JP2008071108A - Authentication system, authentication device, management device, authentication management method, and authentication management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a user of IC cards to economically perform agent-based authentication without using a plurality of IC cards for each agent. <P>SOLUTION: The system comprises authentication devices 20, 21, 22 each including a key ID information storage means 24 storing key ID information 241 that is validated in the authentication device, and an authentication means 23 for performing validity determination of a key ID received from the IC tag built-in device 10 by an IC tag reader/writer 25, transmission/receiving of information with a tag IC management agent device 30, or writing/reading of information to the key ID information storage means 24 and receiving and transmitting data such as IC tag information with an IC tag built-in device 10, for example, by near distance radio communication, and the tag ID management agent device 30 including a tag ID management means 31 for performing transmission/receiving of information with each authentication device and writing/reading of information to a management information storage means 32 and the management information storage means 32 for storing a shared use authentication device table 321 and used authentication device management information 322. and connectable with a network 40. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system including one or a plurality of authentication devices for authenticating an IC tag and an IC tag built-in device that incorporates an IC tag.

  Conventionally, IC cards with integrated IC (Integrated Circuit) tags are used as authentication cards for entrance and exit of transportation facilities and buildings, as well as in various situations such as retailer membership cards and small payments. It has become. Therefore, the IC card user uses the IC tag for identifying the IC card, thereby reducing the procedural burden at the time of authentication and improving the security at the time of authentication.

An example of a conventional authentication system is disclosed in Patent Document 1 (Japanese Patent Laid-Open No. 2001-195484). The authentication system of Patent Document 1 includes a portable information terminal having a reservation ID transmission function, a reservation management server having a reservation information database reserved by a reservation ID, and a site terminal installed or carried at a reservation content execution site. A reservation person ID authentication system that is realized, wherein a user terminal that has received a reservation person ID from a portable information terminal inquires the reservation management server about the validity of the reservation execution by the reservation person ID, and the reservation management server When the validity of the reservation is confirmed based on the reservation information database, the ticketless operation is realized even at the time of final ticket issuance and admission by performing given control such as opening the gate. Work is unnecessary.
JP 2001-195484 A

  However, since the conventional authentication system manages IC tags in the IC card separately at each business provider that provides services, etc., the IC card user carries around and uses multiple IC cards for each business operator. There is a problem that it is inconvenient that it must be, and each company has a problem that it is impossible to recognize which company can authenticate the IC tag that has been authenticated, and solve these problems Therefore, in order to provide an IC card that can be used in common by a plurality of business operators, there is a problem that the economic burden associated with the system change is large.

(the purpose)
An object of the present invention is to enable authentication for each business operator without having to carry and use a plurality of IC cards for each business operator who provides a service or the like. It is to economically provide an authentication system that makes it possible to search whether authentication is possible by a person.

  The present invention that achieves the above object provides an authentication system comprising one or more authentication devices for authenticating an IC tag and an IC tag built-in device incorporating the IC tag, wherein the authentication device and the plurality of authentication devices are The combination ID assigned for each combination is managed, and the combination ID related to one authentication device or a combination of a plurality of authentication devices that is permitted to be authenticated by the IC tag is associated with the tag ID of the IC tag and managed And a management device that transmits the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of authentication devices corresponding to the combination ID.

  According to the present invention, the authentication device transmits the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of authentication devices corresponding to the combination ID. The IC tag built-in device can be authenticated based on the tag ID and the combination ID associated with the tag ID, and the management device manages the combination ID assigned to each combination of the authentication device and the plurality of authentication devices. Since the combination ID related to one authentication device or a combination of a plurality of authentication devices whose authentication is permitted by the IC tag is managed in association with the tag ID of the IC tag, the authentication processing of the authentication device can be managed.

  According to the present invention described above, a single IC tag built-in device can be authenticated by a plurality of authentication apparatuses, and the security of authentication processing in the authentication apparatus is improved.

  This is because the authentication apparatus can authenticate the IC tag built-in device based on the tag ID or the combination ID associated with the tag ID and the tag ID.

  Further, according to the present invention, it is possible to determine which authentication device combination authenticates the IC tag built-in device.

  The reason is that the management device manages the combination ID assigned for each combination of the authentication device and the plurality of authentication devices, and the combination ID related to the combination of one authentication device or a plurality of authentication devices that the IC tag is permitted to authenticate. Is managed in association with the tag ID of the IC tag.

