JP2005063039A - Data processor, its method, and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data processor capable of preventing record data written by a third party into a recording medium from being read as legitimate record data and used mistakenly, regardless of whether or not the recording medium has a write protection function. <P>SOLUTION: When writing file data or the like into a wireless tag 10 with a write protection function, a writing device 11 sets the wireless tag 10 in a write protection state after writing the file data or the like in the wireless tag 10. When writing file data or the like in a wireless tag 10a without the write protection function, the writing device 11 generates the file data's signature data and writes both the signature data and the file data or the like in the wireless tag 10a. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data processing apparatus for writing and reading data on a recording medium, a method thereof, and a program thereof.

2. Description of the Related Art In recent years, with the progress of RFID (Radio Frequency IDentification) technology, a method of using an RFID tag (wireless tag) that can exchange data wirelessly and does not require a power source as a variety of information providing means as well as physical distribution has been proposed.
For example, a system has been proposed in which a wireless tag is attached to a poster or the like, and file data recorded on the wireless tag is wirelessly read by a terminal device such as a mobile phone or a PDA.
In such a system, it is necessary to prevent a third party from illegally writing file data on a wireless tag attached to a poster.
JP 2003-85494 A

  By the way, there are wireless tag memory that has a rewrite prohibition function and that that does not, but in any case, the file data illegally written by the third party to the wireless tag is valid. It is necessary to prevent the file data from being read and used by mistake.

  The present invention has been made in view of the above-described prior art, and a third party can illegally write recording data to either a recording medium having a rewrite prohibiting function or a recording medium not having the writing prohibiting function. Another object of the present invention is to provide a data processing apparatus, a method thereof, and a program thereof that can prevent the recording data written on the recording medium from being read and erroneously used as valid recording data.

  In order to solve the above-described problems of the prior art, a data processing apparatus according to a first aspect of the present invention is a data processing apparatus that writes recording data to a recording medium, and generates a signature data for the recording data. When it is determined that the generation unit and the recording medium have a write prohibition function, a first operation of writing record data to the recording medium is performed, and it is determined that the recording medium does not have a write prohibition function A writing unit that performs a second operation of writing the signature data and the recording data generated by the signature generation unit to the recording medium.

The operation of the data processing apparatus of the first invention is as follows.
When the writing unit determines that the recording medium has a write prohibiting function, a first operation of writing recording data to the recording medium is performed.
When the writing unit determines that the recording medium does not have a write prohibition function, the signature generation unit generates signature data for the recording data.
Then, the writing unit performs a second operation of writing the signature data and the recording data generated by the signature generation unit to the recording medium.

  According to a second aspect of the present invention, there is provided a data processing method comprising: a first step for determining whether or not the recording medium has a write-inhibiting function; In this case, if it is determined in the first step that the recording data is written to the recording medium and the recording medium is not write-protected in the first step, the signature data for the recording data is A third step of generating, and a fourth step of writing the signature data and the recording data generated in the third step into the recording medium.

  The program of the third invention is a first procedure for determining whether or not the recording medium has a write prohibition function, and when it is determined in the first procedure that the recording medium has a write prohibition And generating a signature data for the recording data when it is determined in the first procedure that the recording medium is not write-protected in the second procedure for writing the recording data to the recording medium. The data processing apparatus is caused to execute a third procedure and a fourth procedure for writing the signature data and the recording data generated in the third procedure to the recording medium.

  According to a fourth aspect of the present invention, there is provided a data processing device for reading recorded data from a recording medium, wherein the recording medium has a signature verification means for verifying signature data of the recorded data, and the recording medium has a write prohibiting function. When it is determined, the first operation of reading and using the recording data from the recording medium is performed, and when it is determined that the recording medium does not have a write prohibition function, the signature data read from the recording medium is Reading means for performing a second operation using the recording data read from the recording medium on the condition that the signature verification means verifies and the signature verification means determines that the signature data is valid .

The operation of the data processing apparatus of the fourth invention is as follows.
When the reading means determines that the recording medium has a write prohibiting function, it reads the recording data from the recording medium and uses it.
On the other hand, when the reading unit determines that the recording medium does not have a write prohibition function, the signature verifying unit verifies the signature data read from the recording medium, and the signature verifying unit The recording data read from the recording medium is used on the condition that it is determined to be valid.

  According to a fifth aspect of the present invention, there is provided a data processing method for reading recorded data from a recording medium, wherein the recording data is read from the recording medium when it is determined that the recording medium has a write prohibiting function. A first step of using, a second step of verifying signature data read from the recording medium by the signature verification means when it is determined that the recording medium does not have a write prohibition function, and the second step And a third step of using the recording data read from the recording medium on the condition that the signature data is determined to be valid in the step.

  A program according to a sixth aspect of the invention is a program executed by a data processing apparatus that reads recorded data from a recording medium, and when it is determined that the recording medium has a write prohibiting function, the recorded data is read from the recording medium. A first procedure for reading and using, a second procedure for verifying signature data read from the recording medium by the signature verification means when it is determined that the recording medium does not have a write prohibition function, On the condition that it is determined that the signature data is valid in the second procedure, the data processing apparatus is caused to execute a third procedure using the recording data read from the recording medium.

  According to the present invention, regardless of whether recording data is written to either a recording medium having a rewrite prohibition function or a recording medium not having the write prohibition function, a recording that is illegally written on the recording medium by a third party. It is possible to provide a data processing device, a method thereof, and a program thereof that can prevent data from being read and erroneously used as valid recording data.

Hereinafter, embodiments of the present invention will be described with reference to FIGS.
FIG. 1 is an overall configuration diagram of a data distribution system 1 according to an embodiment of the present invention.
As shown in FIG. 1, in the data distribution system 1, for example, a plurality of variable-size file data such as HTML (Hypertext Markup Language) generated by the computer 12 is wirelessly written to the wireless tag 10 via the writing device 11. .
Then, the wireless tag 10 is attached to the poster 18 or the like.
Then, the portable terminal device 15 wirelessly reads out the file data from the wireless tag 10 and displays an image corresponding to the file data on the display of the terminal device 15, for example.
The terminal device 15 is, for example, a mobile phone or a PDA (Personal Digital Assistant).

