JP2004030681A - Management method and system for id - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a device in which article management using ID is efficiently and high-reliably performed by managing issue and distribution of the ID equipped with an alteration detecting code. <P>SOLUTION: An electronic circuit chip with the ID equipped with the alteration detecting code stored in a reloadable invisible area is used as an ID tag. Information on an ID order receiving terminal and a terminal for an ID production plant is centralized in an ID management terminal and simultaneously managed. The information is inquired to the ID management terminal so as not to store high-secrecy information in an ID utilizing terminal. Otherwise, a means for requesting required processing of the information to the ID management terminal is constructed. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a technology for managing an ID, and particularly to a technology for managing issuance and distribution of an ID having a falsification detection code.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, various IDs such as JAN codes have been assigned to articles and used for managing the articles. By managing information related to an article in association with an ID (article identifier) assigned to the article, the article can be managed individually.
[0003]
For example, in a convenience store, a product manufacturer, name and price are managed in association with a JAN code printed on the packaging of the product, and information on the product can be obtained by reading the barcode and inputting the JAN code. The system which can refer to is used.
[0004]
In addition, in order to guarantee that the value is correct, an ID is provided with an error detection code. By verifying the error detection code of the read ID by a predetermined calculation procedure, it can be determined whether the reading has been performed normally. Further, an error detection code calculated using a key value has a function of detecting falsification of an ID by a person who does not know the key. Hereinafter, an error detection code calculated using a key is referred to as a tampering detection code.
[0005]
When high security is required for the ID, an ID provided with a tampering detection code is used. For example, there is a case in which an individual with an ID such as an identification card is associated with a person to individually manage the person, or a case in which an ID is assigned to a security such as a stock certificate or a gift certificate and managed. is there.
[0006]
[Problems to be solved by the invention]
The conventional ID management method has the following problems.
[0007]
That is, when the JAN code is used as an article ID as in the example of the convenience store, the IDs are assigned to the types of the articles by limiting the number of digits of the ID. It cannot be managed. In addition, there are IDs in which the number of digits is increased from the JAN code so that individual management can be performed, but there are some articles that cannot be applied due to space limitations when displayed in a barcode.
[0008]
Also, the JAN code has only an error detection code, and does not have a tampering detection code using a key. For this reason, the ID may be forged. When a falsification detection code is used for an ID to prevent forgery, it is necessary to use a different key for each ID for security. Therefore, when handling various types of IDs as in the example of the convenience store, keys for verifying the tampering detection codes of all the IDs to be handled must be prepared in advance.
[0009]
In addition, when an individual manages an article using an ID provided with a tampering detection code, a method of obtaining a sticker or tape to which the ID is assigned and pasting it on an arbitrary article may be considered. It is also difficult to manage a code verification key, which is difficult.
[0010]
When high security is required for IDs, it is necessary to manage issuance so that IDs do not overlap, or to manage the number of identical IDs. For this purpose, it is necessary to manage printing of IDs on articles and stickers, and writing in a memory used for an electronic tag.
[0011]
In addition, credit card IDs are one of those that manages issuance with high security so that IDs do not overlap. However, IDs, such as credit card IDs, given to services and those who receive the services have no substance as goods and are merely information, and may be copied illegally after issuance. There is.
[0012]
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a falsification detection code, manage the issuance and distribution of IDs that can be individually assigned to articles, and efficiently manage articles using IDs. An object of the present invention is to provide a mechanism that can be performed well and with high reliability.
[0013]
[Means for Solving the Problems]
In order to achieve the above object, according to the present invention, different IDs can be individually assigned to articles of the same type, and an extended article identifier (hereinafter referred to as an extended ID) provided with attribute information and a tampering detection code. ). The attribute information is information for classifying IDs, and is information indicating a field of use of the ID, the name of a company that has requested issuance, and the like. Then, the falsification detection code included in the ID is generated using a different key for each attribute information.
[0014]
Further, in the present invention, an ID management terminal for managing issuance and distribution of IDs is provided, and connected to an ID using terminal for using IDs via a network. The ID management terminal stores the issued ID, the attribute information of the ID, the falsification detection code, and the key for verifying the falsification detection code in association with each other. Then, when a verification request for the falsification detection code 102 including the ID, the attribute information of the ID, and the falsification detection code is sent from the ID use terminal, the ID management terminal associates the stored ID with the ID stored therein. Verification is performed using the tampering detection code, and the result is returned to the terminal. Hereinafter, the verification request indicates a verification request of the tampering detection code 102. When a verification key request including ID attribute information is sent from the ID-using terminal, a verification key associated with the ID attribute information is returned to the terminal. The ID use terminal performs a function of reading the ID, a function of managing the read ID and information of the article to which the ID is assigned in association with each other, and performs the processing when the information of the article indicates the processing. Has a function.
[0015]
In the present invention, an ID order receiving terminal and an ID tag manufacturing factory terminal are provided and connected to the ID management terminal via a network. The ID order receiving terminal stores the date and number of the ID issuance request, the number, a key for generating a falsification detection code, and the like, and generates the falsification detection code using the generation key. The ID, the attribute information of the ID, and the tampering detection code are combined into one. The ID tag is transmitted to the ID management terminal using the encrypted communication, and after confirming from the information managed by the ID management center that the ID has not been duplicated with the issued ID, the ID tag is similarly manufactured using the encrypted communication. Send to factory terminal. Here, a plurality of identical IDs may be issued by including in the attribute information that the ID indicates the same information as the barcode.
[0016]
On the other hand, the terminal for the ID tag manufacturing factory prints the ID, the attribute information of the ID, and the falsification detection code on the ID tag to the manufacturing section that manufactures the ID tag such as the barcode label or the electronic tag, or It is instructed to be stored in the ID tag. Further, it instructs the inspection unit of the ID tag to inspect whether the information is correctly stored in the completed ID tag. Then, the information of the manufactured ID tag and the inspection result are transmitted to the ID management terminal using encrypted communication.
[0017]
According to the present invention, IDs can be issued without duplication, and individual management of articles can be performed. Also, a plurality of identical IDs can be issued, and the IDs can be used in existing barcode systems.
[0018]
Further, according to the present invention, even if the user of the ID does not hold the verification key or the device, the information read from the ID tag through the network from the ID using terminal to the ID management terminal (for example, ID and By transmitting a verification request using ID attribute information and a falsification detection code), a verification result can be obtained.
[0019]
According to the present invention, even if the ID user does not hold the verification key, the ID user transmits the verification key request including the ID attribute information from the ID use terminal to the ID management terminal via the network. Thus, a key for verification can be obtained, and the tampering detection code can be verified.
[0020]
Further, according to the present invention, highly confidential information such as a key for generating and verifying a tampering detection code and information of an ID issuing requester can be secretly managed.
[0021]
In the present invention, a case where an electronic circuit chip is used as an ID tag is considered. In order to manufacture electronic circuit chips, sufficient equipment is required. And, as the electronic circuit chip is made smaller and thinner, the number of persons who can manufacture the electronic circuit chip is limited. Therefore, the possibility that an unauthorized third party manufactures a duplicate of the ID tag is reduced. If the ID is stored in the non-rewritable area of the electronic circuit chip, an unauthorized third party cannot modify the ID. Therefore, according to the present invention, the ID management terminal can manage the number of ID tags circulating in the market.
[0022]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an ID management system to which an embodiment of the present invention is applied will be described.
[0023]
First, an ID and an ID tag used in the ID management system according to the present embodiment will be described.
[0024]
FIG. 1 is a diagram illustrating an example of an ID used in the ID management system according to the present embodiment.
[0025]
As shown in FIG. 1A, an ID 100 used in the present embodiment is collectively used as an extended ID 200 with ID attribute information 101 and a falsification detection code 102. The attribute information 101 is information for classifying the ID 100, and is information indicating the field of use of the ID 100, the name of the company that requested the issuance, and the like. The falsification detection code 102 is generated by performing a predetermined calculation on the ID 100 and the attribute information 101 using a different key for each attribute information 101. For the calculation for generating the tampering detection code 102, a combination of a public key encryption, a common key encryption, a hash generation function, and the like may be used.
[0026]
FIG. 1B shows a case where class information 103 is attached to the three elements shown in FIG. The class information is information indicating a separation position of the ID 100 and the attribute information 101, that is, information indicating the number of digits of each. As shown in FIGS. 1C, 1D, and 1E, when the class information 103 is used, the number of digits and the number of the ID 100 and the attribute information 101 are the same even though the extended ID 200 and the tampering detection code 102 have the same number of digits. Can be constructed in various ways. For this reason, the combination of the number of digits of the ID 100 and the attribute information 101 and the optimal combination of the number of the attribute information 101 can be used according to the application without changing the mechanism used for the transfer of the extension ID 200 and the generation and verification of the falsification detection code 102. .
