JP2007034591A - Article information protection system, article information protection method, rfid tag, rfid tag management device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable only the owner of an article to which an RFID tag is attached to read article information stored in the RFID tag. <P>SOLUTION: This article information protection system is configured of an RFID tag for storing article information and a reader/writer for transferring data with the RFID tag by a radio wave. The RFID tag is provided with a memory for storing the ID code of the owner of the article to which the RFID tag is attached and a cryptographic key to be used by the owner, and the RFID tag is provided with an article information returning means for returning a response in which the article information is written to the reader/writer only when receiving a data reading command in which data matched with the ID code and the cryptographic key are written from the reader/writer. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an article information protection system, an article information protection method, an RFID tag, an RFID tag management apparatus, and a program, and in particular, article information protection that can protect article information stored in an RFID tag. The present invention relates to a system, an article information protection method, an RFID tag, an RFID tag management apparatus, and a program.

  In recent years, research on RFID (Radio Frequency Identification) tags has been promoted as a product identification and management technology that replaces barcodes. The RFID tag is also called an IC tag (IC tag) or a wireless IC tag, and is a minute wireless IC chip used for identifying an object. This wireless IC chip stores information such as its own identification code, and has the ability to transmit and receive information to and from the management system using radio waves.

  The RFID tag incorporates an IC memory for information storage, and can read and write information in a non-contact manner via a reader / writer on the management system side. Further, the amount of information that can be stored in the RFID tag is much larger than the amount of information that can be expressed by a barcode, and the information stored once can be rewritten. Therefore, for example, in addition to the product name and price, the RFID tag stores the product producer, production location, production date and time, product characteristics, etc., and attaches them to the product. Further, in addition to the product information, by adding a product distribution route and the like, it is possible to easily manage the product distribution.

  As described above, the information on the product (or product) stored in the RFID tag can be meaningful information for the manager or owner in the distribution channel of the product.

  However, in the conventional RFID tag, this product information (or product information) can be freely read out even by a manager or owner. For example, when a product is displayed at a store, for example, the customer may read the product information of the RFID tag to determine whether the product should be purchased. It is.

  On the other hand, when looking at the customer who purchased the product, when the information of the product that the customer owns is read by a third party other than the owner, Alternatively, the possession of the article) may leak to a third party, and the owner's privacy may be infringed.

  In order to cope with such a situation, there has been proposed a method of concealing data stored in an IC tag (RFID tag) (for example, see Patent Document 1).

  The following “IC tag data concealment method”, “IC tag data concealment method, IC tag, and product information management system and method” of Patent Document 1 described above describes the following IC tag data concealment method.

  That is, the data stored in the first IC tag attached to the product etc. is encrypted using the data stored in the second IC tag held by the customer and stored in the first IC tag. Conceal data And when reading the data in the 1st IC tag encrypted, it decrypts using the data memorize | stored in the 2nd IC tag. By doing so, only the person who has the second IC tag can read the data in the first IC tag correctly.

Japanese Patent Laying-Open No. 2005-092625 (page 4-7, FIGS. 1-4)

  In the data concealing method in the IC tag (RFID tag) described in Patent Document 1 described above, when data is encrypted, correct data is not read from a third party. However, there is a problem that anyone can read the data once it has been decrypted.

  The present invention has been made to improve the above-described circumstances. Therefore, the object of the present invention is to allow only the owner of an article attached with an RFID tag to store article information stored in the RFID tag. To provide an article information protection system, an article information protection method, an RFID tag, an RFID tag management apparatus, and a program that can be read.

  It is another object of the present invention to allow only a new owner to read out article information stored in the RFID tag even when ownership of the article is transferred.

An article information protection system according to the present invention is an article information protection system including an RFID tag that stores article information, and a reader / writer that exchanges data with the RFID tag by radio waves.
The RFID tag includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
The RFID tag sends a response that describes the article information only when it receives a data read command that describes data that matches the ID code and the encryption key from the reader / writer. It is provided with the article information return means to return to.

  Further, the RFID tag further includes an ID rewrite command in which a new ID code and a new encryption key of a new owner of the article from the reader / writer and data corresponding to the ID code and the encryption key are described. Only when the ID code is received, the ID code is rewritten with the new ID code, and an ID code rewriting means for rewriting the encryption key with the new encryption key is provided.

The article information protection method of the present invention is an article information protection method in an article information protection system comprising an RFID tag for storing article information, and a reader / writer that exchanges data with the RFID tag by radio waves. There,
The RFID tag includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
The RFID tag sends a response that describes the article information only when it receives a data read command that describes data that matches the ID code and the encryption key from the reader / writer. To return to.

  Further, the RFID tag further includes an ID rewrite command in which a new ID code and a new encryption key of a new owner of the article from the reader / writer and data corresponding to the ID code and the encryption key are described. Only when the ID is received, the ID code is rewritten to the new ID code, and the encryption key is rewritten to the new encryption key.

The RFID tag of the present invention is an RFID tag comprising a memory for storing article information of an article to which the RFID tag is attached, an ID code of the owner of the article, and an encryption key used by the owner,
The RFID tag includes an article information return means for returning a response describing the article information to the outside only when a data read command describing the data matching the ID code and the encryption key is received from the outside. It is characterized by that.

