JP4533102B2 - Information processing apparatus and information processing method - Google Patents

Description

  The present invention relates to an information processing apparatus and an information processing method, and more particularly, to an information processing apparatus and an information processing method suitable for performing entry / exit management using a portable storage medium.

  2. Description of the Related Art Conventionally, a security system has been realized that performs entry / exit management into a room (predetermined area) by performing authentication using a portable storage medium such as a magnetic card (see Patent Document 1).

Further, as a usage form of a portable storage medium such as a non-contact IC memory [for example, RFID (Radio Frequency Identification) tag], it is considered to provide a function to read information from the portable storage medium in an MFP (Multi Function Printer). It is done. In this case, it is conceivable that the MFP reads job information to be executed by the MFP (multifunction peripheral) from the portable storage medium and executes a job based on the read job information. As an example of job execution, for example, there is print processing for printing an image on a sheet based on image data.
Japanese Patent Laid-Open No. 11-303478

  In the usage mode as described above, in a state where confidential information (for example, confidential data such as outside secret or department secret) is stored in the portable storage medium, a room (predetermined) where the portable storage medium is managed. It may become a problem when taken outside the area) (outside or outside the department). For example, when the portable storage medium is lost, the confidential information stored in the portable storage medium is read by a third party, which may reduce the security related to the confidential information. is there.

  Accordingly, the present invention provides an information processing apparatus that prevents leakage of information when a portable storage medium is taken out of a predetermined area and enables use of information stored in the portable storage medium within the predetermined area, and An object is to provide an information processing method.

In order to solve the above-described problem, an information processing apparatus according to the present invention reads first specific information for specifying the portable storage medium from the portable storage medium and predetermined information different from the first specific information. Information reading means for outputting, information writing means for writing the predetermined information to the portable storage medium, storage means for storing the predetermined information read from the portable storage medium by the information reading means, and the information reading Means, control means for controlling the information writing means and the storage means, and the first specific information read by the information reading means matches the second specific information stored in the storage means to have an authentication unit for authenticating the exit and entrance to the given area from a predetermined area of the user corresponding to the first identification information, said control means, read by the information reading means and the If the exit from the predetermined area of the user corresponding to one of the specific information is authenticated by the authentication means, before Symbol matching the second identification information and first identification information, from the portability storage medium The read predetermined information is stored in the storage means in association with the predetermined information, and the predetermined information is controlled to be deleted from the portable storage medium, and the first specific information read by the information read means is in If admission to the predetermined area of the corresponding user is authenticated by the authentication means, the second of the said predetermined information stored identification information and the association with the first identification information in the storage means Control is performed so as to write to the read portable storage medium.

The information processing method according to the present invention is an information processing method in an information processing apparatus , and includes first specifying information for specifying the portable storage medium from the portable storage medium, and the first specifying information, Information reading step for reading different predetermined information, and when the first specific information read by the information reading step matches the second specific information stored in the storage means provided in the information processing apparatus , corresponding to the first authentication step and said first specific information more read before Symbol information reading step of authenticating the exit and entrance to the given area from a predetermined area of the user corresponding to the identification information When the user exiting from the predetermined area is authenticated in the authentication step, the second specific information that matches the first specific information is read from the portable storage medium. It is a storage step of storing the memorize means in association with the predetermined information, wherein the authentication step exit from the predetermined area of the user with better read the first identification information to the information reading step If authenticated by, the erase step of erasing the predetermined information from the portability storage medium, in the predetermined area of the user corresponding to the first identification information read by the pre-Symbol information reading means If the entry is authenticated in said authentication step, said storing means to the second of the said predetermined information stored in association with identification information first identification information is read out the portability storage medium And an information writing step for writing into the information.

According to the present invention, when the user exiting from the predetermined area corresponding to the portable storage medium is authenticated, the predetermined information stored in the portable storage medium is erased, and the predetermined area of the user whose exit is authenticated is deleted. When the entry of the user is authenticated , the erased predetermined information is written in the portable storage medium corresponding to the user, so that the predetermined information can be prevented from leaking outside the predetermined area .

  Hereinafter, an embodiment for carrying out the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram of a security system to which an information processing apparatus according to an embodiment of the present invention is applied. This system assumes a security area (also referred to as a confidential area) 100 that is a room separated from the outside world by a plurality of physical gates such as gates and doors and physical walls (not shown). In this security area 100, a security server 103, an MFP (multifunction peripheral) 105, a document server 106, and a clearing apparatus 108 are arranged. A plurality of physical gates such as gates and doors are provided with a gate control unit 101 that controls opening and closing of these gates. When the gate is closed, entry / exit to the security area 100 is prohibited, and entry / exit to the security area 100 is permitted when the gate is opened.