First, the correspondence between each configuration of the present invention and the configuration of the present embodiment will be described.
The memory 35 of the wireless tags 10 and 10a shown in FIG. 1 corresponds to the recording medium of the present invention, and the recording area of the memory 35 shown in FIG. 4 corresponds to the recording area of the present invention.
Here, the wireless tag 10 shown in FIG. 2 is a recording medium having a write-inhibiting function, and the wireless tag 10a shown in FIG. 3 is a recording medium having no writing-inhibiting function.
Further, the file data recorded in the file area 142 in the recording area shown in FIG. 5 of the present embodiment corresponds to the recording data of the present invention.
The signature data recorded in the signature areas 143 and 150 shown in FIGS. 6 and 8 correspond to the signature data of the present invention.
Also, the file attribute data recorded in the file attribute area 120_n (n is an integer of 1 or more) shown in FIG. 9 corresponds to the attribute data of the present invention.
Further, the address recorded in the file position designation area 121 shown in FIG. 10 corresponds to the recording address of the present invention.

Further, the first address A shown in FIG. 9 corresponds to the first address of the present invention, and the second address B corresponds to the second address of the present invention.
In the present embodiment, the first address A indicates the head address of the file data area 102 following the tag management area 101 defined from the head address in the recording area shown in FIG.
Further, the second address B is stored in the parity area 114, reserved area 113, free area instruction area 112, file number area 111, and classification type area 115 defined in order from the end address in the recording area shown in FIG. The address on the end address side of the subsequent area is shown.

Further, the processing unit 25 shown in FIG. 11 corresponds to the writing unit of the first invention, and the signature generation unit 26 corresponds to the signature generation unit of the first invention. A program PRG1 shown in FIG. 11 corresponds to the program of the third invention.
The processing unit 45 shown in FIG. 16 corresponds to the reading unit of the fourth invention, and the signature verification unit 46 corresponds to the signature verification unit of the fourth invention. A program PRG2 shown in FIG. 16 corresponds to the program of the sixth invention.

Next, an outline of the data distribution system 1 will be described.
When the writing device 11 of the data distribution system 1 writes file data or the like to the wireless tag 10 having a write prohibiting function, the wireless tag 10 is set in a write prohibited state after writing the file data or the like to the wireless tag 10. To do.
Further, when writing file data or the like to the wireless tag 10a that does not have a write prohibition function, the writing device 11 generates signature data of the file data and writes the signature data together with the file data or the like to the wireless tag 10a. .
The writing device 11 writes a plurality of variable-size file data from the first address A in the file data area 102 in the recording area shown in FIG. Write in order.
In addition, the writing device 11 indicates a recording address in the file data area 102 of the file data defined and corresponding to each of the plurality of file data, and indicates a plurality of file attribute data having a fixed size as a second address. Data are sequentially written in the file attribute area 120_n defined from B to the first address A.

The terminal device 15 reads file data, file attribute data, and the like from the wireless tag 10 and does not verify the signature data.
That is, since the wireless tag 10 is set in a write-inhibited state, a third party cannot write file data to the wireless tag 10 illegally.
In addition to the file data and the file attribute data, the terminal device 15 reads the signature data from the wireless tag 10a. Then, after verifying the validity of the signature data, the terminal device 15 uses the read file data and file attribute data as valid ones.
Since the wireless tag 10a does not have a write prohibition function, a third party can illegally write file data to the wireless tag 10a. However, since the terminal device 15 verifies the signature data, the unauthorized write can be detected appropriately. It is possible to avoid using the file data by mistake.

[Wireless tags 10, 10a]
The wireless tag 10 has a write prohibiting function, and the wireless tag 10a does not have a write prohibiting function.
FIG. 2 is a configuration diagram of the wireless tag 10 shown in FIG.
As shown in FIG. 2, the wireless tag 10 includes, for example, an antenna 31 and an RF (Radiop Freqency).
Unit 32, power control unit 33, memory access unit 34, and memory 35.
The RF unit 32 performs processing such as demodulation on a signal such as file data or file attribute data received via the antenna 31 and outputs the result to the memory access unit 34.
In addition, the RF unit 32 performs processing such as modulation on signals such as file data and attribute data read from the memory 35 and outputs the processed signals to the antenna 31.
The power control unit 33 supplies power (energy) obtained by electromagnetic coupling or the like by a signal received via the antenna 31 to the memory access unit 34 or the like.
The memory access unit 34 is driven by the power received from the power control unit 33, and performs a data write operation and a read operation with respect to the memory 35.
The memory access unit 34 has a write prohibiting function, and is controlled by the writing device 11 and the terminal device 15, for example.
The memory 35 records data such as file data and file attribute data described later.
The memory 35 is a recording medium such as a smart label or an EEPROM in which recording data is erased by batch erasure of the entire recording area.

FIG. 3 is a configuration diagram of the wireless tag 10a shown in FIG.
As illustrated in FIG. 3, the wireless tag 10 a includes, for example, an antenna 31, an RF (Radiop Freqency) unit 32, a power control unit 33, a memory access unit 34 a, and a memory 35.
In FIG. 3, the configuration denoted by the same reference numerals as in FIG. 2 is the same as the configuration described above.
The wireless tag 10a is different from the wireless tag 10 in that the memory access unit 34a does not have a write prohibiting function.

FIG. 4 is a diagram for explaining the configuration of the memory map of the memory 35 of the wireless tags 10 and 10a shown in FIGS.
The memory 35 records information on the OS (Operating System) and the wireless tags 10 and 10a, such as the presence / absence of a write prohibition function, the manufacturing code, the version, the size of the recording area of the memory 35, and the access unit to the recording area. External access is permitted except for some recording areas.
As shown in FIG. 4, the recording area of the memory 35 includes, for example, a tag management area 101, a file data area 102, and a file table area 103.

