TWI787862B - Communication system, sending device, receiving device, communication method, and program product - Google Patents

Communication system, sending device, receiving device, communication method, and program product Download PDF

Info

Publication number
TWI787862B
TWI787862B TW110121176A TW110121176A TWI787862B TW I787862 B TWI787862 B TW I787862B TW 110121176 A TW110121176 A TW 110121176A TW 110121176 A TW110121176 A TW 110121176A TW I787862 B TWI787862 B TW I787862B
Authority
TW
Taiwan
Prior art keywords
mentioned
data
packets
user
authentication
Prior art date
Application number
TW110121176A
Other languages
Chinese (zh)
Other versions
TW202211647A (en
Inventor
蔡永男
Original Assignee
日商樂天集團股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 日商樂天集團股份有限公司 filed Critical 日商樂天集團股份有限公司
Publication of TW202211647A publication Critical patent/TW202211647A/en
Application granted granted Critical
Publication of TWI787862B publication Critical patent/TWI787862B/en

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Detection And Prevention Of Errors In Transmission (AREA)
  • Stereo-Broadcasting Methods (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本發明應對發送對象資料接收之雜訊。  通信系統(S)之發送裝置(20)將發送對象資料分割為複數個資料部分,以包含重複複數個之至少一個資料部分、且包含發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成複數個封包之各者,對接收裝置(30)發送複數個封包之各者。通信系統(S)之接收裝置(30)從發送裝置(20)接收複數個封包之各者,基於複數個封包之各者中所包含之重複複數個之至少一個資料部分及順序資訊,結合複數個資料部分而取得發送對象資料,並基於發送對象資料執行規定處理。The present invention deals with the noise of data reception of the sending object. The transmission device (20) of the communication system (S) divides the transmission object data into a plurality of data parts, so as to include at least one data part that repeats the plurality of data parts, and includes sequence information related to the order of the data parts in the transmission object data In a method, each of the plurality of packets is created, and each of the plurality of packets is sent to the receiving device (30). The receiving device (30) of the communication system (S) receives each of the plurality of packets from the transmitting device (20), and combines the plurality of at least one data part and sequence information contained in each of the plurality of packets. The data to be sent can be obtained through the data part, and the prescribed processing is performed based on the data to be sent.

Description

通信系統、發送裝置、接收裝置、通信方法、及程式產品Communication system, sending device, receiving device, communication method, and program product

本發明係關於通信系統、發送裝置、接收裝置、通信方法及程式產品。The present invention relates to a communication system, a sending device, a receiving device, a communication method and a program product.

先前,從發送裝置對接收裝置發送用戶之識別資訊等發送對象資料之技術已為人所知。例如,專利文獻1中記載了如下技術:發送裝置藉由於規定時序變更之密鑰將用戶之識別資訊加密,利用Bluetooth(註冊商標)之廣告封包(advertising packet),將經加密之識別資訊發送至接收裝置。 [先前技術文獻]  [專利文獻]Conventionally, a technique of transmitting target data such as user identification information from a transmitting device to a receiving device is known. For example, Patent Document 1 describes a technique in which a transmitting device encrypts user identification information with a key changed at a predetermined timing, and transmits the encrypted identification information to receiving device. [Prior technical literature] [Patent literature]

[專利文獻]日本專利特開2016-116130號公報[Patent Document] Japanese Patent Laid-Open No. 2016-116130

[發明所欲解決之問題][Problem to be solved by the invention]

專利文獻1之技術中,由於對每個用戶而言識別資訊不同,故接收裝置需要接收包含任意識別資訊之廣告封包。就該點而言,於轉換為類比之電氣信號時或發送廣告封包之期間等,有時會產生雜訊。因此,專利文獻1之接收裝置為了準確地取得識別資訊,必須區分未受到雜訊影響之廣告封包與已受到雜訊影響之廣告封包。In the technique of Patent Document 1, since the identification information is different for each user, the receiving device needs to receive an advertisement packet including arbitrary identification information. In this regard, noise may sometimes occur during conversion into an analog electrical signal or during transmission of advertising packets. Therefore, in order to obtain the identification information accurately, the receiving device of Patent Document 1 must distinguish between advertising packets not affected by noise and advertising packets affected by noise.

專利文獻1之廣告封包中包含作為一種錯誤檢測碼之CRC(Cyclic Redundancy Check,循環冗餘檢測),但CRC之錯誤檢測精度有限,有時無法充分應對識別資訊接收到之雜訊。就該點而言,對於Bluetooth(註冊商標)以外的其他通信協定亦同樣,先前方法無法充分應對發送對象資料接收到之雜訊的影響。The advertisement packet of Patent Document 1 includes CRC (Cyclic Redundancy Check) as an error detection code, but the error detection accuracy of CRC is limited, and sometimes it cannot fully cope with the noise received from the identification information. In this regard, the same applies to other communication protocols other than Bluetooth (registered trademark), and the conventional method cannot sufficiently cope with the influence of noise received by the transmission target data.

本發明之目的之一在於應對發送對象資料接收到之雜訊。 [解決問題之技術手段]One of the objects of the present invention is to deal with the noise received from the sending object data. [Technical means to solve the problem]

本發明之預測損益顯示系統係包括發送裝置及接收裝置之通信系統,上述發送裝置包括:分割機構,其將發送對象資料分割為複數個資料部分;作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及發送機構,其對上述接收裝置發送上述複數個封包之各者;上述接收裝置包括:接收機構,其從上述發送裝置接收上述複數個封包之各者;取得機構,其基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分及上述順序資訊,結合上述複數個資料部分而取得上述發送對象資料;及執行機構,其基於上述發送對象資料執行規定處理。The predicted profit and loss display system of the present invention is a communication system including a sending device and a receiving device. The sending device includes: a dividing mechanism that divides the data to be sent into a plurality of data parts; Each of the above-mentioned plurality of packets is generated by a method including repeating at least one of the above-mentioned data parts in plural, and including order information related to the order of the data part in the above-mentioned transmission target data; and a sending mechanism that sends to the above-mentioned receiving device Each of the above-mentioned plurality of packets; the above-mentioned receiving device includes: a receiving mechanism, which receives each of the above-mentioned plurality of packets from the above-mentioned sending device; At least one data part and the above sequence information are combined to obtain the above-mentioned transmission target data; and an execution agency that executes prescribed processing based on the above-mentioned transmission target data.

本發明之發送裝置包括:分割機構,其將發送對象資料分割為複數個資料部分;作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及發送機構,其對接收裝置發送上述複數個封包之各者。The sending device of the present invention includes: a dividing mechanism, which divides the sending object data into a plurality of data parts; a creating mechanism, which includes a plurality of repeated at least one of the above-mentioned data parts in each of the plurality of packets, and includes the above-mentioned sending object The format of sequence information related to the sequence of the data part in the data, each of the plurality of packets mentioned above; and the sending mechanism, which sends each of the plurality of packets mentioned above to the receiving device.

本發明之接收裝置包括:接收機構,其從發送裝置接收複數個封包之各者;取得機構,其基於上述複數個封包之各者中包含之重複複數個之至少一個資料部分及該資料部分之順序相關的順序資訊,結合複數個上述資料部分而取得發送對象資料;及執行機構,其基於上述發送對象資料執行規定處理。The receiving device of the present invention includes: a receiving mechanism, which receives each of a plurality of packets from a transmitting device; an obtaining mechanism, which is based on at least one data part of a plurality of repetitions contained in each of the above-mentioned plurality of packets and the data part. Sequence-related sequence information for obtaining transmission target data by combining a plurality of the above-mentioned data parts; and an execution unit that executes prescribed processing based on the above-mentioned transmission target data.

本發明之通信方法包括:分割步驟,其係將發送對象資料分割為複數個資料部分;作成步驟,其係以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;發送步驟,其係對接收裝置發送上述複數個封包之各者;接收步驟,其係從發送裝置接收上述複數個封包之各者;取得步驟,其係基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分及上述順序資訊,結合上述複數個資料部分而取得上述發送對象資料;及執行步驟,其係基於上述發送對象資料執行規定處理。The communication method of the present invention includes: a division step, which is to divide the transmission object data into a plurality of data parts; The method of order information related to the order of the data part in the data to be sent is to create each of the above-mentioned plural packets; the sending step is to send each of the above-mentioned plural packets to the receiving device; the receiving step is to start from the sending The device receives each of the above-mentioned plurality of packets; the obtaining step is to obtain the above-mentioned transmission based on the above-mentioned at least one data part and the above-mentioned sequence information contained in each of the above-mentioned plurality of packets, combining the above-mentioned multiple data parts Target data; and execution steps, which are to execute prescribed processing based on the above-mentioned transmission target data.

本發明之程式產品用以使電腦作為下述機構發揮功能:分割機構,其將發送對象資料分割為複數個資料部分;作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及發送機構,其對接收裝置發送上述複數個封包之各者。The program product of the present invention is used to make a computer function as the following mechanism: a division mechanism, which divides the transmission target data into a plurality of data parts; a creation mechanism, which includes at least one of a plurality of duplicates in each of a plurality of packets Each of the above-mentioned plurality of packets is made by means of the above-mentioned data part and sequence information related to the sequence of the data part in the above-mentioned transmission target data; and the sending mechanism sends each of the above-mentioned plurality of packets to the receiving device.

本發明之程式產品用以使電腦作為下述機構發揮功能:接收機構,其從發送裝置接收複數個封包之各者;取得機構,其基於上述複數個封包之各者中包含之重複複數個之至少一個資料部分及該資料部分之順序相關的順序資訊,結合複數個上述資料部分而取得發送對象資料;及執行機構,其基於上述發送對象資料執行規定處理。The program product of the present invention is used to make a computer function as the following mechanism: receiving mechanism, which receives each of the plurality of packets from the sending device; At least one data part and sequence information related to the order of the data part are combined to obtain the transmission target data by combining a plurality of the above data parts; and an execution unit that executes prescribed processing based on the above transmission target data.

本發明之一態樣中,上述複數個封包之各者於第1資料區域中,包含重複複數個之上述至少一個資料部分,於第2資料區域中包含上述順序資訊,上述取得機構掃描上述第1資料區域中包含之值彼此相同的封包,並基於該經掃描之封包取得上述發送對象資料。In one aspect of the present invention, each of the above-mentioned plurality of packets includes the above-mentioned at least one data part repeated in the first data area, and the above-mentioned sequence information is included in the second data area, and the above-mentioned acquiring unit scans the above-mentioned first data area. 1. Packets whose values are identical to each other are included in the data area, and the above-mentioned sending object data is obtained based on the scanned packets.

本發明之一態樣中,上述作成機構以上述複數個封包之各者中包含重複複數個之上述順序資訊之方式,作成上述複數個封包之各者,上述取得機構基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分、及重複複數個之上述順序資訊,取得上述發送對象資料。In an aspect of the present invention, the creation means creates each of the plurality of packets in such a manner that each of the plurality of packets includes the sequence information repeated in plural, and the acquisition means is based on each of the plurality of packets The above-mentioned transmission object data is obtained by repeating a plurality of the above-mentioned at least one data part and repeating a plurality of the above-mentioned sequence information contained in it.

本發明之一態樣中,上述複數個封包之各者於第1資料區域中包含重複複數個之上述至少一個資料部分,於第2資料區域中包含重複複數個之上述順序資訊,上述取得機構掃描上述第2資料區域中包含之值彼此相同的封包,並基於該經掃描之封包取得上述發送對象資料。In one aspect of the present invention, each of the above-mentioned plurality of packets includes a plurality of repetitions of the above-mentioned at least one data part in the first data area, and a plurality of repetitions of the above-mentioned sequence information in the second data area, and the above-mentioned acquisition mechanism A packet having the same value contained in the second data area is scanned, and the sending object data is obtained based on the scanned packet.

本發明之一態樣中,上述作成機構以上述複數個封包之各者中連續地包含重複複數個之上述順序資訊之方式,作成上述複數個封包之各者。In one aspect of the present invention, the creation means creates each of the plurality of packets in such a manner that each of the plurality of packets continuously includes the sequence information repeated a plurality of times.

本發明之一態樣中,上述作成機構以上述複數個封包之各者中重複複數個之上述至少一個資料部分與上述順序資訊離開規定距離以上的方式,作成上述複數個封包之各者。In one aspect of the present invention, the creation unit creates each of the plurality of packets in such a manner that the at least one data portion repeated in plural is separated from the sequential information by a predetermined distance or more.

本發明之一態樣中,上述作成機構以上述複數個封包之各者中連續地包含重複複數個之上述至少一個資料部分之方式,作成上述複數個封包之各者。In an aspect of the present invention, the above-mentioned creating means creates each of the plurality of packets in such a manner that each of the plurality of packets continuously includes a plurality of the above-mentioned at least one data part repeated.

本發明之一態樣中,上述接收裝置進而包含特定出上述資料部分之個數之特定機構,上述取得機構從上述複數個封包之各者取得上述至少一個資料部分及上述順序資訊直至達到上述個數為止,於已達到上述個數時取得上述發送對象資料。In an aspect of the present invention, the above-mentioned receiving device further includes a specific mechanism that specifies the number of the above-mentioned data parts, and the above-mentioned obtaining mechanism obtains the above-mentioned at least one data part and the above-mentioned sequence information from each of the above-mentioned plurality of packets until the above-mentioned number is reached. When the above number has been reached, the above-mentioned sending object data will be obtained.

本發明之一態樣中,上述發送對象資料為規定位數之數值,上述複數個資料部分之各者為上述數值中所包含之各個的位,上述順序資訊表示於上述數值中為第幾位,上述特定機構將上述位數特定為上述個數。In one aspect of the present invention, the above-mentioned transmission object data is a numerical value with a predetermined number of digits, each of the above-mentioned plurality of data parts is each bit contained in the above-mentioned numerical value, and the above-mentioned sequence information is represented by which digit in the above-mentioned numerical value , the above-mentioned specific mechanism specifies the above-mentioned digits as the above-mentioned number.

本發明之一態樣中,上述接收裝置能夠與複數個上述發送裝置之各者通信,上述複數個封包之各者中包含能夠識別已發送該封包之上述發送裝置之識別資訊,上述取得機構基於上述複數個封包之各者中所包含之上述識別資訊,針對每個上述發送裝置取得上述發送對象資料。In one aspect of the present invention, the receiving device is capable of communicating with each of the plurality of sending devices, each of the plurality of packets includes identification information capable of identifying the sending device that has sent the packet, and the obtaining means is based on The above-mentioned identification information included in each of the above-mentioned plurality of packets is obtained for each of the above-mentioned sending devices.

本發明之一態樣中,上述複數個封包之各者為規定之無線通信標準中之廣告封包,上述作成機構以複數個上述廣告封包之各者中包含重複複數個之上述至少一個資料部分且包含上述順序資訊作為上述無線通信標準中之服務UUID(Universally unique identifier,通用唯一識別符)之一部分之方式,作成上述複數個廣告封包之各者,上述發送機構利用上述無線通信標準,發送上述複數個廣告封包之各者,上述接收機構利用上述無線通信標準,接收上述複數個廣告封包之各者,上述取得機構基於上述複數個廣告封包之各者中作為上述服務UUID之一部分而包含的重複複數個之上述至少一個資料部分及上述順序資訊,取得上述發送對象資料。In an aspect of the present invention, each of the above-mentioned plurality of packets is an advertisement packet in a prescribed wireless communication standard, and the above-mentioned creating means includes a plurality of repetitions of the above-mentioned at least one data part in each of the plurality of above-mentioned advertisement packets and Each of the plurality of advertisement packets is created by including the sequence information as a part of the service UUID (Universally unique identifier) in the wireless communication standard, and the sending unit uses the wireless communication standard to transmit the plurality of advertisement packets. Each of the advertising packets, the receiving unit uses the wireless communication standard to receive each of the plurality of advertising packets, and the acquiring unit is based on the repeated plural numbers contained in each of the plurality of advertising packets as part of the service UUID At least one of the above-mentioned data parts and the above-mentioned sequence information are obtained to obtain the above-mentioned sending object data.

本發明之一態樣中,上述發送裝置中安裝有規定之應用程式,上述分割機構、上述作成機構及上述發送機構之各者之處理係作為上述應用程式之處理而執行,上述服務UUID中包含能夠識別上述應用程式之應用程式識別ID,上述取得機構掃描上述服務UUID中包含上述應用程式識別ID之上述廣告封包,取得上述發送對象資料。In one aspect of the present invention, a predetermined application is installed in the transmission device, and the processing of each of the division means, the creation means, and the transmission means is executed as the processing of the application program, and the service UUID includes The application identification ID capable of identifying the above-mentioned application program, the above-mentioned obtaining agency scans the above-mentioned advertisement packet containing the above-mentioned application program identification ID in the above-mentioned service UUID, and obtains the above-mentioned sending object data.

本發明之一態樣中,上述發送對象資料為能夠識別上述發送裝置之用戶之用戶ID,上述規定處理係基於上述用戶ID執行之認證處理。In one aspect of the present invention, the transmission object data is a user ID capable of identifying the user of the transmission device, and the predetermined processing is authentication processing performed based on the user ID.

本發明之一態樣中,上述接收裝置進而包含取得上述用戶之生物體資訊之生物體資訊取得機構,上述執行機構基於上述用戶ID及上述生物體資訊,執行上述認證處理。  [發明之效果]In an aspect of the present invention, the receiving device further includes a biometric information acquisition unit that acquires biometric information of the user, and the execution unit executes the authentication process based on the user ID and the biometric information. [Effect of Invention]

根據本發明,可應對發送對象資料接收到之雜訊。According to the present invention, it is possible to cope with the noise received by the transmission target data.

[1.通信系統之整體構成]  以下,對本發明之通信系統之實施方式之例進行說明。本實施方式中,列舉將通信系統適用於認證用戶之認證服務之情形為例。通信系統能夠適用於任意之服務,關於適用於其他服務之例將在後述之變化例中加以說明。[1. Overall configuration of communication system] Hereinafter, an example of an embodiment of the communication system of the present invention will be described. In this embodiment, a case where a communication system is applied to an authentication service for authenticating a user is taken as an example. The communication system can be applied to arbitrary services, and examples of application to other services will be described later in Variations.

圖1係表示通信系統之整體構成之圖。如圖1所示,通信系統S包含伺服器10、用戶終端20及認證裝置30,其等能夠連接於網際網路等網路N。再者,圖1中,將伺服器10、用戶終端20及認證裝置30之各者各表示1台,但其等亦可為複數台。FIG. 1 is a diagram showing the overall configuration of a communication system. As shown in FIG. 1, the communication system S includes a server 10, a user terminal 20, and an authentication device 30, which can be connected to a network N such as the Internet. In addition, in FIG. 1, each of the server 10, the user terminal 20, and the authentication apparatus 30 is shown as one, but these may be plural.

伺服器10係伺服器電腦。伺服器10包含控制部11、記憶部12及通信部13。控制部11包含至少一個處理器。控制部11根據記憶於記憶部12中之程式或資料執行處理。記憶部12包含主記憶部及輔助記憶部。例如,主記憶部係RAM(Random Access Memory,隨機存取記憶體)等揮發性記憶體。而且,例如輔助記憶部係ROM(Read Only Memory,唯讀記憶體)、EEPROM(Electronically Erasable and Programmable Read Only Memory,電子可擦可程式化唯讀記憶體)、快閃記憶體或硬碟等非揮發性記憶體。通信部13係有線通信或無線通信用之通信介面。通信部13經由網路N而進行資料通信。Server 10 is a server computer. The server 10 includes a control unit 11 , a storage unit 12 and a communication unit 13 . The control unit 11 includes at least one processor. The control unit 11 executes processing based on programs or data stored in the storage unit 12 . The storage unit 12 includes a main storage unit and an auxiliary storage unit. For example, the main memory is a volatile memory such as RAM (Random Access Memory, random access memory). Moreover, for example, auxiliary memory is ROM (Read Only Memory, read-only memory), EEPROM (Electronically Erasable and Programmable Read Only Memory, electronically erasable and programmable read-only memory), flash memory or hard disk, etc. volatile memory. The communication unit 13 is a communication interface for wired communication or wireless communication. The communication unit 13 performs data communication via the network N.

