JP4105583B2 - Wireless tag security expansion method, ID management computer device, proxy server device, program thereof, and recording medium of the program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a wireless tag security technique, and more particularly to a method for realizing privacy protection related to a wireless tag and prevention of forgery / spoofing of the wireless tag in an automatic recognition system using the wireless tag.
[0002]
[Prior art]
In order to realize an automatic recognition system for products at low cost, only the ID (identification code) unique to the wireless tag is stored and pasted on the product, and the ID is read by the reading device. The approach of managing on the side is taken.
[0003]
For example, at the AutoID Center (http://www.autoidcenter.org) by the Massachusetts Institute of Technology (MIT) in the United States, the manufacturer code, the product type code indicating the product type, It is considered that an ID consisting of an individual number indicating a number is used, only that ID is stored in a wireless tag, and product-related information is managed by a computer on a network in association with the ID stored in the wireless tag. In this system, security related to product-related information is secured by applying network-side security technology, but security such as wireless tag ID reading restrictions is not addressed (for example, see Non-Patent Document 1). ).
[0004]
[Non-Patent Document 1]
MIT AUTO-ID CENTER, "TECHNOLOGY GUIDE", [online], [March 18, 2003 search], Internet <URL: http://www.autoidcenter.org/new_media/brochures/Technology_Guide.pdf>
[0005]
[Problems to be solved by the invention]
In the above prior art method, ID reading from a wireless tag is not restricted, and anyone who owns a reading device can read the ID. There is a problem of end. In addition, if a manufacturer code or product type code is available, it is possible to easily forge a product by forging / spoofing a wireless tag by guessing an appropriate product individual code and writing it to the wireless tag. There is also a problem.
[0006]
The present invention solves the above-described problem. Means for protecting the privacy of the owner by concealing the ID of the wireless tag, and adding an authenticator to the ID of the wireless tag, An object is to provide a means for preventing forgery / spoofing at low cost.
[0007]
[Means for Solving the Problems]
In order to solve the above-described problems, the present invention adopts the following configuration, for example. Here, description will be made using an example of a product identification electronic code (hereinafter also referred to as EPC) as an identification code set in the wireless tag. There are at least two types of product identification electronic codes, a small-capacity version ID (eg, 96 bits) and a large-capacity version ID (eg, 256 bits) with different data lengths. It is assumed to have an area for a code, a product type code indicating the product type, and an individual number indicating the serial number of the product individual.
[0008]
FIG. 1 is a diagram showing an example of the configuration of the first present invention. 1 is an ID management computer, 3 is a wireless tag reader or a client computer with a reader (hereinafter referred to as a client), 4 is a proxy server having a computer that can communicate with both the client 3 and the server 5, and 5 is based on ID An ID processing server including a computer that performs processing such as data processing and storage. Reference numeral 20 denotes a wireless tag attached to the product.
[0009]
In the ID management computer 1, 11 is a concealed ID generating means, and 12 is a concealed ID setting means. In the client 3, 31 is an ID reading unit for the wireless tag 20, and 32 is a transfer destination server solution unit. In the proxy server 4, reference numeral 41 denotes a concealment ID decrypting means, and reference numeral 42 denotes a transfer destination server solving means. In the ID processing server 5, 51 is an ID correspondence processing means.
[0010]
The ID management computer 1 uses the concealment ID generation means 11 to generate a concealment ID obtained by concealing the small-capacity version ID indicating the original product identification electronic code. The concealment ID setting means 12 writes the generated concealment ID in the area of the individual number of the large-capacity version ID of the wireless tag 20, and substitutes in the area of the manufacturer code and product type code of the large-capacity version ID. A code unrelated to the product information that can specify the server 4 as a transmission destination is stored. For example, a company code of a third party that operates the proxy server 4 is stored in the manufacturer code, and a code indicating the ID concealing service is stored in the product type code.
