Utilization management device, utilization management method, and program
An object of the present invention is to perform offline management of use of usage target object by a user having a ticket, while reducing risk on security. A use permit that includes transaction information specifying usage conditions for the user to use the usage target object, is added as a two-dimensional code printed on a ticket. A utilization management device takes an image of the two-dimensional code added to the ticket to read the use permit from the image. Then, the utilization management device verifies a signature added to the use permit by using a public key provided in advance by a provider of the usage target object. If verification is established, the utilization management device refers transaction information included in the use permit to permit for user to use of the usage target object when usage condition specified by the transaction information are satisfied.
1. A utilization management device configured to manage a user's use of a usage target object by way of a ticket that includes a code and is issued to the user, the utilization management device comprising:
a hole data storage device in the form of computer memory, the hole data storage device being configured to store hole data including a first public key required for verifying a use permit and a second public key required for verifying stored biometric information, wherein the use permit and the stored biometric information are associated with the code, and the use permit includes transaction information specifying usage conditions for the user to use the usage target object; and
a computer processing unit (CPU) comprising:
a code reading part configured to obtain the use permit and the stored biometric information by reading the code from the ticket;
a signature verifying part configured to verify a signature added to the stored biometric information obtained by the code reading part by using the second public key and a signature added to the use permit obtained by the code reading part by using the first public key, wherein the first and second public keys are included in the hole data stored in the hole data storage device;
a biometric information acquiring part configured to acquire biometric information of the user;
a biometric authentication part configured to perform a biometric authentication of the user when the signature added to the stored biometric information has been verified by the signature verifying part, the biometric authentication being performed by using the biometric information acquired by the biometric information acquiring part and the stored biometric information obtained from the code by the code reading part; and
a usage condition judging part configured to judge whether the usage conditions specified in the transaction information are satisfied or not when the biometric authentication of the user by the biometric authentication part has been established and the signature added to the use permit has been verified by the signature verifying part, the judgement being performed by referring to the transaction information included in the use permit obtained by the code reading part,
wherein the utilization management device is configured to receive the hole data from a provider of the usage target object before obtaining the use permit from the ticket.
2. A utilization management device according to claim 1 , wherein:
the utilization management device further comprises a use permission notifying part of the CPU; and
the use permission notifying part is configured to output:
a use permission notification when the usage condition judging part judges that the usage conditions are satisfied; and
a use rejection notification when the biometric authentication of the user by the biometric authentication part is failed, when the verification of the signature by the signature verifying part is failed, or when the usage condition judging part judges that the usage conditions are not satisfied.
3. A utilization management device according to claim 1 , wherein:
the biometric information is face recognition information;
the utilization management device comprises an image sensor configured to obtain images of a face of the user and the code;
the biometric information acquiring part is configured to acquire the biometric information from the image of the face of the user obtained by the image sensor; and
the code reading part is configured to read the use permit from the image of the code obtained by the image sensor.
4. A utilization management device according to claim 1 , wherein,
the utilization management device further comprises a lifting part of the CPU that is configured to lift a restriction on use of the usage target object when the usage condition judging part judges that the usage conditions are satisfied.
5. A utilization management device according to claim 2 , wherein:
the biometric information is face recognition information;
the utilization management device further comprises an image sensor configured to obtain images of a face of the user and the code;
the biometric information acquiring part is configured to acquire the biometric information from the image of the face of the user obtained by the image sensor; and
the code reading part is configured to read the use permit from the image of the code obtained by the image sensor.
6. A utilization management device according to claim 1 , wherein,
the utilization management device further comprises a lifting part of the CPU that is configured to lift a restriction on use of the usage target object when the usage condition judging part judges that the usage conditions are satisfied.
7. A utilization management device according to claim 2 , wherein,
the utilization management device further comprises a lifting part of the CPU that is configured to lift a restriction on use of the usage target object when the usage condition judging part judges that the usage conditions are satisfied.
8. A utilization management device according to claim 3 , wherein,
the utilization management device further comprises a lifting part of the CPU that is configured to lift a restriction on use of the usage target object when the usage condition judging part judges that the usage conditions are satisfied.
9. A utilization management device according to claim 5 , wherein,
the utilization management device further comprises a lifting part of the CPU that is configured to lift a restriction on use of the usage target object when the usage condition judging part judges that the usage conditions are satisfied.
10. A utilization management device according to claim 4 , wherein the usage target object is configured so that use of the usage target object is limited by closing or locking a gate.
11. A utilization management device according to claim 6 , wherein the usage target object is configured so that use of the usage target object is limited by closing or locking a gate.
12. A utilization management device according to claim 7 , wherein the usage target object is configured so that use of the usage target object is limited by closing or locking a gate.
13. A utilization management device according to claim 8 , wherein the usage target object is configured so that use of the usage target object is limited by closing or locking a gate.
14. A utilization management device according to claim 9 , wherein the usage target object is configured so that use of the usage target object is limited by closing or locking a gate.
15. A utilization management method for managing use of a usage target object by a user, by way of a ticket issued to the user and a utilization management device, wherein:
a use permit that includes transaction information specifying usage conditions for the user to use the usage target object and stored biometric information of the user, are added as a code to the ticket; and
the utilization management device:
reads the use permit and the stored biometric information from the code added to the ticket held by the user;
verifies a signature added to the stored biometric information read from the code by using a public key provided in advance from a provider of the usage target object;
when the signature added to the stored biometric information has been verified, acquires biometric information from the user and performs a biometric authentication of the user using the acquired biometric information and the stored biometric information read from the code added to the ticket;
verifies a signature added to the use permit read from the code by using the public key provided in advance from a provider of the usage target object; and
when the biometric authentication of the user has been established and the signature added to the use permit has been verified, acquires the transaction information included in the use permit read from the code to judge whether the usage conditions specified in the transaction information are satisfied or not.
16. A computer program product embodying computer readable instructions stored on a non-transitory computer readable medium and configured to cause a computer to function as a utilization management device that manages a user's use of a usage target object by way of a ticket that includes a code and is issued to the user,
wherein the computer is configured to execute the computer readable instructions so as to:
receive hole data from a provider of the usage target object, the hole data including a first public key required for verifying a use permit and a second public key required for verifying stored biometric information, wherein the use permit and the stored biometric information are associated with the code, and the use permit includes transaction information specifying usage conditions for the user to use the usage target object;
store the hole data;
obtain the use permit and the stored biometric information after receiving the hole data from the provider by reading the code from the ticket;
verify a signature added to the stored biometric information by using the second public key required for verifying the stored biometric information included in the stored hole data;
when the signature added to the stored biometric information has been verified, acquire biometric information from the user and perform a biometric authentication of the user by using the biometric information acquired from the user and the stored biometric information;
verify a signature added to the use permit by using the first public key required for verifying the use permit included in the stored hole data; and
when the biometric authentication of the user has been established and the signature added to the use permit has been verified, refer to the transaction information included in the use permit to judge whether the usage conditions specified in the transaction information are satisfied or not,
wherein the utilization management device is configured to receive the hole data from a provider of the usage target object before obtaining the use permit from the ticket.