KR20070021877A - Electric tag with privacy level information, apparatus for privacy protection using the electric tag and method thereof - Google Patents

Abstract

The present invention discloses an electronic tag containing privacy level information and a privacy protection device using the electronic tag and a method thereof.

According to the present invention, an information storage unit including recognition information of electronic tags and privacy information related to each electronic tag, and storing information on a user requesting information on the electronic tag recognition information and the electronic tag. Information request / response processing unit, privacy policy management unit for determining whether the privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored in the information storage unit and the privacy information for the electronic tag is stored Information on the information about the owner and the information on the owner, including an information disclosure decision processing unit that determines and provides to what level the privacy information for the electronic tag is compared with a predetermined standard for the disclosure of the privacy information. I can prevent an illegal leak, and an individual is reliable By allowing tags to be attached to articles, it is possible to promote the introduction of electronic tags, to eliminate concerns about internationally invading privacy, and to create a safe ubiquitous world.

Description

Electronic tag with privacy level information, apparatus for privacy protection using the electric tag and method

1 is a block diagram of a conventional RFID service network.

2 is an example of a memory structure of an electronic tag including privacy level information according to the present invention.

3 shows an example of the configuration of a privacy protection device using an electronic tag according to the present invention.

4 illustrates an example of a flow of a privacy protection method using an electronic tag according to the present invention.

5 illustrates an example of a configuration of an RFID service network in which a privacy protection device according to the present invention is used.

The present invention relates to an electronic tag, and relates to an electronic tag including privacy level information capable of protecting privacy, a privacy protection apparatus using the electronic tag, and a method thereof.

In particular, the present invention solves the personal privacy problem caused by illegal information leakage related to the tag when the ownership transfer to the individual through the manufacturing, logistics, distribution by attaching the RFID tag to the goods, and provides a safe RFID service to the user This is the skill you need.

RFID (Radio Frequency Identification) attaches RFID to a required object or place, and detects all the information around the base based on the recognition information of the object and manages the information by connecting it to the network in real time. First of all, it is expected to develop in the form of Ubiquitous Sensor Network (USN), which is developed around RFID that provides recognition information, and a sensing function is added and a network between them is established.

That is, when RFID is introduced into a distribution and logistics system, a manufacturer can automatically instruct an operator, such as which vehicle to load, using information stored in an RFID tag attached to a product when the product is shipped. When a product with an RFID tag arrives through the vehicle, the management system recognizes the product with the RFID tag and automatically checks and delivers the quantity and items. Through this process, when a customer makes a purchase in a corresponding store, the product can be ordered by automatically identifying the quantity of the stock as much as the purchase amount. In addition, the goods transferred to the user's possession after the purchase by the user to find out the failure diagnosis and failure time in use, to notify the product replacement in advance, and to ensure that the user's customized service in a timely manner. In addition, it shows whether the goods are genuine or not, and the user can check the distribution stage of the goods to improve the quality of service.

However, this automated and easily accessible environment can have serious consequences for security. In the use of RFID, personal privacy issues such as location information and purchase history of a product tagged with RFID tags can be serious. For example, information that could be a personal secret can easily be leaked, such as where the product was sold, information about other items bought by the person who bought the product, and where the product is used. The ID of the RFID tag is easily identified, and the tag automatically responds to all readers without the user knowing. In automated and easily informed RFID / USN environments, security poses a serious threat.

However, due to limited resources such as the limitation of the capacity of the built-in memory for using RFID, it is difficult to use the existing information protection technique as it is. In addition, it is expected that attacks targeting a wide range and targets rather than attacks on individual individuals are possible.

The target of the attack (invasion) in the USN environment is not only the information or communication information stored in the computer of the existing environment, but also all the information of the individual such as an object or a body, and the scope of the attack is not limited to the existing personal computer. It becomes all space. As the extent of damage to the attack is easy and the attack is easy, there is an urgent need for a solution to the problem of personal privacy infringement, and currently the personal privacy guidelines are prescribed.

