JP7429364B2 - electronic ticket system - Google Patents

Description

Embodiments of the present invention relate to an electronic ticket system for authenticating admission to performances such as plays and music, and events such as expositions and competitions (hereinafter collectively referred to as performances).

In recent years, tickets for performances have become increasingly electronic. An electronic ticket is information purchased on the Internet and presented on a portable information processing terminal such as a smartphone for admission. Since electronic tickets are relatively easy to duplicate, it is important to effectively prevent counterfeiting and unauthorized resale. Furthermore, it is desired that entrance authentication be possible even if a communication failure occurs in the Internet line or the like, or even in a situation where the Internet line etc. are not in place.

An object of the present invention is to provide an electronic ticket system, an entrance authentication device, and a program that can effectively prevent counterfeiting and illegal resale of electronic tickets.

The electronic ticket system according to this embodiment includes a portable information processing terminal, an electronic ticket sales management device, and an entrance authentication device having a two-dimensional code reader, which are connected via an Internet line.

The electronic ticket sales management device is
means for issuing a membership number to a user of the portable information processing terminal;
means for executing the electronic ticket sales process upon receipt of an electronic ticket sales request for a performance from the portable information processing terminal;
means for transmitting performance information and performance number to the portable information processing terminal;
and means for transmitting the member number and the performance number to the admission authentication device.

The portable information processing terminal is
means for generating a secret value (1) from the membership number received from the electronic ticket sales management device, the latest access date to the electronic ticket sales management device, and a predetermined salt value;
means for hashing the secret value (1);
means for generating an authentication code (1) including the hashed secret value (1);
means for hashing the authentication code (1);
means for creating a two-dimensional code from the hashed authentication code (1), the membership number and the two-dimensional code generation date and time;
and means for displaying the two-dimensional code.

The entrance authentication device is
means for generating a secret value (2) from the membership number received from the electronic ticket sales management device, a system date whose initial value is the performance date of the performance, and the predetermined salt value;
means for hashing the secret value (2);
means for generating an authentication code (2) including the hashed secret value (2);
means for hashing the authentication code (2);
means for comparing the authentication code (1) in the two-dimensional code read by the two-dimensional code reader against the hashed authentication code (2);
means for determining whether the two-dimensional code generation date and time in the two-dimensional code read by the two-dimensional code reader is within a valid time;
means for determining whether or not authentication is possible based on a comparison result of the authentication code (2) against the authentication code (1) and a determination result regarding the two-dimensional code generation date and time;
and means for displaying the determination result of the authentication propriety on the two-dimensional code reader.

FIG. 1 is a configuration diagram of an electronic ticket system according to this embodiment. FIG. 2 is a data flowchart showing the steps of member registration processing, ticket purchase processing, and pre-authentication processing in this embodiment. FIG. 3 is a data flowchart showing the procedure of authentication processing in this embodiment. FIG. 4 is a data flowchart showing the procedure of the authentication process following FIG. 3. FIG. 5 is a diagram schematically showing a signal processing process in the portable information processing device 7. As shown in FIG. FIG. 6 is a diagram schematically showing a signal processing process in the entrance authentication device 3. FIG. 7 is a diagram showing an example of an electronic ticket displayed on the portable information processing device 7 for admission authentication.

Embodiments of the present invention will be described below with reference to the drawings.
As shown in FIG. 1, the electronic ticket system according to this embodiment includes an electronic ticket sales management device 1 as a server device. The electronic ticket sales management device 1 has, as its main functions, a function of registering and managing users as electronic ticket members, and a function of providing performance information and performing electronic ticket sales and settlement processing. The electronic ticket sales management device 1 is connected to a portable information processing terminal 7, typically a smartphone, owned by a user as an electronic ticket member, via a public telecommunications network (Internet line) 9, and a mobile information processing terminal 7, which is typified by a smartphone owned by a user who is an electronic ticket member, An entrance authentication device 3 that executes entrance authentication processing is connected. The entrance authentication device 3 is installed at the entrance of the performance venue, and has a QR code reader 5 for reading a two-dimensional code, typically a QR code (registered trademark).

