JP7565548B2 - Electronic ticket system - Google Patents

Description

An embodiment of the present invention relates to an electronic ticket system that authenticates admission to performances such as plays and music, and events such as exhibitions and competitions (hereinafter collectively referred to as performances).

In recent years, tickets for performances have been increasingly being digitized. An electronic ticket is information that is purchased online and presented on a portable information processing terminal such as a smartphone to gain admission. Because electronic tickets are relatively easy to copy, it is important to effectively prevent counterfeiting and illegal resale. It is also desirable to be able to authenticate admission even if there is a communication failure in the Internet line or even in a situation where the Internet line is not in place.

The purpose is to effectively prevent counterfeiting and illegal resale of electronic tickets.

In this embodiment of the electronic ticket system, a portable information processing terminal, an electronic ticket sales management device, and an entrance authentication device equipped with a two-dimensional code reader are connected via an Internet line.

The electronic ticket sales management device includes:
means for issuing a membership number to a user of the portable information processing terminal;
a means for executing a sales process for the electronic ticket in response to receiving a sales request for the electronic ticket for a performance from the portable information processing terminal;
a means for transmitting performance information and a performance number to the portable information processing terminal;
The admission authentication device has a means for transmitting the membership number and the performance number.

The portable information processing terminal includes:
a means for generating an authentication code (1) using the membership number and the performance number received from the electronic ticket sales management device and the most recent access date of the electronic ticket sales management device;
A means for creating a two-dimensional code using the authentication code (1) and the two-dimensional code generation date and time;
and means for displaying the two-dimensional code.

The entrance authentication device includes:
a means for generating an authentication code (2) using the membership number and performance number received from the electronic ticket sales management device and a system date with the performance date of the performance as an initial value;
A means for comparing the authentication code (2) with the authentication code (1) in the two-dimensional code read by the two-dimensional code reader;
means for determining whether or not the two-dimensional code generation date and time in the two-dimensional code read by the two-dimensional code reader is within a valid period;
a means for determining whether or not the authentication is possible based on a result of matching the authentication code (1) against the authentication code (2) and a determination result regarding the generation date and time of the two-dimensional code;
The authentication method further comprises a means for causing the two-dimensional code reader to display a result of the determination as to whether the authentication is possible or not.

FIG. 1 is a configuration diagram of an electronic ticket system according to this embodiment. FIG. 2 is a data flow chart showing the procedures of the member registration process, the ticket purchase process, and the pre-authentication process in this embodiment. FIG. 3 is a data flow chart showing the procedure of the authentication process in this embodiment. FIG. 4 is a data flow chart showing the procedure of the authentication process subsequent to FIG. FIG. 5 is a diagram showing an outline of a signal processing process in the portable information processing device 7. As shown in FIG. FIG. 6 is a diagram showing an outline of a signal processing process in the entrance authentication device 3. As shown in FIG. FIG. 7 is a diagram showing an example of an electronic ticket displayed on the portable information processing device 7 for admission authentication.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
As shown in Fig. 1, the electronic ticket system according to this embodiment has an electronic ticket sales management device 1 as a server device. The electronic ticket sales management device 1 has the main functions of registering and managing users as electronic ticket members, providing performance information, and executing sales and settlement processing for electronic tickets. A portable information processing terminal 7, typically a smartphone, owned by a user as an electronic ticket member, and an entrance authentication device 3, which executes entrance authentication processing for attendees of a performance, are connected to the electronic ticket sales management device 1 via a public telecommunications network (Internet line) 9. The entrance authentication device 3 is installed at the entrance of a performance venue, and has a QR code reader 5 for reading a two-dimensional code, typically a QR code (registered trademark).

Although not shown, the electronic ticket sales management device 1, the portable information processing terminal 7, and the entrance authentication device 3 each have a processor connected to a memory unit such as a RAM, a ROM, a HDD or an SSD, input devices such as a touch panel, a keyboard or a mouse, a display such as an LCD (Liquid Crystal Display), and a communication module via a data/control bus. The processor is made up of a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit), and executes a program loaded from the memory unit to the RAM to perform the processing described below.

Next, we will explain the membership registration, electronic ticket purchase process, and admission authentication process for the electronic ticket service with reference to Figures 2, 3, and 4.

