JP4565827B2 - Information processing apparatus for reading ID tag, program for reading ID tag, and program for writing to ID tag - Google Patents

Description

  The present invention relates to reading and writing to ID tags or cards, such as barcodes, two-dimensional codes and contactless IC tags or cards, and more particularly to RF ID tag reading and writing devices.

  In the field of physical distribution, barcodes for ID are widespread. On the other hand, a two-dimensional code for ID, which has been expanded to two dimensions to increase the amount of data, is also appearing. However, these codes are read using infrared rays, and if placed in a place where light does not pass, the ID information cannot be read and the code cannot be written. On the other hand, tags using radio waves (RF signals) (generally called electronic tags, RF ID tags, IC tags, etc.) have attracted attention recently. When this tag is used, convenience and efficiency in the field of logistics and transportation are greatly improved, and there is a possibility that a new business can be developed.

  The inventors expect that in the future, it will be possible to travel by hand using the tag technology using this radio wave. That is, if the user deposits the package at a convenience store or a courier, the package will be delivered to a local hotel simply by checking the package before boarding the aircraft. However, in reality, tag information is managed within each vendor, so such a system has not yet been constructed.

Japanese Patent Laid-Open No. 2001-307055 published on November 2, 2001 by Mr. Tamai et al. Describes a non-contact IC tag. The memory unit of the non-contact IC tag has the same number of stage storage areas as the number of stages. Each stage storage area is identified by a secret stage identifier. The control unit secretly receives the access identifier from the access device via the antenna unit, the switching unit, the impedance switching unit, the demodulation unit, and the instruction decoding unit, and the secretly received access identifier is included in the plurality of stage storage areas. It is determined whether or not one stage storage area is correctly identified, and when it is determined that the stage storage area is correctly identified, the access information is received from the access device, and the input / output unit performs a stage based on the received access information. Access the storage area.
Japanese Patent Laid-Open No. 2001-307055

Japanese Laid-Open Patent Publication No. 2002-14862 published on January 18, 2002 by Yamazaki describes an information access control device and an information access control method. The information access control device analyzes the access policy received from the owner of the personal information by the rule analysis unit, analyzes the content of the attribute certificate transmitted from the external accessor by the attribute information analysis unit, and makes a logical decision. The system assigns the access authority for this external access person as a role defined in the appropriate part of the role, and uses the data by controlling access by the access management interface part.
JP 2002-14862 A

  It is desirable for the inventors to enable contactless IC tags that can be used by multiple vendors to ensure the safety of luggage, identity verification, and delivery certainty during the movement of goods and at collection and delivery locations. I thought it would be. This will require writing a lot of personal information on the tag. However, writing a lot of personal information on a tag has a problem from the viewpoint of ensuring personal safety and protecting privacy.

  The inventors have made it possible to write all information necessary for safe and reliable logistics to the non-contact IC tag only within the permitted range of each supplier, and the information written on the tag within the permitted range. I was able to ensure the preservation of information and the protection of privacy if I was able to read only.

  An object of the present invention is to realize a reading device that can read information stored in an ID tag or a card only within a permitted range.

  Another object of the present invention is to realize a writing device capable of writing or rewriting information on an ID tag or card only within a permitted range.

According to a feature of the present invention, an information processing apparatus for reading information from the encrypted different ID information that stores tag depends on a plurality of attribute information, the attribute information of the information processing apparatus, its ID tag Storage means for storing access policy information of the information processing apparatus for access; confirmation means for confirming that the attribute information and the access policy information of the information processing apparatus are not tampered; The control means for determining the program and the decryption key to be applied from the access policy information that has been confirmed not to be falsified according to the attribute information of the information processing device, and the format of the ID tag standard is detected. , accession to read based on the encrypted information stored in the ID tag by using the program in the format A scan means, comprises a, and encryption processing means for generating information that is not encrypted by decrypting the encrypted information using the decryption key. Further, the access means can read only the information that is dependent on the attribute information included in the access policy information among the different information stored in the ID tag by using the program. it can.

  The present invention also relates to a program for realizing the information processing apparatus described above.

  According to the present invention, the information stored in the ID tag or the card can be read by the reading device only in the permitted range, and the writing device can read the information only in the permitted range for the ID tag or the card. Information can be written or rewritten.

  Embodiments of the present invention will be described with reference to the drawings. In the drawings, similar components are given the same reference numerals.