Another technical solution is to make it harder for the user to access the data anymore using the KILL command after purchase of a product with an RFID tag and to make it impossible to recycle. This is to escape from the intention to give the user a convenience in life.

Therefore, there are currently no technical fundamental solutions other than legal and institutional devices that can protect personal privacy in the field of using electronic tags including RFID, and such anxiety may be further expanded.

The technical problem to be achieved by the present invention, in order to solve the above problems, the privacy level information that can ensure the privacy of the individual that can prevent the unauthorized acquisition of information corresponding to the personal privacy through the electronic tag is included An electronic tag and a method for protecting privacy using the electronic tag are provided.

According to the present invention for solving the above technical problem, an electronic tag including privacy level information is an electronic tag for transmitting information stored therein through a signal of a predetermined frequency band, wherein the electronic tag is compared with another electronic tag. A tag ID area including identification information to distinguish; And a privacy level area including level information indicating a right to access privacy information related to the electronic tag stored at a position accessible through a predetermined communication network in response to the recognition information included in the tag ID area. It features.

According to another aspect of the present invention, there is provided a privacy protection apparatus using an electronic tag, comprising: an information storage unit including recognition information of electronic tags and privacy information related to each electronic tag; An information request / response processing unit that receives recognition information of the electronic tag and information on a user requesting information on the electronic tag through a predetermined communication network; A privacy policy manager to determine whether privacy information on the electronic tag corresponding to the received recognition information of the electronic tag is stored in the information storage unit; And when the privacy information for the electronic tag is stored, comparing the received user information with a predetermined criterion for the disclosure of privacy information to a certain level of the privacy information for the electronic tag protected according to the privacy level. It is characterized in that it comprises a; information determination determination unit provided to the user by determining whether to provide.

According to another aspect of the present invention, there is provided a privacy protection method using an electronic tag, including: (a) storing in advance the recognition information of the electronic tags and the privacy information related to each electronic tag; (b) receiving recognition information of an electronic tag and information on a user requesting information on the electronic tag through a predetermined communication network; (c) determining whether privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored; (d) comparing the received user information with a predetermined criterion for the disclosure of privacy information when privacy information for the electronic tag is stored; And (e) determining to what degree the privacy information for the electronic tag protected according to the privacy level is provided to the user and providing the same to the user.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a conventional RFID service network.

The RFID tag is read from an active or passive RFID tag 100 through a frequency signal network 110 of a predetermined band using the RFID tag reader 120. . In fact, the memory size of electronic tags is limited, so the amount of information about the product read is very small. In order to obtain more information about the product, the electronic tag recognition information read from the electronic tag is transmitted to the information server 140 through a program such as middleware 130.

When the reader 120 reads a tag, the middleware 130 performs filtering to remove redundant read contents since the reader 120 reads the tag several times, and changes it to a standardized form called an event.

If there is information corresponding to the received electronic tag recognition information, the information server 140 provides it to the application program 150 that needs it.

In the conventional case where privacy is not taken into account, for example, someone buys a product that he or she would not want to be exposed to, and then hides it in a bag, passing by an electronic tag reader attached to a cell phone used by others. The reader can read the electronic tag attached to the product in the bag and obtain information about the product using the environment as shown in FIG. In the end, you can see which side-effects you can easily expose to others, which of your products you didn't want to be exposed to.

2 is an example of a memory structure of an electronic tag including privacy level information according to the present invention. Such a structure is one example, and may take other forms of structure. In the example of FIG. 2, an area 200 including privacy level information according to the present invention is designated in an area that can be designated by a user. Information that can be read through the RFID reader also includes a tag ID stored in the tag ID area 210 which is a unique value of the electronic tag.

The electronic tag receives a signal of a specific frequency band from a device such as an RFID reader and transmits the information stored therein through a signal of a predetermined frequency band. At this time, a password for accessing the electronic tag may be requested, and the password information is stored in the area 230 in which the password is stored in the memory of the tag.

