JP2008287507A - Traceability system and electronic tag read/write device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure reliability of data included in an electronic tag even when using a device for reading/writing the electronic tag in such a state that the device is cut off from a network by restriction of work environment or the like, and to achieve security of information. <P>SOLUTION: This traceability system has: the read/write device 20 allowing a changeover of connection/non-connection to the network 10, holding deadline-equipped access authority information to the electronic tag, and performing reading/writing to the electronic tag based on the access authority information; and an access authority management server 30 connected to the network 10, holding the access authority information of each user, checking validity of the user using the read/write device 20 by requirement from the read/write device 20, and transmitting the access authority information to the read/write device 20 when the user is valid. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a traceability system and an electronic tag read / write device, and in particular, a traceability system and an electronic tag read / write device that ensure the reliability of data contained in an electronic tag even when the electronic tag read / write device is used in a disconnected state. About.

  From product manufacture to shipping, sales, end-user use, and all distribution stages such as disposal and recycling, information about the product's current distribution stage, where it is located, maintenance history, Today, the demand for traceability, that is, the traceability of information on the distribution channel of the product and other various attribute information (hereinafter referred to as traceability information), is becoming stronger today. The reason behind this is the demand for strengthening the international competitiveness of domestic industries by improving overall efficiency of the product distribution form in which a large number of companies participate beyond the distribution by a single company line, etc. Examples include protecting users when defects or defects occur, requesting manufacturers to minimize damage, and preventing illegal export to overseas such as stolen goods or export restricted goods.

  Electronic tags are used to achieve such traceability. Electronic tags have been attached to various products and are now being used for logistics management. In Non-Patent Document 1, “total traceability” in which information can be visualized, transmitted, and utilized between companies is examined and verified in all distribution stages ranging from manufacturing / maintenance / recycling of products. Here, it is necessary for a plurality of companies to read and write to one electronic tag, and the need for a mechanism for preventing unauthorized reading and writing to the electronic tag has been pointed out.

  Patent Document 1 proposes a mechanism for checking an access authority processing server via a network in order to check whether a company that reads and writes data has a legitimate access authority.

Japanese Patent Laying-Open No. 2005-067782 2005 Ministry of Economy, Trade and Industry consignment project Energy usage rationalization RFID tag system development investigation project Total traceability demonstration experiment report using RFID tags in the electronic and electrical industries, pages 31-32, March 2006, Electronic Information Technology Industry Association

  In total traceability across all distribution stages, multiple companies read and write one electronic tag. In addition, some companies need to read and write electronic tags without being able to connect to the network due to restrictions in the work environment and the like. Non-Patent Document 1 points out the necessity of a mechanism for preventing unauthorized reading and writing to an electronic tag. However, no concrete realization method has been studied.

  Patent Document 1 proposes a mechanism for checking authority using a network and an access authority processing server. However, when a device for reading and writing the electronic tag is used in a state where it is not connected to the network, it does not realize the reliability of the data of the electronic tag and the security of information.

  The present invention has been made in view of the above points, and the reliability of data included in an electronic tag can be used even when a device for reading and writing an electronic tag is used in a state of being disconnected from a network due to restrictions such as a work environment. The object is to provide a device for a traceability system that secures information security.

  The above-described problems are an access authority management device that manages access authority information connected to the network, and periodically connects to the network, and receives and holds a part of the access authority information as limited access information from the access authority management device. The electronic tag read / write device receives the expiration date information of the limited access information from the access authority management device, holds the expiration date information, and holds the access authority until the expiration date. This can be achieved by a traceability system that performs reading and writing with an electronic tag.

  In addition, a processor, a memory, a network interface, an input / output interface, an input device and an output device connected to the input / output interface, and an electronic tag read / write unit connected to the internal communication line are stored in the memory. The program is executed by the processor, and the memory holds the access authority received through the network interface and the expiration date information thereof, and reads and writes with the electronic tag having the access authority until the expiration date. This can be achieved with a tag reader / writer.

In the present invention, it is possible to control reading and writing to the electronic tag even when a device for reading and writing the electronic tag is disconnected from the network.
As a result, the reliability of the data contained in the electronic tag can be used even when the device that reads and writes the electronic tag is disconnected from the network due to restrictions on the work environment, etc. Security of information can be realized.