The tag management area 101 is defined, for example, over a predetermined address from the start (head) address of the address space of the recording area of the memory 35 shown in FIG.
In the tag management area 101, data unique to the wireless tags 10 and 10a is recorded.
The file data area 102 is defined between the tag management area 101 and the file table area 103 in the address space.
The file data area 102 is defined from the first address A shown in FIG. 9 described above following the tag management area 101 to the second address B in the address space of the memory 35. In the file data area 102 of the wireless tag 10, as shown in FIG. 5, a plurality of HTML file data are stored in a continuous address from the first address A to the second address B by the writing device 11. File name data and file data entities are written in order.
That is, file name data is recorded in the file name area 141 in the file data area 102, and file data is recorded in the file area 142.
Here, the individual file name data and file data are variable-size data.
The size of the file data area 102 varies depending on the number and amount of file data to be recorded.
In the file data area 102 of the wireless tag 10a, as shown in FIG. 6, a plurality of HTML files are written by the writing device 11 to consecutive addresses from the first address A to the second address B. Data file name data, signature data, and file data entities are sequentially written.
That is, file name data is recorded in the file name area 141 in the file data area 102, signature data is recorded in the signature area 143, and file data is recorded in the file area 142.

When recording the compressed file data obtained by compressing the file data, the file data area 102 of the wireless tag 10 records the compressed file data in the compressed file area 153 as shown in FIG.
In this case, a recording size area 151 and a compression type area 152 are defined between the file name area 141 and the compressed file area 153.
In the recording size area 151, the size (data length) of the compressed file data recorded in the compressed file area 153 is recorded.
In the compression type area 152, identification data of the compression method used for generating the compressed file data is recorded.
As a compression method, a run length method, a Huffman method, an LZ77 method, an LZ78 method, a block sort method, an MTF method, an arithmetic compression method, a range coder method, or the like is used.
On the other hand, signature data is recorded in the signature area 150 in the file data area 102 of the wireless tag 10a as shown in FIG.
Further, when recording the compressed file data obtained by compressing the file data, the file data area 102 of the wireless tag 10a records the compressed file data in the compressed file area 153 as shown in FIG. .

The file table area 103 is defined from the second address B to the first address A in the address space.
A file table is recorded in the file table area 103.
FIG. 9 is a diagram for explaining a detailed configuration of the file table area 103 shown in FIG.
As shown in FIG. 9, the file table area 103 includes, for example, a file number area 111, a free area instruction area 112, a reserved area 113, a parity area 114, a classification type area 115, and one or a plurality of file attribute areas 120_n (n Is an integer of 1 or more. In the file table area 103, for example, a parity area 114, a reserved area 113, a free area instruction area 112, a file number area 111, and a classification type area 115 are defined in order from the end address of the memory space of the memory 35.
A plurality of file attribute areas 120_n are defined in order from the second address B to the first address A.
Each of the areas 111 to 115 and 120_n in the file table area 103 has a fixed size.
That is, a plurality of file data and the like are sequentially recorded in the memory 35 from the first address A to the second address B following the tag management area 101, and a plurality of file attributes respectively corresponding to the plurality of file data. Data is recorded in order from the second address B to the first address A in the plurality of file attribute areas 120_n.

The file number area 111 indicates the number of file data recorded in the file data area 102.
It should be noted that even when information related to file data such as file name data is recorded in the file data area 102 instead of the actual file data, it is counted as the number of files. The free area instruction area 112 indicates a head address at which new file data is written next in the file data area 102.
The reserved area 113 is an area reserved for recording some data in the future. The parity area 114 records parity data for verifying the validity of the file number area 111, the free area instruction area 112, and the reserved area 113.
The classification type area 115 records data indicating a classification according to the use when each wireless tag 10 has a use.

The file attribute area 120_n records file attribute data corresponding to each individual file data recorded in the file data area 102.
When the file attribute area 120_n relates to a shortcut, file attribute data corresponding to the file name data recorded in the file data area 102 is recorded.
FIG. 10 is a configuration diagram of the file attribute area 120_n shown in FIG.
As shown in FIG. 10, the file attribute area 120_n includes, for example, a file position designation area 121, a file type area 122, a file creation time area 123, a file name size area 124, a file size / reference area 125, a reserved area 126, and a parity. A region 127 is included.
The file position instruction area 121 records the address (recording address of the present invention) where the file data corresponding to the file attribute area 120_n or the file name data is recorded in the file data area 102.

The file type area 122 records type data indicating the type such as the presence / absence of compression of the corresponding file data recorded in the file data area 102 and the presence / absence of signature data.
The file creation time area 123 records time data indicating the time when file data or file name data corresponding to the file attribute area 120 — n is recorded in the file data area 102.
The file name size area 124 records the size (data length) of the file name data recorded in the file data area 102.
The file size / reference area 125 records the size of the file data when the file data corresponding to the file data area 102 is recorded.
The file size / reference area 125 records the size of the file data before compression when the compressed file data is recorded in the compressed file area 153 as shown in FIGS.
The parity area 127 is parity data for verifying the validity of the data in the file location specification area 121, the file type area 122, the file creation time area 123, the file name size area 124, the file size / reference area 125, and the reserved area 126. Record.

[Writing device 11]
The writing device 11 writes data into the memory 35 of the wireless tags 10 and 10a in the format described above with reference to FIGS.
That is, when writing file data or the like to the wireless tag 10 having the write prohibiting function, the writing device 11 sets the wireless tag 10 in a write prohibited state after writing the file data or the like to the wireless tag 10.
Further, when writing file data or the like to the wireless tag 10a that does not have a write prohibition function, the writing device 11 generates signature data of the file data and writes the signature data together with the file data or the like to the wireless tag 10a. .
Thereby, the writing device 11 can prevent the file data and the like recorded in the wireless tags 10 and 10a from being illegally rewritten by a third party.
Further, the writing device 11 starts from the first address A in the file data area 102 in the recording area shown in FIG. 9 of the memory 35 of the wireless tags 10 and 10a shown in FIGS. A plurality of variable-size file data and file name data are sequentially written toward the.
Further, the writing device 11 indicates a recording address in the file data area 102 of the file data defined and corresponding to each of the plurality of file data, and indicates a plurality of file attribute data having a fixed size as a second address. Data are sequentially written in the file attribute area 120_n defined from B to the first address A.
Thereby, the terminal device 15 can specify the address where the file attribute data in the recording area of the memory 35 is recorded without being affected by the variable-size file data or the like.
Further, the address where the file data or the like in the recording area is recorded can be specified from the address recorded in the file position designation area 121 shown in FIG.
Further, as shown in FIG. 9, the writing device 11 records the file number data in the file number region 111 in the file table region 103, and the size of the file attribute region 120_n is fixed. The address constituting the area 103 can be easily specified.
Further, the writing device 11 designates the size of the file name data in the file name size area 124 and makes the size of the file name area 141 in the file data area 102 shown in FIGS. 4 and 5 variable. The size of the file name data can be freely set within a range defined by the number of bits in the file name size area 124. For example, the writing device 11 can write file name data up to 255 bytes in the file data area 102 when the file name size area 124 is 8 bits.
Therefore, for example, the writing device 11 stores tree-structured file name data such as “/HTML4.0/index.html” or “/cHTML/index.html” that differs depending on the model of the terminal device 15 in the file data area 102. Can be written on.
Further, by using the above-described shortcut, a single file data may be written into the file data area 102 for a plurality of different file name data, and the recording area of the memory 35 can be used efficiently.

