JP3813905B2 - Entrance / exit management system and entrance / exit management method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention provides a recording medium capable of repeatedly performing a security image in a display / non-display state or a mechanically readable / impossible state by reversibly recording and erasing images, for example. Entrance and exit management system and entrance and exit management method About.
[0002]
[Prior art]
In recent years, magnetic cards and IC cards having an information storage unit are used in a wide range of fields such as telephone cards, prepaid cards, and ID cards.
However, with the widespread use of cards, problems such as counterfeiting, alteration or unauthorized use of cards have occurred. Due to the emergence of such problems, there is a strong demand for guaranteeing the security of the card and the operation system using the card.
[0003]
In order to cope with such a problem, conventionally, a plurality of information used for determining the authenticity of a card is mounted on the card, and a proposal has been made to improve security by combining the information. .
For example, a card having a display unit for displaying either a visible image or a barcode on the surface of the IC card and associated with information read from a storage circuit in which the visible image or barcode is built. Has been proposed (for example, Japanese Utility Model Laid-Open No. 1-174171).
However, this proposed card has a problem that the card can be counterfeited by copying the stored information and cutting the display unit that displays the visible image or the barcode.
[0004]
In addition, when a pixel or an image (a holograph) that can be detected only when a reference light having a predetermined wavelength is irradiated to a specific position on the surface of a card having a storage unit, information is written on the card. When the data is written and read as encrypted conversion data using the pixel or image position data, the position data of the pixel or image is detected by irradiating the reference light, and the position data is used for storage. There has been proposed a legitimacy check method in which a card check is performed by collating data obtained by inversely converting converted data and registered data (for example, Japanese Patent Laid-Open No. 3-121790).
However, although this proposal enables excellent security management, the device is complicated because a special light source and a detection device are required, and there is a concern that the security may be lowered due to a reduction in the reliability of the device.
[0005]
On the other hand, there is a card in which the usage state is recorded on the card so as to be visible so that the user can check the current usage state of the card.
In such a card, since the recording part for recording the usage state is finite, if there is no margin that can be recorded in the recording part on the way, the card must be reissued even though the card is valid. There is a problem of not becoming.
[0006]
In view of this, a card has been devised that uses a reversible recording material for the recording section so that the usage state can be rewritten any number of times (for example, Japanese Patent Application Laid-Open No. 3-116594 or Japanese Patent Application Laid-Open 3-218898 publication etc.).
However, these methods are excellent in that the image can be repeatedly recorded / erased, but there is a problem in terms of security because the image itself can be easily rewritten and altered.
[0007]
[Problems to be solved by the invention]
As described above, in the past, a card with high security and an operation system using the card have not been realized, and an operation system using a card and card having both low cost and high security has not been realized. Realization was eagerly desired.
[0008]
Therefore, the present invention can realize a recording medium having both low cost and high security and an operation system using the recording medium. Entrance / exit management system and entrance / exit management method using this recording medium The purpose is to provide.
[0009]
[Means for Solving the Problems]
Of the present invention The entrance / exit management system includes a first layer forming a security image, a second layer capable of repeatedly performing the security image of the first layer in a mechanically readable / impossible state, and predetermined information. A first means for receiving a recording medium having a third layer having a storage unit for storing, and mechanically readable a security image of the first layer of the received recording medium; A second means for reading the security image of the first layer which is made mechanically readable, and the security image read by the second means is converted into a code by a key generation unit, based on the converted code A third means for storing information obtained by processing the registered information registered in advance in the storage unit of the recording medium, A fourth recording medium that accepts a recording medium in which the security image of the first layer ejected from the device on the field side is mechanically readable, and reads the security image of the first layer of the received recording medium; And authenticating the recording medium by comparing the information obtained by processing the registered information with the security image read by the fourth means as a key and the information stored in the storage unit of the recording medium. And a fifth means for making the security image of the first layer of the recording medium unreadable mechanically after the authenticity of the recording medium is determined by the fifth means. And a device on the exit side comprising means It has.
[0010]
In addition, the present invention The entrance / exit management method includes a first layer forming a security image, a second layer capable of repeatedly performing the security image of the first layer in a mechanically readable / impossible state, and predetermined information. A first step of accepting a recording medium having a third layer having a storage unit for storing and mechanically readable a security image of the first layer of the accepted recording medium; and A second step of reading the security image of the first layer that is made mechanically readable, and the security image read in the second step is converted into a code by a key generation unit, based on the converted code A third step of storing information obtained by processing pre-registered registration information in the storage unit of the recording medium, A fourth step of receiving a recording medium in which the security image of the first layer that has finished the above-mentioned process is in a mechanically readable state, and reading the security image of the first layer of the received recording medium; The information obtained by processing the registered information using the security image read in the fourth step as a key is collated with the information stored in the storage unit of the recording medium, and the authenticity of the recording medium is determined. And a sixth step of making the security image of the first layer of the recording medium mechanically unreadable after performing the authenticity determination of the recording medium in the fifth step. The exit side process configured with It has.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 schematically shows a configuration of a card 1 according to a first embodiment of the present invention.
In FIG. 1, 11 is a base material made of white vinyl chloride resin or polyester, 12 is a colored security image such as a barcode, special figure or specific character printed on the surface of the base material 11, and 13 is a transmittance. A reversible variable layer 14 is a protective layer made of a permeable material (resin).
[0013]
The base material 11 is, for example, about 10 μm thick to several mm thick.
For the variable layer 13, for example, a material (details will be described later) such as vinyl chloride or a vinyl acetate polymer low molecular composite film that reversibly shows a cloudiness and a transparent state depending on temperature is used.
[0014]
FIG. 2 shows an example of the security image 12 in the card 1. In the case of the present embodiment, the security image 12 is, for example, a shape in which a rectangular interior is hollowed out (special figure), and the white base material 11 is colored in a color having a certain degree of contrast. Yes.
