JP2005352814A - Wireless tag system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system capable of protecting individual's privacy without requiring a complicated circuit for a wireless tag itself nor spoiling convenience and usefulness of the wireless tag. <P>SOLUTION: At the same time the ID of the wireless tag T100 and related information are read in a mobile telephone K100 right after an article 104 is purchased, information in the wireless tag T100 is erased. When the function of the wireless tag T100 is secondarily used at a user's house 200, the information of the wireless tag T100 which is held by the mobile telephone K100 is written back to the original wireless tag T100. The users explicitly erases the information of the wireless tag attached to the purchased article to stop the wireless tag from functioning, and manages the information by the user himself or herself with a terminal that the user has to remove his/her wariness against privacy problems of the wireless tag. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a system for preventing privacy infringement by a wireless tag attached to a product, for example, a system that protects privacy by a user who purchases a product handling information on the wireless tag with his / her own intention.

  In recent years, methods for managing articles more easily and accurately by attaching wireless tags to the articles have been considered. For example, if each product in a box has a wireless tag, you can identify the type and number of items in the product by simply holding the reader without opening the box. Work can be greatly reduced. In addition, if the communication distance of the wireless tag is increased, a system that can clear a product only by passing through a gate can be realized by applying to a POS system. In each household, for example, the reading device installed in the refrigerator can read the information of the wireless tag attached to the food in the warehouse, so that the inventory can be known without opening the refrigerator. It is considered to be applied to various uses such as becoming a detailed information source.

  On the other hand, it is pointed out that there is a risk of misuse of information because the information of the wireless tag can be read even from a certain distance. For example, when a wireless tag can be attached to any product, you can see what's in the contents of the bag, know the price of clothes you wear, There is a possibility that privacy is infringed in various places, such as tracing an action by tracking an ID.

  Under such circumstances, in order to prevent infringement of privacy by the wireless tag, a method of encrypting information held by the wireless tag or a function of the wireless tag attached to the product when an individual purchases the product. A method of stopping or removing the wireless tag itself has been considered. However, the method of encrypting the information held in the wireless tag requires a circuit for encryption in the wireless tag, and has a complicated configuration. There are many problems such as the inability to perform secondary use.

  Recently, a method of protecting privacy without performing encryption has been considered (see, for example, Non-Patent Document 1).

  The contents of this prior art will be described with reference to FIG.

  In this example, the wireless tag memory is composed of a non-rewritable memory (ROM) and a rewriteable memory (EEPROM, FROM, etc.). The ROM stores a unique ID unique to the wireless tag, and an ID defined by the user can be written into the rewriteable memory. In addition, when an ID is written in the rewritable memory, the ID held in the ROM cannot be accessed.

Normally, a user can obtain detailed information of a product linked to the ID by reading the ID written in the ROM in the wireless tag with a reader. When a user purchases a product, the reader / writer writes an ID determined by the reader / writer in a rewritable memory in the wireless tag. Then, only the ID determined by the reader can be read by the reader, and the ID unique to the wireless tag held in the ROM cannot be read. Since only the user knows the relationship between the ID stored in the ROM and the ID written in the rewriteable memory, even if a third party steals and reads the ID of the rewriteable memory, the ID stored in the ROM is known. It will never be done. Therefore, the information of the product purchased by the user is not stolen by a third party, and the privacy of the user is protected. Further, by regularly updating the ID of the rewritable memory, it is possible to prevent the third person from tracking the user's position. Further, when necessary, the ID stored in the ROM can be read out by deleting the ID written in the rewriteable memory, so that the function of the wireless tag can be used secondarily.
Sozo INOUE, Hiroto YASUURA, “RFID Private Usage User-control Uniqueness”, [online], RFID Privacy Workshop @ MIT: November 15th, 2003 / Www. rfidprivacy. org / papers / inoue-slides. pdf>

  However, in the above conventional technique, there is a possibility that the contents of the rewriteable memory are changed to a third party, or the ID held in the ROM after being erased may be stolen, so that only the user himself / herself can access the rewriteable memory. A new mechanism is required to make writing impossible, and the configuration of the wireless tag becomes complicated. In addition, it is necessary to manage the relationship between the ID stored in the ROM and the ID written in the rewritable memory, and the user himself / herself periodically assigns the ID of the rewritable memory to support tracking. There is a problem in terms of convenience, for example, there is a possibility that the ID determined by the user may be the same as the ID of another wireless tag, which needs to be updated.