  Each of the plurality of gates is also provided with a reader / writer 109 for accessing the nonvolatile memory 201 (see FIG. 2) in the RFID tag (non-contact IC) 104. In addition, each reader / writer 109 installed in each gate is connected to each other by the first network 102, and the gate control unit 101 and the security server 103 are also connected to the first network 102. .

  As shown in FIG. 8, the security server 103 includes an I / F unit 801 for inputting / outputting information (data) to / from the reader / writer 109, a control unit 802 for controlling the security server 103, and a control. And a storage unit 803 such as a hard disk for storing table data 804 and the like which will be described later. The storage unit 803 also stores application programs corresponding to steps S503 to S505 in the flowchart of FIG. 5 and steps S603 and S604 in the flowchart of FIG.

  Under such a network configuration, the user ID 401 (see FIG. 4) stored in the nonvolatile memory 201 in the RFID tag 104 is read by the reader / writer 109 and transferred to the security server 103. The security area 100 is formed by managing entry / exit of the user and opening / closing the gate via the gate control unit 101.

  In this embodiment, the gate control unit 101 controls opening and closing of the physical gate according to the user entry / exit management by the security server 103. However, the gate control unit 101 does not necessarily control the opening and closing of the physical gate. do not have to.

  Further, as will be described in detail later, when confidential data (including job information and commands) is stored and the RFID tag 104 is taken out of the security area 100, the confidential data in the RFID tag 104 is read / written by the reader / writer 109. And evacuating to the security server 103 and deleting the confidential data in the RFID tag 104 to prevent the confidential data from leaking to a third party outside the security area 100.

  When the RFID tag 104 is brought back into the security area 100, the confidential data saved in the security server 103 is written back to the RFID tag 104 via the reader / writer 109, so that the confidential data is stored in the security area 100. It is made available freely.

  Readers / writers 105a and 108a are installed in the MFP (multifunction machine) 105 and the clearing apparatus 108 in the security area 100, respectively. In the security area 100, the MFP (multifunction machine) 105, The clearing apparatus 108 is configured to freely access the memory in the RFID tag 104 via the reader / writers 105a and 108a, respectively.

  The first network 102 is preferably physically separated from the external network (such as the Internet) in order to improve confidentiality. You may make it isolate | separate.

  The MFP 105 and the document server 106 are connected via the second network 107. The second network 107 is configured by a LAN, a SAN (Storage Area Network), or the like, but is not necessarily physically connected to the first network 102.

  The RFID tag 104 can be used for the MFP 105 by holding the RFID tag 104 over a reader / writer 105 a mounted on the MFP 105, so that the FAX destination information, e-mail address, and document server 106 stored in the RFID tag 104 can be used. It is possible to download the position information and the like of the stored document data to the MFP 105 in a non-contact manner, and execute FAX transmission, e-mail transmission, and document print output, respectively. Further, in a state where the RFID tag 104 is brought close to the reader / writer 105 a mounted on the MFP 105, the FAX transmission destination information, the mail address, and the position information of the document data stored in the document server 106 from the operation unit (not shown) of the MFP 105. Or the like, and can be stored in the RFID tag 104 without contact via the reader / writer 105a.

  The clearing device 108 is installed in, for example, a cafeteria. As a usage form of the RFID tag 104 for the clearing device 108, for example, the clearing device 108 performs a clearing process based on a user ID stored in the RFID tag 104. It is possible. At this time, as a clearing process, a prepaid card method is used to make a payment based on the balance information stored in the RFID tag 104, or a clearing server connected to the clearing device 108 ( (Not shown), the price information for each user may be accumulated and stored in the clearing server, and the clearing may be performed at intervals such as one month. Further, the contents of each meal may be stored in the settlement server or the RFID tag 104 so that the history can be referred to later.

  The use form of the RFID tag 104 for the MFP 105 and the clearing apparatus 108 is merely an example, and can be applied to various forms other than the form described above. The RFID tag 104 can be used in various electronic information devices in the security area 100 other than the MFP 105 and the clearing apparatus 108.

[RFID tag]
FIG. 2 is a block diagram showing a configuration of the RFID tag 104. The RFID tag 104 is also called a non-contact IC chip or a data carrier, and can communicate with a reader / writer wirelessly (that is, non-contact). In this embodiment, a card-type RFID tag is assumed, and a non-contact IC chip containing the following devices is included in the card-type RFID tag.

  That is, the RFID tag (non-contact IC chip) 104 includes a nonvolatile memory 201, an antenna unit 202 for transmitting and receiving radio waves, a resonant capacitor unit 203, a power generation unit 204 for rectifying and smoothing current, A demodulating circuit 205 and a control unit 206 for performing demodulation and modulation are formed. The RFID tag 104 does not have a built-in power source such as a battery, and generates electric power based on radio waves supplied from a reader / writer.