[0015]
Then, by making the variable layer 13 transparent, the security image 12 is in a visible display state or a state in which mechanical reading is possible (FIG. 2A), and the variable layer 13 becomes clouded. Thus, a non-display state that cannot be seen or a state that cannot be mechanically read (FIG. 2B) is set.
[0016]
FIG. 3 shows the characteristics of the material constituting the variable layer 13. The material constituting the variable layer 13 is a material that can reversibly convert both transparent and cloudy states according to a given temperature (see, for example, JP-A-55-154198).
That is, for example, in the transparent state, when the temperature is raised from room temperature to the clouding temperature (T3) or higher, the material changes from the transparent state to the cloudy state (shown by a solid line in the figure), and the temperature returns to room temperature. However, it has a characteristic of maintaining a cloudy state as it is.
[0017]
When the temperature of the material is raised from normal temperature to the clearing temperature range (T1 to T2, T2 <T3) and returned to normal temperature, the white turbid state is changed to the transparent state, and the transparent state is maintained as it is. This change can be repeated repeatedly.
By using such a material, when the variable layer 13 is in a transparent state, the security image 12 can be read from the surface of the card 1, and when the variable layer 13 is in a cloudy state, the security image 12 is hidden and cannot be read. It can be.
[0018]
As described above, the security image 12 formed on the card 1 can be arbitrarily displayed / not displayed or optically read by changing the temperature of the variable layer 13 from the outside to the clouding temperature or the transparent temperature. / Can be disabled.
[0019]
In this case, as is apparent from the above description, the thickness of the variable layer 13 needs to be a thickness that allows the security image 12 to be arbitrarily displayed / hidden or optically readable / impossible. A thickness of several μm to 100 μm is appropriate.
[0020]
Note that the material of the variable layer 13 used in this embodiment can be made transparent only in a limited temperature range, as shown in FIG. Although the temperature and temperature range showing this change vary depending on the material, the material used here becomes transparent at about 60 ° C. to 110 ° C., and the temperature range at which the transparency can be made is about 50 ° C.
[0021]
Therefore, when the security image 12 that is hidden is intentionally read, sufficiently controlled heating is required, and this controlled temperature range guarantees the high security of the recording medium of the present invention. It has become.
The material of the variable layer 13 is a material that reversibly changes color development characteristics, such as a photochromic material or a polymer liquid crystal material, and can be used if it has transparency.
[0022]
FIG. 4 shows a schematic configuration of an apparatus for performing security management using the card 1 described above. In FIG. 4, reference numeral 101 denotes a thermal bar heating means as a heating means for heating the variable layer 13 of the card 1, and a thermal bar in which a thick or thin film heating element 103 is formed on a ceramic substrate 102, and this is driven. Driving means (not shown).
[0023]
A security image reading unit 104 includes a light source 105, an optical sensor 106 such as a CCD, and a driving unit (not shown) for driving them.
Reference numeral 107 denotes a conveyance roller for conveying the card 1, which is connected to driving means (not shown).
[0024]
Here, security management by the above-described apparatus will be described.
The card 1 with the security image 12 in an optically unreadable state is inserted into the apparatus. Then, the card 1 is taken in the direction indicated by the arrow by the transport roller 107 and is first transported to the heating means 101.
In the heating means 101, the heating element 103 is driven at a temperature at which energy can be applied to raise the temperature to the temperature at which the variable layer 13 is made transparent before the card 1 comes into contact with the heating element 103 based on the detection of insertion of the card 1. . The temperature of the heating element 103 is controlled so as to maintain the temperature while the card 1 is in contact. With this heating means 101, the variable layer 13 is heated and transparentized, whereby the security image 12 of the card 1 can be read.
[0025]
The card 1 on which the security image 12 can be read is further conveyed to the security image reading means 104 by the transport roller 107, where the security image 12 is read. Then, the read security image 12 is collated with, for example, an image registered in advance in the apparatus, whereby the authenticity of the card 1 is determined.
[0026]
Thus, when the card 1 in which the security image 12 is optically unreadable is inserted into the apparatus, the security image 12 is optically readable and registered with the read security image 12. Security management is performed by checking the image.
[0027]
Next, the operation of the system when managing entry / exit using the above-described card 1 and apparatus will be described.
FIG. 5 shows a state in which the security image 12 can be read only within a predetermined interval by changing the display / non-display state or the mechanical readable / impossible state of the security image 12 within and outside the predetermined interval. By doing so, the case where illegal exercise of the card 1 is excluded within a predetermined section is shown as an example.
[0028]
That is, when entering the predetermined section, the card 1 with the security image 12 shielded is inserted into the apparatus, and the authenticity of the card 1 is determined by the operation described above. At this time, if the security image 12 cannot be read or does not match the image, entry is rejected, and only the correct card 1 (executor that matches the image) is allowed to enter.
[0029]
Within the predetermined section, the security image 12 can be read visually, and the trespasser's card 1 remains unreadable, so the trespasser and the legitimate admission Person (executor of correct card 1) can be easily identified.
Further, when leaving, the security image 12 is read and verified in the same manner. If there is any doubt about the use state of the card 1 by the processing of reading and verification, the exerciser's leaving is rejected.
[0030]
As described above, even when leaving, it is possible to perform security management even for a person who has the correct card 1 by checking the security image 12 but has illegally entered without going through the entrance check.
[0031]
When leaving, the security image 12 of the card 1 is again shielded and cannot be read visually. As a result, the security image 12 is not exposed to the eyes of a third party outside the predetermined section, so that high security is ensured by the hidden security image 12.
[0032]
Further, in this system, the security image 12 is further improved by changing the security image 12 for each system, for each predetermined section, for each user, or by selecting one from a plurality of security images 12. Can be guaranteed.
[0033]
FIG. 6 shows another configuration example of the card 1 according to the first embodiment of the present invention.