FIG. 11 is a hardware configuration diagram of the writing device 11 shown in FIG.
As illustrated in FIG. 11, the writing device 11 includes, for example, an interface 21, an RF unit 22, an antenna 23, a memory 24, a processing unit 25, and a signature generation unit 26, which are connected via a data line 20. ing.
The interface 21 exchanges data with the computer 12 shown in FIG.
The RF unit 22 exchanges data wirelessly with the wireless tag 10 via the antenna 23.
The memory 24 records a program PRG1 that defines the processing of the processing unit 25 and various data used for the processing of the processing unit 25.
The processing unit 25 comprehensively controls the processing of the writing device 11 described above or later, based on the program PRG1.
For example, the signature generation unit 26 uses the secret key data of the writing device 11 to generate signature data for file data to be written to the wireless tag 10a.

Hereinafter, an operation example of the writing device 11 will be described.
In the following operation example, communication between the processing unit 25 and the wireless tags 10 and 10a is performed via the RF unit 22 and the antenna 23 shown in FIG.
The processing unit 25 writes and reads the wireless tags 10 and 10a to and from the memory 35 when the processing unit 25 issues an instruction to the memory access unit 34 of the wireless tags 10 and 10a.

[Initialization operation of wireless tag 10]
FIG. 12 is a flowchart for explaining the initialization operation of the wireless tags 10 and 10a by the writing device 11.
Step ST1:
The processing unit 25 of the writing device 11 determines whether or not wireless communication with the wireless tags 10 and 10a is possible via the RF unit 22 and the antenna 23. If it is determined that the wireless tag is possible, the process proceeds to step ST2. In some cases, error handling is performed.
Step ST2:
The processing unit 25 reads tag data recorded in the memory 35.
The tag data includes, for example, information such as the presence / absence of a rewrite prohibition function of the wireless tags 10 and 10a, a manufacturing code, a version, a size of a recording area of the memory 35, and an access unit to the recording area.

Step ST3:
The processing unit 25 determines the size and format of the tag management area 101 shown in FIG. 9 based on the tag data input in step ST2.
Thereby, the tag management area 101 can be defined according to the characteristics of the wireless tag 10.
Then, the processing unit 25 writes predetermined tag management data in the tag management area 101 shown in FIG. 9 of the wireless tags 10 and 10a.
Step ST4:
The processing unit 25 defines the file table area 103 having a predetermined size from the second address B in the recording area shown in FIG.
Step ST5:
The processing unit 25 writes initial data to each of the file number area 111, the free area instruction area 112, the reserved area 113, the parity area 114, and the classification type area 115 shown in FIG. 9 in the file table area 103 defined in step ST4. .

Step ST6:
The processing unit 25 determines whether or not the writing in step ST5 is successful. If the writing is successful, the processing unit 25 ends the processing. If the writing is not successful, the processing unit 25 proceeds to step ST7.
Step ST7:
The processing unit 25 determines whether or not the writing in step ST5 is less than or equal to a predetermined number of reprocessing times. If it is determined that the writing is less than or equal to the predetermined number of reprocessing times, the processing unit 25 returns to step ST5. .

[File data write operation]
FIG. 13 is a flowchart for explaining the entire operation of writing file data or the like to the wireless tags 10 and 10a by the writing device 11.
Step ST11:
When the processing unit 25 of the writing device 11 inputs a write instruction to the interface 21 from the computer 12, the function of prohibiting writing in the tag data from the memory 35 of the wireless tags 10 and 10 a is received from the RF unit 22 and the antenna 23. Read data indicating presence / absence.
Step ST12:
Based on the data read in step ST11, the processing unit 25 determines whether or not the wireless tags 10 and 10a have a write prohibition function. If the processing unit 25 determines that the write prohibition function is provided, the processing unit 25 proceeds to step ST13. If not, the process proceeds to step ST17.
Specifically, when the writing device 11 writes to the wireless tag 10, the process proceeds to step ST13, and when writing to the wireless tag 10a, the process proceeds to step ST17.

Step ST13:
The processing unit 25 writes file data and the like in the memory 35 of the wireless tag 10. In this case, the processing unit 25 does not write the signature data in the memory 35.
This operation will be described in detail later.
Step ST14:
The processing unit 25 determines whether or not the writing in step ST13 is successful. If the processing unit 25 determines that the writing is successful, the processing unit 25 proceeds to step ST15, and otherwise performs error processing.
Step ST15:
The processing unit 25 outputs a write prohibition instruction to the memory access unit 34 of the wireless tag 10 shown in FIG.
As a result, the memory access unit 34 thereafter disables writing to the memory 35.
Step ST16:
The processing unit 25 determines whether or not the write prohibition process in step ST15 is successful. If it is determined that the process is successful, the processing unit 25 ends the process. If not, the processing unit 25 performs an error process.

Step ST17:
For example, the processing unit 25 outputs a signature generation instruction to the signature generation unit 26 when writing to the wireless tag 10a.
In response to the signature generation instruction, the signature generation unit 26 uses the secret key data of the writing device 11 to generate signature data for the file data to be written to the wireless tag 10a.
Step ST18:
The processing unit 25 writes the signature data generated in step ST17 in the signature area 143 shown in FIG. 6 or 8 of the memory 35 of the wireless tag 10a.
Further, the processing unit 25 writes file data or the like in the memory 35 as will be described later.
Step ST19:
The processing unit 25 determines whether or not the writing in step ST18 is successful. If it is determined that the writing is successful, the processing unit 25 ends the process. If not, an error process is performed.