  That is, the antenna unit 202 forms a resonance circuit in combination with the resonance capacitor unit 203. On the other hand, as will be described later, the reader / writer always emits a radio wave (AC magnetic field) for generating power. When the RFID tag 104 is held over the reader / writer, an induced current is generated in the resonance circuit in the RFID tag 104 by electromagnetic induction. This induced current is output to the power generation unit 204. The power generation unit 204 rectifies and smoothes the input induced current to generate power of a predetermined voltage, and the nonvolatile memory 201, the control unit 206, the post-modulation circuit 205. The control unit 206 controls the RFID tag 104 as a whole.

  The reader / writer simultaneously transmits radio signals related to various types of data in addition to radio signals for power generation. The radio signals related to this data are demodulated by the post-modulation circuit 205 and controlled by the control unit 206. The data is written in the nonvolatile memory 201 below. In addition, the control unit 206 reads data from the nonvolatile memory 201, modulates it by the post-modulation circuit 205, and transmits it as a radio wave signal via the antenna unit 202.

  The control unit 206 has a built-in ROM (not shown). The ROM includes steps S501 to S502, S506 and S509 in the flowchart of FIG. 5, and steps S601 to S602 and S606 to S607 in the flowchart of FIG. The application program corresponding to is stored. However, this application program may be stored in the nonvolatile memory 201.

[Reader / Writer]
FIG. 3 is a block diagram showing the configuration of the reader / writer 109, 105a, 108a. The reader / writers 109, 105 a, and 108 a include a transmission antenna unit 301 for transmitting radio wave signals, and a modulation circuit 302 that modulates a signal input from the I / F unit 306 into a data signal transmitted from the transmission antenna unit 301. A reception antenna unit 303 that receives radio signals, a demodulation circuit 304 that demodulates the radio signals received from the reception antenna unit 303 into signals to be output from the I / F unit 306, and a host device (in this embodiment, the security server 103). ) And a control unit 305. The control unit 305 controls the transmission antenna unit 301, the modulation circuit 302, the reception antenna unit 303, the demodulation circuit 304, and the I / F unit 306. The transmission antenna unit 301 is connected to an AC power source 307 that generates electric power for generating radio signals.

  In response to an instruction from the security server 103, the control unit 305 modulates a radio wave for supplying power and data to be transmitted using the modulation circuit 302, and transmits the radio wave via the transmission antenna unit 301. Further, the control unit 305 can convert the radio wave signal received by the receiving antenna unit 303 so that it can be treated as a data signal after being demodulated by the demodulation circuit 304. That is, the control unit 305 can write information (data) into the nonvolatile memory 201 of the RFID tag 104 existing within the transmission range of the transmission antenna unit 301 by transmitting a radio wave signal from the transmission antenna unit 301. The control unit 305 demodulates the radio wave signal received by the receiving antenna unit 303 by the demodulation circuit 304 to obtain information (data) from the nonvolatile memory 201 of the RFID tag 104 existing within the reception range of the receiving antenna unit 303. Can be read.

  The control unit 305 has a built-in ROM (not shown), and in this ROM, steps S501 to S502, S505 to S511 in the flowchart of FIG. 5 and steps S601 to S602 and S605 to S608 in the flowchart of FIG. The application program corresponding to is stored.

[RFID tag storage data]
FIG. 4 is a conceptual diagram showing data stored in the nonvolatile memory 201 of the RFID tag 104.

  The nonvolatile memory 201 in the RFID tag 104 stores a user ID 401 and individual data 402 of the owner of the RFID tag 104. As this user ID 401, a unique value (numerical value, symbol, etc.) is assigned to each RFID tag 104, and the user who owns the RFID tag 104 can be authenticated based on this user ID 401. . That is, each user ID 401 stored in the nonvolatile memory 201 in each RFID tag 104 is registered in advance in the security server 103 before the operation of this system. For example, when passing through the gate, the reader / writer 109 By reading the user ID 401 from the RFID tag 104 and comparing it with the user ID registered in the security server 103, it is determined whether or not the user can pass through the gate (this is called authentication), and the entrance / The fact that the user has left is recorded in the security server 103.

The individual data 402 includes one or more individual data 402 stored in one RFID tag 104. Each individual data 402 includes an individual data ID 403, a data body 404, and a confidential flag 405.

  The individual data ID 403 is an ID for identifying each individual data 402 (that is, the data body 404), and a unique value (numerical value, symbol, etc.) is assigned to each radio wave signal individual data 402 for power generation. In combination with the user ID 401, various data of the data body 404 can be exchanged with the MFP 105 and the clearing apparatus 108.

  The data body 404 is data that is actually read and written and forms the entity of individual data 402 used for various processes. As described above, the data relating to the MFP 105 includes the FAX transmission destination information, the e-mail address, and the document server 106. The location information of the stored document data is read and written. Information input from the operation unit of the MFP 105 can be added or overwritten.