Although not shown, each of the electronic ticket sales management device 1, the portable information processing terminal 7, and the admission authentication device 3 connects the processor to a storage unit such as a RAM, ROM, HDD, or SSD, or a touch panel. , input devices such as a keyboard and mouse, a display such as an LCD (Liquid Crystal Display), and a communication module are connected. The processor includes a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit), and executes a program loaded from a storage unit into a RAM to perform processing to be described later.

Next, with reference to FIGS. 2, 3, and 4, membership registration, electronic ticket purchase processing, and entrance authentication processing for the electronic ticket service will be described.

(Member registration process)
In order to purchase an electronic ticket for any performance from the electronic ticket sales management device 1, it is necessary to register as a member of the electronic ticket service provided by the electronic ticket sales management device 1. For membership registration, the electronic ticket sales management device 1 receives a membership registration request from the portable information processing terminal 7 along with member information including name, address, telephone number, and facial photograph data. Upon receipt of this, a membership number is issued, and membership information is stored in association with the membership number. Specifically, a request to send an installation file for an application dedicated to the electronic ticket service is sent from the portable information processing terminal 7 to the electronic ticket sales management device 1. The application installation file received from the electronic ticket sales management device 1 is expanded on the portable information processing terminal 7, and the application is installed (step S01). Upon initial startup of the application, input of member information is requested. In addition to the name, address, telephone number, etc., the member's face photo data is input as member information (step S02). Membership information is transmitted from the portable information processing terminal 7 to the electronic ticket sales management device 1 along with a membership registration request. In the electronic ticket sales management device 1, a membership number is issued, and member information is stored (registered) in association with the membership number (step S03). The portable information processing terminal 7 is notified of the membership number upon completion of membership registration. The application stores the member information in the storage section of the portable information processing terminal 7 in association with the member number.

(Electronic ticket sales processing)
In the electronic ticket sales management device 1, upon receipt of an electronic ticket sales request from the portable information processing terminal 7, an electronic ticket sales process is executed. Specifically, the member number and password from the portable information processing terminal 7 are used to log in to the electronic ticket service, and the portable information processing terminal 7 sends an electronic ticket purchase request for the desired performance to the electronic ticket sales management device 1 with payment information. It is also transmitted (S04). The electronic ticket sales management device 1 executes payment processing according to the payment information. After the payment is completed, the electronic ticket sales management device 1 notifies the portable information processing terminal 7 that the purchase and payment have been completed.

The salt value, performance information such as performance location and performance date and time, and performance number are transmitted from the electronic ticket sales management device 1 to the portable information processing terminal 7. The salt value, performance information, and performance number are stored in the storage section of the portable information processing terminal 7 (S05). Note that the salt value is a random character string that is added to a character string input to a predetermined hash function when hashing a character string. Here, for example, a fixed value specific to the electronic ticket service is applied to the salt value. However, the salt value may be changed periodically or may be a variable value issued each time an electronic ticket is purchased. The salt value is transmitted from the electronic ticket sales management device 1 to the portable information processing terminal 7 only the first time. The salt value is stored in the entrance authentication device 3 in advance.

Further, the membership number and performance number are transmitted from the electronic ticket sales management device 1 to the admission authentication device 3. The performance number is associated with the membership number and stored in the storage section of the admission authentication device 3 (S06).

(Authentication pre-processing)
From the day of the performance, pre-authentication processing can be performed N days beforehand, which is the allowable number of days preset in the admission authentication device 3. Here, the allowable number of days N will be briefly explained. As admission authentication processing on the day of the performance, the authentication code (1) generated by the portable information processing terminal 7 is checked against the authentication code (2) generated by the admission authentication device 3. If the verification results do not match, the system date is retroactive by one day, the authentication code (2) is regenerated, and the authentication code (1) is re-verified against the regenerated authentication code (2). The system date is the latest access date from the portable information processing terminal 7 to the admission authentication device 3, and for authentication, the system date is valid if it is a day earlier than the allowable number of days N from the performance date. Even if there is a communication failure on the internet line etc. for some reason on the day of the event, or even if the venue is not equipped with an internet line etc., as long as it is within the allowable number of days N, the admission authentication process will be processed. It can be executed smoothly.