  The present invention solves such problems, and does not require a complicated circuit in the wireless tag itself, and does not impair the convenience and usefulness of the wireless tag. It is an object to provide a method in which privacy can be protected by erasing and stopping the function, and when necessary, the function of the wireless tag can be secondarily used at the user's own discretion.

  In order to solve the above problems, the present invention determines internal information holding means that cannot be read / written from the outside, output information holding means that can be read / written from the outside, received information, and information in the internal information holding means. A wireless tag control means capable of reading, erasing, and writing information in the output information holding means by generating a read, erase, and write procedure by communication with the wireless tag, And terminal means having data holding means for holding information read from the tag.

  In one embodiment of the present invention, the terminal means reads the information of the output information holding means through communication with the wireless tag and holds the information in the data holding means, and at the same time deletes the information of the output information holding means.

  In one embodiment of the present invention, the wireless tag has a function of deleting the information of the output information holding unit when the transmission of the information of the output information holding unit to the terminal unit is completed.

  In an embodiment of the present invention, the wireless tag cannot be read from the terminal means in a state where the information of the output information holding means is deleted.

  In an embodiment of the present invention, at least the information in the internal information holding unit and the information in the output information holding unit include the same ID information.

  In one embodiment of the present invention, the writing procedure by the wireless tag control means of the terminal means includes a procedure for transmitting at least ID information included in information read from the output information holding means of the wireless tag. The determination unit of the wireless tag compares and determines the ID information included in the information received from the terminal unit and the ID information in the internal information holding unit, and only when the ID information is the same Writing to the output information holding means can be performed.

  In one embodiment of the present invention, the internal information holding means of the wireless tag holds information including fixed identification information that is not output to the outside managed by a business operator, and the wireless tag The output information holding means holds information including ID information different from the fixed identification information.

  In one embodiment of the present invention, the writing procedure by the radio tag control means of the terminal means includes at least a procedure of transmitting the fixed identification information, and the determination means of the radio tag includes the The fixed identification information included in the information received from the terminal means is compared with the fixed identification information in the internal information holding means, and writing to the output information holding means can be performed only when they are identical.

  In an embodiment of the present invention, the terminal means includes communication means that can be connected to an information management server managed by a business operator, and the information management server holds the internal information holding means of the wireless tag. Information that associates the ID information held in the output information holding means is managed, and the terminal means is connected to the information management server and read from the wireless tag The unique identification information is acquired from the ID information included in the information.

  In an embodiment of the present invention, the information held by the output information holding means includes connection destination information to the information management server together with the ID information.

  In one embodiment of the present invention, the information in the output information holding means of the terminal means includes a connection destination to an ID management server that manages detailed information related to the ID information.

  In one embodiment of the present invention, the information in the output information holding means of the terminal means includes detailed information together with the ID information.

  In one embodiment of the present invention, the wireless tag includes a read mode in which the terminal means can only read information in the output information holding means, and the terminal means reads / writes data from / to the output information holding means. It has a full mode function that can be deleted, and the wireless tag setting means causes the wireless tag in the read mode to transition to the full mode by communication.

  In one embodiment of the present invention, the wireless tag setting means is linked to a POS system.

  In one embodiment of the present invention, the wireless tag in the full mode state and in the state in which the information of the output information holding unit is deleted, the information is written by the terminal unit, Transition to read mode.

  In one embodiment of the present invention, the wireless tag that has transitioned to the full mode state stops functioning if the information of the output information holding means is not deleted within a certain period of time.

  In one embodiment of the present invention, the terminal means has communication means capable of connecting to the Internet.

  According to the present invention, the information of the wireless tag attached to the purchased product is explicitly deleted by the user himself / herself to stop the function of the wireless tag, and the information is received by the terminal possessed by the user. By making it manageable by itself, it is possible to remove a sense of caution about the privacy problem of the wireless tag.

  Furthermore, in the present invention, the wireless tag itself does not require a complicated circuit, and the information of the wireless tag can be restored to the original state at the user's discretion, and the function can be used secondarily. It is possible to provide a system that can protect the privacy of an individual without loss.

  Embodiments of the present invention will be described below with reference to the drawings.