[0027]
FIG. 1F shows a case where the three elements shown in FIG. 1A are accompanied by version information 104. The version information is information indicating the version of the extension ID 200. From the version information 104, the number of digits of the extended ID 200, the number of digits of the falsification detection code 102, the calculation method, and the like can be known.
[0028]
FIG. 1G shows a case where the extension ID 200 is encrypted. It is composed of an encryption code 105 indicating that the data has been encrypted, and information 106 obtained by encrypting the three elements shown in FIG. If the extended ID 200 is encrypted and used, a person who does not know the decryption key cannot determine the components of the extended ID 200, so that unauthorized decryption can be prevented.
[0029]
The extension ID 200 is not limited to the above, and any two of the addition of the class information 103, the addition of the version information 104, and the encryption, or a combination of all two may be used.
[0030]
FIG. 2 is a diagram illustrating an example of an ID tag used in the ID management system according to the present embodiment.
[0031]
FIG. 2A shows a state in which a plurality of electronic circuit chips 301 are mounted on a tape-shaped ID tag 300. By cutting the tape at an appropriate position, a tape piece on which an arbitrary number of electronic circuit chips are mounted can be obtained.
[0032]
The ID tag 300 is a tape-shaped one on which the electronic circuit chip 301 is mounted, but may be a sheet-shaped one or the electronic circuit chip 301 itself. Further, a label on which an ID is printed may be used.
[0033]
The electronic circuit chip 301 is, for example, a small electronic circuit chip having a size of about 0.3 mm square, which can be manufactured only by a semiconductor manufacturer having sufficient facilities, and has a thin, substantially rectangular parallelepiped shape. Further, as shown in FIG. 2B, an electronic circuit 303 functioning as a memory and a reading circuit thereof, a capacitor 304, and an antenna 305 are formed on a silicon chip 302. The memory includes a non-rewritable memory portion. An extension ID 200 is stored in a non-rewritable memory portion.
[0034]
It should be noted that the extension ID 200 is stored in the non-rewritable memory portion of the electronic circuit 303 before the manufacturer of the electronic circuit chip 301 ships the chip 301 to the manufacturer of the ID tag 300. To The non-rewritable memory portion of the electronic circuit 303 is not limited to a non-rewritable memory such as a ROM, but also includes a rewritable memory such as an EEPROM in which a portion in which the extended ID 200 is written is set to be non-rewritable. Shall be included.
[0035]
The electronic circuit 303, the capacitor 304, and the antenna 305 form a circuit as shown in FIG. This circuit induces a current in the antenna 305 by a radio wave given from the outside, and accumulates electric charge in the capacitor 304. Then, information stored in the electronic circuit 303 is transmitted from the antenna 305 using radio waves by using power obtained from the electric charge accumulated in the capacitor 304. That is, by applying a radio wave to the electronic circuit chip 301, the extended ID 200 stored in the electronic circuit 303 of the electronic circuit chip 301 can be read from the outside in a non-contact manner.
[0036]
Next, a configuration of an ID management system that manages the extended ID 200 using the above-described ID tag 300 will be described.
[0037]
FIG. 3 is a schematic diagram of an ID management system to which the present embodiment is applied.
[0038]
As shown in the figure, the ID management system according to the present embodiment is configured by connecting an ID order receiving terminal 3, an ID tag manufacturing factory terminal 4, and an ID management terminal 5 to a network 1 such as a dedicated network or the Internet. You. Although one terminal 3 and 4 are shown in the example shown in FIG. 3, a plurality of terminals may be provided. Further, the customer terminal 8 is connected to the ID order receiving terminal 3 via a network 7 such as a dedicated network or the Internet. The ID management terminal 5 is connected to the ID use terminal 6 via a network 2 such as a dedicated network or the Internet. Network 1, network 2, and network 7 may be the same network.
[0039]
The customer terminal 8 is a terminal to which the customer inputs order information necessary for ordering the ID tag 300, and transmits the order information to the ID order receiving terminal 3.
[0040]
The ID order receiving terminal 3 is a terminal for receiving an order for issuance of the extended ID 200, and generates an extended ID 200 including an ID 100, attribute information 101, a falsification detection code 102, and the like from order information sent from the customer terminal 8, It is transmitted to the terminal 4 for the ID tag manufacturing factory.
[0041]
The ID tag manufacturing factory terminal 4 is a terminal for managing the manufacture of the ID tag 300, and sends the manufacturing status of the ID tag 300 with the extended ID 200 sent from the ID order receiving terminal 3 to the ID management terminal 5. Send.
[0042]
The ID management terminal 5 manages information sent from the ID order receiving terminal 3 and the terminal 4 for the ID tag manufacturing factory, and responds to a request sent from the ID use terminal 6.
[0043]
The ID use terminal 6 is a terminal for reading the extension ID 200 from the ID tag 300 and using information managed in association with the extension ID 200, and transmits a request to the ID management terminal 5 as necessary. .
[0044]
Note that the ID management terminal 5 may have the function of the ID order receiving terminal 3 so that the ID order receiving terminal 3 may be omitted. The ID management terminal 5 may have the function as the terminal 4 for the ID tag manufacturing factory, so that the terminal 4 for the ID tag manufacturing factory may be omitted. In addition, the ID management terminal 5 may be provided with a function as the ID use terminal 6, so that the ID use terminal 6 may be omitted. Alternatively, the customer terminal 8 may be omitted by providing the ID order receiving terminal 3 with a function as the customer terminal 8.
[0045]
Note that a plurality of customer terminals 8 and ID use terminals 6 may be provided.
[0046]
In addition, between the customer terminal 8 and the ID ordering terminal 3, between the ID ordering terminal 3 and the terminal 4 for the ID tag manufacturing factory, between the ID ordering terminal 3 and the ID management terminal 5, and between the ID ordering terminal 3 and the terminal 4 for the ID tag manufacturing factory. It is desirable to use encryption for communication between the terminal and the ID management terminal 5 and between the ID management terminal 5 and the ID use terminal 6. However, if communication can be performed between the two terminals, different methods are used. There may be. Instead of performing encrypted communication, communication may be performed after authentication is performed in advance.
[0047]
Next, each device constituting the ID management system will be described.
[0048]
FIG. 16 is a schematic diagram illustrating a functional configuration of the customer terminal 8.
[0049]
As illustrated, the customer terminal 8 includes an input / output unit 81 and a communication unit 82.
[0050]
The input / output unit 81 receives order information necessary for ordering the ID tag 300. The ordering information includes information necessary for generating and managing the extended ID 200, such as an ID 100 to be stored in the ID tag 300, a key for decrypting the encrypted extended ID 200, orderer information, order date and time, a delivery deadline, and a delivery method. Information required for ordering the ID tag 300, such as designation.
[0051]
It also outputs the order information received from the ID order terminal 3. The order information includes the order information, the extended ID 200 stored in the ID tag 300, a key used by the ID order receiving terminal 3 to generate a falsification detection code, a key used to verify the key, and an automatically generated cipher. It indicates information necessary for managing the extended ID 200, such as a key for decryption and decryption, and information necessary for delivery of the ID tag 300, such as order date and time, delivery date, delivery method, and the like.
[0052]
The communication unit 82 encrypts the order information request including the order information received from the input / output unit 81 for communication, and transmits it to the ID order receiving terminal 3 via the network 7. Further, it receives the encrypted order information from the ID order receiving terminal 3 and decrypts it. For encryption for communication, common key encryption, public key encryption, or a combination of common key encryption and public key encryption is used.
[0053]
FIG. 4 is a schematic diagram illustrating a functional configuration of the ID order receiving terminal 3.
[0054]
As illustrated, the ID order receiving terminal 3 includes an input / output unit 31, an extended ID generation unit 32, a falsification detection code generation unit 33, and a communication unit 34.
[0055]
The communication unit 34 decrypts the cipher text received from the customer terminal 8 via the network 7 and obtains an order information request including order information. The encryption method used is the same as that used in the communication unit 82 of the customer terminal 8.
[0056]
The input / output unit 31 outputs error information and the like. It is also used when order information is not accepted from the customer terminal 8 via the network 7 but is directly accepted.
[0057]
The extended ID generation unit 32 generates ID attribute information 101 from the order information received from the communication unit 34. Further, the ID 100, the attribute information 101, and the key for generating the tampering detection code are passed to the tampering detection code generation unit 33, and the generated tampering detection code 102 and the verification key are received. If the ordering information does not include a key for generating a tampering detection code, a random number is generated and the generated value is used as a key for generating a tampering detection code. Further, an extended ID 200 is generated from the ID 100, the attribute information 101, and the tampering detection code 102. The attribute information 101 may be the class information 103 or the version information 104. If the ordering information does not include the encryption key of the extended ID 200, a random number is generated, and the generated value is used as the encryption key. Further, it has a function of encrypting the extension ID 200, generating the encryption code 105, and generating a key for decryption. An extension ID, a generated key, and the like are added to the order information, and the order information is obtained.
