JP2020160990A - Rfid reader writer device - Google Patents

Abstract

To reduce wrong authentication due to a bit fix, and to improve reliability in an authentication system, optimally.SOLUTION: A reader writer device 40 to be applied to a factory authentication system includes an identification information storage unit 61 that stores identification information read from an ID card 30 as a plurality of bits, and is configured to perform authentication with reference to the authentication information stored in the identification information storage unit 61 and authentication information stored in an authentication information storage unit 71. In the reader writer device 40, provided are: a rewriting unit that rewrites authentication information stored in an identification information storage unit 31 of the ID card 30 when the authentication is preformed; and a control unit that changes the authentication information to be referred to when performing the authentication to authentication information corresponding to the identification information after rewriting by the rewriting unit. The rewriting unit is configured to perform the rewriting so as to make values of all bits associated with the identification information in the identification information storage unit 61 invert for each authentication.SELECTED DRAWING: Figure 10

Description

The present invention relates to an RFID (Radio Frequency Identification) reader / writer device applied to a factory authentication system.

There is known an authentication system that reads identification information stored in a storage medium such as a card by an RFID reader device and authenticates access to a partitioned area or the like (see, for example, Patent Document 1). In this type of authentication system, the identification information read by the RFID reader device is stored in the memory of the RFID reader device, and in the above authentication, the stored identification information is collated with the authentication information stored in the system. Will be done.

Japanese Unexamined Patent Publication No. 2011-186924

Here, the following concerns arise when applying the above-mentioned type of authentication system to a factory. That is, in factories, a person in charge is often assigned to each line or equipment, and it is assumed that authentication is repeated for the same worker in the RFID reader device. When reading and storing the same identification information are repeated, there is a high possibility that bits will stick to the memory. It is feared that incorrect authentication due to bit sticking will hinder the reliability of RFID reader devices and authentication systems.

The present invention has been made in view of the above problems, and a main object thereof is to suppress erroneous authentication due to sticking of bits and to suitably improve the reliability of an authentication system.

Hereinafter, means for solving the above problems will be described.

The first means is
An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
It is provided with a storage unit that stores the identification information read from the storage medium as a plurality of bits, and the identification information stored in the storage unit is referred to in the collation.
A rewriting unit that rewrites the identification information stored in the storage medium when the authentication is performed,
It is provided with a change unit that changes the authentication information referred to at the time of collation to the one corresponding to the identification information after rewriting by the rewrite unit.
The rewriting unit is configured to perform the rewriting so that the values of all the bits corresponding to the identification information are inverted in the storage unit by the authentication a predetermined number of times set in advance. ..

In factories, work is often shared for each process, and there is a high possibility that authentication for the same worker will be repeated many times in a specific area where access is restricted by the authentication system. That is, there is a high possibility that reading and storing (writing) of the same identification information will be repeated many times. And if such a flow continues for days, the number of repetitions can be enormous. For this reason, it is assumed that there is a higher possibility that bits will be stuck in the storage unit that stores the identification information, as compared with the case where authentication is performed for an area that is premised on the entry and exit of a large number of workers, for example. .. Even if bit sticking occurs while repeatedly authenticating the same worker, if the authentication is successful, it means that it was successful by normal authentication or it was accidentally successful even though bit sticking occurred. It becomes difficult to identify whether it has become. Then, if another worker authenticates without noticing the bit sticking, the information of the previous worker may be inherited, and the other worker may be mistaken for the previous worker and the authentication may be successful. Occurs. As described above, it is feared that the occurrence of bit sticking in the storage unit of the reader device hinders the improvement of the reliability of the authentication system. In this regard, according to the first means, even if the authentication of the identification information is repeated for the same worker, the bit value is written each time the identification information is read from the storage medium and the identification information is stored in the storage unit. Can be replaced. Then, when the number of authentications reaches a predetermined number, the values of all the bits associated with the identification information stored in the storage unit are inverted. According to this configuration, even if the authentication by the same operator is repeated, the values of all the bits are inverted by the authentication a predetermined number of times, so that the sticking can be suppressed. Further, even if bit sticking occurs due to repeated authentication by the same worker, the above-mentioned accidental authentication success can be suppressed. This can contribute to improving the reliability of the authentication system.

The second means is
An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
It is provided with a storage unit that stores the identification information read from the storage medium as a plurality of bits, and the identification information stored in the storage unit is referred to in the collation.
When the authentication is performed, the identification information stored in the storage medium and the rewriting unit for rewriting the authentication information,
It is provided with a change unit that changes the authentication information referred to at the time of collation to the one corresponding to the identification information rewritten by the rewrite unit.
The rewriting unit is configured to perform the rewriting so that the values of all the bits associated with the identification information in the storage unit are inverted for each authentication.