用戶終端20係用戶操作之電腦。用戶終端20為發送裝置之一例。因此,本實施方式中對用戶終端20所說明之處可改稱為發送裝置。發送裝置為發送後述發送對象資料被分割後之各個資料部分之裝置即可,關於發送裝置之其他例將在後述之變化例中加以說明。The user terminal 20 is a computer operated by a user. The user terminal 20 is an example of a transmission device. Therefore, what has been described for the user terminal 20 in this embodiment can be renamed as a sending device. The transmitting device may be a device that transmits the divided data parts of the transmission target data described later, and other examples of the transmitting device will be described in Variation Examples described later.

例如,用戶終端20係行動電話(包含智慧型手機)、行動資訊終端(包含平板型電腦及可穿戴終端)、或個人電腦等。本實施方式中,用戶終端20包含控制部21、記憶部22、通信部23、操作部24、顯示部25、及攝影部26。控制部21、記憶部22、及通信部23之物理性構成可分別與控制部11、記憶部12、及通信部13相同。For example, the user terminal 20 is a mobile phone (including a smart phone), a mobile information terminal (including a tablet computer and a wearable terminal), or a personal computer. In the present embodiment, the user terminal 20 includes a control unit 21 , a storage unit 22 , a communication unit 23 , an operation unit 24 , a display unit 25 , and an imaging unit 26 . The physical configurations of the control unit 21, the storage unit 22, and the communication unit 23 may be the same as those of the control unit 11, the storage unit 12, and the communication unit 13, respectively.

操作部24係輸入器件。例如,操作部24係觸控面板或滑鼠等指向器件、鍵盤或按鈕等。顯示部25係顯示器或監視器。例如,顯示部25係液晶顯示部或有機EL(Electroluminescence,電致發光)顯示部等。攝影部26包含至少1台相機。攝影部26可生成靜止圖像,亦能夠以規定之框速率連續地拍攝而生成動態圖像。The operation unit 24 is an input device. For example, the operation unit 24 is a pointing device such as a touch panel or a mouse, a keyboard, buttons, or the like. The display unit 25 is a display or a monitor. For example, the display unit 25 is a liquid crystal display unit, an organic EL (Electroluminescence, electroluminescence) display unit, or the like. The imaging unit 26 includes at least one camera. The imaging unit 26 can generate still images, and can also generate moving images by continuously shooting at a predetermined frame rate.

認證裝置30係用於認證的電腦。認證裝置30係接收裝置之一例。因此,本實施方式中對認證裝置30所說明之處可改稱為接收裝置。接收裝置為接收後述發送對象資料被分割後之各個資料部分之裝置即可,關於接收裝置之其他例將在後述之變化例中加以說明。The authentication device 30 is a computer used for authentication. The authentication device 30 is an example of a receiving device. Therefore, what is described about the authentication device 30 in this embodiment can be renamed as a receiving device. The receiving device may be a device that receives each data part after the transmission target data is divided into parts described later, and other examples of the receiving device will be described in Variation Examples described later.

例如,認證裝置30係行動電話、行動資訊終端或個人電腦等。本實施方式中,認證裝置30包含控制部31、記憶部32、通信部33、操作部34、顯示部35、及攝影部36。控制部31、記憶部32、通信部33、操作部34、顯示部35、及攝影部36之物理性構成可分別與控制部11、記憶部12、通信部13、操作部24、顯示部25、及攝影部26相同。For example, the authentication device 30 is a mobile phone, a mobile information terminal, or a personal computer. In the present embodiment, the authentication device 30 includes a control unit 31 , a memory unit 32 , a communication unit 33 , an operation unit 34 , a display unit 35 , and an imaging unit 36 . The physical configuration of the control unit 31, the memory unit 32, the communication unit 33, the operation unit 34, the display unit 35, and the photographing unit 36 can be compared with the control unit 11, the memory unit 12, the communication unit 13, the operation unit 24, and the display unit 25 respectively. , and the photographing unit 26 are the same.

再者,被說明為記憶於記憶部12、22、32之程式及資料可經由網路而供給。而且,上述說明之各電腦之硬體構成不限於上述例,能夠適用各種硬體。例如,可包含讀取電腦可讀取之資訊記憶介質之讀取部(例如,光碟機或記憶卡插槽)或與外部機器進行資料之輸入輸出之輸入輸出部(例如,USB(Universal Serial Bus,通用串列匯流排)端口)。例如,記憶於資訊記憶介質中之程式或資料可經由讀取部或輸入輸出部供給。Furthermore, it is explained that the programs and data stored in the memory units 12, 22, and 32 can be supplied via a network. In addition, the hardware configuration of each computer described above is not limited to the above examples, and various hardware can be applied. For example, it may include a reading part (for example, a CD-ROM drive or a memory card slot) for reading a computer-readable information storage medium, or an input and output part for inputting and outputting data with an external machine (for example, a USB (Universal Serial Bus , Universal Serial Bus) port). For example, a program or data stored in an information storage medium can be supplied through a reading unit or an input/output unit.

[2.通信系統之概要]  本實施方式中,列舉用戶通過安全門之場景為例,對通信系統S中執行之處理進行說明。通信系統S亦可適用於其他任意之場景中之認證,適用於其他場景之例在後述變化例中加以說明。[2. Outline of communication system] In this embodiment, the processing executed in the communication system S will be described by taking a scene where a user passes through a security door as an example. The communication system S can also be applied to authentication in other arbitrary scenarios, and examples of application to other scenarios will be described in the following variation examples.

圖2係表示利用通信系統S之場景之一例的圖。如圖2所示,安全門SG包含旋轉式之門。安全門SG連接有認證裝置30。安全門SG之門由鎖定機構鎖定。若用戶之認證成功,則鎖定被解除。例如,安全門SG配置於工作單位之公司或公共設施等任意設施處,只有具有進入設施資格之用戶才可通過安全門SG。FIG. 2 is a diagram showing an example of a scenario in which the communication system S is used. As shown in FIG. 2, the security door SG includes a revolving door. An authentication device 30 is connected to the security gate SG. The door of the safety door SG is locked by a locking mechanism. If the user's authentication is successful, the lock is released. For example, the security gate SG is arranged at any facility such as a workplace or a public facility, and only users who are qualified to enter the facility can pass through the security gate SG.

本實施方式中,作為認證用戶之認證方法,列舉包含ID認證與面部認證之兩階段認證。認證方法不限於本實施方式之例,可利用其他任意之認證方法。例如,可利用面部認證以外之其他生物體認證,如指紋認證、虹膜認證、靜脈認證或語音認證等。而且,可利用ID認證及面部認證以外之其他認證方法,例如二維碼認證、口令碼(passcode)認證、密碼(password)認證、電子***認證或口號認證等。而且,例如可為一階段認證,亦可為三階段以上之認證。In this embodiment, two-stage authentication including ID authentication and face authentication is listed as an authentication method for authenticating a user. The authentication method is not limited to the example of this embodiment, and other arbitrary authentication methods may be used. For example, biometric authentication other than face authentication can be used, such as fingerprint authentication, iris authentication, vein authentication or voice authentication. Moreover, authentication methods other than ID authentication and face authentication can be used, such as two-dimensional code authentication, passcode authentication, password authentication, electronic seal authentication, or slogan authentication. Furthermore, for example, one-stage authentication may be used, or three-stage or higher authentication may be used.

ID認證係利用預先發行之用戶ID進行之認證。用戶ID係能夠識別用戶之資訊。本實施方式中,將說明用戶ID為規定位數之數值之情形,但用戶ID的位數可根據用戶而不同。用戶ID可為任意形式,不限於數值。例如,用戶ID可為字串,亦可為數值(數字)與字符之組合。於輸入預先發行之用戶ID時ID認證成功。本實施方式中,若伺服器10中登錄之任何用戶ID被輸入至認證裝置30,則ID認證成功。ID authentication is authentication using a pre-issued user ID. User ID is information that can identify a user. In this embodiment, a case will be described where the user ID is a numerical value with a predetermined number of digits, but the number of digits of the user ID may vary depending on the user. User ID can be in any form, not limited to numerical value. For example, the user ID can be a character string, or a combination of numeric values (numbers) and characters. ID authentication is successful when entering the pre-issued user ID. In this embodiment, if any user ID registered in the server 10 is input into the authentication device 30, the ID authentication is successful.

面部認證係利用預先登錄之面部照片或面部特徵量進行之認證。面部照片係拍攝到用戶之面部之圖像。面部特徵量係表示面部照片中所示之面部特徵之資訊。本實施方式中,雖說明面部特徵量為多維向量之情形,但面部特徵量可為任意形式,例如,可為數組或各個數值。本實施方式中,於伺服器10中登錄之面部照片或面部特徵量中存在與認證裝置30拍攝到之用戶之面部照片或面部特徵量相似或一致者之情形時,面部認證成功。面部認證自身可利用公知方法,例如,可利用主成分分析、線性判別分析、彈性匹配、或隱式馬爾可夫模型(hidden Markov model)等方法。特徵量可用與該等方法相應之計算式計算。Facial authentication is authentication using pre-registered facial photos or facial features. A facial photo is an image captured of the user's face. The amount of facial features is information representing facial features shown in a facial photograph. In this embodiment, although the case where the facial feature quantity is a multi-dimensional vector is described, the facial feature quantity can be in any form, for example, it can be an array or individual values. In this embodiment, when there is a facial photo or facial feature registered in the server 10 that is similar or identical to the user's facial photo or facial feature captured by the authentication device 30, the facial authentication is successful. Known methods can be used for face authentication itself, for example, methods such as principal component analysis, linear discriminant analysis, elastic matching, or hidden Markov model (hidden Markov model) can be used. The characteristic quantity can be calculated by calculation formulas corresponding to these methods.

例如,當用戶操作用戶終端20進行認證服務之利用登錄時,用戶之姓名等個人資訊及用戶之面部照片被登錄於伺服器10中。當利用登錄完成時,由伺服器10發行之用戶ID記憶於用戶終端20之記憶部22中。然後,用戶利用認證服務能夠通過安全門SG。For example, when the user operates the user terminal 20 to log in to use the authentication service, personal information such as the user's name and the user's face photo are registered in the server 10 . When the login is completed, the user ID issued by the server 10 is stored in the storage unit 22 of the user terminal 20 . Then, the user can pass through the security gate SG using the authentication service.

雖可永久地使用相同的用戶ID,但本實施方式中,係於規定之時序更新用戶ID。若更新用戶ID,則之前使用的舊用戶ID將失效。例如,用以利用認證服務之應用程式(以後,稱為認證應用程式)被安裝於用戶終端20,每次啟動認證應用程式時更新用戶ID。Although the same user ID can be used permanently, in this embodiment, the user ID is updated at a predetermined timing. If the user ID is updated, the old user ID used before will become invalid. For example, an application for using an authentication service (hereinafter referred to as an authentication application) is installed on the user terminal 20, and the user ID is updated every time the authentication application is activated.

再者,用戶ID之更新時序不限於認證應用程式之啟動時,可為任意之時序。例如,當用戶於認證應用程式內進行規定操作時、當ID認證成功時或當用戶ID中設定的有效期限到期時,可更新用戶ID。Furthermore, the update timing of the user ID is not limited to the activation of the authentication application, and can be any timing. For example, the user ID can be updated when the user performs a prescribed operation in the authentication application, when the ID authentication is successful, or when the validity period set in the user ID expires.

如圖2所示,例如,用戶於將用戶終端20放入衣服之口袋之狀態下靠近安全門SG。用戶終端20之通信部23預先開啟無線通信功能,將記憶於記憶部22之用戶ID於通信範圍內發送。無線通信功能可於已靠近安全門SG時自動開啟,亦可由用戶手動開啟。無線通信自身可利用任意之通信標準,例如,可利用Bluetooth(註冊商標)或Wi-Fi(註冊商標)。As shown in FIG. 2 , for example, the user approaches the security gate SG with the user terminal 20 in the pocket of the clothes. The communication unit 23 of the user terminal 20 activates the wireless communication function in advance, and sends the user ID stored in the memory unit 22 within the communication range. The wireless communication function can be automatically turned on when approaching the safety gate SG, or manually turned on by the user. Any communication standard can be used for the wireless communication itself, for example, Bluetooth (registered trademark) or Wi-Fi (registered trademark) can be used.

本實施方式中,用戶終端20利用作為Bluetooth(註冊商標)之一種的BLE(Bluetooth Low Energy,低功耗藍牙)之廣告封包發送用戶ID。廣告封包係進行配對前發送之封包,用戶終端20對包含在數米~數十米左右的通信範圍內的不特定數個裝置發送廣告封包。In this embodiment, the user terminal 20 transmits the user ID by using an advertisement packet of BLE (Bluetooth Low Energy, Bluetooth Low Energy), which is one type of Bluetooth (registered trademark). The advertisement packet is a packet sent before pairing, and the user terminal 20 sends the advertisement packet to an unspecified number of devices included in the communication range of several meters to tens of meters.

圖3係表示廣告封包之格式之一例之圖。廣告封包之格式依據無線通信標準而定,通常,格式之詳情公開。因此,本實施方式中,不說明所有格式,而僅說明用戶ID之發送中利用之部分。Fig. 3 is a diagram showing an example of the format of an advertisement packet. The format of the advertisement packet is determined according to the wireless communication standard, and usually, the details of the format are disclosed. Therefore, in this embodiment, not all formats will be described, but only the part used for transmission of the user ID will be described.

如圖3所示,廣告封包中包含用以儲存實際資料之資料有效負載部。資料有效負載部之尺寸可變,最大為37位元組(八位元組)。實際資料儲存於資料有效負載部之AD資料部。儲存於AD資料部之實際資料之種類由資料有效負載部之AD類型而特定。認證裝置30藉由參照AD類型,可特定出儲存於對應之AD資料部之實際資料的種類。As shown in FIG. 3, the advertisement packet includes a data payload portion for storing actual data. The size of the data payload section is variable, up to a maximum of 37 bytes (octets). The actual data is stored in the AD data part of the data payload part. The type of actual data stored in the AD data section is specified by the AD type of the data payload section. The authentication device 30 can specify the type of the actual data stored in the corresponding AD data section by referring to the AD type.

例如,AD類型為第1值意味著儲存於AD資料部之實際資料為服務UUID。服務UUID為能夠識別服務之資訊。例如,藉由服務UUID來識別已發送廣告封包之應用程式。藉由認證應用程式所發送之廣告封包的服務UUID,而識別出該廣告封包已由認證應用程式發送。For example, the first value of the AD type means that the actual data stored in the AD data section is the service UUID. Service UUID is the information that can identify the service. For example, the service UUID is used to identify the application that sent the advertisement packet. The advertising packet sent by the authenticating application is identified by the service UUID of the advertising packet sent by the authenticating application.

而且,例如AD類型為第2值意味著儲存於AD資料部之實際資料為局部名。局部名為能夠識別器件之資訊。例如,局部名為用戶終端20之器件名。根據用戶終端20之作業系統,當認證應用程式等應用程式為後台模式時,或者,當從用戶終端20為睡眠模式以來已經過特定時間時,為了節省電力,記憶體上之局部名有時會被抹除而無法發送。And, for example, the second value of the AD type means that the actual data stored in the AD data part is a local name. The local name is information that can identify the device. For example, the local name is the device name of the user terminal 20 . Depending on the operating system of the user terminal 20, when an application such as an authentication application is in background mode, or when a certain time has elapsed since the user terminal 20 is in sleep mode, the local name on the memory may sometimes be changed to save power. Erased and cannot be sent.

另一方面,只要不刪除認證應用程式等應用程式,服務UUID就可發送相同資訊。因此,本實施方式中,藉由發送在服務UUID之一部分中嵌入了用戶ID之廣告封包,即便不進行配對,亦可從用戶終端20將用戶ID發送至認證裝置30。On the other hand, the service UUID can send the same information as long as the application such as the authentication application is not deleted. Therefore, in this embodiment, by transmitting an advertisement packet in which a user ID is embedded in a part of the service UUID, the user ID can be transmitted from the user terminal 20 to the authentication device 30 even without pairing.

服務UUID利用根據無線通信標準規定的格式即可。例如,若為128位元之服務UUID,則由36位構成,該36位包含32位之數值及4個連字符。36位中之連字符之位置已被預先規定。由於不需要使用所有服務UUID來識別服務,故即使將服務UUID之一部分用於用戶ID,認證裝置30亦可識別出是哪個服務之廣告封包。The service UUID may use a format prescribed by a wireless communication standard. For example, if it is a 128-bit service UUID, it consists of 36 bits, and the 36 bits include a 32-bit value and 4 hyphens. The position of the hyphen in the 36 bits is predetermined. Since it is not necessary to use all the service UUIDs to identify services, even if a part of the service UUIDs is used for the user ID, the authentication device 30 can identify which service the advertisement packet is.

認證裝置30因可能接收由認證應用程式以外之其他應用程式發送的廣告封包,故掃描發送至自身之廣告封包中的由認證應用程式發送之廣告封包。即,認證裝置30將由認證應用程式發送之廣告封包作為處理對象,並將由其他應用程式發送之廣告封包從處理對象中排除並廢除。Since the authentication device 30 may receive advertisement packets sent by applications other than the authentication application, it scans the advertisement packets sent by the authentication application among the advertisement packets sent to itself. That is, the authentication device 30 takes the advertisement packets sent by the authentication application as processing objects, and excludes and discards the advertisement packets sent by other applications from the processing objects.

圖4-圖6係表示認證裝置30掃描廣告封包之情況之圖。圖4及圖5中示出參考用之說明,圖6中示出本實施方式之方法。再者,本實施方式中,說明用戶ID為「0000」~「9999」之4位數值,圖4-圖6中用戶ID為「2791」之情形。FIGS. 4-6 are diagrams showing the situations in which the authentication device 30 scans the advertisement packet. 4 and 5 show a description for reference, and FIG. 6 shows the method of this embodiment. Furthermore, in this embodiment, the user ID is described as a 4-digit value from "0000" to "9999", and the case where the user ID is "2791" in FIGS. 4-6 is described.

圖4之服務UUID係於第1位~第32位中儲存「68753A44-4D6F-1226-9C60-0050E4C0」作為應用程式識別ID,於第33位~第36位中儲存「2791」作為用戶ID。應用程式識別ID係能夠識別認證應用程式之資訊。應用程式識別ID被預先記憶於用戶終端20之記憶部22中。The service UUID in Fig. 4 stores "68753A44-4D6F-1226-9C60-0050E4C0" as the application identification ID in the 1st to 32nd bits, and stores "2791" in the 33rd to 36th bits as the user ID. The application identification ID is information that can identify the authentication application. The application identification ID is pre-stored in the storage unit 22 of the user terminal 20 .

用戶終端20作成包含圖4所示之服務UUID之廣告封包,並將所作成之廣告封包發送至周圍。存在於用戶終端20之通信範圍內之認證裝置30掃描發送至自身之廣告封包中包含服務UUID且包含認證應用程式之應用程式識別ID的廣告封包。即,認證裝置30掃描AD類型為第1值且儲存於AD資料部之服務UUID之第1位~第32位為「68753A44-4D6F-1226-9C60-0050E4C0」之廣告封包。關於其他廣告封包,不經掃描便廢除。The user terminal 20 creates an advertisement packet including the service UUID shown in FIG. 4 , and sends the created advertisement packet to surroundings. The authentication device 30 within the communication range of the user terminal 20 scans the advertisement packet sent to itself that includes the service UUID and the application identification ID of the authentication application. That is, the authentication device 30 scans the advertisement packet whose AD type is the first value and whose first to third second digits of the service UUID stored in the AD data section are "68753A44-4D6F-1226-9C60-0050E4C0". As for other advertising packets, they are discarded without scanning.