On the portable information processing terminal 7, an application for electronic ticket members is started (S08), and the electronic ticket sales management device 1 is accessed (S09). As shown in FIG. 5, in the electronic ticket sales management device 1, the system date (1) when the electronic ticket sales management device 1 was accessed, the member number, and the salt value are arranged in a character string in a predetermined order. A secret value (1) is generated (S10). When the electronic ticket sales management device 1 is repeatedly accessed from the portable information processing terminal 7, the system date (1) is updated to the latest access date.

The secret value (1) is hashed using a predetermined hash function (S11). The hashed secret value (1) is stored in the storage unit of the portable information processing terminal 7 (S12).

(Entrance authentication processing)
On the day of the performance, immediately before entering the performance venue, an application dedicated to the electronic ticket service is activated in response to a user operation on the portable information processing terminal 7. The application refers to the performance information, recognizes that it is the day of the performance, and executes the process of receiving admission authentication. The member number and hashed secret value (1) are read from the storage unit. The member number, the hashed secret value (1), and the current system date and time specified by the system clock of the portable information processing terminal 7 (referred to as the QR code generation date and time) are arranged in a character string in a predetermined order. Ru. As a result, an authentication code (1) is generated (S13). The authentication code (1) is hashed (S14).

The hashed authentication code (1), membership number, QR code generation date and time, and performance number are arranged into a character string in a predetermined order and divided into characters. A QR code (character string) is thereby generated (S15). The character string is encrypted (S16). A QR code is created from the encrypted character string (S17).

As shown in FIGS. 7(a) and 7(b), the QR code 11 shows the member's face photo, performance information, performance number, and the elapsed time of, for example, 60 seconds, which is shorter than the validity period of the QR code. It is displayed on the display of the portable information processing terminal 7 together with the progress meter 13 (S18).

The valid time of the QR code 11 is typically set to 120 seconds, but can be changed under control from the electronic ticket sales management device 1. The progress meter 13 has, for example, an annular shape, one revolution corresponds to 60 seconds, and the filled range expands as time passes. When 60 seconds, which is shorter than the validity period of the QR code 11 in this case, has elapsed (S19), the process returns to step S13, and the authentication code (1) is regenerated with updating of the QR code generation date and time, and step S14 - After S17, the QR code 11 is recreated.

When the QR code 11 is out of validity, the entrance authentication device 3 rejects authentication. Thereby, forgery and illegal resale of electronic tickets can be prevented. Furthermore, even if the electronic ticket is valid, the admission staff can visually check the face of the visitor and the face photo displayed on the portable information processing terminal 7 to determine whether or not the person is indeed the purchaser of the electronic ticket. Since it is possible to confirm this, it is possible to effectively prevent unauthorized resale of electronic tickets accompanied by lending of the portable information processing terminal 7, etc.

In addition, by setting the update time (60 seconds) of the QR code 11 and the elapsed time (60 seconds) represented by the progress meter 13 to be shorter than the valid time (120 seconds) of the QR code 11 in the authentication process, the QR code 11 can be The time difference between when the QR code 11 is displayed on the portable information processing terminal 7 and when the QR code 11 is read by the QR code reader 5 varies depending on the progress of the entrance line, etc. It is possible to reduce the number of rejections and achieve a smooth authentication process, and it also psychologically deters resale by making it seem that it is realistically difficult to resell and receive authentication within 60 seconds. It can be effective.

Next, in the entrance authentication device 3, the QR code 11 displayed on the portable information processing terminal 7 is read by the QR code reader 5 (S20), decoded into a character string (S21), and the member number, QR code generation date and time, The performance number is expanded into a hashed authentication code (1) (S22).