  In addition, when the RFID tag further receives an ID rewrite command describing a new ID code and a new encryption key of the new owner of the article and data matching the ID code and the encryption key from the outside. Only, ID code rewriting means for rewriting the ID code with the new ID code and rewriting the encryption key with the new encryption key is provided.

An RFID tag management apparatus according to the present invention is an RFID tag management apparatus that exchanges data by radio waves with an RFID tag that stores article information,
The RFID tag management device includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
When reading the article information from the RFID tag, the RFID tag management apparatus includes article information reading means for transmitting a data read command describing data matching the ID code and the encryption key to the RFID tag. It is characterized by that.

  Further, the RFID tag management device further includes the ID code and the encryption key stored in the RFID tag when the ID code and the encryption key are rewritten with a new ID code and a new encryption key of the new owner of the article. And an ID rewriting means for transmitting an ID rewrite command in which the encryption key, the new ID code, and the new encryption key are described to the RFID tag.

The program of the present invention includes an RFID tag computer including a memory for storing article information of an article to which an RFID tag is attached, an ID code of the owner of the article, and an encryption key used by the owner.
Only when a data read command that describes data that matches the ID code and the encryption key is received from the outside, a process that returns a response that describes the article information to the outside is executed.

  In addition, the program is further provided only when an ID rewrite command describing a new ID code and a new encryption key of the new owner of the article and data matching the ID code and the encryption key is received from the outside. The ID code is rewritten to the new ID code, and the process of rewriting the encryption key to the new encryption key is executed.

Furthermore, an RFID tag management apparatus computer comprising a memory for storing an ID code of an owner of an article to which an RFID tag is attached and an encryption key used by the owner;
When reading article information stored in the RFID tag from the RFID tag, a process of transmitting a data read command describing data matching the ID code and the encryption key to the RFID tag is executed. It is characterized by.

  The program further rewrites the ID code and the encryption key when rewriting the ID code and encryption key stored in the RFID tag with a new ID code and new encryption key of the new owner of the article. A process of transmitting an ID rewrite command describing a key, the new ID code, and the new encryption key to the RFID tag is executed.

  The article information protection system of the present invention includes an RFID tag that stores article information of an article to which an RFID tag is attached, an ID code of the owner of the article, and an encryption key used by the owner, and an RFID tag and data by radio waves. And a reading / writing device for transferring data.

  Only when the RFID tag receives a data read command that describes data that matches the ID code and the encryption key from the reader / writer, the RFID tag sends a response that describes the article information to the reader / writer. Return it.

  Therefore, only the current owner of the article can read the article information of the RFID tag, and the article information of the RFID tag can be protected.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing an embodiment of the article information protection system of the present invention.

  The present embodiment shown in FIG. 1 includes an RFID tag 20 attached to an article 30 and a reader / writer 10 that can exchange data with the RFID tag 20 by radio waves.

  The read / write device 10 includes a computer 100 that controls the operation of the entire read / write device 10.

  In addition, it includes an input / output means 110 connected to the computer 100 for exchanging data with the RFID tag 20 by radio waves, and an encryption / decryption means 120 for encrypting and decrypting data.

  Furthermore, a memory 130 serving as a storage device connected to the computer 100 is provided. The memory 130 stores an ID (identification) code 1301 as an identification code representing the owner of the article 30 and an encryption key 1302 used for data encryption and decryption. The memory 130 also stores a program 1305 for controlling the operation of the computer 100.

  Furthermore, the input unit 140 is connected to an input device 180 such as a keyboard or a card reader, and sends data input from the input device 180 to the computer 100. The data output from the computer 100 is output to the display 190. Output means 150 is provided.

  The RFID tag 20 includes a computer 200 that controls the operation of the entire RFID tag 20.

  In addition, it includes an input / output means 210 that is connected to the computer 200 and exchanges data with the reader / writer 10 by radio waves, and an encryption / decryption means 220 that encrypts and decrypts data.

  Further, a memory 230 that is a storage device connected to the computer 200 is provided. The memory 230 stores an ID code 2301 as an identification code representing the owner of the article 30 and an encryption key 2302 used for data encryption and decryption. In the memory 230, article information 2303 of the article 30 is also stored. The article information 2303 includes, for example, the name and price of the article 30, the producer and the production location, the production date and time, the characteristics of the article, and the like, but may be arbitrary information other than such information. The memory 230 further stores a program 2305 for controlling the operation of the computer 200.

  The means of the reader / writer 10 and the RFID tag 20 shown in FIG. 1 generally operate as follows.

  The input / output means 110 of the reader / writer 10 modulates data from the computer 100 into a radio signal that can be transmitted to the RFID tag 20 and sends it out. Further, the radio signal from the RFID tag 20 is received and demodulated, and the demodulated data is transferred to the computer 100.

  When the plaintext data, which is unencrypted data, and the encryption key for encryption are input from the computer 100, the encryption / decryption means 120 encrypts the plaintext data and outputs it to the computer 100. Further, when encrypted data that is encrypted data from the computer 100 and an encryption key for decryption are input, the encrypted data is decrypted and output to the computer 100.

  The input / output means 210 of the RFID tag 20 wirelessly modulates data from the computer 200 and sends it to the reader / writer 10. The radio signal from the input / output means 110 of the reader / writer 10 is demodulated and the demodulated data is passed to the computer 200.