圖4之例中,服務UUID之第33位~第36位為任意數值,因此掃描對象係第33位~第36位為「0000」~「9999」之1萬種。認證裝置30因需要將龐大數量之廣告封包作為掃描對象,故有時無法根據認證裝置30之性能掃描所有的廣告封包。例如,即便使認證裝置30掃描1萬種,但實際上也只能掃描數百~數千種,認證裝置30無法接收用戶ID從而無法執行認證處理。In the example shown in Figure 4, the 33rd to 36th digits of the service UUID are arbitrary values, so the scanned objects are 10,000 kinds of "0000" to "9999" in the 33rd to 36th digits. Since the authentication device 30 needs to scan a huge number of advertisement packets, it is sometimes impossible to scan all the advertisement packets according to the performance of the authentication device 30 . For example, even if the authentication device 30 scans 10,000 items, in reality, only hundreds to thousands of items can be scanned, and the authentication device 30 cannot receive the user ID and cannot execute the authentication process.

而且,當用戶終端20將作為數位資料作成之廣告封包轉換為類比之電氣信號時,有時會產生雜訊。有時雜訊亦會因其他因素而產生。例如,雜訊有時因空氣中之外部因素而產生,或者於認證裝置30接收到之類比之電氣信號轉換為數位資料時產生雜訊。因此,即使用戶終端20重複發送包含相同服務UUID之廣告封包,有時由於雜訊之影響,用戶ID亦會被改寫。Furthermore, when the user terminal 20 converts the advertising packet created as digital data into an analog electrical signal, noise may be generated. Sometimes noise can also be caused by other factors. For example, noise is sometimes generated by external factors in the air, or noise is generated when an analog electrical signal received by the authentication device 30 is converted into digital data. Therefore, even if the user terminal 20 repeatedly sends advertisement packets containing the same service UUID, sometimes the user ID will be rewritten due to the influence of noise.

圖4之例中,認證裝置30從用戶終端20接收到之4個廣告封包中的3個中產生了雜訊。雖然該等4個廣告封包應儲存相同的用戶ID,但例如第33位~第36位之至少一個值會因雜訊之影響而被改寫。該情形時,認證裝置30無法判別哪個是正確的用戶ID。In the example of FIG. 4 , the authentication device 30 generates noise in 3 out of 4 advertisement packets received from the user terminal 20 . Although the four advertisement packets should store the same user ID, for example, at least one value of the 33rd to 36th bits will be rewritten due to the influence of noise. In this case, the authentication device 30 cannot determine which is the correct user ID.

可以想到,對於認證裝置30接收到之所有4種廣告封包,均視作正確的用戶ID,並循環比對地執行認證處理,但該情形時,由於需要多次執行認證處理,故伺服器10及認證裝置30之處理負荷增加。進而,位於安全門SG之前之用戶可能會被誤認證為面部相似的其他用戶。圖4之例中,於用戶ID為「2791」之用戶與用戶ID為「1791」、「2795」、「8791」之用戶之面部相似之情形時,存在誤認證之可能性。It is conceivable that all 4 kinds of advertisement packets received by the authentication device 30 are regarded as correct user IDs, and the authentication process is executed in a cyclical comparison. And the processing load of the authentication device 30 increases. Furthermore, the user located in front of the security gate SG may be mistakenly authenticated as another user with a similar face. In the example of FIG. 4, when the faces of the user whose user ID is "2791" and the users whose user IDs are "1791", "2795", and "8791" are similar, there is a possibility of erroneous authentication.

就該點而言,如圖5所示,亦可想到藉由將用戶ID「2791」分割為各個的位,並於4個服務UUID之各者中儲存2個重複之位,來降低雜訊之影響。圖5之例中,服務UUID之第1位~第32位與圖4相同,為應用程式識別ID。於服務UUID之第33位與第34位中,儲存有「00」作為填補以使服務UUID為36位。於服務UUID之第35位與第36位中,儲存有重複的用戶ID之各個的位之數值。In this regard, as shown in Figure 5, it is also conceivable to reduce the noise by splitting the user ID "2791" into individual bits and storing 2 repeated bits in each of the 4 service UUIDs influence. In the example of FIG. 5 , the 1st to 32nd bits of the service UUID are the same as those in FIG. 4 , and are application identification IDs. In the 33rd and 34th bits of the service UUID, "00" is stored as padding to make the service UUID 36 bits. In the 35th and 36th bits of the service UUID, the value of each bit of the repeated user ID is stored.

例如,第1個服務UUID之第35位與第36位係將作為用戶ID之第1位的「2」重複地加入2個而成為「22」。而且,例如第2個服務UUID之第35位與第36位係將作為用戶ID之第2位的「7」重複地加入2個而成為「77」。而且,例如第3個服務UUID之第35位與第36位係將作為用戶ID之第2位的「9」重複地加入2個而成為「99」。而且,例如第4個服務UUID之第35位與第36位係將作為用戶ID之第4位的「1」重複地加入2個而成為「11」。For example, the 35th and 36th digits of the first service UUID are "22" by repeatedly adding "2" which is the first digit of the user ID. Moreover, for example, the 35th and 36th bits of the second service UUID are "77" by adding two "7" which are the second bit of the user ID repeatedly. Moreover, for example, the 35th and 36th digits of the third service UUID are "99" by adding two "9" which are the second digit of the user ID repeatedly. Moreover, for example, the 35th and 36th bits of the fourth service UUID are "11" by adding two "1" which are the fourth bit of the user ID repeatedly.

於圖5之情形時,認證裝置30因只需掃描第35位與第36位一致之廣告封包即可,故掃描對象為10種,即,第35位與第36位從「00」~「99」一致者。由於與圖4之情形相比掃描對象大幅減少,故可減少認證裝置30之處理負荷,並能夠可靠地掃描所有。因此,可防止用戶ID從掃描對象遺漏而無法執行認證處理。In the case of FIG. 5 , the authentication device 30 only needs to scan the advertisement packets whose 35th and 36th bits are consistent, so there are 10 types of scanning objects, that is, the 35th and 36th bits are from "00" to "00" 99" Consistent. Since the objects to be scanned are greatly reduced compared with the situation of FIG. 4 , the processing load of the authentication device 30 can be reduced, and all of them can be reliably scanned. Therefore, it is possible to prevent the user ID from being missing from the scan target and failing to execute the authentication process.

進而,若第35位與第36位不一致則不會被掃描,因此可一定程度上消除雜訊之影響。例如,於第35位與第36位為表示用戶ID之第1位之「22」時,即使受到雜訊之影響成為「24」,亦會因第35位與第36位不一致而不被掃描,故可排除受到雜訊之影響之廣告封包並廢除。然而,如圖5所示,若第35位與第36位之雙方受到雜訊之影響,將「22」改寫為「55」,則無法排除這種受到雜訊之影響之廣告封包。Furthermore, if the 35th bit is not consistent with the 36th bit, it will not be scanned, so the influence of noise can be eliminated to a certain extent. For example, when the 35th and 36th digits are "22" representing the first digit of the user ID, even if it becomes "24" due to noise, it will not be scanned because the 35th and 36th digits do not match , so the advertising packets affected by the noise can be excluded and abolished. However, as shown in FIG. 5, if both the 35th and 36th bits are affected by noise, and "22" is rewritten as "55", then such advertising packets affected by noise cannot be ruled out.

而且,於圖5之情形時,因將4位之用戶ID分為4個廣告封包發送,故認證裝置30有可能無法特定出各個的位之順序。例如,即使將從第1個服務UUID到第4個服務UUID按照順序發送,認證裝置30亦未必按照發送順序接收,即使按照接收順序來排列位,亦有時無法獲得正確的用戶ID。進而,根據認證裝置30之作業系統,所接收之服務UUID有時按照升序排序。該情形時,「2791」之用戶ID之各個的數值按升順排序而成為「1279」,這可能不是正確的用戶ID。Moreover, in the case of FIG. 5 , since the 4-digit user ID is divided into 4 advertisement packets and sent, the authentication device 30 may not be able to specify the order of the respective digits. For example, even if the first service UUID to the fourth service UUID are sent in order, the authentication device 30 may not receive them in the order in which they were sent, and even if they are arranged in the order in which they were received, sometimes the correct user ID cannot be obtained. Furthermore, depending on the operating system of the authentication device 30, the received service UUIDs are sometimes sorted in ascending order. In this case, each numerical value of the user ID of "2791" becomes "1279" in ascending order, which may not be the correct user ID.

因此,本實施方式中,如圖6所示,服務UUID中包含順序資訊。順序資訊為用戶ID中之各個的位之順序相關之資訊。本實施方式中,因4位之用戶ID被分割為各個的位,故順序資訊係表示為用戶ID之第幾位之資訊。圖6之例中,「A」、「B」、「C」、「D」分別表示為第1位、第2位、第3位、第4位。順序資訊能夠以其他任意形式表現,例如,能夠以「1」~「4」之數值表現。而且,例如如「A」表示第4位、「B」表示第1位般,字符順序與位順序不必一致。Therefore, in this embodiment, as shown in FIG. 6 , the service UUID includes sequence information. The sequence information is information related to the sequence of bits in the user ID. In this embodiment, since the 4-digit user ID is divided into individual bits, the order information is expressed as the information of the number of the user ID. In the example of FIG. 6, "A", "B", "C", and "D" are represented as the first, second, third, and fourth digits, respectively. The sequence information can be expressed in any other form, for example, it can be expressed in numerical values from "1" to "4". Furthermore, for example, "A" indicates the fourth digit, and "B" indicates the first digit, and the order of characters does not necessarily match the order of bits.

圖6之例中,服務UUID之第1位~第14位之「68753A44-4D6F-」及第19位~第32位之「-9C60-0050E4C0」為應用程式識別ID。圖6之應用程式識別ID之位數雖少於圖4及圖5之應用程式識別ID,但由於具有足以識別應用程式之位數,故認證裝置30可識別出其為認證應用程式之廣告封包。In the example shown in FIG. 6, "68753A44-4D6F-" in the 1st to 14th digits of the service UUID and "-9C60-0050E4C0" in the 19th to 32nd digits of the service UUID are application identification IDs. Although the number of digits of the application program identification ID in Figure 6 is less than that of Figure 4 and Figure 5, the authentication device 30 can identify it as the advertisement packet of the application program because it has enough digits to identify the application program .

再者,應用程式識別ID可為任意位數,但若位數過少則可能與其他應用程式重複而無法區分,因此設為具有一定程度的位數(例如,10位以上)。服務UUID已規定位數之上限(例如,36位),故規定了用戶ID之位的個數或順序資訊之個數,以可確保一定程度的位數作為應用程式識別ID。相反,若用戶ID之位的個數或順序資訊之個數過少,則降低雜訊影響之效果會減弱,因此亦確保該等之個數為一定程度。Furthermore, the application identification ID can have any number of digits, but if the number of digits is too small, it may overlap with other applications and cannot be distinguished, so it is set to have a certain number of digits (for example, 10 or more). The service UUID has specified the upper limit of digits (for example, 36 digits), so the number of digits of the user ID or the number of sequential information is stipulated to ensure a certain degree of digits as the application identification ID. On the contrary, if the number of bits of the user ID or the number of sequential information is too small, the effect of reducing the influence of noise will be weakened, so these numbers are also ensured to a certain extent.

如圖6所示,於服務UUID之第15位~第18位中儲存了重複4個之順序資訊,服務UUID之第33位~第36位中儲存了重複4個之用戶ID之各個的位之數值。As shown in Figure 6, the 15th to 18th bits of the service UUID store repeated 4 sequence information, and the 33rd to 36th bits of the service UUID store the bits of each of the 4 repeated user IDs value.

例如,第1個服務UUID之第15位~第18位係將表示為第1位之「A」重複地加入4個而成為「AAAA」,第33位~第36位係將作為用戶ID之第1位的「2」重複地加入4個而成為「2222」。而且,例如第2個服務UUID之第15位~第18位係將表示為第2位之「B」重複地加入4個而成為「BBBB」,第33位~第36位係將作為用戶ID之第2位的「7」重複地加入4個而成為「7777」。For example, the 15th to 18th digits of the first service UUID will repeatedly add 4 "A" represented as the first digit to become "AAAA", and the 33rd to 36th digits will be used as the user ID Four "2" of the first place are added repeatedly to become "2222". Moreover, for example, the 15th to 18th digits of the second service UUID will repeatedly add 4 "B" represented as the second digit to become "BBBB", and the 33rd to 36th digits will be used as the user ID The second "7" is repeatedly added 4 to become "7777".

而且,例如第3個服務UUID之第15位~第18位係將表示為第3位之「C」重複地加入4個而成為「CCCC」,第33位~第36位係將作為用戶ID之第3位的「9」重複地加入4個而成為「9999」。而且,例如第4個服務UUID之第15位~第18位係將表示為第4位之「D」重複地加入4個而成為「DDDD」,第33位~第36位係將作為用戶ID之第4位的「1」重複地加入4個而成為「1111」。Moreover, for example, the 15th to 18th digits of the third service UUID will repeatedly add 4 "C", which is represented as the third digit, to become "CCCC", and the 33rd to 36th digits will be used as the user ID The "9" in the third place is repeatedly added to 4 to become "9999". Moreover, for example, the 15th to 18th digits of the fourth service UUID will repeatedly add 4 "D" represented as the fourth digit to become "DDDD", and the 33rd to 36th digits will be used as the user ID Four "1" at the 4th place are repeatedly added to become "1111".

於圖6之情形時,掃描對象為40種,即,將第33位~第36位為「0000」~「9999」之10種乘以第15位~第18位為「AAAA」~「DDDD」之4種而得。雖然掃描對象較圖5之情形略多,但掃描對象明顯小於圖4之情形,認證裝置30能夠可靠地掃描所有。而且,認證裝置30可根據順序資訊,特定出各個的位之順序而準確地取得用戶ID。進而,與圖5之情形相比,因順序資訊與用戶ID之各個的位分別各重複4個,重複數多,故降低雜訊之效果亦增大。In the case of Figure 6, there are 40 types of scanning objects, that is, the 33rd to 36th digits are "0000" to "9999" and the 10 types are multiplied by the 15th to 18th digits to be "AAAA" to "DDDD "From 4 kinds. Although there are slightly more scanned objects than the situation in FIG. 5 , the scanned objects are obviously smaller than the situation in FIG. 4 , and the authentication device 30 can reliably scan all of them. Moreover, the authentication device 30 can specify the sequence of each bit according to the sequence information to accurately obtain the user ID. Furthermore, compared with the case of FIG. 5 , since each of the sequence information and the user ID repeats 4 bits each, and the number of repetitions is large, the effect of reducing noise is also increased.

認證裝置30取得用戶ID時,由攝影部36拍攝用戶之面部而取得面部照片。認證裝置30對伺服器10發送用戶ID及面部照片。伺服器10基於用戶ID及面部照片進行ID認證與面部認證,對認證裝置30發送表示認證是否成功之認證結果。認證裝置30於認證已成功之情形時,解除安全門SG之鎖定,使提示用戶通行之消息顯示於顯示部35。認證裝置30於認證已失敗之情形時,不解除安全門SG之鎖定,使規定之錯誤消息顯示於顯示部35。When the authentication device 30 obtains the user ID, the photographing unit 36 photographs the user's face to obtain a facial photo. The authentication device 30 sends the user ID and facial photo to the server 10 . The server 10 performs ID authentication and face authentication based on the user ID and face photo, and sends an authentication result indicating whether the authentication is successful to the authentication device 30 . When the authentication is successful, the authentication device 30 unlocks the security door SG, and displays a message on the display unit 35 prompting the user to pass through. The authentication device 30 displays a predetermined error message on the display unit 35 without unlocking the security door SG when the authentication has failed.

如以上,本實施方式中,藉由利用廣告封包,即使不在用戶終端20與認證裝置30之間配對,亦可執行認證處理。進而,各個廣告封包藉由包含重複複數個之順序資訊且包含重複複數個之用戶ID之各個的位,而應對雜訊之影響,從而使認證裝置30準確地取得用戶ID。以後,將說明通信系統S之詳情。As described above, in this embodiment, by using the advertisement packet, the authentication process can be executed without pairing between the user terminal 20 and the authentication device 30 . Furthermore, each advertisement packet can cope with the influence of noise by including a plurality of repeated sequential information and bits of each of a plurality of repeated user IDs, so that the authentication device 30 can accurately obtain the user ID. Hereinafter, details of the communication system S will be described.

[3.通信系統中實現之功能]  圖7係表示通信系統S中實現之功能之一例的功能方塊圖。此處,對由伺服器10、用戶終端20及認證裝置30之各者實現之功能進行說明。[3. Functions implemented in the communication system] FIG. 7 is a functional block diagram showing an example of functions implemented in the communication system S. Here, functions realized by each of the server 10, the user terminal 20, and the authentication device 30 will be described.

[3-1.伺服器中實現之功能]  如圖7所示,伺服器10中,實現了資料記憶部100、發行部101及執行部102。資料記憶部100主要由記憶部12實現。發行部101與執行部102之各者主要由控制部11實現。[3-1. Functions implemented in the server] As shown in FIG. 7 , in the server 10, the data storage unit 100, the distribution unit 101, and the execution unit 102 are realized. The data storage unit 100 is mainly realized by the storage unit 12 . Each of the issuing unit 101 and the executing unit 102 is mainly realized by the control unit 11 .

[資料記憶部]  資料記憶部100記憶提供認證服務所需之資料。本實施方式中,作為資料記憶部100記憶之資料之一例,對用戶資料庫DB進行說明。[Data memory unit] The data memory unit 100 stores the data required for providing authentication services. In this embodiment, a user database DB will be described as an example of data stored in the data storage unit 100 .

圖8係表示用戶資料庫DB之資料儲存例之圖。如圖8所示,用戶資料庫DB係儲存有與完成利用登錄之複數個用戶之各者相關的各種資訊之資料庫。例如,用戶資料庫DB中儲存有用戶賬戶、用戶姓名、密碼、用戶ID、經上載之面部照片之資料及根據面部照片計算出之面部特徵量。Fig. 8 is a diagram showing an example of data storage in a user database DB. As shown in FIG. 8 , the user database DB is a database storing various information related to each of a plurality of users who have registered for use. For example, the user account, user name, password, user ID, data of uploaded facial photos, and facial features calculated from the facial photos are stored in the user database DB.

用戶賬戶係能夠識別用戶之資訊。用戶賬戶係與用戶ID相似之概念,但本實施方式中,雖每次啟動認證應用程式時會更新用戶ID,但原則上用戶賬戶係永久使用而不進行更新。而且,本實施方式之用戶ID雖許可在沒有相似面部之用戶之間重複,但用戶賬戶原則上在用戶之間無論面部是否相似均不重複。用戶之郵件位址可用作用戶賬戶。A user account is information that can identify a user. A user account is a concept similar to a user ID, but in this embodiment, although the user ID is updated each time the authentication application is started, in principle, the user account is used permanently and does not need to be updated. Furthermore, although user IDs in this embodiment are allowed to be duplicated among users who do not have similar faces, in principle, user accounts do not overlap between users regardless of whether their faces are similar or not. The user's email address can be used as the user account.

