JP2007156656A - Radio authentication tag, radio authentication tag system, and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an RFID tag having a data rewriting function of a memory circuit from only a permitted limited person, and a function of enabling control of an externally connected object to be controlled to a working state. <P>SOLUTION: When a radio circuit 201 of an RFID tag 2 receives both user authentication information and control information from an originating unit 1, an authentication circuit 202 authenticates by collating user identification information stored in a memory circuit 203 with the received user authentication information. Only in case of a successful authentication result, the authentication circuit 202 permits rewriting a data recorded in the RFID tag 2, and transmits control information to a control circuit 204. The control circuit 204 then generates a device control command, and transmits the command to a device control circuit 302 in a controller 3. Based on the device control command, the device control circuit 302 controls a device A 303a (for example, a key) of the externally connected object to a lock/unlock state. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a wireless authentication tag, a wireless authentication tag system, and an authentication method for transmitting ID information (Identity: identification information) recorded on an IC chip to the outside with a wireless signal (RF signal (Radio Frequency)).

  An RFID tag (wireless ID tag) has a region for storing a unique ID (identifier) and various data in an IC chip, and has recently been used as a device for managing the dynamics and information of articles and structures. Is widely used. Such an RFID tag includes a small IC chip that records information and a small antenna that wirelessly transmits information recorded on the IC chip to the outside. For example, an RFID tag has a small IC chip with a width of about 0.4 mm, a depth of 0.4 mm, and a height of about 0.1 mm, which is attached to an article or embedded in a structure near the center of a small antenna. Used. Therefore, when the reader / writer is held over the RFID tag, information recorded on the IC chip in a non-contact manner (that is, information on attributes of individual articles or structures) can be read.

An RFID tag having an authentication function (or a security function) is also known in order to prevent information recorded on an IC chip from being intentionally read or rewritten by a third party. In such an RFID tag with an authentication function, only an authorized and authorized user is given an access right (or an operation right) for controlling recorded information of the RFID tag. For example, a technology is disclosed that attaches an RFID tag with an access right function to a rental bicycle and prohibits writing or reading of management data by a third party until the bicycle is rented to the user and returned. (See Patent Document 1). Furthermore, only when the first digital signature and the first secret key on the RFID tag side match the second digital signature and the second secret key on the reader / writer side, the information on the RFID tag is read by the reader / writer. A technique of an RFID tag with an authentication function that can control the above is also disclosed (see Patent Document 2).
JP 2000-259808 A (see paragraph numbers 0034 to 0048 and FIGS. 1 to 4) Japanese Unexamined Patent Publication No. 2004-166208 (see paragraph numbers 0032 to 0059 and FIGS. 1 and 2)

  However, the RFID tag of Patent Document 1 activates / deactivates the read / write function by transmitting and demodulating a special wireless signal to the RFID tag, and cancels the reading and writing of the management data recorded on the RFID tag. Or prohibited. Therefore, since a function for authenticating a unique ID for a user is not implemented, anyone who knows the operation method using a special wireless signal can operate or change the internal data of the RFID tag. Can do. Therefore, the internal data of the RFID tag may be easily rewritten by a third party who knows the operation method. In addition, although the RFID tag of Patent Document 2 has a function for authenticating a user, since authentication is performed using a technique for matching the digital signature and secret key of the RFID tag side and the reader / writer side, Authentication technology itself becomes extremely complicated. Further, the RFID tags of Patent Documents 1 and 2 do not have a control function of bringing another controlled object from the RFID tag into an operating state based on the authentication result.

  The present invention has been made in view of the above-described problems, and includes a function that allows only authorized persons to rewrite data in a storage circuit and a function that can control an externally connected controlled object. An object of the present invention is to provide a wireless authentication tag, a wireless authentication tag system, and an authentication method.

  The wireless authentication tag of the present invention has been created to achieve the above object, and is a wireless authentication tag including a wireless circuit and a storage circuit (storage means), wherein the authentication circuit (authentication means) The user authentication is performed based on the authentication result obtained by comparing the user identification information (ID) stored in the storage circuit with the user authentication information received from the transmitting device by the wireless circuit. If the authentication is successful, the access right is recognized and the rewriting of data in the storage circuit is permitted. Further, if the authentication is successful, the controller is controlled to bring the externally connected device to be controlled into an operating state. If the authentication fails, no control information is transmitted to the control circuit, so the controller does not control the device at all. The controller can be controlled via a connection circuit (connection means).

