JP4680489B2 - Information record reading system - Google Patents

Description

  The present invention relates to a safety technology that associates an article with an RFID, prevents fraudulent acts such as counterfeiting or destruction of the article, and prevents loss or alteration of article information.

  IEEE micro, vol. 21, no6, pp. 43-49 2001 “An Ultra Small Individual Security Security Chip” describes technology related to μ-chips sold by Hitachi, Ltd. Mu Solutions Company. This chip uses an automatic identification technology using radio called RFID (radio frequency identification), and is composed only of a ROM that is a read-only recording unit and an antenna circuit for communication in order to achieve miniaturization. ing. An RFID system is constructed in which an ID in an RFID chip attached to an article is wirelessly read by an RFID reader and the ID is inquired of a database to obtain article information related to the article.

  FIG. 13 is a diagram showing an RFID system in the prior art. In the figure, a system reads a chip manufacturing unit 101 that manufactures a chip, an article manufacturing unit 102 that attaches a chip to an article, an information storage unit 103 that stores an ID and article information, and an ID attached to the article. It comprises a reading unit 104 that extracts article information from the storage unit 103.

  Specifically, the chip manufacturing unit 101 generates an ID by the ID generation unit 106, sets an ID in the recording unit of the RFID chip by the ID setting unit 110, and sends the RFID chip to the article manufacturing unit 102. In detail, the article manufacturing unit 102 attaches or embeds an RFID chip to an article, generates article information related to the article in the article information setting unit 114, and receives the ID received from the chip manufacturing unit 101 in the database registration unit 115; The article information is sent to the information storage unit 103 for registration.

The information storage unit 103 registers the ID and item information received from the item manufacturing unit 102 in the database 117 as an information list 116 and stores them.
Specifically, the reading unit 104 reads the ID set in the recording unit 108 of the RFID chip by the radio wave from the antenna circuit 109 of the RFID chip 107 of the article by the reading unit 119, and searches the article information for the ID. To the information storage unit 103.
Specifically, the information storage unit 103 takes out the article information corresponding to the ID received from the reading unit 104 from the information list 116 stored in the database 117 and sends it to the reading unit 104 as a search result.
The reading unit 104 receives article information from the information storage unit 103 by the database search unit 120. In this way, it is possible to obtain article information associated with the article.

In Patent Document 1, a configuration is known in which data is recorded on at least two IC chips, these ICs are connected to one antenna, and even if one of the ICs fails, the other data is backed up. It has been. However, in this case as well, there is no mention of data recording contents, and only a backup method for chip failure is described.
JP 2002-83277 A

Since the conventional RFID system is configured and operates as described above, the ID information of the RFID chip attached to the article can be easily read by the RFID reader of the reading unit, and the RFID information is based on the read ID. There is a problem that it is easy to duplicate a chip and attach it to another article. Furthermore, the ID with other information may be changed.
On the contrary, since there is one RFID chip attached to the article, there is a problem that the article information cannot be obtained due to the failure or the destruction or removal thereof.

Even if a plurality of RFID chips with the same ID are simply attached, it is effective for destruction or removal of the RFID chip, but it is ineffective for attaching and replacing the RFID chip copied to other articles.
Further, even if the ID is simply divided into a plurality of IDs, there is a problem that the original ID information cannot be obtained unless information is obtained from all the divided chips.

  The present invention has been made to solve the above-described problems, and prevents loss of ID information due to failure, destruction, or removal of an RFID chip attached to an article, impersonation of an article due to forgery of an RFID chip, or article information. It is an object of the present invention to make the replacement of the information difficult and improve the safety of the RFID information.

The distributed identification information recording apparatus according to the present invention is an identification information recording apparatus for generating an identification information chip by embedding identification information in a chip.
From the above identification information, even if some chips disappear, more than the number that can be restored by the remaining chips, a set of distributed information and verification information in a predetermined logic, each set of different distributed identification information, A secret information distribution unit to be generated, and an identification information setting unit that embeds the distribution identification information in a chip for each set.
Further, the distributed identification information storage chip according to the present invention is an identification information storage chip in which identification information is embedded by an identification information recording device.
Each chip stores predetermined identification information in a plurality of sets, and each chip embeds the distributed information and verification information generated by a predetermined logic as a set and embeds each chip in different sets of distributed identification information. Consists of multiple sets of chips in the recording unit.
Further, the distributed identification information reading device according to the present invention is an identification information reading device that reads identification information embedded in a chip.
The chip is a plurality of chips, a reading unit that reads the distributed identification information of the plurality of chips, and the plurality of read different shared information and verification information are extracted, and the plurality of extracted shared information and verification information are extracted. And a secret information restoring unit that generates original identification information based on the set of information.