  Further, according to the present invention, with respect to the conventional authentication system, the combination ID is managed in association with the tag ID of the IC tag, and the combination ID associated with the tag ID and the tag ID corresponds to the combination ID. Since a management device for transmission to the authentication device may be added, the authentication system of the present invention can be provided economically.

(First embodiment)
An authentication system that shares and uses an ID (identifier) of an IC (Integrated Circuit) tag according to the first embodiment of the present invention will be described in detail.

  (Configuration of the first embodiment)

  The configuration of the authentication system according to the present embodiment will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of an authentication system according to this embodiment.

  Referring to FIG. 1, the authentication system according to the present embodiment includes an IC card incorporating a non-contact IC tag such as RFID (Radio Frequency Identification) or an IC tag built-in device 10 such as a mobile phone, and each business operator. .., The tag ID management company device 30 that manages the IDs of the IC tags used in the authentication devices 20, 21, 22..., The tags and the authentication devices 20, 21, 22. It is comprised from the network 40 which connects ID management provider apparatus 30. FIG. Here, the network 40 is configured by the Internet, for example.

  Each authentication device 20, 21, 22 includes an authentication unit 23, a key ID information storage unit 24, and an IC tag reader / writer 25. The IC tag reader / writer 25 has a function of transmitting / receiving data such as IC tag information to / from the IC tag built-in device 10 by, for example, short-range wireless communication. The key ID information storage unit 24 has a function of storing key ID information (details will be described later) that are valid in this authentication apparatus. The authentication unit 23 is a computer that can be connected to the network 40, and whether the IC tag reader / writer 25 determines the validity of the key ID received from the IC tag built-in device 10 or whether an application flag is set for tag ID (identifier) sharing. And the function of performing transmission / reception of information to / from the tag ID management company device 30 and writing / reading of information to / from the key ID information storage unit 24. Note that the authentication unit 23 receives various information described later stored in the management information storage unit 32 through communication with the tag ID management business entity device 30, and based on the tag ID of the IC tag built-in device 10. A usage authentication device acquisition unit 231 that can acquire information related to authentication devices that can be used by the IC tag built-in device 10 is provided.

  The tag ID management company device 30 includes tag ID management means 31 and management information storage means 32. The tag ID management unit 31 is a computer that can be connected to the network 40, and has functions of performing transmission / reception of information with each authentication apparatus and writing / reading of information to / from the management information storage unit 32 in addition to predetermined information processing. Have. The management information storage unit 32 has a function of storing various information described later.

  FIG. 2 is a block diagram of the IC tag unit 11 of the IC tag built-in device 10 according to the present embodiment.

  Referring to FIG. 2, the IC tag unit 11 includes an antenna 12 for short-range wireless communication, a processing unit 13 that controls the device 10 with built-in IC tag, and an IC tag memory 14 that stores key ID information 141. Is provided. The processing unit 13 includes a CPU 131, a main storage unit 132, and a communication control unit 133 that communicates with each authentication device 20, 21, 22 via the antenna 12.

  FIG. 3 and FIG. 4 show an example of information stored in the management information storage means 32 of the tag ID management business operator apparatus 30 according to this embodiment.

  The management information storage unit 32 stores a common usage authentication device table 321 and usage authentication device management information 322.

  The common usage authentication device table 321 shown in FIG. 3 shows the correspondence between the usage authentication device name indicating the combination of the common usage authentication devices and the common usage authentication device code (described later).

  The usage authentication device management information 322 shown in FIG. 4 includes a usage authentication device name and a common usage authentication device code for each tag ID stored in the IC tag memory 14 which is information for identifying the IC tag built-in device 10 held by the user. It shows the correspondence with (described later).

  Here, the common use authentication device code is information indicating whether or not each authentication device can be shared (shared), and if it can be shared (shared), the shared relationship of the use authentication devices (shared use) This information is uniquely given for each combination of authentication devices. That is, for a combination of authentication devices that cannot be shared, a code indicating that is set, and for a combination of authentication devices that can be shared, a code is set for each type of the combination. Since the common use authentication device code according to the present embodiment is defined by 4 bits, 16 kinds of combinations of codes can be set with a very small memory capacity.