  When the encryption / decryption means 220 receives plaintext data and an encryption key for encryption from the computer 200, the encryption / decryption means 220 encrypts the plaintext data and outputs it to the computer 200. Further, when the encrypted data and the encryption key for decryption are input from the computer 200, the encrypted data is decrypted and output to the computer 200.

  Next, the format of data exchanged between the reader / writer 10 and the RFID tag 20 will be described with reference to FIG.

  FIG. 2 is a diagram showing a format of data exchanged between the reader / writer and the RFID tag.

  In the present embodiment, command data for the RFID tag 20 is transmitted from the reader / writer 10, and response data for the command data is returned to the reader / writer 10 from the RFID tag 20. Therefore, in the present embodiment, command data transmitted from the reader / writer 10 is referred to as a command, and response data returned from the RFID tag 20 is referred to as a response.

  FIG. 2A shows a data format of the command 50, and the command 50 includes an instruction part 50-1 and an accompanying data part 50-2. The command section 50-1 describes the command content for the RFID tag 20. In the accompanying data section 50-2, when there is accompanying data required for execution of the instruction, the data is described.

  As an example of the command 50, a read command 51 is shown in FIG. The read command 51 is a command for reading the article information 2303 (see FIG. 1) stored in the RFID tag 20. A read command is written in the command section 51-1, and an ID code (encryption) is written in the accompanying data section 51-2. Note that “(encryption)” in the ID code (encryption) of the accompanying data portion 51-2 encrypts the ID code 1301 (see FIG. 1) stored in the memory 130 of the reader / writer 10. It means that it has been applied. Hereinafter, in other commands and responses, the notation “(encryption)” is used in the same meaning.

  FIG. 2B shows the data format of the response 60, and the response 60 is composed of a response type section 60-1 and an accompanying data section 60-2. The response type section 60-1 describes the type of response. In the accompanying data section 60-2, data obtained as a result of executing the command transmitted from the reader / writer 10 is described.

  As an example of the response 60, an encrypted data reply response 61 is shown in FIG. The encrypted data reply response 61 is used to encrypt the article information 2303 (see FIG. 1) stored in the RFID tag 20 and return the encrypted article information. The response type section 61-1 describes an encrypted data return flag, and the accompanying data section 61-2 describes article information (encrypted).

  As another example of the response 60, a plain text data reply response 62 is shown in FIG. The plaintext data reply response 62 is used to return the article information 2303 stored in the RFID tag 20 in a plaintext state without encryption. A plaintext data return flag is described in the response type section 62-1, and the article information is described in a plaintext state in the accompanying data section 62-2.

  Next, a first operation example of the present embodiment shown in FIG. 1 will be described with reference to FIGS.

  3 to 5 are first, second, and third flowcharts, respectively, for explaining the reading operation of the article information stored in the RFID tag.

  It is assumed that the memory 130 of the reader / writer 10 shown in FIG. 1 previously stores the ID code 1301 of the owner of the article 30 and the encryption key 1302 used by the owner.

  Further, it is assumed that the ID code 2301 of the owner of the article 30 and the encryption key 2302 used by the owner are stored in the memory 230 of the RFID tag 20 in advance. However, when the RFID tag 20 is in the initial state, or the owner of the article 30 does not need to set ownership, the article information 2303 stored in the RFID tag 20 is stored even by a third party other than the owner. If it is possible to read, an access free code (for example, a code of all 0 bits) is stored in the ID code 2301.

  First, as shown in FIG. 3, the reading / writing device 10 starts the reading operation of the article information in the RFID tag 20 (step A0 in FIG. 3).

  The computer 100 of the reader / writer 10 reads the ID code 1301 and the encryption key 1302 stored in the memory 130 (step A1). Next, the computer 100 sends the read ID code 1301 and encryption key 1302 to the encryption / decryption means 120 (step A2).

  The encryption / decryption means 120 encrypts the ID code 1301 using the encryption key 1302 from the computer 100, generates encrypted data (that is, ID code (encrypted)), and sends it to the computer 100 (step A3). .

  The computer 100 uses the encrypted data from the encryption / decryption means 120 to generate a read command 51 (format shown in FIG. 2 (a-1)) and send the read command 51 to the RFID tag 20. And sent to the input / output means 110 (step A4).

  The input / output means 110 modulates the read command 51 from the computer 100 into a radio signal that can be transmitted to and received from the RFID tag 20 and outputs it to the outside (step A5). The RFID tag 20 receives a radio signal from the input / output means 110 of the reader / writer 10 (step B0).

  Next, the RFID tag 20 that has received the wireless signal (read command 51) from the reader / writer 10 performs the operation shown in FIG.

  When the RFID tag 20 receives the radio signal from the reader / writer 10 (step B0 in FIG. 4), the input / output means 210 of the RFID tag 20 demodulates the received radio signal, extracts the read command 51, and extracts the computer. 200 (step B1).

  The computer 200 reads the ID code 2301 stored in the memory 230 to check whether the RFID tag 20 is in the ownership setting state, and checks whether the ID code 2301 is an access free code (step B2). ).

  If the ID code 2301 is not an access free code (not access free in step B2), it is determined that the ownership is set. Then, the computer 200 decrypts the encrypted data (ID code (encrypted) 51-2) in the read command 51 from the input / output means 210 in order to decrypt the encrypted data and the encryption key stored in the memory 230. 2302 is sent to the encryption / decryption means 220 (step B3).

