WO2021040359A1 - Visitor management method and system using qr code - Google Patents

Abstract

The present invention provides a visitor management method using a QR code, the method comprising the steps in which: a QR code verification module receives a QR code generated from a QR code generation module; the QR code verification module extracts an authentication virtual code from the QR code; the QR code verification module verifies the QR code on the basis of the authentication virtual code; and the QR code verification module matches the reception time of the QR code with the authentication virtual code and stores same, wherein the QR code is generated on the basis of the authentication virtual code generated through an authentication virtual code generation function included in the QR code generation module.

Description

Visitor management method and system using QR code

The present invention relates to a method and apparatus for managing a visitor using a QR code generated based on a virtual code for authentication.

OTP (One Time Password) is a user authentication method that uses a one-time password with a random number generated at random. The OTP authentication method is a system introduced to reinforce security, and because a one-time password is generated each time a login is performed to perform user authentication, it is possible to overcome a security vulnerability caused by repeated use of the same password.

Due to Corona 19, personal information (name, contact information, address, etc.) of the visitor is directly written in order to identify visitors to offline business sites, but this is inconvenient that it takes a long time to enter and exit because the visitor must manually write it Reluctance to provide personal information to workplaces has caused a number of problems of falsely recording personal information. In addition, in the case of existing authentication methods such as tokens, network costs are incurred every time of authentication, and there is a problem that it cannot be used in environments where network use is restricted. Specifically, in the case of mobile phone SMS authentication, costs are incurred every time a text message is sent for authentication.

Since both Koreans and foreigners who cannot use the mobile network must be able to authenticate visitors, even if the visitor's user terminal cannot use the network, it must be able to generate a visitor record by generating a virtual authentication code and providing it as a QR code. . In addition, if the network of offline stores in which visitor records (i.e., guestbooks) must be generated is restricted, the network of the administrator's user terminal may also be restricted. It should be possible to prevent access by using a QR code or a previously generated QR code.

In addition, since visitors do not want their personal information to be leaked, the code provided to the administrator cannot identify the user with the code alone, and there should be no possibility of being stolen because it changes every time.

On the other hand, as a prior art document, there is Korean Patent Registration No. 10-1316466 (2013.10.01).

The problem to be solved by the present invention is to provide a visitor management method and system that enables a visitor who cannot use a network to perform visitor authentication by generating a disposable QR code.

In addition, the problem to be solved by the present invention is to provide a visitor management method and system capable of preventing an administrator from performing visitor authentication by stealing a QR code.

In addition, the problem to be solved by the present invention is to provide a visitor management method and system capable of preventing leakage of visitor information to others.

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems that are not mentioned will be clearly understood by those skilled in the art from the following description.

The present invention for solving the above process, the QR code verification module receiving a QR code generated from the QR code generation module, the QR code verification module extracting a virtual code for authentication from the QR code, the A QR code verification module verifying a QR code based on the authentication virtual code, and the QR code verification module matching the receiving time of the QR code and the authentication virtual code and storing the QR code. The code provides a visitor management method using a QR code generated based on a virtual code for authentication generated through a virtual code generation function for authentication included in the QR code generation module.

In addition, the present invention provides a user authentication program using a virtual code for authentication, stored in a medium in order to execute the visitor management method using the QR code in combination with a computer as hardware.

In addition, the present invention, using a detailed code generation unit that generates one or more detailed codes based on user information registered in the QR code generation device, and a virtual code generation function for authentication, a virtual authentication for authentication in which the one or more detailed codes are combined. Provides a QR code generation device for visitor authentication comprising a virtual code generation unit for generating a code, a QR code generation unit for generating a QR code based on the virtual code for authentication, and a QR code providing unit for outputting the QR code. .

In addition, the present invention, a QR code receiving unit for receiving a QR code, a virtual code extraction unit for extracting a virtual code for authentication from the QR code, a QR code verification unit for verifying the QR code based on the virtual code for authentication, A virtual code storage unit that matches and stores the authentication virtual code and the reception time of the QR code, or at a request from the server, or at a preset time interval, the stored authentication virtual code and the QR code reception time to the server. It provides a QR code verification device for visitor authentication including a transmitting virtual code providing unit.

In addition, the present invention, a virtual code receiving unit for receiving a reception point of the stored QR code matched to the plurality of authentication virtual codes and the plurality of authentication virtual codes from the QR code verification module, in each of the plurality of authentication virtual codes A detailed code extracting unit for extracting at least one detailed code, and a storage location search unit for searching a storage location of user information corresponding to each of the plurality of authentication virtual codes, based on the at least one detailed code, the The server provides a server for authenticating a visitor that matches and stores the location information corresponding to the QR code reception time and the QR code verification module in the storage location.

The user authentication method using the virtual code for authentication of the present invention as described above and the effects provided by the system therefor will be described as follows.

First, it provides an effect that visitors can temporarily perform visitor authentication by forming a disposable QR code even in an environment without a network.

Second, after a certain period of time from the time when the QR code is generated, visitor authentication cannot be performed using the QR code, so it provides an effect of preventing other people from stealing the QR code to perform visitor authentication. .

Third, since the visitor's information is not stored in the administrator's terminal, it provides an effect that there is no fear of leakage of the visitor's personal information.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a conceptual diagram showing a QR code.

2 is a block diagram of a visitor management system using a QR code according to an embodiment of the present invention.

3 is a block diagram of a QR code generating device according to an embodiment of the present invention.

4 is a block diagram of a QR code verification device according to an embodiment of the present invention.

5 is a configuration diagram of a server according to an embodiment of the present invention.

6 and 7 are flowcharts of a visitor management method using a virtual code for authentication according to an embodiment of the present invention.

8 is an exemplary diagram of a storage location search algorithm for searching a storage location of user information through a k-shaped cloud movement according to an embodiment of the present invention.

9 is an exemplary view for explaining verification of a virtual code for authentication according to an embodiment of the present invention.

10 is an exemplary diagram of a storage location search algorithm for searching a storage location of user information by moving on a track based on a detailed code according to an embodiment of the present invention.

11 is an exemplary diagram illustrating a storage space of a server according to an embodiment of the present invention.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in a variety of different forms. It is provided to fully inform the skilled person of the scope of the present invention, and the present invention is only defined by the scope of the claims.

The terms used in the present specification are for describing exemplary embodiments and are not intended to limit the present invention. In this specification, the singular form also includes the plural form unless specifically stated in the phrase. As used herein, “comprises” and/or “comprising” do not exclude the presence or addition of one or more other elements other than the mentioned elements. Throughout the specification, the same reference numerals refer to the same elements, and "and/or" includes each and all combinations of one or more of the mentioned elements. Although "first", "second", and the like are used to describe various elements, it goes without saying that these elements are not limited by these terms. These terms are only used to distinguish one component from another component. Therefore, it goes without saying that the first component mentioned below may be the second component within the technical idea of the present invention.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used with meanings that can be commonly understood by those of ordinary skill in the art to which the present invention belongs. In addition, terms defined in a commonly used dictionary are not interpreted ideally or excessively unless explicitly defined specifically.

In the present specification,'visitor authentication' refers to an act of providing a QR code to a QR code verification means as a procedure for verifying the identity of a user when a user visits a specific place or passes through a specific area.

In the present specification,'character' is a constituent element constituting a code, and includes all or at least one of uppercase letters, lowercase letters, numbers, and special characters.

In this specification,'code' means a character string in which characters are listed.

In the present specification, the'virtual code for authentication' is a code generated by the virtual code generation means for authentication, and means a code used to perform user authentication by the virtual code verification means for authentication. That is, the'virtual code for authentication' refers to a virtual code temporarily assigned for each unit count so that user information can be extracted and verified.

In this specification, the'detail code' means a partial code included in the virtual code for authentication.

In this specification, the'unit count' is a unit defined as being set at a specific time interval and changing as the time interval elapses. For example, 1 count may be set and used at a specific time interval (eg, 1.5 seconds).

In this specification, the'authentication virtual code generation function' means a function used to generate the authentication virtual code.

In the present specification, "cloud movement" means that the object rotates while performing a translational motion. That is,'cloud movement' refers to moving while performing a rotational motion and a translational motion together, and means that each point of a rotating object moves while in turn contacting the moving axis.

In this specification,'UID (user identification)' refers to a value in the form of a unique code that is not duplicated for each user to identify a user.

In this specification, the'storage location' means a point (count) on a track corresponding to a time point at which user information registration is requested by a user.

