JP2009110471A - Production area certification system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a production area certification system capable of improving the reliability of production area information. <P>SOLUTION: A label reader 4 includes a label reading means 91 for reading encrypted information and a key certificate 26, a first key certificate transmission means 93 for transmitting the read key certificate 26 to a key authentication server 3, a decrypting means 94 for decrypting the encrypted information by a decryption key 25 included in the key certificate 26 when receiving notification that the key certificate 26 is valid from the key authentication server 3, and a display means 95 for displaying production area information obtained by decrypting the encrypted information, wherein the key authentication server 3 includes a first key certificate receiving means 88 for receiving the key certificate 26 from the label reader 4, a validity discrimination means 89 for discriminating that the acquired key certificate 26 is registered in a registration database 38 and that the acquired key certificate 26 is valid, and a validity notifying means 90 for notifying the label reader 4 that the key certificate 26 is valid when the key certificate 26 is determined to be valid. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a production location certification system capable of printing product production location information on a label.

2. Description of the Related Art Conventionally, there is known a system that acquires production place information of a product (product) or the like and manages the information to prove the validity of the production place of the target product. In this system, GPS (Global Positioning System) is used to acquire position information and time information of a processing place, a manufacturing place, or a distribution point of a product, and each piece of information (position information and time information) and information about the product is obtained. Record on the RFID tag attached to the product. Further, the serial number of the RFID tag and the above information are associated with each other and recorded and managed in the RFID database of the product (see, for example, Patent Document 1).
JP 2004-86381 A

  By the way, in the system for proving the legitimacy of the production place of the product as described above, it is assumed that the production place information such as the location information, the time information and the information on the product, which is the origin, is correct information. Become. However, in the distribution process of goods, it is conceivable that these production location information is tampered with by a malicious third party. And even if the production area information is falsified, the consumer cannot know whether the production area information has been falsified. For this reason, there is a problem that the consumer cannot determine whether or not the production area information is really correct, and the reliability of the consumer's production area information is reduced.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a production site certification system capable of improving the reliability of production site information.

  The production location certification system of the present invention is a label reading device that reads a label on which encrypted information obtained by encrypting production location information of a product and a key certificate including a decryption key for decrypting the encrypted information are printed. A production site certification system comprising an apparatus and a key authentication server having a registration database for registering a key certificate and connected to the label reading device via a network, wherein the label reading device includes encrypted information And a label reading means for reading the key certificate, a first key certificate sending means for sending the read key certificate to the key authentication server, and a notification that the key certificate is valid from the key authentication server. A key authenticating service comprising: a decrypting means for decrypting the encrypted information with a decryption key included in the key certificate; and a display means for displaying the production place information obtained by decrypting the encrypted information. Determines that the first key certificate receiving means for receiving the key certificate from the label reading device and the key certificate obtained by the first key certificate receiving means are registered in the registration database and are valid. And a validity notifying unit for notifying the label reading device of the fact that the key certificate is determined to be valid by the validity determining unit.

  According to this configuration, the label reading device reads the production location information and the key certificate printed on the label, and transmits the read key certificate to the key authentication server. When the key authentication server determines the validity of the key certificate received from the label reading device and determines that the key certificate is valid, the key authentication server transmits a notification to that effect to the label reading device. Upon receiving the notification that the key certificate is valid, the label reading device decrypts the production location information with the decryption key included in the key certificate and displays the decrypted information. Thereby, it is possible to prove the validity (validity) of the decryption key printed on the label, that is, that the decryption key is generated by the producer. Further, by decrypting the production area information with this decryption key, it is possible to prove that the production area information is correct information, so that the reliability of the consumer with respect to the production area information can be improved. The decryption key used for decrypting the production location information may be the one included in the key certificate printed on the label, or when it is determined that the key certificate is valid Alternatively, the one sent from the key authentication server to the label reading device may be used.