[0058]
The falsification detection code generation unit 33 generates a falsification detection code 102 and a verification key from the ID 100, the attribute information 101, and the falsification detection code generation key received from the extended ID generation unit 32. Pass to.
[0059]
The communication unit 34 encrypts the ID duplication confirmation request including the order information received from the customer terminal 8 via the network 7 for communication, and transmits the ID duplication confirmation request to the ID management terminal 5 via the network 1. Note that the extension ID 200 received from the input / output unit 31 may be transmitted instead of the order information. After receiving a notification from the ID management terminal 5 that there is no overlap with the issued ID, the order ID registration request including the order information received from the input / output unit 31 is encrypted for communication, and the ID is registered via the network 1. It is transmitted to the management terminal 5. Note that when permitting ID duplication, transmission of the ID duplication confirmation request may be omitted.
[0060]
The ID tag manufacturing request including the order information received from the input / output unit 31 is encrypted for communication and transmitted to the ID tag manufacturing factory terminal 4 via the network 1. For encryption for communication, common key encryption, public key encryption, or a combination of common key encryption and public key encryption is used. Further, the order information received from the input / output unit 31 is encrypted for communication and transmitted to the customer terminal 8 via the network 7. The encryption method used is the same as that used in the communication unit 82 of the customer terminal 8.
[0061]
FIG. 5 is a schematic diagram showing a functional configuration of the ID tag manufacturing factory 46.
[0062]
As illustrated, the ID tag manufacturing factory 46 includes an ID tag manufacturing factory terminal 4, a manufacturing unit 42, an inspection unit 43, and a delivery unit 45. In addition, the terminal 4 for an ID tag manufacturing factory has a communication unit 41 and a control unit 44.
[0063]
The communication unit 41 decrypts the cipher text received from the ID order receiving terminal 3 via the network 1 and obtains an ID tag manufacturing request including the order information. The encryption method used is the same as that used by the communication unit 34 of the ID order receiving terminal 3.
[0064]
The control unit 44 receives the order information obtained by the communication unit 41, and instructs the manufacturing unit 42 to manufacture the ID tag 300 storing the extended ID 200 included in the order information according to the order information. Further, the extended ID 200 is sent to the inspection unit 43, and the inspection unit 43 is instructed to inspect whether the function of the completed ID tag 300 is normal. When the inspection result is bad, the extended ID 200 is passed to the manufacturing unit 42, and the ID tag 300 is manufactured again. The extension ID 200 having a bad inspection result may be passed to the communication unit 41 as a missing number ID. The extension ID 200 given to the ID tag 300 whose inspection result is normal is passed to the communication unit 41 as a manufactured ID.
[0065]
The communication unit 41 creates a missing ID registration request including the missing ID and a manufactured ID registration request including the manufactured ID, encrypts the request for communication, and transmits the encrypted ID to the ID management terminal 5 via the network 1. For encryption for communication, common key encryption, public key encryption, or a combination of common key encryption and public key encryption is used.
[0066]
The manufacturing unit 42 manufactures the ID tag 300 storing the extended ID 200 received from the control unit 44. Then, the manufactured ID tag 300 is transferred to the inspection unit 43.
[0067]
The inspection unit 43 inspects the ID tag 300 received from the manufacturing unit 42, and confirms that the extended ID 200 received from the control unit 44 is correctly stored. Then, the inspection result is sent to the control unit 44.
[0068]
The delivery unit 45 receives the ID tag 300 whose inspection result is passed by the inspection unit 43. Then, in accordance with the delivery method included in the order information, delivery and delivery to the customer are performed and delivered.
[0069]
FIG. 6 is a schematic diagram illustrating a functional configuration of the ID management terminal 5.
[0070]
As illustrated, the ID management terminal 5 includes a communication unit 51, an ID-related information management unit 52, and an ID-related information management database 53.
[0071]
The communication unit 51 decrypts the cipher text received from the ID order receiving terminal 3 via the network 1 and obtains an ID duplication confirmation request including the order information or an order ID registration request including the order information. The encryption method used is the same as that used by the communication unit 34 of the ID order receiving terminal 3. Also, the encrypted text received from the terminal 4 for the ID tag manufacturing factory via the network 1 is decrypted to obtain a missing ID registration request including the missing ID and a manufactured ID registration request including the manufactured ID. The encryption method used is the same as that used in the communication unit 41 of the terminal 4 for the ID tag manufacturing factory. Further, the cipher text received from the ID using terminal 6 via the network 2 is decrypted to obtain a verification request including the extended ID 200, a verification key request including the attribute information 101, or a decryption key request. . The encryption method used is the same as that used in the communication unit 61 of the ID use terminal 6.
[0072]
When the request received from the communication unit 51 is an ID duplication confirmation request, the ID-related information management unit 52 checks the extension ID 200 included in the received order information and the extension ID 200 stored in the ID-related information management database 53. Is used to confirm whether the ID is the same as the issued ID. Then, the result of the confirmation is encrypted by the communication unit 51 and transmitted to the ID order receiving terminal 3 via the network 1. If the request received from the communication unit 51 is an order ID registration request, the received order information is stored in the ID-related information management database 53. When the request received from the communication unit 51 is a missing number ID registration request, the missing number ID received together is stored in the ID related information management database 53. If the request received from the communication unit 51 is a manufactured ID registration request, the received manufactured ID is stored in the ID-related information management database 53. When the request received from the communication unit 51 is a verification request, the extension ID 200 received together with the extension ID 200 stored in the ID-related information management database 53 is compared to perform verification. Then, the verification result is encrypted by the communication unit 51 and transmitted to the ID use terminal 6 via the network 2. If the request received from the communication unit 51 is a verification key request, a verification key for the falsification detection code 102 stored in the ID-related information management database 53 is extracted from the attribute information 101 received together with the request. The data is encrypted by the communication unit 51 and transmitted to the ID use terminal 6 via the network 2. When the request received from the communication unit 51 is a decryption key request, the decryption key is extracted from the ID related information management database 53, encrypted by the communication unit 51, and transmitted to the ID use terminal via the network 2. Send to 6. For encryption for communication, common key encryption, public key encryption, or a combination of common key encryption and public key encryption is used. If the request received from the communication unit 51 is a revocation ID registration request, the revocation ID 200 received together is stored in the ID-related information management database 53.
[0073]
The ID-related information management database 53 stores management information related to the ID tag 300. FIG. 17 is a diagram for explaining management information related to the ID tag 300 stored in the ID-related information management database 53. As shown in the figure, the management information related to the ID tag 300 includes order information 530 sent from the ID order receiving terminal 3, an ID issue status 538 such as issued / delivered, missing, treated, inactive, and the like, Remarks 539, which are other management information.
[0074]
Here, the order information 530 includes the order information 531 received at the customer terminal 8 and the extended ID 200 generated from the order information 531 at the ID order terminal 3. Here, the order information 531 is associated with the customer information 532, the number 533 of IDs ordered by the customer, issuing conditions 534 such as missing numbers or duplication, the designated delivery date 535 of the ID 300, and the ID attribute information 101. Key 536 for verification of the falsification detection code 102, a key 537 for decryption when the extended ID 200 is encrypted and attached to the ID tag 300, and an ID 100 requested by the customer to be issued. Be composed.
[0075]
FIG. 7 is a schematic diagram illustrating a functional configuration of the ID use terminal 6. As illustrated, the ID using terminal 6 includes an ID reading unit 61, an input / output unit 62, a control unit 63, a database 64, and a communication unit 65.
[0076]
The ID reading unit 61 reads the extended ID 200 given to the ID tag 300. For example, when the extension ID is stored in the memory of the electronic circuit chip 301, the electronic circuit chip 301 transmits an electric wave to drive the electronic circuit chip 301 attached to the ID tag 300. Then, data transmitted from the electronic circuit chip 301 is read. If the received data has the encryption code 105, the received data is decrypted to obtain the extension ID 200. The key used for decryption may be stored in the database 64 in advance, or may be obtained from the ID management terminal 5 by transmitting a decryption key request to the ID management terminal 5 through the communication unit 65. Alternatively, a verification request including the read extended ID 200 may be transmitted to the ID management terminal 5 through the communication unit 65, and the verification result may be obtained from the ID management terminal 5.
[0077]
The input / output unit 62 inputs information to be newly registered or information to be updated into the database 64 and displays the read information. It also accepts instructions such as ID reading, database reading / writing, communication, etc., and outputs the result.