In FIG. 6, a card 1 is formed on a base material 11 made of white vinyl chloride resin or polyester, a protective layer 14 made of a permeable material (resin), and is formed in the protective layer 14 and colored. The security image 12, the variable layer 13 that reversibly changes the transmittance provided below the security image 12, and the same color or optical as the security image 12 provided between the variable layer 13 and the substrate 11. The colored layers 15 colored in similar colors are laminated in order from the top.
Note that an intermediate layer may be provided between the colored layer 15 and the variable layer 13 or between the variable layer 13 and the protective layer 14 as necessary. However, the intermediate layer between the colored layer 15 and the variable layer 13 must be translucent.
[0034]
In this card 1, when the variable layer 13 is in a state of transmitting the color of the colored layer 15 (here, transparent), the security image 12 and the colored layer 15 have the same color as shown in FIG. Alternatively, since the colors are similar, the security image 12 cannot be optically read.
[0035]
On the other hand, when the variable layer 13 is in a state of blocking the color of the colored layer 15 (here, cloudy state), the security image 12 can be read as shown in FIG. The variable layer 13 may be colored as long as the security image 12 can be optically read.
[0036]
FIG. 7 shows a schematic configuration of the card 2 according to the second embodiment of the present invention.
In FIG. 7, a card 2 has a variable unit capable of repeatedly performing a security image readable / impossible state and a storage unit for storing predetermined information, 21 is a base material, and 22 is a first layer. As a security image, 23 is a variable layer as a second layer, 24 is a protective layer, 25 is a subbing layer for satisfactorily forming the variable layer 23, and 26 is a third layer having an information storage unit It is a magnetic recording layer.
The card 2 is configured such that predetermined information is encrypted using the security image 22 read from the variable section having the above-described function as a key, and this encrypted information can be stored in the magnetic recording layer 26.
[0037]
FIG. 8 shows a schematic configuration of an apparatus for performing security management using the card 2 described above.
In FIG. 8, 201a and 201b are thermal bar heating means as heating means for heating the variable layer 23 of the card 2, and a thermal bar in which a thick or thin film heating element 203 is formed on a ceramic substrate 202, and this Driving means (not shown) for driving the. Here, the heating means 201a is used in the present invention. First means The heating means 201b corresponds to Sixth means It corresponds to.
[0038]
204 is the second means ( Fourth means The security image reading means includes a light source 205, an optical sensor 206 such as a CCD, and a driving means (not shown) for driving them. Reference numeral 207 denotes a transport roller for transporting the card 2 at a predetermined speed, and is connected to driving means (not shown). A magnetic recording means 208 is a third means for writing encrypted information into the magnetic recording layer 26 of the card 2 or reading the encrypted information stored in the magnetic recording layer 26.
[0039]
FIG. 9 shows a configuration of a portion related to information encryption processing in the above apparatus. That is, the security image information read by the security image reading unit 204 is sent to the key generation unit 210. The security image information sent to the key generation unit 210 is converted into a key code that matches the image by referring to the contents of the built-in image / key conversion table 210a. The key code converted by the key generation unit 210 is output to the encryption processing unit 211.
[0040]
When the key code is sent to the encryption processing unit 211, the registration information registered in advance in the memory unit 212 is read, and this registration information is encrypted using the previous key code. The encryption process will be described later. Then, the encrypted information is written into the magnetic recording layer 26 of the card 2 by the magnetic recording means 208.
[0041]
FIG. 10 shows the flow of processing relating to the issuance of the card 2 by the above-described apparatus. That is, the card 2 in which the security image 22 is optically unreadable is inserted into the apparatus. Then, the card 2 is taken in the direction indicated by the arrow by the transport roller 207, and is first transported to the heating means 201a.
[0042]
In the heating means 201a, based on detection of insertion of the card 2, the heating element 203 is driven at a temperature at which energy can be applied to raise the temperature to the temperature at which the variable layer 23 becomes transparent before the card 2 contacts the heating element 203. . The temperature of the heating element 203 is controlled so as to maintain the temperature while the card 2 is in contact.
[0043]
By this heating means 201a, the variable layer 23 is heated and made transparent, so that the security image 22 of the card 2 can be read. The card 2 on which the security image 22 can be read is further conveyed to the security image reading means 204 by the conveying roller 207, where the security image 22 is read.
The read security image information is converted into a key code based on the contents of the image / key conversion table 210 a by the key generation unit 210, and the key code is output to the encryption processing unit 211.
[0044]
On the other hand, registration information registered in advance is read from the memory unit 212 of the apparatus and supplied to the encryption processing unit 211, and is encrypted using the previous key code. The encrypted information is written to the magnetic recording layer 26 by the magnetic recording means 208 as the card 2 is conveyed by the conveying roller 207.
[0045]
Thereafter, the card 2 is transported to the heating unit 201b by the transport roller 207, and the variable layer 23 is heated and whitened by the heating unit 201b, so that the security image 22 of the card 2 cannot be read. At this time, similarly to the heating unit 201a, the heating unit 201b is controlled so as to maintain a temperature at which energy for raising the temperature to a temperature at which the variable layer 23 becomes clouded is given.
The card 2 in which the security image 22 cannot be read is ejected from the apparatus and provided to the user.
[0046]
In this way, the card 2 records the encrypted information using the security image 22 as a key in the magnetic recording layer 26, and further issues the security image 22 in an optically unreadable state. Management is performed.
[0047]
Since the above-described thermal bar heating means 201a and 201b can change the heating temperature within one second, the thermal bar heating means 201b in FIG. 8 can be omitted.
In this case, after the encrypted information is written in the magnetic recording layer 26, the conveyance direction of the card 2 is reversed, and during this time, the heating temperature of the thermal bar heating means 201a is changed from the transparent temperature range to the white turbid temperature range. By changing to, the turbidity treatment of the variable layer 23 may be performed.
[0048]
Here, an example of the encryption process will be described.