  In the case of the present embodiment, according to FIG. 3, for example, the authentication device A is an entrance / exit authentication device of a company A, the authentication device B is an entrance / exit authentication device of another company B, and the authentication device C is a company A and company B. And the authentication device A and the authentication device C, the authentication device B and the authentication device C can be shared, and the authentication device A and the authentication device B cannot be shared. It is shown that there is.

  The tag ID management company device 30 can provide a service for sharing key ID information (described later) to each company A, B, and C as a business. That is, the tag ID management business entity device 30 manages the shared relationship of the authentication devices among the companies that have subscribed to the service to be provided, based on the common usage authentication device table 321, and provides the usage authentication device management information 322 and the related information. Based on the key ID information (described later) stored in the IC tag memory 14 of the IC tag built-in device 10 owned by the user of the company that has subscribed to the service, the service provided to the user can be managed.

  5 to 7 show an example of the key ID information 241 stored in the key ID information storage unit 24 of each authentication device 20, 21, 22 according to the present embodiment.

  5 shows the key ID information 241 stored in the key ID information storage unit 24 of the authentication device 20 (authentication device A), and FIG. 6 shows the key ID information of the authentication device 21 (authentication device B). FIG. 7 shows the key ID information 241 stored in the key ID information storage unit 24 of the authentication device 22 (authentication device A).

  Each key ID information storage unit 24 stores key ID information 241 used by the authentication unit 23 for authentication of the IC tag built-in device 10. As shown in FIGS. 5 to 7, the key ID information 241 includes a tag ID portion and an extended ID portion. That is, the key ID information 241 is information indicating the tag ID indicated in the tag ID portion and the common use authentication device code indicated in the extended ID portion in association with each other.

  In FIG. 5 to FIG. 7, the tag ID part is a tag ID originally possessed by the IC tag part 11 of the IC tag built-in device 10, and the extended ID part is used when applying for ID sharing among a plurality of authentication devices. This is an ID to be given. That is, the extended ID part is set based on the common use authentication device code, and indicates a combination of authentication devices each tag ID is permitted to use.

  For this reason, as described above, the use authentication device acquisition unit 231 of each authentication device 20, 21, 22 can recognize an authentication device that can be used by the IC tag built-in device 10, while the tag ID management business entity device 30 also. Based on the tag ID of the IC tag built-in device 10, the authentication device that can be used by the IC tag built-in device 10 can be recognized based on the various information stored in the management information storage unit 32. The IC tag memory 14 of the IC tag built-in device 10 according to the present embodiment stores key ID information 141 having the same format as the key ID information 241 shown in FIG.

  Here, the hardware configuration of the authentication apparatus will be described.

  FIG. 8 is a block diagram illustrating a hardware configuration example of the authentication apparatus of the authentication system according to the present embodiment.

  Referring to FIG. 8, the authentication device according to the present invention can be realized by a hardware configuration similar to that of a general computer device, and is a main memory such as a CPU (Central Processing Unit) 201 and a RAM (Random Access Memory). A main storage unit 202 used for a data work area and a temporary data save area; a communication control unit 203 that transmits and receives data via the network 40; a liquid crystal display; a presentation unit 204 such as a printer and a speaker; a keyboard and a mouse Auxiliary storage which is a hard disk device composed of an input unit 205 such as an interface unit 206 connected to a peripheral device to transmit and receive data, a ROM (Read Only Memory), a magnetic disk, and a non-volatile memory such as a semiconductor memory 207, and a system bus 208 for connecting the above components of the information processing apparatus to each other.

  The authentication apparatus according to the present invention is implemented in hardware by mounting circuit parts composed of hardware parts such as LSI (Large Scale Integration) in which a program for realizing such a function is incorporated in the authentication apparatus. As a matter of course, it can be realized by software by executing a program for providing each function of each component described above by the CPU 201 on the computer processing apparatus.

  That is, the CPU 201 loads the program stored in the auxiliary storage unit 207 to the main storage unit 202 and executes the program, thereby controlling the operation of the authentication device, thereby realizing the functions described above in software.

  The tag ID management company device 30 may have the above-described configuration, and each function of the tag ID management company device 30 described above may be realized in hardware or software.

(Operation of the first embodiment)
The operation of this embodiment will be described with reference to FIGS.

  FIG. 9 is a flowchart showing tag ID (identifier) sharing application and key ID information update processing in a plurality of authentication apparatuses according to the present embodiment.