[0078]
The control unit 63 controls the ID reading unit 61, the input / output unit 62, the database 64, and the communication unit 65. Further, the falsification detection code 102 of the read extended ID 200 is verified. The verification key may be stored in the database 64, or a verification key request including the attribute information 101 may be transmitted to the ID management terminal 5 and obtained from the ID management terminal 5. The verification of the tampering detection code 102 may be performed by transmitting a verification request including the extended ID 200 to the ID management terminal 5 and obtaining the verification result from the ID management terminal 5. If the verification of the tampering detection code 102 is successful, the information stored in association with the tampering detection code 102 is extracted from the database 64 and output by the input / output unit 62. If the extracted information indicates a process, the process is performed. The processing includes, for example, payment processing, transfer to another terminal, and inquiry about the URL indicated by the information. If the reading of the ID has failed, the ID reading unit 61 is caused to perform the reading operation again, or the ID is set as a revocation ID, an electronic signature is added, and a revocation ID registration request is sent to the communication unit 65 by the ID management terminal 5. To be sent.
[0079]
The database 64 stores the extension ID 200 and information on articles managed in association with the ID tag 300 to which the extension ID 200 is assigned. Also, the attribute information 101 of the ID and the key for verifying the corresponding tampering detection code 102 are stored in association with each other. Also, a key for decrypting the encrypted extended ID 200 assigned to the ID tag 300 is stored.
[0080]
The communication unit 65 creates a decryption key request, a verification key request including the attribute information 101, a verification request including the extended ID 200, and a revocation ID registration request including the revocation ID, and encrypts the request for communication. , To the ID management terminal 5 via the network 2. For encryption for communication, common key encryption, public key encryption, or a combination of common key encryption and public key encryption is used.
[0081]
Note that the ID reading unit 61 and the input / output unit 62 may use terminals other than the ID using terminal 6 and may be connected to the ID using terminal 6 via a network. Further, there may be a plurality of ID reading units 61 and a plurality of input / outputs 62, respectively.
[0082]
As shown in FIG. 8, the customer terminal 8, the ID order receiving terminal 3, the ID tag manufacturing factory terminal 4, and the ID management terminal 5 include a CPU 71, a memory 72, and an external storage device 73 such as a hard disk device. A storage medium reading device 75 that reads data from a storage medium 74 such as an FD, a CD-ROM, and a DVD-ROM; an input device 76 such as a keyboard and a mouse; an output device 77 such as a monitor; It can be constructed on a computer having a general configuration including a communication device 78 for performing communication with the other devices, and an interface 79 for transmitting and receiving data between these devices.
[0083]
The input / output unit 31, the extended ID generation unit 32, the falsification detection code generation unit 33, the communication unit 34, the communication unit 51 of the ID management terminal 5, the ID related information management unit 52, and the ID related information management database of the ID order receiving terminal 3 described above. 53 is realized as a process embodied on an electronic computer by the CPU 71 executing a program loaded on the memory 72. In the case of the ID management terminal 5, the memory 72 and the external storage device 73 are used as the ID related information management database 53.
[0084]
The program for implementing the ID order receiving terminal 3 on the computer by being executed by the CPU 71 is stored in the external storage device 73 in advance, loaded on the memory 72 as necessary, and Be executed. Alternatively, the program is loaded onto the memory 72 from the storage medium 74 via the storage medium reading device 75 and executed by the CPU 71. Alternatively, after being once installed in the external storage device 73 from the storage medium 74 via the storage medium reading device 75, it is loaded from the external storage device 73 onto the memory 72 as needed, and executed by the CPU 71. Furthermore, once downloaded to the external storage device 73 from another computer via the transmission medium on the network and the communication device 78, and then loaded onto the memory 72, or directly loaded onto the memory 72 from the network, It is executed by the CPU 71.
[0085]
The ID use terminal 6 can be constructed on a system having an ID calculator 710 such as an electronic computer shown in FIG. 8 and an electronic circuit chip reader, a barcode reader, an OCR, and an electronic scanner. it can. The ID reading unit 61, the input / output unit 62, the control unit 63, the database 64, and the communication unit 65 of the ID use terminal 6 are embodied on the system by the CPU 71 executing the program loaded on the memory 72. Is realized as a process. In this case, the memory 72 and the external storage device 73 are used as the database 64. The program for embodying the terminal 4 for an ID tag manufacturing factory on the system by being executed by the CPU 71 is stored in the external storage device 73 in advance, and is loaded on the memory 72 as necessary. It is executed by the CPU 71. Alternatively, the program is loaded onto the memory 72 from the storage medium 74 via the storage medium reading device 75 and executed by the CPU 71. Alternatively, after being once installed in the external storage device 73 from the storage medium 74 via the storage medium reading device 75, it is loaded from the external storage device 73 onto the memory 72 as needed, and executed by the CPU 71. Furthermore, once downloaded to the external storage device 73 from another computer via the transmission medium on the network and the communication device 78, and then loaded onto the memory 72, or directly loaded onto the memory 72 from the network, It is executed by the CPU 71.
[0086]
Next, the operation of the ID management system will be described.
[0087]
First, the operation of the customer terminal 8 will be described.
[0088]
FIG. 18 is a flowchart for explaining an outline of the operation of the customer terminal 8.
[0089]
First, the input / output unit 81 accepts the order information of the ID tag 300 (Step 1801 (S1801; hereinafter the same)).
[0090]
Next, the communication unit 82 creates an order information request including the order information received in S1801, encrypts the request for communication, and transmits it to the ID order terminal 3 via the network 7 (S1802). Then, the process waits until receiving the order information from the ID order receiving terminal 3 (S1803). If received (Yes in S1803), the communication unit 82 decrypts the received ciphertext, and the input / output unit 81 outputs the order information obtained by the communication unit 82 (S1804).
[0091]
Next, the operation of the ID order receiving terminal 3 will be described.
[0092]
FIG. 9 is a flowchart for explaining an outline of the operation of the ID order receiving terminal 3.
[0093]
First, the communication unit 41 waits until receiving an order information request including order information from the customer terminal 8 via the network 7 (S1316). If received (Yes in S1316), the communication unit 41 decrypts the received cipher text and obtains order information (S1301).
[0094]
Next, the communication unit 34 creates an ID duplication confirmation request including the order information received in S1301, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 1 (S1302). Then, it waits until a processing result for the ID duplication confirmation request is received from the ID management terminal 5 (S1303).
[0095]
Next, when the ID indicated by the order information and the ID registered in the ID management terminal 5 overlap (Yes in S1304), the input / output unit 31 outputs an error (S1305). If there is no overlap (No in S1304), the extended ID generation unit 32 generates ID attribute information 101, class information 103, and version information 104 from the order information (S1306). If the ordering information does not include either the key for generating the tampering detection code 102 or the key for encrypting the extended ID 200 (No in S1307), the extended ID generation unit 32 generates a random number. (S1308).
[0096]
Next, the falsification detection code generation unit 33 uses the key for generating the falsification detection code 102 included in the ordering information, the ID 100, and the attribute information 101, the class information 103, or the version information 104 generated in S1306. The falsification detection code 102 and a verification key are generated (S1309). If the ordering information does not include the key for generating the falsification detection code 102, the random number value obtained in S1308 is used as the key for generating the falsification detection code 102.
[0097]
Next, the extended ID generation unit 32 uses the ID 100 included in the order information, the attribute information 101, the class information 103 or the version information 104 generated in S1306, and the falsification detection code 102 generated in S1309. An extension ID 200 is generated (S1310). If the extension ID 200 needs to be encrypted (Yes in S1311), the extension ID generation unit 32 performs encryption using the encryption key included in the order information (S1312), and generates the encryption code 105. Is attached (S1313). If the ordering information does not include the encryption key, the random number value obtained in S1308 is used as the encryption key.
[0098]
Next, the communication unit 34 includes the order information accepted in S1301, the extended ID 200 created in S1310 or the encrypted extended ID 200 created in S1313, and the key obtained from the random number generated in S1308. Order information is generated (S1317).
[0099]
Next, the communication unit 34 creates an order ID registration request including the order information generated in S1317, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 1 (S1314). In addition, the communication unit 34 creates an ID tag manufacturing request including the order information generated in S1317, encrypts the request for communication, and transmits it to the terminal 4 for the ID tag manufacturing factory via the network 1 (S1315). In addition, the communication unit 34 encrypts the order information generated in S1317 for communication and transmits the encrypted order information to the customer terminal 8 via the network 7 (S1318).
[0100]
Note that the order of S1314, S1315, and S1318 may be reversed.
[0101]
Note that the processing of S1306 to S1310 may be performed immediately after S1301. In this case, the ID duplication confirmation request created in S1302 includes the extended ID 200 generated in S1310.
[0102]
Next, the operation of the terminal 4 for an ID tag manufacturing factory will be described.
