JP2010286301A - Moving state monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a moving state monitoring system capable of enhancing the security of authentication by use of RFID tags. <P>SOLUTION: The monitoring system includes: an RFID reading part for reading information for RFID transmitted by an RFID tag, through a plurality of receivers provided along a plurality of paths communicating with an authentication position; a movement locus accumulation part for identifying and accumulating movement loci of the RFID tag from among the plurality of paths, based on the differences in time between receptions of the information for RFID by the individual receivers; a storage wherein the information for RFID is previously stored being associated with locus information for authentication selected from among the plurality of paths and information for personal authentication different from the information for RFID; and an authentication part for performing personal authentication based on the results of comparison between the movement loci of the RFID tag accumulated in the movement locus accumulation part and locus information for authentication being stored in the storage when authentication operation is performed at the authentication position by using the information for personal authentication. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a dynamic monitoring system.

  As a conventional dynamic monitoring system, a system is proposed in which authentication is performed using current position information obtained from an RFID tag to improve security (for example, see Patent Document 1).

JP 2009-31055 A

  However, the device described in Patent Document 1 has a problem that when an RFID tag is used by a third party, spoofing can be performed.

  The present invention has been made to solve the above-described problems, and an object thereof is to provide a dynamic monitoring system capable of improving the security of authentication using an RFID tag.

  The movement monitoring system according to the present invention includes an RFID reader that reads information for RFID transmitted by the RFID tag via a plurality of receivers provided along a plurality of paths leading to an authentication position, and each of the receivers And a movement trajectory accumulating unit for identifying and accumulating the movement trajectory of the RFID tag from the plurality of paths based on a difference in time when the RFID information is received, and the RFID information includes the plurality of paths. Authentication unit using the personal authentication information at the authentication position and a storage unit stored in advance corresponding to the authentication trajectory information selected from the above and the RFID authentication information different from the RFID information Is performed based on a comparison result between the movement trajectory of the RFID tag stored in the movement trajectory storage unit and the authentication trajectory information stored in the storage unit, Those with an authentication unit that performs a person authentication.

  According to the present invention, the security of authentication using an RFID tag can be improved.

It is a block diagram of the dynamic monitoring system in Embodiment 1 of this invention. It is a figure for demonstrating the registration method of the locus information for authentication of the dynamics monitoring system in Embodiment 1 of this invention. It is a flowchart for demonstrating the accumulation | storage method of the movement locus | trajectory of the dynamics monitoring system in Embodiment 1 of this invention. It is a figure for demonstrating the case where it authenticates with the dynamics monitoring system in Embodiment 1 of this invention. It is a figure for demonstrating the case where authentication is refused by the dynamics monitoring system in Embodiment 1 of this invention. It is a flowchart for demonstrating the authentication operation | movement of the dynamics monitoring system in Embodiment 1 of this invention.

  A mode for carrying out the invention will be described with reference to the accompanying drawings. In addition, in each figure, the same code | symbol is attached | subjected to the part which is the same or it corresponds, The duplication description is simplified or abbreviate | omitted suitably.

Embodiment 1 FIG.
First, the configuration of the dynamic monitoring system will be described with reference to FIG.
FIG. 1 is a block diagram of a dynamic monitoring system according to Embodiment 1 of the present invention.
As shown in FIG. 1, the behavior monitoring system includes an RFID reading unit 1, a control unit 2, a registration information storage unit 3, a behavior information determination unit 4, a movement locus storage unit 5, a card reading unit 6, and a card registration information storage unit 7. , A registered movement locus storage unit 8, an authentication unit 9, and a display unit 10.

  The RFID reader 1 has a plurality of receiving devices (not shown) provided along a plurality of paths leading to an authentication position in a monitoring area such as a building, for example, an RFID tag owned by a user via an antenna. It has a function of reading information for RFID to be transmitted and position information of a receiving device that has received the information for RFID. The control unit 2 has a function of controlling the receiving device via the RFID reading unit 1. Further, the control unit 2 has a function of reading the RFID information and the position information of the receiving device from the RFID reading unit 1.

  The registration information storage unit 3 has a function of storing dynamic information corresponding to RFID information, for example, each attribute such as a name. The dynamic information determination unit 4 has a function of reading RFID information and position information of the receiving device from the control unit 2 and reading dynamic information corresponding to the RFID information from the registration information storage unit 3.

  The movement trajectory accumulating unit 5 has a function of reading RFID information, receiving device position information, and dynamic information from the dynamic information determining unit 4. In addition, the movement trajectory accumulating unit 5 has a function of identifying and accumulating the movement trajectory of the RFID tag from a plurality of paths based on the difference in time at which each receiving device receives the RFID information.

  The card reading unit 6 has a function of reading information in a user-owned card via a card reading device (not shown) provided at an authentication position. The card registration information storage unit 7 has a function of previously storing personal authentication information corresponding to information in the card. The registered movement trajectory storage unit 8 has a function of previously storing RFID information corresponding to information in the card in association with authentication trajectory information selected from a plurality of paths.