In this specification,'user information' means information that can identify a user. For example,'user information' may include personal information (eg, name, phone number, resident registration number, etc.) of a user who owns a terminal generating a QR code to be described later. In addition, for example, the'user information' may include user identification information (eg, UID to be described later) used to generate a virtual code included in the QR code.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram showing a QR code.

Referring to FIG. 1, a QR (Quick Response) code is a two-dimensional grid pattern barcode. The QR code can contain a maximum of 7089 characters, a maximum of 4296 characters (ASDII), and a maximum of 1817 Asian characters such as Chinese characters.

The QR code can be freely generated by the QR code generation program. Specifically, the QR code generation program may receive letters and numbers and generate a QR code based on them. The generated QR code may be printed through a separate printing means, or may be displayed through a display unit included in a terminal having a built-in QR code generation program. As described above, the QR code can be generated by installing a QR code generation program in an existing terminal without having to separately provide a QR code generation device.

The printed QR code or the QR code displayed on the display may be transmitted to the QR code verification means by the QR code receiving means. Specifically, the QR code receiving means may be an optical device such as a camera. In one embodiment, a camera included in a terminal equipped with a QR code verification means may be used as a QR code receiving means. When receiving a QR code scan request, the QR code verification means activates a camera included in the terminal and scans the printed QR code or the QR code displayed on the display. As described above, the QR code can be received by installing a QR code verification program in an existing terminal without having to separately provide a QR code receiving device.

2 is a block diagram of a visitor management system using a QR code according to an embodiment of the present invention.

As shown in FIG. 2, the user authentication system includes a QR code generating means 10, a QR code verifying means 20, and a server 30.

The QR code generation means 10 refers to a device in which a dedicated program or a dedicated application (hereinafter, a dedicated program) for generating a QR code is built-in or installed.

In one embodiment, the QR code generating means 10 may be initially registered in the server 30 to be described later. A method of initially registering the QR code generating means 10 will be described later.

In addition, as an embodiment, the dedicated program serves to generate a QR code for authenticating a visitor. Here, the dedicated program generates a QR code based on a separately generated virtual code for authentication.

The authentication virtual code is a code consisting of a combination of letters and numbers, and can be converted into a QR code based on a QR code generation rule. The authentication virtual code may be generated by a virtual code generator built into the dedicated program. The virtual code generator may generate a virtual code for authentication based on user information. Here, the user information may be information stored in both the QR code generating means 10 and the server 30.

In summary, the QR code generation unit 10 generates a QR code based on information stored in both the QR code generation unit 10 and the server 30.

On the other hand, the user information need not necessarily be stored in the memory built in the QR code generating means (10). For example, user information may be stored in a separate card or wearable device capable of wireless communication, and the user allows the terminal in which the user information is stored to transmit the user information to the QR code generating unit 10, thereby generating a QR code (10) You can have this QR virtual code generated.

Meanwhile, the dedicated program includes a virtual code generation function for authentication, and generates a virtual code for authentication using user information. For example, the dedicated program generates a virtual code for authentication by using user information as seed data of a virtual code generation function for authentication. Here, the user information may be User Identification (UID).

In addition, in one embodiment, the dedicated program serves to register the QR code generation means 10 to the server 30. That is, the user installs the dedicated program in the QR code generating means 10 (ie, the user terminal), and the dedicated program transmits user information to the server 30 to register. However, the present invention is not limited thereto, and the dedicated program may be a program built into the QR code generating means 10 when leaving the factory.

As a specific example, the dedicated program receives user information from a user at the time of registration or generates user information based on login information of the user's dedicated program. After that, the dedicated program transmits user information to the server 30. As the server 30 registers user information in a specific count, the dedicated program receives setting data for specifying a virtual code generation function for authentication or a virtual code generation function for authentication from the server 30. Through this, the dedicated program may include an authentication virtual code generation function that generates an authentication virtual code capable of searching for a specific count in which user information is registered in the server 30.

The dedicated program generates a virtual code for authentication based on user information whenever there is a user request, and then generates a QR code based on the generated virtual code for authentication. Since the virtual code for authentication is a code that is not duplicated every time, the QR code is also generated so that it is not duplicated every time.

The QR code verification means 20 refers to a device in which a dedicated program or a dedicated application (hereinafter, a verification program) for verifying the QR code is built-in or installed.

The verification program activates a camera included in the device in which the verification program is installed so that a QR code can be photographed. An image file corresponding to the QR code output through the camera shooting is created. The verification program verifies whether the image file including the QR code generated through the camera includes the QR code generated correctly.

Specifically, the verification program recognizes the QR code from the QR code image generated through the camera, and converts the recognized QR code into a virtual code for authentication. At this time, the same rules as those applied when generating the QR code may be applied. Accordingly, when converting the QR code into a virtual code for authentication, it is possible to obtain the same code as the virtual code for authentication that was the basis for generating the QR code.

Thereafter, the verification program verifies whether the virtual code for authentication converted from the QR code is a normally generated code, and if the virtual code for authentication is a code that is normally generated, the QR code image includes a QR code that is normally generated. I can judge. A method of verifying the QR code by the QR code verification means 20 will be described later.

Meanwhile, in the present specification, for convenience of explanation, the QR code verification means 20 generates a QR code image by activating the camera, and the QR code verification means 20 recognizes the QR code from the QR code image. Express that you receive The time when the QR code verification means 20 receives the QR code may be a time when a QR code image is generated through a camera or a time when a QR code is recognized from the QR code image. On the other hand, the QR code verification means 20 can receive the QR code in a variety of ways other than the above-described method, the point at which the QR code verification means 20 receives the QR code depends on the method of receiving the QR code. It can be different.

When it is determined that the QR code received by the QR code verification means 20 is a normally generated QR code, the QR code verification means 20 matches the time of receiving the QR code with the virtual code for authentication converted from the QR code. And save it.

Thereafter, the QR code verification means 20 transmits to the server 30 a time when the server 30 requests or receives the stored authentication virtual code and QR code at predetermined time intervals.

In a specific embodiment, the QR code verification means 20 verifies only that the QR code is a QR code generated within a predetermined time from the time when a visitor authentication request is made, and then receives a virtual code for authentication and a QR code extracted from the QR code. The time point is transmitted to the server 30. When the server to be described later is separated into a storage server and a verification server, the QR code verification means 20 transmits a virtual code for authentication and a QR code reception time point to the storage server.

The above-described QR code generation means 10 and QR code verification means 20 may be embedded or installed in a mobile terminal having a display, a camera, and a wireless communication unit.

In one embodiment, a user who wants to visit or pass through a specific area registers user information on the server 30 by installing a QR code generation means 10, and then performs visitor authentication through the QR code generation means 10. You can generate and present a QR code every time.

In one embodiment, a visitor manager in a specific area may install a QR code verification means 20 to scan a QR code presented by a visitor to check whether the QR code is a normally generated QR code, and store the visitor's visit record. have.

In another embodiment, when the visitor authentication is performed non-face-to-face, the QR code verification means 20 may be interlocked with the opening and closing device. The opening and closing device may switch to an open state only when the QR code received by the QR code verification means 20 is a normally generated QR code, so that the visitor enters a specific area or passes through a specific area. To this end, the QR code verification means 20 may be built-in or installed in the opening and closing device. In this case, the opening and closing device must have an optical device, a communication unit, and a storage unit capable of receiving a QR code. However, the present invention is not limited thereto, and the QR code verification means 20 can control the opening and closing device, and the QR code verification means 20 is a separate device including an optical device, a communication unit, and a storage unit capable of receiving a QR code. Can be built in or installed.

Meanwhile, the QR code verification means 20 may be registered in the server 30. Specifically, information related to a device (hereinafter, referred to as a QR code verification device) in which the QR code verification means 20 is built-in or installed in the server 30 may be matched with information related to the location of the device and stored.

For example, when the QR code verification means 20 is initially registered with the server 30, the serial number of the QR code verification device and the location information of the QR code verification device are transmitted to the server 30, and the server 30 The serial number of the code verification device and the location information of the QR code verification device are matched and stored. Here, the location information of the QR code verification device is information input from the user when registering the QR code verification means 20 with the server 30, or the GPS information collected from the GPS information collection unit provided in the QR code verification device. I can. If the location of the QR code verification device is changed even after the QR code verification device is registered on the server, the location information of the QR code verification device can be updated.

After the QR code verification means 20 is registered in the server 30, when the server 30 receives a virtual code for authentication from the QR code verification means 20, the server 30 is the QR code verification means 20 ) And user information extracted from the received virtual code for authentication may be matched and stored. This will be described later.