  Embodiments of the present invention will be described below with reference to the drawings using examples. Note that the same reference numerals are assigned to the same parts, and description thereof is not repeated.

  First, the traceability system will be described with reference to FIGS. Here, FIG. 1 is a block diagram of the traceability system. FIG. 2 is a hardware block diagram of the read / write device. FIG. 3 is a hardware block diagram of the access authority changing device. FIG. 4 is a hardware block diagram of the access authority management server and the electronic tag history server.

  In FIG. 1, the traceability system 100 includes a read / write device 20 that can be connected to or connected to a network 10, an access authority management server 30, an access authority change device 40, and an electronic tag history server 50. The read / write device 20 can be switched between connection and non-connection to the network 10, holds access authority information for the electronic tag, and reads / writes the electronic tag attached to the product based on the access authority information. The access authority management server 30 is connected to the network 10, holds access authority information for each user, checks the validity of the user who uses the read / write device in response to a request from the read / write device, and if it is valid, the read / write device The access authority information corresponding to the user who uses the read / write device is transmitted to the. The access authority changing device 40 receives a request to change access authority information connected to the network 10. The electronic tag history server 50 holds a history of information written to the electronic tag connected to the network 10.

  In FIG. 2, a read / write device 20 includes a central processing unit (CPU) 22 connected to a bus 21, a memory 23, a storage device 24, an input / output unit (I / O) 25, and a network interface card (NIC). 26, an input device 27 connected to the I / O 25, an output device 28, and a read / write (R / W) unit 29. The R / W unit 29 includes an antenna 291. The antenna 291 reads information on the electronic tag and writes information on the electronic tag under the control of the R / W unit 29. The NIC 26 connects the read / write device 20 and the network 10. The CPU 22 executes the program on the memory 23 to execute the operation of the read / write device 20. The storage device 24 is selected from an HDD, a flash memory, or the like. The input device 27 is a keyboard, a mouse, or the like. The output device 28 is a display or the like.

  In FIG. 3, an access authority changing device 40 includes a CPU 42 connected to a bus 41, a memory 43, a storage device 44, an I / O 45, a NIC 46, an input device 47 connected to the I / O 45, and an output. Device 48. The NIC 46 connects the access authority changing device 40 and the network 10. When the CPU 42 executes the program on the memory 43, the operation of the access authority changing device 40 is executed. The storage device 44 is selected from an HDD, a flash memory, or the like. The input device 47 is a keyboard, a mouse, or the like. The output device 48 is a display or the like.

  4, the access authority management server 30 / electronic tag history server 50 includes a CPU 32/52, a memory 33/53, a storage device 34/54, an I / O 25, a NIC 36 / connected to the bus 31/51. 56. The NIC 36/56 connects the access authority management server 30 / electronic tag history server 50 and the network 10. When the CPU 32/52 executes the program on the memory 33/53, the operation of the access authority management server 30 / electronic tag history server 50 is executed. The storage device 34/54 is selected from an HDD, a flash memory, or the like.

  The overall operation of the traceability system will be described with reference to FIG. Here, FIG. 5 is a flowchart for explaining the overall operation of the traceability system. In FIG. 5, the traceability system performs setting of access authority (S1), acquisition of access authority to the read / write device (S2), read / write processing (S3), and storage of write history information (S4) in this order.

  Hereinafter, the operation of the traceability system will be described with reference to FIGS. Here, FIG. 6 is a diagram for explaining the provider authority information. FIG. 7 is a flowchart for explaining the update of the provider authority information. FIG. 8 is a diagram for explaining the updated business authority information.

  6A, the access authority management server 30 holds owner information including an electronic tag number 61 and an owner user ID that owns the product to which the electronic tag is attached. In FIG. 6B, the access authority management server 30 holds business operator authentication information including a relationship between the user ID 63 and the password 64. Further, in FIG. 6C, the access authority management server 30 holds business authority information including user ID 65, electronic tag number 66, data item 67, and access authority information 68 for each data item 67. Note that “R” described in the access authority information 68 means read authority, and “RW” means read / write authority.