As described above, since a plurality of secret sharing information obtained by only a part of chips is recorded and read on separate chips, there is an effect of preventing unauthorized duplication and unauthorized use.
In addition, even if some chips break down or are removed, the original identification information can be obtained safely based on the remaining distributed information.

Embodiment 1 FIG.
In this embodiment, the ID information is distributed to a plurality of secret information that can be restored from the remaining shared information even if some of them are lost, and the original ID information is obtained from the plurality of distributed ID information. A computerized information system will be described.
FIG. 1 is a diagram showing a configuration of an RFID counterfeit prevention system according to Embodiment 1 of the present invention.
In the figure, the system includes a chip manufacturing unit 1, an article manufacturing unit 2, an information storage unit 3, and an ID reading unit 4. The configuration of each part will be described in more detail.
The chip manufacturing unit 1 includes an ID generation unit 6 that generates ID5 of unique information, a secret information distribution unit 21 that distributes ID5 as secret information to the distributed ID 22, a recording unit 8 that records the distributed ID 22, and the recording unit. The distributed RFID chip 7 including the antenna circuit 9 that wirelessly transmits the eight distributed IDs 22 and the ID setting unit 10 that records the distributed ID 22 in the recording unit 8 of the distributed RFID chip 7 are provided.
The article manufacturing unit 2 receives from the chip manufacturing unit 1 an attachment unit 11 that attaches the distributed RFID chip 7 to the article 12, an article information setting unit 14 that sets article information 13 that is information such as attributes related to the article 12, and the like. A database registration unit 15 for registering the ID 5 and the article information 13 in the information storage unit 3.

The information storage unit 3 stores the ID 5 and the product information 13 received from the product manufacturing unit 2 as an information list 16, and returns a corresponding product information 13 of the information list 16 as a search result in response to a search request by the ID 5. It has.
The ID reading unit 4 wirelessly receives the distributed ID 22 of the recording unit 8 transmitted from the antenna circuit 9 of the distributed RFID chip 7 of the article 12 and the ID 5 from the distributed ID 22 received by the reading unit 19. A secret information restoring unit 23 to be restored, and a database searching unit 20 that sends a search request by ID5 to the information storage unit 3 and receives article information 13 as a search result from the information storage unit 3 are provided.

In the RFID system configured as described above, an operation until an ID corresponding to an article is added to the article 12 and the information is stored in a database for later verification will be described.
First, the chip manufacturing unit 1 generates ID 5 at the ID generation unit 6. Then, the secret information distribution unit 21 distributes the secret information with ID5 as the distribution ID22.

Here, the secret information distribution unit 21 executes internal processing of information distribution based on the detailed configuration of the secret information distribution unit of FIG. That is, first, the number to distribute the ID5 and secret information: n26 and the minimum number required to restore the secret information: K27 was obtained, and shared information: the B ₁ ~B _n 28, the random number a ₁ ~a _{(k-1 )} 30 and the prime number r29 are output.
The verification information generation unit 25 obtains ID5, random numbers a _{1 to} a _(k−1) 30 and a prime number r29, and outputs verification information V31. Then, the secret information sharing unit 21 outputs each of the shared information: B _{1 to} B _n 28 and the verification information V 31 as shared ID _{1 to} ID _n 22.