伺服器10於受理用戶之利用登錄時,在用戶資料庫DB中作成新的記錄,並儲存與已利用登錄之用戶相關的各種資訊。例如,伺服器10計算用戶上載之面部照片之特徵量,並儲存於用戶資料庫DB中。用戶ID藉由後述發行部101發行初始值,本實施方式中,每次啟動認證應用程式時更新為新的用戶ID。關於面部照片等其他資訊,亦可能事後變更。The server 10 creates a new record in the user database DB when accepting the user's registration, and stores various information related to the registered user. For example, the server 10 calculates feature quantities of facial photos uploaded by users and stores them in the user database DB. The user ID is issued with an initial value by the issuing unit 101 described later, and in this embodiment, it is updated to a new user ID every time the authentication application is activated. Other information such as facial photos may also be changed afterwards.

再者,資料記憶部100記憶之資料不限於用戶資料庫DB,資料記憶部100能夠記憶任意資料。例如,於複數個認證裝置30包含於通信系統S之情形時,資料記憶部100可記憶資料庫,該資料庫儲存有與複數個認證裝置30之各者相關的各種資訊。Furthermore, the data stored in the data storage unit 100 is not limited to the user database DB, and the data storage unit 100 can store any data. For example, when a plurality of authentication devices 30 are included in the communication system S, the data storage unit 100 may store a database storing various information related to each of the plurality of authentication devices 30 .

[發行部]  發行部101基於ID發行規則發行複數個用戶各者之用戶ID。ID發行規則為預先規定之規則即可,例如,可為隨機地發行用戶ID之規則,亦可為將空缺編號中之最小編號發行為用戶ID之規則。本實施方式中,列舉如下情形為例進行說明,即,ID發行規則為以不與面部相似之其他用戶之用戶ID重複的方式發行隨機的用戶ID之規則。[Issuing Unit] The issuing unit 101 issues user IDs for each of a plurality of users based on ID issuing rules. The ID issuance rule may be a predetermined rule, for example, it may be a rule for randomly issuing user IDs, or a rule for issuing the smallest number among vacant numbers as a user ID. In this embodiment, a case will be described as an example in which the ID issuance rule is a rule that a random user ID is issued so as not to overlap with the user IDs of other users whose faces are similar.

例如,發行部101於發行某個用戶(以後,稱為發行對象之用戶)之用戶ID之情形時,隨機地生成4位數值作為用戶ID之候選。發行部101參照用戶資料庫DB,並判定發行對象之用戶的面部與和所生成之候選相同的用戶ID所關聯之用戶的面部是否相似。面部之是否相似判定自身可利用面部認證中所利用之各種方法,本實施方式中,因面部特徵量以向量形式表現,故基於向量空間中之2個面部特徵量的距離來進行是否相似判定。距離未達閾值意味著面部相似。距離為閾值以上意味著面部不相似。For example, when issuing the user ID of a certain user (hereinafter referred to as the user to be issued), the issuing unit 101 randomly generates a 4-digit numerical value as a candidate for the user ID. The issuing unit 101 refers to the user database DB, and determines whether the face of the user to be issued is similar to the face of the user associated with the same user ID as the generated candidate. The face similarity determination itself can use various methods used in face authentication. In this embodiment, since the facial features are expressed in the form of vectors, the similarity determination is performed based on the distance between two facial features in the vector space. A distance below the threshold means that the faces are similar. A distance above the threshold means that the faces are not similar.

發行部101於上述判定中判定為不相似時,將當前之候選決定為發行對象之用戶的用戶ID。發行部101於上述判定中判定為相似時,隨機地生成其他4位數值,並作為新的候選而取得。以後,發行部101生成新的候選直至找到上述判定中判定為不相似之候選為止。When it is determined that the distribution unit 101 is not similar in the above determination, the current candidate is determined as the user ID of the user who is the distribution target. When the issuance unit 101 judges that they are similar in the above judgment, it randomly generates another 4-digit value and acquires it as a new candidate. Thereafter, the issuing unit 101 generates new candidates until it finds a candidate determined to be dissimilar in the above determination.

發行部101將上述所決定之用戶ID作為發行對象之用戶的用戶ID儲存於用戶資料庫DB中。發行部101對用戶終端20發送上述所決定之用戶ID。用戶終端20於接收用戶ID時,作為新的用戶ID記錄於後述資料記憶部200中,並抹除舊的用戶ID。本實施方式中,發行部101於用戶已進行利用登錄時或啟動了認證應用程式時,發行用戶ID,但如上所述,用戶ID之發行時序並不限於本實施方式之例。The issuing unit 101 stores the determined user ID in the user database DB as the user ID of the user to whom the issue is issued. The issuing unit 101 transmits the above-determined user ID to the user terminal 20 . When the user terminal 20 receives the user ID, it records it as a new user ID in the data storage unit 200 described later, and erases the old user ID. In the present embodiment, the issuing unit 101 issues the user ID when the user has registered for use or activated the authentication application, but as described above, the timing of issuing the user ID is not limited to the example of the present embodiment.

[執行部]  執行部102基於認證裝置30之要求執行規定處理。規定處理為與適用通信系統S之服務相應的內容之處理即可。本實施方式中,已說明適用於認證服務之例,因此作為規定處理之一例,說明認證處理。執行部102從認證裝置30接收後述用戶ID取得部303所取得之用戶ID,並基於用戶ID執行認證處理。[Execution Unit] The execution unit 102 executes predetermined processing based on a request from the authentication device 30 . It is only necessary to define the processing as the processing of the content corresponding to the service of the applicable communication system S. In this embodiment, an example of application to an authentication service has been described, so authentication processing will be described as an example of predetermined processing. The execution unit 102 receives the user ID acquired by the user ID acquisition unit 303 described later from the authentication device 30, and executes the authentication process based on the user ID.

本實施方式中,因利用ID認證與面部認證之兩階段認證,故執行部102藉由判定從認證裝置30接收到之用戶ID是否存在於用戶資料庫DB中,而執行ID認證。於用戶ID存在於用戶資料庫DB之情形時,ID認證成功。於用戶ID不存在於用戶資料庫DB之情形時,ID認證失敗。In this embodiment, since the two-stage authentication of ID authentication and face authentication is used, the execution unit 102 executes ID authentication by judging whether the user ID received from the authentication device 30 exists in the user database DB. When the user ID exists in the user database DB, the ID authentication is successful. When the user ID does not exist in the user database DB, ID authentication fails.

執行部102於ID認證成功之情形時,基於從認證裝置30接收到之面部照片,計算作為處理對象之用戶之面部特徵量。執行部102基於計算出之面部特徵量與儲存於用戶資料庫DB中之成為正解之面部特徵量(與從認證裝置30接收到之用戶ID相關聯之面部特徵量),執行面部認證。於該等距離未達閾值之情形時,面部認證成功。於該等距離為閾值以上之情形時,面部認證失敗。執行部102對認證裝置30發送ID認證與面部認證之認證結果。When the ID authentication is successful, the execution unit 102 calculates the facial feature value of the user to be processed based on the facial photograph received from the authentication device 30 . Execution unit 102 executes face authentication based on the calculated facial features and the positive facial features stored in the user database DB (the facial features associated with the user ID received from authentication device 30 ). When the distance does not reach the threshold, the face authentication is successful. When the distance is above the threshold, face authentication fails. The execution unit 102 sends the authentication results of ID authentication and face authentication to the authentication device 30 .

再者,本實施方式中,說明於一個用戶資料庫DB中儲存有用戶ID及面部特徵量之情形,但亦可針對每個用戶ID劃分儲存面部特徵量之資料庫。該情形時,資料記憶部100記憶複數個資料庫,將用戶ID用作檢索資料庫之查詢。執行部102參照與從認證裝置30接收到之用戶ID相關聯之資料庫,判定是否存在與基於從認證裝置30接收到之面部照片所計算出之面部特徵量相似的面部特徵量。該情形時,由於不執行ID認證,故認證處理僅為一階段之面部認證。Furthermore, in this embodiment, a case where user IDs and facial feature quantities are stored in one user database DB is described, but the database storing facial feature quantities may be divided for each user ID. In this case, the data storage unit 100 memorizes a plurality of databases, and uses the user ID as a query for searching the databases. The execution unit 102 refers to the database associated with the user ID received from the authentication device 30 and determines whether there is a facial feature value similar to the facial feature value calculated based on the facial photograph received from the authentication device 30 . In this case, since ID authentication is not performed, the authentication process is only one-stage face authentication.

[3-2.用戶終端中實現之功能]  如圖7所示,用戶終端20中,實現了資料記憶部200、分割部201、作成部202、及發送部203。資料記憶部200主要由記憶部22實現。分割部201、作成部202、及發送部203之各者主要由控制部21實現。本實施方式中,用戶終端20中安裝有認證應用程式,分割部201、作成部202、及發送部203之各者之處理作為應用程式之處理而執行。[3-2. Functions Realized in User Terminal] As shown in FIG. 7 , in the user terminal 20, a data storage unit 200, a division unit 201, a creation unit 202, and a transmission unit 203 are realized. The data storage unit 200 is mainly realized by the storage unit 22 . Each of the division unit 201 , the creation unit 202 , and the transmission unit 203 is mainly realized by the control unit 21 . In the present embodiment, the authentication application is installed in the user terminal 20, and the processing of each of the division unit 201, the creation unit 202, and the transmission unit 203 is executed as the processing of the application.

[資料記憶部]  資料記憶部200記憶用戶利用認證服務所需之資料。例如,資料記憶部200記憶用戶之面部照片之資料、由發行部101發行之用戶ID、認證應用程式及認證應用程式之應用程式識別ID。用戶ID與應用程式識別ID可作為認證應用程式之一部分記憶於資料記憶部200中。[Data memory unit] The data memory unit 200 stores the information required by the user to use the authentication service. For example, the data storage unit 200 stores the data of the user's face photo, the user ID issued by the issuing unit 101, the authentication application, and the application identification ID of the authentication application. The user ID and application identification ID can be stored in the data storage unit 200 as part of the authentication application.

[分割部]  分割部201將發送對象資料分割為複數個資料部分。該分割規則被定義為認證應用程式。本實施方式中,分割部201將用戶ID分割為各個的位。用戶ID為發送對象資料之一例,各個的位為資料部分之一例。因此,本實施方式中對用戶ID所說明之處可改稱為發送對象資料,對各個的位所說明之處可改稱為資料部分。[Division Unit] The division unit 201 divides the transmission object data into a plurality of data parts. The segmentation rules are defined for authentication applications. In the present embodiment, the dividing unit 201 divides the user ID into individual bits. The user ID is an example of the data to be sent, and each bit is an example of the part of the data. Therefore, in this embodiment, the description of the user ID can be renamed as the transmission object data, and the description of each bit can be renamed as the data part.

發送對象資料係從用戶終端20發送至認證裝置30之資料。換言之,發送對象資料為分割前之資料,且為作為資料部分之分割源之資料。發送對象資料可為任意資料,亦可為與適用通信系統S之服務相應之資料。本實施方式中,說明作為發送對象資料之一例之用戶ID記憶於資料記憶部200之情形,發送對象資料亦可記憶於用戶終端20以外之電腦或與用戶終端20連接之資訊記憶介質中。而且,用戶ID以外之認證資訊可相當於發送對象資料。例如,密碼、口令碼、電話號碼、郵件位址或用戶終端20之個體識別資訊等認證資訊可相當於發送對象資料。The data to be sent is the data sent from the user terminal 20 to the authentication device 30 . In other words, the data to be sent is the data before division and the data that is the division source of the data part. The data to be sent may be arbitrary data, and may also be data corresponding to the service of the applicable communication system S. In this embodiment, the case where the user ID as an example of the data to be sent is stored in the data storage unit 200 is described, but the data to be sent may be stored in a computer other than the user terminal 20 or an information storage medium connected to the user terminal 20 . Furthermore, authentication information other than user ID may correspond to transmission object data. For example, authentication information such as a password, a password code, a telephone number, an email address, or individual identification information of the user terminal 20 may correspond to the sending object data.

資料部分為發送對象資料之一部分。各個資料部分由至少一個數值或字符表示。用以表現數值之「0」~「9」之數字為字符之一種。資料部分之個數可預先規定,亦可動態地變化。於使資料部分之個數可變之情形時,需要使認證裝置30辨識出劃分為多少個資料部分,因此該情形時,表示資料部分之個數之資訊利用廣告封包等來發送。後述特定部302參照該資訊特定出資料部分之個數。The data part is a part of the sending object data. Each data part is represented by at least one numerical value or character. The numerals "0" to "9" used to represent numerical values are one type of characters. The number of data parts can be predetermined or dynamically changed. When making the number of data parts variable, it is necessary for the authentication device 30 to recognize how many data parts are divided into. Therefore, in this case, information indicating the number of data parts is transmitted using an advertisement packet or the like. The specifying unit 302 described later refers to this information to specify the number of data parts.

而且,各個資料部分之資訊量(例如,位數)可彼此相同,亦可不同。例如,並非如本實施方式般所有資料部分均為1位數值,位數亦可根據資料部分而不同,如某個資料部分為2位數值,其他資料部分為1位數值。即,用戶ID之位數與資料部分之數可不一致。於使各個資料部分之資訊量不同之情形時,需要使認證裝置30辨識出某個廣告封包中所包含之資料部分的資訊量,因此該情形時,表示資料部分之資訊量之資訊可利用廣告封包等發送。Also, the amount of information (for example, the number of bits) of each data part may be the same as or different from each other. For example, not all data parts are 1-digit values as in this embodiment, and the number of digits can also be different according to the data parts. For example, a certain data part is a 2-digit value, and other data parts are 1-digit values. That is, the number of digits of the user ID may not coincide with the number of data parts. When the amount of information in each data part is different, it is necessary for the authentication device 30 to recognize the amount of information in the data part contained in a certain advertisement packet. Therefore, in this case, the information indicating the amount of information in the data part can be used in the advertisement Packets, etc. are sent.

再者,本實施方式中,說明所有用戶之用戶ID為4位之情形,但用戶ID之位數可根據用戶而不同。例如,本實施方式中,即便是「67」這樣的數值,為了成為4位,會附加「00」後將「0067」設為用戶ID,但亦可將「67」這樣的2位數值用作用戶ID。該情形時,發送用戶ID所需之廣告封包為2個即可。然而,因需要使認證裝置30辨識出用戶ID為幾位,故該情形時,表示用戶ID為幾位數值之資訊利用廣告封包等而發送。In addition, in this embodiment, the case where the user ID of all users is 4 digits is demonstrated, but the number of digits of a user ID may differ with a user. For example, in the present embodiment, "0067" is set as the user ID after adding "00" to a numerical value such as "67" in order to make it 4 digits, but a 2-digit numerical value such as "67" can also be used as user ID. In this case, only two advertisement packets are required for sending the user ID. However, since it is necessary for the authentication device 30 to recognize the number of digits of the user ID, in this case, the information indicating the number of digits of the user ID is transmitted using an advertisement packet or the like.

[作成部]  作成部202作成從用戶終端20發送至認證裝置30之複數個封包之各者。本實施方式中,說明複數個封包之各者為規定之無線通信標準中之廣告封包之情形,亦可利用廣告封包以外之封包進行通信。因此,本實施方式中對廣告封包所說明之處可改稱為任意通信標準之封包。[Creating Unit] The creating unit 202 creates each of a plurality of packets transmitted from the user terminal 20 to the authentication device 30 . In this embodiment, the case where each of the plurality of packets is an advertisement packet in a predetermined wireless communication standard is described, but it is also possible to perform communication using packets other than the advertisement packet. Therefore, what is described about the advertisement packet in this embodiment can be changed to a packet of any communication standard.

例如,本實施方式中,說明不需要配對之情形,但可於配對後發送用戶ID,該情形時,作成部202作成並非廣告封包之通常之封包。而且,例如於用戶終端20與認證裝置30之間利用Wi-Fi(註冊商標)等其他無線通信標準之情形時,作成部202作成能夠以該標準發送之封包即可。而且,例如用戶終端20與認證裝置30可進行有線通信,該情形時,作成部202作成能夠以有線通信標準發送之封包即可。For example, in this embodiment, the case where pairing is not required is described, but the user ID can be sent after pairing. In this case, the creation unit 202 creates a normal packet other than an advertisement packet. Furthermore, for example, when another wireless communication standard such as Wi-Fi (registered trademark) is used between the user terminal 20 and the authentication device 30 , the creation unit 202 may create a packet that can be transmitted by the standard. Furthermore, for example, the user terminal 20 and the authentication device 30 are capable of wired communication. In this case, the creation unit 202 may create a packet that can be transmitted by the wired communication standard.

作成部202以複數個廣告封包之各者中包含重複複數個之用戶ID之至少一個位、且包含用戶ID中之該位之順序相關的順序資訊之方式,作成複數個廣告封包之各者。本實施方式中,說明每一個廣告封包中包含用戶ID之一個位,所作成之廣告封包數與用戶ID之位數一致之情形,但該等亦可不一致。而且,一個廣告封包中重複地包含之位數不限於4個,可為2個、3個或5個以上。而且,亦可針對每個廣告封包,重複地包含之位數不同。The creation unit 202 creates each of the plurality of advertisement packets in such a manner that each of the plurality of advertisement packets includes at least one bit repeated in the plurality of user IDs and includes sequence information related to the order of the bits in the user ID. In this embodiment, a case is described in which each advertisement packet includes one bit of the user ID, and the number of advertisement packets to be created matches the number of digits of the user ID, but they may not match. Moreover, the number of digits repeatedly included in an advertisement packet is not limited to 4, but can be 2, 3 or more than 5. Furthermore, the number of repeatedly included bits may be different for each advertisement packet.

例如,關於用戶ID「2791」,以第1個廣告封包中包含重複複數個之「27」且第2個廣告封包中包含重複複數個之「91」之方式,於一個廣告封包中包含用戶ID之複數個位。該情形時,如第1個廣告封包之第33位~第36位為「2727」般,第2個廣告封包之第33位~第36位為「9191」。該等廣告封包之第15位~18位中儲存有如「ABAB」或「CDCD」般之順序資訊即可。或者,如第1個廣告封包之第33位~第36位為「2277」般,第2個廣告封包之第33位~第36位為「9911」。該等廣告封包之第15位~18位中儲存有如「AABB」或「CCDD」般之順序資訊即可。For example, regarding the user ID "2791", the user ID is included in one advertisement packet in such a way that the first advertisement packet contains the repeated "27" and the second advertisement packet contains the repeated "91" plural digits of . In this case, if the 33rd to 36th bits of the first advertisement packet are "2727", the 33rd to 36th bits of the second advertisement packet are "9191". The order information such as "ABAB" or "CDCD" is stored in the 15th to 18th bits of these advertisement packets. Or, if the 33rd to 36th bits of the first advertisement packet are "2277", the 33rd to 36th bits of the second advertisement packet are "9911". The order information such as "AABB" or "CCDD" can be stored in the 15th to 18th bits of these advertisement packets.

而且,例如某個廣告封包中包含之位數與其他廣告封包中包含之位數可不同。例如,可於第1個廣告封包中僅包含重複複數個之用戶ID之第1位,於第2個廣告封包中包含重複複數個之用戶ID之第2位~第4位。如此,各個廣告封包中包含重複複數個之用戶ID之至少一個位即可。Also, for example, the number of bits contained in one advertisement packet may be different from the number of bits contained in other advertisement packets. For example, only the first digit of the user ID repeated in the first advertisement packet may be included, and the second to fourth digits of the user ID repeated in the second advertisement packet may be included. In this way, each advertisement packet only needs to include at least one bit of a plurality of repeated user IDs.