  According to the present invention, a wireless authentication tag, a wireless authentication tag system, and a wireless authentication tag system having a function that allows only authorized authorized persons to rewrite data in a storage circuit and a function that can control a controlled object of external connection to an operating state, and An authentication method can be provided.

<< Summary of Invention >>
The outline of an RFID tag system according to the best mode for carrying out the present invention (hereinafter referred to as “embodiment”) will be described below.

  The RFID tag system includes a transmitting device that transmits a wireless signal including user authentication information and control information, and desired information is recorded in advance, and information recorded on the RFID tag system is read by the wireless signal from the transmitting device. An RFID tag that permits rewriting of information recorded therein only when the user authentication information is valid, and a device that is connected to the RFID tag by wire and is externally connected by control information only when the user authentication information is valid It is the structure provided with the controller which operates.

  That is, in the RFID tag system of the present embodiment, when the transmitting device (reader / writer) transmits a radio signal including user authentication information and control information to the RFID tag, the RFID tag records itself by the normal operation of the transmitting device. The information being read is read. However, the information recorded on the RFID tag can be rewritten only when the user authentication information received by the RFID tag from the transmitting device matches the user identification information recorded on the RFID tag and the user authentication information is valid. The Further, only when the user authentication information is valid, the externally connected device is activated by the control of the controller connected to the RFID tag.

  According to such an RFID tag system, only a limited person is allowed to rewrite data recorded in the RFID tag, and the externally connected controller performs predetermined control so that the device to be controlled is activated. can do. As a result, rewriting of data recorded on the RFID tag can be prohibited for an unauthorized third party, and inadvertent operation of the device to be controlled can be prohibited.

<< First Embodiment >>
Hereinafter, an RFID tag system according to the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an RFID tag system according to the present embodiment. The RFID tag system 100 realizes an authentication function by a transmitting device 1 that transmits and receives user authentication information and control information by radio signals and an RF signal (wireless signal) from the transmitting device 1 and reads and writes data recorded on itself. RFID tag 2, a controller 3 externally connected to the RFID tag 2 and controlled by the RFID tag 2, and various devices externally connected to the controller 3 and controlled by the RFID tag 2 (device A 303a and device B 303b) It is the composition provided with. The RFID tag 2 and the controller 3 are detachable. Details of the method for attaching and detaching the RFID tag 2 and the controller 3 will be described later.

  The transmission device 1 is a device for transmitting and receiving a transmission message signal used by a user to operate the RFID tag 2 and the controller 3. Therefore, the user sets user authentication information and control information, which will be described later, with respect to the transmitting device 1 and operates the RFID tag 2 by transmitting and receiving a signal of an outgoing message to the RFID tag 2 by RF (radio frequency). can do.

  The RFID tag 2 includes a radio circuit 201 that performs processing of an RF signal transmitted to and received from the transmitting device 1, an authentication circuit (authentication unit) 202 that extracts user authentication information included in the RF signal and performs authentication processing. A storage circuit (storage means) 203 for storing user identification information including a user ID, a password, an access right, etc., and a control circuit (control means) 204 for sending a device control command to the outside when authentication is successful, A display (display means) 205 for displaying the authentication result and a tag side connection circuit (connection means) 206 serving as an interface for connecting to the controller 3 are provided.

  The wireless circuit 201 receives radio waves transmitted from the transmitter 1 wirelessly, or supplies power to the inside of the RFID tag 2 by electromagnetic wave energy received by an RF transmission method such as an electromagnetic induction method or a microwave method. can do.

  The authentication circuit 202 collates the outgoing message from the transmission device 1 received by the wireless circuit 201 with the user identification information stored in the storage circuit 203 such as the user ID, password, access right, etc., and succeeded in user authentication. Only in this case, control information is transmitted to the control circuit 204. The detailed operation of the authentication circuit 202 will be described later.

  The storage circuit 203 is configured by a RAM (Random Access Memory) or the like, and can store user identification information of a plurality of users. This storage circuit 203 refers to or adds user identification information stored in itself by processing of the authentication circuit 202 by an authentication circuit control command (authentication means control command) included in the outgoing message received from the transmission device 1. Or can be deleted.