Here, the information distribution unit 24 executes processing according to the internal processing procedure shown in FIG.
First, processing is started in internal processing procedure 1.44 of the information distribution unit, ID: S5 is acquired as secret information in internal processing procedure 2.45, and secret is stored in internal processing procedure 3.46. The number of information to be distributed: n26 is obtained, and the minimum number necessary for restoration of secret information: k is obtained in internal processing procedure 4.47, and k-1 random numbers are obtained in internal processing procedure 5.48. a _{1 to} a _k-1 30 are generated, a prime number r29 is generated in Procedure 6.49, and the following equation (1) is set in Procedure 7.50.
f (x) = S + a ₁ · x + a ₂ · x ² +... + a _k−1 · x ^k−1 (mod r ) (1)
W _j = f (j) is calculated as j = 1,..., N in the procedure 8.51, and the shared information B _j = (j, w _j ) 28 is output in the procedure 9.52. In the procedure 10.53, the prime number r29 is output, in the procedure 11.54, the random numbers a _{1 to} a _k-1 30 are output, and in the procedure 12.55, the process ends.

Here, the verification information generation unit 25 executes processing according to the internal processing procedure shown in FIG.
Processing is started in the internal processing procedure 1.56 of the verification information generation unit, ID: S5 is acquired as confidential information in the internal processing procedure 2.57, and the secret is obtained in the internal processing procedure 3.58. The minimum number necessary for information restoration: k27 is acquired, the prime number r29 is acquired in Procedure 4.59, the random numbers a _{1 to} a _k-1 30 are acquired in Procedure 5.60, and Procedure 6 .61 generates a prime p33 that satisfies r | p−1, and in step 7.62 determines element g34 whose order in the multiplicative group Z ^* _p is r. (J) = g ^aj (mod p), and the value C is set as C ₀ = g ^s (mod p) and j = 1,..., K−1 in the internal processing procedure No. 9.64 of the verification information generation unit. , C _j = f (j) is calculated. Further, the verification information: V = (p, g, C ₀ , C ₁ ,..., C _k−1 ) 31 is output in the procedure 10.65, and the processing is terminated in the procedure 11.66.

  Next, the ID setting unit 10 records the distributed ID 22 in the recording unit 8 of the distributed RFID chip 7 and passes the information of ID 5 and the distributed RFID chip 7 to the article manufacturing unit 2.

The article manufacturing unit 2 attaches the distributed RFID chip 7 to the article 12 by the attachment unit 11, sets the article information 13 that is information such as attributes related to the article 12 by the article information setting unit 14, and stores the article information 13 as information. The data is registered in the storage unit 3 by the database registration unit 15. The database registration unit 15 also registers information of ID5.
The information storage unit 3 stores the received ID 5 and article information 13 in the database 17 as an information list 16.

Next, an operation for taking out and confirming information from a plurality of distributed RFID chips 7 attached to the article 12 corresponding to the article information will be described.
First, the ID reading unit 4 receives the distributed ID 22 in the recording unit 8 wirelessly transmitted from the antenna circuit 9 of the distributed RFID chip 7 of the article 12 by the reading unit 19 and secretly stores ID 5 from the received distributed ID 22. The information is restored by the information restoration unit 23.

Here, the secret information restoration unit 23 executes an internal procedure of information restoration based on the detailed configuration of the secret information restoration unit of FIG.
First, the distributed ID 22 is acquired and input to the distributed information verification unit 35. The shared information verifying unit 35 obtains m verified distributed ID _{1 to} ID _m 32 which are the minimum number necessary for restoring the secret information when the verification is successful: the number k27 or more to which the secret information is distributed: n26 or less. The information is input to the information restoration unit 36, and the information restoration unit 36 outputs ID5.

Here, the shared information verification unit 35 executes processing according to the internal processing procedure shown in FIG. That is, first, the processing is started in the internal processing procedure 1.67, the distributed ID 22 is acquired in the internal processing procedure 2.68, and the shared information B28 is verified from the distributed ID 22 in the procedure 3.69. Information: V31 is extracted, and information for verification: (p, g, C ₀ , C ₁ ,..., C _k-1 ) is extracted from V31 in Procedure 4.70, and distributed information in Procedure 5.71: (J, w _j ) is taken out from B _j 28 and g ^wj ≡C ₀ · C ₁ ^j · C ₂ ^j2 . . . ^-It is determined whether C _k-1 ^jk-1 (mod p) is satisfied. If it is satisfied, the verification is successful in the procedure 7.73, the distributed ID 22 is output in the procedure 9.75, and the processing is performed. finish. If not, the verification is failed in Procedure 8.74, and the process is terminated in Procedure 10.76.