  The application is made from each authentication means 23 sharing the tag ID. First, when the authentication unit 23 recognizes the setting of the application flag for the tag ID stored in the key ID information storage unit 24 for applying for sharing of the tag ID, the processing is performed according to the update processing mode of the key ID information. Is started (step S901). Next, the tag ID of the IC tag built-in device 10 is transmitted to the authentication means 23 via the IC tag reader / writer 25 of the authentication device (step S902). Upon receiving the tag ID (step S903), the authentication unit 23 transmits the authentication device name for identifying the authentication device to which the authentication unit 23 belongs and the received tag ID to the tag ID management unit 31 (step S903). S904).

  When the tag ID management unit 31 receives the authentication device name and the tag ID from the authentication unit 23 (step S905), the tag ID management unit 31 updates the use authentication device management information 322 (step S906). That is, the tag ID management unit 31 newly stores the tag ID and the use authentication device name indicating the received authentication device name when the received tag ID is new, and receives the received tag ID when the received tag ID already exists. A use authentication device name indicating the authentication device name received in association with the tag ID is added.

  Next, the tag ID management unit 31 searches the common usage authentication device table 321 for the corresponding common usage authentication device code based on the updated usage authentication device name (step S907), and receives the received tag ID. Based on the above, a new common usage authentication device code is set in the usage authentication device management information 322 (step S908). Then, the tag ID management unit 31 transmits the tag ID and the extended ID (new common usage authentication device code) to the authentication device corresponding to the usage authentication device name of the usage authentication device management information 322 (step S909).

  Upon receiving the tag ID and the extension ID from the tag ID management unit 31, the authentication unit 23 updates the key ID information 241 stored in the key ID information storage unit 24 based on them (step S910), and the IC tag reader / writer 25. Then, the extension ID is transmitted to the IC tag built-in device 10 (step S911).

  When receiving the extended ID, the IC tag built-in device 10 stores the key ID information 141 in the IC tag memory 14 (step S912).

  At the time of the application, it is desirable that the IC tag built-in device 10 and the IC tag reader / writer 25 be in a communicable state between step S11 and step S22.

  FIG. 10 is a flowchart showing an authentication process in the authentication means according to this embodiment.

  The authentication unit 23 determines whether or not an application flag is set for the authentication device to which the authentication unit 23 itself belongs (step S1001). If the application flag is set, the authentication unit 23 uses the key ID information. Is updated (step S1002). The key ID information update process is the same as that described above with reference to FIG.

  On the other hand, when the application flag is not set, the tag ID is received from the IC tag built-in device 10 as the authentication processing mode (step S1003).

  Next, the authentication unit 23 compares the received tag ID with the tag ID portion of the key ID information 241 stored in the key ID information storage unit 24 (determines whether or not they match) (step S1004). If they do not match, authentication is impossible (step S1010). On the other hand, if they match, authentication is OK, and the key ID information 241 stored in the key ID information storage unit 24 corresponds to the received tag ID. It is determined whether or not the attached extension ID is registered (step S1005).

  Next, the authentication unit 23 determines that the authentication is OK when the extended ID is not registered (step S1011), and requests the extended ID from the IC tag built-in device 10 when the extended ID is registered (step S1006). Then, it is determined whether or not the extension ID is received from the IC tag built-in device 10 (step S1007). If the extension ID cannot be received, authentication is disabled (step S1012).

  If the extension ID can be received, the authentication unit 23 compares the extended ID part of the key ID information 241 stored in the key ID information storage unit 24 (step S1008). S1009), if they do not match, authentication is impossible (step S1013).

  That is, in this authentication process, when a certain user uses only the authentication device A, the extended ID is not stored in the key ID storage device 24 of the authentication device A in step S1005, and therefore authentication OK is performed for the authentication device A. (Step S1011). For example, when a common use application is made to the authentication device C (step S1002), the key ID storage device 24 of the authentication device A and the IC tag built-in device 10 of the user are included in the application processing. Since the extension ID indicating that the authentication device A and the authentication device C can be shared (shared) is set (step S910), the IC tag built-in device 10 of the user is also authenticated OK for the authentication device A in this case ( Step S1009). Of course, in this case, the extended ID indicating that the user's IC tag built-in device 10 can commonly use (share) the authentication device A and the authentication device C is also registered in the authentication device C. Therefore, the user can use the authentication device A and the authentication device C. Thus, authentication can be performed using the common IC tag built-in device 10 (step S1009).