(Embodiment 1)
FIG. 1 shows a configuration according to Embodiment 1 of the present invention. In the present embodiment, an example of a system configuration using a wireless tag in the case of purchasing a product in a supermarket or the like is shown. In FIG. 1, 100 is a supermarket, 101 is a management server that manages associations between merchandise and RFID tag IDs, 102 is an information terminal that can read information on RFID tags installed in the supermarket 100, and 103 is a RFID tag A cash register for reading and clearing information, 104 is a product sold in the supermarket, K100 is a mobile phone with a reader / writer function and an information storage function of a wireless tag possessed by a user of the supermarket 100, 200 A user's home, T100, is a wireless tag. In addition, the wireless tag T100 has a readable / writable memory inside, and holds a unique ID and related information for each wireless tag in the memory.

  First, the operation of the wireless tag will be described.

  FIG. 2 shows an example of the structure of the wireless tag. T102 is an antenna of the wireless tag T100, T101 is a power supply circuit that generates power in the wireless tag T100 by radio waves from the antenna T102, and T103 is a control unit that controls transmission / reception of data and reading / writing to the memory in the wireless tag T100 , T104 is a comparison unit for comparing data, and the memory includes a memory T105 that cannot be read / written from the reader / writer and a memory T106 that can be read / written.

  The wireless tag generates power by the power supply circuit T101 based on radio waves from the reader / writer received by the antenna T102, and power is supplied to the whole. The control unit T103 reproduces data from the radio wave received from the reader / writer, and performs access control with the memory T106, data transmission to the reader / writer, and the like according to the data. The comparison unit T104 compares the received data with the data in the memory T105. The memory includes a read-only memory T105 and a read / write memory T106. The ID unique to the wireless tag is held in both the memory T105 and the memory T106. Further, the memory T106 can also hold related information in addition to the ID. Information read and written by the read / write command from the mobile phone is information held in the memory T106. Examples of transmitting and receiving information between the mobile phone K100 and the wireless tag T100 are shown in FIGS.

  FIG. 3 shows an operation example at the time of reading. When a read command is transmitted from the mobile phone K100 to the wireless tag T100, the control unit T103 in the wireless tag T100 reads the ID and related information held in the memory T106 and returns the data to the reader / writer.

  FIG. 4 shows an operation example at the time of erasing. The mobile phone K100 transmits the ID of the wireless tag T100 following the delete command. When the control unit T103 in the wireless tag T100 receives the delete command, the comparison unit T104 compares the received ID with the ID held in the memory T105, and if they match, all the information in the memory T106 is deleted. If the erasure is completed normally, ACK is returned to the mobile phone K100. If the IDs do not match or if information cannot be erased normally, NACK is returned. Note that ACK is data indicating normal completion, and NACK is data indicating abnormality.

  FIG. 5 shows an operation example at the time of writing. The mobile phone K100 transmits the ID of the wireless tag T100 and related information following the write command. When receiving the write command, the control unit T103 in the wireless tag T100 subsequently compares the received ID with the ID held in the memory T105 by the comparison unit. If they match, the control unit T103 further receives the ID in the memory T106. Write related information.

  Next, an example of the actual system operation will be described.

  All the products 104 in the supermarket 100 are attached with a wireless tag T100. The information held in the memory in the wireless tag T100 is a unique ID, and the association between the product 104 and the ID is managed by the management server 101. As a result, a system using a wireless tag can be constructed in the supermarket 100. For example, as shown in FIG. 1, the ID of the wireless tag T100 attached to the product 104 is read using the information terminal 102 installed in the supermarket 100, and is associated with the ID read from the management server 101. Detailed merchandise information can be obtained or the merchandise 104 can be settled simply by passing through the cash register 103.

  Next, an operation after the user purchases a product will be described.

  The ID of the wireless tag T100 attached to the product 104 is still valid after the user purchases it. The user performs an information acquisition operation immediately after purchasing the product 104 by using the reader / writer function of the mobile phone K100 possessed by the user. When the user starts an information acquisition operation using the mobile phone K100, the mobile phone K100 transmits a read command to the wireless tag T100. Upon receiving this command, the wireless tag T100 returns the held ID and related information to the mobile phone K100. The mobile phone K100 manages the ID and related information returned from the wireless tag T100 by storing them in an internal memory. Next, the mobile phone K100 transmits an erase command and the acquired ID. The wireless tag T100 receives the delete command and the ID, compares the ID with the ID held in the memory T105 by the comparison unit T104, and if it matches, deletes the ID and related information held in the internal memory T106, An ACK is returned to inform the mobile phone K100 that the erasure has been completed. With the above operation, the ID and related information of the wireless tag T100 are moved to the mobile phone K100, and the user can manage them by the mobile phone K100.