As shown in FIG. 6, the membership number read from the QR code 11, the salt value stored in association with the membership number in step S07, and the current system date (specified by the system clock of the entrance authentication device 3). 2) (corresponding to the entry date) are arranged in a predetermined order, and a secret value (2) is generated (S23). The secret value (2) is hashed using the same hash function as in step S11 (S24).

The hashed secret value (2), the membership number read from the QR code 11, and the QR code generation date and time read from the QR code 11 are arranged in a predetermined order, and the authentication code (2) is generated ( S25). The authentication code (2) is hashed using the same hash function as in step S14 (S26).

The "hashed authentication code (1)" read from the QR code 11, that is, received from the portable information processing terminal 7, is compared against the hashed authentication code (2). Further, the QR code generation date and time read from the QR code 11, that is, received from the portable information processing terminal 7, is compared with the current date and time, and it is determined whether the QR code generation date and time is within the valid time. Furthermore, it is determined whether or not the membership number read from the QR code 11 matches the performance number received in advance from the electronic ticket sales management device 1 and stored in association with the membership number in step S07. be done.

Here, if the hashed authentication code (1) read from the QR code 11 does not match the hashed authentication code (2), the process returns to step S23 and the system date (2) is The hashed authentication code (2) is regenerated by going back one day from the initial value (the day of admission) and through steps S24 to S26. The hashed authentication code (1) read from the QR code 11 is checked again against the regenerated hashed authentication code (2). The processes of steps S23 to S27 are repeated up to the allowed number of times N as the upper limit, and it is determined whether the hashed authentication code (1) read from the QR code 11 matches the hashed authentication code (2). The final decision is whether or not. This process confirms the validity of the electronic ticket.

In addition, in step S36, the system date and time (1) (QR code generation date and time) in the character string indicated by the QR code 11 and the current system date and time (2) specified by the system clock of the entrance authentication device 3. It is determined whether the time difference is within a predetermined valid time. Through this process, the validity of the electronic ticket can be confirmed.

The comparison result of the hashed authentication code (1) read from the QR code 11 against the hashed authentication code (2), the determination result of whether the QR code generation date and time is within the valid time, and the QR code 11 Whether or not authentication is possible is determined based on the determination result of whether or not the member number read from the member number matches the performance number stored in association with the member number in step S07.

The “hashed authentication code (1)” received from the portable information processing terminal 7 via the QR code 11 is the same as the “hashed authentication code (2)” generated by the entrance authentication device 3. Therefore, whether the QR code generation date and time is within the valid period, and whether the membership number received from the portable information processing terminal 7 via the QR code 11 matches the performance number received from the electronic ticket sales management device 1 in advance. It is determined whether authentication is possible. When at least one of the comparison result and the two determination results is negative, it is determined that authentication is not possible.

The authentication determination result is recorded in the storage section of the admission authentication device 3 (S28), and is also transmitted to the electronic ticket sales management device 1 (S29).

The authentication determination result is transmitted to the QR code reader 5 and displayed (S30). The admission staff confirms the authentication judgment result and compares the face photo displayed on the portable information processing terminal 7 with the face of the visitor who presented the portable information processing terminal 7 to confirm that the visitor has received the electronic ticket. It is confirmed whether the purchaser is the same person as the purchaser (S31). The admission staff allows the visitor to enter the performance only when the authentication judgment result is positive and the visitor is judged to be a legitimate purchaser based on the face photo. If at least one of the authentication judgment result and the confirmation of whether or not the purchaser is a legitimate purchaser based on a face photo is negative, the admission staff refuses the visitor admission to the performance. The entrance staff operates the input device of the entrance authentication device 3 according to the result of admission permission or admission refusal (S32), and stores it in the storage unit (S33).

In this way, since the secret values (1) and (2) and the authentication codes (1) and (2) are hashed in two stages and compared, it is possible to effectively prevent counterfeiting of electronic tickets.