  Subsequently, after step S1009, the authentication unit 23 uses the common authentication device table 321 stored in the management information storage unit 32 or the use authentication by communication with the tag ID management company device 30 in the use authentication device acquisition unit 231. By receiving the device management information 322, based on the tag ID of the IC tag built-in device 10, information on an authentication device that can be used by the IC tag built-in device 10 is acquired, and the IC tag built-in device 10 can be used. A combination of authentication devices is searched (step S1014).

(Effects of the first embodiment)
According to the present invention described above, since the basic tag ID is validated, an extension ID indicating a combination of authentication devices that can be used in common can be assigned as necessary while enabling authentication with a conventional tag ID. Therefore, since the user can authenticate with a plurality of authentication apparatuses with the single IC tag built-in device 10, the user can reduce the number of IC cards to be carried.

  Further, according to the present invention, each business operator that manages each authentication device 20, 21, 22 or business entity that manages the tag ID management business device device 30 can use a tag ID, a use authentication device name, an extended ID (common use). Based on information including the authentication device code (usage authentication device management information 322 and the like), it is possible to determine which authentication device can be used by the user of the IC tag built-in device 10 incorporating the tag ID. It is possible to obtain data that is useful for examining user attributes.

  Further, according to the present invention, the authentication apparatus can authenticate the IC tag built-in device 10 based on the tag ID and the extended ID associated with the tag ID, so that the security of the authentication process is improved.

  In addition, according to the present invention, a plurality of combination types of codes can be set with a very small memory capacity, so that a vacant part of the existing memory capacity can be used, and an extended ID can be used as a tag ID for a conventional authentication system. The tag ID management business entity apparatus 30 that manages the tag ID and the extended ID associated with the tag ID to the authentication apparatus corresponding to the extended ID may be added. Can be provided economically.

  Although the present invention has been described with reference to the preferred embodiments, the present invention is not necessarily limited to the above embodiments, and various modifications can be made within the scope of the technical idea. .

  For example, the tag ID is defined by the physical characteristics (such as a fingerprint) of the user of the IC tag built-in device 10, and the key ID information 241 and the usage authentication device management information 322 are defined by the tag ID defined by the physical characteristics of the user. It may be set in association with.

  For example, each authentication device 20, 21, 22 may store information having the same content as the common usage authentication device table 321, or may have the same content as the usage authentication device management information 322 instead of the key ID information 241. Information may be stored. In this case, each authentication device 20, 21, 22 is an authentication device that can be used by the IC tag built-in device 10 based on the tag ID of the IC tag built-in device 10 without communicating with the tag ID management company device 30. Can be recognized.

It is a block diagram which shows the structure of the authentication system by the 1st Embodiment of this invention. It is a block diagram which shows the IC tag part of the IC tag built-in device by 1st Embodiment. It is a figure which shows an example of the common use authentication apparatus table memorize | stored in the management information storage means of the tag ID management provider apparatus by 1st Embodiment. It is a figure which shows an example of the use authentication apparatus management information memorize | stored in the management information storage means of the tag ID management provider apparatus by 1st Embodiment. It is a figure which shows an example of the key ID information memorize | stored in the key ID information storage means of the authentication apparatus by 1st Embodiment. It is a figure which shows an example of the key ID information memorize | stored in the key ID information storage means of the authentication apparatus by 1st Embodiment. It is a figure which shows an example of the key ID information memorize | stored in the key ID information storage means of the authentication apparatus by 1st Embodiment. It is a block diagram which shows the hardware structural example of the authentication apparatus of the authentication system by 1st Embodiment. It is a flowchart which shows the update process of the application of ID sharing in the some authentication apparatus by 1st Embodiment, and key ID information. It is a flowchart which shows the authentication process in the authentication means by 1st Embodiment.