  The control circuit 204 operates only when authentication by the authentication circuit 202 is successful. The control circuit 204 checks the connection status between the tag side connection circuit 206 of the RFID tag 2 and the controller side connection circuit 301 of the controller 3, and the controller 3 via the tag side connection circuit 206 and the controller side connection circuit 301. The device control command can be transmitted to the device control circuit 302. Details of the control circuit 204 will be described later.

  The display unit 205 is a means for displaying an authentication result that has been subjected to user verification by the authentication circuit 202, and can display an authentication success and an authentication failure result on an LED or a liquid crystal display.

  The tag side connection circuit 206 is connected to the controller side connection circuit 301 by wire and is contact-coupled. The tag side connection circuit 206 is a circuit for detecting the connection status of the controller 3 with the controller side connection circuit 301. When the control circuit 204 receives a connection status notification request, the tag side connection circuit 206 is connected / not connected. Any state is returned to the control circuit 204.

  The controller 3 includes a controller side connection circuit 301 serving as an interface with the RFID tag 2 and a device control circuit 302 that receives a device control command from the RFID tag 2 and controls one or a plurality of externally connected devices. ing. The controller 3 is provided with a plurality of connection ports for externally connecting a plurality of devices, and is externally connected to a plurality of devices (for example, device A 303a and device B 303b) by a connection method such as RS-232C. Can do.

  There are three methods for supplying power to the controller 3. The first power supply method is a method of supplying power to the controller 3 from the RFID tag 2 side when the RFID tag 2 and the controller 3 are in a connected state. The second power supply method is a method in which the controller 3 is provided with a power source such as a battery and supplies power inside itself. The third power supply method is a method of supplying power to the controller 3 from an external device (for example, the device A 303a or the device B 303b) attached to the controller 3.

  The controller-side connection circuit 301 is connected to the tag-side connection circuit 206 in a wired manner, and can transmit a device control command transmitted from the control circuit 204 of the RFID tag 2 to the device control circuit 302. The device control circuit 302 is a circuit for processing a device control command transmitted from the controller side connection circuit 301. The device control circuit 302 confirms the state of the device and is connected to a plurality of devices (device A 303a and device A 303a). The device B303b) can be controlled.

  Next, a specific shape and operation of the RFID tag system shown in FIG. 1 will be described. FIG. 2 is an external perspective view of the first embodiment in which the RFID tag system shown in FIG. 1 is developed into a specific shape. That is, FIG. 2 shows a configuration state of the RFID tag system in which the controller 3 in which the device A 303 a is integrated is connected to the RFID tag 2.

  As shown in FIG. 2, the shape of the RFID tag 2 and the controller 3 is such that the shape of one convex portion and the other concave portion correspond to each other so that they can be combined or separated. In addition, when there are various types of uneven shapes of the RFID tag 2 and the controller 3, the combination of the RFID tag 2 and the controller 3 can be uniquely determined, and due to an incorrect combination due to the difference in the shape of the RFID tag 2 and the controller 3. It becomes possible to prevent coalescence. The RFID tag 2 and the controller 3 may be easily separated as shown in FIG. 2, but may be shaped so as not to be easily separated once combined.

  The operation of the RFID tag system of FIG. 2 will be described in more detail with reference to FIG. As shown by arrows A and B in FIG. 2, the circuit configuration of the RFID tag system 100 as shown in FIG. 1 is formed at the timing when the tag side connection circuit 206 and a part of the controller side connection circuit 301 come into contact with each other. That is, at the timing when the tag side connection circuit 206 and the controller side connection circuit 301 are connected, communication via the connection portion between the control circuit 204 of the RFID tag 2 and the device control circuit 302 of the controller 3 becomes possible. The circuit 202 compares the user authentication information transmitted from the transmission device 1 with the user identification information stored in the storage circuit 203. If the authentication circuit 202 determines that the user authentication information is valid, the authentication circuit 202 transmits control information to that effect to the control circuit 204. The control circuit 204 generates a device control command based on the received control information, and transmits the device control command to the device control circuit 302 of the controller 3 via the tag side connection circuit 206 and the controller side connection circuit 301. To do. Thus, the device control circuit 302 can slide the device A 303a in the vertical direction as indicated by the arrow C in FIG. 2 by the received device control command.