  In addition, as data related to the clearing apparatus 108, money data that has been deposited in advance and meal history information are read and written. The money data is information that can be rewritten only by a clearing server (not shown) connected to the clearing apparatus 108. Meal history information is information rewritten by the clearing apparatus 108.

  The confidential flag 405 is information set for each individual data 402, and represents whether or not the individual data 402 includes confidential information. In the present embodiment, it is defined that confidential information is included when the confidential flag 405 is ON (1) and that confidential information is not included when the confidential flag 405 is OFF (0). The confidential flag 405 can be written only by the reader / writer 109 connected to the security server 103.

  In this specification, regarding the individual data 402 for which the confidential flag 405 is ON, even if the individual data 402 is not a confidential matter but only a part thereof is a confidential matter, the individual data 402 The whole is called confidential data (the scope of claims is the same).

[Exit processing]
Next, processing when the user exits from the security area 100 to the outside will be described based on the flowchart of FIG. FIG. 5 shows an operation executed by the information processing apparatus including at least the security server 103 and the reader / writer 109.

  Step S501: The control unit 305 of the reader / writer 109 determines whether or not communication with the RFID tag tag 104 is possible. Since the RFID tag 104 receives electric power due to radio waves emitted from the reader / writer 109, when the user brings the RFID tag 104 close to the communicable range of the reader / writer 109, the reader / writer 109 is connected to the RFID tag 104. Communication becomes possible. Note that the RFID tag 104 is brought close to the reader / writer 109 so that the gate is not opened unless a predetermined authentication process described later is executed. / Need to be close to the writer 109.

  Step S502: The control unit 305 of the reader / writer 109 reads out the user ID 401 from the nonvolatile memory 201 in the RFID tag 104 and transmits it to the security server 103 in cooperation with the control unit 206 of the RFID tag 104.

  Step S503: The security server 103 confirms that the user ID 401 received from the reader / writer 109 is registered in the security server 103, and the user entry / exit status related to the user ID 401 is “entrance”. By determining whether or not, it is determined whether or not to authenticate the user's exit.

  Specifically, the control unit 802 of the security server 103 matches the user ID input via the control unit 305 of the reader / writer 109 with the user ID stored in the table data 804 in the security server 103. If the entry / exit status associated with the user ID is “entrance”, the user's exit is authenticated, and information indicating authentication is sent via the I / F unit 801 to the reader / Transmit to writer 109. The security server 103 proceeds to step S505 when authenticating the user exit, and proceeds to step S504 when not authenticating the user exit.

  Here, in the RFID tag 104, it is assumed that the user ID that is the owner of the RFID tag 104 is stored in advance in a part of the storage area of the nonvolatile memory 201 as information for specifying the RFID tag 104. . The security server 103 stores table data 804 (for example, storing the contents shown in FIG. 7) for managing user IDs. The table data 804 is used to specify the RFID tag 104. Assume that the entry / exit status of the user (in other words, the RFID tag 104 specified by the user ID) and confidential information described later are stored in association with the user ID. Note that the table data 804 including confidential information and the like is stored in the storage unit 803 such as a hard disk in the security server 103.

  Step S504: When the security server 103 does not register the received user ID 401 in the security server 103, or even if it is registered, the user entry / exit status related to the user ID 401 is “exit” (In this case, meaning that the user has illegally entered the security area 100 in the past), a predetermined warning process is performed without authenticating the user's exit. As this warning processing, for example, a warning message is displayed on a display device (not shown) installed at the gate, a warning sound is emitted by a speaker (not shown) installed at the gate, or the gate control unit 101 turns the gate on. It may be possible to temporarily lock it in a closed state.

  Step S505: If the user ID 401 related to the reception is registered in the security server 103 and the user entry / exit status related to the user ID 401 is “entrance”, the security server 103 removes the user. Authentication is performed, the user entry / exit status associated with the user ID 401 is changed to “exit”, and information indicating that the user exit has been authenticated is notified to the reader / writer 109.

  When the control unit 305 of the reader / writer 109 receives information indicating that the user has been withdrawn from the security server 103, information indicating that the user has left (in other words, the RFID tag 104 exists in the security area 100). The modulation circuit 302 is controlled so as to write the information (indicating that it is in an “exit” state) to the nonvolatile memory 201 of the RFID tag 104.

  In this embodiment, in order to reduce the storage capacity of the storage unit 803 used by the table data 804, the storage unit 803 of the security server 103 stores only the latest entry / exit status. Alternatively, a plurality of entry / exit situations (histories) may be stored.

  Step S506: When the control unit 305 of the reader / writer 109 receives information from the security server 103 that the user has been authenticated, the control unit 305 cooperates with the control unit 206 of the RFID tag 104 to store the nonvolatile information in the RFID tag 104. The individual data ID 403 and confidential flag 405 related to one individual data 402 are read from the security memory 201 and transmitted to the security server 103.