[0011]
The client 3 reads the large-capacity version ID including the concealment ID from the wireless tag 20 by the ID reading unit 31, and based on the manufacturer code or product type code of the ID, the transfer destination server resolution unit 32 performs the address resolution server or the like. The transfer destination server is determined by separately using. If the ID read from the wireless tag 20 is a small-capacity version ID before concealment, the ID processing server 5 becomes a transfer destination server, but the large-capacity version generated by writing the concealment ID In the case of ID, the proxy server 4 is determined as the transfer destination server from the manufacturer code and the product type code. The address resolution server not shown in FIG. 1 has means for associating a predetermined manufacturer code and product type code with the address (IP address, etc.) of the transfer destination server. In response to the address resolution request by the type code, the address of the transfer destination server is determined from the manufacturer code and the product type code, and a response is made to the address resolution request source.
[0012]
The client 3 transfers the large-capacity version ID including the concealment ID to the proxy server 4 that is the transfer destination server. The proxy server 4 decrypts the concealment ID of the received large-capacity version ID by the concealment ID decryption means 41, generates the original small-capacity version ID, and uses the transfer destination server resolution means 42 to The ID processing server 5 that is the original transfer destination resolved from the ID is determined, and the small-capacity version ID is transferred to the ID processing server 5. The ID processing server 5 uses an ID correspondence processing means 51 to perform processing such as storage and processing of IDs. The communication between the client 3 and the proxy server 4 is based on the premise that some secure communication means such as authentication, access control, and encryption is provided.
[0013]
As a method for the concealed ID generating means 11 of the ID management computer 1 to conceal the small-capacity version ID, a method of encrypting using a common key encryption method or a public key encryption method can be used. In this case, the concealment ID decrypting means 41 of the proxy server 4 decrypts the encrypted small capacity version ID using the common key or the secret key. In addition, as a method for realizing the concealment of the small-capacity version ID, the correspondence information between the arbitrarily defined unique code and the small-capacity version ID is managed as a table between the ID management computer 1 and the proxy server 4. By sharing the correspondence information, the ID management computer 1 conceals the small-capacity version ID by replacing it with an arbitrary code, and the proxy server 4 decrypts the small-capacity version ID from the arbitrary code. It can also be used.
[0014]
FIG. 2 is a diagram showing an example of the configuration of the second present invention. 6 is an ID management computer, 7 is a proxy server having a computer capable of communicating with both the client 3 and the ID processing server 5, and 21 is a wireless tag. The client 3 and the ID processing server 5 are the same as in the first invention. Further, 61 in the ID management computer 6 is an ID generating means with an authenticator, 62 is an ID setting means with an authenticator, 71 in the proxy server 7 is an ID verifying means with an authenticator, and 72 is a transfer destination server resolving means. is there.
[0015]
In the second aspect of the present invention, the ID generation means 61 with authenticator in the ID management computer 6 generates an authenticator for the small capacity version ID and adds it to the small capacity version ID to obtain an ID with authentication. The ID setting means 62 with an authenticator writes the ID with an authenticator in the individual number of the large-capacity version ID of the wireless tag 21, and the proxy server 7 in the area of the manufacturer code and product type code of the large-capacity version ID. A code unrelated to the product information that can be specified as the transmission destination is stored. For example, the manufacturer code stores a company code of a third-party organization that operates the proxy server 7, and the product type code stores a code indicating an ID authentication service.
[0016]
The client 3 reads the large-capacity version ID including the ID with the authenticator from the wireless tag 21 by the ID reading unit 31, and based on the manufacturer code or product type code of the ID, the transfer destination server resolution unit 32 performs the address resolution server. The transfer destination server is determined by using a separate method. Here, when the ID read from the wireless tag 21 is a large-capacity version ID including an ID with an authenticator, the proxy server 7 is selected as the transfer destination server from the manufacturer code and the product type code. The client 3 transfers the large capacity version ID including the ID with the authenticator to the proxy server 7.
[0017]
The ID verification means 71 with an authenticator in the proxy server 7 verifies the received ID with an authenticator, and when it is determined to be a regular ID, extracts the original small capacity version ID from the large capacity version ID, As in the present invention, the destination server resolution means 72 resolves the address of the destination server and transfers the original small capacity version ID to the ID processing server 5. The operation of the ID processing server 5 is the same as that of the first invention.
