing the site. Therefore, the payment server 40 can not only manage the device information collected by connecting to the fraud detection site as information about the fraudulent user's device, but can also use it for subsequent fraud detection by blacklisting, etc.
[0067] Furthermore, the fraud detection site is configured to automatically collect terminal IDs read from connected terminals along with the URL information using the URL information. As a result, the payment server 40 can notify the reading terminal 10, which is identified from the terminal ID collected as described above, that fraudulent activity has occurred in which the dummy code D has been illegally captured. Upon receiving the notification, the store manager of the reading terminal 10 can temporarily suspend payment processing and take measures such as searching for hidden cameras that are secretly recording the display screen 23a to prevent further fraudulent activity.
[0068] Furthermore, the fraud detection site described above is configured to obtain the ID of the user (purchaser) at the time of payment when the dummy code D was captured, by estimating the mobile terminal 30 from the time the dummy code was displayed on the reader terminal 10, the time the payment app was used on the mobile terminal 30, the installation information of the reader terminal 10, and the location information of the mobile terminal 30 using GPS, etc. Therefore, the payment server 40 can notify the pre-registered contact (for example, the address of the mobile terminal 30) of the user ID obtained as described above, via the payment app, etc., that there has been an incident in which the unauthorized capture of the payment QR code C was prevented. As a result, the user of the mobile terminal 30 who receives the notification can not only understand that they have been targeted by fraudulent activity, but also consider countermeasures.
[0069] Furthermore, the fraud detection site and the payment site (a designated site) are not necessarily managed together by the same payment server 40; the payment site (a designated site) may be managed by the first server and the fraud detection site may be managed by the second server. In this configuration, the first server and the second server may correspond to examples of "management servers".
[0070] The present invention is not limited to the embodiments and modifications described above, and may be further embodied as follows, for example. (1) The present invention is not limited to being applied to a reader terminal capable of reading the various types of payment information described above, but may also be applied to a reader terminal capable of optically reading payment information solely from information codes such as QR codes for payment, or to a reader device that does not have a payment function but is capable of optically reading information codes on which confidential information, such as for authenticity verification purposes, is recorded. Furthermore, the present invention is not limited to being applied to a touch panel type reader terminal, but may also be applied to a reader terminal having a known display device other than a touch panel. In addition, the information code to be read by the reader terminal 10 is not limited to being displayed on the screen of the mobile terminal 30, but may also be printed on a predetermined display medium, for example.
[0071] (2) The information code to be read in the information code reading process is not limited to QR codes, but other types of information codes, such as one-dimensional codes like barcodes, data matrix codes, or two-dimensional codes like maxicodes, may also be used. For example, when a barcode is used as the reading target, the area in which alternating light and dark linear regions are arranged along one direction is identified as the code imaging area Cr.
[0072] 1…Information code reading system 10…Reading terminal (information code reading device) 11…Cabinet 11a…Top surface (one side) 21...Control Unit (Reading Unit, Determination Unit, Identification Unit, Generation Unit) 22...Storage section 23…Display section 23a…Display screen 24…Imaging Department 24a... Imaging window 30… Mobile devices 40…Payment server (management server) C...QR code (information code) Cr... Code imaging area D... Dummy code (designated identification mark) P... Captured image Pr... Display image
Claims
1. An information code reader that optically reads predetermined information recorded in an information code, A housing with an imaging window on one side, An imaging unit that captures the information code through the imaging window, A reading unit performs a reading process to read predetermined information from the image of the information code captured by the imaging unit, A display unit having a display screen on one side, A control unit controls the display unit so that when the information code is read, the display images generated from the captured images captured by the imaging unit are sequentially displayed on the display screen. Equipped with, The control unit, A determination unit determines whether the captured image captured by the imaging unit is in a code imaging state in which at least a part of the information code is included, When the determination unit determines that the code imaging state is in effect, the identification unit identifies at least a portion of the information code as the code imaging range in the captured image, A generation unit generates a display image that matches the captured image captured by the imaging unit when the determination unit does not determine that the code is being captured, and generates a display image that replaces the code capturing range identified by the identification unit in the captured image with a predetermined identification display different from the information code when the determination unit determines that the code is being captured. An information code reading device characterized by comprising the following:
2. The information code reading device according to claim 1, characterized in that the predetermined identification display is an information code of the same code type as the information code captured by the imaging unit.
3. The information code reading device according to claim 1, characterized in that the control unit controls the display unit so that the display image is not displayed on the display screen when the determination unit does not determine that the code is in an imaging state.
4. The information code reading device according to claim 1, characterized in that the control unit controls the display unit so that the display image is displayed unclearly on the display screen when the determination unit does not determine that the code is in an imaging state.
5. The information code reading device according to claim 1, characterized in that the control unit controls the display unit so that the display image is not displayed on the display screen immediately after the completion of the decoding process by the reading unit.
6. The information code reader according to claim 1, characterized in that the predetermined identification display is a dummy code generated as an information code on which dummy information is recorded.
7. An information code reading device according to any one of claims 1 to 6, A management server manages a predetermined site that can be accessed by a mobile device displaying an information code on its screen using the URL information recorded in that information code. An information code reading system comprising, The aforementioned designated site is the site to which a mobile terminal displaying an information code on its screen connects when it has the information code reader read the said information code. The aforementioned management server also manages fraud detection sites that are different from the predetermined sites. The information code reading system is characterized in that the predetermined identification display is generated as an information code in which URL information for connecting to the fraud detection site is recorded.
8. The information code reading system according to claim 7, characterized in that the fraud detection site is configured as a site for collecting information from connected terminals.