The details of the operation of writing the file data to the wireless tag 10 or 10a in steps ST13 and ST18 shown in FIG.
14 and 15 are flowcharts for explaining the operation.
Step ST21:
The processing unit 25 of the writing device 11 determines whether or not the file name data input together with the write instruction from the computer 12 via the interface 21 is valid. If it is determined that the file name data is valid, the process proceeds to step ST22; In some cases, error handling is performed.
For example, when the processing unit 25 receives a file name without “.html” as an identifier, it determines that it is not valid.

Step ST22:
Based on the addresses recorded in the file location designation areas 121 of the file attribute areas 120_n shown in FIG. 10 in the file table area 103 of the memory 35 of the wireless tags 10 and 10a, the processing unit 25 performs the processing shown in FIGS. The file name data recorded in the file name area 141 in the file data area 102 shown is read.
At this time, the processing unit 25 uses the second address B shown in FIG. 9, the number of files indicated by the file number area 111, the size of the file attribute area 120_n, and the like to determine the file position designation area in the file attribute area 120_n. 121 is specified.
Step ST23:
The processing unit 25 determines whether the file name data read in step ST22 is the same as the file name data specified in step ST21. If it is determined that there is no same, the process proceeds to step ST24. If it is determined that there is the same, error processing is performed.

Step ST24:
The processing unit 25 is configured so that the file number data recorded in the file number area 111 shown in FIG. 9 of the memory 35 of the wireless tags 10 and 10a is, for example, the maximum number of files specified by the tag data obtained in the process shown in FIG. If it is determined that the number of files is less than the maximum number of files, the process proceeds to step ST25. If not, error processing is performed.
Step ST25:
The processing unit 25 generates compressed file data by compressing file data input from the computer 12 via the interface 21 shown in FIG. 11 using a predetermined compression method.
Step ST26:
The processing unit 25 determines whether or not the compressed file data generated in step ST25 is smaller in size than the file data before compression. If the processing unit 25 determines that the size is small, the processing unit 25 proceeds to step ST27. If not, the processing unit 25 proceeds to step ST28. move on.

Step ST27:
The processing unit 25 selects the compressed file data generated in step ST25 as data to be recorded in the file data area 102 of the memory 35 of the wireless tag 10 or 10a.
Step ST28:
The processing unit 25 selects the file data before compression in step ST25 as data to be recorded in the file data area 102 of the memory 35 of the wireless tag 10 or 10a.

Step ST29:
The processing unit 25 calculates a recording capacity necessary for recording the compressed file data or file data selected in step ST27 or ST28 in the file data area 102 of the wireless tags 10 and 10a.
Step ST30:
The processing unit 25 specifies the free capacity of the memory 35 from the file number data and the address read from, for example, the file number area 111 and the free area instruction area 112 shown in FIG. 9 in the memory 35 of the wireless tag 10.
Step ST31:
The processing unit 25 determines whether or not the recording capacity calculated in step ST19 is equal to or less than the free capacity specified in step ST30. If so, the process proceeds to step ST32. If not, error processing is performed. Do.
Step ST32:
The processing unit 25 writes file data before compression or file data after compression into the memory 35 of the wireless tags 10 and 10a.
For example, when writing the uncompressed file data in the memory 35, the processing unit 25 proceeds from the address read from the free space instruction area 112 shown in FIG. 9 of the memory 35 toward the second address B in FIGS. As shown in FIG. 6, first, the file name data input in step ST21 is written, and then the file data before compression is written.
On the other hand, for example, when the compressed file data is written in the memory 35 of the wireless tags 10 and 10a, the processing unit 25 is directed from the address read from the free space instruction area 112 shown in FIG. 7 and 8, first, the file name data input in step ST21 is written, then the size of the compressed file data is written in the recording size area 151, and then the compression method is written in the compression type area 152. Subsequently, the compressed file data is written in the compressed file area 153.

Step ST33:
The processing unit 25 determines whether or not the writing in step ST32 is successful. If the writing is successful, the processing unit 25 proceeds to step ST35. If the writing is unsuccessful, the processing unit 25 proceeds to step ST34.
Step ST34:
The processing unit 25 determines whether or not the writing in step ST32 is less than or equal to the predetermined number of reprocessing, and returns to step ST32 when determining that the writing is equal to or less than the predetermined number of reprocessing, and otherwise performs error processing. .

Step ST35:
The processing unit 25 writes the file attribute data corresponding to the file data written in the file data area 102 in step ST32 in the file attribute area 120_n shown in FIG.
At this time, the processing unit 25 selects the next file in the memory 35 based on the second address B shown in FIG. 9, the file number data read from the file number area 111, the size of the file attribute area 120_n, and the like. An address for writing the attribute area 120_n is calculated.

Step ST36:
The processing unit 25 determines whether or not the writing in Step ST35 is successful. If the writing is successful, the processing unit 25 ends the process. If the writing is not successful, the process proceeds to Step ST37.
Step ST37:
The processing unit 25 determines whether or not the writing in step ST35 is equal to or smaller than the predetermined number of reprocessing. When it is determined that the writing is equal to or smaller than the predetermined number of reprocessing, the processing unit 25 returns to step ST25. .

As described above, according to the writing device 11, when writing file data or the like to the wireless tag 10 having the rewrite prohibiting function, the wireless tag 10 is set to a rewrite prohibiting state, thereby enabling a third party. Can avoid illegally writing file data or the like to the wireless tag 10.
Further, according to the writing device 11, when writing file data or the like to the wireless tag 10a that does not have the rewrite prohibition function, signature data such as the file data is further written to the wireless tag 10a.
Therefore, the terminal device 15 can verify the legitimacy of the file data based on the signature data recorded in the radio tag 10a, and the file data etc. that the third party has illegally written in the radio tag 10a is regarded as legitimate. You can avoid using it by mistake.
Further, according to the data distribution system 1, a set of variable-size file name data and file data is sequentially written from the first address to the second address shown in FIG. 9, and corresponding fixed-size file attribute data. Are recorded in order from the second address to the first address.
Therefore, the recording area of the memory 35 of the wireless tags 10 and 10a can always be efficiently used without being affected by an uncertain variable size such as file data. Thereby, the data amount of the file data recorded on the memory 35 of the wireless tags 10 and 10a can be increased.
Further, since the file attribute data is recorded from the second address B to the first address A and has a fixed size, the terminal device 15 described later uses a complicated file system employed in a computer or the like. Even if not, the address of the file attribute data is specified by a simple process based on the second address B and the fixed size of the file attribute data, and the address of the file data is easily determined based on the specified file attribute data. Can be identified by processing.
Therefore, according to the data distribution system 1, it is possible to reduce the amount of processing associated with file management and the amount of data required for the file management as compared with the conventional case.
Further, in the above-described embodiment, the file name area 141 shown in FIGS. 5 to 8 has a variable size, so that it is possible to easily deal with unique file name data defined by each of the plurality of terminal devices 15.
Further, according to the data distribution system 1, the writing device 11 compresses the file data and writes it in the memory 35 of the wireless tags 10 and 10a, so that the terminal device 15 reads the file data from the memory 35 in a short time. it can.