[0018]
The authenticator generation of the small-capacity version ID by the authenticator-added ID generation means 61 can be realized by cryptographic processing of the small-capacity version ID (for example, MAC (Message Authentication Cord) generation, digital signature, etc.). This authenticator is a message digest generated by MAC or a digital signature based on the small-capacity version ID, and becomes signature data. The proxy server 7 can check whether the original small-capacity version ID has been tampered with by inputting the original small-capacity version ID and the authenticator. The information necessary for the authentication requires an algorithm using a key, etc., but these information are shared between the ID management computer 6 and the proxy server 7 by some means. Any method may be used as long as it can be safely shared.
[0019]
Arbitrary authenticator data is prepared as an authenticator for the small-capacity version ID, and the proxy server 7 manages correspondence information between the original small-capacity ID and the authenticator data, and responds to a request from the client 3. It is also possible to use a method of verifying the correspondence.
[0020]
The third aspect of the present invention is an invention having means combining the first aspect of the present invention and the second aspect of the present invention. In the ID management computer, the small-capacity version ID indicating the original product code is concealed, and at the same time, an authenticator for the concealed small-capacity version ID is generated and added to the concealed small-capacity version ID. It is written in the area of the individual number of the large-capacity version ID, and the destination identification information unrelated to the merchandise information is stored in the manufacturer code and product type code areas of the large-capacity version ID. As transmission destination specifying information in this case, information is set such that a proxy server that performs ID authentication and decryption of the concealment ID is determined as the transfer destination server.
[0021]
As described above, according to the present invention, since the original ID is concealed and stored, the third party can recognize the original ID even if it is illegally read by the third party. Therefore, it is possible to prevent leakage of possessed product information. Further, since the original ID is stored with an authenticator, the proxy server 7 can authenticate the original ID, and it is possible to prevent forgery and spoofing of the ID.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
An embodiment of the present invention will be described in accordance with an example in which the present invention is applied to an MIT Auto ID system. FIG. 3 shows an example of the overall configuration of the system according to the first embodiment of the present invention. In the system shown in FIG. 3, reference numeral 1 denotes an ID management computer that conceals a small-capacity version ID and writes it in the large-capacity version ID of the wireless tag 20. The wireless tag 20 is affixed to the product 2, and includes a client computer 30 provided with a wireless tag reader 33, a PML (Physical Markup Language) server 8 for storing ID (EPC) data, and the ID. An ONS (Object Naming Service) server 9 that resolves the address of the PML server 8 that stores the ID data and a proxy server 4 that performs decryption processing of the concealment ID are connected by the Internet 10.
[0023]
In order to simplify the explanation, here, an example is shown in which the ID management computer 1 by one computer performs the generation of the concealment ID and the process of writing the concealment ID in the wireless tag 20. The ID management computer 1 may be realized by a plurality of computers by dividing the process of generating the ID and the process of writing the ID into the wireless tag 20.
[0024]
First, an EPC (Electronic Product Code) storage method according to the first embodiment of the present invention will be described with reference to FIG. EPC is an ID name used in AutoID. Although various data lengths are defined as EPC code systems, in this embodiment, the 96-bit version EPC is used as the original ID, and the 256-version EPC is used as the large-capacity version ID including the concealment ID. To.
[0025]
The 96-bit EPC shown in FIG. 4A is composed of a version number of 8 bits, a manufacturer code of 28 bits, a product type code of 24 bits, and an individual number of 36 bits. In FIG. 4, as an example, the manufacturer code “0x1234567” of the “ABC Pharmaceutical” company, the product type code “0xABCDEF” of “medicine XX”, and the individual number “0x123456789” are stored.
[0026]
In this state, when the consumer carries the medicine in the bag, the EPC code can be read as long as the third party has the reading device 33. From the manufacturer code and the product type code, The third party knows that he owns “Drug XX” of “ABC Pharmaceutical”.
[0027]
In the present embodiment, as shown in FIG. 4B, the ID management computer 1 conceals the 96-bit original EPC and stores it as the individual number of the 256-bit EPC shown in FIG. 4C. As an example of concealment, 128-bit common key encryption is used in FIG. At this time, in the 256-bit EPC manufacturer code and product type code, a code that can specify the proxy server 4 as the EPC transmission destination is set instead of the original product code. In the example of FIG. 4C, the code “0xABCDEF01234456789” of “Privacy Protection Company” operating the proxy server 4 is stored as the manufacturer code, and the “ID concealment service” of the wireless tag is stored as the product type code. The code “0x12345567890ABCD” is stored.