  In this case, the system further includes a printer that issues a label and is connected to the key authentication server via the network, and the printer stores an ID storage unit that stores a printer ID that can uniquely identify itself. Position information acquisition means for acquiring position information where the machine is installed; production area information generation means for generating production area information including a printer ID and position information; and an encryption key for encrypting the production area information; Key storage means for storing a decryption key that forms a pair with the encryption key, key certificate storage means for storing the key certificate, and encryption processing means for encrypting the production site information using the encryption key A key transmitting means for transmitting the decryption key and the printer ID to the key authentication server, a second key certificate receiving means for receiving the key certificate for transmission by the key transmitting means, A key authentication server that receives a decryption key and a printer ID transmitted from the printer, and a key receiving server that receives the decryption key and the printer ID. A key determination unit that determines the validity of the decryption key, and a key certificate that generates a key certificate including the decryption key and registers it in the registration database when the key determination unit determines that the decryption key is valid It is preferable to include a registration unit and a second key certificate transmission unit that transmits the key certificate to the printer.

  According to this configuration, the printer generates production location information including a printer ID that can uniquely identify the printer and position information of the printer. Then, the production site information is encrypted with the encryption key that it owns (stores). In addition, the printer transmits its own printer ID and a decryption key possessed (stored) by itself (a key paired with the above encryption key) to the key authentication server. The key authentication server determines whether or not the decryption key is a valid key based on the received printer ID and decryption key. When the key authentication server determines that the decryption key is valid, the key authentication server transmits a key certificate indicating that the decryption key is correct to the printer (the key certificate includes the decryption key). ing). The printer that has received the key certificate stores the key certificate and prints the key certificate on the label together with the production site information. As described above, since the production area information is encrypted by the encryption key owned by the producer, the production area information can be prevented from being falsified, and the key authentication server makes a decryption key paired with the encryption key owned by the producer. By certifying the validity, it is possible to determine that the production site information that can be decrypted with this decryption key is correct information. Thus, the consumer can decrypt only the valid production location information (production location information encrypted by the producer) by using the decryption key, and the production location information that can be decrypted using this decryption key is valid. It can be recognized that there is. The key authentication server is preferably operated by a third party organization (certification authority). According to this configuration, the validity of the decryption key can be more reliably guaranteed. In addition, it is preferable that a printer ID is registered in advance in the key authentication server, and the validity of the registered printer ID is guaranteed. According to this configuration, the key authentication server can determine the validity of the decryption key transmitted together with the printer ID depending on whether the printer ID is registered.

  In these cases, it is preferable that the production area information and the key certificate are generated as a two-dimensional symbol, and the printing means prints text information representing the item of the commodity and the two-dimensional symbol on the label.

  According to this configuration, the production location information and the key certificate are printed as a two-dimensional symbol image such as a so-called QR code. As a result, the production location information and the key certificate can be easily and quickly read by a code reader or a mobile phone that is widely used without requiring a special reading device. Further, for example, since the item information is printed as text on the label, such as “XX production melon”, a general purchaser can recognize the production place of the product at a glance.

  In these cases, the key storage means further stores the expiration date of the encryption key, and the encryption processing means refers to the key storage means when encrypting and determines the validity of the encryption key based on the expiration date. If it is determined that the encryption key is valid, it is preferable to encrypt the production area information.

  According to this configuration, the validity of the encryption key is determined based on the expiration date of the encryption key, and the production area information is encrypted when it is determined to be valid. As a result, it is possible to avoid encrypting the production site information using an invalid encryption key, that is, an encryption key whose validity is not guaranteed.

  In these cases, the position information is an information resource in which numerical information including latitude and longitude indicating the installation location of the printer, address information indicating the address of the installation location, and map information indicating the installation location on a map are stored. Preferably, it consists of at least one of URLs indicating the location of

  According to this configuration, position information indicating the installation location of the printer can be provided in various formats, so that position information in accordance with the needs of the producer or customer can be provided.

