Method and apparatus for providing resource by using dynamic QR code to improve security

Abstract

According to an embodiment of the present invention, a method for providing a resource by using a dynamic QR code comprises the steps of: (a) accessing, by a user terminal, any one of a first server and a repeater through a first URL included in a QR code; (b) extracting, by any one of the first server and the repeater, a QR code label identification number for the QR code, inquiring redirection code information in a QR code identification table through the QR code label identification number, and providing the user terminal with a second URL and a session key corresponding to the redirection code information; and (c) accessing, by the user terminal, the second server through the second URL and the session key and inquiring Internet resource address information in a redirection connection table through the redirection code information, wherein the second server can allow the access by the user terminal after determining the matching of the session key.

Description

Method and device for providing resources using dynamic QR codes to enhance security

[0001] The present invention relates to a method for enhancing security by providing address information for Internet resources using dynamic QR codes. More specifically, the present invention relates to a method for providing resource address information, such as text, web pages, images, videos, and sound data, to only specific user terminals using dynamic QR codes, session keys, and redirection methods.

[0002] A QR code is a two-dimensional matrix-based information display method. It can store a variety of information. The generated QR code can be identified and read using a camera or optical recognition device, allowing the information stored within it to be retrieved.

[0003] QR codes are divided into static QR codes and dynamic QR codes. Static QR codes store information directly within the QR code, while dynamic QR codes include the location where the information is stored (e.g., URL). However, in the case of dynamic QR codes, if the URL is changed to prevent unauthorized users from accessing Internet resources, the QR code that stores the URL must also be changed. Even if the URL is changed, it is vulnerable to external problems such as hacking. Furthermore, if different user terminals read the same QR code, the same URL is provided to each. Therefore, even if a QR code is provided openly, a means is needed to ensure that only specific user terminals can use it.

[0004] The present invention is intended to solve the problems of the prior art described above, and to provide a system in which only specific users can receive address information of Internet resources included in a QR code even when an externally exposed QR code is provided.

[0005] However, the technical task that this embodiment seeks to achieve is not limited to the technical task described above, and other technical tasks may exist.

[0006] As a technical means for achieving the above-described technical task, a method for providing a resource using a dynamic QR code comprises: (a) a step in which a user terminal connects to either a first server or a relay through a first URL included in a QR code; (b) a step in which either the first server or the relay extracts a QR code label identification number for the QR code, searches a QR code identification table for redirection code information through the QR code label identification number, and provides a second URL and a session key corresponding to the redirection code information to the user terminal; and (c) a step in which the user terminal connects to a second server through the second URL and the session key, and searches a redirection connection table for Internet resource address information through the redirection code information, wherein the second server can allow the user terminal to connect after determining the consistency of the session key.

[0007] In addition, a QR code terminal is further provided that receives a QR code from either the first server or the relay and displays the QR code, and before step (a), the user terminal can obtain the QR code by taking a picture of the QR code displayed on the QR code terminal.

[0008] Additionally, step (b) may allow either the first server or the relay to retrieve redirection code information having a value having the same row as the QR code label identification number by referencing the QR code identification table, and generate a second URL and session key for the retrieved redirection code information.

[0009] In addition, either the first server or the relay may check whether the redirection code information is in use in the searched row of the QR code identification table, and if the use information is “not in use,” modify the use information to “in use,” generate a second URL and session key corresponding to the redirection code information, and if the use information is “in use,” disconnect the user terminal.

[0010] Additionally, either the first server or the relay may regenerate the QR code and QR code label identification number at a preset cycle, and may modify the usage information of the redirection code information corresponding to the unused QR code and QR code label identification number to “use.”

[0011] In addition, when a change request for a specific QR code is received from an administrator terminal, either the first server or the relay may regenerate the specific QR code and the QR code label identification number of the specific QR code, and modify the use information of the redirection code information corresponding to the specific QR code for which a change is requested and the QR code label identification number of the specific QR code to "use".

