JP7598983B2 - Substitution verification system, substitution verification method, and program - Google Patents

Description

This disclosure relates to a swap verification system, a swap verification method, and a program.

Conventionally, electronic commerce, in which goods are sold over the Internet, has been known. One example of electronic commerce is an online flea market, where transactions are conducted between individuals. In an online flea market, a seller packs the goods in packaging materials such as cardboard boxes and then ships the goods to the buyer who has purchased the goods. In electronic commerce, of which online flea markets are one example, there has been a problem of malicious parties switching goods.

For example, Patent Documents 1 to 4 describe a technology in which a code is formed on a sticker that can be affixed to a product or packaging material, and the code is lost when the sticker is removed. Patent Document 5 describes a technology that uses a code printed on a tamper-evident sticker that includes a control number for identifying the product name, quantity, delivery route, company name, delivery person name, delivery time, and other information to prevent the inclusion of foreign objects or the removal of products. Patent Document 6 describes a technology that prevents products from being mixed up by managing a two-dimensional code displayed on a product and another two-dimensional code that pairs with it so that they form a pair.

Special table 2015-528121 publication Republished Publication No. 2012-026305 JP 2013-003535 A Special Publication No. 9-512346 JP 2006-001735 A JP 2022-035081 A

However, even if the tamper-evident seals of Patent Documents 1 to 4 are used, it is possible to verify whether the product or packaging materials have been opened, but it is not possible to verify whether the product has been swapped. The technology of Patent Document 5 targets the inclusion of foreign matter and the removal of products, so it is not possible to verify whether the product has been swapped. The technology of Patent Document 6 targets the swapping of products, so it is not possible to verify whether the product has been swapped.

One of the purposes of this disclosure is to verify product substitution.

The swap verification system according to the present disclosure includes a first acquisition unit that acquires code information relating to a code formed on a security seal affixed to a product or the product's packaging material from a seller terminal of a seller who sells the product when the code is read by the seller terminal of the seller who sells the product, a first association unit that associates product identification information capable of identifying the product with the code information acquired from the seller terminal, a second acquisition unit that acquires the code information from the purchaser terminal when the code is read by a purchaser terminal of a purchaser who purchased the product, and an execution unit that executes a swap verification process for verifying swapping of the product based on the code information associated with the product identification information and the code information acquired from the purchaser terminal.

This disclosure makes it possible to verify product swapping.

FIG. 1 is a diagram illustrating an example of an overall configuration of a swap verification system. FIG. 13 is a diagram showing an example of a seller screen displayed on a seller terminal. FIG. 13 is a diagram showing an example of a procedure for a seller to pack a product. FIG. 13 is a diagram showing an example of a procedure for a seller to pack a product. 1 shows an example of a first security seal with a broken first code and a second security seal with a broken second code; FIG. FIG. 13 is a diagram showing an example of a state in which a purchaser removes a product from a packaging material. FIG. 13 is a diagram showing an example of a purchaser screen displayed on a purchaser terminal. FIG. 13 illustrates an example of an administrator screen displayed on the administrator terminal. FIG. 2 is a diagram illustrating an example of functions realized by the substitution verification system. FIG. 4 is a diagram illustrating an example of a user database. FIG. 4 is a diagram illustrating an example of a product database. FIG. 13 is a diagram illustrating an example of a process executed in the substitution verification system. FIG. 13 is a diagram illustrating an example of functions realized in a modified example. FIG. 13 is a diagram showing an example of a security seal according to a seventh modified example.

[1. Overall configuration of the swap verification system]
An example of an embodiment of a swap verification system according to the present disclosure will be described. Fig. 1 is a diagram showing an example of the overall configuration of the swap verification system. For example, the swap verification system 1 includes a server 10, a seller terminal 20, a purchaser terminal 30, and an administrator terminal 40. Each of the server 10, the seller terminal 20, the purchaser terminal 30, and the administrator terminal 40 is connected to a network N such as the Internet or a LAN.

The server 10 is a server computer. For example, the server 10 includes a control unit 11, a memory unit 12, and a communication unit 13. The control unit 11 includes at least one processor. The memory unit 12 includes a volatile memory such as a RAM, and a non-volatile memory such as a flash memory. The communication unit 13 includes at least one of a communication interface for wired communication and a communication interface for wireless communication.

The seller terminal 20 is a seller's computer. A seller is a person who sells goods. In this embodiment, the seller is an individual, but the seller may be an organization. For example, the seller may be a physical store, an online store, a company without a store, a non-company corporation, a country, a local government, or other organization. Although only one seller terminal 20 is shown in FIG. 1, multiple seller terminals 20 may be present.

For example, the seller terminal 20 is a personal computer, a tablet, a smartphone, or a wearable terminal. The seller terminal 20 includes a control unit 21, a memory unit 22, a communication unit 23, an operation unit 24, a display unit 25, and an image capture unit 26. The physical configurations of the control unit 21, the memory unit 22, and the communication unit 23 may be similar to those of the control unit 11, the memory unit 12, and the communication unit 13, respectively. The operation unit 24 is an input device such as a keyboard, a mouse, or a touch panel. The display unit 25 is a display such as a liquid crystal display or an organic EL display. The image capture unit 26 includes at least one camera.

The purchaser terminal 30 is a purchaser's computer. A purchaser is a person who purchases a product. In this embodiment, the case where the purchaser is an individual is taken as an example, but the purchaser may also be an organization. For example, the purchaser may be a physical store, an online store, a company without a store, a non-company corporation, a country, a local government, or other organization. Although only one purchaser terminal 30 is shown in FIG. 1, multiple purchaser terminals 30 may be present.

For example, the purchaser terminal 30 is a personal computer, a tablet, a smartphone, or a wearable terminal. The purchaser terminal 30 includes a control unit 31, a memory unit 32, a communication unit 33, an operation unit 34, a display unit 35, and an image capture unit 36. The physical configurations of the control unit 31, the memory unit 32, the communication unit 33, the operation unit 34, the display unit 35, and the image capture unit 36 may be similar to those of the control unit 11, the memory unit 12, the communication unit 13, the operation unit 24, the display unit 25, and the image capture unit 26, respectively.

The administrator terminal 40 is the administrator's computer. The administrator is a person who manages the swap verification system 1. In this embodiment, the administrator is an operating company of the online flea market, but the administrator may be an organization or individual other than the operating company of the online flea market. For example, the other organization may be an operating company of a service other than the online flea market, a physical store, an online store, a company without a store, a corporation other than a company, a country, or a local government. Although only one administrator terminal 40 is shown in FIG. 1, multiple administrator terminals 40 may be present.

For example, the administrator terminal 40 is a personal computer, a tablet, a smartphone, or a wearable terminal. The administrator terminal 40 includes a control unit 41, a memory unit 42, a communication unit 43, an operation unit 44, and a display unit 45. The physical configurations of the control unit 41, the memory unit 42, the communication unit 43, the operation unit 44, and the display unit 45 may be similar to those of the control unit 11, the memory unit 12, the communication unit 13, the operation unit 24, and the display unit 25, respectively.

The programs stored in the storage units 12, 22, 32, and 42 may be supplied via the network N. Also, the programs stored in a computer-readable information storage medium may be supplied via a reading unit (e.g., an optical disk drive or a memory card slot) that reads the information storage medium, or an input/output unit (e.g., a USB port) that inputs and outputs data to and from an external device.

Furthermore, the swap verification system 1 only needs to include at least one computer, and is not limited to the example of FIG. 1. For example, the swap verification system 1 may include only the server 10, without including the seller terminal 20, the purchaser terminal 30, and the administrator terminal 40. In this case, the seller terminal 20, the purchaser terminal 30, and the administrator terminal 40 exist outside the swap verification system 1. For example, the swap verification system 1 may include only the server 10 and the administrator terminal 40. In this case, the seller terminal 20 and the purchaser terminal 30 exist outside the swap verification system 1.

[2. Overview of the swap verification system]
The swap verification system 1 is applicable to any service in which products are shipped. For example, the swap verification system 1 is applicable to online flea markets, internet auctions, electronic commerce other than online flea markets and internet auctions, retail services in physical stores, or logistics services. In this embodiment, the swap verification system 1 is applied to an online flea market as an example. The phrase "online flea market service" may be replaced with any other service.

In this embodiment, the administrator is the operating company of the online flea market. The buyers and sellers are users of the online flea market. In the online flea market, in principle, transactions between individuals (so-called CtoC) take place. In the online flea market, transactions other than transactions between individuals (for example, so-called BtoB or BtoC) may also take place. The flow itself from listing an item to purchasing it may be a publicly known flow. In this embodiment, the flow after the buyer has completed the purchase procedure for the item will be explained. For example, when the buyer has completed the purchase procedure for the item, the seller completes the shipping procedure for the item.

Figure 2 is a diagram showing an example of a seller screen displayed on the seller terminal 20. For example, when the seller terminal 20 logs into the server 10, a seller screen SC1 that accepts operations related to shipping procedures is displayed on the display unit 25. When the seller selects button B10, waybill information for creating a waybill for the product is displayed on the display unit 25. The waybill information itself may be information used in known online flea markets. The seller checks the waybill information and packs the product.