  With reference to FIG. 7, the update of the provider authority information by the traceability system will be described. In FIG. 7, the access authority changing device 40 accepts input of a user ID, password, electronic tag number to be changed, and contents to be changed by the user (S101). Assume that the user ID “Owner01”, the password “1111”, and the contents to be changed (electronic tag number “RFID — 002”, user ID “ComA”, data item “3”, access authority “RW”) are received this time. The access authority changing device 40 sends the user ID and password information to the access authority management server 30 and makes an inquiry (S102). The access authority management server 30 checks whether the combination of the inquired user ID and password exists in the operator authentication information (S103). The combination of the user ID “Owner01” and the password “1111” exists in the fourth line of the operator authentication information in FIG. Accordingly, the process proceeds to step 105, where the access authority management server 30 checks whether the combination of the inquired user ID and electronic tag number exists in the owner information in FIG. 6A (S105). The combination of the owner user ID “Owner01” and the electronic tag number “RFID_002” exists in the second line of the owner information. Therefore, in step 106, the access authority management server 30 transitions to step 107. The access authority management server 30 updates the input of the electronic tag number accepted in S101 and the contents to be changed to the operator authority information (S107). In step 104 and step 106, when there is no input information in the retained information, the traceability system ends the update process.

  As shown in FIG. 8C, the updated business authority information is “comA” as the user ID 65, “RFID — 002” as the electronic tag 66, “3” as the data item 67, and the access authority 68 in the second line. New information of “RW” is added.

  Next, acquisition of access authority to the read / write device (S2) will be described with reference to FIGS. Here, FIG. 9 is a diagram for explaining the information held by the read / write device. FIG. 10 is a flowchart for explaining the update of information held by the read / write device.

  In FIG. 9A, the read / write device 20 holds an authority acquisition date / time consisting of an authority acquisition date / time (acquisition date / time) 71. In FIG. 9B, the read / write device 20 holds authority information including an electronic tag number 72, a data item 73, and an access authority 74, which are access authorities of the apparatus. Further, in FIG. 9C, the read / write device 20 holds electronic tag update history information including an electronic tag number 75, a data item 76, data content 77, an update user ID 78, and an update date / time 79. Here, the reason why the read / write device 20 holds the authority acquisition date / time 71 is to determine whether the authority of the read / write device 20 is a timed expression and whether the acquisition date / time 71 is within the valid period of 12 hours or 24 hours later. It is because it uses. Note that the read / write device 20 may hold the expiration date / time instead of the acquisition date / time 71 as the expiration date information.

  With reference to FIG. 10, the update of the information held by the read / write device will be described. Here, the read / write device 20 is connected to the network 10. In FIG. 10, the read / write device 20 first receives a user ID / password input by the user (S201). Here, it is assumed that the input of the user ID “ComA” and the password “aaaa” is accepted. Next, the read / write device 20 inquires of the access authority management server 30 about the user ID / password information (S202). The access authority management server 30 checks whether the combination of the inquired user ID and password exists in the operator authentication information (S203). The combination of the user ID “ComA” and the password “aaaa” exists in the second line of the operator authentication information in FIG. Therefore, the process proceeds from step 204 to step 205. The access authority management server 30 extracts the information to which the user ID applies from the information included in the provider authority information of FIG. 8C and transmits it to the read / write device 20 (S205). Here, what corresponds to the user ID “ComA” is a portion corresponding to lines 1 to 4 of the provider authority information, and these pieces of information are transmitted. The read / write device 20 stores the received electronic tag number / item number / access authority combination in authority information as shown in FIG. Further, the read / write device 20 updates the acquisition date 71 shown in FIG. 9A (S206). Since the processing time is “2006/9/19 9:30” this time, it is updated to this time and the process ends. When there is no information in step 204, the information update is terminated as it is.

  Next, the read / write processing (S3) will be described with reference to FIGS. Here, FIG. 11 is a flowchart for explaining the reading process. FIG. 12 is a flowchart for explaining the writing process. 13 and 14 are diagrams for explaining information held by the RFID.