  Step S507: The control unit 802 of the security server 103 determines whether or not the confidential flag 405 corresponding to the individual data 402 is ON.

  Step S508: When the control unit 802 of the security server 103 determines that the confidential flag 405 is ON, the control unit 305 of the reader / writer 109 and the control unit 206 of the RFID tag 104 cooperate with each other, Corresponding individual data 402 (data body 404) is read from the nonvolatile memory 201 in the RFID tag 104 and transmitted to the security server 103.

  Here, the control unit 802 of the security server 103 that has received the individual data 402 from the nonvolatile memory 201 of the RFID tag 104 stores the received individual data 402 as table data 804 in association with the user ID authenticated in step S503. The information is stored (saved) in the unit 803.

  Step S509: The control unit 305 of the reader / writer 109 erases the individual data 402 saved in the storage unit 803 of the security server 103 in step S508 from the nonvolatile memory 201, and proceeds to step S510. On the other hand, when the control unit 802 determines that the confidential flag 405 is OFF in step S507, the control unit 802 of the security server 103 and the control unit 305 of the reader / writer 109 perform the save processing in step S508, the processing in step S509. The process proceeds to step S510 without performing the erasing process.

  Step S510: The control unit 305 of the reader / writer 109 cooperates with the control unit 206 of the RFID tag 104 to refer to the nonvolatile memory 201 in the RFID tag 104 and does not check the confidential flag 405 or the like. It is determined whether or not individual data 402 exists.

  As a result, if there is next individual data 402 for which the confidential flag 405 is not checked, the control unit 305 of the reader / writer 109 returns to step S506 and performs the same processing on the next individual data 402. I do. On the other hand, when processing such as checking of the confidential flag 405 for all the individual data 402 is completed, the process proceeds to step S511, and the control unit 305 of the reader / writer 109 exits processing such as opening the gate by the gate control unit 101, for example. To end this process.

  As described above, the control unit 305 of the reader / writer 109 uses the individual data 402 stored in the RFID tag 104 when the demodulating circuit 304 indicates “entrance” when the entry / exit information read from the RFID tag 104 is indicated. When the confidential flag is ON, the individual data 402 is saved and deleted so that the individual data 402 stored in the RFID tag 104 cannot be read. Further, the control unit 305 of the reader / writer 109 controls the modulation circuit 302 so that information indicating “exit” is written in the RFID tag 104 as entry / exit information.

  Note that the control unit 802 of the security server 103 has set a confidential flag for each of a plurality of individual data (402, 406, 407, and 408 in FIG. 4) stored in the nonvolatile memory 201 of the RFID tag 104. Is determined in step S507, data that should be kept secret among the plurality of individual data is surely erased from the nonvolatile memory 201, and data that does not need to be kept secret is stored in the nonvolatile memory 201. can do.

[Admission processing]
Next, processing when the user carrying the RFID tag 104 enters the security area from the outside of the security area 100 will be described based on the flowchart of FIG. FIG. 6 shows an operation executed by the information processing apparatus including at least the security server 103 and the reader / writer 109.

  Step S601: The control unit 305 of the reader / writer 109 determines whether or not communication with the RFID tag 104 is possible. Since the RFID tag 104 receives electric power due to radio waves emitted from the reader / writer 109, when the user brings the RFID tag 104 close to the communicable range of the reader / writer 109, the reader / writer 109 is connected to the RFID tag 104. Communication becomes possible. The RFID tag 104 is brought close to the reader / writer 109 so that the gate is not opened unless a predetermined authentication process described later is executed. / Need to be close to the writer 109.

  Step S602: The control unit 305 of the reader / writer 109 reads the user ID 401 from the nonvolatile memory 201 in the RFID tag 104 and transmits it to the security server 103 in cooperation with the control unit 206 of the RFID tag 104.

  Step S603: The security server 103 confirms that the user ID 401 received from the reader / writer 109 is registered in the security server 103, and the user entry / exit status related to the user ID 401 is “exit”. By judging whether or not, it is judged whether or not the user's entrance is authenticated.

  Specifically, the control unit 802 of the security server 103 matches the user ID input via the control unit 305 of the reader / writer 109 with the user ID stored in the table data 804 in the security server 103. When the entry / exit status associated with the user ID is “exit”, the user's entry is authenticated, and information indicating authentication is sent via the I / F unit 801 to the reader / Transmit to writer 109.

  The security server 103 proceeds to step S605 when authenticating the user's entry, and proceeds to step S604 when not authenticating the user's entry.

  Step S604: When the security server 103 does not register the received user ID 401 in the security server 103, or even if it is registered, the entry / exit status of the user related to the user ID 401 is “entrance” (In this case, meaning that the user has illegally left the security area 100 in the past), a predetermined warning process is performed without authenticating the user's entry.