  The encryption / decryption means 220 decrypts the encrypted data using the encryption key 2302 from the computer 200 and sends it to the computer 200 (step B4).

  The computer 200 compares the decrypted ID code with the ID code 2301 stored in the memory 230 (step B5).

  As a result of comparison, if the two do not match (no match in step B5), the wireless signal from the reader / writer 10 is recognized as not being transmitted to the own RFID 20, and the operation is terminated (step B7).

  When the two match (in step B5), the computer 200 confirms whether the command sent from the reader / writer 10 is the read command 51 (step B6).

  If it is not the read command 51 (No in Step B6), the operation is terminated (Step B7).

  If it is the read command 51 (Yes in Step B6), the computer 200 reads the article information 2303 and the encryption key 2302 stored in the memory 230 and sends them to the encryption / decryption means 220 (Step B8).

  The encryption / decryption means 220 encrypts the article information 2303 using the encryption key 2302 from the computer 200, generates encrypted data (that is, article information (encrypted)), and sends it to the computer 200 (step B9). ).

  Using the encrypted data from the encryption / decryption means 220, the computer 200 uses the encrypted data reply response 61 (format shown in FIG. 2 (b-1)) as response data to the reader / writer 10. ) And sends the encrypted data reply response 61 to the input / output means 210 (step B10).

  The input / output means 210 modulates the data from the computer 200 (in this case, the encrypted data reply response 61) into a radio signal that can be transmitted to and received from the reader / writer 10 and outputs the modulated signal to the outside (step B13). The reader / writer 10 receives the radio signal (in this case, the encrypted data reply response 61) from the input / output means 210 of the RFID tag 20 (step A10).

  In step B2 described above, if the ID code 2301 is an access free code (access free in step B2), the computer 200 determines whether the command sent from the reader / writer 10 is the read command 51 or not. Is confirmed (step B11).

  If it is not the read command 51 (No in Step B11), the operation is terminated (Step B7).

  If it is the read command 51 (Yes in Step B11), the computer 200 reads the article information 2303 stored in the memory 230, and the plaintext data reply response 62 (response data to the reader / writer 10). 2 is generated, and the plaintext data return response 62 is sent to the input / output means 210 (step B12). At this time, the article information 62-2 in the plaintext data reply response 62 is not encrypted, that is, plaintext data.

  The input / output means 210 modulates the data from the computer 200 (in this case, the plaintext data reply response 62) into a radio signal that can be transmitted to and received from the reader / writer 10, and outputs the modulated signal to the outside (step B13). The reader / writer 10 receives the radio signal (plain text data response response 62) from the input / output means 210 of the RFID tag 20 (step A10).

  Next, the reader / writer 10 that has received the wireless signal (encrypted data return response 61 or plaintext data return response 62) from the RFID tag 20 performs the operation shown in FIG.

  When the reader / writer 10 receives the radio signal from the RFID tag 20 (step A10 in FIG. 5), the input / output means 110 of the reader / writer 10 demodulates the radio signal received from the RFID tag 20, Data (encrypted data return response 61 or plaintext data return response 62) is extracted and sent to the computer 100 (step A11).

  The computer 100 confirms that the sent data is a reply response (encrypted data reply response 61 or plain text data reply response 62) (step A12).

  If it is not a reply response (No in step A12), the operation is terminated (step A13).

  If the response is a reply response (Yes in step A12), the computer 100 determines that the reply response response type section 60-1 (shown in FIG. 2B) is an encrypted data reply flag 61-1 (FIG. 2B-). 1) or plaintext data reply flag 62-1 (shown in FIG. 2 (b-2)) (step A14).

  If it is the encrypted data reply flag 61-1 (encrypted data in step A14), the computer 100 reads the encryption key 1302 stored in the memory 130, and in the encrypted data reply response 61 from the input / output means 110. The product information (encryption) 61-2 is sent to the encryption / decryption means 120 (step A16).

  The encryption / decryption means 120 decrypts the article information (encryption) 61-2 using the encryption key 1302, and sends the decrypted article information to the computer 100 (step A17).

  The computer 100 converts the decrypted article information into a form that can be displayed on the display 190, and then displays it on the display 190 through the output means 150 (step A18).

  In step A14 described above, when the plain text data reply flag 62-1 is set (plain text data in step A14), the computer 100 sends the article information 62-2 in the plain text data reply response 62 to the output means 150, and displays the display. 190 is displayed (step A15).

  Next, a second operation example of the present embodiment shown in FIG. 1 will be described with reference to FIGS.

  The second operation example of the present embodiment shows an operation when the ownership of the article 30 is transferred from the current owner to the new owner.

  First, the command and response data format used in the second operation example of this embodiment will be described with reference to FIG.

  FIG. 6 is a second diagram showing a format of data exchanged between the reader / writer and the RFID tag.

  FIG. 6A shows the data format of the command 50 again as shown in FIG. The command 50 includes an instruction part 50-1 and an accompanying data part 50-2.

  In the second operation example of the present embodiment, the status check command 53 shown in FIG. The status confirmation command 53 is a command for confirming the status of the ID code 2301 (see FIG. 1) stored in the RFID tag 20 (whether it is an access free code). A command for confirming the status is described in the command section 53-1, and nothing is described in the accompanying data section 53-2.