In this embodiment, the administrator sends a security seal to the seller to verify that the product has been swapped. Product swapping occurs when a malicious person replaces a legitimate product with another product. In this embodiment, the verification of product swapping performed by the purchaser is given as an example, but product swapping may also be performed by someone other than the purchaser. For example, product swapping may also be performed by the seller, a store clerk to which the seller brings the product for shipping (e.g., a convenience store clerk), a delivery person who delivers the product, a person who temporarily holds the product before it is delivered to the purchaser, or any other person.

A security seal is a seal that is at least partially damaged when removed. A security seal can also be described as a seal that changes at least a portion of its appearance when removed. A security seal may also be called by other names, such as a security label or a security sticker. The security seal itself may be of various types known in the art. For example, the security seal may be of a type that breaks when removed, a type that leaves a mark when removed, a type that cannot be reapplied, or other type.

In this embodiment, a code is formed on the security seal. Information used to verify product substitution is encoded in the code. Hereinafter, this information is referred to as code information. For example, the code information is an ID that is issued so as not to overlap with other code information. In this embodiment, a two-dimensional code is described as an example of a code, but various types of codes can be used. For example, the code may be a barcode. Both a barcode and a two-dimensional code may be formed on the security seal. Forming is meant to include not only printing, but also other methods such as foil stamping or embossing.

In this embodiment, an example is given in which a security seal affixed to a product and a security seal affixed to packaging materials are used. Hereinafter, the security seal affixed to the product is referred to as the first security seal SS1. The security seal affixed to packaging materials is referred to as the second security seal SS2. When there is no need to distinguish between the first security seal SS1 and the second security seal SS2, they are simply referred to as security seal SS. The purchaser can use any two of the multiple security seals SS sent by the administrator as the first security seal SS1 and the second security seal SS2.

The code formed on the first security seal SS1 is referred to as the first code C1. The code formed on the second security seal SS2 is referred to as the second code C2. When there is no distinction between the first code C1 and the second code C2, they are simply referred to as code C. Furthermore, the code information coded into the first code C1 is referred to as the first code information. The code information coded into the second code C2 is referred to as the second code information. When there is no distinction between the first code information and the second code information, they are simply referred to as code information.

For example, when the seller selects button B11 on the seller screen SC1, the photographing unit 26 is activated and the seller screen SC1 changes to the state shown in the upper right of FIG. 2. When the seller selects button B13, the photographing unit 26 reads the first code C1 of the first security seal SS1. The seller screen SC1 then changes to the state shown in the lower left of FIG. 2. When the seller selects button B14, the photographing unit 26 reads the second code C2 of the second security seal SS2. The seller terminal 20 then transmits to the server 10 the first code information read from the first code C1 and the second code information read from the second code C2.

For example, when the server 10 receives the first code information and the second code information from the seller terminal 20, it registers the first code information and the second code information. Then, as shown in the lower right of FIG. 2, a notification is displayed on the seller screen SC1 that the registration of the first code information and the second code information has been completed. The seller can also select button B15 to photograph at least one of the first code C1 and the second code C2 again. When the seller selects button B16, the seller screen SC1 returns to the state shown in the upper left of FIG. 2. When the registration of the first code information and the second code information has been completed, the seller packs the product and selects button B12.

Figures 3 and 4 are diagrams showing an example of the procedure for a seller to package a product. In this embodiment, cardboard is described as an example of packaging material P, but various types of packaging material P itself can be used. For example, packaging material P may be a box other than cardboard, a container other than a box, a paper bag, a plastic bag, an envelope, or other materials. One product may be packaged with multiple packaging materials P. Conversely, multiple products may be packaged with one packaging material P.

As shown in Figures 3 and 4, the first security seal SS1 has a first code C1 formed near the end of the short side (within a specified distance from the end, for example, within 1 centimeter from the end). The first security seal SS1 does not have a first code C1 formed near the other end opposite that end. Similarly, the second security seal SS2 has a second code C2 formed near the end of the short side. The second security seal SS2 does not have a second code C2 formed near the other end opposite that end.

As shown in FIG. 3, the seller affixes a portion of the first security seal SS1 to the product I. For example, the seller affixes the first code portion P10 of the first security seal SS1, in which the first code C1 is formed, to the product I. The seller affixes the other portion P11 of the first security seal SS1 other than the first code portion P10 to the bottom surface of the packaging material P. In the example of FIG. 3, the surface of the product I opposite the surface to which the first security seal SS1 is affixed is in contact with the side of the packaging material P. The product I is fixed inside the packaging material P by the first security seal SS1.

Moving on to Figure 4, the seller closes the top surface (lid) of the packaging material P. The seller attaches the second security seal SS2 so as to connect the top surface and side surface of the packaging material P. In the example of Figure 4, of the second security seal SS2, the second code portion P20 on which the second code C2 is formed is attached to the top surface of the packaging material P. Of the second security seal SS2, the portion P21 other than the second code portion P20 is attached to the side surface of the packaging material P.

In this embodiment, one of the four sides of the packaging material P includes a transparent member M. For example, this member M is a vinyl or plastic sheet. In the example of Figures 3 and 4, the first security seal SS1 is visible from the outside through the transparent member M. The seller may photograph the first code C1 and the second code C2 after packaging the product I, rather than before packaging the product I. If someone opens the packaging material P and removes the product I, the first code C1 and the second code C2 will be damaged.

Figure 5 shows an example of a first security seal SS1 with a damaged first code C1 and a second security seal SS2 with a damaged second code C2. Figure 5 shows a case where the first security seal SS1 and the second security seal SS2 are each damaged over the entire surface, but the peeled off portions of the first security seal SS1 and the second security seal SS2 are damaged.

Figure 6 is a diagram showing an example of a purchaser removing product I from packaging material P. For example, the purchaser peels off at least a portion of the second security seal SS2 to open the top of the packaging material P. In the example of Figure 6, the second code portion P20 has been peeled off from the top of the packaging material P, damaging the second code C2. The purchaser peels off at least a portion of the first security seal SS1 to remove product I from the packaging material P. In the example of Figure 6, the first code portion P10 has been peeled off from product I, damaging the first code C1.

For example, suppose that a purchaser replaces product I with a counterfeit product. Furthermore, suppose that the purchaser sends a photo of the counterfeit product in packaging material P to the administrator or seller as evidence, and demands a return or refund. In this case, the purchaser can only send a photo in which the first code C1 and second code C2 are damaged, and the first code information and second code information cannot be read, so the purchaser's claim is considered to lack credibility. On the other hand, if the purchaser sends a photo in which the first code C1 and second code C2 are not damaged, and the first code information and second code information can be read, it is considered possible that the seller has shipped the wrong product I.

Figure 7 is a diagram showing an example of a purchaser screen displayed on the purchaser terminal 30. For example, if there is no problem with product I, the purchaser selects button B20 on the purchaser screen SC2 to complete the receipt procedure. The receipt procedure itself may be similar to the flow of a known online flea market. If there is a problem with product I, the purchaser selects button B21 on the purchaser screen SC2. When the purchaser selects button B21, the image capture unit 36 is activated to read the first code C1 and the second code C2.

For example, when the purchaser selects button B21, the purchaser screen SC2 will appear in the state shown in the upper right of FIG. 7. When the purchaser selects button B22, the photographing unit 36 photographs the first code C1 of the first security seal SS1 affixed to the product I in the packaging material P. The purchaser terminal 30 acquires the first code information from the first code C1. When the purchaser selects button B23, the photographing unit 36 does not photograph the first code C1.

For example, if the photographing unit 36 selects button B22 to photograph the first code C1, or if the purchaser selects button B23, the purchaser screen SC2 will be in the state shown in the lower left of Figure 7. If the purchaser selects button B24, the photographing unit 36 photographs the second code C2 of the second security seal SS2 affixed to the product I in the packaging material P. The purchaser terminal 30 acquires the second code information from the second code C2. If the purchaser selects button B25, the photographing unit 36 does not photograph the second code C2.

For example, when the photographing unit 36 selects button B24 to photograph the second code C2, or when the purchaser selects button B25, the purchaser screen SC2 will be in the state shown in the lower right of FIG. 7. When the purchaser selects button B26, the photographing unit 36 photographs the entire packaging material P with the product I inside. When the purchaser selects button B27, the photographing unit 36 does not photograph the entire packaging material P.

For example, the purchaser completes the inquiry procedure by entering the inquiry details on the purchaser screen SC2. When the purchaser completes the inquiry procedure, the purchaser terminal 30 transmits the first code information, the second code information, a photographed image of the entire packaging material P with the product I inside, and the inquiry details to the server 10. When the server 10 receives this information and records it in the memory unit 12, it notifies the administrator terminal 40 that an inquiry has been made. The administrator operates the administrator terminal 40 to check the inquiry details.

Figure 8 is a diagram showing an example of an administrator screen displayed on the administrator terminal 40. For example, the administrator screen SC3 displays information indicating whether the purchaser was able to read each of the first code C1 and the second code C2 with the photographing unit 36. The administrator checks the administrator screen SC3 and determines whether to allow the purchaser to request a return or refund. In the example at the top of Figure 8, both the first code information and the second code information are valid, so it is presumed that the seller shipped the wrong product I. In the example at the bottom of Figure 8, both the first code information and the second code information cannot be read, so it is presumed that the purchaser switched products I.