  As this warning processing, for example, a warning message is displayed on a display device installed at the gate, a warning sound is sounded by a speaker installed at the gate, or the gate is temporarily closed by the gate control unit 101. It is conceivable.

  Step S605: If the user ID 401 related to the reception is registered in the security server 103 and the user entry / exit status related to the user ID 401 is “exit”, the security server 103 Authentication is performed, the entry / exit status of the user relating to the user ID 401 is changed to “entrance”, and information indicating that the entry of the user has been authenticated is notified to the reader / writer 109.

  When the control unit 305 of the reader / writer 109 receives information indicating that the user has been entered from the security server 103, information indicating that the user has entered (in other words, the RFID tag 104 exists in the security area 100). The modulation circuit 302 is controlled to write the information (indicating that it is in the “entry” state) to the nonvolatile memory 201 of the RFID tag 104.

  Step S <b> 606: When the control unit 305 of the reader / writer 109 receives information indicating that the user's entry related to the user ID 401 is authenticated from the security server 103, the security server 103 stores the saved individual data 402 related to the user ID 401. The data is transmitted to the non-volatile memory 201 in the RFID tag 104 in cooperation with the control unit 206 of the RFID tag 104.

  For example, the control unit 802 of the security server 103 is “13114039” (the entry / exit information is “exit”) whose user ID 401 is indicated in the table data 804, and the entry / exit read from the nonvolatile memory 201 in step S603. If the information indicates an “exit” state (see FIG. 7), the information (aaa.txt) saved in the storage unit 803 as confidential data when leaving is stored in the nonvolatile memory 201 of the RFID tag 104. The information (aaa.txt) is transmitted to the reader / writer 109 so as to write back. The control unit 305 of the RFID tag 104 that has received the information (aaa.txt) from the security server 103 controls the modulation circuit 302 to write the information (aaa.txt) to the nonvolatile memory 104 of the RFID tag 104.

  Step S607: The control unit 305 of the reader / writer 109 inquires the security server 103 whether or not there is other saved individual data (406, 407, 408 in FIG. 4) related to the user ID 401, and is saved. If there is other individual data, the process returns to step S606 to write the other individual data 402 back to the nonvolatile memory 201 in the RFID tag 104.

  Note that the control unit 802 of the security server 103 deletes the individual data 402 written back to the nonvolatile memory 201 from the storage unit 803 in order to effectively use the storage area of the storage unit 803 in the security server 103. Further, as described above, the control unit 802 of the security server 103 does not transmit the individual data 402 related to saving to the reader / writer 109 in response to the inquiry or inquiry from the control unit 305 of the reader / writer 109. Instead, based on the user ID 401 received from the reader / writer 109 in step S <b> 602, the individual data 402 relating to active saving may be searched and transmitted to the reader / writer 109.

  Step S608: On the other hand, if there is no other saved individual data 402, the control unit 305 of the reader / writer 109 performs an entrance process such as opening the gate by the gate control unit 101, and ends this process. .

  As described above, in the present embodiment, when taking out the RFID tag 104 outside the security area 100, after reading confidential data from the RFID tag 104 and saving it to the security server 103, confidential data related to saving on the RFID tag 104 is stored. , And when the RFID tag 104 is brought into the security area 100, the confidential data related to evacuation is written back to the RFID tag 104 and restored.

  Therefore, according to the present embodiment, it is possible to prevent the confidential data from being misused by being leaked to a third party outside the security area 100. Further, since the confidential data saving, erasing, and writing-back processing is automatically performed when the RFID tag 104 is held over the reader / writer 109, the burden on the user is not increased.

  Further, since it is not necessary to mount a battery on the RFID tag 104, the RFID tag 104 can be downsized and a security system can be constructed at a low cost. Furthermore, since confidential data cannot be restored without user authentication, even if the user enters the security area 100 without receiving user authentication, the confidential data cannot be used, and the security function is disabled. Further improvement.

[Modification of Embodiment]
As described above, confidential data stored in the RFID tag 104 may be prevented from being leaked as follows without saving, erasing, and writing back.

  That is, when the readable flag associated with the individual data 402 is stored in the nonvolatile memory 201 of the RFID tag 104 and the RFID tag 104 is taken out of the security area 100, the readable flag relating to the confidential data cannot be read. When the RFID tag 104 is brought into the security area 100 in the state, the readable flag relating to the confidential data is set to the readable state, so that the confidential data is leaked outside the security area 100. In addition to prevention, confidential data may be freely used in the security area 100.