  FIG. 6 (a-4) shows the ciphertext ID rewrite command 54. The ciphertext ID rewrite command 54 is a command for rewriting the ID code 2301 stored in the RFID tag 20 with the ID code of the new owner of the article 30. In rewriting, this is a command for encrypting and transmitting the ID code of the new owner. The command section 54-1 describes a ciphertext ID rewrite command. In the accompanying data portion 54-2, the current ID code (encryption) which is the ID code of the current owner of the article 30 and the new ID code (which is the ID code of the new owner of the article 30) Encryption) and a new encryption key (encryption) that is the encryption key used by the new owner.

  FIG. 6 (a-5) shows a plaintext ID rewrite command 55. The plaintext ID rewrite command 55 is a command for rewriting the ID code 2301 stored in the RFID tag 20 with the ID code of the new owner of the article 30. In rewriting, the ID code of the new owner is a command that is transmitted in plain text without being encrypted. The command section 55-1 describes a plain text ID rewrite command. The accompanying data portion 55-2 includes a current ID code that is the ID code of the current owner of the article 30, a new ID code that is the ID code of the new owner of the article 30, and a new ownership The new encryption key, which is the encryption key used by the user, is written in plain text.

  FIG. 6 (b) shows the data format of the response 60 again as shown in FIG. 2 (b). The response 60 includes a response type unit 60-1 and an accompanying data unit 60-2.

  FIG. 6 (b-3) shows the status report response 63. The status report response 63 is used to send back the status of the ID code 2301 (see FIG. 1) stored in the RFID tag 20 (whether it is an access free code). In the response type section 63-1, a status report flag is described, and in the accompanying data section 63-2, status report data (ID code 2301 is an access free code) is described.

  FIG. 6B-4 shows an ID rewriting completion response 64. The ID rewrite completion response 64 returns information indicating that the process of rewriting the ID code 2301 (see FIG. 1) stored in the RFID tag 20 from the current owner ID code to the new owner ID code is completed. Used to do. An ID rewriting completion flag is described in the response type portion 64-1, and nothing is described in the accompanying data portion 64-2.

  Next, a second operation example of the present embodiment will be described in detail with reference to the flowcharts of FIGS.

  FIGS. 7 to 10 are first, second, third, and fourth flowcharts, respectively, for explaining the operation when the ownership of an article is transferred from the current owner to the new owner.

  As shown in FIG. 7, the reader / writer 10 starts an operation for changing the ID code in the RFID tag 20 (step C0 in FIG. 7).

From an input device 180 (keyboard / card reader, etc.) connected to the reader / writer 10,
A new ID code that is an ID code of a new owner to which the ownership of the article 30 is transferred and a new encryption key that is an encryption key used by the new owner are input through the input means 140 to the computer 100. (Step C1).

  The computer 100 generates a status confirmation command 53 (format shown in FIG. 6A-3) and sends it to the input / output means 110 (step C2).

  The input / output means 110 modulates the data (state confirmation command 53) from the computer 100 into a radio signal and outputs it to the outside (step C3). The RFID tag 20 receives a radio signal from the input / output means 110 of the reader / writer 10 (step D0).

  The input / output means 210 of the RFID tag 20 demodulates the received radio signal, extracts data (state confirmation command 53), and sends it to the computer 200 (step D1).

  The computer 200 reads the ID code 2301 stored in the memory 230 and checks whether it is an access free code (step D2).

  The computer 200 generates a status report response 63 (format shown in FIG. 6B-3) and sends it to the input / output means 210 (step D3). Here, the status report data 63-2 of the status report response 63 describes the status of whether or not the ID code 2301 is an access free code.

  The input / output unit 210 modulates the data (status report response 63) from the computer 200 into a radio signal and outputs it to the outside (step D4). The reader / writer 10 receives a radio signal from the input / output means 210 of the RFID tag 20 (step C4-0).

  Next, the reader / writer 10 that has received the radio signal (status report response 63) from the RFID tag 20 performs the operation shown in FIG.

  When the read / write device 10 receives a radio signal from the RFID 20 (step C4-0 in FIG. 8), the input / output means 110 of the read / write device 10 demodulates the received radio signal to obtain data (state declaration). The response 63) is taken out and sent to the computer 100 (step C4).

  The computer 100 receives the status report response 63 and confirms the status of the ID code 2301 stored in the RFID tag 20 from the status report data 63-2 of the status report response 63 (step C5).

  If the state of the ID code 2301 of the RFID tag 20 is not an access free code (not access free in step C5), the computer 100 uses the data (new ID code, new encryption key) input from the input device 180 and the memory 130. The ID code 1301 and the encryption key 1302 stored in are sent to the encryption / decryption means 120 (step C6).

  The encryption / decryption means 120 encrypts the data (new ID code, new encryption key) input with the ID code 1301 using the encryption key 1302 from the computer 100, and encrypts the encrypted data (that is, the current ID code ( Encryption), a new ID code (encryption), and a new encryption key (encryption)) are generated and sent to the computer 100 (step C7).

  The computer 100 uses the encrypted data from the encryption / decryption means 120 to generate a ciphertext ID rewrite command 54 (format shown in FIG. 6A-4) and sends it to the input / output means 110 (step). C8).