[0028]
Note that public key cryptography can be used as a method of concealment. There is also a method in which an arbitrary code is embedded, the proxy server 4 or the like holds the correspondence between the code and the original 96-bit EPC, and the proxy server 4 performs ID conversion. In other words, the ID management computer 1 and the proxy server 4 may share a conversion table between an arbitrary code and the 96-bit EPC by any method, and use a method of performing ID conversion using the conversion table. Good.
[0029]
Furthermore, although not shown in the drawing, not only the individual number area but also the product type code area can be used as the storage destination of the concealed EPC to support larger concealed EPC data. It is also possible to handle a plurality of encryption methods and keys by including a concealment method (encryption algorithm, key ID, etc.) used in the product type code.
[0030]
Next, the processing sequence of the entire system of the original 96-bit version EPC in the first embodiment of the present invention will be described with reference to FIG. In the system of FIG. 3, the processing sequence when the original 96-bit EPC shown in FIG. 4A is stored in the wireless tag 20 instead of the 256-bit EPC generated by the ID management computer 1 is shown in FIG. 5 (a1) to (a4). In the processing sequence of this 96-bit version EPC, the proxy server 4 is not involved, and the sequence is exactly the same as the conventional technology.
[0031]
(A1) The client computer 30 incorporating the reading device 33 reads the original 96-bit EPC from the wireless tag 20.
[0032]
(A2) The client computer 30 sends an EPC to the ONS server 9 and makes a resolution request for the address of the transfer destination server to which it is sent.
[0033]
(A3) The ONS server 9 returns the address of the PML server 8 based on the transmitted EPC. At this time, the manufacturer code or the product type code is used for address resolution. As a result of the address resolution, the address of the PML server 8 (manufacturer management, etc.) that is the original EPC storage destination is returned.
[0034]
(A4) The client computer 3 transmits EPC to the acquired address. The PML server 8 stores the received EPC as internal data (XML format or the like).
[0035]
Next, the processing sequence when the EPC in the first embodiment of the present invention is concealed (the concealed EPC is stored in the individual number of the 256-bit EPC) is shown in FIG. 6 (b1) to (b9). It explains according to.
[0036]
(B1) The client computer 30 incorporating the reading device 33 reads the 256-bit EPC (FIG. 4C) storing the concealed EPC from the wireless tag 20.
[0037]
(B2) The client computer 30 transmits a 256-bit EPC to the ONS server 9 and makes a resolution request for the address of the transfer destination server to which it is transmitted.
[0038]
(B3) The ONS server 9 replies to the requesting client computer 30 with the address of the transfer destination server (here, the address of the proxy server 4) based on the transmitted EPC manufacturer code or product type code.
[0039]
(B4) The client computer 30 transmits a 256-bit EPC including the concealed EPC to the acquired address.
[0040]
(B5) The proxy server 4 takes out the concealed 96-bit EPC from the received 256-bit EPC.
[0041]
(B6) The proxy server 4 obtains the original 96-bit EPC by decrypting the concealed EPC.
[0042]
(B7) Next, the proxy server 4 transmits the original EPC to the ONS server 9 and makes an address resolution request for the corresponding transfer destination server.
[0043]
(B8) The ONS server 9 obtains the address of the PML server 8 that processes the original EPC based on the received EPC manufacturer code or product type code, and returns the address of the PML server 8 to the proxy server 4 .
[0044]
(B9) The proxy server 4 transmits the original EPC to the PML server 8, and the PML server 8 stores the received EPC as internal data (XML format or the like).
[0045]
Here, between the client computer 30 and the proxy server 4, a secure communication path such as SSL (Secure Socket Layer) with client authentication, such as access control, communication path encryption, and falsification detection is provided as another means. And
[0046]
Next, a second embodiment in which the present invention is applied to an MIT auto ID system will be described. FIG. 7 shows the system configuration of the second embodiment. Also in the second embodiment, the basic configuration is the same as that of the first embodiment. The difference from the first embodiment is that the ID management computer 6 generates a 256-bit version EPC by attaching an authenticator to the 96-bit version EPC and sets it in the wireless tag 21, and the proxy server 7 has 256 bits. This is to verify that the EPC read from the wireless tag 21 is a regular ID by verifying the ID with the authenticator of the version EPC.