(Member registration process)
In order to purchase an electronic ticket for any performance from the electronic ticket sales management device 1, it is necessary to register as a member in the electronic ticket service provided by the electronic ticket sales management device 1. For member registration, the electronic ticket sales management device 1 receives a member registration request from the portable information processing terminal 7 together with member information including data on the name, address, telephone number, and face photo. This reception triggers the issuance of a member number, and the member information is stored in association with the member number. Specifically, a request to transmit an installation file for an application dedicated to the electronic ticket service is transmitted from the portable information processing terminal 7 to the electronic ticket sales management device 1. The application installation file received from the electronic ticket sales management device 1 is expanded in the portable information processing terminal 7, and the application is installed (step S01). With the initial start of the application, input of member information is requested. In addition to the name, address, telephone number, etc., face photo data of the member himself is input as member information (step S02). The member information is transmitted from the portable information processing terminal 7 to the electronic ticket sales management device 1 together with the member registration request. The electronic ticket sales management device 1 issues a membership number and stores the membership information in association with the membership number (registration) (step S03). The portable information processing terminal 7 is notified of the membership number when the membership registration is completed. The application stores the membership information in association with the membership number in the memory section of the portable information processing terminal 7.

(Electronic ticket sales processing)
In the electronic ticket sales management device 1, the sale process of the electronic ticket is executed upon receiving a request to sell the electronic ticket from the portable information processing terminal 7. Specifically, the member number and password from the portable information processing terminal 7 are used to log into the electronic ticket service, and the portable information processing terminal 7 sends an electronic ticket purchase request for the desired performance together with payment information to the electronic ticket sales management device 1 (S04). The electronic ticket sales management device 1 executes the payment process in accordance with the payment information. After the payment is completed, the electronic ticket sales management device 1 notifies the portable information processing terminal 7 of the completion of the purchase and payment.

The salt value, performance information such as the performance location and performance date and time, and the performance number are sent from the electronic ticket sales management device 1 to the portable information processing terminal 7. The salt value, performance information, and performance number are stored in the memory of the portable information processing terminal 7 (S05). The salt value is a random string that is added to a string that is input to a specified hash function when hashing the string. Here, the salt value is, for example, a fixed value specific to the electronic ticket service. However, the salt value may be changed periodically, or may be a variable value that is issued each time an electronic ticket is purchased. The salt value is sent from the electronic ticket sales management device 1 to the portable information processing terminal 7 only the first time. The salt value is stored in advance in the entrance authentication device 3.

The membership number and performance number are also sent from the electronic ticket sales management device 1 to the admission authentication device 3. The performance number is associated with the membership number and stored in the memory unit of the admission authentication device 3 (S06).

(Pre-authentication process)
The pre-authentication process can be performed from N days before the performance date, which is the allowable number of days preset in the entrance authentication device 3. Here, the allowable number of days N will be briefly explained. As the entrance authentication process on the performance date, the authentication code (2) generated by the entrance authentication device 3 is compared with the authentication code (1) generated by the portable information processing terminal 7. If the comparison result is not the same, the system date is counted back by one day, the authentication code (2) is regenerated, and the authentication code (1) is re-compared with the regenerated authentication code (2). The system date is the date of the most recent access from the portable information processing terminal 7 to the entrance authentication device 3, and the system date that is valid for authentication is the date that is earlier than the allowable number of days N from the performance date. Therefore, even if a communication failure such as an Internet line occurs for some reason on the day of admission, or even if the venue does not have an Internet line, the entrance authentication process can be performed smoothly as long as it is within the allowable number of days N.

On the portable information processing terminal 7, an application for an electronic ticket member is started (S08), and the electronic ticket sales management device 1 is accessed (S09). As shown in FIG. 5, on the electronic ticket sales management device 1, the system date (1) on which the electronic ticket sales management device 1 was accessed, the member number, and the salt value are arranged in a predetermined order in a character string to generate a secret value (1) (S10). If the electronic ticket sales management device 1 is accessed repeatedly from the portable information processing terminal 7, the system date (1) is updated to the most recent access date.

The secret value (1) is hashed using a predetermined hash function (S11). The hashed secret value (1) is stored in the memory unit of the portable information processing terminal 7 (S12).

(Entry authentication process)
On the day of the performance, immediately before entering the performance venue, a user operates the portable information processing terminal 7 to launch an application dedicated to the electronic ticket service. The application recognizes that it is the day of the performance by referring to the performance information, and executes a process to receive admission authentication. The member number and hashed secret value (1) are read from the memory unit. The member number, hashed secret value (1), and the current system date and time (referred to as the QR code generation date and time) specified by the system clock of the portable information processing terminal 7 are arranged in a string in a predetermined order. As a result, an authentication code (1) is generated (S13). The authentication code (1) is hashed (S14).