[0103]
FIG. 10 is a flowchart for explaining the operation of the terminal 4 for the ID tag manufacturing factory.
[0104]
First, the communication unit 41 waits until an ID tag manufacturing request is received from the ID order receiving terminal 3 via the network 1 (S1401). If received (Yes in S1401), the communication unit 41 decrypts the received ciphertext and obtains order information (S1402).
[0105]
Next, the control unit 44 instructs the manufacturing unit 42 to manufacture the ID tag 300 storing the extended ID 200 included in the order information obtained in S1402, and the manufacturing unit 42 deletes the ID tag 300 according to the order information. It is manufactured (S1403).
[0106]
Next, the control unit 44 instructs the inspection unit 43 to inspect whether the function of the ID tag 300 manufactured in S1403 is normal, and the inspection unit 43 transmits the ID tag 300 received from the manufacturing unit 42. Inspection is performed to confirm that the extension ID 200 received from the control unit 44 is correctly stored. (S1404).
[0107]
If the inspection result received from the inspection unit 43 is normal (Yes in S1405), the control unit 44 sets the extended ID 200 assigned to the ID tag 300 as a manufactured ID (S1406). The communication unit 41 creates a manufactured ID registration request including the manufactured ID obtained in S1406, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 1 (S1407).
[0108]
Next, the delivery unit 45 receives the ID tag 300 whose inspection result is passed by the inspection unit 43, and sends and delivers the ID tag 300 to the customer according to the delivery method included in the order information (S1411). .
[0109]
On the other hand, if the inspection result received from the inspection unit 43 is abnormal (No in S1405), the control unit 44 sets the extended ID 200 assigned to the ID tag 300 as the missing ID (S1408). If the ID tag 300 having an abnormal inspection result needs to be remanufactured (Yes in S1409), the control unit 44 causes the manufacturing unit 42 to remanufacture the ID tag 300, and assigns the missing ID obtained in S1408. (S1403). On the other hand, if remanufacturing is not required (No in S1409), the communication unit 41 creates a missing ID registration request including the missing ID, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 1 ( S1410).
[0110]
Next, the operation of the ID management terminal 5 will be described.
[0111]
FIG. 11 is a flowchart for explaining the operation of the ID management terminal 5.
[0112]
First, the communication unit 51 waits until receiving a request via the network 1 from the ID order receiving terminal 3 or the terminal 4 for the ID tag manufacturing factory, or a request via the network 2 from the ID using terminal 6 (S1501). ). If received (Yes in S1501), the communication unit 51 decrypts the received ciphertext and obtains a request including various information described below (S1502).
[0113]
Next, the ID-related information management unit 52 analyzes the request content obtained in S1502.
[0114]
If the acquired request content is an ID duplication confirmation request from the ID order receiving terminal 3, the ID related information management unit 52 acquires the order information included in the ID duplication confirmation request (S1511). Next, using the extension ID 200 included in the order information acquired in S1511, and the extension ID 200 stored in the ID-related information management database 53, it is confirmed whether or not the ID is duplicated (S1512). Even if the same extended ID 200 is stored in the ID-related information management database 53, if the extended ID 200 is treated as invalid, it is assumed that there is no duplication. Then, the result of the confirmation is encrypted by the communication unit 51 and transmitted to the ID order receiving terminal 3 via the network 1 (S1513).
[0115]
If the obtained request content is an order ID registration request from the ID order terminal 3, the ID-related information management unit 52 obtains order information included in the order ID registration request (S1521). Next, the order information obtained in S1521 is stored in the ID-related information management database 53 (S1522).
[0116]
If the obtained request content is a manufactured ID registration request from the terminal 4 for the ID tag manufacturing factory, the ID-related information management unit 52 obtains the manufactured ID included in the manufactured ID registration request (S1531). ). Next, the manufactured ID obtained in S1531 is stored in the ID-related information management database 53 (S1532).
[0117]
If the acquired request content is a missing number ID registration request from the ID tag manufacturing plant terminal 4, the ID related information management unit 52 acquires the missing number ID included in the missing number ID registration request (S1541). Next, the missing number ID obtained in S1541 is stored in the ID related information management database 53 (S1542).
[0118]
If the obtained request content is a verification request from the ID use terminal 6, the ID-related information management unit 52 obtains the extension ID 200 included in the verification request (S1551). Next, the extension ID 200 obtained in S1551 is compared with the extension ID 200 stored in the ID-related information management database 53 to verify whether the falsification detection code 102 is valid (S1552). . Then, the result of the verification is encrypted by the communication unit 51 and transmitted to the ID use terminal 6 via the network 2 (S1553).
[0119]
If the obtained request content is a verification key request from the ID using terminal 6, the ID related information management unit 52 obtains the attribute information 101 included in the verification key request of the falsification detection code 102 (S1561). ). Next, a key for verifying the falsification detection code 102 stored in the ID-related information management database 53 in association with the attribute information 101 obtained in S1561 is extracted (S1562). Then, the key for verification of the tampering detection code 102 extracted in S1562 is encrypted by the communication unit 51 and transmitted to the ID use terminal 6 via the network 2 (S1563).
[0120]
If the obtained request content is a decryption key request from the ID use terminal 6, the ID-related information management unit 52 performs the decryption of the encrypted extended ID 200 stored in the ID-related information management database 53. Is extracted (S1571). Next, the key for decrypting the encrypted extended ID 200 extracted in S1571 is encrypted by the communication unit 51 and transmitted to the ID use terminal 6 via the network 2 (S1572).
[0121]
If the obtained request content is a revocation ID registration request from the ID use terminal 6, the ID-related information management unit 52 obtains a revocation ID and an electronic signature included in the revocation ID registration request (S1581). Next, it is confirmed by the electronic signature obtained in S1581 that the request is a valid revocation ID registration request, and the revocation ID obtained in S1581 is stored in the ID-related information management database 53 (S1582).
[0122]
Next, the operation of the ID use terminal 6 will be described.
[0123]
FIG. 12 is a flowchart for explaining the outline of the operation of the ID use terminal 6.
[0124]
First, the input / output unit 62 accepts an instruction input (S1601).
[0125]
Next, the control unit 63 analyzes the instruction accepted in S1601 (S1602).
[0126]
If the instruction accepted in S1601 is an instruction to read information, an instruction to update information, or an instruction to newly register information, the reading unit 61, the control unit 63, the database 64, and the communication unit 65 perform an ID reading procedure (S1603). ). Details of S1603 will be described with reference to FIGS.
[0127]
If the instruction accepted in S1601 is a revocation registration instruction, the control unit 63, the database 64, and the communication unit 65 perform a revocation procedure for revoking the extended ID 200 assigned to the ID tag 300 to be read (S1604). Perform Details of step S1604 will be described with reference to FIG.
[0128]
If the instruction accepted in S1601 is an information reading instruction, after S1603, the control unit 63 extracts from the database 64 the information stored in association with the extension ID 200 obtained in S1603 (S1605). Then, a process corresponding to the information is performed, such as outputting the information extracted in S1605 by the input / output unit 62, performing a payment process in accordance with the instruction of the information, performing a transfer process to a terminal indicated by the information (S1606).
[0129]
If the instruction accepted in S1601 is an information update instruction including update information, after S1603, the control unit 63 acquires the update information (S1607). Then, the information stored in the database 64 in association with the extension ID 200 obtained in S1603 is updated with the update information obtained in S1607 (S1608).
[0130]
When the instruction accepted in S1601 is a new information registration instruction including correspondence information, after S1603, the control unit 63 acquires the correspondence information (S1609). Then, the correspondence information obtained in S1609 and the extension ID 200 obtained in S1603 are stored in the database 64 in association with each other (S1610).
[0131]
FIG. 13 is a flowchart for explaining the outline of the processing of S1603 (ID reading procedure) shown in FIG.
[0132]
First, the ID reading unit 61 transmits an electric wave to drive the electronic circuit chip 301 attached to the ID tag 300. Then, data transmitted from the electronic circuit chip 301 is read (S1611).
[0133]
Next, when the data read in S1611 has the encryption code 105 (Yes in S1612), the control unit 63 performs a decryption procedure (S1613). The details of step S1613 will be described with reference to FIG.
[0134]
Next, the control unit 63 performs a verification procedure of the data read in S1611 or the data obtained by decrypting in S1613 (S1614). Note that details of S1614 will be described with reference to FIG.
[0135]
When the result of S1614 is an error (Yes in S1615), the control unit 63 determines whether or not the number of re-reading is within a specified number. (S1618). If the number is within the specified number (Yes in S1618), the ID is read again (S1611). If the number of readings has reached the specified number of times (No in S1618), an error is output to the input / output unit 62 (S1616).
[0136]
On the other hand, when the result of S1614 is not an error (No in S1615), the control unit 63 obtains the extension ID 200 that has been properly verified (S1617).