  The input / output means 110 modulates the data (ciphertext ID rewrite command 54) from the computer 100 into a radio signal and outputs it to the outside (step C10). The RFID tag 20 receives a radio signal (ciphertext ID rewrite command 54) from the input / output means 110 of the reader / writer 10 (step D5-0).

  In step C5 described above, when the state of the ID code 2301 of the RFID tag 20 is an access free code (access free in step C5), the computer 100 uses the plaintext ID rewrite command 55 (format shown in FIG. ) Is generated and sent to the input / output means 110 (step C9). Here, the accompanying data portion 55-2 of the plaintext ID rewrite command 55 includes a current ID code (an ID code 1301 stored in the memory 130), a new ID code input from the input device 180, and a new encryption key. Is described.

  The input / output means 110 modulates the data (plain text ID rewrite command 55) from the computer 100 into a radio signal and outputs it to the outside (step C10). The RFID tag 20 receives a radio signal (plain text ID rewrite command 55) from the input / output means 110 of the reader / writer 10 (step D5-0).

  Next, the RFID tag 20 that has received the wireless signal (the ciphertext ID rewrite command 54 or the plaintext ID rewrite command 55) from the reader / writer 10 performs the operation shown in FIG.

  When the RFID tag 20 receives a radio signal from the reader / writer 10 (step D5-0 in FIG. 9), the input / output means 210 of the RFID tag 20 demodulates the received radio signal and transmits data (ciphertext ID). The rewrite command 54 or the plaintext ID rewrite command 55) is taken out and sent to the computer 200 (step D5).

  The computer 200 reads the ID code 2301 stored in the memory 230 and checks whether it is an access free code (step D6).

  When the ID code 2301 is not an access free code (not access free in step D6), the computer 200 reads the encryption key 2302 stored in the memory 230 and reads data (ciphertext ID rewrite command) from the input / output means 210. The encrypted data (current ID code (encrypted), new ID code (encrypted), new encrypted key (encrypted)) described in the accompanying data section 54-2 in 54 is sent to the encryption / decryption means 220 ( Step D7).

  The encryption / decryption means 220 decrypts the encrypted data using the encryption key 2302 from the computer 200 and sends it to the computer 200 (step D8).

  The computer 200 compares the current ID code in the decrypted data with the ID code 2301 stored in the memory 230 (step D9).

  As a result of the comparison, if the two do not match (no match in step D9), the wireless signal from the reader / writer 10 is recognized as not being transmitted to the own RFID 20, and the operation ends (step D12).

  When the two match (in step D9), the computer 200 confirms that the command sent from the reader / writer 10 is the ciphertext ID rewrite command 54 (step D10). If it is not the ciphertext ID rewrite command 54 (No in step D10), the operation is terminated (step D12).

  If it is the ciphertext ID rewrite command 54 (Yes in Step D10), the computer 200 rewrites the ID code 2301 and the encryption key 2302 stored in the memory 230 with the decrypted new ID code and new encryption key (Step S10). D11).

  Then, the computer 200 generates an ID rewriting completion response 64 (format shown in FIG. 6B-4) and sends it to the input / output means 210 (step D15).

  The input / output means 210 modulates the data (ID rewrite completion response 64) from the computer 200 into a radio signal and outputs it to the outside (step D16). The reader / writer 10 receives the radio signal (in this case, the ID rewriting completion response 64) from the input / output unit 210 of the RFID tag 20 (step C11-0).

  If the ID code 2301 is an access free code in step D6 described above (access free in step D6), the computer 200 indicates that the command sent from the reader / writer 10 is the plaintext ID rewrite command 55. It is confirmed that there is (step D13). If it is not the plaintext ID rewrite command 55 (No in step D13), the operation is terminated (step D12).

  If it is the plaintext ID rewrite command 55 (Yes in step D13), the computer 200 rewrites the ID code 2301 and encryption key 2302 stored in the memory 230 into the plaintext ID rewrite sent from the reader / writer 10. The new ID code and new encryption key described in the accompanying data section 55-2 in the command 55 are rewritten (step D14). Then, the process proceeds to Step D15.

  Next, the reader / writer 10 that has received the wireless signal (ID rewrite completion response 64) from the RFID tag 20 performs the operation shown in FIG.

  When the reader / writer 10 receives the radio signal from the RFID 20 (step C11-0 in FIG. 10), the input / output means 110 of the reader / writer 10 demodulates the radio signal received from the RFID tag 20, Data (ID rewrite completion response 64) is extracted and sent to the computer 100 (step C11).

  The computer 100 receives the ID rewriting completion response 64, and displays on the display 190 through the output means 150 that the process of rewriting the ID code 2301 in the RFID tag 20 with the ID code of the new owner has been completed (step 190). C12).

  The embodiments of the present invention have been described in detail above.

  In the embodiment described above, when the RFID tag is accessed from the reader / writer, the ID code and encryption key stored in the reader / writer match the ID code and encryption key stored in the RFID tag. Only in such a case, data (article information) in the RFID tag is returned as a response.

  For this reason, only the current owner of the article to which the RFID tag is attached can read data (article information) stored in the RFID tag. Therefore, the product information in the RFID tag can be protected.