[Terminal device 15]
The terminal device 15 reads the data written in the memory 35 of the wireless tags 10 and 10a in the format described above with reference to FIGS.
That is, the terminal device 15 reads file data, file attribute data, and the like from the wireless tag 10.
In addition to the file data and the file attribute data, the terminal device 15 reads the signature data from the wireless tag 10a. After verifying the validity of the signature data, the terminal device 15 uses the read file data and file attribute data as valid ones.
Since the wireless tag 10a does not have a write prohibition function, a third party can illegally write file data to the wireless tag 10a. However, since the terminal device 15 verifies the signature data, the unauthorized write can be detected appropriately. It is possible to avoid using the file data by mistake.

Further, in the reading operation, the terminal device 15 uses the fixed size file attribute data recorded in the file attribute area 120_n shown in FIG. 9 of the memory 35 of the wireless tags 10 and 10a as the fixed size and the first size shown in FIG. 2 is read based on the address B of 2 and the like.
Subsequently, the terminal device 15 reads the file data or the compressed file data recorded in the file data area 102 based on the address defined in the read file attribute data.
Thereby, the terminal device 15 can specify the address where the file attribute data in the recording area of the memory 35 is recorded without being affected by the variable-size file data or the like.
Further, the address where the file data or the like in the recording area is recorded can be specified from the address constituting the file attribute data recorded in the file position designation area 121 shown in FIG.

FIG. 16 is a hardware configuration diagram of the terminal device 15 shown in FIG.
As illustrated in FIG. 16, the terminal device 15 includes, for example, a display 41, an RF unit 42, an antenna 43, a memory 44, a processing unit 45, and a signature verification unit 46, which are connected via a data line 40. Yes.
The display 41 displays an image (for example, an advertisement image) according to the file data recorded in the wireless tag 10a based on the display signal from the processing unit 45.
The RF unit 42 performs wireless data exchange with the wireless tags 10 and 10 a via the antenna 43.
The memory 44 records the program PRG2 that defines the processing of the processing unit 45 and various data used for the processing of the processing unit 45.
The processing unit 45 comprehensively controls the processing of the terminal device 15 described above or later, based on the program PRG2.
The signature verification unit 46 verifies the validity of the signature data read from the signature area 143 shown in FIG. 6 or 8 of the wireless tag 10 a using the public key data of the writing device 11.

Hereinafter, an example of an operation of reading from the wireless tags 10 and 10a by the terminal device 15 will be described.
FIG. 17 illustrates an entire operation example of reading from the wireless tags 10 and 10a by the terminal device 15 illustrated in FIGS.
In the operation example described below, the processing unit 45 of the terminal device 15 illustrated in FIG. 16 reads data from the memory 35 of the wireless tags 10 and 10a via the RF unit 42 and the memory 44.
In addition, the processing unit 45 issues a read instruction to the memory access unit 34 of the wireless tags 10 and 10a.
Step ST41:
When the processing unit 25 of the writing device 11 inputs a write instruction from the computer 12 via the interface 21, writing in the tag data is prohibited from the memory 35 of the wireless tags 10 and 10 a via the RF unit 22 and the antenna 23. Reads data indicating presence or absence of function.
Step ST42:
Based on the data read in step ST41, the processing unit 45 determines whether or not the wireless tags 10 and 10a have a write prohibition function. If the processing unit 45 determines that the write prohibition function is provided, the processing unit 45 proceeds to step ST43. If not, the process proceeds to step ST45.
Specifically, when the writing device 11 reads the wireless tag 10, the process proceeds to step ST43, and when reading the wireless tag 10a, the process proceeds to step ST45.

SUP ST43:
The processing unit 45 reads file data or compressed file data from the file area 142 shown in FIG. 5 or the compressed file area 153 shown in FIG. 7 of the memory 35 of the wireless tag 10.
The read operation will be described later in detail.
Step ST44:
The processing unit 45 determines whether or not the reading in step ST43 is successful. If the processing unit 45 determines that the reading is successful, the processing unit 45 ends the processing. If not, the processing unit 45 performs error processing.

Step ST45:
The processing unit 45 reads file data, file attribute data, and the like from the memory 35 of the wireless tag 10a. The read operation will be described later in detail.
Further, the processing unit 45 reads the signature data from the signature area 143 shown in FIG. 6 or 8 of the memory 35 of the wireless tag 10a.
Step ST46:
The processing unit 45 issues a signature verification instruction to the signature verification unit 46.
In response to the signature verification instruction, the signature verification unit 46 verifies the validity of the signature data read in step ST45 using the public key data of the writing device 11.
Step ST47:
The processing unit 45 determines whether or not the condition that the reading in step ST45 is successful and the signature data is determined to be valid in step ST46 is satisfied. Otherwise, error handling is performed.

Hereinafter, details of the reading operation of the file data and the file attribute data in steps ST43 and ST45 shown in FIG. 17 will be described.
18 and 19 are flowcharts for explaining the operation.
Step ST51:
The processing unit 45 of the terminal device 15 illustrated in FIG. 16 receives a read instruction together with predetermined file name data, for example, in accordance with the execution of the program PRG2.
The processing unit 45 determines whether or not the file name data is valid. If it is determined that the file name data is valid, the processing unit 45 proceeds to step ST52, and if not, performs error processing.
For example, when the processing unit 45 receives a file name without “.html” as an identifier, it determines that it is not valid.