The QR code verification means 20 receives and verifies the QR code from the plurality of QR code generation means 10, and the QR code verification means 20 corresponds to a plurality of virtual codes for authentication and a plurality of virtual codes for authentication, respectively. When the QR code is received is stored.

Meanwhile, when it is determined that the received QR code is a normally generated QR code, the QR code verification means 20 may immediately transmit a virtual code for authentication and a time of reception of the QR code to the server 30. That is, the time of receiving the virtual code for authentication and the QR code is not stored in the device in which the QR code verification means 20 is installed, but may be directly transmitted to the server 30. Through this, it is possible to prevent the administrator from arbitrarily deleting visitor information. In one embodiment, when the server 30 to be described later is composed of a storage server and a verification server separated from each other, the QR code verification means 20 may transmit the virtual code for authentication and the time of receiving the QR code to the storage server. . A specific embodiment in which the server 30 includes a storage server and a verification server separated from each other will be described later.

The server 30 receives a plurality of authentication virtual codes and a QR code reception time corresponding to each of the plurality of authentication virtual codes from the plurality of QR code verification means 20, and receives user information from each of the authentication virtual codes. After extraction, the user information, the point of reception of the QR code, and the location information corresponding to the QR code verification means 20 are matched and stored. Through this, the server 30 is able to grasp which place the plurality of visitors visited and passed through at what point in time.

As described above, the QR code generated by the QR code generating means 10 cannot be used after a certain period of time, so even if the QR code is leaked, there is no fear that other people will use the leaked QR code to perform visitor authentication. .

In addition, the QR code verification means 20 only verifies whether the received QR code is a normal QR code, and user information cannot be extracted from the QR code.

In addition, since the user information is stored only in the server 30, even if the virtual code for authentication stored in the QR code verification means 20 is leaked, the user information is not leaked. Therefore, according to the present invention, there is no fear of leakage of user information (eg, user's personal information) by the QR code verification means 20.

3 is a block diagram of a QR code generating device according to an embodiment of the present invention.

As shown in Fig. 3, the QR code generation device 100 includes a detailed code generation unit 110, a virtual code generation unit 120, and a QR code generation unit 130 and a QR code providing unit 140. .

The QR code generating device 100 may be a user terminal in which a program (ie, an application) for generating a QR code is installed, as an embodiment. The QR code generating device 100 is the QR code generating means 10 described above.

After receiving the QR code generation request from the user, the QR code generating device 100 generates a virtual code for authentication, and generates a QR code based on the generated virtual code for authentication.

In one embodiment, when the QR code generation device 100 receives a QR code generation request from a user, the QR code generation device 100 activates a biometric authentication means provided in the QR code generation device 100 so that the user can perform biometric authentication. can do. Here, the biometric authentication is to perform user authentication through at least one of the user's fingerprint, iris, vein, and face recognition, and the user registers biometric information in the QR code generation device 100 in advance and then each QR code generation request Biometric authentication can be performed.

To this end, the QR code generating device 100 must have a means for recognizing biometric information. For example, the QR code generation apparatus 100 may include at least one of a fingerprint recognition sensor, an iris recognition sensor, a vein recognition sensor, and a face recognition sensor. However, in addition to the above-described biometric information recognition means, the QR code generating apparatus 100 may include various biometric information recognition means.

Meanwhile, the QR code generating device 100 may generate a QR code only when a user performs biometric authentication. Through this, it is possible to prevent another person from performing visitor authentication using the user's QR code generating device 100 or from denying that another person has performed visitor authentication through the user's QR code.

On the other hand, the QR code generating device 100 may not generate a new QR code for a predetermined time after generating the QR code. Through this, it is possible to prevent the authentication of a plurality of visitors through one QR code generating device 100.

The detailed code generation unit 110 plays a role of generating one or more detailed codes based on user information.

The authentication virtual code generation function includes one or more detailed code generation functions. For example, if the virtual code for authentication includes a plurality of detailed codes, the virtual code generation function for authentication generates a plurality of detailed codes using a plurality of detailed code generation functions, and combines the plurality of detailed codes. Generate a virtual code for authentication by using the code combination function.

At this time, the authentication virtual code is generated for each unit count by the QR code generating device 100, that is, a dedicated program 11 built-in or installed inside the user terminal, and means a mobile OTP (mobile one time password, mOTP). do.

In one embodiment, the QR code generating device 100 may use at least some of the user information stored in the QR code generating device 100 as one of the seed data of the virtual code generation function for authentication. As a specific example, the detailed code generation unit 110 generates each detailed code by using the UID as the seed data of each detailed code generation function using one detailed code generation function. In this case, the detailed code generation unit 110 may generate each detailed code using a time point or a count value at which the QR code generation is requested from the user.

In one embodiment, the detailed code generation unit 110 may generate a first code and a second code, including a first function and a second function as a detailed code generation function. At this time, the QR code generation device 100 only includes a first function for generating a first code and a second function for generating a second code as detailed code generation functions, in order to increase security. It may not include data on the correlation of the code.

The virtual code generation unit 120 plays a role of generating a virtual code for authentication by combining one or more detailed codes using a virtual code generation function for authentication. In one embodiment, the authentication virtual code is generated by combining a plurality of detailed codes according to a specific rule. The authentication virtual code generation function includes a rule for assembling a plurality of detailed codes (that is, a detailed code combining function). That is, the virtual code generation unit 120 may combine one or more detailed codes using a detailed code combining function included in the authentication virtual code generation function.

Various methods can be applied as a method of generating one authentication virtual code by combining a plurality of detailed codes. As an example of the detailed code combining function, the authentication virtual code generation unit 120 may generate an authentication virtual code by alternately arranging an N-digit first code and an N-digit second code. In addition, as another example, the detailed code combining function may be a function that combines the second code after the first code. As the number of detailed codes included in the authentication virtual code increases, various detailed code combining functions can be generated.

In addition, as an embodiment, when a virtual code for authentication is generated in a combination according to a specific rule of the first code and the second code, the first code and the second code store the UID in the storage location search algorithm where user information is stored. Each can play a role in navigating a location. For example, the first code sets the start point of the storage location search, and the second code sets the search path from the start point to the storage location of the UID according to a specific search method. That is, when the virtual code for authentication that is normally generated for each unit count is provided by the QR code generating device 100, the server 30 moves from the search start point corresponding to the first code to the search path corresponding to the second code. One point is determined as the point where user information is stored (i.e., the UID storage location). A specific method of searching for the storage location of the UID based on the first code and the second code constituting the virtual code for authentication will be described later.

On the other hand, the QR code generation device 100 combines the first and second codes and a first virtual security code that is changed for each count from the initial time when the detailed code generation function is driven regardless of the user to generate a virtual code for authentication. Can be formed.

The first virtual security code is formed by the same seed data (hereinafter, referred to as first seed data) regardless of the user, and is changed for each unit count. Since the first virtual security code is formed identically in all QR code generation devices 100, when different QR code generation devices 100 form the first virtual security code at the same time, the same code is formed.

In contrast, the first and second codes are formed by different seed data (hereinafter, referred to as second seed data) according to the user, and may include a second virtual security code that is changed for each unit count. Each of the first and second virtual security codes is formed to have different values even if they are formed at the same time. The second virtual security code may be included in at least one of the first and second codes, and even if different QR code generating apparatuses 100 are formed at the same time, they are formed with different values.

The above-described QR code verification means 20 may include only an algorithm for extracting the first virtual security code from the virtual code for authentication and an algorithm for generating the first virtual security code. When the QR code is received, the QR code verification means 20 converts the received QR code into a virtual code for authentication, and extracts only the first virtual security code from the converted virtual code for authentication. Thereafter, when the QR code verification means 20 has a code that matches the extracted first virtual security code among the first virtual security codes generated within a predetermined unit count from the time the QR code is received, the QR code is normally It can be determined that it is a formed QR code. That is, the QR code verification means 20 may be made so that no information related to a specific user can be extracted from the virtual code for authentication.

The first virtual security code may be used in addition to the above-described method for generating a virtual code for authentication and a method for generating a virtual code for authentication to be described later.

On the other hand, the above-described authentication virtual code includes any one of a terminal unique value of the terminal (ie, the QR code generating device 100) installed with the QR code generation module 10 and a unique value generated through the user's biometric information. can do. Through this, the present invention can prevent the visitor from denying the fact that the person has visited the QR code used for visitor authentication. However, the unique value that can be included in the authentication virtual code for preventing visitor denial is not limited thereto.

Meanwhile, the authentication virtual code may include time information at which the QR code generation request is authorized. The time information may be used by a QR code verification device to be described later to verify the QR code. This will be described later.