According to the above configuration, even if the authentication of the identification information is repeated for the same worker, the values of all the bits are inverted every time the identification information is read from the storage medium and the identification information is stored in the storage unit. Become. According to this configuration, even if the authentication by the same worker is repeated, the values of all the bits are inverted each time, so that sticking can be suppressed. Further, even if bit sticking occurs due to repeated authentication by the same worker, the above-mentioned accidental authentication success can be suppressed. This can contribute to improving the reliability of the authentication system. In particular, in the above-mentioned second means, since the values of all the bits are inverted for each authentication, the above-mentioned effect of suppressing sticking and the effect of improving reliability can be dramatically improved.

In the third means, the plurality of bits corresponding to the identification information have values of both 0 and 1 both before the rewrite and the change and after the rewrite and the change. It is configured to include.

According to the above configuration, the value of at least one bit is "1" and the value of all bits is "0" in both the authentication information referred to before inversion and the authentication information referred to after inversion. There is no. Therefore, even if the values of all the bits in the identification information become "0" due to an error during reading or the like, it is possible to preferably avoid the occurrence of inconvenience such that the identification information and the authentication information accidentally match.

In the fourth means, the rewriting unit and the changing unit perform the rewriting and the change when the identification information and the authentication information match by the collation, and the identification information and the authentication by the collation. If the information does not match, the rewriting and the change are not performed.

According to the above configuration, when the identification information and the authentication information do not match due to the collation, the rewriting of the identification information and the change of the authentication information stored in the storage medium are avoided. In the case of a mismatch, there is a case where a mismatch occurs as a result of normal authentication not being performed due to bit sticking. Therefore, in the case of a mismatch, the above rewriting is not performed so that the rewriting can be performed well. As a result of being halfway, it is possible to suppress the inconvenience that the identification information accidentally matches the authentication information. This can contribute to further improvement of the reliability of the authentication system.

In the fifth means, when the identification information and the authentication information do not match due to the collation, the identification information is read again without the rewriting and the change.

Various equipment is installed in the factory and a lot of noise is generated. Therefore, it cannot be denied that the reader device applied to the authentication system of the factory may be affected by the noise as described above when communicating with the storage medium. For example, if the collation results do not match because the identification information is not read properly due to the influence of noise, etc., the influence of noise may be eliminated by performing read → memory → collation several times. is there. On the other hand, when the collation results do not match due to bit sticking, there is a high possibility that the collation results will not match even if reading → storage → collation is repeated under the same conditions. Therefore, as shown in the fifth means, if a configuration is configured in which the identification information is read again without rewriting when a mismatch occurs, it is possible to contribute to early detection of bit sticking.

In the sixth means
The identification information is the first identification information, and is
The second identification information is stored in the storage medium together with the first identification information.
The authentication system has a configuration in which authentication is performed by collating the first identification information and the second identification information with the authentication information.
The second identification information is ID information for identifying an individual user, and is
The first identification information is group information for identifying a group composed of one or a plurality of users.

The amount of information about the first identification information, which is group information for identifying a group, can be reduced as compared with the second identification information, which is ID information for identifying an individual. However, when the amount of information is small, there is a high possibility that the sticking will accidentally match the first identification information corresponding to another group. Therefore, by taking measures against bit sticking with respect to the first identification information having such a concern, the above-mentioned effect of improving reliability can be suitably exhibited.

In the seventh means
The identification information is the first identification information, and is
The second identification information is stored in the storage medium together with the first identification information.
The authentication system has a configuration in which authentication is performed by collating the first identification information and the second identification information with the authentication information.
The rewriting unit has a configuration in which the first identification information is rewritten, but the second identification information is not rewritten.

In a configuration in which the identification information stored in the storage medium is rewritten each time authentication is performed, it is necessary to secure a communication period not only at the time of reading but also at the time of rewriting. This increases the waiting time for authentication and reduces the responsiveness. This is not preferable because it causes a decrease in the convenience of the authentication system. In this regard, as shown in the seventh means, if the first identification information and the second identification information are used in combination for authentication, the first identification information that is rewritten each time the authentication is performed, that is, the rewrite target. Information can be shortened. As a result, it is possible to suppress a decrease in responsiveness due to measures against bit sticking and a decrease in convenience of the authentication system.

Further, as shown in the seventh means, by intentionally excluding the second identification information from the rewriting target, the influence of noise during communication with the storage medium can be suppressed. As a result, it is possible to prevent the inconvenience that the influence of noise becomes remarkable in suppressing the sticking by bit inversion.

In addition, the following effects can be expected according to the combination with the above-mentioned sixth means. That is, by rewriting the first identification information that can suppress the amount of information, the effect of suppressing the decrease in responsiveness can be more preferably exhibited.

In the eighth means, the amount of information of the first identification information is smaller than the amount of information of the second identification information.