  The authentication unit 9 has a function of reading RFID information, dynamic information, and information on the movement track of the RFID tag from the movement track storage unit 5. The authentication unit 9 is stored in the movement track of the RFID tag stored in the movement track storage unit 5 and the registered movement track storage unit 8 when a personal authentication operation is performed using a card at the authentication position. A function for performing personal authentication based on the comparison result with the locus information for authentication is provided. The display unit 10 has a function of reading the dynamic information and the authentication result from the authentication unit 9 and displaying them on the display screen.

Next, a method for registering authentication trajectory information in the registered movement trajectory storage unit 8 will be described with reference to FIG.
FIG. 2 is a diagram for explaining a method for registering authentication trajectory information in the behavior monitoring system according to the first embodiment of the present invention.
In FIG. 2, reference numeral 11 denotes a display screen of the registration display device. The trace information for authentication is registered using a GUI or the like. That is, when RFID information is input by an operation on the display screen 11, a floor schematic diagram 12 and a note 13 of the building are displayed.

  In the center of the left side of the floor schematic diagram 12, a room 14 is shown. In the lower center of the room 14, a door A15 is shown. A room 16 is shown on the upper right side of the floor schematic diagram 12. In the lower center of the room 16, a door B17 is shown. A room 18 is shown on the lower right side of the floor schematic diagram 12. In the upper center of the room 18, a door C19 is shown. A card reader (not shown) is provided on the entrance side of the door A15, door B17, and door C19. That is, it is the authentication position in the building of the door A15, the door B17, and the door C19.

  A passage is shown along the upper and lower sides and the right side of the room 14. The center of the right side passage of the room 14 is shown connected to the passage between the rooms 16 and 18. Here, the first detection area 20 by the receiving device is shown on the passage near the upper left corner of the room 14. Further, the second detection area 21 by the receiving device is shown on the intersection of the passage on the right side of the room 14 and the passage between the rooms 17 and 18. Furthermore, the 3rd detection area 22 by a receiver is shown on the channel | path near door A15.

  On the other hand, the notice 13 displays the method of “trajectory registration”. That is, first, “designation of the target door” is performed. In FIG. 2, the door C19 is designated as the target door by touching the display screen 11 near the door C19. Thereafter, “trajectory registration” is performed. Specifically, “registration of trajectory” is performed by “specifying the order of passage through the tag detection area”. In FIG. 2, by touching the vicinity of the first detection area 20 and the vicinity of the second detection area 21 of the display screen 11 in order, the first detection area 20 and the second detection area are not passed through the third detection area 22. The trajectory up to door C is designated in the order of 21. Thereby, the locus information for authentication 23 is registered.

  After that, “passing time designation” is performed. Specifically, “passing time designation” is performed by “designating how many minutes before the card authentication is the target”. In FIG. 2, “5 minutes before” (not shown) is designated as “passing time designation”.

Next, a method for accumulating the movement locus by the movement locus accumulating unit 5 will be described with reference to FIG.
FIG. 3 is a flowchart for explaining a method of accumulating the movement trajectory of the dynamic monitoring system according to the first embodiment of the present invention.
First, when the power is turned on, in step S1, RFID information reading processing is performed, and the process proceeds to step S2. In step S2, it is determined whether or not the RFID information has been read.

  If the RFID information cannot be read, step S1 is repeated. If the RFID information can be read, the process proceeds to step S3. In step S3, the registration data regarding the dynamic information corresponding to the RFID information is read via the dynamic information determination unit 4, and the process proceeds to step S5. In step S5, the dynamics are specified from the registration data, and information on the movement path of the RFID tag is recorded and accumulated based on the difference between the position information of the receiving device and the time when the RFID information is received. At the same time, the time when the movement track information is recorded is also associated and stored.

Next, a user authentication method by the authentication unit 9 will be described.
First, the case where a user is authenticated is demonstrated using FIG.
FIG. 4 is a diagram for explaining a case where authentication is performed by the dynamic monitoring system according to Embodiment 1 of the present invention.

  On the left side of FIG. 4, a registration pattern of authentication trajectory information registered in the description using FIG. 2 is shown. On the other hand, the right side of FIG. 4 shows a matching pattern corresponding to the information of the movement path 24 of the RFID tag stored in the description using FIG. As shown in FIG. 4, the locus of the registered pattern and the matching pattern is the same. Further, the locus of the collation pattern is accumulated 5 minutes ago, and satisfies the condition “within 5 minutes” of the registered pattern. For this reason, the user is authenticated. Thereby, the unlocking process of the door C19 is performed.

Next, a case where the user is denied authentication will be described with reference to FIG.
FIG. 5 is a diagram for explaining a case where authentication is rejected by the dynamic monitoring system according to the first embodiment of the present invention.