[0137]
FIG. 14 is a flowchart for explaining the processing of S1613 (decoding procedure) shown in FIG.
[0138]
First, the control unit 63 checks whether or not a key for decryption is stored in the database 64 (S1621). If not stored (No in S1621), the communication unit 65 creates a decryption key request, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 2 (S1622). Then, the process waits until a decryption key is received from the ID management terminal 5 (S1623).
[0139]
Next, the control unit 63 decrypts the encrypted extended ID 200 using the decryption key stored in the database 64 or the decryption key obtained in S1623 (S1624).
[0140]
FIG. 15 is a flowchart for explaining the process of S1614 (verification procedure) shown in FIG.
[0141]
First, FIG. 15A will be described as an example of the process of S1614 (verification procedure) illustrated in FIG.
[0142]
First, the control unit 63 confirms whether or not a key for verification is stored in the database 64 (S1631). If it is not stored (No in S1631), the communication unit 65 creates a verification key request including the attribute information 101, encrypts it for communication, and transmits it to the ID management terminal 5 via the network 2 (S1632). ). Then, the process waits until a verification key is received from the ID management terminal 5 (S1633).
[0143]
Next, the control unit 63 verifies the tampering detection code 102 using the verification key stored in the database 64 or the verification key obtained in S1633 (S1634).
[0144]
FIG. 15B will be described as another example of the processing of S1614 (verification procedure) shown in FIG.
[0145]
The communication unit 65 creates a verification request including the extended ID 200, encrypts the request for communication, and transmits the encrypted request to the ID management terminal 5 via the network 2 (S1635). Then, the process waits until a verification result is received from the ID management terminal 5 (S1636).
[0146]
FIG. 19 is a flowchart for explaining the processing of S1604 (expiration procedure) shown in FIG.
[0147]
First, in the input / output unit 62, regarding the ID tag 300 that has failed to be read, the ID tag 300 such as a symbol printed on the surface of the ID tag 300 and information on an article to which the ID tag 300 has been attached. The input of the tag information for estimating the extension ID 200 assigned to is obtained (S1641).
[0148]
Next, the control unit 63 searches the database 64 for the tag information received in S1641, and extracts the associated extension ID 200 (S1642). The extracted extension ID 200 is set as a revocation ID (S1643).
[0149]
Next, the communication unit 65 generates an electronic signature (S1644). A revocation ID registration request including the electronic signature and the revocation ID is created, encrypted for communication, and transmitted to the ID management terminal 5 via the network 2 (S1645).
[0150]
Hereinabove, one embodiment of the present invention has been described.
[0151]
According to the present embodiment, the ID order receiving terminal 3, the terminal 4 for the ID manufacturing factory, and the ID management terminal 5 perform encrypted communication via the network 1. Information such as order information, issued IDs, and missing IDs are collectively managed in the ID management terminal 5. Further, since the electronic circuit chip 301 in which the extended ID 200 is stored in the non-rewritable area is used as the ID tag 300, it is not possible for an unauthorized third party to modify the extended ID 200 attached to the ID tag 300. Can not. Further, in order to manufacture the electronic circuit chip 301, sufficient facilities are required. Then, as the electronic circuit chip 301 becomes smaller and thinner, the number of persons who can manufacture the electronic circuit chip 301 becomes more limited, so that the possibility that an unauthorized third party manufactures a copy of the ID tag decreases. When the ID is to be revoked, the electronic signature of the ID using terminal 6 requesting the revocation is confirmed, and the ID is revoked only when the user has a valid right. As described above, the ID management terminal 5 can manage the number of ID tags 300 circulating in the market. In addition, highly confidential information can be managed in secret.
[0152]
In the present embodiment, even if the ID use terminal 6 does not hold a verification key or device, the ID management terminal 5 stores the ID 100, the ID attribute information 101, and the tampering detection code 102 through the network 2. If a verification request including the verification request is transmitted, a verification result can be obtained.
[0153]
Further, in the present embodiment, even if the ID use terminal 6 does not hold the verification key, if the verification key request including the ID attribute information 101 is transmitted to the ID management terminal 5 through the network 2, A key for verification can be obtained.
[0154]
Note that the present invention is not limited to the above embodiment, and various modifications can be made within the scope of the gist.
[0155]
For example, in the above embodiment, the ID use terminal 6 does not necessarily need to be built on one device. For example, a portion related to reading of the extension ID 200 and input / output of information or instructions, and a portion related to the database 64 may be constructed on separate devices, and these devices may be connected via a network. . Conversely, the ID management terminal 5 may have the function of the part related to the database 64 of the ID use terminal 6.
[0156]
Further, for example, in the above embodiment, when the ordering information included in the order information request sent from the customer terminal 8 to the ID order receiving terminal 3 does not include the verification key or the encryption key, 3 generates a random number and treats the random number as a key. However, the customer terminal 8 may have a random number generation function. In this case, in the customer terminal 8, the generated random number is included in the order information as a verification key or an encryption key, and sent to the ID order receiving terminal 3.
[0157]
【The invention's effect】
As described above, according to the present invention, there is provided a mechanism capable of managing issuance and distribution of an ID provided with a falsification detection code, and efficiently and reliably managing articles using the ID. it can.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of an ID used in an ID management system according to an embodiment.
FIG. 2 is a diagram illustrating an example of an ID tag used in the ID management system according to the embodiment;
FIG. 3 is a schematic diagram of an ID management system to which the embodiment is applied.
FIG. 4 is a schematic diagram showing a functional configuration of the ID order receiving terminal 3 shown in FIG.
FIG. 5 is a schematic diagram showing a functional configuration of an ID tag manufacturing factory shown in FIG.
6 is a schematic diagram showing a functional configuration of the ID management terminal 5 shown in FIG.
FIG. 7 is a schematic diagram showing a functional configuration of the ID use terminal 6 shown in FIG.
8 is a diagram showing an example of a hardware configuration of each of the devices 3 to 6 and 8 constituting the ID management system shown in FIG.
9 is a flowchart for explaining the operation of the ID order receiving terminal 3 shown in FIG.
10 is a flowchart for explaining the operation of the terminal 4 for an ID tag manufacturing factory shown in FIG.
11 is a flowchart for explaining the operation of the ID management terminal 5 shown in FIG.
FIG. 12 is a flowchart for explaining an outline of an operation of the ID use terminal 6 shown in FIG. 7;
FIG. 13 is a flowchart illustrating an outline of a process of S1602 (ID reading procedure) illustrated in FIG. 12;
FIG. 14 is a flowchart for explaining the processing of S1613 (decoding procedure) shown in FIG.
FIG. 15 is a flowchart for explaining the processing of S1614 (verification procedure) shown in FIG.
FIG. 16 is a schematic diagram showing a functional configuration of the customer terminal 8 shown in FIG.
FIG. 17 is a diagram for explaining management information related to the ID tag 300, which is stored in the ID-related information management database 53 of the ID management terminal 5 shown in FIG.
FIG. 18 is a flowchart for explaining the operation of the customer terminal 8 shown in FIG.
FIG. 19 is a flowchart for explaining an outline of the processing of S1604 (expiration procedure) shown in FIG. 12;
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Network, 3 ... ID order receiving terminal, 4 ... Manufacturing factory terminal, 5 ... ID management terminal, 100 ... ID, 101 ... ID attribute information, 102 ... Tampering detection code, 200 ... Extended ID, 300 ... ID tag, 301 ... Electronic circuit chip.