On the other hand, as an embodiment of a method in which the detailed code generation unit 110 generates a detailed code, the detailed code generation unit 110 generates a new detailed code for each unit count, and accordingly, the QR code generation device 100 A new authentication virtual code is generated for each unit count. The virtual code for authentication that is newly generated for each unit count is not duplicated. Specifically, the detailed code generation unit 110, the authentication virtual code newly generated for each unit count is not duplicated for a predetermined period of time to a specific user or a specific QR code generation device 100, and belongs to a specific group. It can be set so that it is not duplicated between users.

As a specific embodiment of preventing duplicate generation of a virtual code for authentication, when generating an N-digit first code or a second code with M characters, the detailed code generation function included in the authentication virtual code generation function is MN Two codes may be generated as a first code or a second code, and each code is matched for each count from an initial point at which the detailed code generation function is driven. For example, when the unit count is set to 1 second, different MN codes are matched every second from the time when the detailed code generation function is initially driven. And, the period of using a specific detailed code generation function or the period of use of the QR code generation device 100 (for example, the validity period of the user terminal on which the application generating the virtual code for authentication is installed) is a time length corresponding to the MN count. (For example, if one count is 1 second, MN seconds), if the time length is shorter than that of the first code or the second code, the same code is not duplicated during the use period. That is, when the count increases with the passage of time, when the user requests the QR code generation device 100 to generate a virtual code for authentication at a specific time, the QR code generation device 100 has a count corresponding to the specific time. The code value matched to may be generated as a first code or a second code.

Specifically, if capital letters and numbers from 0 to 9 are used as characters that can be included in the code (i.e., 36 characters are used), and 6 digits are allocated to the first and second codes respectively, the QR code The generating device 100 may provide 366 codes as the first code and the second code. At this time, the QR code generation apparatus 100 may match each code for each count, and thus provide a first code and a second code changed for each count.

As another specific embodiment of preventing duplicate generation of a virtual code for authentication, a function for generating a first code or a second code (i.e., a first function or a second code) when the use period of the QR code generating device 100 elapses. 2) or by changing the matching relationship between the first code and the second code so that a virtual code for authentication different from the previous use cycle is generated. When the authentication virtual code is combined with the first code generated by the first function and the second code generated by the second function, when the first code generation function or the second code generation function is changed, the QR code generation device 100 may apply a virtual code generation function for authentication, which generates a virtual code for authentication different from the previous cycle, to the new use cycle, as the order in which the first code or the second code appears is different from the previous use cycle. In addition, the QR code generation device 100 prevents the same code as the authentication virtual code used in the previous use cycle from appearing as the authentication virtual code for each count in the new use cycle (that is, the first function generated according to the first function). The first function and the second function may be selected so that the matching relationship between the first code and the second code generated according to the second function is not included in the matching relationship included in the previous use period in all counts of the new use period. In other words, after the use cycle in which MN codes can be applied once has passed, the virtual code for authentication in a new use cycle in which the virtual code for authentication overlapping with the previous use cycle is not generated by adjusting or updating the virtual code generation function for authentication. Generation function can be applied.

In addition, as another specific embodiment that prevents duplicate generation of virtual codes for authentication, the first code is the initial point at which the first function is driven so that duplicate virtual codes for authentication are not generated regardless of the user in the entire cycle. From among the codes matched for each count, set as a code value corresponding to the time (or count) at which the QR code generation request was made, and the second code reflects a value (e.g., UID) that always exists differently at the same time. It is set as the generated code value, and the authentication virtual code can be used as a code value in which the first code and the second code are combined. The first code has a different code value for each count, and the second code has a different code value for each UID at the same time, so that the authentication virtual code combined with the first code and the second code has different code values at all times. Will be printed.

In another embodiment, as the authentication virtual code generation function (or detailed code generation function), any one of a plurality of enumeration rules for listing M characters in ascending order is applied. That is, the QR code generation apparatus 100 may variously apply a rule of listing M characters in ascending order to the detailed code generation function included in the authentication virtual code generation function. For example, the order of listing uppercase alphabetic letters in ascending order is the general order of A, B, C,... , Z can be in the order, A, C, B,... , May be in the Z order. As the enumeration rule is changed in the authentication virtual code generation function, the order in which the codes are matched in turn with each count from the initial point in which the authentication virtual code generation function is operated is changed.

The QR code generation unit 130 converts the virtual code for authentication generated in the above-described manner into a QR code according to the QR code generation rule. The QR code generation device 100 and the QR code verification device 200 used for visitor authentication may include the same QR code generation rule.

The QR code providing unit 140 is a means for outputting the generated QR code, and may be a display provided in the QR code generating device 100.

4 is a block diagram of a QR code verification device according to an embodiment of the present invention.

Referring to FIG. 4, the QR code verification apparatus 200 may be a user terminal in which a program (ie, an application) for verifying a QR code is installed, as an embodiment. The QR code verification device 200 is the QR code verification means 20 described above.

As shown in Fig. 4, the QR code verification device 200 includes a QR code receiving unit 210, a virtual code extracting unit 220, a QR code verification unit 230, a virtual code storage unit 240, and a virtual code. Including study (250).

The QR code receiver 210 may be a camera provided in the QR code verification device 200. However, the present invention is not limited thereto, and the QR code receiving unit 210 may include an optical device capable of imaging a printed QR code or a QR code displayed on a display device.

The virtual code extraction unit 220 recognizes the QR code from the QR code image, and converts the recognized QR code into a virtual code for authentication. To this end, the virtual code extracting unit 220 may include the same rules as the QR code generation rule embedded in the QR code generation device 100. Through this, the virtual code extracting unit 220 may extract a virtual code for authentication identical to the virtual code for authentication formed in the QR code generating device 100 from the received QR code.

The QR code verification unit 230 verifies whether the virtual code for authentication extracted by the virtual code extraction unit 220 is a normally formed code. Specifically, the QR code verification unit 230 extracts a virtual security code (OTP) that is changed for each unit count from the virtual code for authentication, and whether the extracted OTP is a virtual security code formed within a predetermined count from the time when the QR code is received. Judge.

In an embodiment, the virtual security code extracted from the virtual code for authentication is formed by the same first seed data regardless of the user, and may be a first virtual security code that is changed for each unit count. Since the first virtual security code is formed identically in all QR code generation devices 100, when different QR code generation devices 100 form the first virtual security code at the same time, the same code is formed.

The QR code verification unit 230 may have the same function as the virtual security code generation function provided in the QR code generation device 100, and after generating a virtual security code within a predetermined count from the time when the QR code is received , It is determined whether there is a code identical to the virtual security code extracted from the virtual code for authentication among the generated virtual security codes.

The QR code verification unit 230 determines that the QR code is normal if there is a code identical to the virtual security code extracted from the virtual code for authentication among the generated virtual security codes. In an embodiment, when it is determined that the QR code is normal, the QR code verification device 200 may output a message informing it. The administrator can check the message and allow the visitor to enter.

When the QR code verification device 200 receives the QR code after a predetermined time has elapsed from the time when the QR code is generated, the QR code verification unit 230 determines that the received QR code is not a normally generated QR code. , The QR code verification device 200 may be configured to output a warning message. The administrator can check the warning message and deny access to the visitor.

In another embodiment, when the virtual code for authentication includes information on a request time for generating a QR code, the QR code verification unit 230 compares the time information with the current time, and the current time corresponds to the time information. It is judged that the QR code is normal only when it is within a predetermined time from.

In another embodiment, the QR code verification unit 230 generates a virtual security code based on the time information and then determines whether it is the same as the virtual security code extracted from the authentication virtual code. When the generated virtual security code is the same as the virtual security code extracted from the virtual code for authentication, the QR code verification unit 230 determines that the QR code is normal.

In one embodiment, when the QR code verification device 200 is interlocked with the opening and closing device, the QR code verification device 200 opens the opening and closing device only when the received QR code is a normally generated QR code, and the QR code If it is determined that is an abnormally generated QR code, the opening and closing device is not opened.

As described above, according to the present invention, even if the QR code generated by the QR code generating device is leaked, it cannot be used after a predetermined period of time, so that other people cannot use the leaked QR code to authenticate visitors.

The above-described QR code verification unit 230 may include only a function for extracting the first virtual security code from the virtual code for authentication and a function for generating the first virtual security code. Accordingly, the QR code verification device 200 only determines that the QR code is a normally generated code, and cannot extract any user information from the QR code. Through this, the present invention can prevent the leakage of user information through the QR code verification device 200.