  In the RFID tag system of the first embodiment, a case where a key is applied to the device A 303a is shown. This key is configured so that it can be put in and out (slided) up and down by a solenoid (not shown). Thus, when the tag side connection circuit 206 and the controller side connection circuit 301 come into contact with each other and the device control circuit 302 of the controller 3 normally receives the device control command, the key of the device A 303a is controlled by the control of the device control circuit 302. Once the RFID tag 2 and the controller 3 are combined at a predetermined position, the key of the device A 303a is inserted into the key hole 207 by a device control command. When the key is locked in this way, the RFID tag 2 and the controller 3 cannot be separated.

  Note that the key of the device A 303a can be slid up and down in the controller 3 by a device control command input to the device control circuit 302 based on valid user authentication information. If the user authentication information is not valid, device control is performed. Since no control command is input to the circuit 302, the key of the device A 303 a cannot be slid up and down in the controller 3. Therefore, if the user authentication information is not valid, the RFID tag 2 and the controller 3 cannot be combined or locked.

  That is, if the user authentication information is not valid, no device control command is input to the device control circuit 302. Therefore, as shown in FIG. 2, the key of the device A 303a is left protruding from the controller 3, and the device A 303a The protrusion of the key gets in the way, and the RFID tag 2 and the controller 3 cannot be slid and combined. However, when the tag side connection circuit 206 and the controller side connection circuit 301 come into contact with each other and the device control circuit 302 of the controller 3 normally receives the device control command from the control circuit 204 of the RFID tag 2, the key of the device A 303a is the controller 3 Therefore, the RFID tag 2 and the controller 3 can be combined while being slid. Then, at the timing when both are united, the key of the device A 303a protrudes from the controller 3 by the device control command and is inserted into the key hole 207 of the RFID tag 2 so that the key is locked together with the combination of both.

  As described above, according to the present embodiment, only authorized limited users are allowed to rewrite data recorded in the RFID tag 2, and the externally connected controller 3 is controlled to perform control. The target devices 303a and 303b are permitted to be activated. As a result, it is possible to prohibit unauthorized users from rewriting data recorded in the RFID tag 2 and to inadvertently operate the devices 303a and 303b to be controlled. Therefore, it is possible to prevent the data recorded in the RFID tag 2 by a third party from being intentionally rewritten, the devices 303a and 303b being operated intentionally, or being accidentally operated.

<< Second Embodiment >>
In the second embodiment, a specific example in which the RFID tag system is applied to an expansion slot and an expansion board of a computer system will be described. FIG. 3 is a block diagram showing the configuration of the RFID tag system in the second embodiment. Since the internal configuration of each block of the RFID tag system 110 according to the second embodiment is the same as the block diagram of the RFID tag system 100 shown in FIG. However, in the RFID tag system 110, an expansion board controller for using a key as the device A 303a externally connected to the controller 3 and ON / OFF controlling the power by turning the bus ON / OFF as the externally connected device B 303b. 1 is different from FIG.

  FIG. 4 is an external perspective view showing a specific shape when the RFID tag system 110 of this embodiment is applied to an expansion slot and an expansion board of a computer system. In FIG. 4, a computer system 401 configured as a control panel has a plurality of expansion slots 402 formed on the main body side, and a corresponding expansion board 403 is inserted into each expansion slot 402. Further, the controller 3 is installed in the vicinity of each expansion slot 402, and the RFID tag 2 is installed on each corresponding expansion board 403. Note that the controller 3 provided in the vicinity of each expansion slot 402 and the RFID tag 2 provided in each expansion board 403 are installed corresponding to positions where they can be combined.

  In addition, a key is applied as the device A 303a connected to the controller 3 on the expansion slot 402 side, and an expansion board control device that performs power control and data input / output control of the expansion board 403 is applied as the device B 303b.

  As an initial state when the RFID tag system 110 according to the second embodiment is applied to a computer system, the controller 3 is fixed with a key protruding as a device A 303a above the expansion slot 402 in the computer system 401. In addition, the RFID tag 2 in which user identification information is stored in advance by the transmitting device 1 is fixed to the expansion board 403 to be inserted into the expansion slot 402.