  Hereinafter, a production place certification system according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings. In the present embodiment, a case where GPS (Global Positioning System) is used as means for acquiring position information will be described.

  FIG. 1 is a system configuration diagram of the production site certification system 1. As shown in the figure, a production site certification system 1 includes a printer 2 that generates production site information and prints it on a label L, and a label reader 4 (for example, a mobile phone) that reads the information printed on the label L. A key authentication server 3 connected to the printer 2 and the label reading device 4 via a network, and a production site management server 5 for registering producer information. The production place certification system 1 in the claims comprises a printer 2, a key authentication server 3, and a label reading device 4.

  The printer 2 includes a control unit 11, a time measuring unit 12, a GPS receiving unit 13, a printer ID storage unit 14, a key storage unit 15, a key certificate storage unit 16, a communication unit 17, and a printing unit 18. The control unit 11 includes a CPU 21, a ROM 22, and a RAM 23, and controls the entire printer 2. The ROM 22 stores a control program and control data for the CPU 21 to execute various processes. The RAM 23 is used as a work area when the CPU 21 executes various processes.

  The timer 12 is an RTC (Real Time Clock) built in the printer 2 and counts the date and time. In the present embodiment, it is used to acquire date information (print date information 63) when printing the label L. The GPS receiving unit 13 is for receiving radio signals including orbits of a plurality of satellites and time data from atomic clocks mounted on the satellites. The CPU 21 calculates a relative distance difference from each satellite from the time difference of the received radio signal, and acquires the position information 64 of the installation location of the printer 2 based on the calculation result.

  The printer ID storage unit 14 stores a printer ID that can uniquely identify the printer 2. This printer ID is assigned by the manufacturer (seller) of the printer 2 and is registered in the production site management server 5 (production location certification database 52), which will be described later, in association with the information of the producer (purchaser of the printer 2). Is done. The printer ID storage unit 14 is configured as an external storage medium that can be attached to and detached from the printer 2. Therefore, for example, when the printer 2 fails, the printer ID can be taken over by removing the printer ID storage unit 14 and attaching it to the new printer 2. As a result, even when the printer 2 is replaced, it can be continuously used without updating the registration contents in the production site management server 5.

  The key storage unit 15 is paired with the encryption key 24 for encrypting production place information (details will be described later) for specifying (certifying) the production place of the product, and the encryption key 24 to be encrypted. The decryption key 25 for decrypting the production area information is recorded. Also, the expiration date of the encryption key 24 is recorded. The key certificate storage unit 16 records a key certificate 26 issued when the decryption key 25 is registered in the key authentication server 3 described later. The communication unit 17 communicates with the key authentication server 3 via a network. The CPU 21 transmits (registers) the decryption key 25 to the key authentication server 3 via the communication unit 17 or receives the key certificate 26 from the key authentication server 3. The printing unit 18 prints the product information 61 (items, etc.), the production location information, the key certificate 26 and the printing date / time information 63 input from the producer on the label L. As a print format, it is possible to print as a text format (a format in which each information is represented by characters) or a two-dimensional symbol 67 (such as a QR code).

  On the other hand, the key authentication server 3 is provided with a hardware configuration mounted on a general personal computer in addition to the control unit 31, the communication unit 32, and the storage unit 33. The control unit 31 includes a CPU 35, a ROM 36, and a RAM 37, and controls the entire key authentication server 3. The ROM 36 stores a control program and control data for the CPU 35 to execute various processes. The RAM 37 is used as a work area when the CPU 35 executes various processes.

  The communication unit 32 communicates with the printer 2 and the label reading device 4 via the network, and receives the printer ID and the decryption key 25 to be registered from the printer 2. Further, the communication unit 32 receives the key certificate 26 from the label reading device 4. The storage unit 33 has a registration database 38. In the registration database 38, the printer ID is registered in advance, and thereby the validity of the printer ID registered in the registration database 38 is guaranteed. The registration database 38 records a key certificate 26 (including the decryption key 25) that associates the decryption key 25 received from the printer 2 with the printer ID of the printer 2. The key authentication server 3 is preferably operated by a third party organization (certification authority) other than the organization that manages the printer 2, whereby the validity of the decryption key 25 can be more reliably guaranteed.