Further, the information restoration unit 36 executes processing according to the internal processing procedure shown in FIG. That is, first, processing is started in the internal processing procedure 1.77 of the information restoration unit, m distributed IDs 22 are acquired in the internal processing procedure 2.78, and distributed in the internal processing procedure 3.79. The shared information: B28 and the verification information: V31 are extracted from the ID 22, and in procedure 4.80, it is determined whether there are k distributed IDs 22 with the same verification information: V31 among the m distributed IDs 22. . If it exists, the process is terminated with a legitimate distributed ID 22 in Procedure 5.81. If it does not exist, the process is terminated with an illegal distributed ID in Procedure 6.82. In addition, when the distribution is valid, k pieces of distribution IDs 22 are acquired in Procedure 7.83, and (j, w _j ) is extracted from the shared information: B _j 28 in Procedure 8.84. At 9.85, using Lagrange's interpolation polynomial, the following equation (2) is used to obtain equation (3).

In procedure 10.86, P (0) = f (0) = S is set in f (x) of internal processing procedure 7.63 of the verification information generation unit, and verification information is used in procedure 11.87. : (P, g, C ₀ , C ₁ ,..., C _k-1 ) is taken out from V31, and it is determined in step 12.88 whether C ₀ = g ^s ( mod p ) holds. If the determination is valid, ID: S5 as legitimate secret information is output in Procedure 13.89, ID: S5 is output as secret information in Procedure 15.91, and processing is performed in Procedure 16.92. Exit. If the procedure 88 does not hold, the procedure ends at step 14.90 with ID: S as illegal secret information.
In this way, the ID reading unit 4 transmits a search request with ID 5 to the information storage unit 3 through the database search unit 20.

In response to the search request with ID 5 from the reading unit, the information storage unit 3 searches the database 17 for the corresponding item information 13 in the information list 16 and returns the item information 13 to the ID reading unit 4 as a search result.
The ID reading unit 4 receives the article information 13 sent from the information storage unit 3 via the database search unit 20.

In addition, when information is exchanged among the chip manufacturing unit 1, the article manufacturing unit 2, the information storage unit 3, and the ID reading unit 4, it is protected by a secret communication technique as necessary.
In addition, in the field of information transmission, error correction technology is known, which adds redundant information to divided cells, so that even if some cells are lost or error during transmission, the remaining cells It is a technology to restore correct information from. However, with this method, there is anxiety in safety, and at least some information can be obtained from some cells. Furthermore, even if an error in the cell can be corrected, a false cell cannot be detected. On the other hand, in the division according to the present embodiment, some information cannot be restored only from some ID chips, and false ID chips can be eliminated, which is extremely safe.

As described above, ID5 can be restored from the distributed RFID chip 7 attached to the article 12, and the corresponding article information 13 can be obtained. In addition, since the ID is a plurality of distributed RFID chips, fraud due to duplication or attachment to another article becomes difficult. If IDs are distributed to n RFID chips, and k of them are collected, ID5 can be restored, so that information can be obtained safely even when some RFID chips fail, be destroyed, or removed.
The ID chip is not limited to RFID, and any ID chip may be used as long as the ID can be read by a corresponding reading unit.

Embodiment 2. FIG.
In the present embodiment, a configuration in which the information restoration unit is shared to reduce the system scale will be described.
FIG. 8 is a diagram illustrating a configuration of the RFID counterfeit prevention system according to the second embodiment.
In the figure, the difference from the configuration of FIG. 1 of the first embodiment is that the ID reading unit 4b is configured to read the distributed ID, and an independent information restoring unit 36b is provided.
The ID reading unit 4b receives the distributed ID 22 transmitted from the distributed RFID chip 7, the distributed ID transmitting unit 38 that transmits the received distributed ID 22 to the information restoring unit 36b, and the restored ID 5. An ID receiving unit 40, a search request based on ID5, and a database search unit 20 that receives article information 13 as a search result from the information storage unit 3.
In addition, the information restoration unit 36b includes a distributed ID receiving unit 39 that receives the distributed ID 22 from the ID reading unit 4b, a secret information restoring unit 23 that restores ID5 from the distributed ID 22 received by the distributed ID receiving unit 39, and a restored An ID transmission unit 41 that transmits ID5 to the ID reading unit 4b is provided.