As described above, in the swap verification system 1, the first security seal SS1 is affixed to the product I. The second security seal SS2 is affixed to the packaging material P. When the manager receives an inquiry from a purchaser, it is determined whether the first code information coded in the first code C1 of the first security seal SS1 and the second code information coded in the second code C2 of the second security seal SS2 are readable. This makes it possible to support the manager's work of verifying whether products have been swapped. The details of the swap verification system 1 will be explained below.

[3. Functions realized by the swap verification system]
FIG. 9 is a diagram showing an example of functions realized by the swap verification system 1.

[3-1. Functions realized by the server]
For example, the server 10 includes a data storage unit 100, a first acquisition unit 101, a first association unit 102, a second acquisition unit 103, and an execution unit 104. The data storage unit 100 is realized by the storage unit 12. The first acquisition unit 101, the first association unit 102, the second acquisition unit 103, and the execution unit 104 are realized by the control unit 11.

[Data storage unit]
The data storage unit 100 stores data necessary for providing services. For example, the data storage unit 100 stores a user database DB1 and a product database DB2.

Figure 10 is a diagram showing an example of user database DB1. User database DB1 is a database that stores various information related to users in the online flea market. Each seller and buyer is a user. For example, user ID, password, name, address, and usage information are stored in user database DB1. Any information related to a user may be stored in user database DB1, and the information stored in user database DB1 is not limited to the example in Figure 10. For example, information related to past usage history may be stored in user database DB1.

The user ID is user identification information that can identify a user. Therefore, any place that says "user ID" can be read as "user identification information." The user identification information may be information other than a user ID and is not limited to a user ID. For example, the user identification information may be an email address or a phone number. The user identification information may be any information that can identify a user in some way. The password is used to log in to the online flea market. The name and address are used as shipping information.

The usage status information is information about the usage status of the online flea market. For example, the usage status information includes at least one of information about the usage status as a seller and information about the usage status as a buyer. The information about the usage status as a seller is the product ID of the product that the user has put up for sale as a seller. The information about the usage status as a buyer is the product ID of the product that the user has purchased as a buyer. The usage status information may include information about various other usage statuses.

Figure 11 is a diagram showing an example of product database DB2. Product database DB2 is a database that stores various information related to products in the online flea market. For example, product database DB2 stores product IDs, product information, seller user IDs, purchaser user IDs, first code information, second code information, transaction status information, and inquiry information. Product database DB2 only needs to store any information related to products, and the information stored in product database DB2 is not limited to the example in Figure 11. For example, product database DB2 may store the deadline for purchasing the product, the date and time the product was purchased, invoice information, or other information.

The product ID is user identification information that can identify a product. Therefore, any place that says "product ID" can be read as "product identification information." The product identification information may be information other than the product ID and is not limited to the product ID. For example, the product identification information may be the product name. The product identification information may be information that can identify the product in some way. The product information is information about the product. For example, the product information includes the product name, price, description, and product image.

For example, when a seller puts up an item on an online flea market, the server 10 issues a product ID for that item so that the product ID does not overlap with the product IDs of other items. The process for putting up an item may be the same as that of a known online flea market. The product ID may be issued based on predetermined rules. The server 10 stores the product ID, product information such as the product name entered by the seller when putting up an item, and the seller's user ID in the product database DB2 in association with each other.

For example, when a purchaser completes the purchase procedure for a product, the server 10 associates the product ID of the product with the user ID of the purchaser and stores them in the product database DB2. The transaction status information is information related to the transaction status of the product. For example, the transaction status information stores the transaction status such as preparing for shipment and being delivered, the date and time when each status was reached, messages exchanged between the seller and the purchaser, and other information. The inquiry information is information related to an inquiry from the purchaser to the administrator. For example, the inquiry information includes the captured image, first code information, and second code information received from the purchaser terminal 30.

[First acquisition unit]
When the code C formed on the security seal SS affixed to the product or the product's packaging material is read by the seller terminal 20 of the seller selling the product, the first acquisition unit 101 acquires code information related to the code C from the seller terminal 20. In this embodiment, an online flea market, which is an example of a personal transaction, is used, so the first acquisition unit 101 acquires code information from the seller terminal 20 of the seller in the personal transaction carried out between the seller and the purchaser. The personal transaction may be another service such as an online auction service.

In this embodiment, the photographing unit 26 reads the code C, but the code C may be read by a reading device other than the photographing unit 26. For example, the other reading device may be a code reader, a reader/writer, or a handheld terminal. The reading of the code C itself can be performed using a method defined by a known standard. For example, when the seller terminal 20 reads the code C, it may transmit code information to the server 10 without requiring any operation by the seller. After reading the code C, the seller terminal 20 may transmit code information to the server 10 when a predetermined operation is performed by the seller. The first acquisition unit 101 may acquire only one piece of code information for one product.

In this embodiment, since a first security seal SS1 and a second security seal SS2 are used, when the first code C1 formed on the first security seal SS1 affixed to the product and the second code C2 formed on the second security seal SS2 affixed to the packaging material are each read by the seller terminal 20, the first acquisition unit 101 acquires first code information regarding the first code C1 and second code information regarding the second code C2 from the seller terminal 20.

For example, the first acquisition unit 101 may acquire the first code information and the second code information from the seller terminal 20 at the same time, or may acquire the first code information and the second code information separately from the seller terminal 20. That is, the timing at which the first acquisition unit 101 acquires the first code information and the timing at which the first acquisition unit 101 acquires the second code information may be the same or different.

[First Association Unit]
The first associating unit 102 associates the product ID with the code information acquired from the seller terminal 20. Associating means making one piece of information searchable from another piece of information. In this embodiment, an example is given of a case where storing multiple pieces of information in the same record in the product database DB2 corresponds to associating. The first associating unit 102 associates the product ID with the code information by storing the product ID and the code information in the same record.

In this embodiment, since the first security seal SS1 and the second security seal SS2 are used, the first association unit 102 associates the product ID with the first code information and the second code information. For example, the first association unit 102 stores the product ID, the first code information, and the second code information in the same record in the product database DB2. Note that the first association unit 102 acquires the product ID to be associated with the first code information and the second code information from the seller terminal 20.

[Second Acquisition Unit]
When the code C is read by the purchaser terminal 30 of the purchaser who purchased the product, the second acquisition unit 103 acquires code information from the purchaser terminal 30. In this embodiment, an online flea market, which is an example of a transaction between individuals, is used, so the second acquisition unit 103 acquires code information from the seller terminal 20 of the purchaser in the transaction between individuals. As with the explanation of the first acquisition unit 101, the reading on the purchaser terminal 30 side may be performed not by the photographing unit 36 but by another reading device such as a code reader, a reader/writer, or a handheld terminal.

In this embodiment, the first security seal SS1 and the second security seal SS2 are used, so the second acquisition unit 103 acquires the first code information and the second code information from the purchaser terminal 30 when each of the first code C1 and the second code C2 is read by the purchaser terminal 30.

For example, the second acquisition unit 103 may acquire the first code information and the second code information from the purchaser terminal 30 at the same time, or may acquire the first code information and the second code information separately from the purchaser terminal 30. That is, the timing at which the second acquisition unit 103 acquires the first code information and the timing at which the second acquisition unit 103 acquires the second code information may be the same or different.

[Executive Department]
The execution unit 104 executes a swap verification process for verifying swapping of a product based on the code information associated with the product ID and the code information acquired from the purchaser terminal 30. The swap verification process is a process for verifying the swapping of a product itself, or a process for supporting a verifier who verifies the swapping of a product. In this embodiment, an example is given in which the administrator is the verifier, but the verifier may be someone other than the administrator. For example, the verifier may be an external organization that has been entrusted with the verification work by the administrator. The words "administrator" may be replaced with any other verifier.

In this embodiment, the execution unit 104 executes a process for displaying an administrator screen SC3 on the administrator terminal 40, which allows the administrator to verify whether a product has been swapped. For example, the execution unit 104 generates display data for the administrator screen SC3 based on the code information associated with the product ID and the code information acquired from the purchaser terminal 30, and transmits the display data to the administrator terminal 40.

The display data may be any data format as long as it is data for displaying some kind of screen on the administrator terminal 40. For example, when the administrator terminal 40 displays the administrator screen SC3 on a browser, the display data is HTML data. When the administrator terminal 40 displays the administrator screen SC3 on an application other than a browser, the display data may be data for displaying some kind of screen in the application (for example, image data such as JPEG).

For example, the execution unit 104 determines whether the code information associated with the product ID is the same as the code information acquired from the purchaser terminal 30. The execution unit 104 displays the determination result of whether the code information associated with the product ID is the same as the code information acquired from the purchaser terminal 30 on the administrator screen SC3. As the determination result, the execution unit 104 displays a message, icon, or other image indicating whether the code information is the same as the code information on the administrator screen SC3. This series of processes may correspond to a swap verification process.