Step ST52:
4 and 5 based on the addresses recorded in the file location designation area 121 of the file attribute area 120_n shown in FIG. 10 in all the file table areas 103 of the memory 35 of the wireless tags 10 and 10a. The file name data recorded in the file name area 141 in the file data area 102 shown is read.
At this time, the processing unit 45 specifies the file position designation area 121 in the file attribute area 120_n based on the number of files indicated by the file number area 111 shown in FIG. 9 and the size of the file attribute area 120_n.
Step ST53:
The processing unit 45 determines whether or not the file name data read in step ST52 is the same as the file name data received in step ST51. If it is determined that there is the same file name data, the processing unit 45 proceeds to step ST54. If it is determined that there is nothing, error processing is performed.

Step ST54:
The processing unit 45 reads the file attribute data corresponding to the file name data received in step ST51 from the file attribute area 120_n shown in FIG. 9 of the memory 35 of the wireless tag 10.
Step ST55:
The processing unit 45 determines whether or not the reading in step ST54 is successful. If the reading is successful, the processing unit 45 proceeds to step ST58. If the reading is unsuccessful, the processing unit 45 proceeds to step ST56.
Step ST56:
The processing unit 45 determines whether or not the reading in step ST54 is less than or equal to a predetermined number of reprocessing times. If the processing unit 45 determines that the reading is less than or equal to the predetermined number of reprocessing times, the processing unit 45 returns to step ST54. .

Step ST58:
The processing unit 45 secures a recording capacity for reading file data from the wireless tags 10 and 10a in a buffer memory constituting a part of the memory 44 shown in FIG.
Step ST59:
In step ST58, the processing unit 45 determines whether or not the recording capacity has been secured in the buffer memory. If it is determined that the recording capacity has been secured, the processing unit 45 proceeds to step ST60, and otherwise performs error processing.

Step ST60:
The processing unit 45 reads the file data from the address in the file data area 102 read from the file position designation area 121 shown in FIG. 10 in the file attribute data read in step ST54 and records it in the memory 44.
Step ST61:
The processing unit 45 determines whether or not the reading in step ST60 is successful. If it is determined that the reading is successful, the processing unit 45 proceeds to step ST63, and if not, proceeds to step ST62.
Step ST62:
The processing unit 45 determines whether or not the number of times of reading in step ST60 is equal to or less than the predetermined number of reprocessing, and proceeds to step ST60 when determining that it is equal to or less than the predetermined number of reprocessing. Does error handling.

Step ST63:
The processing unit 45 determines whether or not the file data read from the memory 35 of the wireless tag 10 in step ST60 is compressed file data. If the processing unit 45 determines that the file data is compressed file data, the processing unit 45 proceeds to step ST64. End the process. Thereafter, the processing unit 45 reproduces the file data read from the memory 44 in accordance with an instruction from the user, and displays an image corresponding to the file data on the display 41.
Step ST64:
The processing unit 45 decompresses the compressed data read in step ST60 with a decompression method corresponding to the compression method indicated by the compression type read from the compression type area 152 shown in FIGS. 7 and 8 together with the compressed file data in step ST60.
Step ST65:
The processing unit 45 determines whether or not the expansion process of step ST64 is successful. If it is determined that the expansion process is successful, the processing unit 45 ends the process. If not, the processing unit 45 performs an error process.

As described above, according to the terminal device 15, when reading file data or the like from the wireless tag 10, since the wireless tag 10 has a write prohibition function, the read file data or the like is used reliably. it can.
Further, according to the terminal device 15, when reading out file data or the like from the wireless tag 10a, the validity of the file data can be verified based on the signature data recorded in the wireless tag 10a, and a third party can illegally In addition, it is possible to avoid erroneously using file data or the like written in the wireless tag 10a as valid.

In the data distribution system 1, the file attribute data is recorded from the second address B to the first address A in the memory 35 of the wireless tag 10 and has a fixed size.
Therefore, the terminal device 15 can easily process the address of the file attribute data based on the second address B and the fixed size of the file attribute data without using a complicated file system employed in a computer or the like. The address of the file data can be specified by simple processing based on the specified file attribute data. Thereby, the processing amount of the terminal device 15 accompanying the data reading from the memory 35 can be reduced.
Further, according to the terminal device 15, since the file attribute data corresponding to the file data is read after reading the file data from the memory 35, the file attribute data is read even if the reading fails during the reading of the file data. Therefore, inappropriate processing of file data based on file attribute data can be avoided.
Further, according to the terminal device 15, even when the file name data used in the read request is defined as a shortcut in the memory 35 of the wireless tags 10 and 10a, the corresponding file data can be read appropriately.

The present invention is not limited to the embodiment described above.
For example, in the embodiment described above, HTML file data is exemplified as the recording data of the present invention. However, the recording data may be data other than HTML file data.
In the above-described embodiment, the case where the data exchange between the writing device 11 and the terminal device 15 and the wireless tags 10 and 10a is performed wirelessly is exemplified, but the data transmission / reception may be performed by wire.
In the above-described embodiment, the memory 35 of the wireless tags 10 and 10a is exemplified as a recording medium on which the writing device 11 and the terminal device 15 perform writing and reading. However, the recording device 11 and the terminal device 15 are used in other computers and communication devices. The present invention may be applied to writing to and reading from a memory.

  In the above-described embodiment, the first address A is defined on the head address side and the second address B is defined on the tail address side in the memory 35 of the wireless tag 10.10a shown in FIG. In the present invention, the second address B may be defined on the head address side in the memory 35 and the first address A may be defined on the tail address side.

  The present invention is applicable to a recording medium having a rewrite prohibition function and a system for writing and reading record data to and from a recording medium not having the rewrite prohibition function.