[0012] Additionally, when a QR code label identification number is generated, either the first server or the relay can add a row including the generated QR code label identification number, corresponding redirection code information, usage information initialized to "unused", and a session key to the QR code identification table, and generate a QR code including the QR code label identification number.

[0013] In addition, step (b) provides a session key from either the first server or the relay to the second server, and step (c) compares the session key received from the user terminal with the session key received from either the first server or the relay, and if they match, searches for a row in which the same value as the extracted redirection code information is located by referencing the redirection connection table, and searches for Internet resource address information in the searched row.

[0014] Additionally, if the session keys are different, the second server can disconnect the user terminal.

[0015] In addition, step (c) may disconnect the user terminal from the second server if the session key is not received within a preset time after it is generated, and regenerate the session key corresponding to the QR code label identification number.

[0016] In addition, step (d) provides the second server with the searched Internet resource address information to the user terminal, and the user terminal can access the preset Internet through the Internet resource address information.

[0017] Through the present invention, even if an externally exposed QR code is provided, a system can be provided in which only specific users can receive address information of Internet resources included in the QR code.

[0018] Additionally, by preventing dynamic QR codes used in the service from being reused after a certain period of time, unauthorized users can be prevented from accessing Internet resources.

[0019] This allows store owners to prevent malicious orders. This eliminates problems such as customers leaving the store and placing malicious orders, or customers copying a customer's order URL and placing malicious orders.

[0020] FIG. 1 is a diagram showing the configuration of a system that provides resources using a dynamic QR code according to one embodiment of the present invention.

[0021] FIG. 2 and FIG. 3 are drawings showing the configuration of a first server (100) and a second server according to one embodiment of the present invention.

[0022] FIG. 4 is a flowchart illustrating a process of providing resources using a dynamic QR code according to one embodiment of the present invention.

[0023] FIG. 5 is a drawing showing the configuration of a QR code identification table according to one embodiment of the present invention.

[0024] FIG. 6 is a diagram showing the configuration of a redirection connection table according to one embodiment of the present invention.

[0025] FIG. 7 is an exemplary diagram showing a process in which usage information is modified in a QR code identification table according to one embodiment of the present invention.

[0026] FIG. 8 is a drawing showing the appearance of a QR code terminal according to one embodiment of the present invention.

[0027] Below, with reference to the attached drawings, embodiments of the present invention are described in detail so that those skilled in the art can easily implement them. However, the present invention may be implemented in various different forms and is not limited to the embodiments described herein. In the drawings, irrelevant parts have been omitted for clarity of description, and similar reference numerals have been used throughout the specification to indicate similar elements.

[0028] Throughout the specification, when a part is said to be "connected" to another part, this includes not only the cases where the parts are "directly connected" but also the cases where the parts are "electrically connected" with other elements intervening. Furthermore, when a part is said to "include" a component, this does not exclude other components, but rather includes other components, unless otherwise stated.

[0029] The following examples are provided as detailed explanations to aid understanding of the present invention and do not limit the scope of the invention. Therefore, inventions with the same scope and function as the present invention are also within the scope of the present invention.

[0030] FIG. 1 is a diagram showing the configuration of a system that provides resources using a dynamic QR code according to one embodiment of the present invention.

[0031] Referring to Figure 1, the system may be comprised of a first server (100), a second server (200), a user terminal (300), and a QR code terminal (400). In addition, although not shown in the drawing, each device may be interconnected via a communication network, either wired or wirelessly.

[0032] According to one embodiment of the present invention, a user terminal (300) takes a picture of a QR code displayed on a display (410) of a QR code terminal (400) and connects to a first server (100) through a first URL included in the QR code, and the first server (100) generates a second URL and a session key corresponding to the QR code and provides them to the user terminal (300).

[0033] In addition, the user terminal (300) is characterized in that it accesses the second server (200) based on the received second URL and session key, searches for Internet resource address information, and provides it to the user terminal (300).