Explanation of symbols

10: Device with built-in IC tag 11: IC tag unit 12: Antenna 13: Processing unit 131: CPU
132: Main storage unit 133: Communication control unit 14: IC tag memory 141: Key ID information 20, 21, 22, A, B, C: Authentication device 23: Authentication means 231: Usage authentication device acquisition unit 24: Key ID information Storage means 241: Key ID information 25: IC tag reader / writer 30: Tag ID management company device 31: Tag ID management means 32: Management information storage means 321: Common use authentication device table 322: Use authentication device management information 40: Network 201 : CPU
202: Main storage unit 203: Communication control unit 204: Presentation unit 205: Input unit 206: Interface unit 207: Auxiliary storage unit 208: System bus

Claims (29)

In an authentication system comprising one or more authentication devices for authenticating an IC tag and an IC tag built-in device that incorporates the IC tag,
The combination ID assigned to each combination of the authentication device and the plurality of authentication devices is managed, and the combination ID related to the one authentication device or the combination of the plurality of authentication devices that is permitted to be authenticated by the IC tag Management in association with a tag ID of an IC tag, and transmission of the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of authentication devices corresponding to the combination ID An authentication system comprising an apparatus. The authentication system according to claim 1, wherein the authentication device stores the received tag ID and the combination ID in association with each other. The authentication apparatus gives the combination ID to the IC tag built-in device,
The authentication system according to claim 1 or 2, wherein the IC tag built-in device stores the assigned combination ID in association with the tag ID of the device. The authentication apparatus performs authentication processing of the IC tag built-in device based on the tag ID and the combination ID stored in association with each other and the tag ID and the combination ID received from the IC tag built-in device. The authentication system according to any one of claims 1 to 3, wherein: The said management apparatus searches the said combination ID matched with the tag ID of the said IC tag, when the said authentication apparatus authenticates the said IC tag, The any one of Claims 1-4 characterized by the above-mentioned. The authentication system described in the section. The authentication system according to claim 1, wherein the management device is provided in each of the authentication devices. In an authentication system comprising one or more authentication devices for authenticating an IC tag and an IC tag built-in device that incorporates the IC tag,
The IC tag built-in device includes a first key including a tag ID for identifying an IC tag built in the IC tag and a combination ID assigned to each combination of one authentication device or a plurality of authentication devices permitted to be authenticated. Store ID information,
The authentication device stores the second key ID information including the tag ID and a combination ID allocated for each combination of the authentication device or a plurality of the authentication devices for which the tag ID is permitted to be authenticated, An authentication system, wherein authentication processing of the IC tag built-in device is performed based on the second key ID information and the first key ID information received from the IC tag built-in device. In one or more authentication devices that authenticate IC tags,
The combination ID assigned to each combination of the authentication device and the plurality of authentication devices is managed, and the combination ID related to the one authentication device or the combination of the plurality of authentication devices that is permitted to be authenticated by the IC tag Management in association with a tag ID of an IC tag, and transmission of the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of authentication devices corresponding to the combination ID An authentication device comprising means. The authentication apparatus according to claim 8, wherein the tag ID and the combination ID are stored in association with each other. The authentication apparatus according to claim 8 or 9, wherein the combination ID is stored in a tag built-in device including the IC. The authentication processing of the IC tag built-in device is performed based on the tag ID and the combination ID stored in association with each other and the tag ID and the combination ID received from the IC tag built-in device. The authentication device according to any one of claims 8 to 10. The authentication device according to any one of claims 8 to 11, wherein the management unit searches the combination ID associated with a tag ID of the IC tag during the authentication process. . In one or more authentication devices that authenticate IC tags,
IC including the IC tag with first key ID information including a tag ID for identifying the IC tag and a combination ID assigned for each combination of the authentication device or a plurality of the authentication devices permitted to be authenticated. Store the device with built-in tag,
Storing the tag ID and second key ID information including a combination ID allocated for each of the authentication device or a combination of a plurality of the authentication devices for which the tag ID is permitted to be authenticated;
An authentication apparatus that performs authentication processing of the IC tag built-in device based on the second key ID information and the first key ID information received from the IC tag built-in device. In a management device that manages authentication processing of one or more authentication devices that authenticate an IC tag,