  For example, if the acquired information is managed for each ID, such as the information K101 on the memory in the mobile phone K100 shown in FIG. 6, the server information may be, for example, the URL of the server that manages each ID. For example, it is possible to access the server using the Internet connection function of the mobile phone K100, easily obtain detailed product information associated with the ID, and display the product information on the mobile phone K100.

  As a result, even if the user carries the product 104 after purchase and reads the information without knowing the information of the wireless tag T100 attached to the product 104, the user does not have any ID, so the purchased product 104 is known. Or reading IDs in various places, the user's behavior can be traced, the privacy of the user can be reliably protected, and the user can easily obtain product information. be able to.

  Next, when the user uses the function of the wireless tag T100 secondarily, an operation when the ID and related information are written again to the wireless tag T100 from which the information has been deleted will be described.

  FIG. 7 shows a state of transmission / reception with the mobile phone when writing to the wireless tag T100 whose ID is 005, for example. When writing information to the wireless tag T100, it is necessary to know the original ID of the wireless tag T100, but information in the memory T106 that can be read from the wireless tag T100 is erased and cannot be read. In addition, it is conceivable that the mobile phone K100 holds information on a plurality of wireless tags T100. Therefore, when writing, the ID and related information held in the mobile phone K100 are sequentially transmitted to the wireless tag. In the example of FIG. 7, the ID number 001 and related information are first transmitted following the write command. When receiving the write command, the wireless tag T100 compares the ID subsequently received by the comparison unit T104 with the ID held in the memory T105. Since the comparison results are different, the control unit T103 does not write and NACK Reply. Next, the ID number 002 and related information, and the ID number 003 and related information are transmitted in order. When the ID number 005 and the related information are transmitted, the ID of the target wireless tag T100 matches the ID of the target wireless tag T100, so the wireless tag T100 writes its own ID and related information in the memory T106, and ACK is returned to indicate completion and the mobile phone K100. To inform. The mobile phone K100 determines that the ACK has been successfully written back by this ACK, and deletes the written back ID and related information from the internal memory K101. Thereby, information can be correctly written in the original wireless tag T100, and the wireless tag T100 can be returned to the original state.

  With the configuration as described above, the function of the wireless tag T100 can be used in the supermarket 100, the privacy of the user can be protected, and the secondary use of the wireless tag T100 can be handled at the user's discretion. In addition, these functions can be realized by the wireless tag T100 having a simple configuration.

  In this embodiment, the method of transmitting information held in the mobile phone K100 in order when information is written from the mobile phone K100 to the wireless tag T100 has been described. However, the user can use the mobile phone K100 on the mobile phone K100. A method may be used in which an ID is manually selected and transmitted.

  In this embodiment, the memory of the wireless tag T100 is configured to use two types of memory, the read-only memory T105 and the readable / writable memory T106. However, only the readable / writable memory is used, The area may be divided into two areas, that is, a memory area where only reading is performed and a memory area where reading / writing is performed.

  In this embodiment, the ID is transmitted following the deletion command, and the information in the memory T106 in the wireless tag T100 is deleted when the IDs match in the wireless tag T100. However, the ID is transmitted. Instead, only the delete command may be transmitted, and the control unit T103 of the wireless tag T100 may delete the information in the memory T106 by receiving this command.

  Further, in the present embodiment, the related information is the URL of the server that manages the ID, but other information such as information on the product itself may be used.

  In the present embodiment, the example in which the mobile phone K100 erases the information in the memory T106 in the wireless tag T100 has been shown. However, when the transmission of the information to the mobile phone K100 is completed, the control unit T103 stores the information in the memory T106. It may be configured to have a function of erasing the information.