[0034] At this time, the QR code is a two-dimensional matrix-type code, and may include a QR code label identification number and a first URL for accessing the first server (100), and the QR code terminal (400) receives and displays the QR code from the first server (100).

[0035] Additionally, the session key may be a type of password that allows only a specific user terminal (300) that has captured the QR code to access the second server (200). Accordingly, the session key may be formed of numbers or letters with a preset number of digits. Accordingly, the user enters the session key when accessing the second server (200) to authenticate whether the user who recognized the QR code is the correct one.

[0036] According to one embodiment of the present invention, the first server (100) is characterized in that it generates a QR code including a QR code label identification number and a first URL and transmits it to a QR code terminal (400), and generates and transmits a second URL and a session key to a user terminal (300) accessed through the QR code.

[0037] As an optional embodiment, the first server (100) may be implemented in the form of a kind of relay or in the form of a QR code management module.

[0038] According to one embodiment of the present invention, when a user terminal (300) performs a connection through a second URL and a session key, the second server (200) compares whether the session key is a session key generated by the first server (100), and if the session key is correct, allows the user terminal (300) to connect and searches for Internet resource address information.

[0039] In this case, the Internet resource address information may correspond to information for accessing content to be used in advance via a QR code by the user terminal (300). For example, if the service provides restaurant reservations, the Internet resource address information may correspond to a reservation address accessible only by a specific user terminal (300).

[0040] According to one embodiment of the present invention, a user terminal (300) corresponds to a terminal of a user using the service and may be equipped with a means for reading QR codes. For example, a camera or scanner function may be included in the user terminal (300).

[0041] In addition, the user terminal (300) captures and reads the QR code displayed on the QR code terminal (400) to obtain a first URL and connect to the first server (100). Thereafter, the user terminal (300) receives a second URL and a session key from the first server (100), connects to the second server (200), and receives Internet resource address information.

[0042] Meanwhile, the above-mentioned process can be carried out through an application that provides address information of encrypted resources using a dynamic QR code installed in a user terminal (300), and this application can be an application built into the user terminal (300) or an application downloaded from an application distribution server and installed in the user terminal (300).

[0043] In addition, the user terminal (300) refers to a communication terminal capable of utilizing a terminal application in a wired or wireless communication environment. Here, the user terminal (300) may be a user's portable terminal. In FIG. 1, the user terminal (300) is depicted as a smartphone, a type of portable terminal, but the spirit of the present invention is not limited thereto and may be applied without limitation to any terminal capable of installing a terminal application as described above.

[0044] To explain this in more detail, the user terminal (300) may include any form of handheld computing device (e.g., PDA, email client, etc.), mobile phone, or any form of other type of computing or communication platform, but the present invention is not limited thereto.

[0045] According to one embodiment of the present invention, a QR code terminal (400) is equipped with a display (410) as illustrated in FIG. 8, and displays a QR code received from a first server (100) on the display (410). Accordingly, the QR code terminal (400) is equipped with a module for communication.

[0046] In addition, as an additional embodiment, the QR code terminal (400) can display the session key for the QR code read by the user terminal (300) from the first server (100) through the display (410). Based on this, the user terminal (300) can be guided to obtain Internet resource address information from the location where the QR code was obtained.

[0047] Meanwhile, the communication network plays a role of connecting the server and each terminal. In other words, the communication network refers to a communication network that provides a connection path so that the user terminal (300) can transmit and receive data after connecting to the first server (100) and the second server (200). The communication network may include wired networks such as LANs (Local Area Networks), WANs (Wide Area Networks), MANs (Metropolitan Area Networks), and ISDNs (Integrated Service Digital Networks), or wireless networks such as wireless LANs, CDMA, Bluetooth, and satellite communication, but the scope of the present invention is not limited thereto.

[0048] FIG. 2 and FIG. 3 are drawings showing the configuration of a first server (100) and a second server (200) according to one embodiment of the present invention.