  The operation of this RFID system is as follows. Since the operation until generating the distributed ID and storing it in the database is the same as that of the first embodiment, the description is omitted.

Read and restore operations will be described.
First, the ID reading unit 4b receives the distributed ID 22 in the recording unit 8 transmitted from the antenna circuit 9 of the RFID chip 7 of the article 12 by the reading unit 19, and this is received by the distributed ID transmitting unit 38 to the information restoring unit 36b. Send.

  The information restoring unit 36b that has received this by the distributed ID receiving unit 39 restores the secret information restoring unit 23 to obtain ID5. The procedure for restoring the secret information at this time is the same as the procedure shown in FIGS. 5 to 7 of the first embodiment.

  Next, the information restoration unit 36b transmits the restored ID5 to the ID reading unit 4b. Receiving this, the ID reading unit 4b transmits a search request to the information storage unit 3 using the received ID5. Subsequent operations are the same as those in the first embodiment.

  In this way, with the configuration in which the secret information restoration unit is an independent information restoration unit, a plurality of reading units share the information restoration unit, and the system scale can be reduced.

Several changes of this embodiment will be described.
FIG. 9 is a diagram illustrating a configuration of another RFID forgery prevention system according to the present embodiment.
In the figure, the difference from the configuration of FIG. 8 is that the database search unit 20 is moved to the information restoration unit 36c and the database search unit is removed from the ID reading unit 4c. Therefore, the ID reading unit 4 c includes the reading unit 19 that receives the distributed ID 22, the distributed ID transmitting unit 38, and the article information receiving unit 42.
The information restoration unit 36 c includes a distributed ID reception unit 39, a secret information restoration unit 23, a database search unit 20, and an article information transmission unit 43.

  The operation of the system having the configuration shown in FIG. 9 is the same as that shown in FIG.

  As described above, by arranging the database search unit in the information restoration unit, the restored ID does not leak out of the information restoration unit, which has an effect of preventing unauthorized acquisition of IDs in other parts.

FIG. 10 is a diagram illustrating a configuration of another RFID forgery prevention system according to the present embodiment.
In FIG. 9, the difference from the configuration of FIG. 9 is that an information restoration unit 37c provided independently in FIG. 9 is provided inside the information storage unit 3d.

Since the operation of this configuration is clear from the operation description already described, description thereof is omitted here.
According to this configuration, since the restored ID does not leak outside the information storage unit storing the ID, there is an effect of making it more difficult to obtain an unauthorized ID than when the information restoration unit is provided independently.

Embodiment 3 FIG.
A system that prevents duplication and unauthorized use in the present invention, is safe from damage to an ID chip, and further increases the confidentiality of information will be described.
The RFID counterfeit prevention system according to the present embodiment is almost the same as that shown in FIG. 1, but the chip manufacturing unit 1e and the ID reading unit 4e are configured as shown in FIG. That is, the chip manufacturing unit 1e includes the ID generation unit 6, the signature unit 95 that once generates the signature data 96 using the ID 5 and the signature key 93 of the chip manufacturing unit, and the signature data 96 and the ID 5 generated once. A signed ID 76 combined with the electronic certificate 94 of the chip manufacturing unit is also generated by the signature unit 95, and the secret information distribution unit 21 that distributes the secret information to the distributed ID 22 and the distributed ID 22 is distributed to the distributed RFID chip 7. An ID setting unit 10 for recording in the recording unit 8 is provided.

  As the ID reading unit 4e, the reading unit 19, the secret information restoring unit 23 that restores the signed ID 97 from the received distributed ID 22, the ID 5 and the signature data 96, and the electronic certificate 94 of the chip manufacturing unit are extracted from the signed ID 97. Using these, a signature verification unit 98 that outputs a signature verification result 99, and a database search unit 20 that sends a search request based on ID5 extracted from the signed ID 97 to the information storage unit 3 and receives article information 13 as a search result. And.

In the RFID system configured as described above, an operation of distributing secret information and recording it on an ID chip will be described.
First, the chip manufacturing unit 1e generates ID5 in the ID generation unit 6, and once generates signature data 96 as a digital signature in the signature unit 95 using the ID5 and the signature key 93 of the chip manufacturing unit, The ID5, the signature data 96, and the electronic certificate 94 of the chip manufacturing unit used for verifying the signature in the digital certification technique are combined as a signed ID97. Disperse information.