For example, when the security image 22 has the shape shown in FIG. 2A, the variable portion image read from the security image 22 is a “circle”. The key code of “Yen” is described as “150” in hexadecimal.
Further, for example, when the registration information registered in the memory unit 212 is described as “120224ABF” in hexadecimal notation, the encryption process is performed as follows.
[0049]
The registration information “120224ABF” is first divided into three digits such as “120”, “224”, and “ABF”. Then, the numerical value “150” of the key code is subtracted for each divided portion. When this result is expressed in hexadecimal, it becomes “FFFFFFFFD0” for “120”. In this case, the last three digits are taken and converted to “FD0”. Similarly, the registration information portion “224” is converted to “0D4” and “ABF” is converted to “96F”.
In this way, the registration information “120224ABF” is finally converted into the encrypted information “FD00D496F”.
[0050]
Next, operation of the system when security management is performed using the card 2 described above will be described.
FIG. 11 shows a configuration of a part related to encryption processing and verification processing in the security management system.
In FIG. 11, the security image information read by the image reading unit 204 is sent to the key generation unit 210. The security image information sent to the key generation unit 210 is converted into a key code that matches the image by referring to the contents of the built-in image / key conversion table 210a.
[0051]
The key code converted by the key generation unit 210 is output to the encryption processing unit 211. When the key code is sent to the encryption processing unit 211, the registration information registered in advance in the memory unit 212 is read, and this registration information is encrypted using the previous key code. This encrypted information is 5th means Is sent to the information collation / determination unit 213.
[0052]
On the other hand, encrypted information (information obtained by encrypting the same information registered in the memory unit 212 of the apparatus with the same key code) stored in the magnetic recording layer 26 of the card 2 is also used by the magnetic recording unit 208. It is read by magnetic information reading means. The read storage encryption information is sent to the information verification / determination unit 213.
Then, in this information collation / determination unit 213, the authenticity of the card 2 is judged by comparing and collating the encrypted information.
[0053]
FIG. 12 shows the flow of processing in the security management system when entrance / exit is managed using the card 2 and the apparatus described above.
That is, when entering the predetermined section, the card 2 with the security image 22 shielded is inserted into the apparatus shown in FIG. 8 (however, the thermal bar heating means 201b in FIG. 8 is unnecessary), and the operation described above The variable layer 23 is made transparent and the security image 22 is read.
[0054]
The read image information is converted into a matching key code by referring to the image / key conversion table 210 a by the key generation unit 210 and then output to the encryption processing unit 211.
Also, pre-registered registration information is read from the memory unit 212, and this registration information is encrypted by the encryption processing unit 211 using the previous key code and output to the information collation / determination unit 213.
[0055]
On the other hand, the magnetic information reading means (magnetic recording means) 208 reads the information stored in the magnetic recording layer 26 of the card 2 in which the same information as that on the device side is encrypted with the same key code. It is output to 213.
Then, the stored encrypted information and the registered encrypted information are collated by the information collation / determination unit 213, whereby the authenticity of the card 2 is determined.
[0056]
At this time, when the information of both does not match and when the security image 22 cannot be read in the previous process, the entry of the card 2 exerciser is rejected and the correct card 2 (both information matches) The exerciser is returned with card 2 and is allowed to enter.
[0057]
Within the predetermined section, the security image 22 of the card 2 can be read visually, and the trespasser's card 2 remains unreadable to the trespasser card 2. And legitimate visitors (exercisers of the correct card 2) can be easily distinguished.
[0058]
Further, when exiting from a predetermined section, the security image 22 is read and the encrypted information is verified by the apparatus shown in FIG. 8 installed at the exit (however, the thermal bar heating means 201a in FIG. 8 is not required). Are performed in the same manner. Since these operations overlap with the above description, they are omitted here.
[0059]
If there is any doubt about the use state of the card 2 by this reading and collation processing, the exerciser's leaving is rejected.
In this way, even when leaving, by checking the encryption information based on the security image 22, security management can be performed even for a person who has the correct card 2 but has illegally entered.
[0060]
At the time of exit, the security image 22 of the card 2 is again shielded and cannot be read visually. As a result, the security image 22 is not exposed to the eyes of a third party outside the predetermined section, and thus high security is ensured by the hidden security image 22.
[0061]
Further, in this system, the security image 22 is further improved by changing the security image 22 for each system, for each predetermined section, for each user, or by selecting one from a plurality of security images 22. Guarantees are possible.
[0062]
In this way, in this system, for example, the display / non-display state of the security image 22 is changed inside and outside a predetermined section, and the information and system on the card 2 side encrypted together with the security image 22 as a key High security management is performed by a combined security form of collating with the information on the side.
[0063]
FIG. 13 shows another configuration example of the card 2 according to the second embodiment of the present invention.
In FIG. 13, a card 2 has a variable part capable of repeatedly performing a security image readable / impossible state and a storage part for storing predetermined information. Reference numeral 20 denotes a sheet-like vinyl chloride resin (PVC sheet). ) And the like, 22 is a security image, 23 is a variable layer, 24 is a protective layer, and 27 is an IC memory as an information storage unit embedded in the substrate 20.
The card 2 is configured such that predetermined information is encrypted using the security image 22 read from the variable unit having the above-described function as a key, and the encrypted information can be stored in the IC memory 27.
[0064]
As described above, according to the present invention, since the security image can be read only when necessary, the security image can be unnecessarily exposed to a third party outside the management area. Security image management becomes easy.
[0065]
In addition, since the security image can be easily confirmed in the management area, it is easy to determine whether or not the person is a trespasser.
In addition, since no special light source or detection device is required, it is possible to obtain higher confidentiality with a relatively inexpensive and simple configuration, and to make forgery and alteration of the recording medium difficult. It is.
[0066]
Next, a third embodiment according to the present invention will be described.
FIG. 14 shows a schematic configuration of a card 3 according to the third embodiment of the present invention.