  The production site management server 5 has a hardware configuration mounted on a general personal computer, in addition to having a production site certification database 52 in the storage unit 51. In the production site certification database 52, the printer ID of the printer 2 on which the producer prints the label L is associated with the information of the producer (producer information 65, such as name, telephone number, and mail address). Recorded.

  The label reading device 4 includes a label reading unit 41, a display unit 42, a communication unit 43, an operation unit 44, and a control unit 45 that controls these units. The label reading unit 41 reads the two-dimensional symbol 67 printed on the label L. The display unit 42 displays the production area information (position information 64) read by the label reading unit 41 on the screen. The operation unit 44 is used to perform a button operation for starting the reading of the label L, a screen displayed on the display unit 42, and the like. The communication unit 43 communicates with the key authentication server 3 and the production site management server 5.

  The control unit 45 controls the label reading unit 41 to read the two-dimensional symbol 67 printed on the label L by operating the label L reading button (not shown) by the operation unit 44, and reads the read two-dimensional symbol 67. The production location information and the key certificate 26 are obtained by analysis. In addition, the control unit 45 transmits the read key certificate 26 to the key authentication server 3 and confirms its validity. When the validity of the key certificate 26 is recognized, the production location information (encrypted information) encrypted with the decryption key 25 attached to the key certificate 26 is decrypted, and the position information 64 and the printer ID are obtained. get. Further, the control unit 45 accesses the production site management server 5, searches the production site certification database 52 by the printer ID, and obtains producer information 65.

  Here, with reference to FIG. 2, the display state of the label reader 4 when the production area information (two-dimensional symbol 67) printed on the label L is read will be described. The contents displayed on the label reading device 4 include product information 61 (items), production location information 64, and producer information 65 acquired from the production location certification database 52, as shown in FIG. Is displayed. As the location information 64 of the production area, address information indicating the address of the production area, numerical information indicating the latitude and longitude obtained from the GPS 6, URL for obtaining the map information of the production area, and the like are displayed, and the URL is selected. Then, the production area map 66 is displayed as shown in FIG. As the producer information 65, the name of the producer, a telephone number, an e-mail address, the URL of a homepage established by the producer (related to the producer), and the like are displayed. Thus, since the position information 64 can be provided in various formats, the position information 64 in accordance with the needs of the producer or customer can be provided. In addition, by providing information such as the URL of the home page established by the producer as the producer information 65, the person who is the producer or how the product is produced to the customer. Can provide detailed information such as

  Next, the functional configuration of the printer 2, the key authentication server 3, and the label reading device 4 will be described with reference to FIG. As shown in FIG. 3, the printer 2 includes, as a functional configuration, a key storage unit 71, a key transmission unit 72, a second key certificate reception unit 73, a key certificate storage unit 74, an input information acquisition unit 75, and position information acquisition. Means 76, ID storage means 77, label number generation means 78, production place information generation means 79, encryption processing means 80, encoding means 81, date / time information acquisition means 82, and printing means 83.

  The key storage means 71 stores an encryption key 24 for encrypting the production place information, an expiration date of the encryption key 24, and a decryption key 25 for decrypting the encrypted production place information. The key transmission unit 72 transmits the printer ID and the decryption key 25 to the key authentication server 3. The second key certificate receiving unit 73 receives the key certificate 26 indicating the validity of the decryption key 25 from the key authentication server 3. This key certificate 26 includes a decryption key 25 whose validity has been proved. The key certificate storage unit 74 records the key certificate 26 received (issued) from the key authentication server 3.