In a configuration in which the identification information stored in the storage medium is rewritten each time authentication is performed, it is necessary to secure a communication period not only at the time of reading but also at the time of rewriting. This increases the waiting time for authentication and reduces the responsiveness. This is not preferable because it causes a decrease in the convenience of the authentication system. In this regard, as shown in the eighth means, by relatively reducing the amount of information of the first identification information to be rewritten, it is possible to suppress a decrease in responsiveness due to measures against bit sticking. , It is possible to suppress the deterioration of the convenience of the authentication system.

In the ninth means, the plurality of bits form a bit string corresponding to the first identification information and the second identification information, and the first identification information is divided into a header side and a footer side of the bit string. Remember.

As shown in the above configuration, by arranging the first identification information to be rewritten separately on the header side and the footer side of the bit string, for example, partial sticking occurs over a plurality of adjacent bits. False authentication due to this can be suppressed suitably.

The tenth means is
An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
A storage unit for storing the identification information read from the storage medium is provided, and the identification information stored in the storage unit is referred to in the collation.
As the identification information and the authentication information stored in the storage medium, the value of each unit information is inverted with respect to the first information obtained by combining a plurality of unit information which is binary information and the first information. There is a second piece of information provided,
A rewriting unit that rewrites the identification information stored in the storage medium from one of the first information and the second information to the other when the authentication is performed.
It is provided with a changing unit that changes the authentication information referred to at the time of collation to the one corresponding to the identification information after rewriting by the rewriting unit.

According to the above configuration, the first information obtained by combining a plurality of unit information which is binary information and the second information in which the value of each unit information is inverted with respect to the first information are provided. The identification information and the authentication information stored in the storage medium can be rewritten from one of the first information and the second information to the other when the authentication is performed. Therefore, even if the authentication of the identification information is repeated for the same worker, the values of all the bits are rewritten by reading the identification information from the storage medium and storing the identification information in the storage unit. According to this configuration, sticking can be suppressed by inverting the values of all the bits. Further, even if bit sticking occurs due to repeated authentication by the same worker, the above-mentioned accidental authentication success can be suppressed. This can contribute to improving the reliability of the authentication system.

In each of the means described in detail above, "changing the authentication information referred to in the collation to the one corresponding to the identification information after rewriting by the rewriting unit" means the identification information after rewriting and after the change. It is sufficient if there is a correspondence relationship with the authentication information of, the configuration that changes the authentication information after rewriting the identification information, the configuration that rewrites the identification information after changing the authentication information, the identification information Includes a configuration that simultaneously rewrites and changes the authentication information. Further, "inversion" means that the bit value is "1"-> "0" or "0"-> "1".

The schematic which shows the production line in 1st Embodiment. Block diagram showing the authentication system. The block diagram which shows the relationship between an ID card and a reader / writer device. The schematic diagram which shows the identification information. The schematic diagram which shows the flow of authentication in the comparative example. The schematic diagram which shows the relationship between the authority information and the accessible area. The schematic diagram which shows the relationship between a worker and authority classification and ID information. The schematic diagram which shows the combination of authority information and ID information which becomes a collation candidate. A flowchart showing an authentication process executed by the control unit. The schematic diagram which shows the flow of authentication. The block diagram which shows the relationship between the ID card and the reader / writer device in the 2nd Embodiment. The schematic diagram which shows the flow of authentication. The schematic diagram which shows the modification of the identification information. The schematic diagram which shows the modification of the identification information. The schematic diagram which shows the modification of the identification information.

<First Embodiment>
Hereinafter, the first embodiment will be described with reference to the drawings. This embodiment is embodied as an RFID reader / writer device used in an authentication system for factories.

The manufacturing line of the factory shown in FIG. 1 is divided into a plurality of processes, and a worker in charge is assigned to each process. For example, a restricted area RE with restricted access is provided in the second process, which is a product assembly process. The restricted area RE is partitioned from other areas in the factory by the compartment 11, and the compartment 11 is identified by wireless communication from the RF tag (corresponding to the “storage medium”) of the ID card 30 owned by the worker. Is arranged, and an RFID reader / writer device (hereinafter, referred to as a reader / writer device 40) for determining whether or not access to the restricted area RE is possible based on the read identification information is provided. When the access right is authenticated by holding the ID card 30 over the reader / writer device 40, the locking device 13 attached to the door 12 of the compartment 11 is switched from the locked state to the unlocked state.

As shown in FIG. 2, the reader / writer device 40 includes a control unit 55 that executes various processes such as authentication, a storage unit 56 that stores various information for authentication, and identification information stored in the ID card 30. A reading unit 57 capable of reading the above and a rewriting unit 58 capable of rewriting the identification information stored in the ID card 30 are provided. The reader / writer device 40 can communicate with the server 80, and the identification information read from the ID card 30 is transferred from the reader / writer device 40 to the server 80 at any time.