各個廣告封包中可僅包含1個順序資訊,本實施方式中,作成部202以於複數個廣告封包之各者中包含重複複數個之順序資訊之方式,作成複數個廣告封包之各者。一個廣告封包中重複包含之順序資訊之數不限於4個,亦可為2個、3個或5個以上。而且,針對每個廣告封包,重複包含之順序資訊之數可不同。而且,一個廣告封包中包含之順序資訊之數與用戶ID之位數可不同。例如,一個廣告封包中可僅包含2個順序資訊,包含4個用戶ID之各個的位。Each advertisement packet may contain only one piece of sequence information. In this embodiment, the creation unit 202 creates each of the plurality of advertisement packets by including a plurality of pieces of sequence information repeated in each of the plurality of advertisement packets. The number of sequence information repeatedly included in an advertisement packet is not limited to 4, and may also be 2, 3 or more than 5. Moreover, for each advertisement packet, the number of sequence information included repeatedly may be different. Moreover, the number of sequence information contained in an advertisement packet and the number of digits of the user ID may be different. For example, an advertisement packet may only contain 2 pieces of sequential information, including the bits of each of the 4 user IDs.

本實施方式中,作成部202以於複數個廣告封包之各者中連續地包含重複複數個之順序資訊之方式,作成複數個廣告封包之各者。此處之連續係指廣告封包內之資料區域連續。例如,第15位~第18位中連續地儲存順序資訊,4個順序資訊之各者儲存於廣告封包內之連續資料區域。順序資訊之間不存在應用程式識別ID等其他資訊。再者,儲存於一個廣告封包之4個順序資訊可如第10位、第14位、第16位、第20位般不連續而散亂地儲存。In this embodiment, the creating unit 202 creates each of the plurality of advertisement packets so that each of the plurality of advertisement packets continuously includes a plurality of sequence information repeated. The continuous here refers to the continuous data area in the advertisement packet. For example, sequence information is continuously stored in the 15th to 18th bits, and each of the four sequence information is stored in the continuous data area in the advertisement packet. There is no other information such as application identification ID among sequential information. Furthermore, the four sequential information stored in one advertisement packet can be stored discontinuously and scatteredly like the 10th, 14th, 16th, and 20th bits.

本實施方式中,作成部202以複數個廣告封包之各者中重複複數個之至少一個位與順序資訊離開規定距離以上之方式,作成複數個廣告封包之各者。此處之距離為廣告封包內之資料區域中之距離。距離亦可為位數或字符數。用戶ID與順序資訊之間存在應用程式識別ID之一部分。圖6之例中,位於第15位~第18位之4個順序資訊與位於第33位~第36位之4個位之間,存在第19位~第32位之應用程式識別ID之一部分。因此,順序資訊與位離開14位的距離。再者,順序資訊與用戶ID之各個的位亦可連續地儲存。In the present embodiment, the creation unit 202 creates each of the plurality of advertisement packets in such a manner that at least one of the plurality of repeated bits is separated from the sequential information by a predetermined distance or more. The distance here is the distance in the data area in the advertisement packet. The distance can also be the number of digits or characters. There is a part of the application identification ID between the user ID and the sequence information. In the example in Figure 6, between the 4 sequential information at the 15th to the 18th and the 4 bits at the 33rd to the 36th, there is a part of the application identification ID at the 19th to the 32nd . Therefore, sequential information and bits are separated by a distance of 14 bits. Furthermore, each bit of sequence information and user ID can also be stored continuously.

本實施方式中,作成部202以於複數個廣告封包之各者中連續地包含重複複數個之至少一個資料部分之方式,作成複數個廣告封包之各者。連續之含義係如先前說明般。例如,第33位~第36位中連續地儲存用戶ID之各個的位,4個位之各者儲存於廣告封包內之連續的資料區域中。各個的位之間不存在應用程式識別ID等其他資訊。再者,儲存於一個廣告封包之4個位可如第25位、第30位、第32位、第36位般,不連續而散亂地儲存著。In the present embodiment, the creation unit 202 creates each of the plurality of advertisement packets so that each of the plurality of advertisement packets continuously includes at least one data part repeated in plurality. The meaning of continuous is as explained earlier. For example, the 33rd to 36th bits are consecutively stored in each of the user ID bits, and each of the 4 bits is stored in a continuous data area in the advertisement packet. There is no other information such as the application identification ID between the individual bits. Furthermore, the 4 bits stored in an advertisement packet can be stored discontinuously and scatteredly like the 25th, 30th, 32nd, and 36th bits.

本實施方式中,作成部202以於複數個廣告封包之各者中,包含重複複數個之用戶ID之至少一個位且包含順序資訊來作為無線通信標準中之服務UUID之一部分的方式,作成複數個廣告封包之各者。服務UUID中之用戶ID之各個的位之位置、順序資訊之位置及應用程式識別ID之位置可預先規定。本實施方式中,說明1個廣告封包中儲存一個服務UUID之情形,但亦可藉由無線通信標準之修訂等,於1個廣告封包中儲存複數個服務UUID。In this embodiment, the creation unit 202 creates a plurality of advertisement packets in such a manner that each of the plurality of advertisement packets includes at least one bit of the user ID that is repeated and sequence information is included as part of the service UUID in the wireless communication standard. Each of the advertising packets. The position of each bit of the user ID in the service UUID, the position of the sequence information and the position of the application identification ID can be predetermined. In the present embodiment, a case where one service UUID is stored in one advertisement packet is described, but it is also possible to store a plurality of service UUIDs in one advertisement packet by revision of the wireless communication standard or the like.

再者,服務UUID不限於本實施方式中說明之128位元之類型,亦可利用其他類型者。而且,還可利用並非為服務UUID之特徵UUID等其他UUID。而且,可利用UUID以外之資料,若不考慮特定之作業系統之規格,則可將用戶ID之各個的位儲存於局部名中。此外,例如,可利用UUID及局部名以外之其他資料。Furthermore, the service UUID is not limited to the 128-bit type described in this embodiment, and other types can also be used. Also, other UUIDs such as characteristic UUIDs that are not service UUIDs may be used. Also, data other than UUID can be used, and individual bits of the user ID can be stored in the local name, regardless of the specification of a specific operating system. Also, for example, data other than UUIDs and local names may be utilized.

[發送部]  發送部203對認證裝置30發送複數個封包之各者。本實施方式中,發送部203利用無線通信標準發送複數個廣告封包之各者。各個廣告封包可僅被發送1次,但本實施方式中,發送部203將複數個廣告封包之各者重複發送複數次。而且,發送部203可分別地發送各個廣告封包,亦可一次性發送複數個廣告封包。[Transmission Unit] The transmission unit 203 transmits each of the plurality of packets to the authentication device 30 . In this embodiment, the sending unit 203 sends each of the plurality of advertisement packets using a wireless communication standard. Each advertisement packet can be sent only once, but in this embodiment, the sending unit 203 repeatedly sends each of a plurality of advertisement packets a plurality of times. Moreover, the sending unit 203 may send each advertisement packet separately, or may send a plurality of advertisement packets at one time.

發送部203將作成部202作成之作為數位資料之廣告封包轉換為類比之電氣信號,並將已轉換為類比之電氣信號之廣告封包發送至認證裝置30。關於電氣信號之轉換順序,以按照無線通信標準之程序執行即可。於利用其他通信標準之情形時,發送部203以按照所利用之通信標準之程序發送封包即可。The sending unit 203 converts the advertising packet as digital data created by the creating unit 202 into an analog electrical signal, and sends the advertising packet converted into an analog electrical signal to the authentication device 30 . Regarding the conversion sequence of the electrical signal, it may be executed according to the procedure of the wireless communication standard. When other communication standards are used, the sending unit 203 may send packets according to the procedures of the used communication standard.

[3-3.認證裝置中實現之功能]  如圖7所示,認證裝置30中,實現了資料記憶部300、接收部301、特定部302、用戶ID取得部303、生物體資訊取得部304、及執行部305。資料記憶部300主要由記憶部32實現。接收部301、特定部302、用戶ID取得部303、生物體資訊取得部304、及執行部305之各者主要由控制部31實現。[3-3. Functions realized in the authentication device] As shown in FIG. 7, in the authentication device 30, a data storage unit 300, a receiving unit 301, a specific unit 302, a user ID acquisition unit 303, and a biometric information acquisition unit 304 are implemented. , and the execution unit 305. The data storage unit 300 is mainly realized by the storage unit 32 . Each of the reception unit 301 , the identification unit 302 , the user ID acquisition unit 303 , the biometric information acquisition unit 304 , and the execution unit 305 is mainly realized by the control unit 31 .

[資料記憶部]  資料記憶部300記憶提供認證服務所需之資料。本實施方式中,並非掃描所有廣告封包,而是掃描部分廣告封包,因此資料記憶部300記憶定義了掃描對象之廣告封包之掃描設定資料DT。再者,本實施方式之掃描意味著使廣告封包有效,成為取得用戶ID之處理對象。[Data memory unit] The data memory unit 300 stores the data required for providing authentication services. In this embodiment, not all advertisement packets are scanned, but some advertisement packets are scanned. Therefore, the data storage unit 300 stores the scan setting data DT defining the advertisement packets to be scanned. Furthermore, the scanning in this embodiment means to make the advertisement packet valid and become the processing target of acquiring the user ID.

圖9係表示掃描設定資料DT之資料儲存例之圖。如圖9所示,掃描設定資料DT中包含能夠識別作為掃描對象之廣告封包之資訊。本實施方式中,將下述4個條件定義為掃描設定資料DT。(條件1)包含服務UUID。(條件2)服務UUID之第1位~第14位及第19位~第32位中包含應用程式識別ID。(條件3)第15位~第18位彼此相同且各個的位為「A」~「D」中之任一個。(條件4)第33位~第36位彼此相同且各個的位為「0」~「9」中之任一個。FIG. 9 is a diagram showing an example of data storage of scan setting data DT. As shown in FIG. 9 , the scan setting data DT includes information capable of identifying the advertisement packet as the scan target. In this embodiment, the following four conditions are defined as the scan setting data DT. (Condition 1) Contains the service UUID. (Condition 2) The 1st to 14th and 19th to 32nd bits of the service UUID include the application identification ID. (Condition 3) The 15th to 18th digits are identical to each other, and each digit is any one of "A" to "D". (Condition 4) The 33rd to 36th bits are the same as each other, and each bit is any one of "0" to "9".

再者,圖9之資料儲存例中,將掃描設定資料DT表示為表格格式之資料,但掃描設定資料DT可為任意格式之資料。例如,掃描設定資料DT可為CSV(Comma-Separated Values,逗號分隔值)格式、文本格式或數式格式,亦可定義為程式碼之一部分。而且,記憶於資料記憶部300之資料不限於掃描設定資料DT,資料記憶部300能夠記憶任意資料。Furthermore, in the data storage example of FIG. 9 , the scan setting data DT is represented as data in a table format, but the scan setting data DT can be data in any format. For example, the scan setting data DT can be in CSV (Comma-Separated Values) format, text format or numerical format, and can also be defined as a part of the code. Moreover, the data stored in the data storage unit 300 is not limited to the scan setting data DT, and the data storage unit 300 can store arbitrary data.

[接收部]  接收部301從用戶終端20接收複數個封包之各者。本實施方式中,接收部301利用無線通信標準接收複數個廣告封包之各者。各個廣告封包有時會被重複發送,因此接收部301多次重複接收複數個廣告封包之各者。接收部301接收當前所有的廣告封包,基於掃描設定資料DT,藉由後述用戶ID取得部303從其中掃描作為處理對象之廣告封包。接收部301可分別接收複數個廣告封包,亦可一次性接收複數個廣告封包。[Receiving Unit] The receiving unit 301 receives each of a plurality of packets from the user terminal 20 . In this embodiment, the receiving unit 301 receives each of the plurality of advertisement packets using a wireless communication standard. Each advertisement packet is sometimes repeatedly sent, so the receiving unit 301 repeatedly receives each of the plurality of advertisement packets. The receiving unit 301 receives all current advertisement packets, and based on the scan setting data DT, scans the advertisement packets to be processed through the user ID acquisition unit 303 described later. The receiving unit 301 can receive a plurality of advertisement packets respectively, or can receive a plurality of advertisement packets at one time.

[特定部]  特定部302特定出資料部分之個數。本實施方式中,發送對象資料為規定位數之數值,複數個資料部分之各者為數值(用戶ID所示之4位數值)中包含之各個的位,順序資訊表示該數值中為第幾位之值,因此特定部302將位數(用戶ID中之位數)特定為個數。本實施方式中,4位之用戶ID被分割為4個數值,因此特定部302將4個特定為資料部分之個數。例如,資料部分之個數記憶於資料記憶部300。該個數可定義為程式碼之一部分,亦可定義為與程式碼不同之設定值。[Specific part] The specific part 302 specifies the number of data parts. In this embodiment, the data to be sent is a numerical value with a predetermined number of digits, each of the plurality of data parts is each digit included in the numerical value (the 4-digit numerical value shown by the user ID), and the order information indicates which number in the numerical value is Therefore, the specifying unit 302 specifies the number of digits (the number of digits in the user ID) as a number. In this embodiment, the 4-digit user ID is divided into 4 numerical values, so the identification unit 302 identifies 4 as the number of data parts. For example, the number of data parts is stored in the data storage unit 300 . The number can be defined as part of the program code, or as a setting value different from the program code.

[用戶ID取得部]  用戶ID取得部303基於複數個廣告封包之各者中所包含之重複複數個之至少一個位及該位之順序相關的順序資訊,結合複數個位而取得用戶ID。本實施方式中,用戶ID取得部303基於複數個廣告封包之各者中作為服務UUID之一部分而包含的重複複數個之至少一個位及順序資訊,取得用戶ID。用戶ID取得部303基於複數個廣告封包之各者中所包含之順序資訊,特定出複數個位之各者之順序。用戶ID取得部303將複數個位之各者如所特定出之順序般結合而取得用戶ID。[User ID acquisition unit] The user ID acquisition unit 303 acquires the user ID by combining at least one bit repeated in each of the plurality of advertisement packets and sequence information related to the order of the bit. In the present embodiment, the user ID obtaining unit 303 obtains the user ID based on at least one bit and sequence information of a plurality of repetitions included in each of the plurality of advertisement packets as a part of the service UUID. The user ID acquiring unit 303 specifies the order of each of the plurality of bits based on the order information included in each of the plurality of advertisement packets. The user ID acquiring unit 303 combines each of plural digits in a specified order to acquire a user ID.

本實施方式中,複數個廣告封包之各者於服務UUID之第33位~第36位包含重複複數個之至少一個位,於服務UUID之第15位~第18位包含順序資訊。服務UUID之第33位~第36位為第1資料區域之一例,服務UUID之第15位~第18位為第2資料區域之一例。因此,本實施方式中對服務UUID之第33位~第36位所說明之處可改稱為第1資料區域,對服務UUID之第15位~第18位所說明之處可改稱為第2資料區域。In this embodiment, each of the plurality of advertisement packets includes at least one repeated number of bits in the 33rd to 36th bits of the service UUID, and includes sequence information in the 15th to 18th bits of the service UUID. The 33rd to 36th bits of the service UUID are an example of the first data area, and the 15th to 18th bits of the service UUID are an example of the second data area. Therefore, in this embodiment, the description of the 33rd to 36th bits of the service UUID can be renamed as the first data area, and the description of the 15th to 18th bits of the service UUID can be renamed as the first data area. 2 data area.

第1資料區域係用於儲存用戶ID之各個的位而預先規定之區域。資料區域是指廣告封包之一部分。例如,從廣告封包之AD資料部之開端開始數第1位元至第2位元之區域為第1資料區域。本實施方式中,說明第1資料區域之尺寸(上述第1位元至第2位元之尺寸)為4位之情形,但第1資料區域之尺寸可為任意尺寸。第1資料區域可不為連續的區域,可為服務UUID之第25位、第28位、第30位及第34位這樣的飛地區域。The first data area is a predetermined area for storing individual bits of the user ID. The data field refers to a part of the advertisement packet. For example, the area from the first bit to the second bit counting from the beginning of the AD data part of the advertisement packet is the first data area. In this embodiment, the case where the size of the first data area (the size of the first bit to the second bit mentioned above) is 4 bits is described, but the size of the first data area may be any size. The first data area may not be a continuous area, but may be an enclave area such as the 25th, 28th, 30th, and 34th bits of the service UUID.

第2資料區域係為了儲存順序資訊而預先規定之區域。例如,從廣告封包之AD資料部之開端開始數第3位元至第4位元之區域為第2資料區域。本實施方式中,說明第2資料區域之尺寸(上述第3位元至第4位元之尺寸)為4位之情形,但第2資料區域之尺寸亦可與第1資料區域相同,可為任意尺寸。第2資料區域亦可與第1資料區域相同,不為連續的區域。第1資料區域之尺寸與第2資料區域之尺寸可不同。The second data area is a predetermined area for storing sequential information. For example, the area from the 3rd bit to the 4th bit from the beginning of the AD data part of the advertisement packet is the second data area. In this embodiment, the case where the size of the second data area (the size of the above-mentioned third to fourth bits) is 4 bits is described, but the size of the second data area can also be the same as that of the first data area, which can be Any size. The second data area may be the same as the first data area, and may not be a continuous area. The size of the first data area and the size of the second data area may be different.

本實施方式中,用戶ID取得部303掃描服務UUID之第33位~第36位中所包含之值彼此相同的廣告封包,並基於該經掃描之廣告封包取得用戶ID。用戶ID取得部303基於掃描設定資料DT中規定的條件1及條件4,判定服務UUID之第33位~第36位是否全部相同且是否為「0」~「9」中之任一個。用戶ID取得部303對於該判定不為肯定之廣告封包不進行掃描便廢除,且對於該判定為肯定之廣告封包進行掃描並作為處理對象。In this embodiment, the user ID acquiring unit 303 scans advertisement packets having the same values contained in the 33rd to 36th bits of the service UUID, and acquires the user ID based on the scanned advertisement packets. The user ID acquisition unit 303 determines whether the 33rd to 36th digits of the service UUID are all the same and any of “0” to “9” based on the conditions 1 and 4 specified in the scan configuration data DT. The user ID acquisition unit 303 discards the advertisement packets whose judgment is not positive without scanning, and scans the advertisement packets whose judgment is positive, and sets them as processing objects.

再者,各個廣告封包中可僅包含1個順序資訊,但本實施方式中,用戶ID取得部303基於複數個廣告封包之各者中所包含之重複複數個之至少一個位與重複複數個之順序資訊,取得用戶ID。Furthermore, each advertisement packet may contain only one piece of sequence information, but in this embodiment, the user ID acquisition unit 303 is based on at least one of the repeated plural bits and the plural repeated digits contained in each of the plural advertisement packets. Sequence information, get user ID.

例如,用戶ID取得部303掃描服務UUID之第15位~第18位中所包含之值彼此相同的廣告封包,基於該經掃描之廣告封包,取得發送對象資料。用戶ID取得部303基於掃描設定資料DT中規定的條件1及條件3,判定服務UUID之第15位~第18位是否全部相同且是否為「A」~「D」中之任一個。用戶ID取得部303對於該判定不為肯定之廣告封包不進行掃描便廢除,且對於該判定為肯定之廣告封包進行掃描並作為處理對象。For example, the user ID acquisition unit 303 scans an advertisement packet having the same values contained in the 15th to 18th bits of the service UUID, and obtains the transmission object data based on the scanned advertisement packet. The user ID acquisition unit 303 determines whether the 15th to 18th digits of the service UUID are all the same and any of "A" to "D" based on the condition 1 and the condition 3 specified in the scan configuration data DT. The user ID acquisition unit 303 discards the advertisement packets whose judgment is not positive without scanning, and scans the advertisement packets whose judgment is positive, and sets them as processing objects.