The hashed authentication code (1), the membership number, the date and time the QR code was generated, and the performance number are arranged in a predetermined order into a character string and flattened. This generates a QR code (character string) (S15). The character string is encrypted (S16). A QR code is created from the encrypted character string (S17).

As shown in Figures 7(a) and 7(b), the QR code 11 is displayed on the display of the portable information processing terminal 7 together with the member's face photo, performance information, performance number, and a progress meter 13 that indicates the passage of, for example, 60 seconds, which is shorter than the validity period of the QR code (S18).

The validity period of the QR code 11 is typically set to 120 seconds, but can be changed under control of the electronic ticket sales management device 1. The progress meter 13 is, for example, in the shape of a ring, with one revolution corresponding to 60 seconds, and the filled-in range expanding as time passes. When 60 seconds, which is shorter than the validity period of the QR code 11, has elapsed (S19), the process returns to step S13, and the authentication code (1) is regenerated with the QR code generation date and time updated, and the QR code 11 is recreated via steps S14-S17.

If the QR code 11 is outside the valid period, authentication is rejected by the entrance authentication device 3. This makes it possible to prevent counterfeiting and illegal resale of electronic tickets. Furthermore, even if the electronic ticket is legitimate, an entrance staff member can visually check the face of the attendee and the facial photograph displayed on the portable information processing terminal 7 to confirm whether or not the attendee is indeed the actual purchaser of the electronic ticket, thereby effectively preventing illegal resale of electronic tickets involving the lending of the portable information processing terminal 7, etc.

In addition, by setting the update time of the QR code 11 (60 seconds) and the elapsed time shown by the progress meter 13 (60 seconds) shorter than the validity time of the QR code 11 in the authentication process (120 seconds), the time difference between when the QR code 11 is displayed on the portable information processing terminal 7 and when the QR code 11 is read by the QR code reader 5 varies depending on the progress of the entrance line, etc., but it is possible to reduce the number of cases where authentication is rejected due to this variation and achieve a smooth authentication process, and further to make people believe that it is practically difficult to resell and be authenticated within 60 seconds, which has the effect of psychologically deterring reselling.

Next, in the entrance authentication device 3, the QR code 11 displayed on the portable information processing terminal 7 is read by the QR code reader 5 (S20), decoded into a string of characters (S21), and expanded into the membership number, the date and time the QR code was generated, the performance number, and a hashed authentication code (1) (S22).

As shown in Figure 6, the member number read from the QR code 11, the salt value stored in association with the member number in step S07, and the current system date (2) (corresponding to the entry date) identified by the system clock of the entry authentication device 3 are arranged in a predetermined order to generate a secret value (2) (S23). The secret value (2) is hashed using the same hash function as in step S11 (S24).

The hashed secret value (2), the membership number read from the QR code 11, and the QR code generation date and time read from the QR code 11 are arranged in a predetermined order to generate an authentication code (2) (S25). The authentication code (2) is hashed using the same hash function as in step S14 (S26).

The hashed authentication code (2) is compared with the "hashed authentication code (1)" read from the QR code 11, i.e., received from the portable information processing terminal 7. The QR code generation date and time read from the QR code 11, i.e., received from the portable information processing terminal 7, is compared with the current date and time to determine whether the QR code generation date and time is within the validity period. Furthermore, it is determined whether the membership number read from the QR code 11 matches the performance number received in advance from the electronic ticket sales management device 1 and stored in association with the membership number in step S07.

If the hashed authentication code (1) read from the QR code 11 does not match the hashed authentication code (2), the process returns to step S23, the system date (2) is counted back by one day from the initial value (the day of entry), and the hashed authentication code (2) is regenerated by steps S24 to S26. The hashed authentication code (1) read from the QR code 11 is re-checked against the regenerated hashed authentication code (2). The processes of steps S23 to S27 are repeated up to an allowable number of times N, and it is finally determined whether the hashed authentication code (1) read from the QR code 11 matches the hashed authentication code (2). This process confirms the authenticity of the electronic ticket.

In addition, in step S36, it is determined whether the time difference between the system date and time (1) (QR code generation date and time) in the character string shown in the QR code 11 and the current system date and time (2) specified by the system clock of the entrance authentication device 3 is within a predetermined validity period. This process can confirm the validity of the electronic ticket.