  In this case, the readable flag needs to be changed by the reader / writer 109 only when the user of the RFID tag 104 is authenticated by the security server 103, for example. In addition, the RFID tag 104 has a control mechanism that prevents reading of individual data (confidential data) in which the readable flag is set in a non-readable state in the control unit 206 or a memory controller (not shown). It is necessary to prevent the confidential data from being read by a commercially available reader / writer for an RFID tag.

  In the above embodiment, since it is necessary to perform processing for saving, erasing, or writing back confidential data, there is a possibility that the time required for entry / exit management may be increased. On the other hand, in the modified example, since the confidential data is not directly processed, the time required for the entry / exit management is shortened. However, the confidential data is taken out of the security area 100 in terms of form, and some security is required. Anxiety remains. Which of the embodiment and the modification is selected may be determined depending on which of security and the time required for entry / exit management is important.

  Note that as the configuration data of the individual data 402, 406, 407, and 408, by defining an accessible flag instead of the readable flag, the confidential data is overwritten with other data on the confidential data. It is also possible to prevent the damage.

  In addition, the present invention can be applied to the case where the RFID tag is not used for entry / exit management as described above but is used only for recording data used in various apparatuses. In this case, it is not necessary to use a reader / writer for the RFID tag as a means for detecting taking out / carrying of the RFID tag into the confidential area. For example, the RFID tag is used as a game fee at a game hall such as a pachinko store or a game center. In the case of using as a clearing medium, a magnetic field (that is, a confidential area) is formed in a game room by a predetermined device, and a device for detecting the magnetic field is mounted on the RDID tag, and the RFID tag for the confidential area is provided by this device. It is also possible to detect carry-out / carry-in.

  In the example where the RFID tag is used as a settlement medium for the game fee at the above-mentioned amusement hall, the prepaid information stored in the RFID tag is used for other management in the confidential data leakage prevention processing according to the above embodiment or the modification. It is performed in order to avoid being used in a game hall related to a person.

  In addition, a battery can be mounted on the RFID tag. In this case, the RFID tag control unit is configured to independently execute the confidential data leakage prevention process according to the above-described embodiment or the modification without cooperating with the reader / writer control unit. Is also possible.

  Furthermore, as a process for preventing leakage of confidential data, when taking an RFID tag out of the confidential area, the confidential data in the RFID tag is encrypted and the RFID tag is brought into the confidential area (if necessary) It is also possible to decrypt the encrypted confidential data in the RFID tag by performing user authentication.

  Further, the communication method of the RFID tag may be a communication method using light such as infrared rays without using radio waves or electromagnetic waves. The shape of the RFID tag is not limited to a card type, but may be a label type, a coin type, a box type, a stick type, or the like.

  In addition, the present invention can be applied to data that cannot be said to be confidential data in a strict sense, such as data relating to privacy, data harmful to adolescents, and the like.

  Furthermore, the object of the present invention is to download the program code of the software that realizes the functions of the above-described embodiments, modifications, etc. to the RFID tag, reader / writer by wireless communication or the like, and control the RFID tag, reader / writer. Needless to say, this can also be achieved by the section executing the program code associated with the download.

  In this case, the program code itself realizes the functions of the above-described embodiments, modifications, etc., and the storage medium storing the program code constitutes the present invention. Further, by executing the program code, not only the functions of the above-described embodiments and modifications are realized, but also an operating system operating on the RFID tag and the reader / writer based on an instruction of the program code. It goes without saying that the system (OS) or the like performs part or all of the actual processing, and the functions of the above-described embodiments, modifications, and the like are realized by the processing.

It is a system configuration figure of a security system to which an information processor concerning one form of the present invention is applied. It is a block diagram which shows schematic structure of the RFID tag of the said security system. It is a block diagram which shows schematic structure of the reader / writer of the said security system. It is a conceptual diagram which shows the structure of the data in the non-volatile memory of the said RFID tag. It is a flowchart which shows the process of a security system in the case of taking out an RFID tag from a security area. It is a flowchart which shows the process of a security system in the case of bringing an RFID tag into a security area. It is a figure which shows the table data memorize | stored in the memory | storage part of a security server. It is a block diagram which shows the structure of a security server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Security area 101 ... Gate control part 103 ... Security server 104 ... RFID tag 109, 105a, 108a ... Reader / writer, 201 ... Non-volatile memory, 205 ... RFID tag control part, 305 ... Reader / writer 401: User ID, 402, 406, 407, 408: Individual data, 405: Confidential flag

Claims (8)