The reader / writer device 40 is provided inside and outside the restricted area RE (inner wall side and outer wall side), and the server 80 allows entry / exit related to the restricted area RE based on the information transferred from each reader / writer device 40. I know the history. The server 80 is connected to a control device 90 for the robot 95 arranged in the restricted area RE, and the control device 90 has a configuration in which the drive control of the robot 95 is restricted based on an instruction from the server 80. It has become. Specifically, the drive control of the robot 95 by the control device 90 is permitted on the condition that it is determined that there is no worker in the restricted area RE based on the entry / exit history, and based on the entry / exit history. When it is determined that there is an operator in the restricted area RE, the drive control of the robot 95 by the control device 90 is restricted. In the present embodiment, the authentication system 20 is constructed by the ID card 30, the reader / writer device 40, and the server 80.

As shown in FIG. 3, the storage unit of the ID card 30 is provided with an identification information storage unit 31 for storing identification information. When the ID card 30 is brought close to the reader / writer device 40, a request for transmitting identification information from the reader / writer device 40 to the ID card 30 is generated. The ID card 30 transmits the identification information stored in the identification information storage unit 31 to the reader / writer device 40 in response to the request. The identification information is a composite information obtained by combining the authority information that defines the authority of the owner of the ID card 30 and the ID information of the owner of the ID card 30 (see FIG. 4), and is transmitted in an encrypted state. The Rukoto. The reader / writer device 40 decodes the read identification information and then stores it at a predetermined address in the storage unit 56 (hereinafter, referred to as an identification information storage unit 61).

The storage unit 56 of the reader / writer device 40 is provided with an authentication information storage unit 71 that stores authentication information used for collation with the identification information stored in the identification information storage unit 61 at the time of the above authentication. The authentication information storage unit 71 includes an authority information group storage area 72 that stores an authority information group (authority information table), an ID information group storage area 73 that stores an ID information group (ID information table), and a collation target. A collation candidate information storage area 74 for storing information for specifying a combination of authority information and ID information is provided.

The control unit 55 of the reader / writer device 40 collates the identification information stored in the identification information storage unit 61 with the authentication information (determines a match / mismatch). If it is determined by this verification that the worker or administrator has the right to access the restricted area RE, the locking device 13 is switched from the locked state to the unlocked state, and entry / exit to the restricted area RE is permitted. To do.

Here, in the restricted area where entry and exit of workers other than the worker in charge is prohibited, there is a high possibility that only the authentication of the worker in charge is repeated. That is, there is a high possibility that reading and storage (writing) of the same identification information will be repeated. For this reason, it is assumed that there is a higher possibility that bits will be stuck in the storage unit that stores the identification information, as compared with the case where authentication is performed for an area that is premised on the entry and exit of, for example, a large number of workers.

For example, as shown in the comparative example of FIG. 5, even if bit sticking occurs while the same worker is repeatedly authenticated, if the authentication is successful → the entry / exit permission is obtained, the permission is obtained by normal authentication. It becomes difficult to identify whether the permission was granted accidentally despite the occurrence of bit sticking. Then, if another worker authenticates without noticing the bit sticking, the information of the previous worker is taken over, and there is a possibility that the other worker is mistakenly permitted as the previous worker. .. As described above, it is feared that the occurrence of bit sticking in the storage unit of the reader / writer device hinders the improvement of the reliability of the authentication system.

One of the features of the present embodiment is that the occurrence of such erroneous authentication is suppressed and the reliability of the authentication system 20 is improved. Hereinafter, the device will be described with reference to FIGS. 5 to 9.

As shown in FIG. 6, in the present embodiment, as the classification of access rights (authority classification), an administrator having access rights to all areas and a first unit having only access rights to restricted areas in the first step. A type 1 worker, a type 2 worker who has only the access right to the restricted area RE of the second process, and a type 3 worker who has only the access right to the restricted area of the third process are provided. There is. For each authority classification, two authority information (first authority information and second authority information) are associated with each other. Both the first authority information and the second authority information have three bits, and the value of one bit of the first authority information and the second authority information is inverted so as to be the other. .. Specifically, "100" is associated with the first authority information and "011" is associated with the second authority information for the administrator, and "001" and "001" are associated with the first authority information for the first type worker. 2 "110" is associated with the authority information, and "101" is associated with the first authority information and "010" is associated with the second authority information for the type 2 worker.

As shown in FIG. 7, two ID information (first ID information and second ID information) are associated with each worker. The first ID information and the second ID information are both 5 bits, and the value of each bit of the first ID information and the second ID information is inverted so that the other is the other. For example, the worker A in charge of the first process is associated with "11001" as the first ID information and "00110" as the second ID information, and the worker B in charge of the second process is associated with the first ID information. "11101" and "000010" are associated with the second ID information, and "11010" is associated with the first ID information and "00101" is associated with the worker C in charge of the first process. ..

Regarding the above-mentioned identification information and authentication information, two patterns of a combination of the first authority information and the first ID information and a combination of the second authority information and the second ID information are provided (see FIG. 8). The control unit 55 of the reader / writer device 40 switches between the two patterns to be collated when performing the above authentication. Hereinafter, the authentication process executed as a part of the periodic process by the control unit 55 will be described with reference to FIG.