[0049] Referring to FIGS. 2 and 3, a first server (100) according to one embodiment of the present invention includes a communication module (110), a memory (120), a processor (130), and a database (140), and a second server (200) may also include a communication module (210) of the second server (200), a memory (220) of the second server (200), a processor (230) of the second server (200), and a database (240) of the second server (200).

[0050] At this time, since the roles of the modules constituting the first server (100) and the second server (200) are the same, only the modules constituting the first server (100) will be described.

[0051] To explain in detail, the communication module (110) provides a communication interface necessary to provide transmission and reception signals between the first server (100) and the user terminal (300) in the form of packet data in conjunction with a communication network. Furthermore, the communication module (110) can perform the role of receiving a data request from the user terminal (300) and transmitting data in response thereto.

[0052] Here, the communication module (110) may be a device including hardware and software necessary to transmit and receive signals such as control signals or data signals through wired or wireless connections with other network devices.

[0053] The memory (120) records a program for providing address information of encrypted resources using a dynamic QR code. It also performs a function of temporarily or permanently storing data processed by the processor (130). Here, the memory (120) may include a magnetic storage medium or a flash storage medium, but the scope of the present invention is not limited thereto.

[0054] The processor (130) is a type of central processing unit that controls the entire process of providing resources using dynamic QR codes. Each step performed by the processor (130) will be described later with reference to FIG. 4.

[0055] Here, the processor (130) may include all types of devices capable of processing data, such as a processor. Here, the 'processor' may refer to a data processing device built into hardware, for example, having a physically structured circuit to perform a function expressed by a code or command included in a program. As an example of a data processing device built into hardware, a microprocessor, a central processing unit (CPU), a processor core, a multiprocessor, an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), and the like may be encompassed, but the scope of the present invention is not limited thereto.

[0056] The database (140) can store the generated QR code, QR code label identification number, and redirection code information in the form of a QR code identification table, and the database (240) of the second server (200) can store the redirection code information, session key, and Internet resource address information in the form of a redirection connection table.

[0057] Although not shown in FIG. 2, some of the data described above may be stored in a database (not shown) that is physically or conceptually separate from the database (140).

[0058] FIG. 4 is a flowchart illustrating a process of providing resources using a dynamic QR code according to one embodiment of the present invention.

[0059] Referring to FIG. 4, the first server (100) generates and provides a QR code to a QR code terminal (400) in advance (S110), and the QR code terminal (400) displays the QR code on a display (410) (S120).

[0060] Next, the user terminal (300) captures the QR code displayed on the display (410) to obtain the QR code, reads the QR code (S130), and connects to the first server (100) through the first URL included in the QR code (S140).

[0061] Next, the first server (100) extracts a QR code label identification number for the QR code (S150) and searches for redirection code information in the QR code identification table using the QR code label identification number (S160).

[0062] At this time, the first server (100) generates and stores a QR code identification table (T1) as illustrated in FIG. 5. The QR code identification table (T1) is composed of a QR code label identification number (f1), redirection code information (f2), usage information (f3), and a session key (f4). Each specific QR code label identification number (f1) is matched with redirection code information (f2), usage information (f3), and a session key (f4), and can form multiple rows and columns.

[0063] Accordingly, the first server (100) searches for redirection code information (f2) having a value having the same row as the QR code label identification number (f1) by referring to the QR code identification table (T1), and generates a second URL and session key (f4) for the searched redirection code information (f2).

[0064] In addition, the first server (100) checks the usage information (f3) of the redirection code information (f2) in the searched row of the QR code identification table (T1), and if the usage information is “unused,” modifies the usage information (f3) to “used,” and generates a second URL and session key (f4) corresponding to the redirection code information (f2).

[0065] For example, in FIG. 7, when the first server (100) searches for 1001, which is a QR code label identification number (f1) received from a user terminal (300), the first server (100) checks the usage information (f3) of the same row of the QR code identification table (T1), and if the information of the row is in the "unused (FALSE)" state, the first server (100) uses the redirection code information (f2), which is the row of 1001, which is a QR code label identification number (f1). At the same time, the first server (100) modifies the usage information (f3) to "used (TRUE)."