When it is determined that the received QR code is a normally generated QR code, the virtual code storage unit 240 matches and stores the authentication virtual code extracted from the QR code with the QR code reception time point. When the QR code verification device 200 performs a plurality of visitor authentication, the virtual code storage unit 240 stores a plurality of authentication virtual codes and a QR code reception point matching each of the plurality of authentication virtual codes. .

The virtual code providing unit 260 transmits to the server 30 the time of receiving the stored QR code matched with the virtual code for authentication and the virtual code for authentication stored whenever the server 30 requests or at predetermined time intervals. In addition, the virtual code providing unit 260 may transmit to the server 30 the time of receiving the stored QR code matched with the virtual code for authentication and the virtual code for authentication as soon as the QR code is verified.

As shown in FIG. 5, the server 30 or 300 includes a virtual code receiving unit 310, a detailed code extracting unit 320, a virtual code verification unit 330, and a storage location search unit 330. The server 30 extracts user information based on the virtual code for authentication, searches for a storage location corresponding to the extracted user information, and stores the searched user information by matching the visited place and time of the user.

The virtual code receiving unit 310 receives a virtual code for authentication and a point of time of receiving the QR code from the QR code verification device 200.

The detailed code extracting unit 320 serves to extract one or more detailed codes included in the virtual code for authentication.

In one embodiment, the detailed code extracting unit 320 includes a detailed code combining function included in the authentication virtual code generation function. Accordingly, when the authentication virtual code includes a plurality of detailed codes, the detailed code extracting unit 220 may extract a plurality of detailed codes from the authentication virtual codes by applying the detailed code combining function. For example, in the case of generating a virtual code for authentication in which two detailed codes (ie, a first code and a second code) are combined in the QR code generation device 100, the detailed code extraction unit 320 is The first code and the second code can be separated by applying the detailed code combining function to the character arrangement of the code.

In another embodiment, when the QR code generating device 100 generates a virtual code for authentication in which three detailed codes (ie, a first code, a second code, and a first virtual security code) are combined, the detailed code The extraction unit 320 may separate the first code, the second code, and the first virtual security code by applying a detailed code combining function to the character array of the virtual code for authentication.

The storage location search unit 330 serves to search for a storage location of user information in a storage location search algorithm based on the extracted one or more detailed codes. Here, the storage location search algorithm is matched to the authentication virtual code generation function used when generating the authentication virtual code in the QR code generation device 100. Various methods may be applied as a method in which the storage location search unit 330 searches for a storage location of user information based on each detailed code. In order for the storage location search unit 330 to search for a storage location based on a plurality of detailed codes, a correlation may be included between the detailed codes.

Here, the storage location means a point (count) on the track corresponding to the time point at which the registration of the virtual code generating means 10 is requested by the user. That is, when the track for the QR code generating means 10 is driven in the server 30, and a specific user information (for example, UID) is requested to be registered by a specific user at a specific time, corresponding to the corresponding time. The corresponding UID is registered in the count (that is, the count that has elapsed from the time of the last driving of the track to the time of registration). In addition, other types of user information are matched and stored in the storage location of the corresponding UID. The storage format of user information will be described later.

In this specification, for convenience of explanation, the case where the user information extracted from the authentication security code by the server 30 is a UID is described as an example, but the present specification is not limited thereto, and the server 30 provides various types of authentication security codes. User information can be extracted.

When the authentication virtual code is composed of a first code and a second code, in an embodiment having a correlation between the detailed codes, the storage location search unit 330 determines a search start point corresponding to the first code, The point moved according to the search path corresponding to the second code from the search start point can be found as the storage location of the UID. That is, the detailed code may include a first code for setting a starting point of the storage location search and a second code for setting a search path from the starting point to the storage location of the UID according to a specific search method. .

In addition, in another embodiment, as the QR code generation device 100 provides a new authentication virtual code for each unit count, the QR code verification device 200 uses the first code and the second code that are changed for each count. Based on the search start point and search path, you can search the storage location of UID.

In addition, in another embodiment, the storage location search unit 330 may include a storage location search algorithm to find the storage location of the UID using a plurality of detailed codes having correlations. The storage location search algorithm is an algorithm that enables storage location search when each detailed code included in the authentication virtual code is applied, and the authentication virtual code used when generating the authentication virtual code in the QR code generator 100 is applied. It matches the code generation function.

For example, if the virtual code for authentication includes a first code that determines the search start point of the storage location and a second code that indicates the direction of the storage location from the search start point, the storage location search algorithm is in the first code. When a direction corresponding to the second code is indicated at a corresponding point, the storage location matching the registration time of the UID is arranged at the corresponding location.

By using the storage location search algorithm, the server 30 can search the UID storage location even if the first code and the second code included in the authentication virtual code are changed. Various methods can be applied to the storage location search algorithm, and a specific example will be described later. However, the storage location search algorithm is not limited to the examples described later.

For example, referring to FIG. 8, the storage location search algorithm is a k-corner (k is MN) in which clouds move along a track in which MN codes corresponding to the first code are listed, and the vertex of the k-corner is a first code track. When moving while corresponding to the point where the code is placed on the image, each vertex of the k-angle matches the storage location of the UID, and the point where the first code track (i.e., the first track) and the k-angle correspond to the first code It can be the starting point for searching the storage location corresponding to. In this case, the storage location search unit 330 may cloud-mov the k-angle so that a vertex of the k-angle is in contact with a point corresponding to the first code extracted from the detailed code extracting unit 220. Through this, the storage location search unit 330 is an angle corresponding to the second code at the position on the first track where the k-angle is in contact (for example, a specific angle divided by 180 degrees into MN to face the vertex of the k-angle) As indicated by, it is possible to search the vertex of the k-square, which is the storage location where the UID corresponding to the authentication virtual code is stored.

Specifically, as shown in FIG. 8, the server 30 cloud moves the k-angle to a point corresponding to the first code (that is, moves while making each vertex of the k-angle and each point on the track contact in turn). After that, the server 30 searches for a vertex corresponding to the storage location by instructing the angular direction corresponding to the second code.

After the storage location search unit 330 searches for the storage location of the UID using the first code and the second code in the authentication virtual code in the storage location search algorithm, the user's visit location and visit to the searched storage location Match the time and save it.

A detailed description of the other various storage location search algorithms will be described later.

The virtual code verification unit 340 compares the time when the QR code is received and the time when the authentication virtual code is generated using the authentication virtual code generation function in the QR code generation means (ie, the user terminal), and calculates the authentication virtual code. It plays the role of verifying. That is, the virtual code verification unit 340 does not verify the validity of the authentication virtual code based on the time when the authentication virtual code is received from the QR code verification unit, but when the QR code received together with the authentication virtual code is received. Based on, verify the validity of the virtual code for authentication.

As an embodiment, referring to FIG. 10, the virtual code verification unit 340 uses the virtual code generation function for authentication at the time of receiving the QR code and in the dedicated program 11 embedded or installed in the user terminal. By comparing the generated time points, when the generation time point falls within a preset error range from the reception time point, it may be determined that the received authentication virtual code is a normal code.

In addition, as another embodiment of the method of verifying the virtual code for authentication, the first code and the second code are randomly generated from the time when the UID is registered or the time when the QR code generation is requested by the virtual code generation means 10 It may be a code for a reference count added as much as the OTP code to be used.

In a specific embodiment, the QR code generation device 100 generates the virtual security code by reflecting it on the first code and the second code without outputting it to the outside. The authentication virtual code generation means (e.g., a dedicated program) generates a virtual security code value (e.g., OTP code) based on the UID (i.e., unique value), and generates the virtual security code value at the time of UID registration. A first code of the added count is generated, and a second code of the count corresponding to the virtual security code value is generated (ie, the virtual security code itself is generated as a second code). That is, the first code and the second code are generated based on the count shifted by the virtual security code value from the point A registered in the server 30 by the QR code generating device 100. The count shifted from the point A may be a count before or after the count corresponding to the current point according to the generated virtual security code value. The server 30 may search the UID storage location (or registration location) by applying the received first code and the second code to the storage location search algorithm. Through this, it is impossible for others to check the order in which the first code and the second code constituting the virtual code for authentication are provided, so that security can be improved.