  In the present embodiment, the management server 101 is configured to be operated in the supermarket 100. However, the management server 101 is configured to be managed separately from the supermarket 100, such as a supplier that collectively manages the IDs of the wireless tags T100. The information terminal 102, the cash register 103, and the mobile phone K100 may be connected to the management server 101 by communication means such as the Internet so that detailed information on the product can be obtained from the ID of the wireless tag T100.

  In this embodiment, the mobile phone K100 having the reader / writer function of the wireless tag T100 is used. However, a mobile terminal such as a PDA or a reader / writer device owned by the user may be used.

  Moreover, although the example of the supermarket 100 was shown in this Embodiment, it cannot be overemphasized that it can apply also to other retailers.

(Embodiment 2)
FIG. 8 shows the configuration of the wireless tag according to Embodiment 2 of the present invention.

  In Embodiment 1, the IDs are written in both the memory T105 and the memory T106. However, in this embodiment, an identification number that is not output to the outside is written in the memory T105 in the wireless tag T100. Is configured to hold ID and related information. In this case, the operations for deleting and writing information on the wireless tag T100 from the mobile phone K100 are different from those in the first embodiment.

  First, in this embodiment, an operation when deleting information of the wireless tag T100 will be described.

  Similar to the first embodiment, the mobile phone K100 transmits an ID following the delete command. When receiving the delete command, the control unit T103 in the wireless tag T100 compares the received ID with the ID held in the memory T106 by the comparison unit T104, and erases the information in the memory T106 if they match. If the erasure is completed normally, ACK is returned to the mobile phone K100.

  Next, in the present embodiment, an operation in writing information of the wireless tag T100 will be described.

  FIG. 9 shows an operation of writing information to the wireless tag T100 in the present embodiment. The second embodiment is different from the first embodiment in that an identification number different from the ID is transmitted following the write command. When receiving the write command, the control unit T103 in the wireless tag T100 compares the received identification number with the identification number held in the memory T105 by the comparison unit T104. If they match, the control unit T103 continues in the memory T106. Write the received ID and related information. In this case, the mobile phone K100 needs to acquire the identification number of the target wireless tag T100 in advance, but the identification number held in the memory T105 in the wireless tag T100 is not output to the outside. It cannot be acquired from the tag T100. Therefore, a mechanism for acquiring an identification number in advance is required.

  FIG. 10 shows an example of an identification number acquisition procedure.

  When the user starts the information acquisition operation of the wireless tag T100 with the mobile phone K100, the mobile phone K100 first transmits a read command to the wireless tag T100. Upon receiving this command, the control unit T103 of the wireless tag T100 returns the ID and related information held in the memory T106 to the mobile phone K100. Next, the mobile phone K100 transmits an erase command and the acquired ID. The control unit T103 of the wireless tag T100 receives the erasure command and the ID, compares it with the ID held in the memory T106 by the comparison unit T104, and if the ID matches, the ID and related information held in the internal memory T106. Is deleted and ACK is returned to inform the mobile phone K100 that the deletion has been completed.

  Next, the identification number-ID management server 300 indicated in the related information determined in advance or acquired using the communication function of the mobile phone K100 is accessed, and the ID acquired from the wireless tag T100 is transmitted. The identification number-ID management server 300 that has received the ID returns an identification number corresponding to the ID to the mobile phone K100. With this operation, the mobile phone K100 can obtain an identification number corresponding to the ID acquired from the wireless tag T100, and can write to the wireless tag T100.

  As described above, when the ID is known to others and the user does not intend, it is possible to prevent unauthorized writing to the wireless tag T100. Furthermore, the identification number-ID management server 300 can be accessed only by the registered mobile phone K100, or the identification number-ID management server 300 first accesses the identification number-ID management server 300 for the certain identification number. , And since the identification number is not transmitted to any cell phone K100 other than the first accessed cell phone K100 thereafter, the exchange between the cell phone K100 and the identification number-ID management server 300 is restricted, thereby further improving safety. Will be able to.

  In this embodiment, only the identification numbers are compared during the write operation to the wireless tag T100. However, both the identification number and the ID are held in the memory T105, and are received following the write command. It may be configured such that the writing operation can be performed more safely and reliably by comparing both the identification number and the ID.

  In this embodiment, the mobile phone K100 having the reader / writer function of the wireless tag T100 is used. However, a portable terminal such as a PDA having a function of communicating with the identification number-ID management server 300, or a reader owned by the user / A writer device may be used.