The execution unit 104 may display the code information associated with the product ID and the code information acquired from the purchaser terminal 30 on the administrator screen SC3 without determining whether the code information is the same as the code information acquired from the purchaser terminal 30. Furthermore, the execution unit 104 may display both the code information and the determination result of whether the code information associated with the product ID and the code information acquired from the purchaser terminal 30 are the same as the code information on the administrator screen SC3. This series of processes may correspond to a swap verification process.

The execution unit 104 may also send a notification to the administrator using a method other than the administrator screen SC3. The other method may be any method capable of sending a notification, such as email, a notification on an application or website dedicated to the administrator, a message app, or other method. The execution unit 104 may send a notification such as an email to the administrator as a swap verification process based on the code information associated with the product ID and the code information acquired from the purchaser terminal 30. The notification such as an email includes at least one of the determination result and the code information described above.

For example, the execution unit 104 may execute an estimation process for estimating the person who has switched the product as the switching verification process, based on the code information associated with the product ID and the code information acquired from the purchaser terminal. The estimation process is a process for estimating the person who switched the product, or a process for supporting an estimator who estimates the person who has switched the product. In this embodiment, an example is given in which the administrator is the estimator, but the estimator may be someone other than the administrator. For example, the estimator may be an external organization that has been entrusted with verification work by the administrator.

For example, when code information identical to the code information associated with the product ID is not acquired from the purchaser terminal 30, the execution unit 104 executes the estimation process so that the estimation that the purchaser has switched the product is stronger than when code information identical to the code information associated with the product ID is acquired from the purchaser terminal 30. When code information identical to the code information associated with the product ID is not acquired from the purchaser terminal 30, the execution unit 104 estimates that the purchaser has switched the product. The execution unit 104 may display the estimation result on the administrator screen SC3, or may notify the administrator of the estimation result by a method other than the administrator screen SC3 (for example, email).

For example, when first code information and second code information that are the same as the first code information and second code information associated with the product ID are not acquired from the purchaser terminal 30, the execution unit 104 executes an estimation process so that it is more likely that the purchaser has switched the product than when first code information and second code information that are the same as the first code information and second code information associated with the product ID are acquired from the purchaser terminal 30. When first code information that is the same as the first code information associated with the product ID is not acquired from the purchaser terminal 30 and second code information that is the same as the second code information associated with the product ID is not acquired from the purchaser terminal 30, the execution unit 104 estimates that the purchaser has switched the product.

The estimation process is not limited to the above example. For example, the execution unit 104 may execute the estimation process by calculating a score indicating the suspicion of substitution for each of multiple parties, such as the seller, the delivery person, and the purchaser. The score can be expressed in any format, and may be, for example, a number or a character. When code information identical to the code information associated with the product ID is acquired from the purchaser terminal 30, the execution unit 104 lowers the score of the purchaser and increases the scores of the other parties (here, the seller and the delivery person) compared to when code information identical to the code information associated with the product ID is not acquired from the purchaser terminal 30.

For example, if first code information that is the same as the first code information associated with the product ID is not acquired from the purchaser terminal 30, and second code information that is the same as the second code information associated with the product ID is not acquired from the purchaser terminal 30, the execution unit 104 lowers the purchaser's score and increases the scores of others (here, the seller and the delivery person) compared to when at least one of these is acquired. The execution unit 104 may display the scores on the administrator screen SC3.

In this embodiment, the first security seal SS1 and the second security seal SS2 are used, so the execution unit 104 executes the swap verification process based on the first code information and the second code information associated with the product ID and the first code information and the second code information acquired from the purchaser terminal. In the example of FIG. 8, the execution unit 104 determines whether the first code information that is the same as the first code information associated with the product ID has been acquired from the purchaser terminal 30. The execution unit 104 determines whether the second code information that is the same as the second code information associated with the product ID has been acquired from the purchaser terminal 30. The execution unit 104 displays these two determination results on the administrator screen SC3.

The swap verification process may be any process related to verifying swapping of products, and is not limited to the process described above. For example, the execution unit 104 may execute, as the swap verification process, a process of storing the result of estimation as to whether swapping has occurred in a database. The execution unit 104 may execute, as the swap verification process, a process of initiating the return or refund of a product that is estimated to have been swapped.

[3-2. Functions implemented by the seller terminal]
The seller terminal 20 includes a data storage unit 200, a display control unit 201, and an operation reception unit 202. The data storage unit 200 is realized by the storage unit 22. The display control unit 201 and the operation reception unit 202 are realized by the control unit 21.

[Data storage section]
The data storage unit 200 stores data necessary for a seller to use the online flea market. For example, the data storage unit 200 stores a browser or an application dedicated to the online flea market.

[Display control unit]
The display control unit 201 causes the display unit 25 to display a seller screen SC1 for allowing a seller to use the online flea market.

[Operation reception section]
The operation reception unit 202 receives operations for a seller to use the online flea market. For example, the operation reception unit 202 receives an operation for causing the photographing unit 26 to read the first code C1 and an operation for causing the photographing unit 26 to read the second code C2. The seller terminal 20 transmits to the server 10 the first code information read from the first code C1 and the second code information read from the second code C2.

[3-3. Functions realized by the purchaser terminal]
The purchaser terminal 30 includes a data storage unit 300, a display control unit 301, and an operation reception unit 302. The data storage unit 300 is realized by the storage unit 32. The display control unit 301 and the operation reception unit 302 are realized by the control unit 31.

[Data storage section]
The data storage unit 300 stores data necessary for a purchaser to use the online flea market. For example, the data storage unit 300 stores a browser or an application dedicated to the online flea market.

[Display control unit]
The display control unit 301 causes the display unit 35 to display a purchaser screen SC2 for the purchaser to use the online flea market.

[Operation reception section]
The operation reception unit 302 receives operations for a purchaser to use the online flea market. For example, the operation reception unit 302 receives an operation for causing the photographing unit 36 to read the first code C1 and an operation for causing the photographing unit 36 to read the second code C2. The purchaser terminal 30 transmits to the server 10 the first code information read from the first code C1 and the second code information read from the second code C2.

[3-4. Functions realized by the administrator terminal]
The administrator terminal 40 includes a data storage unit 400, a display control unit 401, and an operation reception unit 402. The data storage unit 400 is realized by the storage unit 42. The display control unit 401 and the operation reception unit 402 are realized by the control unit 41.

[Data storage section]
The data storage unit 400 stores data necessary for the administrator to verify the substitution. For example, the data storage unit 400 stores a browser or an application dedicated to the online flea market.

[Display control unit]
The display control unit 401 causes the display unit 45 to display an administrator screen SC3 for the administrator to verify the substitution. For example, the display control unit 401 may cause at least one of the photographed image of the first code C1, the photographed image of the second code C2, and the photographed image of the exterior of the packaging material P containing the product I, taken by the purchaser, to be displayed on the administrator screen SC3. In this case, the administrator visually checks the state of each photographed image to verify the substitution of the product.

[Operation reception section]
The operation reception unit 402 receives an operation for the administrator to verify the substitution.

[4. Processing Executed by the Switch Verification System 1]
Fig. 12 is a diagram showing an example of processing executed in the swap verification system 1. The processing in Fig. 12 is executed by the control units 11, 21, 31, and 41 operating in accordance with the programs stored in the storage units 12, 22, 32, and 42, respectively. In this embodiment, of the processing executed in the swap verification system 1, processing after the product shipping procedure will be described.

As shown in FIG. 12, processing is executed between the server 10 and the seller terminal 20 to display the seller screen SC1 (S1). When the seller selects button B11, the seller terminal 20 starts the photographing unit 26 and reads the first code C1 and the second code C2 to obtain the first code information and the second code information (S2). The seller terminal 20 transmits the first code information and the second code information to the server 10 (S3).

When the server 10 receives the first code information and the second code information from the seller terminal 20 (S4), it associates the product ID, the first code information, and the second code information of the product that is the subject of the shipping procedure and stores them in the product database DB2 (S5). Then, a process to complete the shipping procedure is executed between the server 10 and the seller terminal 20. Thereafter, the product I packed in the packaging material P is shipped.

Processing is executed between the server 10 and the purchaser terminal 30 to display the purchaser screen SC2 (S6). The purchaser terminal 30 identifies the operation of the purchaser (S7). If button B20 is selected in S7 (S7: B20), processing is executed between the server 10 and the purchaser terminal 30 to complete receipt of the product (S8), and this processing ends. The processing of S8 itself may be processing of a known online flea market.

When button B21 is selected in S7 (S7:B21), the purchaser terminal 30 accepts input of the inquiry content by the purchaser (S9). In S9, as described with reference to FIG. 7, the purchaser terminal 30 accepts selection of button B22 for photographing code C1, selection of button B24 for photographing code C2, and input of the inquiry content. The purchaser terminal 30 transmits the inquiry information to the server 10 (S10). In S10, the purchaser terminal 30 transmits the inquiry information including the first code information, the second code information, the photographed image, and the inquiry content to the server 10.

When the server 10 receives inquiry information from the purchaser terminal 30 (S11), it associates the inquiry information with the product ID of the product that is the subject of the inquiry and stores the inquiry information in the product database DB2 (S12). Then, a process for displaying the administrator screen SC3 is executed between the server 10 and the administrator terminal 40 as a replacement verification process (S13), and this process ends. In S13, the server 10 determines whether the code information associated with the product ID included in the inquiry information received from the purchaser terminal 30 and stored in the product database DB2 is the same as the code information included in the inquiry information received from the purchaser terminal 30. The server 10 generates display data for the administrator screen SC3 based on the result of this determination.