[0047]
An EPC storage method according to the second embodiment of the present invention will be described with reference to FIG. The 96-bit EPC shown in FIG. 8A is an original small-capacity EPC defined by MIT's Auto ID system. The version number is 8 bits, the manufacturer code is 28 bits, and the product type code is 24 bits. , Comprising individual number 36 bits. In FIG. 8, as an example, the manufacturer code “0x2345678” of the “ABC bag” company, the product type code “0xBCDEFG” of the “bag XX”, and the individual number “0x234567891” are stored.
[0048]
In this embodiment, as shown in FIG. 8B, the ID management computer 6 generates an authenticator for the original 96-bit EPC. In this example, sha1 (Secure Hash Algorithm 1), which is one of hash functions, is used to generate an authenticator, and 64 bits are extracted from the 160-bit output of sha1 to generate a 64-bit authenticator. . The ID management computer 6 adds the generated 64-bit authenticator to the original 96-bit EPC and stores it as the individual number of the 256-bit EPC shown in FIG.
[0049]
At this time, in the 256-bit EPC manufacturer code and the product type code, a code that can specify the proxy server 7 as the EPC transmission destination is set instead of the original product code. In the example of FIG. 4C, a code “0xBCDEFG01” of “authenticity judgment company” operating the proxy server 7 is stored as the manufacturer code, and a code “0x23456778910BCDE” of “ID authentication service” is stored as the product type code. Is stored.
[0050]
In this system, it is also possible to generate the authenticator by cryptographic processing (for example, MAC (Message Authentication Cord) generation, digital signature), and prepare an arbitrary code as the authenticator. It is also possible to use a method in which the proxy server 7 holds the correspondence between the EPC and the original EPC, and the proxy server 7 verifies the correspondence.
[0051]
Next, a processing sequence when an authenticator is added to the EPC according to the second embodiment of the present invention (EPC with authenticator is stored in the individual number of the 256-bit EPC) is shown in FIG. A description will be given according to (c9).
[0052]
(C1) The client computer 30 incorporating the reading device 33 reads the 256-bit EPC (FIG. 8C) storing the EPC with the authenticator from the wireless tag 21.
[0053]
(C2) The client computer 30 transmits a 256-bit EPC to the ONS server 9 and makes a resolution request for the address of the transfer destination server to which it is transmitted.
[0054]
(C3) The ONS server 9 returns the address of the transfer destination server (here, the address of the proxy server 7) based on the transmitted EPC manufacturer code or product type code.
[0055]
(C4) The client computer 30 transmits a 256-bit EPC including an EPC with an authenticator to the acquired address.
[0056]
(C5) The proxy server 7 extracts the EPC with an authenticator from the received 256-bit EPC.
[0057]
(C6) The proxy server 7 verifies the EPC with an authenticator based on the recognizer.
[0058]
(C7) When the proxy server 7 determines that the ID is a regular ID as a result of the verification, the proxy server 7 sends the original 96-bit EPC in the EPC with an authenticator to the ONS server 9 to request the address resolution of the transfer destination server. I do.
[0059]
(C8) The ONS server 9 returns the address of the PML server 8 that processes the original EPC from the manufacturer code or the product type code in the received 96-bit EPC.
[0060]
(C9) The proxy server 7 transmits the original EPC to the PML server 8, and the PML server 8 stores the received EPC as internal data (XML format or the like).
[0061]
In the third embodiment of the present invention, concealment of EPC in the first embodiment and addition of an authenticator in the second embodiment are performed simultaneously. The system configuration is the same as in FIG. 3 and FIG. FIG. 10 shows a processing flowchart of the ID management computer in the third embodiment.
[0062]
In step S1, the ID management computer inputs the original 96-bit EPC for identifying the product to be attached with the wireless tag. Next, in step S2, the input original 96-bit EPC is encrypted using a predetermined common key or public key to generate a concealed EPC. In step S3, an authenticator is generated by encryption processing such as MAC generation and digital signature for the confidential EPC.