  The internal processing procedure performed by the secret information distribution unit 21 is the same as that of the first embodiment except that a signed ID is used instead of ID5 as data, and the following detailed description is omitted.

  The operation of the ID reading unit 4e is the same as that of the first embodiment until the secret information is restored. However, the restored information is a signed ID 97. That is, the information restoration unit 36 shown in FIG.

  Similarly, the shared information verification unit 35 executes processing according to the internal processing procedure of FIG. 6, and the information restoration unit 36 executes processing according to the internal processing procedure of FIG.

  Here, since ID 97 with signature is replaced with ID 5, as described above, ID 97 with signature is output from secret information restoring unit 23.

Next, the ID reading unit 4e extracts the ID5, the signature data 96, and the electronic certificate 94 of the chip manufacturing unit from the signed ID 97, and the signature verification unit 98 outputs the signature verification result 99 accordingly. In addition, the database search unit 20 sends a search request with ID 5 to the information storage unit 3.
Subsequent operations are the same as those in the first embodiment.

  As a digital certification technique, an existing RSA public key cryptosystem or elliptic cryptosystem can be used. In the above description, the configuration in which the chip manufacturing unit and the reading unit in the first embodiment are changed has been described. However, the configuration may be combined with the configuration of each system in the second embodiment. That is, each chip manufacturing unit and reading unit are changed.

As described above, in combination with the previous embodiments, in addition to the effects of each embodiment, the ID of the chip manufacturing department is given to the ID, and the signature of the restored ID is signed. By performing the verification, it is possible to prevent forgery of the ID.
In the above description, the signature data and the electronic signature document are combined as the signed ID. However, only signature data using only the signature key may be used. In that case, although the authenticity of the signature data is impaired, there is still a fraud prevention effect that increases the degree of prevention of forgery.

Embodiment 4 FIG.
Generation of an ID chip that makes duplication and unauthorized use even more difficult and a system for using the ID chip will be described.
FIG. 12 is a diagram showing a configuration of the distributed RFID chip 7f and a detailed configuration of the reading unit 19f of the ID reading unit 4f in the present embodiment. This configuration is combined with other elements in the first to third embodiments to constitute a system.
In the figure, the distributed RFID chip 7f includes a recording unit 8 that records the distributed ID 22, and a specific frequency antenna circuit 9f that wirelessly transmits the distributed ID 22 of the recording unit 8 using one frequency in a specific frequency band. The
Correspondingly, the reading unit 19f of the ID reading unit 4f includes a variable frequency antenna circuit 191 that receives the distributed ID 22 transmitted from the specific frequency antenna circuit 9f of the distributed RFID chip 7f, a random number generation unit 193, and the obtained random number. The frequency switching unit 192 changes the frequency of the variable frequency antenna circuit 191.

The operation of the RFID system configured as described above will be briefly described as follows.
Each distributed RFID chip 7f transmits the distributed ID 22 of the recording unit 8 by the specific frequency antenna circuit 9f by radio using one different frequency in a specific frequency band.
In response to this, the reading unit 19f selects one frequency in the specific frequency band based on the random number from the random number generation unit 193, changes the frequency of the variable frequency antenna circuit 191 by the frequency switching unit 192, and specifies the distributed RFID chip 7f. The distributed ID 22 transmitted from the frequency antenna circuit 9 f is received by the variable frequency antenna circuit 191. Therefore, it is not made clear in advance which frequency the RFID chip distributed ID corresponding to is received by the reading unit, and it is possible to prevent some RFID chips from being duplicated. Of course, it is not always necessary to assign different frequencies to all the chips, and the transmission time lag may be set to be different between a plurality of frequencies and chips to which the same frequency is assigned.