  The read / write processing can also be performed in a state where the read / write device 20 is disconnected from the network 10. First, the reading process will be described. In FIG. 11, the read / write device 20 accepts user input of a data item number to be read (S311). Here, it is assumed that the item number “2” is input and the electronic tag with the electronic tag number “RFID_002” is to be read. The read / write device 20 compares the acquired acquisition date 71 in FIG. 9A with the current time, and determines whether it is within the valid period (S312). If it is within the valid period, the read / write device 20 reads the electronic tag number from the electronic tag (S313). The electronic tag number is “RFID_002”. The read / write device 20 acquires the access authority corresponding to the electronic tag number and the data item number received in step 311 from the authority information of FIG. 9B (S314). The access authority corresponding to the data item 2 of the electronic tag number “RFID — 002” is “R” on the first line of the authority information in FIG. 9B and has the read authority, so the process proceeds from step 315 to step 316. The read / write device 20 reads information corresponding to the data item number received in S311 from the electronic tag (S316). Here, the read / write device 20 acquires the information “2006/9/1” corresponding to the data item 2 of the electronic tag of the electronic tag number “RFID_002” in FIG. The read / write device 20 displays the information read in S316 or uses it for specific processing (S317). When it is outside the valid period in step 312 or not in step 315, the read / write device 20 ends the reading process.

  Next, the writing process will be described. In FIG. 12, the read / write device 20 accepts a data item number to be read and a user input of data to be written (S321). Here, it is assumed that the item number “3” and the data content “2006/10/1” are input, and the electronic tag with the electronic tag number “RFID — 002” is to be written. The read / write device 20 compares the acquired acquisition date 71 in FIG. 9A with the current time and checks whether it is within the valid period (S322). If it is within the valid period, the read / write device 20 reads the electronic tag number from the electronic tag (S323). The electronic tag number is “RFID_002”. The read / write device 20 acquires the access authority corresponding to the electronic tag number and the data item number received in S321 from the authority information in FIG. 9B (S324). The access authority corresponding to the data item “3” of the electronic tag number “RFID — 002” is “RW” on the second line of the authority information in FIG. Therefore, the process proceeds from step 325 to step 326. The read / write device 20 writes the data received in S321 in the area corresponding to the data item number received in S321 of the electronic tag (S326). Before writing, the electronic tag has the information shown in FIG. 13. However, “2006/10/1” is newly written in the area of data item number 3, and the information shown in FIG. 14 is obtained. Next, the read / write device 20 writes the electronic tag number, data item, data content, update user ID, and update date and time written in S326 in the electronic tag update history held by itself (S327), and ends. Assuming that the date and time of writing is “2006/9/20 15:00”, it is written in the electronic tag update history as shown in FIG. Note that when it is outside the valid period in step 322 or not in step 325, the read / write device 20 ends the write process.

  Information held by the RFID will be described with reference to FIGS. In FIG. 13, the information held by the RFID includes an electronic tag number 81, data item 1 (manufacturer) 82, data item 2 (manufacturing date) 83, data item 3 (maintenance contract start date) 84, data item. 4 (consumable replacement date) 85 and data item 5 (manifest number) 86. Here, in the electronic tag number 81, the data item 1 (manufacturer) 82, and the data item 2 (manufacturing date) 83, values of “RFID — 002”, “abcd”, and “2006/9/1” are respectively stored. Yes, but other items have no value. In FIG. 14, the value “2006/10/1” is added to the data item 3 (maintenance contract start date) 84 by the writing process.

  Finally, storage of write history information (S4) will be described with reference to FIGS. 9, 15, and 16. FIG. FIG. 15 is a flowchart of the write history information saving process. FIG. 16 is a diagram for explaining information held in the electronic tag update history server.

  In FIG. 15, the read / write device 20 accepts input of a user ID and password by the user (S 401). Here, it is assumed that the input of the user ID “ComA” and the password “aaaa” is accepted. Next, the read / write device 20 inquires the access authority management server 30 about the input user ID and password information (S402). The access authority management server 30 checks whether the combination of the inquired user ID and password exists in the operator authentication information (S403). The combination of the user ID “ComA” and the password “aaaa” exists in the second line of the operator authentication information. Therefore, the process proceeds from step 404 to step 405. The read / write device 20 transmits information held in the electronic tag update history to the electronic tag history server 50 (S405). The information to be transmitted is the electronic tag history information in FIG. 9C, and this time, one line of information is transmitted. Next, the electronic tag history server 50 writes the received electronic tag number, data item, data content, update user ID, and update date / time in the server electronic tag update history (S406), and ends. When the access authority management server 30 does not exist in step 404, the access authority management server 30 ends the history information saving process.