  With this configuration, when the expansion board 403 is to be inserted into the expansion slot 402, the key of the controller 3 is protruded according to the same operating principle as in FIG. 2 described above, so the expansion board 403 is inserted into the expansion slot 402. I can't. However, as described above, when there is an access right to control the control circuit 204 of the RFID tag 2 when the connection circuits 206 and 301 of the RFID tag 2 and the controller 3 are in contact with each other, that is, the control circuit When a normal device control command is transmitted from 204, the device control command of the controller 3 can be controlled by the device control command of the control circuit 204, and the key of the device A 303 a is slid up and down inside the controller 3. Can be made. As a result, the key of the device A 303a is temporarily stored in the controller 3, so that the expansion board 403 can be inserted (mounted) into the expansion slot 402 to combine the RFID tag 2 and the controller 3.

  Further, after the RFID tag 2 and the controller 3 are combined, the device control circuit 302 of the controller 3 can lock the key by the control by the normal device control command. Further, the key can be arbitrarily unlocked (released) by a normal device control command of the device control circuit 302. In other words, only authorized limited users can perform key up / down slide and key lock / unlock operations based on the user authentication information transmitted from the transmitter 1 to the RFID tag 2. As a result, an operation of inserting the expansion board 403 into the expansion slot 402 of the computer system 401 and an operation of extracting the expansion board 403 from the expansion slot 402 can be performed. 4, the RFID tag 2 is fixed to the upper part of the expansion slot 402 in the computer system 401, and the controller 3 is fixed to the corresponding position of the expansion board 403 inserted into the expansion slot 402. Good.

  Further, by connecting a port of an expansion board control device as another device B 303b to the device control circuit 302 of the controller 3, it is possible to perform power-on control, data input / output control, and the like of the expansion board 403. . That is, the bus is turned on at the timing when the expansion board 403 is inserted into the expansion slot 402 and the controller 3 is immediately turned on. As a result, the device control circuit 302 of the controller 3 can control the expansion board 403 via the expansion board control device of the device B 303b so that data input / output is not performed. A failure of the board 403 can be prevented in advance. Furthermore, it is possible to prevent erroneous insertion and removal of the expansion board 403.

<< Third Embodiment >>
In the third embodiment, a specific example in which the RFID tag system is applied to a storage shelf with a door and the door will be described. FIG. 5 is a block diagram showing the configuration of the RFID tag system in the present embodiment. The internal configuration of each block of the RFID tag system 120 in the present embodiment is the same as the block diagram of the RFID tag system 100 in FIG. However, the RFID tag system 120 is different from the RFID tag system 100 of FIG. 1 in that a key is used as the device A 303a, a key status indicator is used as the device C303c, and a communication device is used as the device D303d. . Note that the communication device of the device D303d is connected to the key state management terminal 6 via the network 7.

  FIG. 6 is an external perspective view showing a specific shape when the RFID tag system 120 of the third embodiment is applied to a storage shelf with a door and the door. In FIG. 6, a plurality of doors 502 are provided on the surface side of the storage shelf 501 with a door, and each door 502 can be opened and closed to store a desired article. Each controller 3 is installed at the lower end of each door 502, and the RFID tag 2 is installed at the position of the storage shelf with door 501 corresponding to the controller 3 when each door 502 is closed.

  That is, the RFID tag system 120 is in an arrangement state in which the RFID tag 2 is fixed to the door-equipped storage shelf 501 and the controller 3 is fixed to the door 502 side. At this time, the controller 3 has a key status indicator that displays a key as the device A 303a and a key lock / unlock status as the device C303c, and a key status management terminal 6 that manages the key status as the device D303d. Communication devices that perform communication processing are connected to each other. Note that any device is controlled by a device control command included in the RF signal from the transmitter 1, and the control method will be described later.

  In the RFID tag system shown in FIGS. 5 and 6, as in the first embodiment shown in FIGS. 1 and 2, the RFID tag 2 and the connection circuits 206 and 301 of the controller 3 are in contact with each other. In addition, when there is an access right to control the control circuit 204, the device control circuit 302 of the controller 3 can be controlled by a device control command from the control circuit 204. As a result, the key of the device A 303a is slid up and down. Can do. Thereby, when the key is once stored in the controller 3 and the door 502 is closed to the storage shelf 501 with door, the RFID tag 2 and the controller 3 can be combined. Further, after the RFID tag 2 and the controller 3 are combined, the key of the device A 303a can be locked. Furthermore, the key of the device A 303a can be unlocked as necessary. That is, only an authorized person can perform operations such as sliding the key of the device A 303a up and down and locking / unlocking the key. As a result, the door 502 is opened and closed. Is possible.