The privacy level information area 200 according to the present invention may use the security level area 220, and depending on the application example, all of the reference numerals 200 and 220 may be used as the privacy level information area.

In addition, the privacy level information area 200 according to the present invention may be safely stored in an area that can be protected by a password stored in the password area 230.

3 shows an example of the configuration of a privacy protection device using an electronic tag according to the present invention.

The apparatus includes an information storage unit 300 which stores recognition information of electronic tags and privacy information related to each electronic tag, and a user who requests recognition information of the electronic tag and information on the electronic tag through a predetermined communication network. An information request / response processing unit 310 for receiving information on the privacy policy management unit for determining whether privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored in the information storage unit 300 ( 320) and if privacy information for the electronic tag is stored, compare the received user information with a predetermined criterion for the disclosure of the privacy information, and determine to what level the privacy information for the electronic tag is provided to the user. It includes an information disclosure decision processing unit 330 to provide.

4 illustrates an example of a flow of a privacy protection method using an electronic tag according to the present invention.

The identification information of the electronic tags and the privacy information related to each of the electronic tags are stored in advance (step 400), and the identification information of the electronic tag and information on a user who requests information on the electronic tag through a predetermined communication network. Receive (step 410), it is determined whether the privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored (step 420), and if the privacy information for the electronic tag is stored The user information is compared with a predetermined criterion for disclosure of privacy information (step 430), and it is determined and provided to which level the privacy information for the electronic tag is provided to the user (step 440).

When a product is first produced, the information on the product will be mostly production related. Information such as component ratio, country of origin, product origin, factory, production process, person in charge of each process, owner information, date of production, and after sales information may be included. When an electronic tag is assigned in the production stage, the tag is given a tag ID as shown in FIG. 2 and a privacy level is given to the tag.

The information storage unit 300 stores information such as the tag ID and the above-mentioned information about the product. And since information such as cost needs to be kept confidential, you can specify a separate privacy level for each detail, such as specifying that it will not be made public under any circumstances. For example, information such as product code, product name, date of production, etc., may be specified by the privacy level.

When a product is shipped and moved through each distribution step, the route ID or distribution history distributed for each distribution step can be read out to find out the tag ID and stored in the information storage unit 300 with information corresponding to the tag ID. . In addition, a separate privacy level may be set for each information.

If you do not set a privacy level, you can set that level by default. In this case, the basic level may vary for each detailed information. For example, as described above, when the product is a kind of being reluctant to be disclosed to other people, the information about the product name can be set to a high level to prevent unauthorized disclosure of the product name to others.

A user who wants to know information about the product during distribution may try to know information about the product by accessing it through the information request / response processor 310. In this case, the user reads information about the privacy level of the product from the electronic tag attached to the product using a device such as an electronic tag reader attached to the cellular phone. At this time, the screen of the mobile phone may be a user interface screen.

If the privacy level of the product displayed on the screen of the cellular phone is read from the RFID electronic tag is quite high, the user may determine that even if the device of FIG. In this case, the user will abandon further inquiries, thereby preventing the user from using the bandwidth of the wireless communication network.

Alternatively, information about a product such as a product name or a manufacturing company may be displayed on the screen of the user's mobile phone without any limitation. Alternatively, any unrestricted information may be immediately displayed on the screen, and other information may be displayed by limiting the privacy level so that the user may decide to contact the apparatus according to the present invention of FIG.

When the user sees the privacy level displayed on the screen and accesses the information request / response processor 310 directly or indirectly through the wireless network, the tag ID of the electronic tag and information about the user are transmitted together. If necessary, the privacy level may be transmitted together.

The user information may include a user ID, a password, authorized authentication information for user authentication, and the like. If necessary, personal data such as user social security numbers may also be sent. Information recorded on a medium such as a smart card embedded in the mobile phone can be automatically transmitted together so that such user information can be automatically transmitted together with the tag ID.