And reading information reading means to different predetermined information from the first identification information and the first identification information for identifying the portability storage medium from the portable recording medium,
Information writing means for writing the predetermined information to the portable storage medium;
Storage means for storing the predetermined information read from the portable storage medium by the information reading means;
Control means for controlling the information reading means, the information writing means and the storage means;
When the first specific information read by the information reading means matches the second specific information stored in the storage means, the user exits the predetermined area corresponding to the first specific information. And authentication means for authenticating entry into the predetermined area,
The control means includes
The information when the exit from the predetermined area of the user corresponding to the first identification information read by the reading means is authenticated by the authentication means, before Symbol the second that matches the first identification information The specific information read from the portable storage medium is associated with the predetermined information and stored in the storage means, and the predetermined information is deleted from the portable storage medium,
In If admission to the predetermined area of the user corresponding to the first identification information read by the information reading means is authenticated by the authentication means, corresponding to the second identification information in said storage means An information processing apparatus that controls to write the predetermined information that is attached and stored in the portable storage medium from which the first specific information has been read . The storage means uses, as the second specific information, entry / exit information indicating whether the portable storage medium is in an entry state where the portable storage medium is entering the predetermined area or an exit state where the portable storage medium is exiting the predetermined area. association with the memory,
Before SL authentication means, in the case where the first identification information read by the information reading means coincides with the second specific information stored in the storage means, the entering-leaving information the admission condition If it is indicated, the user exiting from the predetermined area corresponding to the second specific information is authenticated, and if the entrance / exit information indicates the exit state, the predetermined area of the user corresponding to the second specific information. Authenticate admission to
The control means changes the entry / exit information from information indicating the exit status to information indicating the entrance status when the authentication means authenticates the user corresponding to the second specific information to enter the predetermined area. And when the authentication means authenticates the exit of the user corresponding to the second specific information from the predetermined area, the entrance / exit information is changed from the information indicating the entrance state to the information indicating the exit state. claim 1 Symbol placement of the information processing apparatus and controls the storage unit so. The information reading means reads confidential information indicating whether the predetermined data should be confidential from the portable storage medium,
The control means is a case where the user exiting from the predetermined area corresponding to the first specific information read by the information reading means is authenticated by the authentication means , and the confidential information is the predetermined information. the to indicate that should be secret, before Symbol claim 1 or 2 Symbol placement of the information processing apparatus is characterized in that Gosuru cormorants system by erasing predetermined information from the portability storage medium. The portability storage medium is a communication storage medium in a non-contact, said information reading means reads the information from the portability storage medium in a non-contact state, said information writing means, a non-contact state The information processing apparatus according to claim 1, wherein information is written in the portable storage medium. An information processing method in an information processing apparatus,
And reading information reading step a different predetermined information from the first identification information and the first identification information for identifying the portability storage medium from the portable recording medium,
When the first specific information read by the information reading step matches the second specific information stored in the storage unit included in the information processing apparatus, the user corresponding to the first specific information An authentication step for authenticating exit from the predetermined area and entry into the predetermined area;
If the exit from the predetermined area of the user with better read the first identification information before Symbol information reading step is authenticated at the authentication step, the consistent with the first identification information the second identification information, a storage step of storing the memorize means in association with the predetermined information read from the portability storage medium,
If the exit from the predetermined area of the user is authenticated at the authentication step with better read the first identification information to the information reading step, erasing the predetermined information from the portability storage medium An erasing step to
If the entry to the given area of the user corresponding to the first identification information read by the pre-Symbol information reading means is authenticated by the authentication step, and the second identification information in said storage means And an information writing step of writing the predetermined information stored in association with the portable storage medium from which the first specific information has been read out . The storage means uses, as the second specific information, entry / exit information indicating whether the portable storage medium is in an entry state where the portable storage medium is entering the predetermined area or an exit state where the portable storage medium is exiting the predetermined area. association with the memory,
Before SL authentication step, in the case where the first identification information read by the information reading means coincides with the second specific information stored in the storage means, the entering-leaving information the admission condition If it is indicated, the user exiting from the predetermined area corresponding to the second specific information is authenticated, and if the entrance / exit information indicates the exit state, the predetermined area of the user corresponding to the second specific information. Authenticate admission to
The information processing method further includes:
When the authentication step authenticates entry of the user corresponding to the second specific information into the predetermined area, the entry information is changed from information indicating the exit state to information indicating the entrance state, and the authentication is performed. And a step of changing the entry / exit information from information indicating the entrance state to information indicating the exit state when the step authenticates the user corresponding to the second specific information exiting from the predetermined area. the information processing method according to claim 5 Symbol mounting characterized. The information reading step reads confidential information indicating whether the predetermined data should be confidential from the portable storage medium,
The erasing step is a case where the user exiting from the predetermined area corresponding to the first specific information read by the information reading step is authenticated by the authentication step , and the confidential information is the predetermined information. claim 5 or 6 Symbol mounting information processing method is characterized in that to indicate that it should information confidential, to erase the previous SL predetermined information from the portability storage medium. The portability storage medium is a communication storage medium in a non-contact, reads the information from the portability storage medium in a non-contact state, writing the information to the portability storage medium in a non-contact state The information processing method according to any one of claims 5 to 7.

Images