[0066] If the usage information (f3) corresponding to the QR code identification number (f1) corresponding to the QR code received from the user terminal (300) is “in use,” the first server (100) may determine that the information has already been used and may disconnect the user terminal (300).

[0067] At this time, as an additional embodiment, the first server (100) can generate a QR code label identification number (f1) called 1002, and generate redirection code information (f2) and usage information (f3) for the same. This case can be used in situations such as QR codes for selling items where it is unclear how many QR codes are needed. Conversely, the number of QR code label identification numbers (f1) can be predetermined and generated in advance to configure the QR code identification table (T1), which can be applied in a situation where only a limited number of QR codes are to be provided. In addition, when a QR code label identification number is generated, the first server (100) can add a row including the generated QR code label identification number, the corresponding redirection code information, the usage information initialized to "unused", and the session key to the QR code identification table, and generate the QR code including the QR code label identification number.

[0068] In addition, as another optional embodiment, the first server (100) can regenerate the QR code and QR code label identification number at a preset cycle, and modify the usage information of the redirection code information corresponding to the unused QR code and QR code label identification number to “use.” For example, the first server (100) can change the QR code at a preset cycle such as 5 minutes, 1 hour, 10 hours, etc., and change the unused QR code so that it cannot be reused, thereby strengthening security by preventing the reuse of the QR code after a long time has passed since the user terminal (300) took a picture of it.

[0069] In addition, as another optional embodiment, when a change request for a specific QR code is received from the administrator terminal, the first server (100) can regenerate the specific QR code and the QR code label identification number of the specific QR code. Accordingly, the first server (100) can change the usage information of the redirection code information corresponding to the specific QR code for which a change is requested and the QR code label identification number of the specific QR code to "use". For example, if a QR code is used in a store selling products, the terminal of the store owner may correspond to the administrator terminal. If orders using the QR code are continuously received even when there are no customers in the store, it may be regarded that a previous customer has taken a picture of the QR code without visiting the store. Accordingly, the store owner can prevent the above-mentioned problem by requesting a change to the first server (100) through the administrator terminal.

[0070] Additionally, the first server (100) provides the second URL and session key corresponding to the redirection code information to the user terminal (300) (S170).

[0071] Next, the user terminal (300) connects to the second server (200) through the second URL and session key (S180), and the second server (200) determines the consistency of the session key received from the user terminal (300) (S190) and searches for Internet resource address information therefor (S200).

[0072] That is, a session key is provided from the first server (100) to the second server (200), and the second server (200) compares the session key received from the user terminal (300) with the session key received from the first server (100). If the session keys match, the second server (200) searches for a row in which the same value as the extracted redirection code information is located by referring to the redirection connection table (T2), and searches for Internet resource address information in the searched row.

[0073] If the session keys are different, the second server (200) disconnects the user terminal (300).

[0074] At this time, the redirection connection table (T2) can also be formed by forming rows and columns of redirection code information (g1) and Internet resource address information (g2) as illustrated in FIG. 6, and the operation process can be operated in the same manner as the QR code identification table (T1) described above.

[0075] In addition, as an optional embodiment, if the second server (200) does not receive the session key within a preset time after it is generated, the second server (200) disconnects the user terminal (300) from the second server (200) and regenerates the session key corresponding to the QR code label identification number. By setting an expiration date for the session key, security is enhanced, and even if another user terminal (300) forcibly intrudes into the second server (200) through the second URL, it is possible to prevent the acquisition of Internet resource address information without the session key.

[0076] In addition, the second server (200) provides the searched Internet resource address information to the user terminal (300), and the user terminal (300) accesses the preset Internet through the Internet resource address information and receives the service.

[0077] One embodiment of the present invention may also be implemented in the form of a recording medium containing computer-executable instructions, such as program modules executed by a computer. Computer-readable media may be any available media that can be accessed by a computer, and includes both volatile and nonvolatile media, removable and non-removable media. Computer-readable media may also include computer storage media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, program modules, or other data.