  The key status display of the device C303c is a display that displays the lock / unlock status of the key, and normally displays it using a display, an LED, or the like. Further, the communication device of the device D303d refers to the lock / unlock state of the key and notifies the key state management terminal 6 of the state (that is, the key lock / unlock state) via the network 7. it can. As a result, the key state management terminal 6 can centrally manage the key state of the storage shelf with door 501 even from a distance, and the administrator can grasp the open / close state of the storage shelf with door 501 in real time at hand. . In contrast to the arrangement state of FIG. 6, the controller 3 can be fixed to the storage shelf with door 501 and the RFID tag 2 can be fixed to the door 502 side.

<< 4th Embodiment >>
In the fourth embodiment, a transmission message transmitted from a transmission device used in the RFID tag system will be described. FIG. 7 is a diagram illustrating a configuration of a transmission message of a transmission device used in the RFID tag systems 100, 110, and 120. That is, a transmission message as shown in FIG. 7 is transmitted from the transmission device 1 to the RFID tag system, whereby a series of authentication from the first embodiment to the third embodiment and control of an externally connected device are performed. It can be performed.

  As shown in FIG. 7, the outgoing message transmitted from the transmitter 1 is roughly divided into user authentication information 111 and control information 112. The user authentication information 111 is information used for authentication control in the authentication circuit 202 of the RFID tag 2, and the control information 112 is information of a device externally connected in the control circuit 204 of the RFID tag 2 and the device control circuit 302 of the controller 3. Information used for control.

  The user authentication information 111 includes an authentication circuit control command 114 and user identification information 113 including a user ID, a password, and an access right. The authentication circuit control command 114 is a command that operates in the authentication circuit 202 of the RFID tag 2, and a storage circuit control command 114 a that registers, deletes, and refers to user identification information stored in the storage circuit 203. Two command systems of a control circuit transmission command 114b for transmitting the control information 112 to the control circuit 204 are prepared and prepared.

  The storage circuit control command 114 a can add, delete, and refer to the user ID, password, and access right stored in the storage circuit 203. The control circuit transmission command 114b can transmit the control information 112 to the control circuit 204 only when the authentication is successful, and can activate the control circuit 204. Whether each of the storage circuit control command 114 a and the control circuit transmission command 114 b is processed is determined based on the access right stored in the storage circuit 203. These authentication circuit control commands 114 can notify the display unit 205 of authentication success and authentication failure when collating with the user identification information 113 stored in the storage circuit 203.

  The control information 112 includes a control circuit control command 115 and a device control command 116 that is a command group for controlling a plurality of devices such as a device A control command, a device B control command, and a device C control command. Has been. In the RFID tag systems 100 and 110, the device C control command is not used, and in the RFID tag system 120, the device B control command is ignored.

  The control circuit control command 115 is a command that operates in the control circuit 204, inquires about the connection status of the controller side connection circuit 301 corresponding to the tag side connection circuit 206, and sends a device control command 116 to the device control circuit 302 of the controller 3. Can be sent.

  The device control command 116 is a command that operates in the device control circuit 302 of the controller 3, and is a command group for controlling a plurality of devices connected to the controller 3 (that is, a device A control command, a device B control command, And device C control command). The device control command 116 changes its command content depending on the type of device connected to the controller 3 and the control content.

  The device control circuit 302 of the controller 3 is configured so that each device such as a device A, a device B, and a device C connected to the controller 3 by an individual command such as a device A control command, a device B control command, and a device C control command. Can be controlled.

<< 5th Embodiment >>
In the fifth embodiment, an internal processing flow of the authentication circuit 202 in the RFID tag will be described. FIG. 8 is a flowchart showing the flow of internal processing of the authentication circuit in the RFID tag of the present invention. First, the authentication circuit 202 of the RFID tag 2 receives a transmission message transmitted from the transmission device 1. As shown in FIG. 7, the outgoing message received by the authentication circuit 202 includes an authentication circuit control command 114, user identification information 113, and control information 112 (step S101). Next, the authentication circuit 202 determines the type of command whether the received authentication circuit control command 114 is the storage circuit control command 114a or the control circuit transmission command 114b (step S102).