In the authentication process, first, it is determined in step S101 whether or not the identification information is received from the ID card 30. If a negative determination is made in step S101, the main authentication process is terminated as it is. If an affirmative determination is made in step S101, the process proceeds to step S102 to execute the read restriction process. By executing the read restriction process, the reading of the identification information from the ID card 30 is restricted until the restriction is lifted.

As described above, the identification information transmitted from the ID card 30 is encrypted, and in step S103, the decryption process of the encrypted information is executed. In the following step S104, the decoded identification information is stored in the identification information storage unit 61 of the storage unit 56, and in step S105, the collation process is executed.

In the collation process, whether or not the authentication information designated as the collation candidate among the various authentication information stored in the authentication information storage unit 71 and the identification information stored in the identification information storage unit 61 match. To judge. If the information matches, a positive determination is made in step S106, and the authentication success processing of steps S107 to S109 is executed.

In the authentication success process, first, the process of transferring the identification information and the verification result (authentication result) read in step S107 to the server 80 is performed. In the following step S108, the candidate switching process of the authentication information storage unit 71 is executed. Specifically, a switching process is executed in which the other authentication information paired with the authentication information referred to in this authentication is used as a reference candidate (verification candidate) at the time of the next authentication (see the check mark in FIG. 8). .. After that, in step S109, the process of changing the identification information (authority information and ID information) stored in the ID card 30 is executed. In this change process, the identification information stored in the ID card 30 is rewritten to the other identification information paired with the identification information read this time. After executing the process of step S109, the read restriction is released in step S110, and then the approval process is terminated. In this embodiment, the control unit 55 (specifically, the function of executing the process of step S109) corresponds to the “change unit”.

Returning to the description of step S106, if a negative determination is made in step S106, that is, if the identification information and the authentication information do not match, the process proceeds to step S111. In step S111, the error notification process is executed. As a result, a notification sound indicating that the authentication has failed is output from the speaker built in the reader / writer device 40. In the following step S112, the process of transferring the identification information received this time and the collation result (authentication result) to the server 80 is performed, the read restriction is released in step S110, and then the present authentication process is terminated. That is, if the authentication fails, the identification information is not rewritten or the authentication information is not switched.

Here, with reference to FIG. 10, a flow of rewriting the identification information and switching the authentication information due to repeated authentication by the same worker (same ID card) will be described.

When the worker B holds the ID card 30 over the reader / writer device 40 when entering the restricted area RE, the identification information "10111001" stored in the identification information storage unit 31 of the ID card 30 is transmitted to the reader / writer device 40. To. The reader / writer device 40 reads this identification information and stores it in the identification information storage unit 61 of the storage unit 56. After that, the identification information "10111001" stored in the identification information storage unit 61 is collated with the authentication information stored in the authentication information storage unit 71. The collation candidate is "10111001", and admission to the restricted area RE is permitted if the authentication is successful.

After the verification, the authentication information that is a verification candidate for the authentication information stored in the authentication information storage unit 71 is switched to the authentication information "01000110", and the identification information stored in the identification information storage unit 31 of the ID card 30 is used. Rewrite (change) to the identification information "01000110".

When the worker B re-enters the restricted area RE, the ID card 30 is held over the reader / writer device 40, so that the identification information "01000110" stored in the identification information storage unit 31 of the ID card 30 is read. It is transmitted to the writer device 40. The reader / writer device 40 reads this identification information and stores it in the identification information storage unit 61 of the storage unit 56. As a result, the values of all the bits in the identification information storage unit 61 of the reader / writer device 40 are reversed by "1" / "0" from the time of the previous authentication. That is, the values of all the bits are inverted.

After that, the identification information "01000110" stored in the identification information storage unit 61 is collated with the authentication information stored in the authentication information storage unit 71. The collation candidate is "010100110", and if the authentication is successful, re-entry to the restricted area RE is permitted. After the verification, the authentication information as a verification candidate for the authentication information stored in the authentication information storage unit 71 is switched to the authentication information "10111001", and the identification information stored in the identification information storage unit 31 of the ID card 30 is used. Rewrite (change) to the identification information "10111001".

After that, every time the worker B enters the restricted area RE, the rewriting of the identification information and the switching of the authentication information are repeated.

According to the first embodiment described in detail above, the following excellent effects can be expected.

Even if the authentication of the identification information is repeated for the same worker, the values of all the bits are inverted every time the identification information is read from the ID card 30 and the identification information is stored in the identification information storage unit 61 of the reader / writer device 40. To do. According to this configuration, even if the same identification information is read and stored many times, it is possible to prevent the identification information storage unit 61 from sticking the bits. Further, even if the bit sticking occurs due to the repetition of the authentication as described above, it is possible to suppress the false authentication caused by the bit sticking. Thereby, the reliability of the authentication system 20 can be suitably improved. This is effective as a countermeasure against a situation in which there is a high possibility that authentication for the same worker is repeated by allocating workers for each process, and an authentication system suitable for a factory can be suitably constructed.