The privacy policy management unit 320 receives the tag ID and checks whether information corresponding to the tag ID is stored in the information storage unit 300. If confirmed, the information disclosure determination unit 330 determines whether the detailed information about the product can be disclosed to the user based on the transmitted user information such as the tag ID. At this time, the privacy level for the user may be determined based on the user information, and the level may be compared with the privacy level for each detailed information about the product to determine whether to disclose each detailed information. As a result, some details may be disclosed and other details may not be disclosed. In some cases, none of the details may be disclosed.

Through the above process, the user may view only basic information about the product through a predetermined privacy level for the product, and may further view additional information about the product according to a level based on his personal information through additional selection. . Through this, the privacy of the product can be maintained in the distribution process of the product.

Automatically calculated when the product is sold at the end retailer, information about the credit card used for payment or issuing the bill, information about the loyalty card or personal information is read through a device such as a POS It may be stored in the information storage unit 300. In such a case, the information about the owner may be information based on credit card, or may be information about the individual previously stored in the store.

Such information about the buyer or owner can be applied not only to the case where the user went to the physical store offline and ordered, but also purchased online.

If ownership of a product is changed, the owner of the product needs to modify the privacy level the owner can control among the information on the product as desired. To this end, the owner changes the privacy level by accessing the information request / response processing unit 310 using a computer or the mobile phone through the information request / response processing unit 310 through the Internet or a wireless communication network.

At this point, it is necessary to confirm that you are a legitimate owner. Credit card information as described above may be used to verify the owner, or a loyalty card may be used. Alternatively, the information may be information about an individual such as a social security number registered in advance at a store. Alternatively, a valid owner may be identified through a pre-registered public certificate. Since the personal information about the person who bought the product was delivered from the seller who sold the product in advance, it may be stored in a storage means such as the information storage unit 300, and thus the owner who has the right to the owner compared to the information input by the owner through the communication network. You can see that.

In this case, the user who becomes the owner of the product, in order to enjoy the advantages according to the present invention, does not first access the device according to the present invention as shown in FIG. Connection information such as a number can be registered in advance. When a user buys a product, the stores automatically transmit such access information to the device according to the present invention. In the device according to the present invention, the owner can first be advised to modify the privacy-related contents since the owner of the product has been changed via email or mobile phone. The owner may access according to this guidance, and in this case, he will also have to be authenticated as a legitimate owner as described above.

The owner can change the privacy level for each detail of privacy for the product. Privacy concerns are sensitive to individual dispositions. This allows individuals to set privacy levels for their possessions.

When the privacy level is set as described above, whether to allow the detailed information may be determined in advance depending on who is requesting the detailed information about the product. For example, if information is requested from an unrelated side, it will not be disclosed, but if it is a request for information disclosure from the party in charge of A / S on the product, the information is set to be required.

Determining such a privacy level for each detailed information may be variously determined. In the present invention, there is no limitation in determining the privacy level.

In the device of FIG. 3 according to the present invention, a screen for allowing an owner to input a privacy level is provided, and through the screen, a user may set and store a privacy level for each detailed information. In this way, it is determined whether to disclose the information disclosure requested for the product thereafter according to the newly set criteria.

Of course, information that is set to be invisible from the producer at the time of production may be set in advance so that the user cannot access it.

The above description exemplifies a case of purchasing a product, but the present invention can be used not only in the purchase of a product but also in a service field such as providing various services.

For example, even when providing a medical service to a user and setting an electronic tag for the medical service provided to the user and providing the user to the user, the present invention can be applied while maintaining the gist of the present invention.

When a user goes to the hospital to receive medical services again, the electronic tag that has already been issued to the user can be read to obtain information about the patient. In this case, the privacy level stored in the electronic tag will most likely be quite high. The contents stored in the information storage unit 330 corresponding to the tag ID include medical information about the treatment received by the user.

