JP2000285209A - Data discrimination device and data discrimination method using this device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a data discrimination device, which reduces the cost of a discrimination tag and enables a producer of the device to easily manage the discrimination tag, and a data discrimination method using this device. SOLUTION: This data discrimination device is provided with a discrimination tag 1, which is provided with an on-volatile memory 12 where a security data storage area 12a and a discrimination data storage area 12b where security data and discrimination data are written respectively are arranged, and a discrimination tag collation part which communicates the discrimination tag 1 without contacting and reads out security data to compare and collate is with its own data. A control part 31 which holds prescribed security data writes this security data in the initialized discrimination tag 1 and reads it.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data identification device in which an identification tag collating unit communicates with an identification tag in a non-contact manner and compares and collates security data of the identification tag, and a data identification method using the device. It is.

[0002]

2. Description of the Related Art Conventionally, as this kind of data identification device,
There is a configuration shown in FIG. In this device, a non-volatile memory is provided, and a security data storage area in which security data and identification data are written, respectively, and an identification tag A having an identification data storage area disposed therein, and communicates with the identification tag A in a non-contact manner. And an identification tag collating unit B for reading security data and comparing it with its own. Then, the identification tag collating unit B performs non-contact data communication with the identification tag A using electromagnetic waves.

More specifically, a so-called non-contact ID system includes an identification tag A having a nonvolatile memory for storing data therein, and a reader / writer unit having a function of writing / reading data to / from the identification tag A. , The identification tag A and the reader / writer communicate data with each other by electromagnetic induction. It is used for industrial purposes such as factory facilities, distribution management, and the like. In recent years, it has been used for building and building access control, security systems, cashless systems, and the like. When a non-contact ID system is used in a field requiring security, a system maker who designed and constructed the system, a management company of a building or the like, or a maintainer of a security system such as a management department of its own corporation. Perform registration, change, management, and the like of the data of the identification tag A.

Here, in a data identification device which is a contactless ID system used as a security system,
In particular, ensuring security is an important issue. When a manufacturer of an apparatus ships an identification tag A at a factory, predetermined security data assigned to a security system maintainer is transferred to a dedicated reader / writer (for data input). ) Is written and registered in the nonvolatile memory of the identification tag A.

That is, a security data storage area for storing security data is provided in the memory of the identification tag A, and only the dedicated reader / writer accesses the security data storage area to register, change, and refer to the security data, and operate the apparatus. The end user and maintainer to use cannot register, change, and reference. Then, security is allocated by storing and registering security data assigned to each maintainer by a device manufacturer in a security data storage area.

[0006]

In the above-described conventional data identification device, the manufacturer of the device can use a dedicated reader / writer to register security data in the memory of the identification tag A to ensure security.

However, when there are a plurality of identification tags A, predetermined security data must be registered in all of the identification tags A, which increases the cost of the identification tags A and increases the cost of the identification tags A on the manufacturer side of the apparatus. It was necessary to manage histories such as the name of the maintainer, the shipping quantity, the shipping date, and security data for each shipment.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and has as its object to reduce the cost of an identification tag and to enable a device manufacturer to easily manage the identification tag. An object of the present invention is to provide a data identification method using the device.

[0009]

According to a first aspect of the present invention, there is provided a data identification device comprising a nonvolatile memory, and a security data storage in which security data and identification data are respectively written. An identification tag provided with an area and an identification data storage area;
In a data identification device having an identification tag collating unit that reads security data by contacting the identification tag in a non-contact manner and reads and compares the security data with its own, a reader / writer unit provided separately includes a predetermined security data. The stored control unit writes and reads the security data to the initialized identification tag.

According to a second aspect of the present invention, in the data identification device according to the first aspect, a security data setting tag in which the predetermined security data is written is separately provided, and the reader / writer unit is provided separately from the security data setting tag. The security data is held by communicating with each other.

According to a third aspect of the present invention, in the data identification method using the data identification device according to the first or second aspect, the reader / writer unit provided separately is provided.
The control unit holding the predetermined security data writes the security data into the security data storage area provided in the nonvolatile memory of the initialized identification tag, and the identification tag collation unit communicates with the identification tag in a non-contact manner. The security data written is read and compared with its own, and when the security data matches, the identification data written in the identification data storage area of the identification tag is read.

According to a fourth aspect of the present invention, in the data identification device according to the first or second aspect, a security data attaching tag capable of writing desired security data using the reader / writer unit is provided separately. The identification tag collating unit communicates with the security data attaching tag to hold the desired security data.