5. Summary of the embodiment
In the present embodiment, the replacement verification system 1 associates the product ID with the code information acquired from the seller terminal 20 when the code C formed on the security seal SS is read by the seller terminal 20. When the code C is read by the buyer terminal 30, the replacement verification system 1 executes a replacement verification process based on the code information associated with the product ID and the code information acquired from the buyer terminal 30. This makes it possible to verify the replacement of the product I using the security seal SS on which the code C is formed. For example, if a buyer replaces the product I contained in the packaging material P with a counterfeit product, the security seal SS is damaged during the replacement, so that the administrator can know that the product I has been removed from the packaging material P. In this case, even if the buyer requests a return or refund, the administrator can infer that the buyer's testimony may be false. The same applies when a person other than the buyer makes the replacement.

Furthermore, when the first code C1 formed on the first security seal SS1 affixed to the product I and the second code C2 formed on the second security seal SS2 affixed to the packaging material P are each read by the seller terminal 20, the swap verification system 1 associates the product ID with the first code information and the second code information. When the first code C1 and the second code C2 are each read by the purchaser terminal 30, the swap verification system 1 executes a swap verification process based on the first code information and the second code information associated with the product ID and the first code information and the second code information acquired from the purchaser terminal 30. This allows the administrator to identify that the product I has been removed from the packaging material P by the first security seal SS1. The administrator can identify that the packaging material P has been opened by the second security seal SS2. This allows the administrator to more accurately verify the swapping of the product I.

Furthermore, the swap verification system 1 executes an inference process for inferring the person who swapped the product I based on the code information associated with the product ID and the code information acquired from the purchaser terminal 30 as a swap verification process. This makes it possible to infer the person who swapped the product I. For example, the swap verification system 1 can promote the soundness of the online flea market by inferring not only whether the product I has been swapped but also who swapped the product I.

Furthermore, when the same code information as the code information associated with the product ID is not acquired from the purchaser terminal 30, the replacement verification system 1 executes an estimation process so that it is more likely that the purchaser has replaced product I than when the same code information as the code information associated with the product ID is acquired from the purchaser terminal 30. This allows for a more accurate estimation of the person who has replaced product I. For example, when the replacement verification system 1 does not receive valid code information from the purchaser terminal 30, the replacement verification process executes a process of displaying on the administrator screen SC3 the possibility that the purchaser has replaced product I. In this case, it becomes easier for the administrator to estimate who has replaced product I.

The swap verification system 1 also acquires code information from the seller terminal 20 of the seller in a personal transaction between a seller and a buyer. The swap verification system 1 acquires code information from the seller terminal 20 of the buyer in a personal transaction. This makes it possible to verify the swapping of product I in a personal transaction.

[6. Modifications]
The present disclosure is not limited to the above-described embodiment, and may be modified as appropriate without departing from the spirit and scope of the present disclosure.

Figure 13 is a diagram showing an example of functions realized in the modified example. In the modified example described below, the second association unit 105, the display control unit 106, the first captured image acquisition unit 107, the first judgment unit 108, the second captured image acquisition unit 109, and the second judgment unit 110 are realized. Each of the second association unit 105, the display control unit 106, the first captured image acquisition unit 107, the first judgment unit 108, the second captured image acquisition unit 109, and the second judgment unit 110 is realized by the control unit 11.

[6-1. Modification 1]
For example, in the embodiment, a case has been exemplified in which an administrator sends a security seal SS to a seller. The server 10 may manage which security seal SS has been sent to which seller. The swap verification system 1 of the first modified example includes a second association unit 105. The second association unit 105 associates the user ID of the seller with code information of the code C formed on the security seal SS delivered to the seller by the administrator of the online flea market used by the seller and the purchaser.

The seller's user ID is an example of seller identification information that can identify the seller. Therefore, the description "seller's user ID" can be read as seller identification information. The seller identification information may be any information other than the seller's user ID as long as it is the seller's user identification information. For example, the seller identification information may be the seller's email address or telephone number. As described in the embodiment, an online flea market is an example of an electronic commerce service.

In the user database DB1 of variant 1, code information coded into the code C of the security seal SS sent by the administrator to the user is stored. Since a purchaser in one transaction may be a seller in another transaction, here, the seller and purchaser are referred to as users without distinction. For example, when the administrator sends a security seal SS to a user, the administrator inputs the user ID of the user and the code information coded into the code C of the security seal SS from the operation unit 44 of the administrator terminal 40.

For example, the second association unit 105 acquires the user ID and code information input by the administrator from the administrator terminal 40. The second association unit 105 associates the user ID and code information acquired from the administrator terminal 40 with each other and stores them in the user database DB1. The user ID and code information may be stored in a database other than the user database DB1. The code C may be formed in advance on the security seal SS, or an image forming device connected to the administrator terminal 40 may form the code C on the security seal SS.

The user ID and code information may not be input from the operation unit 44, but may be stored in the memory unit 42, an external information storage medium, or another computer other than the administrator terminal 40. In this case, the second association unit 105 associates the user ID and code information stored in the memory unit 42, an external information storage medium, or another computer with each other and stores them in the user database DB1. The user ID and code information may be read by a reading device such as a camera or code reader of the administrator terminal 40. In this case, the second association unit 105 associates the user ID and code information read by the reading device of the administrator terminal 40 with each other and stores them in the user database DB1.

The first association unit 102 of the first variant associates the product ID with the code information when code information associated with the seller's user ID is acquired from the seller terminal 20. When some code information is acquired from a seller's seller terminal 20, the first association unit 102 refers to the user database DB1 and determines whether the code information is associated with the seller's user ID. When it is determined that they are associated, the first association unit 102 associates the product ID with the code information.

For example, if code information that is not associated with the seller's user ID is acquired from the seller terminal 20, the first association unit 102 does not associate the product ID with the code information. In this case, there is a possibility that the seller has somehow obtained a security seal SS illegally from another user or has created an illegal security seal SS, so the first association unit 102 does not associate the product ID with the code information. An error message is displayed on the seller screen SC1. In this case, the swap verification system 1 may prevent the seller from completing the shipping procedure, or the product I may be shipped without the security seal SS affixed.

The swap verification system 1 of variant 1 associates the seller's user ID with the code information of the code C formed on the security seal SS delivered from the administrator to the seller. When the code information associated with the seller's user ID is acquired from the seller terminal 20, the swap verification system 1 associates the product ID with the code information. This makes it possible to more accurately verify whether a product has been swapped. For example, if the seller somehow obtains a security seal SS from another user illegally or creates an illegal security seal SS, the seller's user ID will not be associated with the code information, preventing fraud by the seller.

[6-2. Modification 2]
For example, in the first modification, the execution unit 104 may execute the substitution verification process based on the code information associated with the user ID and product ID of the seller and the code information acquired from the purchaser terminal 30. When the execution unit 104 acquires the code information from the purchaser terminal 30 of a purchaser, the execution unit 104 refers to the user database DB1 or the product database DB2 and acquires the code information associated with the product ID of the product purchased by the purchaser.

For example, the execution unit 104 determines whether the code information acquired from the purchaser terminal 30 is the same as the code information acquired from the user database DB1. The execution unit 104 executes the replacement verification process based on the result of the determination as to whether they are the same. The execution unit 104 executes the replacement verification process by displaying the result of the determination as to whether they are the same on the administrator screen SC3.

The swap verification system 1 of the second modified example executes a swap verification process based on the code information associated with the seller's user ID and product ID, and the code information acquired from the purchaser terminal 30. This allows for more accurate verification of product swapping. For example, if a purchaser somehow obtains a security seal SS from another user illegally, or creates a fraudulent security seal SS, the code information associated with the product ID and the code information acquired from the seller terminal 20 are not the same, so fraud by the purchaser can be prevented.

[6-3. Modification 3]
For example, in the embodiment, a case has been taken as an example in which product I is packed in packaging material P in the steps of Figures 3 and 4. This series of steps may be displayed on the seller terminal 20. The swap verification system 1 of variant example 3 includes a display control unit 106. The display control unit 106 causes the seller terminal 20 to display a guidance screen for instructing the seller to affix the code C-forming portion of the security seal SS, in which the code C is formed, to the product I and to affix the other portion to the packaging material P.

The guidance screen includes information showing the procedure described in Figures 3 and 4. This information may be text, images, video, or a combination of these. For example, the display control unit 106 causes the guidance screen to be displayed on the seller terminal 20 by transmitting display data for the guidance screen to the seller terminal 20. The display data may be data for displaying some kind of screen, and may be in any data format. For example, when a browser is used, the display data is HTML data. When an application dedicated to the online flea market is used, the display data may be data for displaying some kind of screen on the application.

The data storage unit 100 of the third modified example stores display data for the guidance screen. The display control unit 106 transmits the display data for the guidance screen stored in the data storage unit 100 to the seller terminal 20. The display control unit 106 may generate final display data for the guidance screen based on the data stored in the data storage unit 100 and transmit the generated display data to the seller terminal 20, rather than transmitting the display data for the guidance screen stored in the data storage unit 100 as is.