Even in such a case, the user may set a privacy level for each detailed information of the detailed information about the medical information, thereby preventing other people from accessing the information without permission. For example, information about his age, blood type, and how to contact emergency family members for emergency medical care may set a relatively low privacy level.

In this case, in preparation for the emergency of the user who is the target of the medical service, only the information on the blood type and the hypersensitivity reaction may be determined in advance so that the privacy level can be set only lower than a certain level.

In addition, the present invention may be implemented by applying a privacy level to a financial service provided to a user. The user is issued an electronic tag used when receiving a financial service, the provided financial service is stored in the information storage unit 300, and the privacy level for the detailed information about the financial service can be set later by the user The present invention can be applied while maintaining the gist of the present invention.

Even in this case, it is obvious that the privacy level may be set for each detailed information, and the privacy level value prepared in advance may be basically applied.

In the case of the above application examples, the contents stored in the information storage unit 300 are input from a hospital or a bank which provides a service, and the user may input a basic privacy level before the user determines the privacy level. Will enter at the hospital or bank.

When an owner carries his product, information about the owner's product can be consciously read at the owner's intention or through an RFID reader carried by another person, although not intended. In particular, when the RFID reader is attached to a device such as a mobile phone, the location information of the mobile phone may indicate the approximate location of the owner, but not the exact location. That is, in the method according to the present invention, even the location of the owner can be grasped, and such information is also stored in the information storage unit 300.

As such, the more electronic tags such as RFID are used, the more privacy there is for the owner of the product. In order to provide additional protection for the privacy of the owner in such a case, if the information related to the electronic tag is requested after the owner related to the electronic tag is determined, the information disclosure decision processing unit 330 may request a proper communication network from a legitimate owner. It is desirable to inform this through. Naturally, this is a notification regardless of whether the information is disclosed or not, and depending on the application, the information may be disclosed with the permission of the owner.

As an application of the present invention, a cover such as a barcode displayed on a label of a product in addition to an electronic tag using RFID is read through a digital camera of a mobile phone, and the read information is replaced with the tag ID described above to apply the present invention. You may.

As a result, when a request for information on such a product is requested, if the owner of the product is registered in advance, only information allowed by the owner is disclosed to the request through the present invention, so that the privacy of the owner can be protected. do.

5 illustrates an example of a configuration of an RFID service network in which a privacy protection device according to the present invention is used.

Respective configurations 500, 510, 520, 530 and 550 are the same as those of the conventional 100, 120, 130, 140 and 150 of FIG. However, the information server 530 enters the privacy management server 540 according to the present invention when an inquiry about an electronic tag related product is input through the middleware 520 through the reader 510 that reads the information from the RFID electronic tag 500. Inquiry to receive information about the product. And sends the result to the application 550 as needed.

In the following description, primarily the privacy management server 540 operates including the device according to the invention of FIG. 3. And in some cases the information server 530 will operate including the apparatus according to the invention, which will be described again below.

Hereinafter, the operation of FIG. 5 will be described in detail.

The end user reads the information from the electronic tag 500 using the reader 510 and requests access to the information server 530.

The electronic tag can contain additional information along with the identification information of the RFID object, but since the storage capacity itself inside the electronic tag has a limitation, usually, only the tag ID or the minimum information about the object is inserted and the tag ID is interpreted. After obtaining the additional information server address, a method of obtaining more information from the additional information server may be adopted.

For example, this method uses the address www.etri.re.kr instead of the IP address when we use the Internet, but internally it is converted to 129.254.122.11 through the Domain Name Service (DNS). It is a similar method to what is being treated.

RFID identification information verification server to utilize identification number of RFID included in electronic tag has URI (Universal Resource Identifier) information about RFID application server which will provide additional information along with identification code of object included in each electronic tag. It is kept.

When a query is made to an RFID application server by transmitting a recognition code recognized by an electronic tag through a network such as the Internet to the RFID recognition information verification server, it operates in the form of returning a URI address for the corresponding RFID application server. The operation method in this case operates similarly to the DNS method, and the standard of such a method is already known.