Both the identification information and the authentication information in the present embodiment are bit strings including both "1" and "0" as bit values. Therefore, the value of at least one bit is "1" in both the authentication information referred to before the inversion and the authentication information referred to after the inversion, and the values of all the bits are not "0". Therefore, even if the values of all the bits of the identification information stored due to an error during reading become "0", it is possible to preferably avoid the occurrence of inconvenience such as accidental matching between the identification information and the authentication information. ..

As described above, since a lot of noise is generated in the factory, it cannot be denied that the reader / writer device 40 applied to the factory authentication system may be affected by the noise as described above when communicating with the ID card 30. For example, if the collation results do not match because the identification information is not read properly due to the influence of noise, etc., the influence of noise may be eliminated by performing reading → memory → collation several times. is there. On the other hand, when the collation results do not match due to bit sticking, there is a high possibility that the collation results will not match even if reading → storage → collation is repeated under the same conditions. Therefore, as shown in the present embodiment, if a mismatch occurs, the identification information can be read again without rewriting, which contributes to early detection of bit sticking. it can.

<Second embodiment>
One of the features of the present embodiment is that the reliability of the authentication system is suppressed from being lowered due to the influence of the noise while suppressing the sticking of the bits. Hereinafter, the device will be described with reference to FIGS. 11 to 12, focusing on the differences from the first embodiment.

As shown in FIG. 11, the identification information storage unit 31A of the ID card 30A shown in the present embodiment has an address for storing authority information (authority information storage area 32A) and an address for storing ID information (ID information storage area). 33A) and are provided. The authority information is 3-bit information as in the first embodiment, and the remaining 5 bits are margin bits that do not contribute to authentication. The ID information is also 5-bit information as in the first embodiment, and the remaining 3 bits are margin bits that do not contribute to authentication.

The authority information storage area 32A can rewrite the authority information, whereas the ID information storage area 33A cannot rewrite the ID information. That is, in the present embodiment, the rewriting target by the reader / writer device 40A is limited to only the authority information stored in the authority information storage area 32A. Further, in the identification information storage unit 61A of the reader / writer device 40A, an address for storing the authority information read from the ID card 30A (authority information storage area 62A) and an address for storing the ID information (ID information storage). Area 63A) and each are provided.

Here, with reference to FIG. 12, the flow of rewriting the identification information and switching the authentication information due to repeated authentication by the same worker (same ID card) will be described.

When the worker B holds the ID card 30A over the reader / writer device 40A when entering the restricted area RE, the authority information "101" and the ID information "11001" stored in the identification information storage unit 31A of the ID card 30A become the reader. It is transmitted to the writer device 40A. The reader / writer device 40A reads the authority information "101" and the ID information "11001" and stores them in the authority information storage area 62A and the ID information storage area 63A of the storage unit 56A, respectively. After that, the verification is performed with the authentication information stored in the authentication information storage unit 71. The collation candidates are a combination of "101" and "11001", and admission to the restricted area RE is permitted if the authentication is successful.

After collation, the authority information that is a collation candidate for the identification information stored in the authentication information storage unit 71 is switched to the authority information "010", and the authority information stored in the authority information storage area 32A of the ID card 30A is used. Rewrite (change) to the identification information "010".

When the worker B re-enters the restricted area RE, the ID card 30A is held over the reader / writer device 40A, so that the authority information "010" and the ID stored in the identification information storage unit 31A of the ID card 30A are stored. The information "11001" is transmitted to the reader / writer device 40A. The reader / writer device 40A reads the authority information "010" and the ID information "11001" and stores them in the authority information storage area 62A and the ID information storage area 63A of the storage unit 56A, respectively. As a result, all the bit values of the authority information storage area 62A of the reader / writer device 40A are inverted. After that, the verification is performed with the authentication information stored in the authentication information storage unit 71. The collation candidates are a combination of "010" and "11001", and admission to the restricted area RE is permitted if the authentication is successful.

In a configuration in which the identification information stored in the ID card is rewritten each time authentication is performed, it is necessary to secure a communication period not only at the time of reading but also at the time of rewriting. In the present embodiment, in the configuration in which the authority information and the ID information are used in combination for authentication, the information rewriting target is limited to the authority information. As a result, the waiting time for receiving certification can be shortened, and prevention of sticking and improvement of responsiveness can be achieved at the same time. This is advantageous in improving the convenience of the authentication system. Further, by limiting the rewriting target to the authority information, it is possible to suppress the sticking of bits while suppressing the influence of noise during communication between the ID card 30A and the reader / writer device 40A.