(Embodiment 3)
FIG. 11 shows the configuration of the wireless tag T100 in the third embodiment of the present invention. The present embodiment is different from the first embodiment in that the mode concept is given to the wireless tag T100.

  The mode switching unit T107 in the wireless tag is in a state (read mode) in which only the normal ID can be read. In this state, the control unit T103 operates only for the read command. Since this operation is the same as that of the first embodiment, a description thereof will be omitted. When a delete command or a write command is received, NACK is returned without performing the instructed operation. When the wireless tag T100 receives the mode switching command, the mode switching unit T107 in the read mode is changed to a readable / writable state (read / write mode). In this state, the control unit T103 operates for all commands, and returns ACK when the processing is completed. The transmission / reception operation for each command is the same as in the first embodiment. When the mode switching unit T107 in the wireless tag receives the write command and completes the write operation in the read / write mode, the mode switching unit T107 changes to the read mode again.

  FIG. 12 is an example of application to the system in the present embodiment.

  In the present embodiment, reference numeral 105 denotes a register with a setting function that can change the mode of the wireless tag.

  The wireless tag T100 attached to a normal product is in a state (read mode) in which only ID and related information can be read. As a result, it is possible to prevent the ID and related information of the wireless tag T100 from being erased or changed illegally. As a result, in order to obtain detailed product information from the ID of the RFID tag T100 and related information, it is possible to use not only the information terminal 102 installed in the supermarket 100 but also the mobile phone K100 owned by the user. It becomes.

  When the user purchases the product 104, the ID and related information of the RFID tag T100 are read and cleared at the cash register 105. At the same time, a mode change command is transmitted from the cash register 105 to the RFID tag T100, and the received RFID tag is received. The mode switching unit T107 in T100 is changed to the read / write mode. Thereby, after purchasing the product 104, the user can immediately perform the information acquisition operation of the wireless tag T100. Since this operation is the same as that of the first embodiment, a description thereof will be omitted.

  Similarly to the first embodiment, the user can write the ID and related information in the wireless tag T100 by the mobile phone K100 in order to secondary use the function of the wireless tag T100. At this time, the mode switching unit T107 in the wireless tag T100 is changed to the read mode simultaneously with the completion of the write operation. As a result, it is possible to prevent the ID of the wireless tag T100 from being illegally deleted or changed during secondary use.

  In addition, when the information acquisition operation of the wireless tag 100 is not performed by the mobile phone K100 for a certain period of time after the mode is changed at the cash register 105, the wireless tag 100 has a function that does not completely operate by itself. For example, even when the user forgets the information acquisition operation after purchase, the privacy can be surely protected.

  The privacy protection method according to the present invention is a method in which, after a user purchases a product, information in the wireless tag is managed by his / her own judgment, and the wireless tag can be returned to the original state when necessary. Further, no complicated circuit is required for the wireless tag to realize this method. For this reason, it is necessary to keep the cost of the wireless tag itself low, and it is a particularly effective method in the retail industry where it is required to explicitly indicate that the privacy of the user who purchased the product is protected. .

The figure which shows an example applied to the supermarket of the privacy protection system based on Embodiment 1 of this invention The figure which shows the structural example of the wireless tag based on Embodiment 1 of this invention. The figure which shows the example of transmission / reception at the time of the information reading between a mobile telephone and a wireless tag based on Embodiment 1 of this invention The figure which shows the example of transmission / reception at the time of the information erasure | elimination between the mobile telephone and wireless tag based on Embodiment 1 of this invention The figure which shows the example of transmission / reception at the time of the information writing between the mobile telephone and wireless tag based on Embodiment 1 of this invention The figure which shows the example of information arrangement | positioning on the memory in a mobile telephone based on Embodiment 1 of this invention The figure which shows an example of the method in the case of writing back the information from a mobile telephone to a wireless tag based on Embodiment 1 of this invention. The figure which shows the structural example of the wireless tag based on Embodiment 2 of this invention. The figure which shows the example of transmission / reception at the time of the information writing between the mobile telephone and wireless tag based on Embodiment 2 of this invention The figure which shows the acquisition example of the identification number currently hold | maintained at the wireless tag based on Embodiment 2 of this invention The figure which shows the structural example of the wireless tag based on Embodiment 3 of this invention. The figure which shows an example applied to the supermarket of the privacy protection system based on Embodiment 3 of this invention A diagram showing an example of a conventional privacy protection system