  The input information acquisition unit 75 acquires product information 61 input by the producer. The position information acquisition unit 76 acquires the position information 64 obtained by the GPS receiver 13. The ID storage unit 77 records a printer ID for uniquely identifying the printer 2. The label number generation means 78 generates a label number for uniquely identifying the label L to be generated. The production location information generating unit 79 generates the production location information by associating the position information 64 acquired by the location information acquisition unit 76, the printer ID recorded in the ID storage unit 77, and the label number generated by the label number generation unit 78. To do. Further, the encryption processing means 80 encrypts the generated production site information (or information obtained by adding the product information 61 to the production site information). Prior to this encryption, the encryption processing unit 80 refers to the expiration date of the encryption key 24 recorded in the key storage unit 71, and based on this expiration date (whether the printing date and time described later is before the expiration date). The validity of the encryption key 24 is determined. If it is determined that the encryption key 24 is valid, the production area information is encrypted. The encoding unit 81 encodes the encrypted production location information and the key certificate 26 recorded in the key certificate storage unit 74 to generate a two-dimensional symbol 67. In this way, by encrypting the production area information with the encryption key 24 owned by the producer, it is possible to enhance security against falsification of the production area information, and further enhance the effect of preventing the production area from being falsified. Can do. Further, the validity of the encryption key 24 is determined based on the expiration date of the encryption key 24, and the production area information is encrypted when it is determined to be valid. It is possible to avoid encrypting the production site information using the encryption key 24 that is not guaranteed.

  The date / time information acquisition unit 82 acquires the printing date / time information 63 obtained by the timer 12 (RTC). The printing unit 83 prints the product information 61 acquired by the input information acquisition unit 75 and the printing date / time information 63 acquired by the date / time information acquisition unit 82 in a text format, and the encrypted production location information and the key certificate 26. A two-dimensional symbol 67 is printed on the label L (see FIG. 1). By printing the production area information with the two-dimensional symbol 67, the production area information can be easily and quickly read by a reading device (code reader, mobile phone, etc.) that is generally widespread. Further, by printing item information in a text format such as “XX produced melon” on the label L, a general purchaser can recognize the production place of the product at a glance. Furthermore, by printing the printing date and time information 63 in a text format, it is possible to recognize at a glance when the label L was created, that is, when the target product was produced (harvested).

  The key authentication server 3 includes a key reception unit 84, a key determination unit 85, a key certificate registration unit 86, a second key certificate transmission unit 87, a first key certificate reception unit 88, a validity determination unit 89, and a validity notification. Means 90 and a registration database 38 are provided.

  The key receiving unit 84 receives the printer ID and the decryption key 25 from the printer 2. The key determination unit 85 determines whether the printer ID received from the printer 2 has been registered in the registration database 38, and if it has been registered, determines that the decryption key 25 received together with the printer ID is a valid key. To do. When the key determination unit 85 determines that the decryption key 25 is valid, the key certificate registration unit 86 receives the key certificate 26 (including the decryption key 25) that guarantees the validity of the decryption key 25. Generate and register in the registration database 38. The second key certificate transmission unit 87 transmits the key certificate 26 registered by the key certificate registration unit 86 to the printer 2. The first key certificate receiving unit 88 receives the key certificate 26 (the key certificate 26 read by the label reading device 4) from the label reading device 4. The validity determination unit 89 determines that the key certificate 26 acquired by the first key certificate reception unit 88 is registered in the registration database 38 and is valid. When the validity determination unit 89 determines that the key certificate 26 is valid, the validity notification unit 90 notifies the label reading device 4 to that effect.

  Thus, by verifying the validity of the decryption key 25 paired with the encryption key 24 owned by the producer by the key authentication server 3, the production site information that can be decrypted with the decryption key 25 is correct information. Can be judged. Thus, the consumer can decrypt only the valid production location information (production location information encrypted by the producer) by using the decryption key 25, and the production location information that can be decrypted using the decryption key 25 is valid. It can be recognized as a thing.