It is a figure which shows the structure of the RFID forgery prevention system in Embodiment 1 of this invention. 3 is a diagram illustrating a detailed configuration of a secret information distribution unit and a signal thereof in Embodiment 1. FIG. It is a flowchart which shows the internal process procedure which the information distribution part shown in FIG. 2 performs. It is a flowchart which shows the internal process procedure which the information production | generation part for verification shown in FIG. 2 performs. 3 is a diagram illustrating a detailed configuration of a secret information restoration unit and its signal in Embodiment 1. FIG. It is a flowchart which shows the internal process procedure which the shared information verification part shown in FIG. 5 performs. FIG. 6 is a flowchart showing an internal processing procedure performed by an information restoring unit shown in FIG. 5. It is a figure which shows the structure of the RFID forgery prevention system in Embodiment 2 of this invention. It is a figure which shows the structure of the other RFID forgery prevention system in Embodiment 2. FIG. It is a figure which shows the structure of the other RFID forgery prevention system in Embodiment 2. FIG. It is a figure which shows the structure of the RFID forgery prevention system in Embodiment 3 of this invention. It is a figure which shows the structure of the RFID forgery prevention system in Embodiment 4 of this invention. It is a figure which shows the structure of the conventional RFID system.

Explanation of symbols

1 chip manufacturing section, 2 article manufacturing section, 3 information storage section, 4, 4b, 4c, 4e, 4f ID reading section, 5 ID, 6 ID generation section, 7, 7f RFID chip, 8 recording section, 9 antenna circuit, 9f specific frequency antenna circuit, 10 ID setting section, 11 mounting section, 12 article, 13 article information, 14 article information setting section, 15 database registration section, 16 information list, 17 database, 18 RFID reader, 19, 19f reading section, 20 database search unit, 21 secret information distribution unit, 22 distribution ID, 23 secret information restoration unit, 24 information distribution unit, 25 verification information generation unit, 26 number of distribution of secret information: n, 27 Necessary for restoration of secret information minimum number such: k, 28 shared information: B ₁ ~B _n, 29 prime r, 30 random numbers _{a, a 1 ~a k-1} , 31 verification information V, 35 shared information verifying unit, 3 36b, 36c Information restoration unit, 38 Distributed ID transmission unit, 39 Distributed ID reception unit, 40 ID reception unit, 41 ID transmission unit, 42 Product information reception unit, 43 Product information transmission unit, 44 Internal processing procedure of information distribution unit 1. 45 Internal processing procedure of the information distribution unit , 46 Internal processing procedure of the information dispersal part 3 47 Internal processing procedure of information dispersal part 4 48 Internal processing procedure of information dispersal part 5 , 49 Internal processing procedure of the information distribution unit 6. , 50 Internal processing procedure of information dispersal part 7 , 51 Internal processing procedure of the information distribution unit 8 52. Internal processing procedure of information dispersal part 9 53. Internal processing procedure of information distribution unit 10 , 54 Internal processing procedure of the information distribution unit 11. 55. Internal processing procedure of information dispersal part 12 , 56 Internal processing procedure of the verification information generation unit 1. , 57 Internal processing procedure of the verification information generation unit 2. , 58 Internal processing procedure of the verification information generation unit 3. 59, internal processing procedure of the verification information generation unit 4 , 60 Internal processing procedure of the verification information generation part 5 61. Internal processing procedure of the verification information generation unit 6 62. Internal processing procedure of the verification information generating unit 7 63. Internal processing procedure of the verification information generating unit 8. 64. Internal processing procedure of the verification information generation unit 9 , 65 Internal processing procedure of the verification information generation unit 10. , 66 Internal processing procedure of the verification information generating part 11. 67 Internal processing procedure of shared information verification unit 1.68 Internal processing procedure of shared information verification unit 2. 69, internal processing procedure of the distributed information verification part 3 , 70 Internal processing procedure of the distributed information verification part 4 71 Internal processing procedure of the distributed information verification part 5 72 Internal processing procedure of the distributed information verification part 6 73. Internal processing procedure of the distributed information verification unit 7 74 Internal processing procedure of the distributed information verification part 8 , 75 Internal processing procedure of the distributed information verification part 9 , 76 Internal processing procedure of the distributed information verification unit 10. 77 Internal processing procedure of the information restoring unit 1 78 Internal processing procedure of the information restoring unit 2 79, internal processing procedure of the information restoration unit , 80 Internal processing procedure of the information restoration part 4 81. Internal processing procedure of information restoring unit 5 , 82 Internal processing procedure of the information restoring unit 6 83. Internal processing procedure of the information restoring unit 7 , 84 Internal processing procedure of the information restoring unit 8. , 85 Internal processing procedure of the information restoring unit 9. 86. Internal processing procedure of information restoring unit 10 87. Internal processing procedure of information restoring unit 11 88. Internal processing procedure of the information restoring unit 12 89, internal processing procedure of the information restoring unit 13 , 90 Internal processing procedure of the information restoring unit 14. 91. Internal processing procedure of information restoring unit 15. , 92 Internal processing procedure of information restoration unit 16.93 Signature key, 94 digital certificate, 95 signature unit, 96 signature data, 97 signed ID, 98 signature verification unit, 99 signature verification result, 191 variable frequency antenna circuit, 192 Frequency switching unit, 193 random number generation unit.