In FIG. 14, 31 is a base material of about 10 μm thickness to several mm thickness made of white vinyl chloride resin or polyester, 32 is a pre-printed layer on which a picture or text provided on one surface of the base material 31 is printed, 33 is A black underlayer 34 is a variable layer on which a security image is recorded, for example, using a material that reversibly shows white turbidity and transparency depending on temperature, and 35 is a protective layer made of a transparent material. is there. The variable layer 34 is made of a material having the same characteristics as those in the first and second embodiments described above.
As described above, the card (rewritable recording medium) 3 has a variable section capable of reversibly recording and erasing images.
[0067]
FIG. 15 schematically shows a configuration of an apparatus for rewriting the security image of the card 3 according to a predetermined condition.
In FIG. 15, reference numeral 301 denotes a thermal head thermal recording means, which is a thermal head 302 having a heating resistor for applying white turbid heat energy to the card 3, a platen roller 303, and a thermal for controlling energization to the heating resistor. The head driving circuit 304 is included. The thermal head 302 is, for example, a line recording head having a plurality of heating elements arranged in a row in a direction orthogonal to the card 3 conveyance direction.
[0068]
Reference numeral 305 denotes a heating means, which includes a platen roller 306 and a heat roller 308 provided with a heat generating lamp 307 inside a rotating metal sleeve whose surface is coated with urethane rubber. The heat generating lamp 307 is driven by a heat roller temperature control device (not shown).
Reference numeral 309 denotes a pair of feed rollers for transporting the card 3 at a constant speed, and is driven in conjunction with the platen rollers 303 and 306 and the heat roller 308.
[0069]
FIG. 16 schematically shows a main configuration of the above-described apparatus.
In FIG. 16, 311 is a CPU for controlling the operation of the entire apparatus, 312 is a timer having a clock function, 313 is a security image generating unit, 301 is a thermal head thermal recording means, and 314 is a bus connecting the CPU 311 and each part.
[0070]
The security image generation unit 313 includes a control unit 313a, a correspondence table 313b that describes correspondence between time and security image, and a security image memory 313c that stores various security images.
The correspondence table 313b stores, for example, time division data obtained by dividing every 2 hours from 0 o'clock to 24 o'clock, and different security image code data assigned according to each division time.
In the security image memory 313c, an image corresponding to the security image code stored in the correspondence table 313b is stored as bit data.
[0071]
Next, the security image rewriting operation to the card 3 by the above-described apparatus will be described.
For example, when the card 3 is inserted into the apparatus, the card 3 is conveyed by the feed roller 309 in the direction of the arrow in the figure, and is first sent to the heating means 305. At this time, the temperature of the heat roller 308 is set in advance so that the temperature of the variable layer 34 of the card 3 is heated to about 70 ° C. to about 100 ° C. which is the transparency temperature. By passing, the variable layer 34 becomes transparent, and the security image recorded there is erased.
[0072]
The image-erased card 3 is further transported and sent to the thermal head thermal recording means 301. When the card 3 is sent to the thermal head thermal recording means 301, a new security image is recorded on the variable layer 34 of the card 3. Recording is performed by driving the heating resistor of the thermal head 302 corresponding to the image point to be recorded so that the variable layer 34 is heated to 110 ° C. which is the white turbid temperature range.
[0073]
That is, when the CPU 311 detects insertion of the card 3 into the apparatus, a security image generation signal is output to the control unit 313a of the security image generation unit 313. Then, the control unit 313a obtains time information from the timer 312 and reads out the code data of the security image corresponding to the time information from the time / security image correspondence table 313b and displays the image corresponding to the code data as the security image. It is obtained from the memory 313c.
[0074]
Then, in accordance with a print command from the CPU 311, the security image bit data obtained from the security image memory 313 c is output to the thermal head thermal recording unit 301. In the thermal head thermal recording means 301, the thermal head driving circuit 304 drives the thermal head 302 based on the received bit data, and the variable layer 34 of the card 3 becomes white turbid according to the bit data, and is selected there. Record the security image.
[0075]
As described above, the security image is selectively rewritten in accordance with the predetermined condition, in this example, the time division, thereby facilitating forgery discrimination from the security image printed as a fixed image.
That is, forgery is difficult unless it has a rewritable recording section and a variable section performance equivalent to that of the card 3 used in this apparatus.
[0076]
Next, a fourth embodiment according to the present invention will be described.
FIG. 17 shows a schematic configuration of a card 4 according to the fourth embodiment of the present invention.
In FIG. 17, this card 4 has a variable part capable of reversibly recording and erasing an image and a storage part for storing information, and 41 is a 10 μm thick made of white vinyl chloride resin or polyester. A substrate having a thickness of about several millimeters; 42, a magnetic recording layer as a storage unit; 43, a black underlayer; Reference numeral 45 denotes a protective layer made of a material having transparency. The variable layer 44 is made of a material having the same characteristics as those of the first, second, and third embodiments described above.
As described above, the card (rewritable recording medium) 4 includes a variable unit capable of reversibly recording and erasing an image and a storage unit capable of magnetically recording information. ing.
[0077]
FIG. 18 schematically shows the configuration of a device that rewrites the security image of the card 4 and rewrites information in accordance with a predetermined condition.
In FIG. 18, reference numeral 401 denotes a thermal head thermal recording means, which is a thermal head 402 having a heating resistor for applying white turbid heat energy to the card 4, a platen roller 403, and a thermal for controlling energization to the heating resistor. It consists of a head drive circuit 404. The thermal head 402 is, for example, a line recording head having a plurality of heating elements arranged in a row in a direction orthogonal to the card 4 conveyance direction.
[0078]
Reference numeral 405 denotes a heating means, which includes a platen roller 406 and a heat roller 408 in which a heat generating lamp 407 is provided inside a rotating metal sleeve whose surface is coated with urethane rubber. The heat generating lamp 407 is driven by a heat roller temperature control device (not shown).