[0078] Although the methods and systems of the present invention have been described with respect to specific embodiments, some or all of their components or operations may be implemented using a computer system having a general-purpose hardware architecture.

[0079] The foregoing description of the present invention is for illustrative purposes only, and those skilled in the art will readily appreciate that the present invention can be readily modified into other specific forms without altering the technical spirit or essential characteristics of the present invention. Therefore, the embodiments described above should be understood as illustrative in all respects and not restrictive. For example, each component described as a single entity may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined manner.

Claims

1. In a method for providing resources using a dynamic QR code, (a) a step in which a user terminal connects to either a first server or a relay through a first URL included in a QR code; (b) a step in which one of the first server or the relay extracts a QR code label identification number for the QR code, searches for redirection code information in a QR code identification table through the QR code label identification number, and provides a second URL and session key corresponding to the redirection code information to the user terminal; and (c) The user terminal accesses the second server through the second URL and session key, and includes a step of searching for Internet resource address information in the redirection connection table through the redirection code information. A method for providing resources using a dynamic QR code, wherein the second server allows access to the user terminal after determining the consistency of the session key.

2. In paragraph 1, A QR code terminal is further provided that receives the QR code from one of the first server or repeater and displays the QR code, Before step (a) above A method for providing resources using a dynamic QR code, wherein the user terminal obtains the QR code by taking a picture of the QR code displayed on the QR code terminal.

3. In paragraph 1, Step (b) above A method for providing a resource using a dynamic QR code, wherein either the first server or the relay searches for the redirection code information having a value having the same row as the QR code label identification number by referring to the QR code identification table, and generates the second URL and session key for the searched redirection code information.

4. In paragraph 3, Either the first server or the relay checks the usage information of the redirection code information in the searched row of the QR code identification table, and if the usage information is “not used,” modifies the usage information to “used,” and generates the second URL and session key corresponding to the redirection code information. A method for providing resources using a dynamic QR code, wherein the user terminal is disconnected when the above usage information is “used.” 5. In paragraph 4, Either the first server or the relay regenerates the QR code and the QR code label identification number at a preset cycle, A method for providing a resource using a dynamic QR code, wherein the usage information of the redirection code information corresponding to the unused QR code and the QR code label identification number is modified to “use.” 6. In paragraph 4, When a change request for a specific QR code is received from an administrator terminal, either the first server or the relay regenerates the specific QR code and the QR code label identification number of the specific QR code, A method for providing a resource using a dynamic QR code, wherein the usage information of the redirection code information corresponding to the QR code label identification number of the specific QR code for which a change has been requested is modified to “use.” 7. In paragraph 5, Once the above QR code label identification number is generated, A method for providing a resource using a dynamic QR code, wherein either the first server or the relay adds a row including the generated QR code label identification number and the corresponding redirection code information, the usage information initialized to “unused”, and the session key to the QR code identification table, and generates the QR code including the QR code label identification number.

8. In paragraph 1, Step (b) above Provide the session key from one of the first server or relay to the second server, Step (c) above A method for providing a resource using a dynamic QR code, wherein the second server compares the session key received from the user terminal with the session key received from either the first server or the relay, and if they match, searches for a row in which the extracted redirection code information has the same value as the redirection connection table, and searches for the Internet resource address information in the searched row.

9. In paragraph 8, A method for providing resources using a dynamic QR code, wherein if the above session keys are different from each other, the second server disconnects the user terminal.

10. In paragraph 1, Step (c) above If the above session key is not received within the preset time after it is generated, A method for providing resources using a dynamic QR code, wherein the method comprises disconnecting the user terminal from the second server and regenerating the session key corresponding to the QR code label identification number.

11. In paragraph 1, Step (d) above The second server provides the searched Internet resource address information to the user terminal, A method for providing resources using a dynamic QR code, wherein the user terminal accesses the preset Internet through the Internet resource address information.

Images