[0063]
In step S4, the concealed EPC and authenticator generated in steps S2 and S3 are used as the individual number of the 256-bit EPC. In step S5, a unique number previously assigned to the ID authentication / concealment service is set as a product type code in the 256-bit EPC. In step S6, the unique number assigned in advance to the operating company of the proxy server is set as the manufacturer code in the 256-bit EPC. It is assumed that the correspondence information between the proxy server operating company number and ID authentication / confidential service number and the proxy server address (IP address) is registered in the ONS server in advance.
[0064]
In step S7, the version number indicating the type of EPC generation or data length, the manufacturer code determined in step S6, the product type code determined in step S5, and the individual number determined in step S4 are combined. Thus, a 256-bit EPC is generated. In step S8, the generated 256-bit EPC is written to the wireless tag, and the writing process to one wireless tag is terminated.
[0065]
FIG. 11 shows a process flowchart of the proxy server in the third embodiment. In step S10, the client computer receives a 256-bit EPC including the concealed EPC and the authenticator read from the wireless tag. In step S11, an authenticator is cut out from the individual number of the received 256-bit EPC to verify whether it is a valid ID. If it is determined in step S12 that the verified result is not valid, the process proceeds to step S13, an error is notified to the client computer that is the transmission source of the 256-bit EPC, and the process is terminated.
[0066]
As a result of the verification, if it is determined that the ID is valid, the process proceeds to step S14, where the original 96-bit EPC is restored by extracting and decoding the concealed EPC from the individual number of the 256-bit EPC. In step S15, the 96-bit EPC is sent to the ONS server, and the address of the PML server determined by the manufacturer code and product type code of the 96-bit EPC is obtained. In step S16, the 96-bit EPC is transmitted to the PML server, and the process ends.
[0067]
The processes of the ID management computer and the proxy server described above can be realized by a computer and a software program. The program can be provided by being recorded on a computer-readable recording medium or provided via a network. It is.
[0068]
【The invention's effect】
As described above, according to the present invention, the original ID for identifying the attachment target is concealed and stored in the wireless tag, and the proxy server, which is a legitimate computer, automatically decrypts the ID. By having a mechanism to be called, it is possible to prevent the ID information leakage of the wireless tag to an unauthorized third party, and it is possible to protect privacy related to property information. In addition, by storing an ID with an authenticator, even if the ID is illegally generated and pasted on a counterfeit product or the like, it becomes possible to detect ID counterfeiting and prevent counterfeiting.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of a configuration of the present invention.
FIG. 2 is a diagram showing an example of the configuration of the present invention.
FIG. 3 is a diagram illustrating an example of an overall configuration of a system according to the first embodiment.
FIG. 4 is a diagram illustrating a method for storing a concealment ID.
FIG. 5 is a diagram showing a processing sequence of an original 96-bit EPC.
FIG. 6 is a diagram showing a 256 EPC processing sequence including a concealment ID.
FIG. 7 is a diagram illustrating an example of an overall configuration of a system according to a second embodiment.
FIG. 8 is a diagram illustrating a method for storing an ID with an authenticator.
FIG. 9 is a sequence diagram illustrating a processing procedure for an ID with an authenticator.
FIG. 10 is a processing flowchart of the ID management computer according to the third embodiment.
FIG. 11 is a processing flowchart of a proxy server according to the third embodiment.