[0079]
Reference numeral 409 denotes magnetic recording means, which includes a magnetic recording head 410 for writing information to the magnetic recording layer 42 of the card 4 and reading recorded information, a platen roller 411, and a drive unit 412.
Reference numeral 413 denotes a pair of feed rollers for conveying the card 4 at a constant speed, and is driven in conjunction with a platen roller 403, 406, 411 and a heat roller 408 by a drive system (not shown).
[0080]
FIG. 19 schematically shows a main configuration of the above-described apparatus.
In FIG. 19, 421 is a CPU that controls the operation of the entire apparatus, 422 is a timer having a clock function, 423 is a security image generation unit, 424 is a key generation unit that generates an encryption key corresponding to the security image, and 425 is an encryption A registration information memory for storing registration information registered in advance for conversion, 426 is an encryption processing unit for encrypting the registration information with an encryption key, and 427 is a bus connecting the CPU 421 to each unit. The thermal head thermal recording unit 401 and the magnetic recording unit 409 are connected to the CPU 421 through a bus 427.
[0081]
The security image generation unit 423 includes a control unit 423a, a correspondence table 423b that describes correspondence between the date and the security image, and a security image memory 423c that stores various security images. In the correspondence table 423b, for example, weekly division data divided for each week and different security image code data assigned according to each division are stored.
In the security image memory 423c, an image corresponding to the security image code stored in the correspondence table 423b is stored as bit data.
[0082]
The key generation unit 424 obtains an encryption key corresponding to the security image code by referring to the built-in image / key conversion table 424a.
[0083]
Next, the rewriting operation of the security image and magnetic information on the card 4 by the above-described apparatus will be described.
For example, when the card 4 is inserted into the apparatus, the card 4 is conveyed by the feed roller 413 in the direction of the arrow in the figure, and is first sent to the heating means 405. At this time, the temperature of the heat roller 408 is set in advance so that the temperature of the variable layer 44 of the card 4 is heated to about 70 ° C. to about 100 ° C. which is the transparency temperature, and the card 4 passes through the heat roller 408. By doing so, the variable layer 44 is made transparent, and all the security images recorded there are erased.
[0084]
The image-erased card 4 is further conveyed and sent to the thermal head thermal recording means 401. When the card 4 is sent to the thermal head thermal recording means 401, a new security image is recorded on the variable layer 44 of the card 3. Recording is performed by driving the heating resistor of the thermal head 402 corresponding to the image point to be recorded so that the variable layer 44 is heated to 110 ° C. which is the white turbid temperature range.
[0085]
The card 4 on which the new security image has been written is further conveyed and sent to the magnetic recording means 409. When the card 4 is sent to the magnetic recording means 409, the information on the magnetic recording layer 42 of the card 4 is rewritten with the newly encrypted information by the magnetic recording head 410.
[0086]
That is, when the CPU 421 detects insertion of the card 4 into the device, a security image generation signal is output to the control unit 423a of the security image generation unit 423. Then, the control unit 423a obtains the date information from the timer 422, reads out the code data of the security image corresponding to the week from the month / date / security image correspondence table 423b, and security-decodes the image corresponding to the code data. It is obtained from the image memory 423c.
[0087]
Then, according to the print command from the CPU 421, the bit data of the security image obtained from the security image memory 423c is output to the thermal head thermal recording unit 401. In the thermal head thermal recording means 401, the thermal head drive circuit 404 drives the thermal head 402 based on the received bit data, thereby causing the variable layer 44 of the card 4 to become white turbid according to the bit data and being selected there. Record the security image.
[0088]
On the other hand, the security image generation unit 423 outputs the security image code data to the key generation unit 424. The key generation unit 424 obtains an encryption key corresponding to the security image code data by referring to the contents of the image / key conversion table 424a, and outputs this to the encryption processing unit 426.
[0089]
Registration information is supplied from the registration information memory 425 to the encryption processing unit 426, and this registration information is encrypted using the previous encryption key. The encrypted information is sent to the magnetic recording means 409. In the magnetic recording means 409, the magnetic recording head driving unit 412 drives the magnetic recording head 410 based on the received encrypted information, so that the magnetic information already recorded in the magnetic recording layer 42 of the card 4 is newly recorded. Rewrite with encrypted information.
[0090]
In this way, the security image is selectively rewritten according to the predetermined condition, in this example, the month (week) classification, and the encrypted registration information is also rewritten based on the selected security image. High security management is possible.
[0091]
Here, an example of the encryption processing described above will be described.
For example, if the security image recorded in the variable layer 44 is “yen”, the encryption key in this case is described as “150” in hexadecimal. For example, when the registration information registered in the registration information memory 425 is described as “120224ABF” in hexadecimal notation, the encryption process is performed as follows.
[0092]
The registration information “120224ABF” is first divided into three digits such as “120”, “224”, and “ABF”. Then, the numerical value “150” of the encryption key is subtracted for each of the divided portions. When this result is expressed in hexadecimal, it becomes “FFFFFFFFD0” for “120”. In this case, the last three digits are taken and converted to “FD0”. Similarly, the registration information portion “224” is converted to “0D4” and “ABF” is converted to “96F”.
[0093]
In this way, the registration information “120224ABF” is finally converted into the encryption information “FD00D496F”. Accordingly, “FD00D496F” as encryption information is magnetically recorded on the magnetic recording layer 42 of the card 4 in correspondence with the recording of the “circle” of the security image.
[0094]
For example, “star” is selected as a new security image for the card 4 in which “Yen” as the security image and “FD00D496F” as the encryption information are already recorded. .
In this case, if the encryption key of “star” is described as “027”, “120224ABF” as registration information becomes encryption information “0F91FDA98” by using the same processing as described above.
Therefore, when the security image is rewritten to “star”, the encryption information is rewritten to “0F91FDA98” accordingly.