The URI address of the RFID application server is delivered in the form of http://www.etri.re.kr/uri.html, for example. Provide services in a way that they provide.

Through the above process, the access address to the information server 530 may be determined.

The privacy management module (not shown in the drawing) of the information server 530 receives information from the user and transfers the information to the privacy management server 540 for privacy level queries applicable to the service.

The privacy management server authenticates the user using an authentication protocol, and asks the privacy client about the user's privacy level-related data (e.g. owner information (level 1), item type (level 3), item name (( Level 2), the article production year ((level 4), article code ((level 2), etc.) is read and provided to the privacy management module of the information server 530.

The information server 530 receiving the privacy information stores it as additional information in the corresponding field of the information server 530. If the same information is requested later, it is possible to process directly without querying the privacy management server 540. In this case, the information server 530 executes the operation according to the present invention without querying the privacy management server 540 including the apparatus of FIG. 3 according to the present invention.

If the data defining the user's privacy access level is changed by the owner of the electronic tag related product accessed through a computer or mobile phone 560, this is the case when the user resets his or her level. In this case, the privacy management server 540 should now inform that the privacy level information for the owner stored in the information server 530 is not valid.

FIG. 6 illustrates another example in which the present invention operates using the configuration of FIG. 5.

In the following description, all or part of the apparatus of FIG. 3 according to the present invention is included in each of the information server 530 and the privacy management server 540.

The privacy information related to each product or service is stored in advance (step 600). Such information storage is carried out at the time of production or when the owner of the product changes during distribution. The commodity producer stores the privacy level for the product in each individual electronic tag at the time of production of the article to which the electronic tag is to be attached. If necessary, in addition to storing such a privacy level in an electronic tag, the information server 530 or the information on the electronic tag ID and the product and the information on the information server 530 or the privacy management server 540 including the apparatus according to the present invention, respectively. Privacy level for each detailed information may be stored.

Or, if the owner of the product is changed, the new owner is connected to the privacy management server 540 via a device such as a computer or a mobile phone through the Internet or a wireless communication network to determine the privacy level of the product owned by him Can be.

When the information server 530 receives a product purchase or product inquiry information request message including an electronic tag ID and information on a privacy level stored in the electronic tag (step 610), the information server 530 receives the information. In step 621, it is checked whether there is privacy level information stored in advance for the product.

If there is no pre-stored information, the ID of the electronic tag is transmitted to the privacy management server 540, and information on the privacy level of the product corresponding to the electronic tag is requested (step 622).

The privacy management server 540 determines whether there is previously stored privacy level information for the product indicated by the electronic tag ID (step 623), and if there is no previously stored privacy-related information, take action.

If there is no information on the product yet, but there is information on the owner of the product, the owner inquires about the privacy policy in real time by means of the owner's mobile phone or PDA (step 624). If there is an answer within the designated time, the owner receives the privacy policy, that is, the information on the privacy level (steps 625 and 626).

If there is no response within the designated time, the basic level of privacy according to the basic privacy policy according to law or other appropriate standards is provided (steps 625 and 627).

As a result, if it is determined that there is previously stored privacy level information (step 623), or if the owner has received the information in real time or provided a basic privacy level, the policy on the privacy level is determined. The information is transmitted to the information server 530 (step 628).

The information server 530 compares the policy information on the privacy level stored in advance or received in real time from the privacy management server 540 with the information on the privacy level (received from the privacy information requester) stored in the electronic tag. The total is determined to finally provide a level of privacy (step 630). In this step, predetermined criteria for the disclosure of privacy information are determined.

As described above, the information server 530 may store the information on the privacy level received from the privacy management server 540 and use it later if necessary. Of course, if the privacy level information for the product from the owner is additionally input, the privacy management server 540 notifies this to the information server 530. Then, when the inquiry about the product comes in, the information server 530 will not use the previously stored information about the product, but will again contact the privacy management server 540 and provide information related to privacy.