  FIG. 1 illustrates a merchant system 10 for handling merchant-specific packages, such as distributors, distributors and travel agents, connected to one another via an external network 50 such as the Internet, according to an embodiment of the present invention. , 20,..., A CA (certificate issuing) station server machine (hereinafter referred to as a CA server) 70 that issues attribute certificates and access policy certificates of the vendor systems 10 to 30, and each vendor system Attribute and access policy management server machine (hereinafter referred to as a remote management server) 80 that authenticates read and write clients and manages read and write client attribute information and access policies, and ID global information A network configuration including a management server 90 is shown.

  The merchant system A10 includes a gateway 12 connected to the external network 50 connected to each other via the internal network 14, an ID information management server 16 that manages the ID (identification information) of the merchant system A10 and related information, RF ID tag reading and writing client machines or terminals (hereinafter also referred to as read / write clients) 100 to read and write to the RF ID tags 110 to 112 attached to the package as ID tags 102. Information related to the ID of the merchant system A is distributed and managed in the RF ID tags 110 to 112, the ID information management server 16 in each merchant system A, the other CA server 70, and the remote management server 80. Similarly, the merchant system B20 includes a gateway 22 connected to an external network 50, an ID information management server 26, and read / write clients 200 to 202 connected to each other via an internal network 24. . The same applies to the dealer system Z30. Here, the ID tag can be attached to an instrument of any shape and form, and the term ID tag refers to a one-dimensional and two-dimensional code used for ID, such as a scan-readable barcode. It should be interpreted as including a tag or card, a contactless IC tag and a contactless IC card.

  The client accesses the ID tag according to an access policy that is a policy for controlling access to tag information in the ID tag described in the access policy certificate.

  FIG. 2 shows an internal configuration of the read / write client 100 for the RF ID tag. The read / write client 100 includes a network communication unit 132, a control unit 134 that controls various processes such as client authentication, attribute and access policy storage, an RFID tag reader / writer (R / W) 136, and the like. A tag authentication processing unit 138, a tag information memory 140 for storing tag information, a tag information input unit 142 such as an optical scanner or a keyboard, a tag information display unit 144, a tag information encryption processing unit 152, and tag information Decryption (decryption) processing unit 154, encryption and decryption key generation unit 156, client specific information storage and encryption processing unit 158 for storing client specific information and performing public key encryption processing, and storing attribute information regarding specific attributes Attribute information memory 162 and access policy information memory for storing information related to the access policy 164. The components 134, 138, 152, 154, 156, and 158 of FIG. 2 may be implemented by a general-purpose or dedicated processor 170 that is implemented in the form of a program that performs the respective functions and operates according to the program.

  In the read / write client 100, TRM (Tamper Resistance Module) specific information is incorporated or stored in advance. The TRM specific information may be stored in an IC card that can be attached to and detached from the read / write client 100, or may be incorporated in the read / write client 100 in advance as a module. The TRM specific information includes, for example, the public key and secret key of the read / write client 100. Further, it is desirable that the process for confirming that the attribute information and the access policy information have not been falsified be processed in the TRM.

  The read / write client 100 first registers itself with the CA server 70. Thereafter, the remote management server 80 receives from the CA server 70 the attribute certificate and access policy certificate of the read / write client 100 from the CA server 70. Next, after connecting to the remote management server 80 and receiving authentication, the read / write client 100 receives the attribute certificate and access policy certificate encrypted with the public key, and uses the private key. Decryption (decryption) is performed, and the attribute information included in the attribute certificate and the access policy information included in the access policy certificate are stored in the memories 162 and 164, respectively. In FIG. 2, the components of the TRM or the components under the management of the TRM are shown surrounded by broken lines.

  The read / write client 100 forms a TCG (Trusted Computing Group) based secure platform. In the TCG, information tampering is safely checked in a TPM (Trusted Platform Module) protected by hardware.

  FIG. 3 shows the internal configuration of the RF ID tag 110. The RF ID tag 110 includes an antenna ANT, an RF modulation / demodulation circuit 114, a power supply circuit 116, a logic circuit 118, and a memory 120. The RF ID tag 110 stores the electric charge generated by the induced current received from the tag reader / writer 136 in the RF modulation / demodulation circuit 114 in the capacitor of the power supply 116, operates by supplying power from the power supply 116, and sets the RF modulation / demodulation circuit 114. The logic circuit 118 reads and writes information to and from the memory 120 in accordance with instructions from the tag reader / writer 136. Do. Here, an RF ID tag having no power source has been described, but an RF ID tag having a power source such as a battery may be used.