  Further, when the ID code in the RFID tag is set to an access free code, even a third party other than the current owner can read the data in the RFID tag.

  Therefore, there is an effect that anyone can read the data (article information) in the RFID tag as necessary.

  Furthermore, the data (ID code, encryption key) related to the current owner stored in the RFID tag can be rewritten to the ID code and encryption key of the new owner using the ID code of the current owner. .

  Therefore, there is an effect that the ownership of the article to which the RFID tag is attached can be transferred to the new owner with the consent of the current owner.

  After the ownership is transferred, a response from the RFID tag is returned only when the ID code and encryption key of the new owner are used, so that the product information in the RFID tag can be protected.

  A first embodiment of the present invention will be described with reference to FIG.

  FIG. 11 is a diagram illustrating Example 1 of the present invention.

  The first embodiment of the present invention shows an application example for preventing theft of displayed merchandise by using the article information protection system of the present invention in a store that sells merchandise. In the following description, components corresponding to those shown in FIGS. 1 and 6 are denoted by the same reference numerals or symbols, and the description thereof is omitted.

  In FIG. 11, merchandise 40 with the RFID tag 20 attached is displayed on the display shelf 52 in the store 50. RFID tags 20-1 to 20-n are attached to the products 40-1 to 40-n, respectively.

  Each RFID tag 20 (20-1 to 20-n) stores product information (product features, etc.) of the corresponding product 40 (40-1 to 40-n). Each RFID tag 20 (20-1 to 20-n) stores an access free code as an ID code.

  In addition, a reading / writing device 10 is installed in the vicinity of the entrance / exit 51 of the store 50. It is assumed that the reading / writing device 10 is installed at a position in the vicinity of the entrance / exit 51 after passing through a register or the like for paying the product 40.

  The reader / writer 10 accesses the RFID tag 20 attached to the product 40 every time the product 40 passes, that is, performs an operation of transmitting a command and receiving a response thereof. And

  When the product 40 is purchased by the customer and the purchase fee is paid, the ID code in the RFID tag 20 attached to the product 40 is rewritten with the customer's ID code. (The ID code rewriting operation is as described in FIGS. 7 to 10).

  Next, an operation when the product 40 tries to pass in front of the reader / writer 10 will be described.

  When the product 40 (any one of the products 40-1 to 40-n) tries to pass in front of the reader / writer 10, the RFID tag 20 attached to the product 40 is read from the reader / writer 10 with respect to the RFID tag 20. Then, the status confirmation command 53 (command shown in FIG. 6A-3) is transmitted.

  The RFID tag 20 that has received the status confirmation command 53 generates a status report response 63 (response shown in FIG. 6B-3) and returns it to the reader / writer 10.

  The reader / writer 10 refers to the status report data 63-2 in the status report response 63 and determines whether or not the ID code 2301 stored in the RFID tag 20 is an access free code.

  When the ID code 2301 is an access-free code, it is found that the ownership of the product 40 has not yet been transferred to the customer and is likely to be taken without permission. At this time, the reading / writing device 10 displays on the display 190 an alarm indicating that the product 40 has been taken out without permission. If the ID code 2301 stored in the RFID tag 20 is not an access free code, the ownership of the product 40 has already been transferred to the customer, so that the product 40 is passed as it is.

  As described above, according to the first embodiment, it is possible to determine whether the ownership of the product has been transferred to the customer. Therefore, it is possible to prevent theft of the product.

  A second embodiment of the present invention will be described.

  Example 2 of the present invention shows an application example in which drug inventory management and product explanation are facilitated by using the article information protection system of the present invention in a pharmacy that sells drugs. In addition, it also shows an application example in which a drug purchaser can protect privacy without knowing the possession of the drug by a third party.

  An RFID tag 20 is attached to each medicine sold at the pharmacy. In the RFID tag 20, in addition to the name and price of the medicine, information on how to use the medicine, precautions for use, expiration date, etc. is stored as article information 2303.

  A pharmacy clerk possesses a portable terminal (such as a mobile phone or a PDA (Personal Digital Assistance)) equipped with a reader / writer 10. The drug purchaser also has a portable terminal equipped with the reader / writer 10.

  The pharmacy clerk reads the article information 2303 of each medicine using a portable terminal equipped with the reading / writing device 10 and explains the medicine product to the medicine purchaser. (The reading operation of the article information is as described in FIGS. 3 to 5). The pharmacy clerk can also manage the inventory of the medicine with reference to the read article information 2303.

  If the drug is purchased by the purchaser, the ownership of the drug is transferred to the purchaser. That is, the ID code in the RFID tag 20 attached to the medicine is rewritten with the purchaser's ID code. (The ID code rewriting operation is as described in FIGS. 7 to 10).

  The purchaser of the medicine can take the medicine correctly by reading and referring to the article information 2303 of the medicine using the portable terminal equipped with the reading / writing device 10 possessed by the medicine purchaser. . Moreover, since the ownership of the medicine has been transferred to the purchaser, a third party cannot read the article information 2303 of the medicine.

  As described above, according to the second embodiment, the pharmacy clerk can easily perform the product description and inventory management of the medicine. In addition, the drug purchaser can take the drug correctly, and the third party does not know the possession of the drug, thereby protecting the purchaser's privacy.