  If it is determined in step S102 that the received authentication circuit control command 114 is the storage circuit control command 114a, the user ID stored in the storage circuit 203, the password, the access right, and the user identification information 113 included in the outgoing message, Are verified (step S103).

  If the authentication is successful in the authentication verification in step S103, the display 205 is notified of the authentication success, and information indicating that the authentication has been successful is displayed on the display 205 (step S104). Then, the user ID, password, and access right are additionally registered, deleted, or referred to the storage circuit 203 by the received storage circuit control command 114a (step S106).

  If authentication fails in the authentication verification in step S103, the authentication failure is notified to the display unit 205 and information indicating that the authentication has failed is displayed on the display unit 205, as in the case of successful authentication. (Step S105), the memory circuit 203 ends the process without performing any operation.

  In the determination of step S102, if the received authentication circuit control command 114 is the control circuit transmission command 114b, it is stored in the storage circuit 203 in the same manner as the processing in the case where the authentication circuit control command 114a is described above. Authentication is performed by comparing the user ID, password, and access right with the user identification information 113 included in the outgoing message (step S107).

  Further, when the authentication is successful in the authentication collation in step S107, the display 205 is notified of the authentication success, and information indicating that the authentication is successful is displayed on the display 205 (step S108). Then, the control information 112 is transmitted to the control circuit 204 by the received control circuit transmission command 114b (step S110). On the other hand, when the authentication fails in the authentication verification in step S107, the display 205 is notified of the authentication failure, and information indicating that the authentication has failed is displayed on the display 205 (step S109). The process ends without transmitting control information 112 to 204.

  Next, an internal processing flow of the control circuit 204 in the RFID tag 2 will be described. FIG. 9 is a flowchart showing the flow of internal processing of the control circuit in the RFID tag of the present invention. First, the control circuit 204 receives the control information 112 transmitted from the authentication circuit 202 by the control circuit transmission command 114b (step S201). The control information 112 received by the control circuit 204 includes a control circuit control command 115 for controlling the control circuit 204 and a device control command 116 for controlling various devices externally connected to the controller 3. .

  Further, the control circuit 204 uses the control circuit control command 115 to inquire about the connection status with the controller side connection circuit 301 to the tag side connection circuit 206, and in response to the tag side connection circuit 206, the controller side connection A connection state is determined as to whether the circuit 301 is connected or not (step S202). If the tag side connection circuit 206 is connected to the controller side connection circuit 301, the device control command 116 is transmitted to the device control circuit 302 of the controller 3 (step S203). If the tag side connection circuit 206 is not connected to the controller side connection circuit 301, the processing of the control circuit control command 115 is terminated without performing any processing.

  According to the RFID tag system of the present invention, only an authorized limited user operates user identification information stored in the RFID tag simply by setting and transmitting desired data to a transmitting device (reader / writer). be able to. Further, by performing user authentication, various devices externally connected via the controller can be controlled. Accordingly, the RFID tag and RFID tag system having an extremely high security level can be effectively used for information management of articles.

It is a block diagram which shows the structure of the RFID tag system which is one Embodiment of this invention. It is the appearance perspective view which developed the RFID tag system of a 1st embodiment in the concrete shape. It is a block diagram which shows the structure of the RFID tag system of 2nd Embodiment. It is an external appearance perspective view which shows the specific shape at the time of applying the RFID tag system of 2nd Embodiment to the expansion slot and expansion board of a computer system. It is a block diagram which shows the structure of the RFID tag system in 3rd Embodiment. It is an external appearance perspective view which shows the specific shape at the time of applying the RFID tag system of 3rd Embodiment to the storage shelf with a door, and its door. It is a figure which shows the structure of the transmission message of the transmission device used for a RFID tag system. It is a flowchart which shows the flow of the internal process of the authentication circuit in a RFID tag. It is a flowchart which shows the flow of the internal process of the control circuit in a RFID tag.