  4A and 4B show specific formats of attribute information and access policy information. The attribute is converted into a unique numerical sequence (Digest D (Attribute (A))) by a hash function or the like. The CA server 70 combines the digest value of the attribute and the original attribute, encrypts it with the public key of the read / write client 100, that is, the system A10, and generates it as attribute information. Whether the attribute information is decrypted by the client-specific information storage and encryption processing unit 158 in the read / write client 100 with the private key of the read / write client 100, that is, the system A10, and whether the internal attribute has been tampered with. You can check whether.

  The same applies to the access policy. The access policy is converted into a unique numerical sequence (Digest D (Access Policy (A))) by a hash function or the like. The CA server 70 combines the digest value and the original access policy, encrypts it with the public key of the read / write client 100, that is, the system A10, and generates it as access policy information. The access policy information is decrypted by the reader / writer specific information storage and encryption processing unit 158 in the read / write client 100 with the private key of the read / write client 100, that is, the system A10, and the internal access policy is stored. Can be checked to see if it has been tampered with.

The attribute variable can be uniquely defined for each trader as follows, for example.
Attributes of supplier A: Att = "A"
Trader B attribute: Att = “B”
...
Trader Z attribute: Att = “Z”

Even within the same trader, for example, it is possible to have different levels by uniquely defining each business of the same trader as follows.
Level 0 attribute of trader A: Att = [“A”, 0]
Level 1 attribute of vendor A: Att = [“A”, 1]
Level 2 attribute of trader A: Att = [“A”, 2]
Level 0 attribute of vendor B: Att = [“B”, 0]
Level 1 attribute of vendor B: Att = [“B”, 1]
Level 2 attribute of vendor B: Att = [“B”, 2]
...
Level 0 attribute of supplier Z: Att = [“Z”, 0]
Level 1 attributes of vendor Z: Att = [“Z”, 1]
Level 2 attributes of vendor Z: Att = [“Z”, 2]

  FIG. 5A shows a configuration of tag information stored in the memory 120 in the RF ID tag 110 and information stored in the ID information management server 16. FIG. 5B shows the contents of the access policy stored in the access policy information memory 164 in the read / write client 100. Detailed information associated with the tag information 120 and part of the access policy 164, eg, tag information in the RFID 120's memory 120, may be sent to the ID information management server 16 and / or remote management server 80 and / or read / write. It may be stored in the tag information memory 140 and the access policy information memory 164 of the client 100, and a part thereof may be acquired by the read / write client 100 (for example, the control unit 134) when necessary.

In FIG. 5A, the RF ID tag 110 is used in the merchant systems 10 to 30 and the global ID 402 of the tag commonly used for all the merchant systems 10 to 30 and the basic information 404 encrypted or not encrypted. each encryption key K _a, includes K _b ~K _z in the specific encrypted skill systems ID406～410, and the tag information 412 to 420 which has been encrypted with the encryption key K1~Kn respectively.

  5A and 5B, the ID information management server 16 and the read / write clients 100 to 102 of the merchant system A10 store the access policy in the access policy information memory 164 of the merchant system A10. The access policy may be unique to each of the merchant systems A-10-Z30, common to multiple or all merchant systems A-Z, or may include the same part. Good. The access policy includes, for example, a rule for executing specific access α-1, β-2, and γ-3 permitted according to given attributes A and C, and the specific access α-1, β-. A role that invokes the associated program to execute 2 and γ-3, a plurality of encryption and decryption keys Ka, K1 and K2 that may be used by the corresponding merchant system A10, and a type in the RF ID tag 110 Authentication is performed between tag information of α-1, β-2, and γ-3 (Auth ()), the tag information is read and decrypted, and new information is encrypted and written to the tag 110 Programs (ReadTag (), WriteTag ()).

  Referring to FIG. 5B, when the rule allows the access to the tags α-1 and β-2 associated with the attribute A of the merchant system A in the rule, the read / write client 100 and the access α-1 and β-2 can be executed. The attribute information related to the attribute A has an expiration date. When the time limit has passed, the remote management server 80 is requested to reissue the attribute information related to the attribute A and receives the information. Further, the read / write client 100 can execute the access γ-3 when access to the tag γ-3 associated with the attribute C of another vendor system C is permitted. The attribute C of another merchant system C is given as a temporary attribute with a short expiration date by the remote management server 80 in response to the request of the read / write client 100. Thereby, the read / write client 100 is associated with the attribute C of another merchant system C when a temporary need arises, for example, when some accident relating to the package with the tag 110 attached occurs. The type γ-3 tag information is accessed, and the package can be appropriately processed based on the tag information.