The information server 530 checks the level from the authentication information of the information requestor, and combines the information that can be provided to the user of the level and transmits the information to the information requester (step 640). Through this process, the user who requested the information can see the desired information about the product.

The present invention operating through the above process provides the following results.

1.If the possession of a product with an RFID electronic tag is transferred to an individual's own right, the user who purchased the product designates his or her privacy level by his / her intention and adjusts the access authority of the product according to the level. RFID personal privacy framework that enables management

2. When information is requested from the information server, it is mapped to the privacy level of the individual set by the user, thereby providing a data structure of the information to which the disclosure is designated.

3. In the ubiquitous environment, the privacy management server according to the present invention can set the degree of individual privacy in an access terminal of a wireless network or a wired network, and this can be linked with an RFID system (reader, middleware, information server, directory server, etc.). Structure

4. Authority verification processing and management function that prioritizes personal privacy for requests from users who are various business applications and accessing applications.

5. When the privacy authority verification is completed, the request service can be denied or partially restricted through the success or failure of authorization verification.

6. In a state where privacy protection is applied by applying a privacy providing system, a structure for enabling a better service to be provided to a user by providing access to privacy information to a specific group including the user.

7. During the service, it is possible to reduce the authority level of the user's privacy information or, if unnecessary, directly inquire through various communication methods such as wireless messaging service, and provide information after accepting the information. rescue

As a result, the present invention can be used in a framework, protocol, and application method for protecting personal privacy in RFID (Radio Frequency Identification) technology that can be applied to supply chain management in distribution, manufacturing, and logistics industries. As a result, when RFID is introduced into the distribution and logistics system, the manufacturer automatically instructs the worker, such as which vehicle to load, using the RFID information attached to the product at the time of shipment. It recognizes the goods and checks the quantity and items automatically and delivers them, and when the customer makes a purchase in the store, it is possible to order the goods by automatically identifying the quantity of the stock as much as the purchase amount. In addition, products purchased by the user and transferred to the user's possession are notified of the product replacement in advance by finding out the failure diagnosis and the failure point during use, and the user's customized service can be continuously made in a timely manner. In addition, it determines whether a product is genuine or not, and the user can check the distribution stage of the product to improve the quality of service.

However, when such a user-owned product is carried by the user, leakage of personally-owned product information, illegal information inquiry, and misuse of personal information through an illegal reader in a wireless environment may lead to serious personal privacy infringement. Therefore, the present invention provides a technical solution for protecting it from such a threat of personal privacy infringement, and as a result, a privacy problem to be solved in order to provide an RFID service, which is being recently issued by a consumer organization, will be a technical solution. .

The present invention provides a subscriber from an illegal reader or tag by restricting the authority to privacy-related information and effectively verifying a user through a privacy management server or a privacy management module for solving a privacy problem generated in an RFID service process. It can be safely and securely carried and used, and provides a means of handling the user's privacy level at any time, anywhere, so that a secure RFID service can be provided.

Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. Examples included in the above description are introduced for the understanding of the present invention, and these examples do not limit the spirit and scope of the present invention. For example, in the above description, the Internet is mainly used as an example of a communication network, but it is also possible to use a public telephone communication network such as a PSTN, and in addition to the above examples, various embodiments according to the present invention are possible. It will be obvious to those of ordinary skill in this technical field. The scope of the present invention is shown not in the above description but in the claims, and all differences within the scope will be construed as being included in the present invention.

In addition, it can be easily understood by those skilled in the art that each of the above steps according to the present invention can be variously implemented in software or hardware using a general programming technique.