[0095]
In this way, for example, when the card 4 and the device described above are used for entrance management, the security image code necessary for entry into the management section is updated according to the conditions set by the administrator. Therefore, unauthorized entry is difficult unless a recording medium having a rewritable recording section and having a variable section performance equivalent to that of the recording medium used in this apparatus is used.
[0096]
Next, exit management using the card 4 will be described.
FIG. 20 shows an outline of an apparatus used for exit management from the management section when entering the management section using the card 4 in which the security image and the encrypted registration information are written by the above apparatus. The configuration is shown.
In FIG. 20, reference numeral 431 denotes a security image reading means, which comprises a light source 432, a CCD line sensor 433, and a CCD driving section (not shown) for driving the light source 432.
[0097]
A magnetic reading unit 435 includes a magnetic reading head 436 that reads magnetic information of the magnetic recording layer 42 of the card 4, a magnetic reading head driving unit (not shown) that drives the magnetic reading head 436, and a platen roller 438. .
Reference numeral 439 denotes a conveyance roller for conveying the card 4 at a constant speed, and is driven in conjunction with a platen roller 438 by a drive system (not shown).
[0098]
FIG. 21 schematically shows a main configuration of the above-described apparatus.
In FIG. 21, 441 is a CPU that controls the entire system, 442 is a registration information memory that stores pre-registered registration information, 443 is an image code conversion unit that converts a read security image into an image code, and 444 is an image code. 440 is an encryption processing unit that encrypts registration information with the encryption key, and 446 decrypts the encryption information read from the magnetic recording layer 42 of the card 4 with the encryption key. It is the decoding process part which performs.
[0099]
Reference numeral 447 collates the encrypted information read from the magnetic recording layer 42 of the card 4 with the registration information encrypted by the encryption processing unit 445, or the registration information stored in the registration information memory 442 and the card 4. A security information collating unit 448 that collates information read from the magnetic recording layer 42 and decrypted by the decryption processing unit 446 is a bus for connecting the CPU 441 to each unit.
[0100]
Further, a CCD driving unit 434 for driving the CCD line sensor 433 in the security image reading unit 431 and a magnetic reading head driving unit 437 for driving the magnetic reading head 436 in the magnetic reading unit 435 are connected to the bus 448 of the CPU 441. It becomes the composition.
[0101]
Next, operations related to exit management in the above-described apparatus will be described.
For example, when leaving the management section, the card 4 in which the security image and the encrypted registration information are written is inserted into the above device. Then, the card 4 inserted into the apparatus is conveyed in the direction of the arrow in the figure by the conveying roller 439 and sent to the security image reading means 431. The security image recorded on the variable layer 44 is read by the CCD line sensor 433 of the security image reading means 431.
[0102]
The card 4 from which the security image has been read is further conveyed by a conveyance roller 439 and sent to the magnetic reading means 435. The encrypted registration information stored in the magnetic recording layer 42 of the card 4 is read by the magnetic reading head 436 of the magnetic reading means 435.
[0103]
The security image data read by the CCD line sensor 433 is input from the CCD drive unit 434 to the image code conversion unit 443 via the bus 448, and an image code corresponding to the image is sent via the bus 448 to the image code / Input to the key conversion unit 444.
[0104]
The image code input to the image code / key conversion unit 444 is converted into a corresponding encryption key here, and output to the encryption processing unit 445 and the decryption processing unit 446. When an encryption key is input to the encryption processing unit 445, the registration information input from the registration information memory 442 is encrypted using this encryption key. The information encrypted by the encryption processing unit 445 is output to the security information verification unit 447. Note that the details of the encryption process are the same as those described above, and a description thereof is omitted here.
[0105]
On the other hand, the encrypted registration information read by the magnetic read head 436 is input to the security information verification unit 447 via the bus 448. When the information encrypted by the encryption processing unit 445 and the encrypted registration information read by the magnetic read head 436 are input to the security information verification unit 447, verification is performed by comparing the information of both.
If the result of the collation is that they do not match, a message indicating that the user cannot leave is displayed on the display (not shown) of the apparatus, and the user (card exerciser) is refused to leave.
[0106]
The collation process can also be performed as follows.
The encryption registration information read by the magnetic read head 436 is input via the bus 448 to the decryption processing unit 446, where it is decrypted using the encryption key input from the image code / key conversion unit 444. . Note that the decryption process is the reverse of the encryption process described above with reference to an example, and therefore the description thereof is omitted here.
[0107]
The registration information decrypted by the decryption processing unit 446 is input to the security information collation unit 447 and collated with the registration information input from the registration information memory 442. If the result of the collation is that they do not match, a message indicating that the user cannot leave is displayed on the display (not shown) of the apparatus, and the user is rejected.
[0108]
Further, as a result of the collation by the security information collation unit 447, it is determined that the information encrypted by the encryption processing unit 445 and the encrypted registration information read by the magnetic read head 436 match, or the decryption processing unit Only when it is determined that the registration information decrypted in 446 matches the registration information from the registration information memory 442, the exit is permitted.
[0109]
In this example, two verification processes are performed in order to ensure higher security. However, unauthorized entry management (exit management) may be performed by only one process.
[0110]
In this way, the entrance side device records the security image and writes the encrypted registration information to the card for entry management, and the exit side device manages the unauthorized entry. A security management system for managing entry / exit to the section is realized.
[0111]
That is, using a recording medium having a variable portion and a storage portion capable of reversibly recording and erasing images, a security image is recorded in the variable portion according to a predetermined condition when entering a predetermined section. At the same time, the information obtained by encrypting the registration information using this security image as a key is stored in the storage unit, and when leaving the predetermined section, the security image of the variable part is read and the registration information is encrypted using the read image as a key. The encrypted information is compared with the encrypted information stored in the storage unit, or the encrypted information stored in the storage unit is decrypted using the read image as a key, and the decrypted information and By collating with the registration information, entry / exit into the predetermined section can be managed with high security.