  When the approach of the RF ID tag 110 is detected by the tag reader / writer 136, the read / write client 100 starts execution of access α-1, and tag information of type α-1 in the RF ID tag 110 is obtained. Access authentication (Auth (Tag α-1)), type α-1 tag information read (Read α-1), and type α-1 tag information write (Write α-1). Execute. At that time, the read / write client 100 uses the program in the access policy corresponding to the attribute information of the read / write client 100 to store data at a specific address corresponding to the attribute information in the RFID tag 110. Read and write data to the address associated with the attribute information.

  In order to read the tag information of type α-1 from the RF ID tag 110, the read / write client 100 first has a contractor encrypted with the encryption key Ka stored in the memory 120 of the RF ID tag 110. The system A-ID 406 (data located at the corresponding address) which is the ID (identification information) of the system 10 is read, the encryption and decryption key Ka is extracted, and the system A-ID 406 is decrypted using the decryption key Ka (ReadTag). (Α-1, address (system A-ID), GetKey (Ka))). Next, the read / write client 100 reads the tag information T1 412 (data located at the address) encrypted with the encryption key K1 stored in the memory 120, takes out the encryption and decryption key K1, and decrypts it. The tag information T1 412 is decrypted using the key K1 (ReadTag (α-1, address (information T1), GetKey (K1))). Next, the read / write client 100 reads the tag information T2 414 (data located at the address) encrypted with the encryption key K2 stored in the memory 120, takes out the encryption and decryption key K2, and decrypts it. The tag information T2 414 is decrypted using the key K2 (ReadTag (α-1, address (information T2), GetKey (K2))). Next, the read / write client 100 accesses the ID information management server 16 and is located at the address of the unencrypted information SA-ID 434 related to the type α-1 stored in the ID information management server 16. Data to be read is read using the program ReadTag (ReadTag (α-1, address (information SA-ID), 1)).

  In order to write tag information of type α-1 to the RFID tag 110, the read / write client 100 first takes out the encryption and decryption key K1 and encrypts the information using the encryption key K1, and stores it in the memory 120. The encrypted information is written to the corresponding address using the program WriteTag (WriteTag (α-1, address (information T1), GetKey (K1))). Next, the read / write client 100 takes out the encryption and decryption key K2, encrypts the information using the key K2, and writes the encrypted information to the address to be written in the memory 120 (WriteTag (α-1, address). (Information T2), GetKey (K2))). Next, the read / write client 100 writes the information SA-ID related to the type α-1 at the address to be written in the ID information management server 16 (WriteTag (α-1, address (information SA-ID), 1 )).

  FIG. 6 shows a hierarchy for interconnection between the read / write client 100 and the remote management server 80. The read / write client 100 includes a TPM, an RFID communication unit, and a network communication unit as physical layers, a device driver and an OS as upper layers, and TMP control as an upper layer of the OS. CSP (Cryptographic Service Provider) that provides a menu of cryptographic services, MSCAPI and PKCS # 11, and security-related software. JAVA (registered trademark) and access as an upper layer of the OS Has a communication software library that includes policy, attribute information processing, and network RFID conversion. The TPM performs generation of an encryption key and storage of a secret key, calculation and storage of a hash value, digital signature, and the like.

  The remote management server 80 includes a TPM and a network communication unit as physical layers, a device driver and an OS as upper layers, and a TSS (TCG Software Stack) that controls TMP as upper layers of the OS. ), A CSP (Crytographic Service Provider) that provides a menu of cryptographic services, MSCAPI and PKCS # 11, and security-related software. As an upper layer of the OS, communication software, access policy management, attribute information It has server functions including management and database management. The read / write client 100, the CA server 70, and the remote management server 80 communicate and process along a path indicated by a broken line arrow.

  FIG. 7 shows a pre-processing procedure for reading and writing of the RFID tag 110 executed by the read / write client 110.

  Referring to FIG. 7, in step 602, the control unit 134 of the client 100 performs the TRM specific of the read / write client 100 stored in the client specific information storage and encryption processing unit 158 via the path P <b> 14 of FIG. 2. The information is extracted and the TRM specific information is registered in the CA server 70. Next, the CA server 70 passes the TRM specific information, attribute certificate, and access policy certificate of the read / write client 100 to the remote management server 80. In step 603, the control unit 134 requests the remote management server 80 to distribute the attribute information of the read / write client 100, that is, the dealer system A10, via the paths P01 and P02. In step 604, the remote management server 80 authenticates the read / write client 100 and distributes the attribute information, and the control unit 134 reads the read / write client stored in the remote management server 80 via the path P03. Attribute information related to 100 regular attributes A is received and stored in the attribute information memory 162. The TRM specific information includes the public key and secret key of the client 100. As an alternative configuration, the ID management server 16 registers with the CA server 70 in the same procedure, requests the remote management server 80 to distribute attribute information, receives the attribute information, and stores it in the memory in the ID information management server 16. It may be stored. In this case, the read / write client 100 requests the ID information management server 16 to distribute the attribute information, receives the attribute information, and stores it in the attribute information memory 162 in the same procedure.