再者,各個廣告封包中所包含之用戶ID之位與順序資訊可用於上述掃描以外之目的。例如,用戶ID取得部303可於某個廣告封包中所包含之各個的位互不相同或各個順序資訊互不相同時,取得當前所有的用戶ID。當廣告封包中僅包含1個順序資訊時亦同樣,用戶ID取得部303可於某個廣告封包中所包含之各個的位互不相同時,取得當前所有的用戶ID。儘管伺服器10及認證裝置30之處理負荷有所增加,誤認證之可能性有所增加,但可對所有的用戶ID執行認證處理。Furthermore, the bit and sequence information of the user ID included in each advertisement packet can be used for purposes other than the above-mentioned scanning. For example, the user ID obtaining unit 303 may obtain all current user IDs when the bits contained in a certain advertisement packet are different from each other or the sequence information is different from each other. The same applies when only one piece of sequence information is included in the advertisement packet, and the user ID obtaining unit 303 can obtain all current user IDs when the bits contained in a certain advertisement packet are different from each other. Although the processing load on the server 10 and the authentication device 30 increases and the possibility of erroneous authentication increases, authentication processing can be performed for all user IDs.

本實施方式中,用戶ID取得部303從複數個廣告封包之各者取得用戶ID之至少一個位與順序資訊直至達到規定個數(由特定部302特定出之個數)為止,當達到規定個數時,取得用戶ID。例如,用戶ID取得部303參照廣告封包之順序資訊,判定是否已接收所有位。用戶ID取得部303於判定為已接收所有位時,結合至此所接收到之各個的位來取得用戶ID。In the present embodiment, the user ID acquisition unit 303 acquires at least one bit and sequence information of the user ID from each of a plurality of advertisement packets until the specified number (the number specified by the identification unit 302) is reached. When counting, get the user ID. For example, the user ID acquisition unit 303 refers to the sequence information of the advertisement packet to determine whether all the bits have been received. When it is determined that all the bits have been received, the user ID acquisition unit 303 acquires the user ID by concatenating the bits received up to this point.

認證裝置30能夠與複數個用戶終端20之各者通信,複數個廣告封包之各者中包含能夠識別已發送該廣告封包之用戶終端20之識別資訊,用戶ID取得部303基於複數個廣告封包之各者中所包含之識別資訊,針對每個用戶終端20取得用戶ID。該識別資訊可為任意資訊,例如,為用戶終端20之位址或用戶終端20之電腦名。本實施方式中,圖3所示之格式之存取位址部或廣告位址部相當於上述識別資訊。The authentication device 30 can communicate with each of a plurality of user terminals 20, each of the plurality of advertisement packets includes identification information that can identify the user terminal 20 that has sent the advertisement packet, and the user ID acquisition unit 303 is based on the plurality of advertisement packets. The identification information contained in each of them acquires a user ID for each user terminal 20 . The identification information can be any information, for example, the address of the user terminal 20 or the computer name of the user terminal 20 . In this embodiment, the access address part or the advertisement address part of the format shown in FIG. 3 corresponds to the above-mentioned identification information.

本實施方式中,服務UUID中包含能夠識別應用程式之應用程式識別ID,用戶ID取得部303掃描服務UUID中包含應用程式識別ID之廣告封包,取得用戶ID。用戶ID取得部303基於掃描設定資料DT中規定的條件1及條件2,判定是否包含服務UUID且是否包含認證應用程式之應用程式識別ID。用戶ID取得部303對於不滿足條件1及條件2之廣告封包不進行掃描便廢除,且對於滿足條件1及條件2之廣告封包進行掃描並作為處理對象。In this embodiment, the service UUID includes an application identification ID capable of identifying an application, and the user ID obtaining unit 303 scans the advertisement packet containing the application identification ID in the service UUID to obtain the user ID. The user ID acquisition unit 303 determines whether the service UUID is included and the application identification ID of the authentication application is included based on the condition 1 and the condition 2 specified in the scan setting data DT. The user ID acquiring unit 303 discards the advertisement packets that do not satisfy the conditions 1 and 2 without scanning, and scans the advertisement packets that satisfy the conditions 1 and 2 as processing objects.

[生物體資訊取得部]  生物體資訊取得部304取得用戶之生物體資訊。本實施方式中,說明面部認證作為生物體認證之一例,因此生物體資訊取得部304取得用戶之面部照片或面部特徵量。本實施方式中,說明藉由生物體資訊取得部304取得面部照片且藉由伺服器10計算面部特徵量之情形,但生物體資訊取得部304亦可計算面部特徵量。生物體資訊由通信系統S中利用之生物體認證相應的方法取得即可。[Biometric Information Obtaining Unit] The biological information acquiring unit 304 acquires the user's biological information. In the present embodiment, facial authentication is described as an example of biometric authentication, so the biometric information acquisition unit 304 acquires a user's facial photo or facial features. In this embodiment, a case is described in which the biometric information acquiring unit 304 acquires facial photos and the server 10 calculates the facial features, but the biometric information acquiring unit 304 can also calculate the facial features. The biometric information may be acquired by a method corresponding to the biometric authentication used in the communication system S.

[執行部]  執行部305基於用戶ID執行規定處理。本實施方式中,發送對象資料為能夠識別用戶終端10之用戶之用戶ID,規定處理為基於用戶ID執行之認證處理,該等方面如伺服器10之執行部102中所說明般。例如,執行部305基於用戶ID及生物體資訊執行認證處理。本實施方式中,因藉由伺服器10之執行部102判定用戶ID之正當性及面部是否相似,故認證裝置30之執行部305執行之認證處理成為將用戶ID與面部照片發送至伺服器10之處理。[Execution Unit] The execution unit 305 executes predetermined processing based on the user ID. In this embodiment, the data to be sent is the user ID that can identify the user of the user terminal 10, and the prescribed processing is authentication processing based on the user ID. These aspects are as described in the execution unit 102 of the server 10. For example, the executing unit 305 executes authentication processing based on the user ID and biometric information. In this embodiment, since the execution unit 102 of the server 10 determines whether the validity of the user ID and whether the face is similar, the authentication process performed by the execution unit 305 of the authentication device 30 is to send the user ID and facial photos to the server 10 processing.

[4.通信系統中執行之處理]  接下來,對通信系統S中執行之處理進行說明。此處,對用戶啟動認證應用程式時執行之啟動處理及用於供用戶通過安全門SG之認證處理進行說明。下述說明之處理為藉由圖7所示之功能塊執行之處理的一例。[4. Processing executed in communication system] Next, processing executed in the communication system S will be described. Here, the activation process executed when the user activates the authentication application and the authentication process for the user to pass through the security gate SG will be described. The processing described below is an example of processing executed by the functional blocks shown in FIG. 7 .

[4-1.啟動處理]  圖10係表示啟動處理之一例之流程圖。圖10所示之啟動處理係藉由控制部11、21分別依據記憶於記憶部12、22之程式進行動作來執行。再者,設為於執行啟動處理時用戶已完成利用登錄。[4-1. Start-up processing] Fig. 10 is a flow chart showing an example of start-up processing. The activation process shown in FIG. 10 is executed by the control units 11 and 21 operating according to the programs stored in the storage units 12 and 22, respectively. In addition, it is assumed that the user has completed the login for use when the activation process is executed.

如圖10所示,用戶終端20基於操作部24之檢測信號,判定是否啟動認證應用程式(S100)。認證應用程式藉由任意操作而啟動,例如,於進行從顯示於顯示部25之選單畫面選擇認證應用程式之操作時啟動。As shown in FIG. 10 , the user terminal 20 determines whether to activate the authentication application based on the detection signal of the operation unit 24 ( S100 ). The authentication application is activated by an arbitrary operation, for example, when an operation of selecting an authentication application from a menu screen displayed on the display unit 25 is performed.

於判定未啟動認證應用程式之情形時(S100;否),本處理結束。該情形時,記憶於用戶終端20之記憶部22之用戶ID不進行更新。另一方面,於判定已啟動認證應用程式之情形時(S100;是),用戶終端20啟動認證應用程式(S101),並對伺服器10發送認證應用程式之啟動通知(S102)。啟動通知係表示啟動認證應用程式之通知。啟動通知中包含能夠識別用戶終端20、用戶及認證應用程式中之至少1個之資訊,例如,包含記憶於用戶終端20之記憶部22中之用戶ID。When it is determined that the authentication application has not been activated (S100; No), this process ends. In this case, the user ID stored in the storage unit 22 of the user terminal 20 is not updated. On the other hand, when it is determined that the authentication application has been activated (S100; Yes), the user terminal 20 activates the authentication application (S101), and sends a notification of activation of the authentication application to the server 10 (S102). The activation notification means a notification to activate the authentication application. The activation notification includes information capable of identifying at least one of the user terminal 20 , the user, and the authentication application, for example, the user ID stored in the memory unit 22 of the user terminal 20 .

伺服器10於接收到啟動通知時,對已發送啟動通知之用戶發行新的用戶ID(S103)。新的用戶ID係與當前之用戶ID不同之用戶ID。S103中,伺服器10基於規定之ID發行規則發行用戶ID。例如,伺服器10能夠以與所有其他用戶不重複的方式發行用戶ID,亦能夠以不與面部特徵量相似之其他用戶重複的方式發行用戶ID。伺服器10將新發行的用戶ID代替啟動通知中所包含之用戶ID而儲存於用戶資料庫DB中。When the server 10 receives the activation notification, it issues a new user ID to the user who has sent the activation notification (S103). The new user ID is a user ID different from the current user ID. In S103, the server 10 issues a user ID based on a predetermined ID issue rule. For example, the server 10 may issue a user ID not to be duplicated with all other users, or may be issued to not be duplicated with other users whose facial features are similar. The server 10 stores the newly issued user ID in the user database DB instead of the user ID included in the activation notice.

伺服器10對用戶終端20發送新的用戶ID(S104)。用戶終端20於接收到新的用戶ID時,從記憶部22抹除舊的用戶ID,並將新的用戶ID記錄於記憶部22中(S105),本處理結束。以後,用戶終端20利用廣告封包可發送新的用戶ID。The server 10 transmits a new user ID to the user terminal 20 (S104). When the user terminal 20 receives the new user ID, it erases the old user ID from the storage unit 22, and records the new user ID in the storage unit 22 (S105), and this process ends. Afterwards, the user terminal 20 can send a new user ID by using the advertisement packet.

[4-2.認證處理]  圖11係表示認證處理之一例之流程圖。圖11所示之認證處理藉由控制部11、21、31分別依據記憶於記憶部12、22、32之程式進行動作來執行。再者,設為於執行認證處理時利用登錄已完成。當於利用登錄後執行圖10之啟動處理時,基於更新後之新的用戶ID執行下述說明之認證處理。認證處理可於啟動了認證應用程式之狀態、認證應用程式已移行至後台模式之狀態或用戶終端20已移行至睡眠狀態之任一狀態下執行。[4-2. Authentication processing] Fig. 11 is a flowchart showing an example of authentication processing. The authentication process shown in FIG. 11 is executed by the control units 11, 21, 31 operating according to the programs stored in the storage units 12, 22, 32, respectively. In addition, it is assumed that the user login has been completed when the authentication process is executed. When the start-up process of FIG. 10 is executed after user login, the authentication process described below is performed based on the updated new user ID. The authentication process can be executed in any state where the authentication application is activated, the authentication application has moved to the background mode, or the user terminal 20 has moved to the sleep state.

如圖11所示,用戶終端20將記憶於記憶部22之用戶ID分割為各個的位(S200)。S200中,用戶終端20將4位之用戶ID分割為第1位、第2位、第3位及第4位之各者。As shown in FIG. 11 , the user terminal 20 divides the user ID stored in the storage unit 22 into individual bits (S200). In S200, the user terminal 20 divides the 4-digit user ID into each of the first digit, the second digit, the third digit, and the fourth digit.

用戶終端20以包含重複複數個之各個的位且包含重複複數個之順序資訊之方式,作成複數個廣告封包(S201)。S201中,用戶終端20針對每個S200中分割之位,作成如參照圖6說明之分別包含4個服務UUID之4個廣告封包。The user terminal 20 creates a plurality of advertisement packets in such a manner as to include a plurality of repeated bits and include a plurality of repeated sequence information ( S201 ). In S201, the user terminal 20 creates 4 advertisement packets including 4 service UUIDs as described with reference to FIG. 6 for each segment divided in S200.

用戶終端20對認證裝置30發送複數個廣告封包之各者(S202)。S202中,用戶終端20重複地發送S201中所作成之4個廣告封包之各者。認證應用程式以外之其他應用程式被安裝於用戶終端20,關於其他應用程式,只要利用廣告封包即可,用戶終端20發送S201中所作成之4個廣告封包以外之其他廣告封包。The user terminal 20 sends each of a plurality of advertisement packets to the authentication device 30 (S202). In S202, the user terminal 20 repeatedly transmits each of the four advertisement packets created in S201. Other applications than the authentication application are installed in the user terminal 20, and the other applications only need to use advertisement packets, and the user terminal 20 transmits other advertisement packets other than the four advertisement packets created in S201.

認證裝置30從用戶終端20或其他電腦接收廣告封包(S203)。於S203之時點,認證裝置30無法判別出廣告封包儲存有哪些資料,因此接收當前所有的廣告封包。認證裝置30對所接收到之廣告封包中的掃描設定資料中定義之廣告封包進行掃描,並取得用戶ID(S204)。The authentication device 30 receives an advertisement packet from the user terminal 20 or other computers (S203). At the point of S203, the authentication device 30 cannot determine what data is stored in the advertisement packet, so it receives all current advertisement packets. The authentication device 30 scans the advertisement packet defined in the scan setting data in the received advertisement packet, and obtains the user ID (S204).

圖12係表示S204中之處理詳情之圖。如圖12所示,認證裝置30參照S203中接收到之廣告封包的AD類型,判定是否儲存有服務UUID(S2040)。於判定為未儲存有服務UUID之情形時(S2040;否),認證裝置30對於S203中接收到之廣告封包不進行掃描便廢除(S2041),從而本處理結束。FIG. 12 is a diagram showing details of processing in S204. As shown in FIG. 12 , the authentication device 30 refers to the AD type of the advertisement packet received in S203 to determine whether the service UUID is stored ( S2040 ). When it is determined that the service UUID is not stored (S2040; No), the authentication device 30 discards the advertisement packet received in S203 without scanning it (S2041), and the process ends.

另一方面,於判定為儲存有服務UUID之情形時(S2040;是),認證裝置30參照該服務UUID之第1位~第14位及第19位~第32位,判定是否儲存有認證應用程式之應用程式識別ID(S2042)。於判定為未儲存有認證應用程式之應用程式識別ID之情形時(S2042;否),其係由與認證服務無關之應用程式發送之廣告封包,因此移行至S2041之處理,廢除廣告封包。On the other hand, when it is determined that the service UUID is stored (S2040; Yes), the authentication device 30 refers to the 1st to 14th and 19th to 32nd bits of the service UUID to determine whether the authentication application is stored. The application identification ID of the program (S2042). When it is determined that the application identification ID of the authentication application is not stored (S2042; No), it is an advertisement packet sent by an application irrelevant to the authentication service, so the process moves to S2041 to abolish the advertisement packet.

另一方面,於判定為儲存有認證應用程式之應用程式識別ID之情形時(S2042;是),認證裝置30判定服務UUID之第15位~第18位是否全部一致且否為「A」~「D」中之任一個(S2043)。於判定為服務UUID之第15位~第18位不一致之情形時,或,服務UUID之第15位~第18位不是「A」~「D」中之任一個之情形時(S2043;否),存在受到雜訊之影響之可能,因此移行至S2041之處理,廢除廣告封包。On the other hand, when it is determined that the application identification ID of the authentication application is stored (S2042; Yes), the authentication device 30 determines whether the 15th to 18th bits of the service UUID are all consistent and are "A" to Any one of "D" (S2043). When it is determined that the 15th to 18th digits of the service UUID are inconsistent, or when the 15th to 18th digits of the service UUID are not any of "A" to "D" (S2043; No) , there is a possibility of being affected by noise, so the processing is transferred to S2041, and the advertisement packet is abolished.

另一方面,於判定為服務UUID之第15位~第18位全部一致且為「A」~「D」中之任一個之情形時(S2043;是),認證裝置30判定服務UUID之第33位~第36位(後4位)是否全部一致且是否為「0」~「9」中之任一個(S2044)。於判定為服務UUID之後4位不一致之情形時,或,判定為服務UUID之後4位不是「0」~「9」中之任一個之情形時(S2044;否),存在受到雜訊之影響之可能,因此移行到S2041之處理,廢除廣告封包。On the other hand, when it is determined that the 15th to 18th digits of the service UUID all match and are any of "A" to "D" (S2043; Yes), the authentication device 30 determines that the 33rd digit of the service UUID Whether all the bits to the 36th bit (last 4 bits) match and are any of "0" to "9" (S2044). When it is determined that the 4 digits after the service UUID are inconsistent, or when it is determined that the 4 digits after the service UUID are not any of "0" to "9" (S2044; No), there is a possibility of being affected by noise Possibly, so the process moves to S2041 to abolish the advertisement packet.

於判定為服務UUID之後4位全部一致且為「0」~「9」中之任一個之情形時(S2044;是),認證裝置30將處理中之廣告封包作為掃描對象,基於服務UUID之第15位~第18位之順序資訊與服務UUID之後4位數值,將用戶ID之位保存於記憶部22(S2045)。S2045中,認證裝置30針對所掃描之廣告封包中儲存的用戶終端20之位址等每個識別資訊,將儲存用戶ID之位之數組UserID[i]保存於記憶部32中。i為位之順序,為「1」~「4」中之任一個。該數組之各個要素為儲存於接收到之廣告封包中之位。S2045中,認證裝置30將順序資訊所示之「A」~「D」中之任一個轉換為「1」~「4」中之任一個,並將所接收之位儲存於數組中。When it is determined that the following 4 digits of the service UUID are all consistent and are any one of "0" to "9" (S2044; Yes), the authentication device 30 takes the advertisement packet being processed as the scanning object, and based on the second digit of the service UUID The sequence information of the 15th to the 18th digits and the value of the 4 digits after the service UUID are stored in the memory unit 22 at the digits of the user ID (S2045). In S2045, the authentication device 30 saves the array UserID[i] storing the bits of the user ID in the memory unit 32 for each identification information such as the address of the user terminal 20 stored in the scanned advertisement packet. i is the sequence of bits, which is any one of "1" to "4". Each element of the array is a bit stored in a received advertisement packet. In S2045, the authentication device 30 converts any one of "A" to "D" shown in the sequence information into any one of "1" to "4", and stores the received bits in the array.

認證裝置30判定用戶ID之取得是否完成(S2046)。S2046中,認證裝置30判定上述數組之4個要素中是否全部儲存有位。於判定為4個要素中全部儲存有位之情形時,認證裝置30結合各要素之數值取得用戶ID,並判定為用戶ID之取得已完成。The authentication device 30 judges whether the acquisition of the user ID is completed (S2046). In S2046, the authentication device 30 judges whether or not bits are stored in all four elements of the array. When it is determined that bits are stored in all of the four elements, the authentication device 30 acquires the user ID by combining the numerical values of the elements, and determines that the acquisition of the user ID has been completed.

於判定為用戶ID之取得尚未完成之情形時(S2046;否),回到S203之處理,繼續廣告封包之接收。另一方面,於判定為用戶ID之取得已完成之情形時(S2046;是),回到圖11,認證裝置30基於攝影部36之檢測信號取得面部照片(S205)。認證裝置30對伺服器10發送包含S204中判定為取得已完成之用戶ID及S205中所取得之面部照片之認證要求(S206)。認證要求係用以要求執行認證處理之規定要求。When it is judged that the acquisition of the user ID has not been completed (S2046; No), return to the process of S203, and continue to receive the advertisement packet. On the other hand, when it is determined that the acquisition of the user ID has been completed (S2046; Yes), returning to FIG. 11 , the authentication device 30 acquires a facial photograph based on the detection signal of the imaging unit 36 (S205). The authentication device 30 sends to the server 10 an authentication request including the user ID judged to have been acquired in S204 and the face photo acquired in S205 (S206). Authentication requirements are specified requirements that require the execution of an authentication process.