The swap verification system 1 of the third modified example displays a guidance screen on the seller terminal 20 to guide the seller so that the portion of the security seal SS on which the code C is formed is affixed to the product I, and the other portion is affixed to the packaging material P. This increases convenience for the seller. The seller can ship the package I in an optimal state for swap verification.

[6-4. Modification 4]
For example, when the packaging material P includes a transparent or translucent member M, image processing may be used to determine whether the product I is appropriately packed in the packaging material P. In the example of Fig. 2, the seller photographs the packaging material P in which the product I is packed, using the photographing unit 26, before or after photographing the first code C1 and the second code C2 from the seller screen SC1. The swap verification system 1 of the fourth modification example includes a first photographed image acquisition unit 107 and a first determination unit 108.

When the packaging material P in which the product I is packed is photographed by the seller terminal 20, the first photographed image acquisition unit 107 acquires a photographed image showing the packaging material P from the seller terminal 20. For example, a message is displayed on the seller screen SC1 prompting the seller to photograph the packed product I from the outside of the packaging material P after packaging is completed. When the seller photographs the packaging material P from the outside of the packaging material P with the photographing unit 26, the seller terminal 20 transmits the photographed image generated by the photographing unit 26 to the server 10.

The first determination unit 108 determines whether or not the security seal SS affixed to the product I is visible from the outside of the packaging material P through the member M, based on the captured image. For example, the first determination unit 108 determines whether or not the code C is detectable, based on the captured image. If the first determination unit 108 determines that the code C is detectable, it determines that the security seal SS is visible from the outside of the packaging material P through the member M. If the first determination unit 108 determines that the code C is not detectable, it determines that the security seal SS is not visible from the outside of the packaging material P through the member M.

The first determination unit 108 may determine whether or not component M is shown in the captured image based on a template image showing the side of the packaging material P including component M and the captured image received from the seller terminal 20. Furthermore, the first determination unit 108 may determine whether or not component M is shown in the captured image by using a machine learning model that has learned the characteristics of component M. The machine learning model itself may be a known model used in image processing. The first determination unit 108 determines whether component M is shown in the captured image and whether the security seal SS is visible from the outside of the packaging material P through component M.

The swap verification system 1 of the fourth modification executes a predetermined process based on the judgment result of the first judgment unit 108. In the fourth modification, a process of permitting shipment by the seller is described as an example of the predetermined process, but the predetermined process may be any process that has been determined in advance, and may be other processes. For example, the predetermined process may be a process of presuming that the seller has swapped a product when swapping has occurred, a process of increasing the score indicating that the seller has swapped a product, or a process of sending some kind of notification to the seller or an administrator.

For example, if the switch verification system 1 determines that the security seal SS affixed to the product I is not visible from the outside of the packaging material P through the member M, it does not permit the seller to ship the product, and if it determines that the security seal SS affixed to the product I is visible from the outside of the packaging material P through the member M, it permits the seller to ship the product. In variant example 4, a case will be described in which allowing the seller to select button B12 on the seller screen SC1 in the upper left of FIG. 2 corresponds to permitting shipping, but it is sufficient for the seller to complete the shipping procedure to correspond to permitting shipping. For example, changing the transaction status to indicate that the shipping procedure has been completed, or displaying button B12, may correspond to permitting shipping.

The swap verification system 1 of the fourth variant determines, based on the captured image, whether or not the security seal SS attached to the product I is visible from the outside of the packaging material P through the member M. This allows the seller to ship the product I in an appropriate condition.

[6-5. Modification 5]
For example, a security seal SS may have a plurality of codes C formed thereon. Different code information is encoded in each code C, but the same code information may also be encoded in each code C. The number of codes C formed on one security seal SS may be any number. For example, two, three, or more codes C may be formed on one security seal SS. Furthermore, a bar code and a two-dimensional code may be mixed on one security seal SS.

When each of the multiple codes C formed on the security seal SS is read by the seller terminal 20, the first acquisition unit 101 acquires code information for each of the multiple codes C from the seller terminal 20. The procedure for reading each code C is the same as in the embodiment. The seller terminal 20 may transmit the multiple code information to the server 10 all at once, or may transmit each of the multiple code information separately.

The first association unit 102 of the seventh modified example associates a product ID with each piece of code information of a plurality of codes C. The first association unit 102 associates a plurality of pieces of code information with one product ID. The process for associating each piece of code information with a product ID is the same as in the embodiment.

When each of the multiple codes C is read by the purchaser terminal 30, the second acquisition unit 103 acquires code information for each of the multiple codes C from the purchaser terminal 30. The procedure for reading each individual code C is the same as in the embodiment. The purchaser terminal 30 may transmit the multiple pieces of code information to the server 10 all at once, or may transmit each piece of code information separately.

The execution unit 104 executes a swap verification process using the code information of each of the multiple codes C associated with the product ID and the code information of each of the multiple codes C acquired from the purchaser terminal 30. For example, the execution unit 104 counts the number of pieces of code information that are the same and that are received from the purchaser terminal 30, among the multiple pieces of code information associated with the product ID. The execution unit 104 executes the swap verification process by displaying the counted number on the administrator screen SC3.

The swap verification system 1 of variant 5 associates the product ID with the code information of each of the multiple codes C when each of the multiple codes C formed on the security seal SS is read by the seller terminal 20. When each of the multiple codes C is read by the purchaser terminal 30, the swap verification system 1 executes a swap verification process with the code information of each of the multiple codes C associated with the product ID and the code information of each of the multiple codes C obtained from the purchaser terminal 30. This makes it possible to verify the swapping of products.

[6-6. Modification 6]
For example, in the fourth modification, the seller photographs the packed packaging material P, but the purchaser may perform a similar process. The swap verification system 1 of the sixth modification includes a second photographed image acquisition unit 109 and a second determination unit 110.

The second captured image acquisition unit 109 acquires a captured image showing the packaging material P from the purchaser terminal 30 when the packaging material P in which the product I is packed is photographed by the purchaser terminal 30. For example, a message is displayed on the purchaser screen SC2 after the product I arrives, encouraging the purchaser to photograph the packaged product I from the outside of the packaging material P. When the purchaser photographs the packaging material P from the outside of the packaging material P using the photographing unit 36, the purchaser terminal 30 transmits the photographed image generated by the photographing unit 36 to the server 10.

The second determination unit 110 determines whether or not the security seal SS affixed to the product I is visible from the outside of the packaging material P through the member M, based on the captured image. For example, the second determination unit 110 determines whether or not the code C is detectable, based on the captured image. If the second determination unit 110 determines that the code C is detectable, it determines that the security seal SS is visible from the outside of the packaging material P through the member M. If the second determination unit 110 determines that the code C is not detectable, it determines that the security seal SS is not visible from the outside of the packaging material P through the member M.

The second determination unit 110 may determine whether or not the component M is shown in the captured image based on a template image showing the side of the packaging material P including the component M and the captured image received from the purchaser terminal 30. Furthermore, the second determination unit 110 may determine whether or not the component M is shown in the captured image by using a machine learning model that has learned the characteristics of the component M. The machine learning model itself may be a known model used in image processing. The second determination unit 110 determines whether or not the component M is shown in the captured image and whether or not the security seal SS is visible from the outside of the packaging material P through the component M.

The swap verification system 1 of the sixth modification executes a predetermined process based on the judgment result of the second judgment unit 110. In the sixth modification, a process of permitting the purchaser to complete the receipt procedure is described as an example of the predetermined process, but the predetermined process may be any process that has been determined in advance, and may also be other processes. For example, the predetermined process may be a process of presuming that the purchaser has swapped the product when swapping has occurred, a process of increasing the score indicating that the purchaser has swapped the product, or a process of sending some kind of notification to the purchaser or an administrator.

For example, if the switch verification system 1 determines that the security seal SS affixed to the product I is not visible from the outside of the packaging material P through the member M, it does not permit the purchaser to complete the receipt procedure, and if it determines that the security seal SS affixed to the product I is visible from the outside of the packaging material P through the member M, it permits the purchaser to complete the receipt procedure. In variant example 6, a case is described in which allowing the purchaser to select button B20 on the purchaser screen SC2 in the upper left of FIG. 7 corresponds to permitting the receipt procedure, but, for example, changing the transaction status to indicate that the receipt procedure has been completed, or displaying button B20, may also correspond to permitting the receipt procedure.

The swap verification system 1 of the sixth modified example determines, based on the captured image, whether the security seal SS attached to the product I is visible from the outside of the packaging material P through the member M. This allows for more accurate verification of swapping of products.

[6-7. Modification 7]
For example, the security seal SS is not limited to the example of the embodiment. In the seventh modification, a security seal SS including a first sheet on which code information is formed and a second sheet on which a fixed portion for reading the code information is formed is taken as an example. The fixed portion is a portion determined by the code standard, such as a finder pattern (extraction symbol) of a two-dimensional code, an alignment pattern, a timing pattern, format information, or a combination of these. The fixed portion may be a start character portion of a barcode, a stop character portion, or a combination of these.