  In step 606, the control unit 134 requests the remote management server 80 to distribute a unique or shared access policy to the read / write client 100 via the paths P01 and P02. In step 608, the remote management server 80 authenticates the read / write client 100 and distributes the access policy for the merchant system A 10 encrypted with the public key of the merchant system 10. The control unit 134 stores the access policy in the access policy information memory 164 via the path P04. The access policy includes Ka, K1, K2, Kc, and K4 of encryption keys and decryption keys Ka to Kz and K1 to Kn that can be used for the RF IC tag 110 in a form encrypted with a public key. It is. As an alternative configuration, in a similar procedure, the ID management server 16 requests the remote management server 80 to distribute access policy information, receives the access policy information, and stores it in the memory in the ID information management server 16. May be. In this case, in the same procedure, the read / write client 100 requests the ID information management server 16 to distribute the access policy information, receives the access policy information, and stores it in the access policy information memory 164. .

  In step 610, the control unit 134 retrieves the attribute A (attribute information memory 162) and the access policy of the read / write client 100 from the memories 162 and 164, and encrypts and decrypts a key generation unit via the paths P07 and P08. 156. Next, the encryption and decryption key generation unit 156 decrypts the encryption key and the decryption keys Ka, K1, and K2 encrypted with the public key depending on the attribute of the supplier system 10 with the secret key according to the instruction of the control unit 134. The decrypted encryption key and decryption keys Ka, K1, and K2 are generated, and the decrypted encryption key and decryption key are transmitted to the tag information encryption processing unit 152 and the tag information decryption processing unit 154 via the paths P09 and P10. Give each one. The tag information encryption processing unit 152 and the tag information decryption processing unit 154 hold the decrypted encryption key and decryption key.

  Thereafter, the control unit 134 of the read / write client 100 executes the processing of FIG. 7 as necessary to obtain other necessary attribute information and other access policy information (including encryption and decryption keys). May be.

  FIGS. 8 and 9 show processing procedures for reading and writing to the RF ID tag 110 performed by the read / write client 100.

  In step 620, the control unit 134 determines whether the attribute information and the access policy information of the read / write client 100 stored in the memories 162 and 164 have been tampered with, and confirms that they have not been tampered with. To do. If they have been tampered with, it is necessary to access the remote management server 80 and acquire the correct attribute information and access policy information again.

  If it is determined that the attribute information and the access policy information have not been tampered with, in step 622, the tag reader / writer 136 sequentially scans or polls the RF ID tag 110 using various modulation methods, and there is a response. (I.e., performing a challenge and response). When the tag reader / writer 136 receives the response, the tag authentication processing unit 138 determines the type of the RFID tag 110 from the used modulation method via the paths P05 and P06 in step 624.

  Regarding the determined tag type, in steps 626 to 629, the tag reader / writer 136 identifies the global ID of the RFID tag 110, and an access method (for example, access α−1) corresponding to the given attribute A. , Access β-2) to read the tag information in the RF ID tag 110, so that the tag authentication processing unit 138 can use any of the different standards α-1 to γ-3 formats of different manufacturers. Judge whether it is written in the format. However, the tag authentication processing unit 138 needs to determine only the corresponding types (α-1, β-2) of the tag types in steps 626 to 629 (steps 626, 628).

  If the type of tag information stored in the RF ID tag 110 can be determined in any one of steps 626 to 629, the tag authentication processing unit 138 further determines if necessary in steps 636 to 639. One authentication of types α-1 to γ-3 written in the RF ID tag 110 is performed (for example, Auth (Tag α-1)). However, this authentication is not always necessary. In steps 646 to 649, the tag reader / writer 136 accesses the corresponding tag information (for example, ReadTag (α-1, address (information T1), GetKey (K1))). If necessary, in steps 656 to 659, the control unit 134 accesses the database of the tag information memory 140, the ID information management server 16 and / or the remote management server 80, and acquires information related to the supplier system A10. (For example, ReadTag (α-1, address (information SA-ID), 1)). However, this information acquisition is not always necessary.