In addition, in another embodiment, the server 30 extracts the virtual security code from the second code generated based on the virtual security code, and then receives the virtual code for authentication with a virtual security code generation function (ie, OTP function). It is checked whether there is a value that matches the virtual security code among the calculated OTP numbers by entering a count within a specific range from one count. The server 30 obtains the virtual security code value (that is, the OTP function value) used to generate the second code by applying the inverse function of the second function to the second code, and calculates the same value as the virtual security code value. I find it. As there is a difference between the time when the virtual security code is generated in the virtual code generation means for authentication and the time when the QR code verification means receives the QR code due to the transmission time or delay of the virtual code for authentication, the QR code verification means is the QR code. Since the count received from and the count generated by the OTP number corresponding to the virtual security code may not match, the server 30 allows an error range from the count receiving the QR code. Through this, the server 30 can select a virtual code for authentication formed by a normal method, so that security can be improved.

In addition, as another embodiment, referring to FIG. 9, the server 30 generates a first code corresponding to the count of adding the UID to the time at which the visitor authentication is requested (or the time at which the QR code is received) (time B), and , A second code corresponding to the count difference between the UID registration time (time A) and the user authentication request time (time B) plus the virtual security code value is generated. That is, the formula for generating the first code and the second code by the dedicated program for generating a virtual code for authentication is as follows.

1st code = f1 (B time point count + virtual security code)

Second code = f2 (Time B count-Time A count + virtual security code)

(Point A: UID registration point, point B: count of user authentication request point, virtual security code: OTP number)

The server 30 searches for the location where the UID is stored based on the first code and the second code in the received authentication virtual code, and based on this, a virtual security code within a specific count range from the time of receiving the visitor authentication request (i.e., OTP Number).

Thereafter, the server 30 finds the UID registration time (point A) by searching for the point where the user information is stored based on the first code and the second code. The server 30 calculates a calculated value corresponding to the sum of the number of counts and the virtual security code (i.e., OTP number) within a specific count range from the UID registration time (point A) to the user authentication request reception time. Each is calculated, and it is checked whether there is a count equal to the number of counts corresponding to the second code (ie, a value obtained by applying the inverse function of the second function to the second code) among the calculated values. Through this, the server 30 can check whether the virtual code for authentication is normally provided.

When it is confirmed that the virtual code for authentication is normally provided, the server 30 receives the QR code received from the QR code verification device 200 in the storage location extracted from the verification virtual code (visit time) and the QR code verification device The location information (visited place) corresponding to 200 is matched and stored. Accordingly, when a specific user performs visitor authentication through the QR code verification device 200 located in a specific place, the specific user information, location information, and visit time are stored in the server.

Meanwhile, the server 30 may be formed of a plurality of servers. The specific user information, location information, and visit time may be stored in a plurality of servers in a block chain. Through this, it is possible to prevent others from manipulating the visitor record.

Meanwhile, the server 30 may physically separate the hardware including the storage location search unit 330 from the user information storage location. Through this, the present invention reduces the possibility of leakage of personal information.

In a specific embodiment, the server 30 may be formed of a storage server and a verification server separated from each other. In this case, the virtual code receiving unit 310 is included in the storage server, and the detailed code extracting unit 320, the virtual code verifying unit 330, and the storage location searching unit 330 may be included in the verification server.

The storage server only stores the virtual code for authentication and the point at which the QR code is received, does not store user information, and cannot extract user information from the virtual code for authentication. The storage server and the verification server are configured to communicate with each other, and the storage server transmits a virtual code for authentication and a QR code reception time collected at a specific time and/or at a specific place according to a user request to the verification server. At this time, if necessary, location information corresponding to the virtual code for authentication, the serial number of the QR code verification device 200, or a unique value corresponding to the QR code verification module may be transmitted to the verification server together.

The verification server stores user information and includes a virtual code verification algorithm for authentication. The verification server receives the authentication virtual code and the QR code reception point from the storage server, verifies the authentication virtual code, and extracts and stores user information from the authentication virtual code.

As described above, the authentication virtual code presented when a visitor visits a specific place is stored only in the storage server, and the visitor's user information is stored only in the verification server. Through this, the present invention prevents leakage of personal information.

Meanwhile, the location information corresponding to the QR code verification device 200 may be stored in at least one of a storage server and a verification server.

In one embodiment, the location information corresponding to the QR code verification device 200 is stored only in the verification server, and when the storage server receives a virtual code for authentication from the QR code verification device 200, the QR code verification device ( 200) or a unique value corresponding to the QR code verification module is received, matched with the virtual code for authentication, and stored.

On the other hand, the QR code verification module is registered in the verification server, and when the QR code verification module is initially registered in the verification server, the serial number of the QR code verification device 200 or the unique value of the QR code verification module and the QR code verification device 200 The location information of is transmitted to the verification server, and the verification server matches and stores the serial number of the QR code verification device 200 or the unique value of the QR code verification module with the location information of the QR code verification device 200.

When a user requests a virtual code for authentication collected in a specific place, the verification server searches the serial number of the QR code verification device 200 corresponding to the specific location or the unique value of the QR code verification module, and the searched QR code The serial number of the verification device 200 or the unique value of the QR code verification module is transmitted to the storage server. The storage server transmits the serial number of the received QR code verification device 200 or the authentication virtual code corresponding to the unique value of the QR code verification module and the QR code reception time point to the verification server.

On the other hand, when a user requests a virtual code for authentication collected in a specific time range, the storage server searches for the time of receiving the QR code corresponding to the specific time range, and the time when the searched QR code is received and the corresponding authentication virtual code Is sent to the verification server.

On the other hand, when a user requests a virtual code for authentication collected in a specific time range and in a specific place, the verification server searches the serial number of the QR code verification device 200 corresponding to the specific location or the unique value of the QR code verification module. And, the serial number of the searched QR code verification device 200 or the unique value of the QR code verification module is transmitted to the storage server. Thereafter, the storage server searches for an authentication virtual code corresponding to the serial number of the received QR code verification device 200 or a unique value of the QR code verification module, and then corresponds to a specific time range among the searched authentication virtual codes. The virtual code for authentication that matches the QR code reception point is extracted. Thereafter, the storage server transmits the extracted virtual code for authentication and the corresponding QR code reception point to the verification server.

In another embodiment, the location information corresponding to the QR code verification device 200 is stored only on the storage server, and when the storage server receives a virtual code for authentication from the QR code verification device 200, the QR code verification device The location information corresponding to (200) is matched with a virtual code for authentication and stored.

In this case, the QR code verification module is registered in the storage server, and when the QR code verification module is initially registered in the storage server, the serial number of the QR code verification device 200 or the unique value of the QR code verification module and the QR code verification device 200 ) Is transmitted to the storage server, and the storage server matches and stores the serial number of the QR code verification device 200 or the unique value of the QR code verification module with the location information of the QR code verification device 200.

When a user requests a virtual code for authentication collected in a specific place, the storage server searches for a virtual code for authentication corresponding to the specific place, and when the searched virtual code for authentication and the QR code corresponding to the virtual code for authentication are received. And location information corresponding to the virtual code for authentication is transmitted to the verification server.

On the other hand, when a user requests a virtual code for authentication collected in a specific time range, the storage server searches for the time of receiving the QR code corresponding to the specific time range, and the time when the searched QR code is received and the corresponding authentication virtual code And the location information are sent to the verification server.

On the other hand, when a user requests a virtual code for authentication collected in a specific time range and in a specific place, the storage server matches the QR code reception time corresponding to the specific time range and the location information corresponding to the specific place, and stores the authentication. The virtual code is searched, and the searched authentication virtual code, location information corresponding thereto, and the time of receiving the QR code are transmitted to the verification server.

Here, the location information may be information input from a user when registering the QR code verification module in a storage server or a verification server, or GPS information collected from a GPS information collection unit provided in the QR code verification device 200. If the location of the QR code verification device 200 is changed even after the QR code verification device 200 is registered in the storage server or the verification server, the location information of the QR code verification device 200 may be updated.

6 is a flowchart of a QR code verification method according to an embodiment of the present invention.

6, the visitor management method according to an embodiment of the present invention, a QR code verification module (QR code verification means 20) is a QR code generated from the QR code generation module (QR code generation means 10) QR code receiving step of receiving a code (S110), QR code verification module extracting a virtual code for authentication from the QR code (S120), QR code verification module when the QR code is received and the authentication virtual Verifying the QR code based on the code (S130), and a step (S140) of matching and storing, by the QR code verification module, the time when the QR code is received and the virtual code for authentication. Hereinafter, a detailed description of each step will be described. However, in the QR code generation device 100 (ie, the user terminal including the QR code generation unit 10) and the QR code verification device 200 (ie, the user terminal including the QR code verification unit 20) In the description process, detailed disclosure of the above-described contents will be omitted.

In one embodiment, the administrator executes the verification program 12 to execute the QR code receiving function. Accordingly, the camera included in the device in which the verification program 12 is installed is activated to take a QR code.