According to a fifth aspect of the present invention, in the data identification device according to the fourth aspect, the identification tag collating unit has a security lock mode in which communication with the security data attaching tag is disabled. .

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A first embodiment of the present invention will be described below with reference to FIGS.

This data identification device includes an identification tag 1 on which security data and identification data such as a personal code for identifying an individual are written, for example, an identification tag collating unit 2 installed on a door of a building or a facility, And a reader / writer unit 3 which is used by a plurality of maintainers who manage and maintain the security system and which can rewrite and read security data and identification data to the identification tag 1. In addition, the identification tag 1 and the identification tag collation unit 2,
In addition, data communication between the identification tag 1 and the reader / writer unit 3 is performed in a non-contact manner using electromagnetic waves. In the configuration described above,
The reader / writer unit 3 is used for jigs such as reading / writing of security data and identification data, and the identification tag collating unit 2 is used for operations such as reading / collating / outputting security data and identification data.

Reference numeral 1 denotes an identification tag, which is formed in a substantially square shape in the form of a card, carried by an individual, and formed in a plurality.
The shape of the identification tag 1 is not limited to this, and may be a coin shape, a pendant shape, or the like depending on the application.

A tag control unit 11 in which each identification tag 1 controls the whole, for example, a memory 1 composed of a nonvolatile EEPROM
2. A modulation unit 13 that modulates data to convey the data to an electromagnetic wave, a demodulation unit 14 that demodulates received data, and converts a radio wave from an identification tag matching unit 2 described later into its own power supply to supply power to the whole. It is formed with a power supply unit 15 and transmits and receives data by electromagnetic waves.

As shown in FIG. 2, the nonvolatile memory 12 includes a security data storage area 12a, a system data storage area (not shown) for storing system data, and an identification data storage area 12b. It becomes. Then, predetermined security data assigned to each maintainer by the device manufacturer is written and stored in the security data storage area 12a, and identification data for identifying an individual is stored in the identification data storage area 12b. Written and stored.

The identification tag collating unit 2 is classified into a stand-alone type which is assumed to be used independently and a serial type which communicates with a host. In the stand-alone type, the data is collated with the identification tag 1, and if they match, a predetermined output is performed (read operation). In the case of the serial type, data is collated with the identification tag 1 and data is written to the identification tag 1 according to the collation result (read / write operation).

For example, as shown in FIG. 3, the identification tag collating unit 2 is composed of a microcomputer and controls the whole, and the collation transmitting / receiving unit 2 transmitting and receiving data.
When it is necessary to record data such as the entry / exit time, it is connected to an upper host such as a personal computer or an FA computer. Then, the collation control unit 21 holds its own predetermined security data, or the security data and the identification data, and
Then, the security data and the identification data of the identification tag 1 are read out and compared with each other, and if they match, a match signal is output to unlock the door, for example.

Reference numeral 3 denotes a reader / writer unit, and an identification tag collating unit 2
And a control unit 31 composed of a microcomputer for controlling the whole, and a transmission / reception unit 32 for transmitting and receiving data, and are connected to an upper host such as a personal computer or FA computer. At the same time that the control unit 31 writes the system program for controlling the entire system, predetermined security data different for each maintainer is written and held, and version control (for each type of security data) is performed for each security data. Management). Then, by communicating with the identification tag 1 and accessing the security data storage area 12a and the identification data storage area 12b of the identification tag 1, the security data is stored in the security data storage area 12a, and the identification data is stored in the identification data storage area 12b. At the same time, the security data and the identification data of the identification tag 1 are read. This will be described later in detail.

The operation of the reader / writer unit 3 (the method of writing security data to the identification tag 1) will be described. The reader / writer unit 3 communicates with the identification tag 1 when the identification tag 1 is initialized (for example, when all data is NU
At the time of the first access, the predetermined security data held in the control unit 31 is written and registered in the security data storage area 12a of the memory 12, and the identification data is written and registered in the identification data storage area 12b. That is, the identification data is transmitted from the maintenance person to the identification tag 1.
When the security tag is registered in the security data storage area 12 of the identification tag 1 automatically without being aware of the security data.
written in a.

Next, when communicating with the identification tag 1 and the security data is predetermined security data and coincides with its own, the communication with the identification tag 1 is continued and the identification data storage area 12b is accessed (read / written). Then, a series of operations such as registration, change, and reference of identification data, and a data writing operation such as LED control of the identification tag collating unit 2 and a memory address to be accessed are performed. On the other hand, if the security data is different from the predetermined security data and does not match its own, it is recognized as an identification tag 1 managed by another maintainer, and communication with the identification tag 1 is cut off to prevent access. Impossible, registration of identification data,
Do not execute a series of operations such as change and reference.