  Referring to FIG. 8, in step 662, the control unit 134 decrypts the tag information T1 and T2 using the decryption keys K1 and K2 to the tag information decryption processing unit 154 via paths P09, P15, and P11. Generate display information. Thereafter, the tag information display unit 144 combines and displays the display information and the related information acquired in steps 656 to 659. In step 664, the control unit 134 determines whether there is tag information to be written to the RF ID tag 110. If not, the process ends. If there is tag information to be written, in step 666, the control unit 134 encrypts necessary information to the reader / writer 136 using the encryption keys K1 and / or K2 via the paths P12, P13, and P18. To write to a predetermined address of the RF ID tag 110. Thereafter, the process ends.

  FIG. 10 shows a case where the read / write client 100 of the vendor system A10 needs to read another type γ-3 tag information corresponding to the attribute C different from the attribute A from the RF ID tag 110. Shows the processing. In step 672, the control unit 134 requests the remote management server 80 to distribute information related to the attribute C necessary for reading the tag information corresponding to the attribute C different from the already stored attribute A. In step 674, the remote management server 80 sends the attribute information regarding the temporary attribute C encrypted using the public key of the read / write client 100 to the read / write client 100. In the temporary attribute information, a short expiration date or a small number of uses (for example, once, one hour) is set.

  In step 676, the control unit 134 decrypts the received attribute information related to the temporary attribute C using its own secret key and stores it in the attribute information memory 162. In step 678, the encryption and decryption key generation unit 158 decrypts the encryption key and the decryption keys Kc and K4 encrypted with the public key according to the temporary attribute C with the private key, and decrypts the decrypted encryption key and decryption key. Keys Kc and K4 are generated, and the decrypted encryption key and decryption keys Kc and K4 are passed to the tag information encryption processing unit 152 and the tag information decryption processing unit 154 via paths P09 and P10, respectively. The expiration date of the key is set, and after the expiration date, the tag information encryption processing unit 152 and the tag information decryption processing unit 154 delete the key, and the key cannot be generated from the temporary attribute C. Thereafter, steps 622-666 are performed in a manner similar to that described with respect to FIGS. 8 and 9, thereby allowing read / write client 100 to access tag information 418 of FIG. 5A.

FIG. 11 shows a situation in which an RFID tag attached to a package through a plurality of different merchant systems A to D moves in one direction through the plurality of merchant systems. For example, a case where a travel bag is deposited at a convenience store and received at an airport will be described. The operator of the first package uses the reader / writer W / R ₁ to provide information on the travel tag, shipper and recipient, such as name, passport information, airline, flight information, receiving location, etc. on the RF ID tag. Attach the tag to the travel bag you wrote and left. The travel bag travels to an airport check-in counter by, for example, a convenience store, a travel agency, a courier and an airline's respective delivery systems A-D. Meanwhile, in each vendor's systems A to D, each operator accesses the minimum necessary information in the RF ID tag by the tag reader / writers W / R _{1 to} W / R ₅ and follows a predetermined route. Move the package to the next vendor.

  For example, in a convenience store, the date and time when a baggage was deposited, name, contact information, etc. are recorded as tag information. In the travel agency, the owner's name, passport number, contents value, flight information, etc. are recorded. In the home delivery system, the owner's name, delivery address, and type of contents are recorded. There is also information carried over from previous traders. In the airport company system, a means for confirming the personal belongings at the time of check-in is required. If information such as a passport number, a license number, or fingerprint data is embedded in the RF ID tag in advance, it is possible to confirm the personal belongings by referring to the information. For example, information such as a passport number can be accessed in an airport system, but such information cannot be accessed in a home delivery system, and information falsification is prevented.

FIG. 12 shows a situation in which the RFID tag 110 attached to the package moves in both directions through different merchant systems A to C. FIG. 12 shows an example of mail order. Information is written to the RF ID tag by the manufacturer using the reader / writer W / R ₁ , the RF ID tag is attached to the product and delivered to the seller, and further delivered to the consumer by the seller. If the consumer does not like the product, the reader / writer W / R ₄ can write the reason on the RFID tag and return it. The merchant can collect information on the reason for the return and use it to develop product development and sales strategies. The seller's system B can access the product information, and the home delivery system C can access only the destination information. In the home delivery system C, product information and consumer complaint information cannot be accessed, and information falsification is prevented.