FIG. 1 is an overall configuration diagram of a data distribution system according to an embodiment of the present invention. FIG. 2 is a configuration diagram of a wireless tag having the write prohibition function shown in FIG. FIG. 3 is a configuration diagram of a wireless tag that does not have the write prohibition function shown in FIG. FIG. 4 is a diagram for explaining the memory map configuration of the memory of the wireless tag shown in FIGS. 2 and 3. FIG. 5 is a diagram for explaining the file data area shown in FIG. 4 in the case where uncompressed file data is recorded in the wireless tag shown in FIG. 6 is a diagram for explaining the file data area shown in FIG. 4 in the case where uncompressed file data is recorded in the wireless tag shown in FIG. FIG. 7 is a diagram for explaining the file data area shown in FIG. 4 when the compressed file data is recorded in the wireless tag shown in FIG. FIG. 8 is a diagram for explaining the file data area shown in FIG. 4 when the compressed file data is recorded in the wireless tag shown in FIG. FIG. 9 is a diagram for explaining the file table area shown in FIG. FIG. 10 is a diagram for explaining the file attribute area shown in FIG. FIG. 11 is a hardware configuration diagram of the writing device shown in FIG. FIG. 12 is a flowchart for explaining the initialization operation of the wireless tag by the writing device shown in FIGS. 1 and 11. FIG. 13 is a flowchart for explaining the entire operation of writing file data or the like to the wireless tag by the writing device shown in FIGS. 1 and 11. FIG. 14 is a flowchart for explaining details of an operation of writing file data or the like to the wireless tag 10 in steps ST13 and ST18 shown in FIG. FIG. 15 is a continuation flowchart of FIG. 14 for explaining details of an operation of writing file data or the like to the wireless tag 10 in steps ST13 and ST18 shown in FIG. FIG. 16 is a hardware configuration diagram of the terminal device shown in FIG. FIG. 17 is a flowchart for explaining the entire operation of reading from the wireless tag by the terminal device shown in FIGS. FIG. 18 is a flowchart for explaining the details of the read operation of file data, file attribute data, and the like in steps ST43 and ST45 shown in FIG. FIG. 19 is a flowchart continued from FIG. 18 for explaining the details of the read operation of file data, file attribute data, and the like in steps ST43 and ST45 shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Data delivery system, 10 ... Wireless tag, 11 ... Writing apparatus, 12 ... Computer, 15 ... Terminal device, 31 ... Antenna, 32 ... RF part, 33 ... Power control part, 34, 34a ... Memory access part, 35 ... Memory, 21 ... Interface, 22 ... RF part, 23 ... Antenna, 24 ... Memory, 25 ... Processing part, 26 ... Signature generation part, 41 ... Display, 42 ... RF part, 43 ... Antenna, 44 ... Memory, 45 ... Processing unit, 46 ... signature verification unit

Claims (11)

A data processing apparatus for writing recording data to a recording medium,
Signature generating means for generating signature data for the recorded data;
When it is determined that the recording medium has a write prohibition function, a first operation of writing record data to the recording medium is performed, and when it is determined that the recording medium does not have a write prohibition function, A data processing apparatus comprising: writing means for performing a second operation of writing the signature data generated by the signature generation means and the recording data to the recording medium. The data processing apparatus according to claim 1, wherein the writing unit sets the recording medium in a write-inhibited state after recording the recording data on the recording medium in the first operation. The writing means sequentially writes the recording data of a plurality of variable sizes from the first address to the second address in the recording area of the recording medium in each of the first operation and the second operation. A plurality of fixed-size attribute data from the second address to the first address, each of which is defined in correspondence with each of the plurality of recording data and indicates a recording address in the recording area of the corresponding recording data. The data processor according to claim 1. The writing means writes the plurality of recording data in order to the continuous addresses in the recording area of the recording medium,
The data processing apparatus according to claim 1, wherein the recording medium is a recording medium in which erasure of the written recording data is performed by batch erasure of the entire previous recording area. A first step of determining whether or not the recording medium has a write prohibiting function;
A second step of writing record data to the recording medium when it is determined in the first step that the recording medium has write prohibition;
A third step of generating signature data for the recording data when it is determined in the first step that the recording medium does not have write prohibition;
A data processing method comprising: a fourth step of writing the signature data and the recording data generated in the third step into the recording medium. In each of the second step and the fourth step, a plurality of variable-size recording data are sequentially written from a first address to a second address in a recording area of the recording medium, and the plurality of recordings are recorded. A plurality of fixed-size attribute data is written in order from the second address to the first address, each of which is defined corresponding to each data and indicates a recording address in the recording area of the corresponding recording data. The data processing method according to claim 5. A first procedure for determining whether the recording medium has a write-inhibiting function;
A second procedure for writing record data to the recording medium when it is determined in the first procedure that the recording medium has write prohibition;
A third procedure for generating signature data for the recording data when it is determined in the first procedure that the recording medium does not have write prohibition;
A program that causes a data processing apparatus to execute a fourth procedure for writing the signature data and the recording data generated in the third procedure to the recording medium. A data processing device for reading recorded data from a recording medium,
Signature verification means for verifying signature data of the recorded data;
When it is determined that the recording medium has a write-inhibiting function, a first operation for reading and using recording data from the recording medium is performed, and when it is determined that the recording medium does not have a write-inhibiting function The signature data read from the recording medium is verified by the signature verification unit, and the recording data read from the recording medium is used on condition that the signature verification unit determines that the signature data is valid. A data processing apparatus comprising: a reading unit that performs the second operation. A plurality of variable-size recording data is recorded in order from the first address to the second address, and is defined in correspondence with each of the plurality of recording data, and the recording address in the recording area of the corresponding recording data When reading the recording data of the recording medium in which a plurality of fixed-size attribute data respectively recorded in order from the second address toward the first address,
The reading means reads the attribute data related to a read request from the recording area based on the second address and the fixed size, and makes the read request based on the recording address indicated by the read attribute data. The data processing apparatus according to claim 8, wherein the related recording data is read from the recording area. A data processing method for reading recorded data from a recording medium,
A first step of reading and using recorded data from the recording medium when it is determined that the recording medium has a write prohibition function;
A second step of verifying signature data read from the recording medium by the signature verification means when it is determined that the recording medium does not have a write prohibition function;
And a third step of using the recording data read from the recording medium on the condition that the signature data is determined to be valid in the second step. A program executed by a data processing device that reads recorded data from a recording medium,
A first procedure for reading out and using recording data from the recording medium when it is determined that the recording medium has a write-inhibiting function;
A second procedure for verifying signature data read from the recording medium by the signature verification means when it is determined that the recording medium does not have a write prohibition function;
A program executed by the data processing apparatus, comprising: a third procedure that uses the recording data read from the recording medium on the condition that the signature data is determined to be valid in the second procedure.

Images