The operation (stand-alone type) of the identification tag 1 and the identification tag collating unit 2 will be described with reference to FIG.
As described above, the identification tag 1 has predetermined security data and identification data written in the nonvolatile memory 12 by the reader / writer unit 3. The identification tag matching unit 2
When the identification tag 1 is held over, the security data of the identification tag 1 is read, and when the security data is the predetermined security data and coincides with its own information held in the collation control unit 21, communication is continued. When the identification data is read and similarly matched with its own identification data, a coincidence signal is output and unlocked. On the other hand, when the security data is not the predetermined security data and does not match its own data held in the matching control unit 21, the communication is stopped and the subsequent operation is not performed.

In the data identification device of the first embodiment, as described above, the reader / writer unit 3 is provided separately, and the control unit 31 holding predetermined security data initializes the security data. Since the device manufacturer writes and reads the identification tag 1, the security data is written to the identification tag 1 by a device manufacturer using a special dedicated reader / writer at a factory. The security data is written into the identification tag 1 by using the reader / writer unit 3 so that the identification tag 1 to be shipped can be initialized as one type, thereby reducing the cost of the identification tag 1 and managing the maintenance person name and security data. Only the management of the identification tag 1 on the manufacturer side can be simplified. In addition, it is easy to limit the data that can be rewritten by the reader / writer unit 3 so that a part of the data can be rewritten only by a device manufacturer using a special dedicated reader / writer at a factory. This makes it possible to prevent data such as a shipping number, which is essential when a device manufacturer manages the identification tag 1, from being rewritten.

Further, in the data identification method using the data identification device of the first embodiment, as described above, the control unit of the reader / writer unit 3 which holds predetermined security data and is provided separately. 31 writes the security data in the security data storage area 12a of the initialized identification tag 1, and the identification tag collating unit 2 reads the security data written in contact with the identification tag 1 in a non-contact manner and reads the security data. Since comparison and collation are performed and the identification data of the identification tag 1 is read when they match, the cost of the identification tag 1 can be reduced by setting the identification tag 1 to be shipped as an initialized type, and the management is performed only by the maintainer name and the security data. As a result, the management of the identification tag 1 on the manufacturer side can be simplified.

In the first embodiment, the identification tag collating unit 2 reads the security data and the identification data of the identification tag 1 by communicating with the identification tag 1 in a non-contact manner. It may be possible to access the area 12b and write the identification data. (However, in this case, security data cannot be written by accessing the security data storage area 12a.) In this configuration, the identification tag collating unit 2 and the reader / writer unit 3 form the control unit 31. Only the difference in the software specifications of the microcomputer can be used to make the same external specifications.

In the first embodiment, the identification tag collating unit 2 is installed on a door of a building or facility, and the security data and the identification data of the identification tag 1 are compared with the identification tag collating unit 2.
The door is unlocked when each of them matches (stand-alone type), but the use is not limited. For example, the entry / exit and entry / exit times of a person carrying the identification tag 1 by opening / closing the door are determined by the host. It may be used as a device that is managed by communicating with a device (serial type).

In the first embodiment, when the reader / writer unit 3 registers the identification data in the identification tag 1, the security data is automatically written in the security data storage area 12a of the identification tag 1. Writing may be followed by identification data, without limitation.

A second embodiment of the present invention will be described below.
In the second embodiment, functions different from those in the first embodiment will be described, and members having substantially the same functions as those in the first embodiment will be denoted by the same reference numerals and description thereof will be omitted.

In the second embodiment, a security data setting tag (not shown) is provided separately, and predetermined security data is written in the security data storage area 12a of the security data setting tag by the device manufacturer. . Then, when the reader / writer unit 3 is held over the security data setting tag, the written predetermined security data is held and registered in the read control unit 31.

In the data identification device of the second embodiment, as described above, a security data setting tag in which predetermined security data is written is provided separately.
Since the reader / writer unit 3 communicates with the security data setting tag and holds the security data in the control unit 31, even if there are many maintainers, that is, many security data, one kind of control unit 31 (microcomputer) Accordingly, the cost of the reader / writer unit 3 can be reduced.

A third embodiment of the present invention will be described below.
In the third embodiment, functions different from those in the first and second embodiments will be described. Members having substantially the same functions as those in the first and second embodiments will be denoted by the same reference numerals and description thereof will be omitted. I do.