  By using the configuration of the tag information of the RF ID tag 110 shown in FIG. 5A as described above, the information of the RF ID tag 110 can be shared by a plurality of vendors or managed independently of each other. Access to tag information is defined by the access policy of FIG. 5B, and access to tag information can be restricted according to attributes AZ different for each of the vendor systems AZ. Moreover, it can respond to a plurality of different types of RF ID tags. Further, by restricting access to the RFID tag 110, tag information, access policies, and attributes can be prevented from being falsified.

  The technology related to the read / write client 100 described in the embodiment of the present invention can be applied to one-dimensional and two-dimensional codes for IDs such as barcodes of various standards other than the RF ID tag. is there.

  The embodiments described above are merely given as typical examples, and it is obvious to those skilled in the art to combine the components of each embodiment, and variations and variations thereof will be apparent to those skilled in the art. It will be apparent that various modifications of the above-described embodiments can be made without departing from the scope of the invention as set forth in the scope.

Regarding the embodiment including the above examples, the following additional notes are further disclosed.
(Supplementary note 1) An information processing apparatus for reading an ID tag,
The ID tag is capable of storing encrypted different information depending on a plurality of attribute information,
Storage means for storing attribute information of the information processing apparatus and access policy information of the information processing apparatus for accessing the ID tag;
Confirmation means for confirming that the attribute information and the access policy information of the information processing apparatus have not been tampered with;
Control means for determining a program and a decryption key to be applied from among the access policy information confirmed not to be falsified according to the attribute information of the information processing apparatus;
Access means for detecting the type of the ID tag and reading the encrypted information stored in the ID tag using the program;
An encryption processing means for decrypting the encrypted information using the decryption key to generate unencrypted information;
With
The access means may further read, using the program, only the different information stored in the ID tag that depends on the attribute information included in the access policy information. An information processing apparatus characterized by being capable of being performed.
(Additional remark 2) The said control means determines the encryption key which should be applied from the said access policy information according to the said attribute information,
The encryption processing means encrypts unencrypted information using the program and the encryption key,
The information processing apparatus according to appendix 1, wherein the access unit further writes the encrypted information into the ID tag using the program.
(Additional remark 3) The said encryption processing means can decrypt only the encrypted information corresponding to the identification information relevant to the said information processing apparatus in the information stored in the said ID tag using the said decryption key. The information processing apparatus according to attachment 1, wherein the information processing apparatus is characterized.
(Additional remark 4) The information processing apparatus of Additional remark 1 characterized by including the means to receive the said attribute information from another apparatus.
(Additional remark 5) The said access means cannot read the other encrypted information in the said ID tag corresponding to attribute information different from the said attribute information, even if it uses the said program. The information processing apparatus described in 1.
(Additional remark 6) Another information required in order to display the said unencrypted information is stored in another apparatus, The said control means acquires the said other information from the said another apparatus, The said encryption The information processing apparatus according to appendix 1, wherein processing means generates display information by combining the unencrypted information and the other information.
(Additional remark 7) The said control means acquires the attribute information which can be used temporarily different from the attribute information of the said information processing apparatus, stores it in the said memory | storage means, The said another temporarily usable attribute information To determine another program to be applied and another decryption key from among the access policy information,
The access means reads another encrypted information stored in the ID tag using the another program,
2. The information processing apparatus according to appendix 1, wherein the encryption processing unit decrypts the other encrypted information using the other decryption key.
(Supplementary Note 8) A program for reading an ID tag for an information processing apparatus,
The ID tag is capable of storing encrypted different information depending on a plurality of attribute information,
Confirming that the attribute information of the information processing device and the access policy information of the information processing device for accessing the ID tag have not been tampered with;
Determining a program and a decryption key to be applied from among the access policy information according to the attribute information of the information processing apparatus;
Detecting only the information depending on the attribute information of the information processing device among the different information stored in the ID tag by detecting the type of the ID tag, and
Decrypting the read information using the decryption key to generate unencrypted information;
A program that can run to run.
(Additional remark 9) It is a program for writing in ID tag for information processing apparatuses,
The ID tag is capable of storing encrypted different information depending on a plurality of attribute information,
Confirming that the attribute information of the information processing device and the access policy information of the information processing device for accessing the ID tag have not been tampered with;
Determining a program and an encryption key to be applied from among the access policy information according to the attribute information of the information processing apparatus;
Detecting only the information depending on the attribute information of the information processing device among the different information stored in the ID tag by detecting the type of the ID tag, and
Encrypting unencrypted information using the program and the encryption key;
Writing the encrypted information into the ID tag using the program;
A program that can run to run.