Figure 14 is a diagram showing an example of a security seal SS of variant 7. In the example of Figure 14, a case will be described where the standard part is a finder pattern. For example, the first sheet p1 has code information formed thereon. The code information here is the part other than the standard part. In other words, the code information is the part that is to be encoded. The first sheet p1 does not have a two-dimensional code finder pattern formed thereon. The second sheet p2 has a two-dimensional code finder pattern formed thereon. The second sheet p2 does not have code information formed thereon.

In the seventh modified example, the first sheet p1 is simply a piece of paper that does not have an adhesive surface, and the second sheet p2 is a type of security seal. The portions of the second sheet p2 other than the standard portion are transparent or semi-transparent. Therefore, when the seller attaches the second sheet p2 over the first sheet p1, the security seal SS is completed. The seller attaches the first sheet p1 to the product I or packaging material P by pressing the second sheet p2 down from above. The first sheet p1 and the second sheet p2 may both be a type of security seal. The security seal SS may be of a type in which the seller attaches the first sheet p1 over the second sheet p2. In other words, either the first sheet p1 or the second sheet p2 may be on top.

The first acquisition unit 101 of the seventh variant acquires code information from the seller terminal 20 when the seller terminal 20 reads a security seal SS including a first sheet of paper on which code information is formed and a second sheet of paper on which a standard portion for reading the code information is formed. The second acquisition unit 103 acquires code information from the purchaser terminal 30 when the purchaser terminal 30 reads a security seal SS including the first sheet of paper and the second sheet of paper. The processing of the first acquisition unit 101 and the second acquisition unit 103 is the same as in the embodiment.

The swap verification system 1 of variant 7 acquires code information from the seller terminal 20 when the seller terminal 20 reads a security seal SS including a first sheet of paper on which code information is formed and a second sheet of paper on which a standard portion for reading the code information is formed. The swap verification system 1 acquires code information from the purchaser terminal 30 when the purchaser terminal 30 reads a security seal SS including the first sheet of paper and the second sheet of paper. This makes it possible to more accurately verify the swapping of product I. Furthermore, it becomes more difficult for malicious individuals to counterfeit the security seal SS.

[6-8. Modification 8]
For example, multiple products I may be packed in one packaging material P. In this case, a separate security seal SS may be affixed to each product I. The first acquisition unit 101 in the eighth modification acquires code information from the seller terminal 20 when the seller terminal 20 reads the code C formed on the security seal SS affixed to each of the multiple products I or to the packaging material P in which the multiple products I are packed. The process of acquiring code information from the security seal SS affixed to each product I is as described in the embodiment.

The second acquisition unit 103 of the eighth modified example acquires code information from the purchaser terminal when the code C formed on the security seal SS affixed to each of the multiple products I or to the packaging material P that packs the multiple products I is read by the purchaser terminal 30. The process of acquiring code information from the security seal SS affixed to each product I is as described in the embodiment.

The swap verification system 1 of variant 8 acquires code information from the seller terminal 20 when the seller terminal 20 reads the code C formed on the security seal SS affixed to each of the multiple products I or to the packaging material P in which the multiple products I are packed. The swap verification system 1 acquires code information from the purchaser terminal 30 when the purchaser terminal 30 reads the code C formed on the security seal SS affixed to each of the multiple products I or to the packaging material P in which the multiple products I are packed. This allows for more accurate verification of swapping of products I.

[6-9. Modification 9]
For example, a malicious purchaser may switch the product by cutting the security seal SS without peeling it off. In the example of Fig. 6, a malicious purchaser may open the top of the packaging material P by cutting the portion of the security seal SS2 that connects the top surface of the packaging material P to the side surface of the packaging material P. A malicious purchaser may remove the product I by cutting the portion of the security seal SS1 that connects the product I to the bottom surface of the packaging material P.

To prevent fraud such as that described above, the server 10 of the swap verification system 1 may cause the purchaser terminal 30 to acquire an image showing the situation around the code C on the security seal SS when the purchaser terminal 30 reads the code information from the security seal SS on the packaging material P, and transmit the image together with the code information to the server 10. The situation around the code C is all or part of the part of the security seal SS other than the code C.

For example, when the server 10 of the swap verification system 1 detects a linear object (e.g., a line indicating the cut surface of the security seal SS) from the security seal SS in the image, indicating that the security seal SS has been cut, it may treat the code information read by the purchaser terminal 30 as invalid code information and determine a judgment result indicating that swapping has occurred. The server 10 may use a known image processing model to detect objects indicating an abnormality, such as a cut, in the security seal SS.

The swap verification system 1 of variant 9 can prevent malicious purchasers from circumventing the swap verification process of the present invention by cutting the security seal SS without peeling it off. Furthermore, the server 10 of the swap verification system 1 may, after receiving inquiry information from the purchaser terminal 30, cause the purchaser terminal 30 to again acquire an image showing the code information and/or the situation around code C and transmit it to the server 10. Here, the server 10 may add a timestamp to the image showing the code information and/or the situation around code C that is again transmitted from the purchaser terminal 30 to the server 10. These points are the same for the embodiment and variants 1 to 8.

[6-10. Other Modifications]
For example, the above-described modifications may be combined.

For example, the functions described as being realized by the server 10 may be realized by at least one computer in the swap verification system 1, or the functions may be shared among multiple computers. In this case, the sharing of functions may be realized by each of the multiple computers transmitting its own processing results to the other computers. For example, the functions described as being realized by the server 10 may be realized by the administrator terminal 40.

[7. Notes]
For example, the swap verification system according to the present disclosure can be configured as follows.
(1)
a first acquisition unit that acquires code information relating to a code formed on a security seal attached to a product or a packaging material of the product from a seller terminal of a seller who sells the product when the code is read by the seller terminal;
a first association unit that associates product identification information capable of identifying the product with the code information acquired from the seller terminal;
a second acquisition unit that acquires the code information from a purchaser terminal of a purchaser who has purchased the product when the code is read by the purchaser terminal of the purchaser;
an execution unit that executes a swap verification process for verifying whether the product has been swapped based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
A swap verification system including:
(2)
the first acquisition unit acquires, when a first code formed on a first security seal affixed to the product and a second code formed on a second security seal affixed to the packaging material are each read by the seller terminal, first code information relating to the first code and second code information relating to the second code from the seller terminal;
The first associating unit associates the product identification information with the first code information and the second code information;
the second acquisition unit acquires the first code information and the second code information from the purchaser terminal when the first code and the second code are read by the purchaser terminal,
The execution unit executes the substitution verification process based on the first code information and the second code information associated with the product identification information and the first code information and the second code information acquired from the purchaser terminal.
The substitution verification system according to (1).
(3)
The said swap verification system further includes a second association unit that associates seller identification information capable of identifying the seller with the code information of the code formed on the security seal delivered to the seller from an administrator of an electronic commerce service used by the seller and the purchaser,
the first associating unit associates the product identification information with the code information when the code information associated with the seller identification information is acquired from the seller terminal;
The swap verification system according to (1) or (2).
(4)
The execution unit executes the substitution verification process based on the code information associated with the seller identification information and the product identification information and the code information acquired from the purchaser terminal.
The substitution verification system according to (3).
(5)
The swap verification system further includes a display control unit that causes the seller terminal to display a guidance screen for instructing the seller to affix a code portion of the security seal, in which the code is formed, to the product and to affix the other portion to the packaging material.
A swap verification system according to any one of (1) to (4).
(6)
The execution unit executes, as the swap verification process, an estimation process for estimating a person who swapped the product, based on the code information associated with the product identification information and the code information acquired from the purchaser terminal.
A swap verification system according to any one of (1) to (5).
(7)
the execution unit executes the inference process such that, when the code information is not obtained from the purchaser terminal and is the same as the code information associated with the product identification information, it is more likely that the purchaser has switched the product than when the code information is obtained from the purchaser terminal and is the same as the code information associated with the product identification information.
(6) A swap verification system according to (6).
(8)
The packaging material includes a transparent or translucent material,
The swap verification system includes:
a first captured image acquisition unit that acquires a captured image showing the packaging material from the seller terminal when the packaging material in which the product is packed is photographed by the seller terminal;
a first determination unit that determines whether or not the security seal attached to the product is visible from outside the packaging material through the member based on the captured image;
A swap verification system according to any one of (1) to (7).
(9)
the first acquisition unit acquires, when each of the plurality of codes formed on the security seal is read by the seller terminal, the code information of each of the plurality of codes from the seller terminal;
The first associating unit associates the product identification information with the code information of each of the plurality of codes;
the second acquisition unit acquires, when each of the plurality of codes is read by the purchaser terminal, the code information of each of the plurality of codes from the purchaser terminal;
the execution unit executes the substitution verification process using the code information of each of the plurality of codes associated with the product identification information and the code information of each of the plurality of codes acquired from the purchaser terminal;
A swap verification system according to any one of (1) to (8).
(10)
The packaging material includes a transparent or translucent material,
The swap verification system includes:
a second captured image acquisition unit that acquires a captured image showing the packaging material from the purchaser terminal when the packaging material in which the product is packed is photographed by the purchaser terminal;
a second determination unit that determines whether or not the security seal attached to the product is visible from outside the packaging material through the member based on the captured image;
The swap verification system according to any one of (1) to (9), further comprising:
(11)
the first acquisition unit acquires the code information from the seller terminal when the security seal including a first sheet on which the code information is formed and a second sheet on which a fixed portion for reading the code information is formed is read by the seller terminal;
the second acquisition unit acquires the code information from the purchaser terminal when the security seal including the first paper and the second paper is read by the purchaser terminal.
The swap verification system according to any one of (1) to (10).
(12)
the first acquisition unit acquires the code information from the seller terminal when the code formed on the security seal affixed to each of the plurality of products or to the packaging material for packaging the plurality of products is read by the seller terminal;
the second acquisition unit acquires the code information from the purchaser terminal when the code formed on the security seal attached to each of the plurality of products or to the packaging material for packaging the plurality of products is read by the purchaser terminal;
A swap verification system according to any one of (1) to (11).
(13)
The first acquisition unit acquires the code information from the seller terminal of the seller in a personal transaction conducted between the seller and the purchaser,
The second acquisition unit acquires the code information from the seller terminal of the purchaser in the person-to-person transaction.
A swap verification system according to any one of (1) to (12).