Claims (42)

An ID order receiving terminal for receiving an order for ID issuance, a terminal for a manufacturing factory for manufacturing an ID tag in which the ID is stored, and an ID management terminal connected to the ID order receiving terminal and the terminal for the manufacturing factory via a network. An ID management method for managing an ID using an ID management system including:
An electronic circuit chip capable of reading data from the outside is mounted on the ID tag,
The electronic circuit chip has an unrewritable storage area, and stores, in the area, an extended ID including an ordered ID, ID attribute information, and a tampering detection code as externally readable data. Stored
In the ID management terminal,
When an order ID registration request including the extension ID is sent from the ID order receiving terminal, an order ID registration step of registering the extension ID in a database assuming that the extension ID has been registered;
When a manufactured ID registration request including the extended ID stored in the manufactured ID tag is sent from the manufacturing factory terminal, the ID tag storing the extended ID is not manufactured. An ID management method, comprising: registering a manufactured ID in the database. The ID management method according to claim 1, wherein
In the ID management terminal,
When an ID duplication confirmation request including the extension ID is sent from the ID order receiving terminal, it is checked whether or not the extension ID is registered in the database as an order received,
An ID management method further comprising an ID duplication confirmation step of notifying the ID order receiving terminal of the result. The ID management method according to claim 1, wherein
In the ID management terminal,
When a missing ID registration request including the extended ID stored in the ID tag is sent from the ID tag manufacturing factory terminal, the extended ID included in the request is regarded as a missing ID, An ID management method further comprising a missing number ID registration step of registering in a database. The ID management method according to claim 1, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a verification request including the extension ID is sent from the ID using terminal, the extension ID is compared with an extension ID stored in a database, and the falsification detection included in the sent extension ID is performed. An ID management method further comprising a verification step of verifying whether a code is valid. The ID management method according to claim 1, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a verification key request including the attribute information of the ID is sent from the ID using terminal, the verification key of the falsification detection code stored in the database in association with the attribute information is transmitted. Transmitting an ID to the ID using terminal. The ID management method according to claim 1, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a request for decryption key is sent from the ID using terminal, a step of transmitting a key for decrypting the encrypted extended ID stored in the database to the ID using terminal is further included. ID management method to have. The ID management method according to claim 1, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network 2;
In the ID management terminal,
When a request for revocation ID registration including the extension ID is sent from the ID using terminal, a revocation ID registration step of registering in the database that the extension ID included in the request is a revocation ID is further provided. ID management method. The ID management method according to claim 1, wherein
The ID management system includes:
A customer terminal connected to the ID order receiving terminal via a network,
In the ID order receiving terminal,
Order information including information of a customer who orders the ID tag, an ID desired to be stored in the ID tag, and a key for generating a tampering detection code of the ID is sent from the customer terminal. In this case, using the ordering information, the attribute information of the ID and the falsification detection code are generated, and an extended ID generating step of generating the extended ID; Transmitting order information including the order information and the extension ID;
An order ID registration requesting step of transmitting an order ID registration request including the order information to an ID management terminal;
An ID tag manufacturing requesting step of transmitting an ID tag manufacturing request including the extended ID to the ID tag manufacturing factory terminal. The ID management method according to claim 1, wherein
In the terminal for an ID tag manufacturing plant,
Producing an ID tag when an ID tag production request including the extended ID is sent from the ID order receiving terminal;
Inspecting the manufactured ID tag;
And a manufactured ID registration requesting step of transmitting a manufactured ID registration request to the ID management terminal including the extended ID stored in the ID tag if the result of the inspection step is a pass. Method. The ID management method according to claim 1, wherein
In the ID using terminal,
An instruction input step for receiving an instruction for a processing operation;
An ID reading step of obtaining the extended ID from the electronic circuit chip attached to the ID tag;
A verification step of verifying the validity of the extension ID obtained in the reading step using the falsification detection code included in the extension ID;
If the instruction accepted in the instruction input step is an information reading instruction, the information associated with the extended ID acquired in the ID reading step is retrieved from a database and a process determined according to the information is performed. Steps and
When the instruction accepted in the instruction input step is an update instruction, obtaining update information, and updating the information associated with the extended ID acquired in the ID reading step with the update information;
When the instruction accepted in the instruction input step is a new registration instruction, acquiring new information, storing the new information in a database in association with the extended ID acquired in the ID reading step,
When the instruction accepted in the instruction input step is a revocation ID registration instruction, the extension ID associated with the information of the ID tag is retrieved from a database, and a revocation ID registration request including the extension ID is sent to the ID management terminal. Requesting revocation ID registration to be sent to
ID management method having An ID order receiving terminal for receiving an order for issuing an ID, a terminal for a manufacturing factory for manufacturing an ID tag in which the ID is stored, and an ID management terminal connected to the ID order receiving terminal and the terminal for the manufacturing factory via a network. An ID management system including
The ID tag includes an electronic circuit chip capable of reading data from outside,
The electronic circuit chip has an unrewritable storage area, and stores, in the area, an extended ID including an ordered ID, ID attribute information, and a tampering detection code as externally readable data. Stored
The ID order receiving terminal includes an order ID registration request processing unit that sends an order ID registration request including order information generated from order information received at the time of receiving an order to the ID management terminal,
The ID management terminal includes an order ID registration processing unit that, when the order ID registration request is sent, registers that the extension ID is already registered and registers the extension ID in a database.
The manufacturing factory terminal includes a manufactured ID registration request processing unit that sends a manufactured ID registration request to the ID management terminal, including the extended ID stored in the manufactured ID tag,
The ID management terminal includes, when the manufactured ID registration request is sent, a manufactured ID registration processing unit that registers the ID tag storing the extended ID in the database as being manufactured. Management system. The ID management system according to claim 11, wherein
In the ID management terminal,
When an ID duplication confirmation request including the extension ID is sent from the ID order receiving terminal, it is checked whether or not the extension ID is registered in the database as an order received,
An ID management system further comprising an ID duplication confirmation processing unit for notifying the ID order receiving terminal of the result. The ID management system according to claim 11, wherein
In the ID management terminal,
When a missing ID registration request including the extended ID stored in the ID tag is sent from the ID tag manufacturing factory terminal, the extended ID included in the request is regarded as a missing ID, and An ID management system further including a missing ID registration processing unit for registering in a database. The ID management system according to claim 11, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a verification request including the extension ID is sent from the ID using terminal, the extension ID is compared with an extension ID stored in a database, and the falsification detection included in the sent extension ID is performed. An ID management system further including a verification processing unit that verifies whether a code is valid. The ID management system according to claim 11, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a verification key request including the ID attribute information is sent from the ID using terminal, a key for verification of the falsification detection code stored in a database in association with the attribute information is transmitted. An ID management system further comprising a processing unit for transmitting the ID to the ID use terminal. The ID management system according to claim 11, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network,
In the ID management terminal,
When a request for decryption key is sent from the ID using terminal, a processing unit for transmitting to the ID using terminal a decryption key for the encrypted extended ID stored in the database. ID management system to have further. The ID management system according to claim 11, wherein
The ID management system includes:
An ID use terminal connected to the ID management terminal via a network 2;
In the ID management terminal,
When a revocation ID registration request including the extension ID is sent from the ID using terminal, the revocation ID registration processing unit that registers the revocation ID in the database as the extension ID included in the request is further included. ID management system. The ID management system according to claim 11, wherein
The ID management system includes:
A customer terminal connected to the ID order receiving terminal via a network,
In the ID order receiving terminal,
Order information including information of a customer who orders the ID tag, an ID desired to be stored in the ID tag, and a key for generating a tampering detection code of the ID is sent from the customer terminal. In this case, using the order information, generates an attribute information of the ID and the falsification detection code, an extended ID generation processing unit that generates the extended ID,
An order information transmission processing unit that transmits order information including the order information and the extension ID in response to a request from the customer terminal;
An order ID registration request processing unit that transmits an order ID registration request including the order information to the ID management terminal;
An ID tag manufacturing request processing unit for transmitting an ID tag manufacturing request including the extended ID to the terminal for the ID tag manufacturing factory. The ID management system according to claim 11, wherein
The terminal for an ID tag manufacturing factory is:
When an ID tag manufacturing request including the extended ID is sent from the ID order receiving terminal, manufacturing of the ID tag;
A control unit for instructing inspection of the manufactured ID tag;
And a manufactured ID registration request processing unit that transmits a manufactured ID registration request to the ID management terminal, including the extended ID stored in the ID tag, when the result of the inspection processing unit passes. ID management system. The ID management system according to claim 11, wherein
In the ID using terminal,
An instruction input processing unit for receiving an instruction for a processing operation;
An ID reading processing unit that acquires the extended ID from the electronic circuit chip attached to the ID tag;
A verification processing unit that verifies the validity of the extension ID acquired by the read processing unit using the falsification detection code included in the extension ID;
When the instruction accepted by the instruction input processing unit is an information reading instruction, the information associated with the extended ID acquired by the ID reading processing unit is retrieved from a database, and a process determined according to the information is performed. A processing unit for performing
A process of obtaining update information when the instruction received by the instruction input processing unit is an update instruction, and updating the information associated with the extended ID acquired by the ID reading processing unit with the update information. Department and
A processing unit that obtains new information when the instruction accepted by the instruction input processing unit is a new registration instruction, and stores the new information in a database in association with the extended ID acquired by the ID reading processing unit; When,