FIG. 1 shows a vendor-specific system, a certificate authority server that issues attribute certificates and access policy certificates, and attribute and access policies connected to each other via an external network according to an embodiment of the present invention. 2 shows a network configuration including a management server. FIG. 2 shows the internal configuration of the read and write client for the RF ID tag. FIG. 3 shows the internal configuration of the RF ID tag. 4A and 4B show specific formats of attribute information and access policy information. FIG. 5A shows a configuration of tag information stored in the memory in the RF ID tag and information stored in the ID information management server. FIG. 5B shows the contents of the access policy stored in memory within the read / write client. FIG. 6 shows the hierarchy for interconnection of the read / write client and the remote management server. FIG. 7 shows a pre-processing procedure for reading and writing of the RF ID performed by the read / write client. FIG. 8 shows a part of the processing procedure for reading and writing the RF ID tag performed by the read / write client. FIG. 9 shows the remaining part of the processing procedure for reading and writing the RF ID tag performed by the read / write client. FIG. 10 shows a process in a case where the read / write client of the merchant system A needs to read another type of tag information corresponding to the attribute C different from the attribute A from the RFID tag. FIG. 11 shows a situation in which an RFID tag attached to a package through a plurality of different merchant systems moves in one direction through the plurality of merchant systems. FIG. 12 shows a situation where the RFID tag attached to the package moves in both directions through different merchant systems.

Explanation of symbols

100 Read / Write Client 110 RF ID Tag 136 Tag Reader / Writer 138 Tag Authentication Processing Unit 156 Encryption / Decryption Key Generation Unit 152 Tag Information Encryption Unit 154 Tag Information Decryption Unit 158 Client Specific Information Storage and Encryption Processing Unit 162 Attribute Information Memory 164 Access policy information memory

Claims (5)

An information processing apparatus that reads information from an ID tag that stores different encrypted information that depends on a plurality of attribute information ,
And attribute information before Symbol information processing apparatus, storage means for storing an access policy information of the information processing apparatus for accessing the ID tag,
Confirmation means for confirming that the attribute information and the access policy information of the information processing apparatus have not been tampered with;
Control means for determining a program and a decryption key to be applied from among the access policy information confirmed not to be falsified according to the attribute information of the information processing apparatus;
An access means for detecting the format of the standard of the ID tag and reading the encrypted information stored in the ID tag using the program based on the format ;
An encryption processing means for decrypting the encrypted information using the decryption key to generate unencrypted information;
With
The access means may further read, using the program, only the different information stored in the ID tag that depends on the attribute information included in the access policy information. An information processing apparatus characterized by being capable of being performed. The control means determines an encryption key to be applied from the access policy information according to the attribute information,
The encryption processing means encrypts unencrypted information using the program and the encryption key,
The information processing apparatus according to claim 1, wherein the access unit further writes the encrypted information into the ID tag using the program. The control unit obtains temporarily usable attribute information different from the attribute information of the information processing apparatus, stores the attribute information in the storage unit, and accesses the access according to the other temporarily usable attribute information.・ Determine another program to be applied and another decryption key from the policy information,
The access means reads another encrypted information stored in the ID tag using the another program,
The information processing apparatus according to claim 1, wherein the encryption processing unit is configured to decrypt the other encrypted information using the other decryption key. A program for reading information from an ID tag capable of storing different encrypted information depending on a plurality of attribute information for an information processing device ,
Ascertaining that the attribute information before Symbol information processing apparatus, and the access policy information of the information processing apparatus for accessing the ID tag has not been tampered with,
Determining a program and a decryption key to be applied from among the access policy information that has been confirmed not to be falsified according to the attribute information of the information processing apparatus;
By detecting the format of standard of the ID tag, in the phase different information stored in the ID tag, only information depending on the attribute information of the information processing apparatus, using the determined program Reading based on the format ;
Decrypting the read information using the decryption key to generate unencrypted information;
A program that can run to run. A program for writing information to an ID tag for storing different encrypted information depending on a plurality of attribute information for an information processing device ,
Ascertaining that the attribute information before Symbol information processing apparatus, and the access policy information of the information processing apparatus for accessing the ID tag has not been tampered with,
Determining a program and an encryption key to be applied from among the access policy information confirmed not to be falsified according to the attribute information of the information processing apparatus;
By detecting the format of standard of the ID tag, in the phase different information stored in the ID tag, only information depending on the attribute information of the information processing apparatus, using the determined program Reading based on the format ;
Encrypting the information which is not encrypted using the determined program and the encryption key,
Operable programmed to execute the steps of: writing the encrypted information to the ID tag using the determined program.

Images