Claims (2)

The distributed number n (n is a natural number) when the secret information S is distributed to a plurality of shared information and the minimum number when the secret information S is restored based on a smaller number of distributed information than the distributed n pieces of distributed information An information recording / reading system in which the secret information S is distributed into n pieces of shared information based on k (k <n), and each piece of distributed information of the distributed n pieces of shared information is recorded in each chip of n chips. Because
k-1 random numbers a ₁ ~ A _(k-1) And the prime number r is generated, and the secret information S is a constant term. The (k−1) th order polynomial is f (x), and f (x) = S + a ₁ X + a ₂ ・ X ² + ... + a _k-1 ・ X ^k-1 (Mod r) (in the formula f (x), “a _k-1 ・ X ^k-1 (Mod r) "is" a _k-1 ・ X ^k-1 Is calculated by calculating f (j) with j = 1,..., N based on the formula _j And j (j = 1,..., N) and w _j N pieces of distributed information B having (j = 1,..., N) _j (J = 1,..., N) and the random number a ₁ ~ A _(k-1) And an information distribution unit that outputs the prime number r,
Random number a output from the information distribution unit ₁ ~ A _(k-1) And a prime number r are generated, and a prime number p that is divisible by the inputted prime number r and p of the p-1 is a prime number is generated, and a multiplicative group Z ^* _p An element g whose order at the prime number r is defined as C ₀ = G ^s (Mod p) and j = 1,..., K−1 and C _j = C based on the formula f (j) ₀ And C _j (J = 1,..., K−1) is calculated, and the prime number p and the element g are calculated. ₀ And calculated C _j Verification information V having (j = 1,..., K−1) and the n pieces of distributed information B _j A verification information generating unit that outputs verification information V for verifying whether (j = 1,..., N) is valid shared information;
J and w output by the information dispersal unit _j N pieces of distributed information B having (j = 1,..., N) _j Each shared information (j = 1,..., N), the prime number p, the element g, and C output from the verification information generation unit. ₀ And C _j Distributed IDs that are n distributed identifiers (distributed IDs) having verification information V having (j = 1,..., K−1). _j A secret information distribution unit for generating (j = 1,..., N);
An information setting unit for individually recording n distributed IDs generated by the secret information distributing unit on n chips;
An information recording / reading system comprising: An information accumulating unit for storing article information corresponding to an article to which n chips, each of which is distributed with n distributed IDs by the information setting unit, and the secret information S are stored in a database as an information list;
A reading unit that receives n distributed IDs from n chips attached to the article;
For each of the n distributed IDs received by the reading unit, whether the shared information held by the shared ID is valid shared information based on the shared information held by the shared ID and the verification information V The shared information verification unit that outputs the shared ID when the shared information is verified to be valid shared information;
When the number of distributed IDs output by the shared information verification unit is k or more, k distributed IDs are acquired from the k or more distributed IDs, and each distributed ID of the acquired k distributed IDs is acquired. The secret information P (0) is calculated based on the shared information held by the ID, and the prime number p, the element g, and the secret information P (0) of the verification information V included in any of the k distributed IDs. Based on and g ^{P (0)} The remainder is calculated from the equation (mod p), and the calculated remainder and the verification information V have C ₀ And the secret information restoration unit that outputs the secret information P (0) as the secret information S.
With
The information storage unit searches the secret information S output by the secret information restoration unit from the information list stored in the database, and acquires and outputs the article information corresponding to the searched secret information S.
The information recording / reading system according to claim 1.

Images