It is a block diagram which shows one Embodiment of the goods information protection system of this invention. It is a figure which shows the format of the data exchanged between a reader / writer and an RFID tag. It is a 1st flowchart explaining the read-out operation | movement of the article information memorize | stored in the RFID tag. It is a 2nd flowchart explaining the read-out operation | movement of the article information memorize | stored in the RFID tag. It is a 3rd flowchart explaining the read-out operation | movement of the article information memorize | stored in the RFID tag. It is a 2nd figure which shows the format of the data transmitted / received between a reader / writer and an RFID tag. It is a 1st flowchart explaining operation | movement at the time of transferring the ownership of an article | item from a current owner to a new owner. It is a 2nd flowchart explaining operation | movement at the time of transferring the ownership of an article | item from a current owner to a new owner. It is a 3rd flowchart explaining the operation | movement at the time of transferring the ownership of an article | item from a current owner to a new owner. It is a 4th flowchart explaining operation | movement at the time of transferring the ownership of articles | goods from a current owner to a new owner. It is a figure explaining Example 1 of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Reading / writing device 100 Computer 110 Input / output means 120 Encryption / decryption means 130 Memory 1301 ID code 1302 Encryption key 1305 Program 140 Input means 150 Output means 180 Input device 190 Display 20 RFID tag 200 Computer 210 Input / output means 220 Dark Decryption means 230 Memory 2301 ID code 2302 Encryption key 2303 Article information 2305 Program 30 Article 40 Goods 50 Shop 51 Entrance / Exit 52 Display shelf

Claims (12)

An article information protection system comprising an RFID tag for storing article information, and a reader / writer that exchanges data with the RFID tag by radio waves,
The RFID tag includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
The RFID tag sends a response that describes the article information only when it receives a data read command that describes data that matches the ID code and the encryption key from the reader / writer. An article information protection system comprising article information return means for returning to an article.   The RFID tag further receives, from the reader / writer, an ID rewrite command that describes a new ID code and a new encryption key of the new owner of the article, and data that matches the ID code and the encryption key. 2. The article information protection system according to claim 1, further comprising: an ID code rewriting unit that rewrites the ID code with the new ID code and rewrites the encryption key with the new encryption key only when the ID code is used. An article information protection method in an article information protection system comprising: an RFID tag that stores article information; and a reader / writer that exchanges data with the RFID tag by radio waves,
The RFID tag includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
The RFID tag sends a response that describes the article information only when it receives a data read command that describes data that matches the ID code and the encryption key from the reader / writer. An article information protection method characterized by:   The RFID tag further receives, from the reader / writer, an ID rewrite command that describes a new ID code and a new encryption key of the new owner of the article, and data that matches the ID code and the encryption key. 4. The article information protection method according to claim 3, wherein the ID code is rewritten to the new ID code and the encryption key is rewritten to the new encryption key only when the ID code is used. An RFID tag comprising a memory for storing article information of an article to which the RFID tag is attached, an ID code of the owner of the article, and an encryption key used by the owner,
The RFID tag includes an article information return means for returning a response describing the article information to the outside only when a data read command describing the data matching the ID code and the encryption key is received from the outside. An RFID tag characterized by the above.   The RFID tag is further provided only when an ID rewrite command describing a new ID code and a new encryption key of the new owner of the article and data matching the ID code and the encryption key is received from the outside. 6. The RFID tag according to claim 5, further comprising ID code rewriting means for rewriting the ID code with the new ID code and rewriting the encryption key with the new encryption key. An RFID tag management apparatus that exchanges data by radio waves with an RFID tag that stores article information,
The RFID tag management device includes a memory for storing an ID code of an owner of an article to which the RFID tag is attached and an encryption key used by the owner,
When reading the article information from the RFID tag, the RFID tag management apparatus includes article information reading means for transmitting a data read command describing data matching the ID code and the encryption key to the RFID tag. An RFID tag management device characterized by that.   The RFID tag management device further rewrites the ID code and the encryption key stored in the RFID tag with a new ID code and a new encryption key of the new owner of the article. 8. The RFID tag management apparatus according to claim 7, further comprising ID rewriting means for transmitting an ID rewrite command describing an encryption key, the new ID code, and the new encryption key to the RFID tag. An RFID tag computer comprising a memory for storing article information of an article to which the RFID tag is attached, an ID code of the owner of the article, and an encryption key used by the owner;
Only when a data read command that describes data that matches the ID code and the encryption key is received from outside, a program that returns a response that describes the article information to the outside is executed.   The program further includes a new ID code and a new encryption key of the new owner of the article, and only when an ID rewrite command describing data matching the ID code and the encryption key is received from the outside. The program according to claim 9, wherein an ID code is rewritten to the new ID code, and a process of rewriting the encryption key to the new encryption key is executed. An RFID tag management apparatus computer comprising a memory for storing an ID code of an owner of an article to which an RFID tag is attached and an encryption key used by the owner;
When reading article information stored in the RFID tag from the RFID tag, a process of transmitting a data read command describing data matching the ID code and the encryption key to the RFID tag is executed. A program characterized by The program further rewrites the ID code and the encryption key stored in the RFID tag with a new ID code and a new encryption key of the new owner of the article. The program according to claim 11, wherein a process of transmitting an ID rewrite command describing the new ID code and the new encryption key to the RFID tag is executed.

Images