In another embodiment, when the visitor authentication is performed non-face-to-face, the verification program 12 may be executed by the visitor. When a visitor requests a visitor authentication to the QR code verification device 200, the verification program 120 activates the camera so that the QR code can be photographed.

Thereafter, the QR code verification module extracts the virtual code for authentication from the QR code, and verifies the QR code based on the time when the QR code is received and the virtual code for authentication. Specifically, the QR code verification module determines that the QR code is normal only when the time when the QR code is received is within a predetermined time from the time when the QR code is generated.

In one embodiment, the QR code verification module may have the same function as the virtual security code generation function provided in the QR code generation module, and after generating a virtual security code within a predetermined count from the time when the QR code is received, , It is determined whether there is a code identical to the virtual security code extracted from the virtual code for authentication among the generated virtual security codes.

If there is a code identical to the virtual security code extracted from the virtual security code for authentication among the generated virtual security codes, the QR code verification module determines that the received QR code is a normally generated QR code.

Thereafter, the QR code verification module matches and stores the QR code reception time point and the authentication virtual code. The stored QR code reception point and the authentication virtual code are transmitted to the server at a request from the server or at predetermined time intervals.

7 is a flow chart illustrating a visitor management method according to an embodiment of the present invention.

Referring to FIG. 7, in the visitor management method according to an embodiment of the present invention, a QR code verification module determines a time when a QR code verification module is matched to each of a plurality of authentication virtual codes and the plurality of authentication virtual codes to receive a stored QR code. Transmitting (S210); Extracting at least one detail code from each of the plurality of authentication virtual codes (S220); A step (S230) of searching, by a server, a storage location of user information corresponding to each of the plurality of virtual codes for authentication based on the at least one detailed code (S230); And matching and storing the location information with the user information (S240). However, in the process of describing the QR code verification device 200 (ie, the user terminal including the QR code verification means 20) and the server 30, detailed disclosure of the above-described contents will be omitted.

In step S210, the server 30 receives a plurality of authentication virtual codes from a plurality of QR code verification modules and a time point of receiving a stored QR code matched to each of the plurality of authentication virtual codes.

In an embodiment, the server 30 may simultaneously receive location information corresponding to the QR code verification module from each of the plurality of QR code verification modules. The server 30 may match and store the received location information with a user information storage location to be described later. The QR code verification module may transmit location information input from an administrator to the server 30 or may transmit GPS information collected from a GPS information collection unit provided in the QR code verification device 200 to the server 30.

In another embodiment, the server 30 may receive a serial number of the QR code verification device 200 or a unique value corresponding to the QR code verification module from each of the plurality of QR code verification modules. The server 30 may search for location information of each of the QR code verification modules through the serial number or the unique value.

Specifically, when the QR code verification module is initially registered with the server 30, the serial number of the QR code verification device 200 or the unique value of the QR code verification module and the location information of the QR code verification device 200 are stored in the server 30. And the server 30 matches and stores the serial number of the QR code verification device 200 or the unique value of the QR code verification module with the location information of the QR code verification device 200. The server 30 may search for location information using the serial number of the QR code verification device 200 or a unique value of the QR code verification module.

Here, the location information may be information input from a user when registering the QR code verification module with the server 30 or may be GPS information collected from a GPS information collection unit provided in the QR code verification device 200. If the location of the QR code verification device 200 is changed even after the QR code verification device 200 is registered in the server 30, the location information of the QR code verification device 200 may be updated.

Thereafter, in S220, the server 30 extracts at least one detailed code from the authentication virtual code, and in S230, based on the at least one detailed code, user information corresponding to each of the plurality of authentication virtual codes Search the storage location of.

According to an embodiment, when the authentication virtual code is generated by combining the first code and the second code, the server 30 uses the first code and the second code to determine the UID storage location in the storage location search algorithm. You will explore. For example, the first code is a code that sets the starting point of the UID storage location search within the storage location search algorithm, and the second code sets the search path from the starting point to the UID storage location according to a specific search method. It could be code.

As shown in Fig. 8, the server 30 sets the location corresponding to the first code as a starting point, and according to the search method applied to the second code, based on the second code, the UID in the k-shaped arrangement state Searches for a point matched to the storage location (that is, a specific vertex of a k-square). The storage location is matched to each vertex of the k-square. The point where the first code track (ie, the first track) and the k-shape correspond to the first code is the starting point for searching the storage location corresponding to the first code. The server 30 searches for a matching point of the UID storage location based on the second code at the search start point.

Various methods can be applied as a method of searching for a storage location in a k-angle based on the second code. As an example, the server 30 indicates an angle corresponding to the second code at a position on the first track where the k-angle is in contact (for example, a specific angle divided by MN by 180 degrees to face the vertices of the k-angle). Accordingly, based on the virtual code for authentication, it is possible to search the vertex of the k-angle, which is the storage location where the UID is stored.

In addition, as another example, in a state in which the k-angle is in contact with the point corresponding to the first code on the first track, the server 30 is based on the center of the k-angle and the contact point on the first track, ) Is divided into MN and each angle is matched to MN second codes. At this time, the direction of the line moving a specific number of unit angles (ie, 360 degrees/MN) from the line connecting the center of the k-angle and the contact point on the first track becomes a specific vertex of the k-angle. Accordingly, when a second code corresponding to a specific angle is received, the server 30 may search for a vertex located in the corresponding angle direction.

In addition, as another example, a specific position of the second code may be used to determine the angle calculation direction. That is, when the second code is generated using N characters (N is a natural number), the angle measurement direction can be determined with one digit. For example, the server 30 divides the entire central angle (i.e., 360 degrees) based on the center of the k-angle and the contact point on the first track and matches the second code to each angle, the center of the k-angle The angle measured in the left direction or the right direction from the line connecting the contact point on the and the first track may be determined as a value of one digit.

As an example, in the storage location search algorithm, two second codes, which are different according to the angle measurement direction, may be assigned to one vertex to each vertex on a k-angle. That is, when reaching one vertex to the inside and outside, it is matched with another second code, and a storage location of a different UID may be connected. As another example, the storage location search algorithm, when generating a second code using N characters (N is a natural number), has a total angle of N-1 (e.g., 360 degrees when divided based on a central angle). You can determine the direction of angle application to reach each vertex by matching for half of) and using one digit.

The method of searching for a storage location in the k-angle based on the second code is not limited to this, and a point dividing the point on the k-angle corresponding to the second code and the contact point on the first track by a specific ratio is searched as a storage location Various methods such as method can be applied.

According to another embodiment, when the authentication virtual code includes a first code and a second code that are changed for each unit count, the first code is the unit count that has elapsed from the initial time when UID registration was started in the server 30. It is generated based on, and the second code is generated based on the unit count elapsed from the time when each user registers the UID through the dedicated program 11 installed in the QR code generating device 100. At this time, the unit count is set at a specific time interval and is changed as the time interval elapses.

As shown in FIG. 9, the storage location search algorithm moves on a track based on a plurality of detailed codes constituting a virtual code for authentication, and moves to a point matching the storage location of the UID.

Specifically, based on the unit count that has elapsed from the initial time when the storage location search algorithm started as the virtual code for authentication starts the service, and the unit count that has elapsed from the time when each user's UID is registered. In the case of including the generated second code, as shown in FIG. 9, the server 30 sets the count on the track in which the code value corresponding to the first code is matched as the search start point, and the count corresponding to the second code It returns along the track from the search start point by the value, and searches for a point on the track (ie, the UID storage location) at the time when the UID is registered in the server 30. For example, the server 30 searches for a point (or count) to which the first code is assigned in the authentication virtual code in the first code track, sets the search start point, and sets the second code in the reverse direction from the search start point. A target track is arranged to search for a point (or count) to which a second code is assigned in the authentication virtual code, and a point (or count) at which a UID is registered on the first code track is extracted. In addition, for example, the count calculated as the server 30 sets the search start point based on the first code in the virtual code for authentication and applies the inverse function of the second function to the second code in the virtual code for authentication. It regresses as much as the value and searches for a point corresponding to the UID registration point.

Meanwhile, the server 30 may additionally verify the validity of the authentication virtual code. Specifically, the server 30 compares the reception time of the received QR code and the generation time of the authentication virtual code generated by using the authentication virtual code generation function in the authentication virtual code generation program, as shown in FIG. As shown, when the generation time is within an error range from the QR code reception time, it may be determined that the received virtual code for authentication is a normal code.