[Explanation of symbols]
1,6 ID management computer
2 products
3 Client computer
4,7 Proxy server
5 ID processing server
8 PML server
9 ONS server
10 Internet
11 Concealment ID generation means
12 Concealment ID setting means
20, 21 Wireless tag
30 client computers
31 ID reading means
32, 42, 72 Destination server solution means
33 Reader
41 Concealment ID decoding means
51 ID correspondence processing means
61 ID generation means with authenticator
62 ID setting means with authenticator
71 ID verification means with authenticator

Claims (14)

A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system A wireless tag security extending method in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
A code that conceals the first identification code set based on the first code system is set in an individual number area in the second code system, and a transmission destination specifying information area in the second code system Generating a second identification code in which a code that can be converted into an address of a predetermined proxy server device is set in a wireless tag,
The client device reads a second identification code from the wireless tag, obtains the address of the proxy server device from the code of the transmission destination specifying information area, and transmits the second identification code to the proxy server device; ,
Decrypting the concealed first identification code set in the individual number area in the second identification code in the proxy server device;
Decoded to obtain the address of the first specific server device from the code of the transmission destination specifying information area definitive identification code, and having a process of transmitting the first identification code to said particular server device Wireless tag security extension method. A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system A wireless tag security extending method in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
A code obtained by adding an authenticator for authenticity authentication generated using a digital signature to the first identification code to the first identification code set based on the first code system, A second identification code in which an individual number area in the second code system is set, and a code that can be converted into an address of a predetermined proxy server device is set in the transmission destination specifying information area in the second code system ; The process of setting the wireless tag,
The client device reads a second identification code from the wireless tag, obtains the address of the proxy server device from the code of the transmission destination specifying information area, and transmits the second identification code to the proxy server device; ,
In the proxy server device, an authenticator for authenticating the first identification code set in the individual number area in the second identification code is extracted, and the validity of the first identification code is verified by the authenticator. Process,
As a result of the verification, when it is determined to be valid, the first to obtain the address of a particular server device from the code of the transmission destination specifying information area definitive identification code, the first identification to the particular server device A method for extending the RFID tag security, comprising: a step of transmitting a code. A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system A wireless tag security extending method in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
An authenticator for authenticating the validity of the first identification code generated by using a digital signature is assigned to the code concealing the first identification code set based on the first code system. A second identification in which an individual code area in the second code system is set, and a code that can be converted into an address of a predetermined proxy server device is set in a transmission destination specifying information area in the second code system The process of generating the code and setting it to the wireless tag;
The client device reads a second identification code from the wireless tag, obtains the address of the proxy server device from the code of the transmission destination specifying information area, and transmits the second identification code to the proxy server device; ,
In the proxy server device, an authenticator for authenticating the first identification code set in the individual number area in the second identification code is extracted, and the validity of the first identification code is verified by the authenticator. Process,
As a result of the verification, when it is determined to be valid, the steps of decoding the first identification code concealed set to an individual number area in the second identification code,
Decoded to obtain the address of the first specific server device from the code of the transmission destination specifying information area definitive identification code, and having a process of transmitting the first identification code to said particular server device Wireless tag security extension method. In the wireless tag security expansion method according to claim 1, claim 2, or claim 3,
The first identification code is a commodity identification electronic code;
Said destination convertible code to the destination address set to a specific information area, a code set in the manufacturer code area or a manufacturer code area and product type code area in the product identification electronic code A wireless tag security expansion method characterized by the above. A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system An ID management computer device that sets an identification code in a wireless tag in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
A code that conceals the first identification code set based on the first code system is set in an individual number area in the second code system, and a transmission destination specifying information area in the second code system A concealment identification code generating means for generating a second identification code in which a code that can be converted into an address of a predetermined proxy server device is set ;
An ID management computer apparatus comprising: a concealment identification code setting unit that sets a generated second identification code in a wireless tag attached to an individual to be identified by the first identification code. A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system An ID management computer device that sets an identification code in a wireless tag in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
A code obtained by adding an authenticator for authenticity authentication generated using a digital signature to the first identification code to the first identification code set based on the first code system, set to an individual number area in the second coding scheme, generating a second identification code that sets convertible code into the second code address of a given proxy server to the destination identification information area that put the system An authenticator-generated identification code generating means,
An ID management computer apparatus, comprising: an authenticator-attached identification code setting unit that sets the generated second identification code in a wireless tag attached to an individual to be identified by the first identification code. A system for transmitting an identification code client device configured read from the radio tag by the reader or reader with a computer of a wireless tag to a specific server, as the code system of the wireless tag, separately for each radio tag A first code system including an individual number area in which an individual number attached to the address is set and a transmission destination specifying information area in which a code that can be converted into a destination address is set; and data more than the first code system An ID management computer device that sets an identification code in a wireless tag in a system having a second code system including the individual number area having a large length and the transmission destination specifying information area ,