In addition, since a validity period is set on the QR code displayed on the portable information processing terminal 7 and used for authentication, unauthorized copying of the screen as an electronic ticket shown in FIGS. 7(a) and 7(b) and It is possible to effectively prevent illegal resale such as resale.

Then, by comparing the face photo displayed on the portable information processing terminal 7 with the face of the visitor, it is possible to confirm whether the visitor is the same person as the legitimate purchaser of the electronic ticket. It is possible to more effectively prevent the illegal resale of the product, and also to prevent the illegal resale in advance.

Furthermore, since the secret value (1) is generated in advance in the portable information processing terminal 7, hashed, and stored in the storage unit, even if there is a communication failure such as the Internet line at the time of admission authentication, the secret value (1) Even if the venue is not equipped with communication lines, etc., the entrance authentication process can be executed smoothly as long as it is within the allowable number of days N.

Although several embodiments of the invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, and changes can be made without departing from the gist of the invention. These embodiments and their modifications are included within the scope and gist of the invention as well as within the scope of the invention described in the claims and its equivalents.

1...Electronic ticket sales management device, 3...Entrance authentication device, 5...QR code reader, 7...Portable information processing terminal.

Claims (6)

In an electronic ticket system in which a portable information processing terminal, an electronic ticket sales management device, and an entrance authentication device having a two-dimensional code reader are connected via an Internet line,
The electronic ticket sales management device includes:
means for issuing a membership number to a user of the portable information processing terminal;
means for executing the electronic ticket sales process upon receipt of an electronic ticket sales request for a performance from the portable information processing terminal;
means for transmitting performance information and performance number to the portable information processing terminal;
means for transmitting the member number and the performance number to the admission authentication device,
The portable information processing terminal includes:
means for generating a secret value (1) from the membership number received from the electronic ticket sales management device, the latest access date to the electronic ticket sales management device, and a predetermined salt value;
means for hashing the secret value (1);
means for generating an authentication code (1) including the hashed secret value (1);
means for hashing the authentication code (1);
means for creating a two-dimensional code from the hashed authentication code (1), the membership number and the two-dimensional code generation date and time;
means for displaying the two-dimensional code;
The entrance authentication device is
means for generating a secret value (2) from the membership number received from the electronic ticket sales management device, a system date whose initial value is the performance date of the performance, and the salt value;
means for hashing the secret value (2);
means for generating an authentication code (2) including the hashed secret value (2);
means for hashing the authentication code (2);
means for comparing the authentication code (1) in the two-dimensional code read by the two-dimensional code reader against the hashed authentication code (2);
means for determining whether the two-dimensional code generation date and time in the two-dimensional code read by the two-dimensional code reader is within a valid time;
means for determining whether or not authentication is possible based on a comparison result of the authentication code (1) against the authentication code (2) and a determination result regarding the two-dimensional code generation date and time;
an electronic ticket system comprising means for displaying the determination result of the authentication propriety on the two-dimensional code reader. 2. The electronic ticket system according to claim 1, wherein the portable information processing terminal displays, together with the two-dimensional code, a progress meter that indicates the elapse of a time shorter than the valid time of the two-dimensional code. 2. The electronic ticket system according to claim 1, wherein a facial photograph of the user is displayed together with the two-dimensional code on the portable information processing terminal. The admission authentication device further includes means for determining whether the performance number in the two-dimensional code read by the two-dimensional code reader matches the performance number received from the electronic ticket sales management device. ,
In addition to the verification result of the authentication code (1) against the authentication code (2) and the determination result regarding the two-dimensional code generation date and time, the authenticity is determined based on the determination result regarding the performance number. The electronic ticket system described in Section 1. In the entrance authentication device, the system date is retroactive by one day, the secret value (2) is regenerated, the authentication code (2) is regenerated from the regenerated secret value (2), and the regeneration code (2) is regenerated. The electronic ticket system according to claim 1, wherein the authentication code (1) is checked again against the authentication code (2) that has been issued. 6. The electronic ticket system according to claim 5, wherein in the admission authentication device, the system date is repeatedly retroactively set within a predetermined allowable number of days.

Images