KR20130086905A - Method and system of authentication and user registration with two rfid tags - Google Patents

Abstract

PURPOSE: A genuine product certification, a user registering method and a system are provided to provide the genuine product certification and the user registering service by attaching two RFID tags to the device and by recognizing from a communication terminal. CONSTITUTION: A system is comprised of a product in which RFID tags (111,112) are attached, a terminal (120) recognizing the tag, a management server (140), and a wire/wireless communication network (130) which enable the communication between the tags. The RFID tag includes the product information which can verify the genuine product, and membership card type smart card information. A service application is installed to a user terminal and the local area network is possible. A server includes a certification unit which checks the RFID tag, product basic information database, and user information database. [Reference numerals] (111) Electric wave identification tag-a; (112) Electric wave identification tag-b; (120) Terminal; (130) Wired and wireless communication network

Description

Method and system of authentication and user registration using two RFID tags {Method and system of authentication and user registration with two RFID tags}

The present invention relates to a method and system for authenticating and registering a user using two or more radio frequency identification (RFID) tags, and more particularly, a radio wave identification tag attached to an article and a radio wave identification tag for starting a registration service and a service for processing the same. The present invention relates to a method and system for providing a product activation and registration service using a system.

Radio identification technology consists of a system that processes information by identifying a thin flat tag attached to an object in a non-contact manner through radio signals, a reader that performs reading and decoding functions, and a radio wave identification tag with unique information, operation software, and a network. do.

On the other hand, radio frequency identification technology has been commercialized in various frequency bands from low frequency of 150KHz to 5GHz or more microwaves, and requires a different reader according to each use frequency, and thus has a poor versatility.

On the other hand, near field communication (NFC, ISO 18092) enables standardized bi-directional communication and radio wave identification tag reading in a wide range of terminals. In particular, it is highly versatile and open because it enables quick and easy reading of radio wave identification tags in a mobile environment. . Short-range wireless communication tags are used for information recording to store internet addresses or related data linked to information related to specific areas such as bus stops, art galleries, and museums.

On the other hand, the information recorded in the short-range wireless communication tag can be read by various terminals that are currently released, so that openness and versatility can be secured to provide a wide range of information retrieval services. In order to use in a field requiring prevention, improvement is required accordingly.

As a technique for preventing forgery and alteration, it is possible to use the encryption technology used in the IC card, but due to the increased cost for encryption and the non-contact method of operation of the tag, it analyzes the radio signal between the terminal and the tag to track a serious security vulnerability. Always exposed to threats that can be pulled out. This problem was especially highlighted in 2008 when the security vulnerability of NXP Semiconductor's MyFair Classic Smart Tag, which is widely used worldwide for transportation cards, pass cards and ID cards, was known.

Recently, anti-counterfeiting techniques have been attempted that exploit the natural frequencies of silicon photonic crystal resonators, eliminating costly and potentially vulnerable encryption techniques.

On the other hand, even though the technical improvement of the tag is being made, in order to provide a safer and improved information service, it is necessary to improve the method and system of the service as well as the technical development such as preventing forgery of the above-described tag itself.

The present invention aims to provide an activation and user registration service and related services using two radio wave identification tags, a communication terminal capable of recognizing them, and a server for providing a service.

In the product activation and user registration service, the present invention provides a radio frequency identification tag attached to an article and operating as a medium for starting the first service; A radio wave identification tag for starting a user registration service; A terminal capable of recognizing a radio wave identification tag and using a bidirectional communication service; It characterized in that it comprises a server providing a service.

The RFID tag attached to the article is most preferably capable of invoking an application required by the terminal in the process of recognizing the tag. However, currently available terminals can call an application call by the RFID tag to prevent malicious application call attempts. Blocking Therefore, the radio wave identification tag preferably records the Internet address of the service start position or information available by the service application executed in advance by the user in a method available at the terminal. In addition, it is preferable that each radio frequency identification tag includes information for identifying its uniqueness.

Preferably, the terminal can use near field communication (NFC), and the TCP / IP protocol can be used as a communication function. In addition, it is preferable that the terminal does not interfere with the use of the web application through HTTP, or that the service can be directly used by installing the application on the terminal.

The server preferably includes an authentication unit, an article basic information database, and a user information database. At this time, the information of the basic product information database is preferably recorded only by the manufacturer of the article or an authorized user. In addition, the basic information of the article preferably includes information for authenticating the uniqueness of the radio wave identification tag as information for authenticity. In addition, it is preferable that the authentication unit of the server can check whether the radio wave identification tag attached to the article and the radio wave identification tag for starting the user registration service form an exact pair.

In addition, the present invention in the product activation and product user registration service, the step of recognizing a radio wave identification tag attached to the article for the service start to the terminal; Calling a basic service from a server based on tag information recognized by the terminal; Recognizing the additional radio wave identification tag in the terminal to start the activation and registration service; Registering a user of the article through a registration service.

The present invention enables a consumer to activate and register a product by using a radio wave identification tag and an additional radio wave identification tag attached to an article. In this case, unlike the method of using only a single smart tag used in the existing validation service, according to the present invention, even if the tag is copied through a vulnerability in the security of the radio wave identification tag, the physical security can be maintained by the additional radio wave identification tag.

In addition, according to the present invention, activation and user registration are performed together, and finally, each user database and a basic product information database are linked. Therefore, when a counterfeit product having a plurality of copies of a radio frequency identification tag for one service is in circulation, one tag set may exhibit an abnormal user registration pattern, and thus may be used as a basis for estimating that a counterfeit product is in circulation.

1 is a configuration diagram of a service system.
2 is a flowchart illustrating an example of a service.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings.