Explanation of symbols

1 transmitter 3 controller 2 RFID tag (wireless authentication tag)
6 Key state management terminal 7 Network 100, 110, 120 RFID tag system 111 User authentication information 112 Control information 113 User identification information (identification information)
114 Authentication circuit control command 114a Storage circuit control command 114b Control circuit transmission command 115 Control circuit control command 116 Device control command 201 Wireless circuit 202 Authentication circuit (authentication means)
203 Memory circuit (memory means)
204 Control circuit (control means)
205 Display (display means)
206 Tag side connection circuit (connection means)
207 keyhole
301 Controller side connection circuit 302 Device control circuit 303a Device A
303b Device B
303c Device C
303d Device D
401 Computer system 402 Expansion slot 403 Expansion board 501 Storage shelf with door 502 Door

Claims (13)

A wireless authentication tag for transmitting identification information recorded on an IC chip by a wireless signal,
Storage means for storing user identification information;
Authentication means for receiving user authentication information and control information by radio signals, and performing user authentication by comparing user identification information stored in the storage means with the user authentication information;
Control means for transmitting the control information in order to put the device to be controlled into an operating state when authentication is successful in the authentication result;
A wireless authentication tag comprising:   2. The wireless authentication tag according to claim 1, wherein, in the authentication result, the authentication unit permits the access right when authentication is successful, and does not permit the access right when authentication fails.   The authentication unit determines whether or not to execute the user authentication process based on an authentication unit control command included in the user authentication information, and performs new addition registration or deletion of user identification information with respect to the storage unit The wireless authentication tag according to claim 1, wherein it is determined whether or not the wireless authentication tag is used.   The authentication unit determines whether to perform an additional registration or deletion operation of user identification information stored in the storage unit or to transmit control information to the control unit, depending on the type of the authentication unit control command. The wireless authentication tag according to claim 3. Furthermore, it comprises connection means serving as an interface with a controller for externally connecting the device,
The wireless authentication according to any one of claims 1 to 4, wherein the control unit transmits the control information to the controller via the connection unit to cause the device to be in an operating state. tag. The connection means has a function of detecting a connection status with the controller,
The wireless authentication tag according to claim 5, wherein the control unit transmits the control information to the controller when the connection unit confirms the connection with the controller.   The wireless authentication tag according to any one of claims 1 to 6, further comprising display means for displaying an authentication result by the authentication means. A wireless authentication tag system comprising: a wireless authentication tag that transmits identification information recorded in an IC chip by a wireless signal; and a controller that controls a device externally connected to the device by a signal from the wireless authentication tag,
The wireless authentication tag is
Storage means for storing user identification information;
User authentication information and control information are received by radio signals, user authentication processing is performed by comparing the user identification information stored in the storage means and the user authentication information, and whether or not the access right is permitted based on the authentication result. Authentication means to be determined;
Control means for transmitting a device control command included in the control information to the controller to bring the device into an operating state when authentication is successful in the authentication result;
The controller is
A wireless authentication tag system comprising device control means for receiving the device control command from the control means and operating the device to a desired state.   The wireless authentication tag system according to claim 8, wherein the device control unit includes a plurality of connection ports for connecting the devices, and operates the plurality of devices collectively or individually.   When the wireless authentication tag receives the user authentication information and the control information as a wireless signal, the wireless authentication tag performs the access right authentication processing in one reception, and the controller performs the device operation processing. The wireless authentication tag system according to claim 8, wherein the wireless authentication tag system is performed.   The wireless authentication tag system according to any one of claims 8 to 10, wherein the wireless authentication tag and the controller have an uneven shape that uniquely determines a combination.   At least one of the plurality of devices is an electrically operated key, and when the wireless authentication tag and the controller are combined by the uneven shape, the device control means is configured to execute the device control command. 12. The wireless authentication tag system according to claim 11, wherein the key is locked / unlocked to control the combination / separation. An authentication method using a wireless authentication tag system comprising: a wireless authentication tag that transmits identification information recorded on an IC chip by a wireless signal; and a controller that controls a device externally connected to the device by a signal from the wireless authentication tag. And
The wireless authentication tag receiving user authentication information and control information from a transmitting device as a wireless signal;
The authentication unit performs user authentication by comparing user identification information pre-registered in the storage unit of the wireless authentication tag with user authentication information received from the transmitting device;
When the authentication means determines that the authentication is successful in the authentication result, the step of approving the use of the access right and transmitting control information for putting the device into an operating state to the control means of the wireless authentication tag When,
The control means transmitting a device control command corresponding to the received control information to the device control means of the controller;
The device control means includes a step of operating the device to a desired state based on the received device control command, and an authentication method using a wireless authentication tag system.

Images