An authenticator for authenticity generated by using a digital signature for the first identification code is added to the code concealing the first identification code set based on the first code system A second code in which an individual number area in the second code system is set and a code that can be converted into an address of a predetermined proxy server device is set in a transmission destination specifying information area in the second code system. An identification code generating means for generating an identification code;
An ID management computer apparatus comprising: an identification code setting unit that sets the generated second identification code in a wireless tag attached to an individual to be identified by the first identification code. As a code system of the wireless tag, a first code including an individual number area in which an individual number assigned to each wireless tag is set and a transmission destination specifying information area in which a code that can be converted into an address of the transmission destination is set In a system having a system and a second code system including the individual number area having a data length larger than that of the first code system and the transmission destination specifying information area, a wireless tag reader or a computer with a reader the client device is configured to a proxy server device which transmits the identification code read from the wireless tag to a specific server by,
A code that conceals the first identification code based on the first code system is set in the individual number area in the second code system read from the wireless tag by the client device, and the second code system A concealment identification code receiving means for receiving, from the client device, a second identification code in which a code that can be converted into the address of the proxy server device is set in the transmission destination specifying information area ;
A concealment identification code decoding means for decoding the concealed first identification code set in the individual number area in the received second identification code;
Decoded to obtain the address of the first specific server device from the code of the transmission destination specifying information area definitive identification code, further comprising an identification code transfer means for transmitting the first identification code to said particular server device A featured proxy server device. As a code system of the wireless tag, a first code including an individual number area in which an individual number assigned to each wireless tag is set and a transmission destination specifying information area in which a code that can be converted into an address of the transmission destination is set In a system having a system and a second code system including the individual number area having a data length larger than that of the first code system and the transmission destination specifying information area, a wireless tag reader or a computer with a reader the client device is configured to a proxy server device which transmits the identification code read from the wireless tag to a specific server by,
A digital signature for the first identification code is used for the first identification code based on the first code system in the individual number area in the second code system read by the client device from the wireless tag. The generated code with the authenticator for authenticity authentication set is set, and the code that can be converted into the address of the proxy server device is set in the transmission destination specifying information area in the second code system. An authenticated identification code receiving means for receiving an identification code from the client device ;
Identification code verification for extracting an authenticator for authenticating the first identification code set in the individual number area in the received second identification code and verifying the validity of the first identification code by the authenticator Means,
As a result of the verification, when it is determined to be valid, with the address of a particular server device from the code of the transmission destination specifying information area definitive to the first identification code, the first identification code to said particular server device An identification code transfer means for transmitting the proxy server device. As a code system of the wireless tag, a first code including an individual number area in which an individual number assigned to each wireless tag is set and a transmission destination specifying information area in which a code that can be converted into an address of the transmission destination is set In a system having a system and a second code system including the individual number area having a data length larger than that of the first code system and the transmission destination specifying information area, a wireless tag reader or a computer with a reader the client device is configured to a proxy server device which transmits the identification code read from the wireless tag to a specific server by,
A code obtained by concealing the first identification code based on the first code system in the individual number area in the second code system read from the wireless tag by the client device is applied to the first identification code. A code with an authenticator for authenticity generated using a digital signature is set, and a code that can be converted to the address of the proxy server device is set in the transmission destination specifying information area in the second code system Identification code receiving means for receiving the second identification code that has been received from the client device ;
Identification code verification for extracting an authenticator for authenticating the first identification code set in the individual number area in the received second identification code and verifying the validity of the first identification code by the authenticator Means,
As a result of the verification, when it is determined to be valid, a concealed identification code decoding means for decoding the concealed first identification code set in the individual number area in the second identification code;
Decoded to obtain the address of the first specific server device from the code of the transmission destination specifying information area definitive identification code, further comprising an identification code transfer means for transmitting the first identification code to said particular server device A featured proxy server device.   A program for an ID management computer device for causing a computer to execute the means included in the ID management computer device according to claim 5, 6 or 7.   A program for a proxy server device that causes a computer to execute the means included in the proxy server device according to claim 8, claim 9, or claim 10. A program for executing an ID management computer apparatus, wherein the program for causing the computer to implement each of the means included in the ID management computer apparatus according to claim 5, 6 or 7 is recorded. Computer-readable recording medium. A computer-readable program for a program for a proxy server device, which records a program to be executed by a computer for realizing each of the means included in the proxy server device according to claim 8, 9 or 10 by a computer. Possible recording media.

Images