Referring to Figure 1, the radio wave identification tag a (111) is attached to the article, it is preferably attached so that consumers can not remove without compromising the value of the article. The radio wave identification tag b 112 is a separate tag from the article, and the server 140 confirms that the radio wave identification tag a 111 and the radio wave identification tag b 112 are valid pairs that can legitimately use the service. It is desirable to be able.

In this case, the information for verifying the validity of the radio wave identification tag a 111 and the radio wave identification tag b 112 recorded in the server 140 is preferably recorded before the consumer receives the product. That is, the information demonstrating validity is preferably confirmed / recorded between the production process and the retail process of the product. In addition, the value for checking the validity of the radio wave identification tag a (111) and the radio wave identification tag b (112) is preferably composed of a random number difficult to back estimate. Therefore, each service use manufacturer may use various types of tags from the smart card of the membership card type to the disposable registration card with the radio wave identification tag b112.

The terminal 120 may use near field communication (NFC, ISO 18092), and preferably use the TCP / IP protocol as a communication function. In addition, it is preferable that the terminal does not interfere with the use of the web application through HTTP, or that the service can be directly used by installing the application on the terminal. In an exemplary embodiment of the present invention, the terminal 120 recognizes the radio wave identification tags a (111) and b (112) while the service application is running. However, a person having ordinary knowledge in the art may have a web browser. It will be appreciated that the technical spirit of the present invention can be implemented using a web application.

The server 140 preferably includes an authentication unit for confirming a radio wave identification tag, an article basic information database, and a user information database. At this time, the information of the basic product information database is preferably recorded only by the manufacturer of the article or a user who is authorized in advance. In addition, the basic information of the article preferably includes information for authenticating the uniqueness of the radio wave identification tag as information for authenticity. The user information database is a portion in which a consumer who purchases an article is recorded so that one user can own a plurality of articles. In addition, the authentication unit of the server is preferably able to determine whether the radio wave identification tag a (111) and radio wave identification tag b 112 is an exact pair.

Referring to Figure 2, the registration service of the present embodiment will start with the application execution step (S210) of the terminal 120, but if you have a general knowledge in the field using a radio identification tag a (111) Web browser It will be appreciated that the technical idea of the present invention can be implemented by implementing the present invention.

The tag a reading step S220 is executed by approaching a near field communication (NFC) antenna of the terminal 120 to a distance from which the radio wave identification tag a 111 can be read. The terminal 120 reads the unique value recorded in the radio wave identification tag a 111 in this step and transmits it to the server 140.

The tag a read confirmation step S230 is executed by transmitting the information of the tag a 111 to the server 140. The authentication unit of the server 140 receives the information of the radio wave identification tag a (111) and reads the information from the corresponding article basic information database to confirm the reading of the tag. At this time, it will be appreciated by those of ordinary skill in the art that it is possible to add cross-validation for tag a between tag a reading step S220 and tag a reading checking step S230.

The tag b reading step S240 is executed by bringing the radio wave identification tag b 112 closer to the near field communication (NFC) antenna of the terminal 120 after the tag a reading confirmation S230 is completed from the server 140.

Checking the pair of tag a / tag b (S250) is a radio wave identification tag a (111) from the authentication unit of the server 140 received the information of the radio wave identification tag b 112 obtained through the tag b reading step (S240) ) And the radio wave identification tag b 112 are a pair for performing a valid authentication and registration service recorded in the basic product information database.

In this case, it is preferable that the service is stopped when the pair of tags is incorrect, and it is necessary to reconsider the continuous service provision even when an abnormal access attempt for the service continues and an unrealistic usage pattern for the service is observed. For example, when multiple users register through a tag assigned to one item, a security vulnerability of the tag may be attacked to estimate a situation where the tag is copied. Therefore, the consumer may confirm that the article is genuine through the step (S250) of identifying the pair of tag a / tag b.

The user registration waiting step (S260) is a step of preparing an update of the user information database in the server 140 after the step (S250) of checking the pair of tag a / tag b is completed.

The registration information writing step (S270) is a step in which the consumer of the article registers as a user by inputting his information to the terminal. In this case, it is preferable to add an item that is being used to the previous information for the user who has previously used the service.

The user information data updating step S280 is a step of adding the user information transmitted from the terminal 120 to the server 140 to the user information database after completing the registration information writing step S270. At the end of the user information data update step (S280), basic activation and user registration services are completed.

The present invention provides physical security against copying of tags that can occur by processing both activation and registration of user information through the procedure described above. In addition, the present invention helps to keep track of the manufacturer's products by inducing the voluntary registration of the user, and can be used as an extension of the improved information service as well as providing improved after-sales service.

Although the present invention has been described above by means of a limited drawing, it is provided only to aid the overall understanding of the present invention, and the present invention is not limited to the above embodiments, and those skilled in the art will appreciate Modifications and variations are possible.

111 Radio wave identification tag a 112 Radio wave identification tag b
120 terminals
130 wired / wireless network
140 servers

Claims (4)

A radio frequency identification tag attached to the article and used to start the service; An additional RFID tag separate from the article for the start of the service; A terminal capable of recognizing a radio wave identification tag and using a communication via a TCP / IP protocol; An activation and user registration service system, characterized in that it comprises a server that can perform the function of checking and authentication of the tag. Recognizing a radio wave identification tag attached to the article as a terminal; Verifying and authenticating radio wave identification tag information recognized by the terminal in a server; Recognizing, by the terminal, an additional radio wave identification tag separated from the article to start activation and registration service; A method of activation and user registration service comprising the step of registering a user of an article through a registration service. 2. The activation and user registration service system according to claim 1, wherein information for verifying validity of two radio wave identification tags recorded in the server is recorded before the consumer receives the product. The system of claim 1, further comprising a separate radio wave identification tag, which is separated from the goods and used to authenticate the service in pairs with the radio wave identification tag attached to the goods. .

Images