  When the electronic tag update history remains, the read / write device 20 transmits the electronic tag update history information to the electronic tag history server as part of the update of the information held by the read / write device described with reference to FIG. May be.

  In FIG. 16, information to be written in the server electronic tag update history of the electronic tag history server 50 includes an electronic tag number 11, a data item 12, data contents 13, an update user ID 14, and an update date / time 15. Here, the content is the same as in FIG. 9C, but the electronic tag history server 50 is the sum of the electronic tag history information of the plurality of read / write devices 20. The server electronic tag update history described above is a writing history, but may include a reading history. At this time, the reading / writing device also saves the reading history.

  As described above, in this embodiment, reading / writing to the electronic tag according to the user authority of the read / write device 20 can be realized using the read / write device 20 not connected to the network 10. Since this user authority is time-limited, the validity of the user authority can be guaranteed by periodically connecting the read / write device 20 to the network 10 and updating the authority.

  The above-mentioned embodiment relates to total traceability over all the various distribution stages of products. However, there are industries in which a plurality of companies can read and write a single electronic tag, and a plurality of manufacturing companies from parts to final product assembly. It is also applicable to manufacturing traceability, meat traceability, etc. related to dairy farmers, logistics companies, and retailers.

It is a block diagram of a traceability system. It is a hardware block diagram of a read / write device. It is a hardware block diagram of an access authority change apparatus. It is a hardware block diagram of an access authority management server and an electronic tag history server. It is a flowchart explaining the whole operation | movement of a traceability system. It is a figure explaining provider authority information. It is a flowchart explaining update of provider authority information. It is a figure explaining provider authority information after updating. It is a figure explaining the information which a reading / writing apparatus hold | maintains. It is a flowchart explaining the update of the information which a reading / writing apparatus hold | maintains. It is a flowchart explaining a reading process. It is a flowchart explaining a writing process. It is a figure explaining the information which RFID hold | maintains. It is a figure explaining the information (after writing) which RFID hold | maintains. It is a flowchart of the preservation | save process of write history information. It is a figure explaining the information hold | maintained at an electronic tag update log | history server.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Network, 20 ... Read / write device, 21 ... Bus, 22 ... Central processing unit (CPU), 23 ... Memory, 24 ... Storage device, 25 ... I / O, 26 ... Network interface card (NIC), 27 ... Input device , 28 ... output device, 29 ... read / write unit (R / W unit), 30 ... access authority management server, 31 ... bus, 32 ... CPU, 33 ... memory, 34 ... storage device, 36 ... NIC, 40 ... change access authority Device: 41 ... Bus, 42 ... CPU, 43 ... Memory, 44 ... Storage device, 45 ... I / O, 46 ... NIC, 47 ... Input device, 48 ... Output device, 50 ... Electronic tag history server, 51 ... Bus, 52 ... CPU, 53 ... memory, 54 ... storage device, 56 ... NIC, 100 ... traceability system, 291 ... antenna.

Claims (5)

An access authority management device that manages access authority information connected to the network, and periodically connects to the network, receives a part of the access authority information from the access authority management device as limited access information, and holds it In a traceability system consisting of an electronic tag reader / writer,
The electronic tag read / write device receives the expiration date information of the limited access information from the access authority management device, retains the expiration date information, and reads / writes to / from an electronic tag having access authority until the expiration date A traceability system characterized by The traceability system according to claim 1,
And an access authority changing device that is connected to the network and updates the access authority information held by the access authority management device.
The access authority management device updates the access authority information after checking the validity of the access authority change request received from the access authority changing device. A traceability system according to claim 1 or claim 2, wherein
Furthermore, an electronic tag history management device connected to the network is provided,
The traceability system, wherein the electronic tag read / write device transmits electronic tag write history information recorded therein to the electronic tag history management device. A processor connected by an internal communication line; a memory; a network interface; an input / output interface; an input device connected to the input / output interface; an output device; and an electronic tag read / write unit; In an electronic tag read / write device in which the processor executes a program,
The memory holds the access right received through the network interface and its expiration date information,
An electronic tag read / write device that performs read / write with an electronic tag having an access right until the expiration date. The electronic tag read / write device according to claim 4,
The electronic tag read / write device, wherein the memory further holds an electronic tag update history.

Images