Even if the above-mentioned sticking occurs in a part of the authority information stored in the authority information storage area 62A and the situation matches the authority information corresponding to the authority of the administrator, for example, the ID information side stores it. Since it can be repelled, erroneous authentication can be suitably suppressed.

When the ID information for identifying an individual and the authority information for identifying a group consisting of one or more users are compared, the latter has a smaller amount of information than the former. Therefore, if the authority information in which the amount of information is relatively small is rewritten as described above, the effect of suppressing the decrease in responsiveness can be more preferably exhibited.

<Other embodiments>
-In the first embodiment, the values of all bits of the identification information stored in the identification information storage unit 61 of the reader / writer device 40 are inverted by one authentication, but the configuration is limited to this. is not. It is also possible to invert the values of some bits by one authentication and invert the values of all bits by repeating the authentication a predetermined number of times (N = 2, 3, 4 ...). is there. When making such a change, it is not always necessary to configure the value of at least one bit to be inverted each time the authentication is performed, and all the authentication is repeated a predetermined number of times (a preset number of times). It suffices if the bit values are inverted. For example, when the predetermined number of times = 3 times, the identification information is not changed in the first authentication, and the identification information is changed so that the values of all bits are reversed by "1" / "0" in the second authentication. By reading the changed identification information in the third authentication, the values of all the bits may be inverted.

Further, in the second embodiment, the values of all bits of the identification information (authority information) stored in the authority information storage area 62 of the reader / writer device 40 are inverted by one authentication. It is not limited to this. It is also possible to invert the values of some bits by one authentication and invert the values of all bits by repeating the authentication a predetermined number of times (N = 2, 3, 4 ...). is there. When making such a change, it is not always necessary to configure the value of at least one bit to be inverted each time the authentication is performed, and all the authentication is repeated a predetermined number of times (a preset number of times). It suffices if the bit values are inverted. For example, when the predetermined number of times = 3 times, the authority information is not changed in the first authentication, and the authority information is changed so that the values of all bits are reversed by "1" / "0" in the second authentication. By reading the changed authority information in the third authentication, the values of all the bits may be inverted.

-If the identification information and the authentication information do not match during authentication, the identification information is read without rewriting the identification information stored in the ID card 30 and changing the candidate authentication information to be collated. → It is also possible to configure the collation again. In such a configuration, when the number of times the authentication result is inconsistent reaches a preset specified number, the administrator or the like notifies that the bit value may be stuck. It is recommended to have a configuration that prompts confirmation.

-In each of the above embodiments, if the identification information and the authentication information do not match during authentication, the identification information stored in the ID card 30 is not rewritten and the authentication information to be collated is not changed. However, even if there is a mismatch, the identification information stored in the ID card 30 may be rewritten and the authentication information to be collated may be changed.

-In each of the above embodiments, the candidate for the identification information to be rewritten at the time of authentication is stored in advance, but the present invention is not limited to this. At the time of authentication → rewriting, an identification information in which the read identification information is inverted is newly created at that time, and the created identification information is overwritten on the ID card and stored in the authentication information storage unit 71. Is also possible.

-In each of the above embodiments, the identification information stored in the ID card 30 is rewritten after the candidate of the authentication information to be collated is changed. However, the authentication information and the identification information after the change and rewriting are used. As long as the correspondence between the above is maintained, the timing of rewriting and change can be changed as follows. That is, the configuration may be such that the candidate of the authentication information to be collated is changed after the identification information stored in the ID card 30 is rewritten, or the candidate of the authentication information to be collated is changed and the ID card 30 is changed. It may be configured to rewrite the stored identification information at the same time.

-In the first embodiment, the information amount (3 bits) of the authority information is smaller than the information amount (5 bits) of the ID information, but the present invention is not limited to this. The information amount (3 bits) of the authority information may be larger than the information amount (5 bits) of the ID information, or the information amounts may be the same.

Further, in the second embodiment, the authority information storage areas 32A and 62A for storing the authority information and the ID information storage areas 33A and 63A for storing the ID information are all set to 1 byte, but the amount of information of each information is increased. The number of bytes may be arbitrarily changed accordingly. However, in order to suppress the influence of noise, it is preferable that the amount of information of the part (authority information) that can be rewritten by the identification information is smaller than the amount of information of the part (ID information) that cannot be rewritten.

-In the second embodiment, the authority information has a margin bit that does not include information related to authentication, and this margin bit is not subject to rewriting of the bit value, but the value of the margin bit is also written. It is also possible to replace it. That is, when the authority information is rewritten after authentication, it is possible to invert not only the bits related to authentication but also the margin bits.

-In each of the above embodiments, the bit string is formed so that the authority information is on the header side and the ID information is on the footer side, but the present invention is not limited to this. As shown in FIG. 13, the authority information may be divided into a header side and a footer side, and the bit string may be configured so that the ID information is located between the authority information. As shown in the second embodiment, when the identification information is composed of rewritable information (for example, authority information) and non-rewritable information (for example, ID information), it is said that rewriting is possible. It is advisable to form the header and footer of the bit string from the above information.