伺服器10於接收認證要求時,基於用戶資料庫DB執行ID認證及面部認證(S207)。S207中,伺服器10判定認證要求中所包含之用戶ID是否存在於用戶資料庫DB中。伺服器10於存在用戶ID之情形時,基於認證要求中所包含之面部照片來計算面部特徵量。伺服器10計算用戶資料庫DB中與用戶ID相關聯之面部特徵量及根據認證要求中所包含之面部照片所計算出的面部特徵量之距離。若該距離未達閾值,則面部認證成功。若該距離為閾值以上,則面部認證失敗。When receiving the authentication request, the server 10 performs ID authentication and face authentication based on the user database DB (S207). In S207, the server 10 determines whether the user ID included in the authentication request exists in the user database DB. When the user ID exists, the server 10 calculates the facial feature amount based on the facial photograph included in the authentication request. The server 10 calculates the distance between the facial feature value associated with the user ID in the user database DB and the facial feature value calculated from the face photo included in the authentication request. If the distance does not reach the threshold, the facial authentication is successful. If the distance is greater than or equal to the threshold, face authentication fails.

於認證失敗之情形時(S207;失敗),伺服器10對認證裝置30發送錯誤消息(S208),本處理結束。該情形時,認證裝置30之顯示部35中顯示有錯誤消息,通知用戶認證尚未成功。When the authentication fails (S207; failure), the server 10 sends an error message to the authentication device 30 (S208), and this process ends. In this case, an error message is displayed on the display unit 35 of the authentication device 30, notifying the user that the authentication has not been successful.

另一方面,於認證成功之情形時(S207;成功),伺服器10對認證裝置30發送表示認證已成功之成功通知(S209)。認證裝置30中,於接收成功通知時,認證裝置30之控制部31解除安全門SG之鎖定(S210),本處理結束。以後,認證裝置30之顯示部35中顯示有表示認證已成功之消息,用戶通過安全門SG。On the other hand, when the authentication is successful (S207; success), the server 10 sends a success notification indicating that the authentication has succeeded to the authentication device 30 (S209). In the authentication device 30, when the notification of success is received, the control unit 31 of the authentication device 30 unlocks the security door SG (S210), and this process ends. Thereafter, a message indicating successful authentication is displayed on the display unit 35 of the authentication device 30, and the user passes through the security gate SG.

根據本實施方式之通信系統S,用戶終端20以包含重複複數個之用戶ID之至少一個位且包含順序資訊之方式,作成複數個廣告封包之各者並進行發送。認證裝置30基於複數個廣告封包之各者中所包含之重複複數個之至少一個位及順序資訊,結合複數個位取得用戶ID並執行規定處理。藉此,即使廣告封包受到雜訊之影響,亦可發送準確的用戶ID,能夠應對雜訊之影響。亦可藉由發送準確的用戶ID來提高認證精度。而且,若各個廣告封包中所包含之位的個數過少,則容易受到雜訊之影響,反之,若位的個數過多,則存在無法區分認證應用程式與其他應用程式之可能,但藉由將一定程度的個數加入至廣告封包中,則不易受到雜訊之影響,且,可區分出認證應用程式與其他應用程式。而且,藉由於各個廣告封包中包含順序資訊,認證裝置30即使分割用戶ID之位並接收,亦可準確地掌握各個的位之順序。According to the communication system S of the present embodiment, the user terminal 20 creates and transmits each of a plurality of advertisement packets including at least one bit of a plurality of repeated user IDs and sequential information. The authentication device 30 obtains the user ID by combining the plurality of bits based on at least one repeated bit and sequence information included in each of the plurality of advertisement packets, and executes prescribed processing. In this way, even if the advertisement packet is affected by noise, the accurate user ID can be sent, which can cope with the influence of noise. Authentication accuracy can also be improved by sending the exact user ID. Moreover, if the number of bits contained in each advertisement packet is too small, it is easily affected by noise. Conversely, if the number of bits is too large, there is a possibility that the authentication application cannot be distinguished from other applications. However, by Adding a certain number of numbers to the advertising packet will not be easily affected by noise, and the authentication application can be distinguished from other applications. Moreover, since the order information is included in each advertisement packet, even if the authentication device 30 divides and receives the bits of the user ID, it can accurately grasp the order of each bit.

而且,通信系統S掃描服務UUID之第33位~第36位中所包含之值彼此相同的廣告封包,並基於該經掃描之廣告封包取得用戶ID,藉此可減少作為掃描對象之廣告封包,並減少認證裝置30之處理負荷。進而,可使認證裝置30掃描所有被規定為掃描對象之廣告封包,能夠可靠地取得用戶ID。因此,即使認證裝置30之性能降低,亦能夠可靠地取得用戶ID。Moreover, the communication system S scans the advertising packets whose values contained in the 33rd to 36th bits of the service UUID are identical to each other, and obtains the user ID based on the scanned advertising packets, thereby reducing the number of advertising packets to be scanned, And reduce the processing load of the authentication device 30 . Furthermore, it is possible to make the authentication device 30 scan all advertising packets specified as scanning objects, and obtain user IDs reliably. Therefore, even if the performance of the authentication device 30 is degraded, the user ID can be acquired reliably.

而且,通信系統S基於複數個廣告封包之各者中所包含之重複複數個之至少一個位及重複複數個之順序資訊,取得用戶ID,藉此進一步提高使認證裝置30取得用戶ID之可靠性。Moreover, the communication system S obtains the user ID based on at least one repeated bit and the repeated sequence information contained in each of the plural advertisement packets, thereby further improving the reliability of the authentication device 30 obtaining the user ID. .

而且,通信系統S掃描服務UUID之第15位~第18位中所包含之值彼此相同的廣告封包,基於該經掃描之廣告封包取得用戶ID,藉此可減少作為掃描對象之廣告封包,並減少認證裝置30之處理負荷。進而,可使認證裝置30掃描所有被規定為掃描對象之廣告封包,能夠可靠地取得用戶ID。因此,即使認證裝置30之性能降低,亦能夠可靠地取得用戶ID。Moreover, the communication system S scans the advertising packets whose values contained in the 15th to 18th bits of the service UUID are the same, obtains the user ID based on the scanned advertising packets, thereby reducing the number of advertising packets to be scanned, and The processing load of the authentication device 30 is reduced. Furthermore, it is possible to make the authentication device 30 scan all advertising packets specified as scanning objects, and obtain user IDs reliably. Therefore, even if the performance of the authentication device 30 is degraded, the user ID can be acquired reliably.

而且,通信系統S以複數個廣告封包之各者中連續地包含重複複數個之順序資訊之方式,作成複數個廣告封包之各者,藉此認證裝置30只要參照連續的區域便可取得複數個順序資訊。因此,與複數個順序資訊儲存於不同區域之情形相比,可簡化取得順序資訊之處理,並減少認證裝置30之處理負荷。Furthermore, the communication system S creates each of the plurality of advertisement packets in such a manner that each of the plurality of advertisement packets continuously includes repeated sequence information, so that the authentication device 30 can obtain a plurality of advertisement packets only by referring to the continuous area. Order information. Therefore, compared with the case where a plurality of pieces of sequence information are stored in different areas, the process of obtaining sequence information can be simplified and the processing load of the authentication device 30 can be reduced.

而且,通信系統S以於複數個廣告封包之各者中重複複數個之至少一個位與順序資訊離開規定距離以上的方式,作成複數個廣告封包之各者,藉此容易應對雜訊之影響。例如,若同時接收到位於一定範圍內之服務UUID,則電氣信號中差分未變大之其他電氣信號可能作為雜訊被接收,但藉由使用戶ID之各個的位與順序資訊離開一定的程度(圖6之例中,藉由於該等之間加入第19位~第32位之應用程式識別ID),各電氣信號之差分增大而不易產生雜訊。Furthermore, the communication system S creates each of the plurality of advertisement packets by repeating at least one bit and sequential information in each of the plurality of advertisement packets by a predetermined distance or more, thereby easily coping with the influence of noise. For example, if service UUIDs located within a certain range are received at the same time, other electrical signals whose difference in the electrical signal does not become large may be received as noise, but by separating the individual bits and sequence information of the user ID to a certain extent (In the example of FIG. 6, by adding the 19th to 32nd application program identification ID between these), the difference between the electrical signals increases and noise is less likely to occur.

而且,通信系統S以於複數個廣告封包之各者中連續地包含重複複數個之至少一個位之方式,作成複數個廣告封包之各者,藉此認證裝置30只要參照連續的區域便可取得複數個位。因此,與複數個位儲存於不同區域之情形相比,可簡化取得複數個位之處理,並減少認證裝置30之處理負荷。Furthermore, the communication system S creates each of the plurality of advertisement packets in such a manner that each of the plurality of advertisement packets continuously includes at least one bit that repeats a plurality of bits, so that the authentication device 30 can obtain the Plural ones. Therefore, compared with the case where a plurality of digits are stored in different areas, the process of obtaining the plurality of digits can be simplified, and the processing load of the authentication device 30 can be reduced.

而且,通信系統S從複數個廣告封包之各者中取得至少一個位及順序資訊直至達到規定個數為止,於達到規定個數之情形時取得用戶ID,藉此可進一步提高使認證裝置30取得用戶ID之可靠性。Moreover, the communication system S obtains at least one bit and sequence information from each of a plurality of advertisement packets until the specified number is reached, and obtains the user ID when the specified number is reached, thereby further improving the authentication device 30 to obtain Authenticity of User ID.

而且,通信系統S特定出用戶ID整體之位數,重複進行用以取得用戶ID之處理直至達到該位數為止,藉此可進一步提高使認證裝置30取得用戶ID之可靠性。Furthermore, the communication system S specifies the number of digits of the entire user ID, and repeats the process for obtaining the user ID until the number of digits is reached, whereby the reliability of the authentication device 30 to obtain the user ID can be further improved.

而且,通信系統S基於複數個廣告封包之各者中所包含之用戶終端20的位址等識別資訊,針對每個用戶終端20取得用戶ID,藉此即使認證裝置30之周圍存在複數個用戶終端20,亦能夠可靠地取得各個用戶終端20之用戶ID。Furthermore, the communication system S obtains the user ID for each user terminal 20 based on identification information such as the address of the user terminal 20 contained in each of the plurality of advertisement packets, thereby even if there are a plurality of user terminals around the authentication device 30 20, the user ID of each user terminal 20 can also be obtained reliably.

而且,通信系統S基於複數個廣告封包之各者中作為服務UUID之一部分而包含的重複複數個之至少一個位及順序資訊,取得用戶ID,藉此進一步提高使認證裝置30取得用戶ID之可靠性。例如,即使在認證應用程式移行至後台模式時等局部名消失的作業系統中,藉由利用服務UUID,即使於上述情形時亦可發送用戶ID之各個的位,使認證裝置30可靠地取得用戶ID。Moreover, the communication system S obtains the user ID based on at least one of the repeated plural bits and sequence information contained in each of the plural advertisement packets as a part of the service UUID, thereby further improving the reliability for the authentication device 30 to obtain the user ID. sex. For example, even in an operating system where the local name disappears when the authentication application moves to the background mode, by using the service UUID, each bit of the user ID can be transmitted even in the above situation, so that the authentication device 30 can reliably obtain the user ID. ID.

而且,通信系統S掃描服務UUID中包含應用程式識別ID之廣告封包,取得用戶ID,藉此可減少作為掃描對象之廣告封包,並減少認證裝置30之處理負荷。進而,可使認證裝置30掃描所有被規定為掃描對象之廣告封包,能夠可靠地取得用戶ID。因此,即使認證裝置30之性能降低,亦能夠可靠地取得用戶ID。Moreover, the communication system S scans the advertisement packet containing the application identification ID in the service UUID to obtain the user ID, thereby reducing advertisement packets to be scanned and reducing the processing load of the authentication device 30 . Furthermore, it is possible to make the authentication device 30 scan all advertising packets specified as scanning objects, and obtain user IDs reliably. Therefore, even if the performance of the authentication device 30 is degraded, the user ID can be acquired reliably.

而且,通信系統S藉由基於用戶ID執行認證處理,能夠應對認證服務中之雜訊。Also, the communication system S can cope with noise in the authentication service by performing authentication processing based on the user ID.

而且,通信系統S基於用戶ID及生物體資訊執行認證處理,藉此能夠應對提供兩階段認證之認證服務中的雜訊。Also, the communication system S performs authentication processing based on the user ID and biometric information, thereby being able to cope with noise in authentication services that provide two-stage authentication.

[5.變化例]  再者,本發明不限定於以上說明之實施方式。於不脫離本發明之主旨之範圍內能夠適當變更。[5. Variations] In addition, the present invention is not limited to the embodiments described above. Appropriate changes can be made without departing from the scope of the present invention.

(1)例如,實施方式中,雖以用戶通過安全門SG之場景為例,但即使於將通信系統S適用於認證服務時,亦可適用於其他任意場景之認證。例如,亦可適用於用戶購買商品或利用服務之場景之認證。該情形時,例如,認證裝置30為自動販賣機、售票機、POS(Point Of Sale,銷售點)終端、或店鋪中之支付終端。若認證成功,則執行結算處理,用戶可購買商品或利用服務。(1) For example, in the embodiment, the scenario where the user passes through the security gate SG is taken as an example, but even when the communication system S is applied to the authentication service, it can be applied to authentication in other arbitrary scenarios. For example, it can also be applied to the authentication of scenarios where users purchase goods or use services. In this case, for example, the authentication device 30 is a vending machine, a ticket vending machine, a POS (Point Of Sale) terminal, or a payment terminal in a store. If the authentication is successful, settlement processing is executed, and the user can purchase goods or use services.

變化例(1)中,於用戶資料庫DB中預先登錄結算資訊,當某個用戶認證成功時,執行部102可基於該用戶之結算資訊執行結算處理。結算處理時參照之結算資訊係與認證已成功之用戶相關聯之結算資訊。In the variation (1), the settlement information is pre-registered in the user database DB, and when a certain user is successfully authenticated, the execution unit 102 can execute settlement processing based on the settlement information of the user. The settlement information referred to in the settlement process is the settlement information associated with the successfully authenticated user.

結算資訊係進行結算所需之資訊,例如係***資訊、電子價值(例如,電子貨幣或積點)之賬戶資訊、虛擬通貨之賬戶資訊、銀行賬戶資訊、或轉賬卡資訊等。結算資訊於用戶登錄時等時被登錄,例如,將結算資訊與用戶賬戶相關聯地儲存於用戶資料庫DB中。再者,結算資訊可儲存於與用戶資料庫DB不同的資料庫中。Settlement information is the information required for settlement, such as credit card information, account information of electronic value (such as electronic money or points), account information of virtual currency, bank account information, or debit card information, etc. The settlement information is registered when the user logs in, for example, the settlement information is associated with the user account and stored in the user database DB. Furthermore, settlement information may be stored in a database different from the user database DB.

執行部102於ID認證或面部認證中之任一個失敗時不執行結算處理,於ID認證及面部認證均成功時執行結算處理。當執行結算處理時,認證裝置30之顯示部35或店鋪之終端等顯示該意旨,用戶接收商品或利用服務。此外,例如,通信系統S可用於用戶行為分析中之認證、事件入場時之認證、進入考試會場時之認證、或選舉等投票中的認證等任意認證。The execution unit 102 does not execute settlement processing when either of ID authentication or face authentication fails, and executes settlement processing when both ID authentication and face authentication succeed. When the settlement process is executed, the display unit 35 of the authentication device 30 or the terminal of the shop displays the fact, and the user receives the product or uses the service. Also, for example, the communication system S can be used for arbitrary authentication such as authentication in user behavior analysis, authentication when entering an event, authentication when entering an examination venue, or authentication in voting such as elections.

(2)而且,例如通信系統S可用於認證服務以外之其他服務。例如,通信系統S可適用於分發優惠券之分發服務。該情形時,通信系統S中包含分發優惠券之分發裝置,且分發裝置相當於發送裝置,用戶終端20相當於接收裝置。發送對象資料為能夠識別優惠券之優惠券ID,分發裝置將優惠券ID分割為各個的位,且與順序資訊一起儲存在廣告封包中進行發送。用戶終端20接收包含各個的位與順序資訊之廣告封包,取得優惠券ID。用戶終端20將所取得之優惠券ID發送至伺服器10,用戶獲得優惠券。(2) Also, for example, the communication system S can be used for services other than authentication services. For example, the communication system S is applicable to a distribution service for distributing coupons. In this case, the communication system S includes a distributing device for distributing coupons, and the distributing device corresponds to a transmitting device, and the user terminal 20 corresponds to a receiving device. The data to be sent is the coupon ID that can identify the coupon. The distribution device divides the coupon ID into individual bits and stores it together with the order information in the advertisement packet for transmission. The user terminal 20 receives the advertisement packet including each bit and sequence information, and obtains the coupon ID. The user terminal 20 sends the obtained coupon ID to the server 10, and the user obtains the coupon.

(3)而且,例如通信系統S中可不包含伺服器10。該情形時,認證裝置30執行被說明為由伺服器10執行之認證處理即可。而且,例如通信系統S中可不包含認證裝置30,且伺服器10可相當於接收裝置。該情形時,利用無線通信或有線通信從用戶終端20對伺服器10發送複數個廣告封包。伺服器10執行被說明為由認證裝置30執行之用戶ID之取得處理即可。(3) Furthermore, for example, the communication system S may not include the server 10 . In this case, it is only necessary for the authentication device 30 to execute the authentication processing described as being executed by the server 10 . Moreover, for example, the authentication device 30 may not be included in the communication system S, and the server 10 may be equivalent to a receiving device. In this case, a plurality of advertisement packets are transmitted from the user terminal 20 to the server 10 by wireless communication or wired communication. It is only necessary for the server 10 to execute the acquisition process of the user ID described as being executed by the authentication device 30 .

10:伺服器 11, 21, 31:控制部 12, 22, 32:記憶部 13, 23, 33:通信部 20:用戶終端 30:認證裝置 24, 34:操作部 25, 35:顯示部 26, 36:攝影部 100:資料記憶部 101:發行部 102:執行部 200:資料記憶部 201:分割部 202:作成部 203:發送部 300:資料記憶部 301:接收部 302:特定部 303:用戶ID取得部 304:生物體資訊取得部 305:執行部 DB:用戶資料庫 DT:掃描設定資料 N:網路 S:通信系統 SG:安全門10:Server 11, 21, 31: Control Department 12, 22, 32: memory department 13, 23, 33: Department of Communications 20: User terminal 30: authentication device 24, 34: Operation Department 25, 35: Display part 26, 36: Photography Department 100: data memory department 101: Distribution Department 102: Executive Department 200: data memory department 201: Division 202: Formation Department 203: Sending Department 300: data memory department 301: Receiving Department 302: specific department 303: User ID acquisition part 304: Department of Biological Information Acquisition 305: Executive Department DB: user database DT: scan setting data N: network S: communication system SG: security gate

圖1係表示通信系統之整體構成之圖。  圖2係表示利用通信系統之場景之一例之圖。  圖3係表示廣告封包之格式之一例之圖。  圖4係表示認證裝置掃描廣告封包之情況之圖。  圖5係表示認證裝置掃描廣告封包之情況之圖。  圖6係表示認證裝置掃描廣告封包之情況之圖。  圖7係表示通信系統中實現之功能之一例之功能方塊圖。  圖8係表示用戶資料庫之資料儲存例之圖。  圖9係表示掃描設定資料之資料儲存例之圖。  圖10係表示啟動處理之一例之流程圖。  圖11係表示認證處理之一例之流程圖。  圖12係表示S204中之處理之詳情之圖。FIG. 1 is a diagram showing the overall configuration of a communication system. Fig. 2 is a diagram showing an example of a scene using a communication system. Fig. 3 is a diagram showing an example of the format of an advertisement packet. Fig. 4 is a diagram showing the situation where the authentication device scans the advertisement packet. Fig. 5 is a diagram showing the situation where the authentication device scans the advertisement packet. Fig. 6 is a diagram showing the situation where the authentication device scans the advertisement packet. Fig. 7 is a functional block diagram showing an example of functions realized in the communication system. Fig. 8 is a diagram showing an example of data storage in the user database. Fig. 9 is a diagram showing an example of data storage of scan setting data. Fig. 10 is a flow chart showing an example of start-up processing. Fig. 11 is a flowchart showing an example of authentication processing. FIG. 12 is a diagram showing details of the processing in S204.