The authentication is judged based on the result of matching the hashed authentication code (2) with the hashed authentication code (1) read from the QR code 11, the result of judging whether the date and time of the QR code generation is within the validity period, and the result of judging whether the membership number read from the QR code 11 matches the performance number stored in association with the membership number in step S07.

If the "hashed authentication code (2)" generated by the entrance authentication device 3 matches the "hashed authentication code (1)" received from the portable information processing terminal 7 via the QR code 11, the date and time of QR code generation is within the validity period, and the membership number received from the portable information processing terminal 7 via the QR code 11 matches the performance number received in advance from the electronic ticket sales management device 1, then authentication is determined to be successful. If at least one of the comparison result and the two judgment results is negative, then authentication is determined to be unsuccessful.

The authentication result is recorded in the memory of the entrance authentication device 3 (S28) and is also transmitted to the electronic ticket sales management device 1 (S29).

The authentication result is sent to the QR code reader 5 and displayed (S30). The admissions staff checks the authentication result and compares the facial photograph displayed on the portable information processing terminal 7 with the face of the attendee who presented the portable information processing terminal 7 to confirm whether the attendee is the same person as the legitimate purchaser of the electronic ticket (S31). The admissions staff will allow the attendee to enter the performance only if the authentication result is positive and the attendee is determined to be a legitimate purchaser based on the facial photograph. If at least one of the authentication result and the confirmation of whether the attendee is a legitimate purchaser based on the facial photograph is negative, the admissions staff will deny the attendee entry to the performance. The admissions staff will operate the input device of the admission authentication device 3 according to the result of admission permission or admission refusal (S32) and store it in the memory unit (S33).

In this way, the secret values (1) and (2) and the authentication codes (1) and (2) are hashed in two stages and compared, thereby effectively preventing the counterfeiting of electronic tickets.

In addition, a validity period is set for the QR code displayed on the portable information processing terminal 7 and used for authentication, so that it is possible to effectively prevent unauthorized resale, such as unauthorized copying of the screens of the electronic ticket shown in Figures 7(a) and 7(b) and reselling it to others.

Then, by comparing the photograph of the visitor's face displayed on the portable information processing terminal 7 with the visitor's face, it can be confirmed whether the visitor is the same person as the legitimate purchaser of the electronic ticket, which makes it possible to more effectively prevent unauthorized resale of electronic tickets and to prevent unauthorized resale in advance.

Furthermore, the secret value (1) is generated in advance in the portable information processing terminal 7, hashed, and stored in the memory unit. Therefore, even if there is a communication failure in the Internet line or the like at the time of entrance authentication, or even if the venue does not have an Internet line or the like, the entrance authentication process can be carried out smoothly as long as it is within the range of the allowable number of days N.

Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the gist of the invention. These embodiments and their modifications are within the scope of the invention and its equivalents as set forth in the claims, as well as the scope and gist of the invention.

1...Electronic ticket sales management device, 3...Admission authentication device, 5...QR code reader, 7...Portable information processing terminal.

Claims (1)

In an electronic ticket system in which a portable information processing terminal, an electronic ticket sales management device, and an entrance authentication device having a two-dimensional code reader are connected via an Internet line,
The electronic ticket sales management device includes:
means for issuing a membership number to a user of the portable information processing terminal;
a means for executing a sales process for the electronic ticket in response to receiving a sales request for the electronic ticket for a performance from the portable information processing terminal;
means for transmitting said member number and performance number to said portable information processing terminal;
means for transmitting said membership number and said performance number to said entrance authentication device;
The portable information processing terminal includes:
A means for generating a secret value (1) including a membership number received from the electronic ticket sales management device and a predetermined salt value ;
means for hashing said secret value (1);
A means for generating an authentication code (1) including the hashed secret value (1) and the membership number ;
A means for hashing the authentication code (1);
A means for creating a two-dimensional code using the hashed authentication code (1), the membership number, and the performance number ;
A means for displaying the two-dimensional code,
The entrance authentication device includes:
a means for generating a secret value (2) including the membership number received from the electronic ticket sales management device and the salt value ;
means for hashing said secret value (2);
A means for generating an authentication code (2) including the hashed secret value (2) and the membership number ;
means for hashing the authentication code (2);
A means for comparing the hashed authentication code (2) with the hashed authentication code (1) in the two-dimensional code read by the two-dimensional code reader;
A means for determining whether or not authentication is possible based on a result of matching the authentication code (1) against the authentication code (2);
and a means for causing the two-dimensional code reader to display the result of the determination as to whether the authentication is possible.