-As shown in FIG. 14, a plurality of margin bits (bits that are not subject to authentication) are provided between the bit corresponding to the ID information and the bit corresponding to the authority information, and each value of this margin bit is set each time of authentication. It is also possible to monitor the bit sticking by changing (reversing) with "1" / "0" and confirming whether the value of the margin bit is changed normally at the time of authentication.

Further, as shown in FIG. 15, a substitute bit (dummy data) is generated in the identification information storage unit 61 of the reader / writer device 40 as data stored only in the reader / writer device 40 (data not stored in the ID card 30). Then, the values of those alternate bits are changed (inverted) by "1" / "0" each time authentication is performed, and bit sticking is monitored by confirming whether each value of the alternate bits is normally changed at the time of authentication. It is also possible to configure it.

If the values of the margin bit and the complementary bit are not changed normally, that is, if there is a suspicion that sticking has occurred, it is preferable that the other bits are also unsuitable. With such a configuration, erroneous authentication due to bit sticking can be suitably suppressed.

20 ... Authentication system, 30 ... ID card (storage medium), 31 ... Identification information storage unit (storage unit), 40 ... Reader / writer device (RFID reader / writer device), 55 ... Control unit (change unit), 57 ... Reading unit , 58 ... Rewriting unit, 61 ... Identification information storage unit (storage unit).

Claims (10)

An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
It is provided with a storage unit that stores the identification information read from the storage medium as a plurality of bits, and the identification information stored in the storage unit is referred to in the collation.
A rewriting unit that rewrites the identification information stored in the storage medium when the authentication is performed,
It is provided with a change unit that changes the authentication information referred to at the time of collation to the one corresponding to the identification information after rewriting by the rewrite unit.
The rewriting unit is configured to perform the rewriting so that the values of all the bits corresponding to the identification information are inverted in the storage unit by the authentication a predetermined number of times set in advance. RFID reader / writer device. An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
It is provided with a storage unit that stores the identification information read from the storage medium as a plurality of bits, and the identification information stored in the storage unit is referred to in the collation.
A rewriting unit that rewrites the identification information stored in the storage medium when the authentication is performed,
It is provided with a change unit that changes the authentication information referred to at the time of collation to the one corresponding to the identification information after rewriting by the rewrite unit.
The rewriting unit is an RFID reader / writer device having a configuration in which the rewriting is performed so that the values of all the bits corresponding to the identification information in the storage unit are inverted for each authentication. The plurality of bits corresponding to the identification information are configured to include both 0 and 1 values before the rewrite and the change and after the rewrite and the change. The RFID reader / writer device according to claim 1 or 2. The rewriting unit and the changing unit perform the rewriting and the change when the identification information and the authentication information match by the collation, and the identification information and the authentication information do not match by the collation. The RFID reader / writer device according to any one of claims 1 to 3, which is configured not to perform the rewriting and the modification in the case of the above. The RFID reader / writer device according to claim 4, wherein when the identification information and the authentication information do not match due to the collation, the identification information is read again without the rewriting and the change. The identification information is the first identification information, and is
The second identification information is stored in the storage medium together with the first identification information.
The authentication system has a configuration in which authentication is performed by collating the first identification information and the second identification information with the authentication information.
The second identification information is ID information for identifying an individual user, and is
The RFID reader / writer device according to any one of claims 1 to 5, wherein the first identification information is group information for identifying a group composed of one or a plurality of users. The identification information is the first identification information, and is
The second identification information is stored in the storage medium together with the first identification information.
The authentication system has a configuration in which authentication is performed by collating the first identification information and the second identification information with the authentication information.
The RFID according to any one of claims 1 to 6, wherein the rewriting unit rewrites the first identification information, but does not rewrite the second identification information. Reader / writer device. The RFID reader / writer device according to claim 7, wherein the amount of information of the first identification information is smaller than the amount of information of the second identification information. The plurality of bits form a bit string corresponding to the first identification information and the second identification information, and the first identification information is stored separately on the header side and the footer side of the bit string. The RFID reader / writer device according to any one of claims 8. An RFID that is applied to a factory authentication system that authenticates by collating the identification information stored in a portable storage medium with the authentication information stored in advance, and reads the identification information from the storage medium at the time of the collation. It is a reader / writer device
A storage unit for storing the identification information read from the storage medium is provided, and the identification information stored in the storage unit is referred to in the collation.
As the identification information and the authentication information stored in the storage medium, the value of each unit information is inverted with respect to the first information obtained by combining a plurality of unit information which is binary information and the first information. There is a second piece of information provided,
A rewriting unit that rewrites the identification information stored in the storage medium from one of the first information and the second information to the other when the authentication is performed.
An RFID reader / writer device including a change unit that changes the authentication information referred to at the time of collation to one corresponding to the identification information after rewriting by the rewrite unit.

Images