In the conventional identification tag collating unit B, a microcomputer in which security data is registered for each end user or each maintainer at the time of shipment is incorporated in the identification tag collating unit B, so that the security of the identification tag collating unit B is improved. To ensure that. However, in such an identification tag collating unit B, the name, the quantity of shipment, the date of shipment, the contents of security data, etc. of the last user or the maintainer must be managed or registered every time shipment is performed. A plurality of memories (not shown) had to be prepared according to the type of security data. Therefore, in the conventional identification tag collating unit B, there is a risk that the manufacturing cost is increased or the identification tag collating unit B in which desired security data is not set is mistakenly shipped.

Therefore, in the third embodiment, a security area is provided in the collation control section 21 of the identification tag collation section 2 and dedicated security data previously assigned to each end user or each maintainer is stored therein. To Then, a security data attaching tag 4 in which security data set for each end user or each maintainer is written.
Is supplied to each end user and each maintainer, and each end user and maintainer individually rewrites the security data in the memory of the identification tag collating unit 2 using this.

As shown in FIG. 5, the security data adding tag 4 has the same configuration as that of the identification tag 1, and is formed in a substantially square shape in a card shape. Note that the shape of the security data addition tag 4 is not limited to this, and may be a coin shape, a pendant shape, or the like depending on the application.

The security data provision tag 4 and the identification tag verification section 2 communicate security data in a non-contact manner, and each end user or each maintainer applies the security data provision tag 4 to the identification tag verification section 2. Security settings by holding it over. Further, the security data stored in the security data addition tag 4 can be rewritten by the reader / writer unit 3, and the security of the device can be operated by each end user or each maintainer at his / her own responsibility. It has become.

The security data stored in the security data addition tag 4 may be rewritten only by a dedicated reader / writer (not shown) owned by the manufacturer. As a result, security data is rewritten by the reader / writer unit 3 of the last user or maintainer, and security data of a completely different final user or maintainer is set in the identification tag 1 or the identification tag collation unit 2 of the user. The situation can be prevented.

A security setting method and an operation method in the identification tag matching section 2 according to the present embodiment will be described.

The security data assigned in advance to each final user and each maintainer is registered in the security data assignment tag 4 by the manufacturer of the apparatus, each final user, and each maintainer. Next, each end user or each maintainer holds the individually assigned security data attaching tag 4 over the identification tag collation unit 2 before the operation of the identification tag collation unit 2 starts. The data is registered / set in the memory of the identification tag matching unit 2.

The actual operation is performed using the identification tag collating unit 2 in which each end user or each maintainer registers the security data with the security data attaching tag 4 and the identification tag 1 corresponding thereto. That is, when operated by each end user or each maintainer, communication can be performed only between the identification tag 1 provided with specific security data and the corresponding identification tag collation unit 2, so that each end user or each security Security can be ensured for each user.

In the data identification device according to the second embodiment, the security setting for the identification tag collating unit 2 is individually performed by each end user or each maintainer. Of the identification tag collating unit 2 can be prevented from being shipped, and the burden on the manufacturer for setting security data and managing the set security data can be reduced. Costs can be reduced.

In the identification tag collating unit 2 having the above-described configuration, the security data can be easily changed. Therefore, if the security data is erroneously rewritten, the identification tag 1 can be changed. In such a case, communication becomes impossible, and operation may be supported. Therefore, the collation control unit 21 may perform a security lock that makes it impossible to rewrite the security data.

That is, in the state where the collation control unit 21 has shifted to the security lock mode, even if the security data attaching tag 4 is held over, data communication is not performed and security data is not rewritten. Has become. The transition to the security data lock mode may be performed by inputting a command from an upper-level host, or may be performed by holding a registration / deletion tag (not shown) over the identification tag matching unit 2. . When using the registration / deletion tag, once the registration / deletion tag is held over, the security mode is changed from the normal mode where security data can be rewritten to the security lock mode.
When the registration / deletion tag is held again, the mode shifts from the security lock mode to the normal mode.

In the above-described data identification device, since it is possible to easily switch between the security lock mode in which security data cannot be rewritten and the rewritable normal mode, each end user and each maintainer can be switched. It is possible to use the device in accordance with the operation mode of, and to prevent the security data of the identification tag collating unit 2 from being rewritten carelessly in the security lock mode.

[0046]

According to the data identification device of the present invention, the reader / writer unit is provided separately, and the control unit holding predetermined security data writes the security data into the initialized identification tag. Unlike the conventional method, in which the device manufacturer wrote the security data to the identification tag using a special dedicated reader / writer at the factory, instead of the manufacturer, the maintainer, not the manufacturer, uses the reader / writer to identify the security data using the identification tag. In addition, the identification tag to be shipped can be initialized as one type to reduce the cost of the identification tag, and the management of the identification tag at the manufacturer side is simplified by maintaining only the maintainer name and security data. Can be.