  On the left side of FIG. 5, a registration pattern of authentication trajectory information registered in the description using FIG. 2 is shown. On the other hand, the right side of FIG. 5 shows a collation pattern corresponding to the information of the movement locus 25 of the RFID tag stored in the description using FIG. As shown in FIG. 5, the route of the registered pattern and the matching pattern is the same. However, the locus of the collation pattern is accumulated 6 minutes ago and does not satisfy the “within 5 minutes” condition of the registered pattern. For this reason, the user is denied authentication. That is, the unlocking process of the door C19 is not performed.

Next, the authentication operation at the door C19 by the dynamic monitoring system will be described with reference to FIG.
FIG. 6 is a flowchart for explaining the authentication operation of the dynamic monitoring system according to the first embodiment of the present invention.
First, when the power is turned on, in step S11, the card reading unit 6 performs card reading processing, and the process proceeds to step S12. In step S12, it is determined whether or not the card has been read.

  If the card cannot be read, step S11 is repeated. If the card can be read, the process proceeds to step S13. In step S13, the authentication unit 9 reads registration data relating to personal authentication information corresponding to the card from the card registration information storage unit 7, and the process proceeds to step S14. In step S14, card authentication processing is performed to determine whether the card is properly registered, and the process proceeds to step S15. In step S15, it is determined whether or not the card authentication is successful.

  If the card is authenticated, the process proceeds to step S16. In step S16, the authentication trajectory information is read from the registered movement trajectory storage unit 8, and the process proceeds to step S17. In step S17, the movement trajectory is read from the movement trajectory accumulation unit 5, and the process proceeds to step S18. In step S18, locus authentication is performed by comparing the locus information for authentication and the movement locus.

  If it is authenticated by the locus, the process proceeds to step S19. In step S19, the door C19 is unlocked, and the process proceeds to step S20. In step S20, an authentication result OK display process is performed, and the process proceeds to step S21. In step S21, the movement trajectory is stored as a travel history. Further, when the authentication by the card is rejected in step S15 or the authentication by the locus is rejected in step S18, the door C19 is not unlocked in step S19, and the process proceeds to step S20, and the authentication result NG Display processing is performed. Then, it progresses to step S21 and a movement locus | trajectory is preserve | saved as a travel history.

  According to the embodiment described above, when the authentication operation is performed using the personal authentication information, the RFID tag movement locus stored in the movement locus accumulation section 5 and the registered movement locus storage section 8 are stored. The personal authentication is performed based on the comparison result with the track information for authentication. That is, authentication is performed by using a dynamic trajectory as information that only the person can know.

  Accordingly, it is possible to operate to reject authentication of a passerby who arrives at the authentication position with an abnormal locus. Also, different authentication trace information can be registered for each user. For this reason, impersonation by a third party who picks up the RFID tag or card becomes difficult, and the security can be improved.

  Further, the movement trajectory to be compared with the authentication trajectory information is accumulated in the movement trajectory accumulating unit 5 within the past designated time from the time when the authentication operation is performed. For this reason, even after the same movement trajectory as the authentication trajectory information is accumulated in the movement trajectory accumulating unit 5, if the specified time has elapsed, the impersonation by the third party who picks up the RFID tag or card is performed. Can be prevented.

  In the first embodiment, the personal authentication information is information corresponding to the information in the card, and the card authentication is performed. However, biometric authentication may be performed using personal authentication information as biometric data. In the first embodiment, the authentication position is a door. However, the authentication position may be a simple gate.

1 RFID reading unit, 2 control unit, 3 registration information storage unit,
4 dynamic information determination unit, 5 movement locus storage unit, 6 card reading unit,
7 card registration information storage unit, 8 registration movement locus storage unit, 9 authentication unit,
10 display section, 11 display screen, 12 floor schematic diagram, 13 notice,
14 rooms, 15 doors A, 16 rooms, 17 doors B, 18 rooms,
19 door C, 20 first detection area, 21 second detection area,
22 third detection area, 23 locus information for authentication, 24, 25 movement locus

Claims (2)

An RFID reader that reads information for RFID transmitted by the RFID tag via a plurality of receiving devices provided along a plurality of paths leading to an authentication position;
A movement trajectory accumulating unit for identifying and accumulating the movement trajectory of the RFID tag from the plurality of paths based on a difference in time at which each of the receiving devices receives the RFID information;
A storage unit in which the RFID information is stored in advance corresponding to the authentication trajectory information selected from the plurality of paths and the personal authentication information different from the RFID information;
When an authentication operation is performed using the personal authentication information at the authentication location, the RFID tag movement trajectory stored in the movement trajectory storage unit and the authentication trajectory information stored in the storage unit Based on the comparison result with the authentication unit that performs personal authentication,
A dynamic monitoring system characterized by comprising:   The authentication unit displays a movement locus of the RFID tag accumulated in the movement locus accumulation unit within a past designated time based on when an authentication operation is performed using the personal authentication information at the authentication position. The dynamic monitoring system according to claim 1, wherein the movement monitoring system is a comparison target with the authentication trajectory information.

Images