  The label reading device 4 includes label reading means 91, symbol analysis means 92, first key certificate transmission means 93, decryption means 94, and display means 95. The label reading unit 91 reads the two-dimensional symbol 67 printed on the label L. The symbol analysis unit 92 analyzes the two-dimensional symbol 67 read by the label reading unit 91 and acquires the encrypted production location information and the key certificate 26. The first key certificate transmission unit 93 transmits the key certificate 26 acquired by the symbol analysis unit 92 to the key authentication server 3. When the validity of the key certificate 26 is proved, the decryption means 94 decrypts the production place information encrypted by the decryption key 25 attached to the key certificate 26. The display means 95 displays the production place information (position information 64) decrypted by the decryption means 94 and the producer information 65 acquired from the production place management server 5.

  Next, with reference to FIG. 4, a series of processes for registering the key certificate 26 by the printer 2 will be described. It is assumed that the printer ID of the target printer 2 is registered (recorded) in advance in the key authentication server 3, and the validity of the registered printer ID is guaranteed. First, the printer 2 transmits its printer ID and decryption key 25 to the key authentication server 3 (S01). The key authentication server 3 receives the printer ID and the decryption key 25 (S02), and determines the validity of the decryption key 25 transmitted together with the printer ID based on whether the received printer ID is registered (S03). If the received printer ID is not registered in the registration database 38 (S04; No), the key authentication server 3 determines that the decryption key 25 received together with the printer ID is invalid, and notifies the printer 2 accordingly. (S05). On the other hand, when the received printer ID is registered in the registration database 38 (S04; Yes), the key authentication server 3 determines that the decryption key 25 received together with the printer ID is valid, and uses the decryption key 25. The key certificate 26 is generated (S06), and the key certificate 26 is registered in the registration database 38 (S07). Then, the key authentication server 3 transmits the key certificate 26 to the printer 2 (S08). The printer 2 receives the key certificate 26 from the key authentication server 3 (S09), and records the key certificate 26 in the key certificate storage unit 16 (S10).

  Next, with reference to FIG. 5, a series of flow from acquisition of production area information to label printing will be described. First, when the product information 61 (item) is input by the producer, the printer 2 acquires the product information 61 (S21). Here, when a predetermined operation is performed by the producer (for example, a predetermined key is pressed), the printer 2 receives a signal from the GPS 6 and acquires its own installation location, that is, position information 64 indicating the production location. (S22). Subsequently, the printer 2 reads the printer ID assigned to it from the printer ID storage unit 14 (S23), and generates a label number for specifying the label L (S24). Subsequently, the printer 2 acquires the print date information 63 indicating the print date from the RTC (timer 12) built in the printer 2 (S25). Then, the printer 2 associates the position information 64, the printer ID, and the label number to generate production location information (S26). Next, the printer 2 checks the expiration date of the encryption key 24 recorded in the key storage unit 15 (S27). If the expiration date of the encryption key 24 has passed (S28; No), the production location information is displayed. Without encryption, the producer is notified of this (expired) (S29). On the other hand, if it is within the expiration date (S28; Yes), the printer 2 encrypts the generated production location information and the acquired product information 61 (S30) and records them in the encrypted production location information and key certificate storage unit 16. The key certificate 26 is encoded to generate a two-dimensional symbol 67 (S31). Then, the product information 61, the printing date / time information 63, and the two-dimensional symbol 67 (production location information and key certificate 26) are printed on the label L (S32).