10:伺服器10:Server

20:用戶終端20: User terminal

30:認證裝置30: authentication device

100:資料記憶部100: data memory department

101:發行部101: Distribution Department

102:執行部102: Executive Department

200:資料記憶部200: data memory department

201:分割部201: Division

202:作成部202: Formation Department

203:發送部203: Sending Department

300:資料記憶部300: data memory department

301:接收部301: Receiving Department

302:特定部302: specific department

303:用戶ID取得部303: User ID acquisition part

304:生物體資訊取得部304: Department of Biological Information Acquisition

305:執行部305: Executive Department

DB:用戶資料庫DB: user database

DT:掃描設定資料DT: scan setting data

Claims (19)

一種通信系統,其包括發送裝置及接收裝置,  上述發送裝置包括:  分割機構,其將發送對象資料分割為複數個資料部分;  作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及  發送機構,其對上述接收裝置發送上述複數個封包之各者;  上述接收裝置包括:  接收機構,其從上述發送裝置接收上述複數個封包之各者;  取得機構,其基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分及上述順序資訊,結合上述複數個資料部分而取得上述發送對象資料;及  執行機構,其基於上述發送對象資料執行規定處理。A communication system, which includes a sending device and a receiving device. The sending device includes: a splitting mechanism, which divides the data to be sent into a plurality of data parts; Each of the plurality of packets is made by means of one of the above-mentioned data parts and sequence information related to the order of the data parts in the above-mentioned transmission target data; The above-mentioned receiving device includes: a receiving mechanism, which receives each of the above-mentioned plurality of packets from the above-mentioned sending device; Sequential information, which combines the above-mentioned multiple data parts to obtain the above-mentioned sending object data; and Execution agency, which executes prescribed processing based on the above-mentioned sending object data. 如請求項1之通信系統,其中  上述複數個封包之各者於第1資料區域中包含重複複數個之上述至少一個資料部分,於第2資料區域中包含上述順序資訊,  上述取得機構掃描上述第1資料區域中包含之值彼此相同的封包,並基於該經掃描的封包取得上述發送對象資料。Such as the communication system of claim 1, wherein each of the above-mentioned plurality of packets contains a plurality of repetitions of the above-mentioned at least one data part in the first data area, and the above-mentioned sequence information is included in the second data area, and the above-mentioned acquiring organization scans the above-mentioned first 1. Packets whose values are identical to each other are included in the data area, and the above-mentioned sending object data is obtained based on the scanned packets. 如請求項1或2之通信系統,其中  上述作成機構以上述複數個封包之各者中包含重複複數個之上述順序資訊之方式,作成上述複數個封包之各者,  上述取得機構基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分、及重複複數個之上述順序資訊,取得上述發送對象資料。As in the communication system of claim 1 or 2, wherein the above-mentioned making mechanism makes each of the above-mentioned plural packets in such a way that each of the above-mentioned plural packets contains a plurality of the above-mentioned sequential information repeatedly, and the above-mentioned obtaining mechanism is based on the above-mentioned plural The above-mentioned at least one data part repeated in plural and the sequence information in plural contained in each of the packets are obtained to obtain the data of the sending object. 如請求項3之通信系統,其中  上述複數個封包之各者於第1資料區域中包含重複複數個之上述至少一個資料部分,於第2資料區域中包含重複複數個之上述順序資訊,  上述取得機構掃描上述第2資料區域中包含之值彼此相同的封包,並基於該經掃描之封包取得上述發送對象資料。Such as the communication system of claim 3, wherein Each of the above-mentioned plural packets includes the above-mentioned at least one data part repeated in the first data area, and the above-mentioned sequential information in the second data area, the above-mentioned acquisition The organization scans the packets with the same values included in the second data area, and obtains the sending object data based on the scanned packets. 如請求項3之通信系統,其中  上述作成機構以上述複數個封包之各者中連續地包含重複複數個之上述順序資訊之方式,作成上述複數個封包之各者。The communication system according to claim 3, wherein the above-mentioned creating means creates each of the above-mentioned plurality of packets in such a manner that each of the above-mentioned plurality of packets continuously includes the above-mentioned sequence information repeated in plural. 如請求項1或2之通信系統,其中  上述作成機構以上述複數個封包之各者中重複複數個之上述至少一個資料部分與上述順序資訊離開規定距離以上的方式,作成上述複數個封包之各者。The communication system according to claim 1 or 2, wherein the above-mentioned creating means creates each of the above-mentioned multiple packets in such a way that the above-mentioned at least one data part repeated in each of the above-mentioned multiple packets is separated from the above-mentioned sequential information by a predetermined distance or more. By. 如請求項1或2之通信系統,其中  上述作成機構以上述複數個封包之各者中連續地包含重複複數個之上述至少一個資料部分之方式,作成上述複數個封包之各者。The communication system according to claim 1 or 2, wherein the above-mentioned making means makes each of the above-mentioned plurality of packets in such a manner that each of the above-mentioned plurality of packets continuously includes the above-mentioned at least one data part repeated in plural. 如請求項1或2之通信系統,其中  上述接收裝置進而包含特定出上述資料部分之個數之特定機構,  上述取得機構從上述複數個封包之各者取得上述至少一個資料部分及上述順序資訊直至達到上述個數為止,於已達到上述個數時取得上述發送對象資料。Such as the communication system of claim 1 or 2, wherein the above-mentioned receiving device further includes a specific mechanism specifying the number of the above-mentioned data parts, the above-mentioned obtaining mechanism obtains the above-mentioned at least one data part and the above-mentioned sequence information from each of the above-mentioned plurality of packets until When the above-mentioned number is reached, the above-mentioned sending object data is obtained when the above-mentioned number is reached. 如請求項8之通信系統,其中  上述發送對象資料為規定位數之數值,  上述複數個資料部分之各者為上述數值中所包含之各個的位,  上述順序資訊表示於上述數值中為第幾位,  上述特定機構將上述位數特定為上述個數。Such as the communication system of claim 8, wherein the above-mentioned transmission object data is a numerical value with a predetermined number of digits, each of the above-mentioned plurality of data parts is each bit contained in the above-mentioned numerical value, and the above-mentioned sequence information is represented as the number in the above-mentioned numerical value The above-mentioned specific organization specifies the above-mentioned digits as the above-mentioned number. 如請求項1或2之通信系統,其中  上述接收裝置能夠與複數個上述發送裝置之各者通信,  上述複數個封包之各者中包含能夠識別已發送該封包之上述發送裝置之識別資訊,  上述取得機構基於上述複數個封包之各者中所包含之上述識別資訊,針對每個上述發送裝置取得上述發送對象資料。As in the communication system of claim 1 or 2, wherein the above-mentioned receiving device is capable of communicating with each of the plurality of the above-mentioned sending devices, each of the above-mentioned plurality of packets includes identification information capable of identifying the above-mentioned sending device that has sent the packet, the above The obtaining unit obtains the above-mentioned sending object data for each of the above-mentioned sending devices based on the above-mentioned identification information contained in each of the above-mentioned plurality of packets. 如請求項1或2之通信系統,其中  上述複數個封包之各者為規定之無線通信標準中之廣告封包,  上述作成機構以複數個上述廣告封包之各者中包含重複複數個之上述至少一個資料部分且包含上述順序資訊來作為上述無線通信標準中之服務UUID之一部分的方式,作成上述複數個廣告封包之各者,  上述發送機構利用上述無線通信標準,發送上述複數個廣告封包之各者,  上述接收機構利用上述無線通信標準,接收上述複數個廣告封包之各者,  上述取得機構基於上述複數個廣告封包之各者中作為上述服務UUID之一部分而包含的重複複數個之上述至少一個資料部分及上述順序資訊,取得上述發送對象資料。As in the communication system of claim 1 or 2, wherein each of the above-mentioned plural packets is an advertisement packet in a prescribed wireless communication standard, and the above-mentioned making mechanism includes a plurality of repetitions of the above-mentioned at least one in each of the plural above-mentioned advertisement packets The data part includes the sequence information as a part of the service UUID in the above-mentioned wireless communication standard to make each of the above-mentioned plurality of advertisement packets, and the above-mentioned sending mechanism uses the above-mentioned wireless communication standard to send each of the above-mentioned plurality of advertisement packets , The above-mentioned receiving organization utilizes the above-mentioned wireless communication standard to receive each of the above-mentioned plurality of advertisement packets, The above-mentioned obtaining organization is based on the above-mentioned repeated plurality of at least one data contained in each of the above-mentioned plurality of advertisement packets as a part of the above-mentioned service UUID Part and the above sequence information, get the above sending object data. 如請求項11之通信系統,其中  上述發送裝置中安裝有規定之應用程式,  上述分割機構、上述作成機構及上述發送機構之各者之處理作為上述應用程式之處理而執行,  上述服務UUID中包含能夠識別上述應用程式之應用程式識別ID,  上述取得機構掃描上述服務UUID中包含上述應用程式識別ID之上述廣告封包,取得上述發送對象資料。As in the communication system of claim 11, wherein a specified application program is installed in the above-mentioned sending device, the processing of each of the above-mentioned dividing unit, the above-mentioned creating unit, and the above-mentioned sending unit is executed as the processing of the above-mentioned application program, and the above-mentioned service UUID includes The application program identification ID capable of identifying the above application program, the above-mentioned obtaining agency scans the above-mentioned advertisement packet containing the above-mentioned application program identification ID in the above-mentioned service UUID, and obtains the above-mentioned sender data. 如請求項1或2之通信系統,其中  上述發送對象資料為能夠識別上述發送裝置之用戶之用戶ID,  上述規定處理係基於上述用戶ID執行之認證處理。The communication system as in claim 1 or 2, wherein the above-mentioned sending object data is a user ID capable of identifying the user of the above-mentioned sending device, and the above-mentioned prescribed processing is an authentication processing performed based on the above-mentioned user ID. 如請求項13之通信系統,其中  上述接收裝置進而包含取得上述用戶之生物體資訊之生物體資訊取得機構,  上述執行機構基於上述用戶ID及上述生物體資訊,執行上述認證處理。The communication system according to claim 13, wherein the receiving device further includes a biometric information acquisition unit that acquires the biometric information of the user, and the execution unit executes the authentication process based on the user ID and the biometric information. 一種發送裝置,其包括:  分割機構,其將發送對象資料分割為複數個資料部分;  作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及  發送機構,其對接收裝置發送上述複數個封包之各者。A sending device, which includes: a division mechanism, which divides the data to be sent into a plurality of data parts; The method of sequence information related to the sequence of the data part in the data, making each of the above-mentioned plurality of packets; and Sending mechanism, which sends each of the above-mentioned plurality of packets to the receiving device. 一種接收裝置,其包括:  接收機構,其從發送裝置接收複數個封包之各者;  取得機構,其基於上述複數個封包之各者中包含之重複複數個之至少一個資料部分及該資料部分之順序相關的順序資訊,結合複數個上述資料部分而取得發送對象資料;及  執行機構,其基於上述發送對象資料執行規定處理。A receiving device, comprising: a receiving mechanism, which receives each of a plurality of packets from a transmitting device; Sequence-related sequence information, combining multiple parts of the above-mentioned data to obtain the sending object data; and Executing agency, which executes prescribed processing based on the above-mentioned sending object data. 一種通信方法,其包括:  分割步驟,其係將發送對象資料分割為複數個資料部分;  作成步驟,其係以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;  發送步驟,其係對接收裝置發送上述複數個封包之各者;  接收步驟,其係從發送裝置接收上述複數個封包之各者;  取得步驟,其係基於上述複數個封包之各者中包含之重複複數個之上述至少一個資料部分及上述順序資訊,結合上述複數個資料部分而取得上述發送對象資料;及  執行步驟,其係基於上述發送對象資料執行規定處理。A communication method, which includes: a dividing step, which is to divide the transmission target data into a plurality of data parts; The way of order information related to the order of the data part in the transmission object data is to make each of the above-mentioned plural packets; The sending step is to send each of the above-mentioned plural packets to the receiving device; The device receives each of the above-mentioned plurality of packets; The obtaining step is to obtain the above-mentioned transmission based on the above-mentioned at least one data part and the above-mentioned sequence information contained in each of the above-mentioned plurality of packets, combining the above-mentioned multiple data parts Object data; and Execution steps, which are based on the above-mentioned sending object data to perform prescribed processing. 一種程式產品,其係用以使電腦作為下述機構發揮功能:  分割機構,其將發送對象資料分割為複數個資料部分;  作成機構,其以複數個封包之各者中包含重複複數個之至少一個上述資料部分、且包含上述發送對象資料中之該資料部分之順序相關的順序資訊之方式,作成上述複數個封包之各者;及  發送機構,其對接收裝置發送上述複數個封包之各者。A program product, which is used to make a computer function as the following mechanism: Separation mechanism, which divides the data to be sent into a plurality of data parts; Creation mechanism, which repeats at least a plurality of Each of the above-mentioned plurality of packets is prepared by means of one of the above-mentioned data parts and including sequence information related to the order of the data part in the above-mentioned transmission target data; . 一種程式產品,其係用以使電腦作為下述機構發揮功能:  接收機構,其從發送裝置接收複數個封包之各者;  取得機構,其基於上述複數個封包之各者中包含之重複複數個之至少一個資料部分及該資料部分之順序相關的順序資訊,結合複數個上述資料部分而取得發送對象資料;及  執行機構,其基於上述發送對象資料執行規定處理。A program product for enabling a computer to function as the following mechanism: a receiving mechanism, which receives each of a plurality of packets from a sending device; At least one data part and the order information related to the order of the data part are combined to obtain the transmission target data by combining a plurality of the above data parts;
TW110121176A 2020-08-31 2021-06-10 Communication system, sending device, receiving device, communication method, and program product TWI787862B (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2020145568A JP7175944B2 (en) 2020-08-31 2020-08-31 Communication system, transmitter, receiver, communication method, and program
JP2020-145568 2020-08-31

Publications (2)

Publication Number Publication Date
TW202211647A TW202211647A (en) 2022-03-16
TWI787862B true TWI787862B (en) 2022-12-21

Family

ID=80499475

Family Applications (1)

Application Number Title Priority Date Filing Date
TW110121176A TWI787862B (en) 2020-08-31 2021-06-10 Communication system, sending device, receiving device, communication method, and program product

Country Status (2)

Country Link
JP (2) JP7175944B2 (en)
TW (1) TWI787862B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115314453B (en) * 2022-08-05 2024-06-14 郑州浪潮数据技术有限公司 Data transmission method, data sending terminal, data receiving terminal and related equipment

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1494238A2 (en) * 2003-07-01 2005-01-05 Thomson Licensing S.A. Method and apparatus for editing a data stream
US20050025152A1 (en) * 2003-07-30 2005-02-03 International Business Machines Corporation Method and system of efficient packet reordering
US20070237151A1 (en) * 2002-11-14 2007-10-11 Vic Alfano Reordering Sequence Based Channels
US10387328B2 (en) * 2006-12-06 2019-08-20 Fio Semiconductor Technologies, Llc Systems and methods for identifying storage resources that are not in use

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3139737B2 (en) * 1996-07-31 2001-03-05 日本電気株式会社 Data communication system
JP4207278B2 (en) * 1999-01-14 2009-01-14 パナソニック株式会社 Communication method and communication system
JP2002217877A (en) * 2001-01-19 2002-08-02 Audio Technica Corp Method for detecting reception data error
JP4355624B2 (en) * 2004-06-29 2009-11-04 中国電力株式会社 Distribution line remote monitoring and control system
JP2006217877A (en) * 2005-02-14 2006-08-24 Matsuyama Plow Mfg Co Ltd Agricultural work vehicle
JP4562575B2 (en) * 2005-03-30 2010-10-13 京セラ株式会社 COMMUNICATION SYSTEM, COMMUNICATION DEVICE, COMMUNICATION METHOD, AND COMMUNICATION CONTROL PROGRAM
JP5852620B2 (en) * 2013-09-26 2016-02-03 有限会社Gh9 Low power short-range wireless communication system
US11436316B2 (en) * 2018-12-26 2022-09-06 Rakuten Group, Inc. Authentication system, authentication device, authentication method, and program

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070237151A1 (en) * 2002-11-14 2007-10-11 Vic Alfano Reordering Sequence Based Channels
EP1494238A2 (en) * 2003-07-01 2005-01-05 Thomson Licensing S.A. Method and apparatus for editing a data stream
US20050025152A1 (en) * 2003-07-30 2005-02-03 International Business Machines Corporation Method and system of efficient packet reordering
US10387328B2 (en) * 2006-12-06 2019-08-20 Fio Semiconductor Technologies, Llc Systems and methods for identifying storage resources that are not in use

Also Published As

Publication number Publication date
JP2022153444A (en) 2022-10-12
JP7175944B2 (en) 2022-11-21
TW202211647A (en) 2022-03-16
JP7358574B2 (en) 2023-10-10
JP2022040724A (en) 2022-03-11

Similar Documents

Publication Publication Date Title
US8959606B2 (en) Key updating method and system thereof
US20240015150A1 (en) Authenticating devices via tokens and verification computing devices
US10897461B2 (en) Pharmacy database access methods and systems
JP6757861B1 (en) Authentication system, authentication method, and program
WO2022064686A1 (en) Authentication system, authentication method, and program
KR102488139B1 (en) Method and system for certificating vaccinaion and offering follow-up management after the vaccination
TWI754964B (en) Authentication system, authentication device, authentication method, and program product
TWI787862B (en) Communication system, sending device, receiving device, communication method, and program product
JP5145179B2 (en) Identity verification system using optical reading code
US7415615B2 (en) Method and system for user authentication in a digital communication system
JP7295319B2 (en) Authentication system, authentication method, and program
JP2016136664A (en) One-time authentication system, one-time authentication method, authentication server, portable terminal and one-time authentication program
JP2003030211A (en) Electronic name card, method for managing electronic name card and program thereof
WO2021131060A1 (en) Authentication system, authentication device, authentication method, and program
WO2021255821A1 (en) Authentication server, facial image update recommendation method and storage medium
JP2004013865A (en) Personal identification method by associative memory
JP7441991B1 (en) Information processing device, information processing method and program
WO2017058093A1 (en) Identification method and system
JP6907426B1 (en) Authentication system, authentication method, and program
WO2019034853A1 (en) Method of biometric user registration with the possibility of management of the data depersonalization level
CN115906050A (en) User group identity authentication method and device, electronic equipment and readable storage medium
JP2023031017A (en) Information management server, information management method, and program
PH12015000069A1 (en) System, method and computer program product for securely managing sensitive information