According to a second aspect of the present invention, in addition to the effect of the first aspect, a security data setting tag in which predetermined security data is written is separately provided, and the reader / writer unit has a security data setting tag. Since the security data is held in the control unit by communicating with the tag, even if there are many maintainers, that is, a lot of security data, one type of control unit can handle the cost and reduce the cost of the reader / writer unit. can do.

According to a third aspect of the present invention, there is provided a data identification method using the data identification apparatus according to the first or second aspect, wherein the reader is provided separately and holding predetermined security data. The control unit of the writer unit writes the security data in the security data storage area of the initialized identification tag, and the identification tag collation unit communicates with the identification tag in a non-contact manner to read the written security data and use it for its own. Since comparison and collation are performed and the identification data of the identification tag is read when they match, the cost of the identification tag can be reduced by setting the identification tag to be shipped as one of the initialized types, and the management is performed using only the maintainer name and security data as the manufacturer. The management of the identification tag on the side can be simplified.

According to a fourth aspect of the present invention, in addition to the effects of the first or second aspect, a security data addition tag capable of writing desired security data is separately provided to perform identification tag collation. Since the department communicates with the security data addition tag and holds the security data in the control section, each maintainer, that is, a large number of security data can be handled by one type of control section, and the cost of the identification tag verification section can be reduced. Can be achieved.

According to a fifth aspect of the present invention, in addition to the effect of the fourth aspect, in addition to the effect of the fourth aspect, the identification tag collating unit is provided with a security lock mode in which communication with the security data attaching tag is disabled. Therefore, it is possible to prevent inadvertent rewriting of the security data according to the operation mode of each maintainer.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a reader / writer unit and an identification tag according to a first embodiment of the present invention.

FIG. 2 is an address map of a memory of the identification tag according to the first embodiment;

FIG. 3 is a configuration diagram of an identification tag matching unit and an identification tag according to the first embodiment;

FIG. 4 is an external view showing a communication state of the identification tag collation unit and the identification tag according to the first embodiment.

FIG. 5 is a configuration diagram of an identification tag matching unit and a security data addition tag according to a third embodiment of the present invention.

FIG. 6 is an external view showing a communication state of an identification tag collating unit and an identification tag showing a conventional example.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Identification tag 12 Memory 12a Security data storage area 12b Identification data storage area 2 Identification tag collation part 3 Reader / writer part 31 Control part 4 Security data addition tag

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] December 16, 1999 (1999.12.
16)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] 0043

[Correction method] Change

[Correction contents]

In the identification tag collating unit 2 having the above-described configuration, the security data can be easily changed. Therefore, if the security data is erroneously rewritten, the identification tag 1 can be changed. in becomes impossible communication, there is a case in which lead to disabilities supported the operation. Therefore, the collation control unit 21 may perform a security lock that makes it impossible to rewrite the security data.

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Masato Namboku 1048 Kadoma, Kadoma, Osaka Pref. F-term in Matsushita Electric Works, Ltd.

Claims (5)

[Claims] 1. A non-volatile memory, wherein a security data storage area in which security data and identification data are written, respectively, and an identification tag provided with the identification data storage area, and communicate with the identification tag in a non-contact manner. A data identification device comprising: an identification tag collating unit that reads security data and compares it with its own; a reader / writer unit provided separately includes a control unit that holds the predetermined security data, A data identification device, which is formed to write and read the initialized identification tag. 2. A security data setting tag in which the predetermined security data is written is provided separately, and a reader / writer unit communicates with the security data setting tag to hold the security data. The data identification device according to claim 1, wherein 3. A data identification method using the data identification device according to claim 1, wherein the reader / writer unit provided separately includes a control unit holding predetermined security data, The data is written to the security data storage area provided in the nonvolatile memory of the initialized identification tag, and the identification tag collation unit communicates with the identification tag in a non-contact manner to read the written security data and read the data. A data identification method characterized by reading and comparing identification data written in an identification data storage area of an identification tag when the data is matched. 4. A security data adding tag which can write desired security data using the reader / writer section is provided separately, and an identification tag collating section communicates with the security data adding tag to exchange the desired security data. 3. The data identification device according to claim 1, wherein the data identification device is held. 5. The data identification device according to claim 4, wherein the identification tag collating unit is provided with a security lock mode in which communication with the security data attachment tag is disabled.