  Next, with reference to FIG. 6, a series of flow from reading production area information by the label reader 4 to displaying production area information will be described. First, the label reading device 4 reads the two-dimensional symbol 67 printed on the label L (S41). Next, the label reading device 4 analyzes the read two-dimensional symbol 67 (S42), and acquires the key certificate 26 and encrypted production place information (S43). Subsequently, the label reading device 4 transmits the acquired key certificate 26 to the key authentication server 3 (S44). The key authentication server 3 receives the key certificate 26 from the label reading device 4 (S45), and determines the validity of the key certificate 26 (S46). When the received key certificate 26 is not registered in the registration database 38 (S47; No), the key authentication server 3 determines that the key certificate 26 is invalid and notifies the label reading device 4 to that effect. (S48). On the other hand, when the received key certificate 26 is registered in the registration database 38 (S47; Yes), the key authentication server 3 determines that the key certificate 26 is valid, and sends the key to the label reading device 4. It is notified that the certificate 26 is valid (S49). When receiving the notification that the key certificate 26 is valid, the label reading device 4 decrypts the production site information encrypted using the decryption key 25 attached to the key certificate 26 (S50). Subsequently, the label reading device 4 searches the production site certification database 52 using the printer ID included in the production site information, and acquires the producer information 65 corresponding to the printer ID (S51). Then, the label reading device 4 displays the acquired producer information 65 and position information 64 included in the production area information on the screen (S52).

  As described above, according to the present embodiment, the label reading device 4 reads the production location information and the key certificate 26 printed on the label L, and transmits the key certificate 26 to the key authentication server 3. When the key authentication server 3 determines the validity of the received key certificate 26 and determines that the key certificate 26 is valid, the key authentication server 3 transmits a notification to that effect to the label reading device 4. Receiving the notification that the key certificate 26 is valid, the label reading device 4 decrypts the production location information with the decryption key 25 included in the key certificate 26 and displays the decrypted information. Thereby, it is possible to prove the validity (validity) of the decryption key 25 (key certificate 26) printed on the label L, that is, that the decryption key 25 is generated by the producer. Further, by decrypting the production area information with the decryption key 25, it is possible to prove that the production area information is correct information, so that the reliability of the consumer with respect to the production area information can be improved.

  The decryption key 25 used for decrypting the production location information may be the one included in the key certificate 26 printed on the label L, or the key certificate 26 is valid. If determined, the key authentication server 3 may transmit the label reading device 4.

  Further, the encryption key 24 and the decryption key 25 recorded in the key storage unit 15 may be generated by the printer 2 or those generated by an external terminal (for example, a personal computer) are stored in the key storage unit 15. It may be recorded.

  In this embodiment, the production location information and the key certificate 26 are printed on the label L as the two-dimensional symbol 67. However, the present invention is not limited to this, and the production location information and the key certificate are printed on an electronic tag such as an RFID tag. 26 may be recorded and attached to the label L. Also, printing of the two-dimensional symbol 67 and attachment of an electronic tag may be used in combination.

  In the present embodiment, the expiration date of the encryption key 24 is recorded, and the validity of the encryption key 24 is confirmed by confirming the expiration date of the encryption key 24 prior to the encryption of the production site information. However, the present invention is not limited to this, and the printer 2 may confirm the validity of the encryption key 24 with respect to the key authentication server 3 prior to encryption of the production area information.

  In this embodiment, the encryption key 24 and the decryption key 25 are managed and authenticated based on the public key encryption method. However, the present invention is not limited to this, and other encryption methods can be applied.

  Further, in the present embodiment, the position information 64 is acquired by information (signal) obtained from the GPS 6, but the present invention is not limited to this, and the position information 64 is acquired by receiving base station information of the mobile phone network. Also good.

  In the present embodiment, the timer 2 is provided in the printer 2 to acquire the date / time information (print date / time information 63). However, the present invention is not limited to this, and the position information 64 is obtained from the GPS 6 or base station information of the mobile phone network. Date and time information obtained at the same time may be used. Thereby, the configuration of the printer 2 can be simplified and the manufacturing cost can be suppressed.

  In addition, the device configurations, processing steps, and the like of the printer 2, the key authentication server 3, and the label reading device 4 can be appropriately changed without departing from the gist of the present invention.