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Supermarket 101 Management server 102 Information terminal 103 Cash register 104 Goods 105 Radio tag setting function cash register 200 User's house 300 Identification number-ID management server T100 Wireless tag T101 Power supply circuit T102 Antenna T103 Control part T104 Comparison part T105 Read only memory T106 Read / Writable memory T107 Mode switching unit T200 Conventional wireless tag K100 Mobile phone with wireless tag reader / writer function and information storage function K101 Data arrangement on the mobile phone memory

Claims (17)

Internal information holding means that cannot be read and written from the outside,
An externally readable / writable output information holding means;
A wireless tag having received information and determination means for determining information in the internal information holding means;
RFID tag control means that can read, erase, and write procedures by communication with the RFID tag, and can read, erase, and write information in the output information holding means;
Data holding means for holding information read from the wireless tag, and terminal means having
A wireless tag system comprising: 2. The terminal device according to claim 1, wherein the terminal unit reads information in the output information holding unit through communication with the wireless tag and holds the information in the data holding unit, and at the same time, deletes the information in the output information holding unit. Wireless tag system. The wireless tag has a function of deleting the information of the output information holding unit when the transmission of the information of the output information holding unit to the terminal unit is completed. The described wireless tag system. The wireless tag system according to any one of claims 1 to 3, wherein the wireless tag cannot be read from the terminal means in a state where the information of the output information holding means is deleted. . 5. The ID information is included in at least information in the internal information holding unit and information in the output information holding unit, according to any one of claims 1 to 4. Wireless tag system. The writing procedure by the RFID tag control means of the terminal means includes a procedure of transmitting ID information included in at least the information read from the output information holding means of the RFID tag,
The determination unit of the wireless tag compares and determines the ID information included in the information received from the terminal unit and the ID information in the internal information holding unit, and only when the ID information is the same as the output information holding unit 6. The wireless tag system according to claim 5, wherein writing is possible. The internal information holding means of the wireless tag holds information including fixed identification information that is not output to the outside managed by the operator,
5. The output information holding unit of the wireless tag holds information including ID information different from the fixed identification information. The wireless tag system described in 1. The writing procedure by the wireless tag control means of the terminal means includes a procedure for transmitting at least the fixed identification information,
The determination unit of the wireless tag compares and determines the fixed identification information included in the information received from the terminal unit and the fixed identification information in the internal information holding unit, and outputs only when they are the same 8. The wireless tag system according to claim 7, wherein writing can be performed on the information holding means. The terminal means includes a communication means that can be connected to an information management server managed by a business operator,
The information management server manages information that associates the fixed identification information held in the internal information holding unit of the wireless tag with the ID information held in the output information holding unit,
The said terminal means connects to the said information management server, and acquires the said specific identification information from the said ID information contained in the information read from the said radio | wireless tag, The Claim 7 or Claim 8 characterized by the above-mentioned. Wireless tag system. 10. The information held by the output information holding unit includes connection information to the information management server together with the ID information. 11. Wireless tag system. The information in the output information holding means of the terminal means includes a connection destination to an ID management server that manages detailed information on the ID information. The wireless tag system according to any one of 10. 11. The RFID tag system according to claim 1, wherein the information in the output information holding unit of the terminal unit includes detailed information together with the ID information. . The wireless tag has a read mode in which the terminal means can only read information in the output information holding means, and a full mode function in which the terminal means can read / write / delete the output information holding means. Have
The wireless tag system according to any one of claims 1 to 12, wherein the wireless tag setting unit causes the wireless tag in the read mode to transition to the full mode by communication. The wireless tag system according to claim 13, wherein the wireless tag setting unit is linked to a POS system. The wireless tag that is in the state of the full mode and in which the information of the output information holding unit has been deleted transitions to the read mode when information is written by the terminal unit. The wireless tag system according to claim 13 or claim 14. The wireless tag that has transitioned to the full mode state stops functioning if the information of the output information holding means is not deleted within a certain period of time.
The wireless tag system according to claim 13 or 14. The RFID tag system according to any one of claims 1 to 16, wherein the terminal unit includes a communication unit that can be connected to the Internet.

Images