The combination ID assigned to each combination of the authentication device and the plurality of authentication devices is managed, and the combination ID related to the one authentication device or the combination of the plurality of authentication devices that is permitted to be authenticated by the IC tag Management in association with a tag ID of an IC tag, and transmission of the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of authentication devices corresponding to the combination ID A management device comprising means. The management apparatus according to claim 14, wherein the tag ID and the combination ID are stored in the authentication apparatus in association with each other. 16. The management according to claim 14, wherein the management unit searches for the combination ID associated with a tag ID of the IC tag when the authentication device authenticates the IC tag. apparatus. The management apparatus according to claim 14, wherein the management apparatus is provided in each of the authentication apparatuses. An authentication management method for an authentication system comprising one or a plurality of authentication devices for authenticating an IC tag and an IC tag built-in device incorporating the IC tag,
In the management device that manages the authentication process of the authentication device, the combination ID assigned for each combination of the authentication device and a plurality of the authentication devices is managed, and the one or more authentication devices in which the IC tag is permitted to be authenticated The combination ID related to the combination of the authentication devices is managed in association with the tag ID of the IC tag, and the tag ID and the combination ID associated with the tag ID are one corresponding to the combination ID. An authentication management method comprising: transmitting to an authentication device or a plurality of the authentication devices. In the authentication device,
The authentication management method according to claim 18, wherein the received tag ID and the combination ID are stored in association with each other. In the authentication device,
Giving the combination ID to the IC tag built-in device;
In the IC tag built-in device,
The authentication management method according to claim 18 or 19, wherein the given combination ID is stored in association with the tag ID of itself. In the authentication device,
The authentication processing of the IC tag built-in device is performed based on the tag ID and the combination ID stored in association with each other and the tag ID and the combination ID received from the IC tag built-in device. The authentication management method according to any one of claims 18 to 20. In the management device,
The authentication according to any one of claims 18 to 21, wherein when the authentication device authenticates the IC tag, the combination ID associated with the tag ID of the IC tag is searched. Management method. An authentication management method for an authentication system comprising one or a plurality of authentication devices for authenticating an IC tag and an IC tag built-in device incorporating the IC tag,
In the IC tag built-in device,
Storing the first key ID information including a tag ID for identifying an IC tag built in the device and a combination ID assigned to each combination of the one authentication device or a plurality of the authentication devices permitted to be authenticated;
In the authentication device,
Storing the tag ID and second key ID information including a combination ID allocated for each combination of the authentication device or a plurality of the authentication devices for which the tag ID is permitted to be authenticated, and the second key An authentication management method, wherein authentication processing of the IC tag built-in device is performed based on ID information and the first key ID information received from the IC tag built-in device. An authentication management program executed in an authentication system comprising one or more authentication devices that authenticate an IC tag and an IC tag built-in device that incorporates the IC tag,
In a management device that manages authentication processing of the authentication device,
The combination ID assigned to each combination of the authentication device and the plurality of authentication devices is managed, and the combination ID related to the one authentication device or the combination of the plurality of authentication devices that is permitted to be authenticated by the IC tag A function of managing in association with a tag ID of an IC tag, and transmitting the tag ID and the combination ID associated with the tag ID to one authentication device or a plurality of the authentication devices corresponding to the combination ID An authentication management program characterized by realizing the above. In the authentication device,
The authentication management program according to claim 24, wherein a function of storing the received tag ID and the combination ID in association with each other is realized. In the authentication device,
Realizing a function of assigning the combination ID to the IC tag built-in device;
In the IC tag built-in device,
26. The authentication management program according to claim 24 or 25, wherein a function of storing the assigned combination ID in association with the tag ID of itself is realized. In the authentication device,
Based on the tag ID and the combination ID stored in association with each other and the tag ID and the combination ID received from the IC tag built-in device, realizing a function of performing an authentication process of the IC tag built-in device. 27. The authentication management program according to any one of claims 24 to 26, wherein: In the management device,
The function of searching for the combination ID associated with the tag ID of the IC tag when the authentication device authenticates the IC tag is realized. The authentication management program described in 1. An authentication management program executed in an authentication system comprising one or more authentication devices that authenticate an IC tag and an IC tag built-in device that incorporates the IC tag,
In the IC tag built-in device,
A function of storing first key ID information including a tag ID for identifying an IC tag built in the device and a combination ID assigned to each combination of one authentication device or a plurality of authentication devices permitted to be authenticated; Realized,
In the authentication device,
Storing the tag ID and second key ID information including a combination ID allocated for each combination of the authentication device or a plurality of the authentication devices for which the tag ID is permitted to be authenticated, and the second key An authentication management program for realizing a function of performing an authentication process of the IC tag built-in device based on the ID information and the first key ID information received from the IC tag built-in device.

Images