It is a system configuration figure of a production place certification system concerning this embodiment. It is a figure which shows the example of a display of a label reading apparatus when a label is read. It is a figure which shows the function structure of a label reading apparatus, a key authentication server, and a printer. It is a flowchart which shows a series of flows of registration of the key certificate by a printer. It is a flowchart which shows a series of flow from acquisition of production place information by a printer to label printing. It is a flowchart which shows a series of flows from the reading of production place information by a label reader to the display of production place information.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Production place certification system 2 ... Printer 3 ... Key authentication server 4 ... Label reader 24 ... Encryption key 25 ... Decryption key 26 ... Key certificate 38 ... Registration database 66 ... Map 67 ... Two-dimensional symbol 71 ... Key storage means 72 ... key sending means 73 ... second key certificate receiving means 74 ... key certificate storage means 76 ... position information acquisition means 77 ... ID storage means 79 ... production place information generation means 80 ... encryption processing means 83 ... printing means 84 ... Key receiving means 85 ... Key determining means 86 ... Key certificate registering means 87 ... Second key certificate transmitting means 88 ... First key certificate receiving means 89 ... Validity determining means 90 ... Validity notifying means 91 ... Label reading means 93 ... first key certificate transmission means 94 ... decryption means 95 ... display means L ... label

Claims (5)

A label reading device that reads a label on which is printed encrypted information obtained by encrypting production area information of a product, and a key certificate that includes a decryption key for decrypting the encrypted information;
A production site certification system comprising a registration database for registering the key certificate, and a key authentication server connected to the label reader via a network,
The label reader is
Label reading means for reading the encryption information and the key certificate;
First key certificate transmission means for transmitting the read key certificate to the key authentication server;
Decryption means for decrypting the encrypted information using the decryption key included in the key certificate when receiving a notification from the key authentication server that the key certificate is valid;
Display means for displaying the production area information obtained by decrypting the encrypted information,
The key authentication server
First key certificate receiving means for receiving the key certificate from the label reader;
Validity determining means for determining that the key certificate acquired by the first key certificate receiving means is registered in the registration database and is valid;
A production location certification system, comprising: validity notification means for notifying the label reader when the key certificate is determined to be valid by the validity determination means. As a system component,
A printer that issues the label and is connected to the key authentication server via a network;
The printer is
ID storage means for storing a printer ID capable of uniquely identifying itself;
Location information acquisition means for acquiring location information where the device is installed;
Production area information generating means for generating the production area information including the printer ID and the position information;
Key storage means for storing an encryption key for encrypting the production area information and the decryption key paired with the encryption key;
Key certificate storage means for storing the key certificate;
Encryption processing means for encrypting the production site information with the encryption key;
Key transmitting means for transmitting the decryption key and the printer ID to the key authentication server;
Second key certificate receiving means for receiving the key certificate for transmission by the key transmitting means;
Printing means for printing the production area information and the key certificate on the label,
The key authentication server
Key receiving means for receiving the decryption key and the printer ID transmitted from the printer;
A key discriminating unit for discriminating the validity of the decryption key upon receipt of the decryption key and the printer ID;
A key certificate registration unit configured to generate the key certificate including the decryption key and register the key certificate in the registration database when the key determination unit determines that the decryption key is valid;
Second key certificate transmission means for transmitting the key certificate to the printer;
The production place certification system according to claim 1, further comprising: The production location information and the key certificate are generated as a two-dimensional symbol,
The production place certification system according to claim 2, wherein the printing unit prints text information representing an item of the product and the two-dimensional symbol on the label. The key storage means further stores an expiration date of the encryption key;
The encryption processing means refers to the key storage means when performing the encryption, determines the validity of the encryption key based on the expiration date, and determines that the encryption key is valid, 4. The production place certification system according to claim 2, wherein the production place information is encrypted.   The location information includes numerical information including latitude and longitude indicating the installation location of the printer, address information indicating an address of the installation location, and a location of an information resource in which map information indicating the installation location on a map is stored The production place certification system according to any one of claims 2 to 4, wherein the production place certification system comprises at least one of URLs.

Images