When the instruction accepted in the instruction input step is a revocation ID registration instruction, the extension ID associated with the information of the ID tag is retrieved from a database, and a revocation ID registration request including the extension ID is sent to the ID management terminal. A processing unit for transmitting to
ID management system having An ID management terminal which is connected to a network and manages an extended ID stored in an ID tag,
The ID tag has an unrewritable storage area from which data can be read from the outside, and stores an extended ID including an ordered ID, ID attribute information, and a tampering detection code in the area. And
Storage means for storing a database for registering the extension ID and information related to the extension ID;
Communication means for performing communication with another terminal connected to the network,
When an order ID registration request including order information generated from order information received at the time of receiving an order is sent from the other terminal by the communication means, the extended ID is registered in the database as being registered. Order ID registration means,
When a manufactured ID registration request including the extended ID stored in the manufactured ID tag is transmitted from the other terminal by the communication unit, the ID tag storing the extended ID. And a manufactured ID registration means for registering the manufactured ID in the database. The ID management terminal according to claim 21, wherein
When an ID duplication confirmation request including the extension ID is sent from the other terminal by the communication means, an ID duplication check is performed to determine whether or not the extension ID is registered in the database as an order received. Further comprising checking means,
The communication means,
An ID management terminal for transmitting a result of the confirmation by the ID duplication confirmation means to the another terminal. The ID management terminal according to claim 21, wherein
If the missing ID registration request including the extension ID stored in the ID tag is sent from the other terminal by the communication means, the extension ID is determined to be the missing ID, and An ID management terminal further including a missing number ID registration unit for registration. The ID management terminal according to claim 21, wherein
When a verification request including the extension ID is sent from the other terminal by the communication unit, the extension ID is compared with the extension ID stored in the database, and the transmitted extension ID is A verification unit for verifying whether the included tampering detection code is valid,
The communication means,
An ID management terminal for transmitting a result of the verification by the verification means to the another terminal. The ID management terminal according to claim 21, wherein
When a verification key request including the attribute information of the ID is transmitted from the other terminal by the communication unit, the falsification detection code stored in the database in association with the attribute information is transmitted. Further comprising a verification key obtaining means for obtaining a verification key,
The communication means,
An ID management terminal for transmitting a key for verifying the falsification detection code to the terminal. The ID management terminal according to claim 21, wherein
A decryption key for obtaining a decryption key for an encrypted extended ID stored in a database when a decryption key request is sent from the other terminal by the communication means; Further having a means of obtaining,
The communication means,
An ID management terminal for transmitting a key for decrypting the encrypted extended ID to the terminal. The ID management terminal according to claim 21, wherein
When an invalid ID registration request including the extended ID is sent from the other terminal by the communication means, the extended ID included in the request is regarded as an invalid ID, and the invalid ID registration registered in the database is performed. An ID management terminal further comprising means. An ID order receiving terminal used to be connected to a network and receiving an order for issuing an ID stored in an ID tag,
The ID tag has a non-rewritable storage area from which data can be read from the outside, and an extended ID including an ordered ID, ID attribute information, and a falsification detection code is stored in the area. Stored
Communication means for performing communication with another terminal connected to the network,
Order information including information of a customer who orders the ID tag, an ID desired to be stored in the ID tag, and a key for generating a tampering detection code of the ID is transmitted from the other terminal. An extension ID generation unit that generates attribute information of the ID and the falsification detection code using the order information and generates the extension ID;
An order ID registration requesting unit that transmits an order ID registration request including order information generated from the order information to an ID management terminal,
An ID tag production requesting means for transmitting an ID tag production request including the extended ID to the ID tag production factory terminal by the communication means. 29. The ID order receiving terminal according to claim 28,
An ID for transmitting, by the communication means, an ID duplication confirmation request including the extension ID to the other terminal to confirm whether the extension ID is the same as an extension ID registered in the ID management terminal; An ID order receiving terminal further including a duplication confirmation request processing unit. 29. The ID order receiving terminal according to claim 28,
An ID order receiving terminal further comprising means for generating a random number and using the random number as a key for generating the tampering detection code. 29. The ID order receiving terminal according to claim 28,
An ID order receiving terminal further comprising means for encrypting the extended ID and attaching an encryption code indicating that the ID has been encrypted. An ID tag manufacturing factory terminal used in an ID tag manufacturing factory that is used by being connected to a network and manufactures an ID tag,
The ID tag has an unrewritable storage area from which data can be read from the outside, and stores an extended ID including an ordered ID, ID attribute information, and a tampering detection code in the area. And
Communication means for performing communication with another terminal connected to the network,
When an ID tag production request including the extended ID is sent from the other terminal by the communication means, the production of the ID tag according to the production request and the inspection of the produced ID tag are performed. Control means to be implemented;
If the result of the inspection is a pass, the communication means, including the extended ID stored in the ID tag, transmits a manufactured ID registration request to the other terminal, to the other terminal, Manufactured ID registration requesting means for registering the ID tag storing the extended ID as being manufactured,
An ID tag manufacturing factory terminal having An ID tag manufacturing factory terminal according to claim 32,
If the result of the inspection is unsuccessful and the remanufacturing of the ID tag is unnecessary, the communication unit sends the missing ID registration request including the extended ID stored in the ID tag to the other. A terminal for an ID tag manufacturing factory, further comprising a missing ID registration requesting means for transmitting the extended ID to the other terminal to register the extended ID as the missing ID. An ID use terminal used when connected to a network and using an ID tag,
The ID tag has a non-rewritable storage area from which data can be read from the outside, and an extended ID including an ordered ID, ID attribute information, and a falsification detection code is stored in the area. Stored
Storage means for storing a database for registering the extension ID, information related to the extension ID, and information associated with the ID tag in which the extension ID is stored;
Communication means connected to the network, for communicating with the other terminal,
Instruction input means for receiving an instruction for a processing operation;
ID reading means for acquiring the extended ID from the electronic circuit chip mounted on the ID tag,
A verification unit that verifies the validity of the extension ID obtained by the reading unit using the falsification detection code included in the extension ID;
When the instruction accepted by the instruction input means is an information reading instruction, information associated with the extended ID acquired by the ID reading means is retrieved from a database and a process determined according to the information is performed. Means,
Means for obtaining update information and updating the information associated with the extended ID obtained by the ID reading means with the update information, when the instruction accepted by the instruction input means is an update instruction;
A means for acquiring new information and storing the new information in a database in association with the extended ID acquired by the ID reading means, when the instruction accepted by the instruction input means is a new registration instruction;
When the instruction accepted by the instruction input means is a revocation ID registration instruction, the extension ID associated with the information of the ID tag is retrieved from a database, and a revocation ID registration request including the extension ID is sent to the ID management terminal. Means for sending to
ID use terminal having The ID use terminal according to claim 34,
An ID-using terminal, further comprising: means for decrypting using the decryption key stored in the storage means when the extended ID obtained by the ID reading means is encrypted. The ID use terminal according to claim 34,
If the extended ID obtained by the ID reading means is encrypted and the storage means does not have a decryption key, the communication means sends the decryption key request to the other An ID-using terminal, further comprising means for transmitting to the terminal and causing the other terminal to transmit the decryption key. The ID use terminal according to claim 34,
If the user does not have a key for verifying the falsification detection code included in the extension ID obtained by the ID reading unit, the communication unit sends a verification key key request including the extension ID to the other terminal. An ID-using terminal further comprising means for transmitting and transmitting the verification key to the other terminal. The ID use terminal according to claim 34,
The communication unit further includes a verification request unit that transmits a verification request including the extension ID acquired by the ID reading unit to the another terminal, and causes the other terminal to verify the validity of the extension ID. Have
The verification means,
An ID-using terminal that uses a result of the verification request sent from the other terminal as a verification result. An ID management system including an ID order receiving terminal for receiving orders for issuing IDs, a manufacturing factory terminal for manufacturing an ID tag storing the ID, and an ID management terminal is realized for a plurality of computers connectable to a network. Program product,
A medium readable by the computer;
A module for realizing an order ID registration request processing unit that sends an order ID registration request including order information generated from order information received at the time of order reception to the ID management terminal;
A module that, when the order ID registration request is sent to the computer serving as the ID management terminal, realizes an order ID registration processing unit that registers the extension ID as a registered one in a database;
The computer serving as the manufacturing factory terminal includes a manufactured ID registration request processing unit that sends a manufactured ID registration request including the extended ID stored in the manufactured ID tag to the ID management terminal. Modules to be realized,
When the manufactured ID registration request is sent to the computer serving as the ID management terminal, a manufactured ID registration process of registering in the database that the ID tag storing the extended ID has been manufactured. A program product comprising: a module for realizing a unit. An article provided with an ID tag for managing distribution,
The ID tag stores an ID of the article, attribute information related to the article, and an extended ID including the ID and a tampering detection code for the attribute information.
An ID tag that can confirm the validity of the extended ID using a database that stores the ID, the attribute information, the falsification detection code, and a key for verifying the falsification detection code in an associated manner. Goods. An article provided with the ID tag according to claim 40,
An article further comprising an ID tag, wherein the extended ID further includes class information for controlling assignment of the ID and the attribute information. An article provided with the ID tag according to claim 40,
The extension ID further includes the number of digits of the extension ID, the number of digits of the tampering detection code, and version information indicating a calculation method. The tampering detection code includes an ID tag that also detects tampering with the version information. Goods to equip.

Images