1 Switching verification system, N Network, 10 Server, 11, 21, 31, 41 Control unit, 12, 22, 32, 42 Memory unit, 13, 23, 33, 43 Communication unit, 20 Seller terminal, 24, 34, 44 Operation unit, 25, 35, 45 Display unit, 26, 36 Photography unit, 30 Purchaser terminal, 40 Administrator terminal, 100 Data storage unit, 101 First acquisition unit, 102 First association unit, 103 Second acquisition unit, 104 Execution unit, 105 Second association unit, 106 Display control unit, 107 First captured image acquisition unit, 108 Second captured image acquisition unit, 109 Second judgment unit, 200 Data storage unit, 201 Display control unit, 202 Operation reception unit, 300 Data storage unit, 301 Display control unit, 302 Operation reception unit, 400 Data storage unit, 401 display control unit, 402 operation reception unit, B10, B11, B12, B13, B14, B15, B16, B20, B21, B22, B23, B24, B25, B26, B27 buttons, DB1 user database, DB2 product database, P10 first code part, P11 other parts, P20 second code part, P21 other parts, SC1 seller screen, SC2 purchaser screen, SC3 administrator screen.

Claims (14)

a second association unit that associates seller identification information capable of identifying a seller who sells a product with code information regarding a code formed on a security seal delivered to the seller by an administrator of an electronic commerce service used by the seller and a purchaser who purchased the product;
a first acquisition unit that acquires the code information from a seller terminal when the code formed on the security seal attached to the product or a packaging material of the product is read by the seller terminal of the seller ;
a first association unit that associates, when the code information associated with the seller identification information is acquired from the seller terminal, product identification information capable of identifying the product with the code information acquired from the seller terminal;
a second acquisition unit that acquires the code information from the purchaser terminal when the code is read by the purchaser terminal of the purchaser ;
an execution unit that executes a swap verification process for verifying whether the product has been swapped based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
A swap verification system including: a first acquisition unit that acquires code information relating to a code formed on a security seal attached to a product or a packaging material for the product, the packaging material including a transparent or semi-transparent member, when the security seal is read by a seller terminal of a seller who sells the product;
a first association unit that associates product identification information capable of identifying the product with the code information acquired from the seller terminal;
a first captured image acquisition unit that acquires a captured image showing the packaging material from the seller terminal when the packaging material in which the product is packed is photographed by the seller terminal;
a first determination unit that determines whether or not the security seal attached to the product is visible from outside the packaging material through the member based on the captured image;
a second acquisition unit that acquires the code information from a purchaser terminal of a purchaser who has purchased the product when the code is read by the purchaser terminal of the purchaser;
an execution unit that executes a swap verification process for verifying whether the product has been swapped based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
A swap verification system including : a first acquisition unit that acquires code information relating to a code formed on a security seal attached to a product or a packaging material for the product, the packaging material including a transparent or semi-transparent member, when the security seal is read by a seller terminal of a seller who sells the product;
a first association unit that associates product identification information capable of identifying the product with the code information acquired from the seller terminal;
a second acquisition unit that acquires the code information from a purchaser terminal of a purchaser who has purchased the product when the code is read by the purchaser terminal of the purchaser;
an execution unit that executes a swap verification process for verifying whether the product has been swapped based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
a second captured image acquisition unit that acquires a captured image showing the packaging material from the purchaser terminal when the packaging material in which the product is packed is photographed by the purchaser terminal;
a second determination unit that determines whether or not the security seal attached to the product is visible from outside the packaging material through the member based on the captured image;
A swap verification system including : The execution unit executes the substitution verification process based on the code information associated with the seller identification information and the product identification information and the code information acquired from the purchaser terminal.
The swap verification system according to claim 1 . the first acquisition unit acquires, when a first code formed on a first security seal affixed to the product and a second code formed on a second security seal affixed to the packaging material are each read by the seller terminal, first code information relating to the first code and second code information relating to the second code from the seller terminal;
The first associating unit associates the product identification information with the first code information and the second code information;
the second acquisition unit acquires the first code information and the second code information from the purchaser terminal when the first code and the second code are read by the purchaser terminal,
The execution unit executes the substitution verification process based on the first code information and the second code information associated with the product identification information and the first code information and the second code information acquired from the purchaser terminal.
The swap verification system according to any one of claims 1 to 4 . The swap verification system further includes a display control unit that causes the seller terminal to display a guidance screen for instructing the seller to affix a code portion of the security seal, in which the code is formed, to the product and to affix the other portion to the packaging material.
The swap verification system according to any one of claims 1 to 4 . The execution unit executes, as the swap verification process, an estimation process for estimating a person who has swapped the product, based on the code information associated with the product identification information and the code information acquired from the purchaser terminal.
The swap verification system according to any one of claims 1 to 4 . the execution unit executes the inference process such that, when the code information is not obtained from the purchaser terminal and is the same as the code information associated with the product identification information, it is more likely that the purchaser has switched the product than when the code information is obtained from the purchaser terminal and is the same as the code information associated with the product identification information.
The swap verification system according to claim 7 . the first acquisition unit acquires, when each of the plurality of codes formed on the security seal is read by the seller terminal, the code information of each of the plurality of codes from the seller terminal;
The first associating unit associates the product identification information with the code information of each of the plurality of codes;
the second acquisition unit acquires, when each of the plurality of codes is read by the purchaser terminal, the code information of each of the plurality of codes from the purchaser terminal;
the execution unit executes the substitution verification process using the code information of each of the plurality of codes associated with the product identification information and the code information of each of the plurality of codes acquired from the purchaser terminal;
The swap verification system according to any one of claims 1 to 4 . the first acquisition unit acquires the code information from the seller terminal when the security seal including a first sheet on which the code information is formed and a second sheet on which a fixed portion for reading the code information is formed is read by the seller terminal;
the second acquisition unit acquires the code information from the purchaser terminal when the security seal including the first paper and the second paper is read by the purchaser terminal.
The swap verification system according to any one of claims 1 to 4 . the first acquisition unit acquires the code information from the seller terminal when the code formed on the security seal affixed to each of the plurality of products or to the packaging material for packaging the plurality of products is read by the seller terminal;
the second acquisition unit acquires the code information from the purchaser terminal when the code formed on the security seal attached to each of the plurality of products or to the packaging material for packaging the plurality of products is read by the purchaser terminal;
The swap verification system according to any one of claims 1 to 4 . The first acquisition unit acquires the code information from the seller terminal of the seller in a personal transaction conducted between the seller and the purchaser,
The second acquisition unit acquires the code information from the seller terminal of the purchaser in the person-to-person transaction.
The swap verification system according to any one of claims 1 to 4 . a second association step of associating seller identification information capable of identifying a seller who sells a product with code information regarding a code formed on a security seal delivered to the seller by an administrator of an electronic commerce service used by the seller and a purchaser who purchased the product;
a first acquisition step of acquiring the code information from a seller terminal of the seller when the code formed on the security seal attached to the product or a packaging material of the product is read by the seller terminal of the seller ;
a first association step of associating, when the code information associated with the seller identification information is acquired from the seller terminal, product identification information capable of identifying the product with the code information acquired from the seller terminal;
a second acquisition step of acquiring the code information from the purchaser terminal when the code is read by the purchaser terminal of the purchaser ;
an execution step of executing a substitution verification process for verifying the substitution of the product based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
A swap verification method including: a second association unit that associates seller identification information capable of identifying a seller who sells a product with code information regarding a code formed on a security seal delivered to the seller by an administrator of an electronic commerce service used by the seller and a purchaser who purchased the product;
a first acquisition unit that acquires the code information from a seller terminal of the seller when the code formed on the security seal attached to the product or a packaging material of the product is read by the seller terminal of the seller ;
a first association unit that, when the code information associated with the seller identification information is acquired from the seller terminal, associates product identification information capable of identifying the product with the code information acquired from the seller terminal;
a second acquisition unit that acquires the code information from the purchaser terminal when the code is read by the purchaser terminal of the purchaser ;
an execution unit that executes a swap verification process for verifying swapping of the product based on the code information associated with the product identification information and the code information acquired from the purchaser terminal;
A program that makes a computer function as a

Images