[0112]
As described above, according to the above-described embodiment, the security image can be rewritten according to the conditions determined by the system side. Therefore, the security image cannot be specified from the third party side, and the security image, High confidentiality is obtained by decrypting the encrypted information using the key.
[0113]
Further, since the information obtained by combining the security image and the encrypted information using this as a key is used, forgery and alteration of the recording medium become difficult.
In addition, since no special light source or detection device is required, it is relatively inexpensive and can be easily realized with a simple configuration.
[0114]
Note that the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the scope of the present invention.
[0115]
【The invention's effect】
Less than Details As stated Book According to the invention, it is possible to realize a recording medium having both low cost and high security and an operation system using the recording medium. Entrance / exit management system and entrance / exit management method using this recording medium Can provide.
[Brief description of the drawings]
FIG. 1 is a cross-sectional view schematically showing a configuration of a card according to a first embodiment of the present invention.
FIG. 2 is a diagram similarly showing an example of a security image in the card.
FIG. 3 is also a view shown for explaining the characteristics of the material constituting the variable layer.
FIG. 4 is a configuration diagram schematically illustrating an apparatus for performing security management using the card.
FIG. 5 is a flowchart for explaining the flow of processing when an illegal card exercise is excluded in a predetermined section.
FIG. 6 is a cross-sectional view schematically showing another configuration example of the card according to the first embodiment.
FIG. 7 is a cross-sectional view showing a schematic configuration of a card according to a second embodiment.
FIG. 8 is a configuration diagram schematically illustrating an apparatus for performing security management using the card.
FIG. 9 is a block diagram showing a configuration of a part related to information encryption processing in the apparatus.
FIG. 10 is a flowchart for explaining the flow of processing related to card issuance by the apparatus.
FIG. 11 is a block diagram showing the configuration of parts related to encryption processing and verification processing in the security management system.
FIG. 12 is a flowchart for explaining the flow of processing in the security management system when managing entry / exit similarly.
FIG. 13 is a cross-sectional view schematically showing another configuration example of the card according to the second embodiment.
FIG. 14 is a cross-sectional view showing a schematic configuration of a card according to a third embodiment.
FIG. 15 is a configuration diagram schematically showing an apparatus for rewriting the security image of the card according to a predetermined condition.
FIG. 16 is a block diagram schematically showing the main configuration of the apparatus.
FIG. 17 is a cross-sectional view showing a schematic configuration of a card according to a fourth embodiment.
FIG. 18 is a configuration diagram schematically showing an apparatus for rewriting a card security image and rewriting information according to a predetermined condition.
FIG. 19 is a block diagram schematically showing the main configuration of the apparatus.
FIG. 20 is a configuration diagram schematically showing an apparatus used for exit management from the management section.
FIG. 21 is a block diagram schematically showing the main configuration of the apparatus.
[Explanation of symbols]
2, 3, 4 ... card (recording medium), 21, 31, 41 ... base material, 22 ... security image (first layer), 23, 34, 44 ... variable layer (second layer), 26, 42 ... magnetic recording layer (third layer), 201a, 201b ... thermal bar heating means (first means, Sixth means ), 204, 431... Security image reading means (second means) The fourth means ), 208, 409, magnetic recording means (third means), 210, 424, key generation unit, 211, 426, 445, encryption processing unit, 212, memory unit, 213, information collation / determination unit ( 5th means , 301, 401 ... thermal head thermal recording means, 305, 405 ... heating means, 311, 421, 441 ... CPU, 313, 423 ... security image generation unit, 425, 442 ... registration information memory, 435 ... magnetic reading means, 443: Image code conversion unit, 444: Image code / key conversion unit.

Claims (2)

A first layer forming a security image; a second layer capable of repeatedly performing the security image of the first layer in a mechanically readable / impossible state; and a storage unit for storing predetermined information Receiving a recording medium having a third layer;
First means for mechanically readable a security image of the first layer of the received recording medium;
A second means for reading said first layer security image made mechanically readable by said first means;
The security image read by the second means is converted into a code by the key generation unit, and information obtained by processing the registered information registered in advance based on the converted code is stored in the storage unit of the recording medium. Means of
An entrance-side device configured with
Security image of the first layer to be discharged from the entrance side of the apparatus to accept a recording medium which is mechanically readable state,
A fourth means for reading the received first layer security image of the recording medium;
The information obtained by processing the registered information using the security image read by the fourth means as a key is collated with the information stored in the storage unit of the recording medium, and the authenticity of the recording medium is determined. 5 means,
A sixth means for making the security image of the first layer of the recording medium unreadable mechanically after performing the authenticity determination of the recording medium by the fifth means;
A device on the exit side configured with
An entrance / exit management system characterized by comprising: A first layer forming a security image, a second layer capable of repeatedly performing the security image of the first layer in a mechanically readable / impossible state, and a storage unit for storing predetermined information Receiving a recording medium having a third layer;
  A first step of making the received security image of the first layer of the recording medium mechanically readable;
  A second step of reading the first layer security image made mechanically readable in the first step;
  The security image read in the second step is converted into a code by the key generation unit, and information obtained by processing the registered information registered in advance based on the converted code is stored in the storage unit of the recording medium. And the process of
  An admission-side process comprising:
  Accept the recording medium in which the security image of the first layer that has completed the entrance-side process is in a mechanically readable state;
  A fourth step of reading the accepted first layer security image of the recording medium;
  The information obtained by processing the registered information using the security image read in the fourth step as a key is collated with the information stored in the storage unit of the recording medium, and the authenticity of the recording medium is determined. 5 steps,
  A sixth step of making the security image of the first layer of the recording medium mechanically unreadable after performing the authenticity determination of the recording medium in the fifth step;
  An exit side process comprising:
  The entrance / exit management method characterized by comprising.

Images