In a specific embodiment, when a user requests generation of a QR code using the QR code generation device 100, the dedicated program 11 uses the virtual code generation function for authentication to correspond to the request time (ie, the generation time). An authentication virtual code (specifically, a second code) is generated based on the count value. In an embodiment, one of the plurality of detailed codes (for example, the second code) may be generated using an OTP function using the generation time as seed data. That is, the OTP code may be included and generated in the second code.

Thereafter, the authentication virtual code is provided to the server 30, and the server 30 extracts a plurality of detailed codes using a storage location search algorithm that matches the authentication virtual code generation function or the authentication virtual code generation function. do. In addition, the OTP code is extracted through one of the plurality of detailed codes (for example, the second code), and the time point at which the virtual code for authentication is generated is extracted through the OTP code.

Thereafter, by comparing the time when the QR code verification device 200 receives the QR code on the track and the time when the virtual code for authentication is generated in the QR code generating device 100, the virtual code for authentication is generated at the current time. You will be able to verify cognition. That is, if the generation time of the authentication virtual code is included within the range including the preset count value from the time when the QR code verification device 200 receives the QR code, the authentication virtual code is verified as a normally generated code. It becomes.

Meanwhile, referring to FIG. 11, the server 30 may store various user information. In one embodiment, the user information may include at least one of a UID, a name, a terminal serial number, and a phone number, and the server 30 stores the user information after receiving it from the QR code generating device 100. I can.

In another embodiment, the server 30 may store a user's diagnosis result and information related to whether or not the confirmed person is contacted by matching the UID. The diagnosis result and whether the confirmed person is contacted may be updated by a user of the QR code generating device 100 or an administrator who has been given a separate authority.

When the diagnosis result is changed from negative to positive, the server 30 searches for a visited place within a predetermined time from the changed point of time, and another user who performs visitor authentication at the same place as the user within a predetermined time from the changed point of time. Send a message to you. Further, the server 30 may change whether the confirmed person is contacted in the user information of another user who has performed visitor authentication in the same place as the corresponding user from non-contact to contact. When the contact of the confirmed person is changed from non-contact to contact, the server 30 may transmit a guide message recommending self-isolation to the corresponding user.

In another embodiment, the server 30 corresponds to the QR code verification device 200 whenever a storage location of specific user information is searched based on the authentication virtual code received from the QR code verification device 200. The location information and the QR code reception time can be matched to the storage location of the user information and stored. Through this, the present invention makes it possible to manage a visited place and time of a specific user.

The user authentication method using a virtual code for authentication according to an embodiment of the present invention described above may be implemented as a program (or application) to be executed by being combined with a computer that is hardware and stored in a medium.

The above-described program includes C, C++, JAVA, Ruby, which can be read by a processor (CPU) of the computer through the device interface of the computer, in order for the computer to read the program and execute the methods implemented as a program. It may include a code (Code) coded in a computer language such as machine language. Such code may include a functional code related to a function defining necessary functions for executing the methods, and a control code related to an execution procedure necessary for the processor of the computer to execute the functions according to a predetermined procedure. can do. In addition, such code may further include code related to a memory reference to which location (address address) of the internal or external memory of the computer or the media or additional information necessary for the processor of the computer to execute the functions. have. In addition, when the processor of the computer needs to communicate with any other computer or server in the remote in order to execute the functions, the code uses the communication module of the computer to determine how It may further include a communication-related code for whether to communicate or what information or media to transmit and receive during communication.

The storage medium is not a medium that stores data for a short moment, such as a register, cache, memory, etc., but a medium that stores data semi-permanently and can be read by a device. Specifically, examples of the storage medium include, but are not limited to, ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like. That is, the program may be stored in various recording media on various servers to which the computer can access, or on various recording media on the user's computer. In addition, the medium may be distributed over a computer system connected through a network, and computer-readable codes may be stored in a distributed manner.

In the above, embodiments of the present invention have been described with reference to the accompanying drawings, but those skilled in the art to which the present invention pertains can be implemented in other specific forms without changing the technical spirit or essential features. You will be able to understand. Therefore, the embodiments described above are illustrative in all respects, and should be understood as non-limiting.

Claims (15)

Receiving, by the QR code verification module, a QR code generated from the QR code generation module; Extracting, by the QR code verification module, a virtual code for authentication from the QR code; Verifying, by the QR code verification module, a QR code based on the virtual code for authentication; And Including, the QR code verification module matching the receiving time of the QR code and the virtual code for authentication and storing; Including, The QR code is generated based on the authentication virtual code generated through the authentication virtual code generation function included in the QR code generation module, visitor management method using a QR code. The method of claim 1, wherein the QR code verification module, A visitor management method using a QR code to determine that the QR code is normal only when the QR code is received within a predetermined time from the time when the QR code is generated. The method of claim 1, The QR code verification module transmits, to a server, a plurality of virtual codes for authentication and a time of receiving a stored QR code matched with the plurality of virtual codes for authentication, The server extracts at least one detail code from each of the plurality of authentication virtual codes, and determines a storage location of the user information corresponding to each of the plurality of authentication virtual codes based on the extracted at least one detail code. A method for managing a visitor using a QR code to search and store the searched storage location by matching the QR code reception time point and location information corresponding to the QR code verification module. The method of claim 3, wherein the QR code verification module, Extracting a first virtual security code that is generated based on the first seed data from the authentication virtual code and is changed for each unit count set at a specific time interval, When the generation time of the first virtual security code is included within a predetermined time from the time of receiving the QR code, determining that the QR code is a normal code, visitor management method using a QR code. The method of claim 4, wherein the detail code, The QR code is generated based on the code included in other parts except the first virtual security code and the second seed data in the virtual code for authentication, and includes a second virtual security code that is changed for each unit count set at a specific time interval. How to manage visitors using code. The method of claim 5, The seed data of the first virtual security code generated by different QR code generation modules are identical to each other, The seed data of the second virtual security code generated in different QR code generation modules are different from each other, a visitor management method using a QR code. The method of claim 6, The detailed code includes a first code and a second code, The first code is generated based on the unit count and the second seed data elapsed from the initial time when user information registration is started in the server, and is changed for each unit count set at a specific time interval, The second code is generated based on the second seed data and the unit count elapsed from the time when user information corresponding to any one of the plurality of virtual codes for authentication is registered, and is changed for each unit count set at a specific time interval. How to manage a visitor using a QR code. The method of claim 1, wherein the authentication virtual code, A method for managing a visitor using a QR code, comprising at least one of a unique value generated through a user's biometric information and a unique value of a terminal in which the QR code generation module is installed. The method of claim 1, wherein the QR code generation module, A method for managing a visitor using a QR code to generate a QR code only when a user performs biometric authentication on a terminal in which the QR code generation module is installed. A visitor management program using a QR code, which is combined with a computer as hardware and stored in a medium to execute the method of any one of claims 1 to 9. As a QR code generating device for visitor authentication, A detail code generation unit that generates one or more detail codes based on user information registered in the QR code generation device; A virtual code generation unit that generates a virtual code for authentication in which the one or more detailed codes are combined using a virtual code generation function for authentication; And A QR code generation unit that generates a QR code based on the virtual code for authentication; And QR code generation unit for outputting the QR code; including, a QR code generation device for visitor authentication. The method of claim 11, Further comprising; at least one sensor for sensing the user's biometric information, The QR code generation device generates a QR code only when a user performs biometric authentication through the sensor, a QR code generation device for visitor authentication. As a QR code verification device for visitor authentication, QR code receiver for receiving a QR code; A virtual code extraction unit for extracting a virtual code for authentication from the QR code; A QR code verification unit that verifies the QR code based on the authentication virtual code; A virtual code storage unit that matches and stores the authentication virtual code and the reception point of the QR code; And A QR code verification device for authenticating a visitor, including; a virtual code providing unit that transmits the stored authentication virtual code and the QR code reception time to the server at a request from the server or at a preset time interval. The method of claim 13, wherein the QR code verification unit, A QR code verification device for authenticating a visitor, determining that the QR code is normal only when the QR code is received within a predetermined time from the time when the QR code is generated. As a server for visitor authentication, A virtual code receiver configured to receive a plurality of virtual codes for authentication from the QR code verification module and a reception point of the stored QR code matched with the plurality of virtual codes for authentication; A detail code extracting unit for extracting at least one detail code from each of the plurality of authentication virtual codes; And Based on the at least one detailed code, comprising a storage location search unit for searching a storage location of the user information corresponding to each of the plurality of authentication virtual codes, The server, Server for visitor authentication to match and store the location information corresponding to the QR code reception time and the QR code verification module in the storage location.

Images