And some steps of the invention may also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, CD-RW, magnetic tape, floppy disks, HDDs, optical disks, magneto-optical storage devices, and carrier wave (eg, Internet It also includes the implementation in the form of). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

According to the present invention, an information storage unit including recognition information of electronic tags and privacy information related to each electronic tag, and storing information on a user requesting information on the electronic tag recognition information and the electronic tag. Information request / response processing unit, privacy policy management unit for determining whether the privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored in the information storage unit and the privacy information for the electronic tag is stored The information disclosure on the information owned by the owner and the information on the owner, including an information disclosure decision processing unit which determines and provides the level of privacy information for the electronic tag by comparing with a predetermined standard for disclosure of privacy information. I can prevent an illegal leak, and an individual is reliable By enabling the introduction of tags attached to products, it is possible to activate the introduction of electronic tags, to eliminate the concern about internationally invading privacy, and to create a safe ubiquitous world.

In addition, since the privacy sensitivity of the product for each person is different, the user directly sets the corresponding policy, so that all the services are directly controlled. By adopting a structure to deliver to the subscriber, it is possible to be sure about the privacy protection result of the subscriber, to be connected to the service environment in real time, and to be in close contact with the needs of the subscriber.

In addition, it is possible to investigate the user's taste in the purchase and distribution of the user's taste or the company's response such as the degree of reaction of the product without infringement of personal privacy information. It is possible to provide a better service in the security of personal information.

In particular, if the service request level of the user for electronic tagged products may be requested in various ways, and the information on the quality of the service is delivered, more effective service will be possible, and the service customized to the subscriber's needs is possible. In addition, since the additional service is available using the information on which the privacy service authority level is set, both the individual user who purchases the product or the subscriber and the personal information user of the enterprise can be satisfied.

Claims (18)

In an electronic tag for transmitting information stored therein through a signal of a predetermined frequency band, A tag ID area including identification information for distinguishing the electronic tag from other electronic tags; And And a privacy level area including level information indicating a right to access privacy information related to the electronic tag stored at a location accessible through a predetermined communication network in response to the recognition information included in the tag ID area. Electronic tag containing privacy level information. The method of claim 1, The electronic tag includes a privacy level information, characterized in that it comprises a tag memory structure for storing information. The method of claim 1, The electronic tag includes a privacy level information, characterized in that it comprises an RFID. An information storage unit including recognition information of electronic tags and privacy information related to each electronic tag; An information request / response processing unit that receives recognition information of the electronic tag and information on a user requesting information on the electronic tag through a predetermined communication network; A privacy policy manager to determine whether privacy information on the electronic tag corresponding to the received recognition information of the electronic tag is stored in the information storage unit; And When the privacy information for the electronic tag is stored, the received user information is compared with a predetermined criterion for the disclosure of the privacy information to determine and provide to what level the privacy information for the electronic tag is provided to the user. Privacy protection apparatus using an electronic tag comprising a; information disclosure determination processing unit. The method of claim 4, wherein The information request / response processing unit stores the information stored in the information storage unit by receiving information indicating that the owner of the product with the electronic tag is changed or determined, including the identification information of the electronic tag, from the distributor of the product with the electronic tag. And update a predetermined criterion for disclosure of the privacy information together with information capable of proving the renewal authority from the changed or determined owner. The method of claim 4, wherein The information request / response processor receives the information indicating that the information on the service target corresponding to the electronic tag is changed or determined, including the identification information of the electronic tag, from the service provider corresponding to the electronic tag and stored in the information storage unit. And updating a content and receiving and updating a predetermined criterion for the disclosure of the privacy information together with information capable of proving the renewal authority for a service object. The method according to claim 5 or 6, The information request / response processing unit is a privacy protection device using an electronic tag, characterized in that receiving the predetermined criteria for the disclosure of privacy information through a predetermined communication network including a wired and wireless Internet and a mobile communication network. The method of claim 4, wherein The privacy information stored in the information storage unit includes at least one of a product code, a product type, a product name, a production year, manufacturing and processing information, distribution information, and payment information of a product tagged with an electronic tag. Privacy protection device using an electronic tag, characterized in that. The method of claim 4, wherein Privacy information stored in the information storage unit is a privacy protection device using an electronic tag, characterized in that the information on the medical service or financial service corresponding to the electronic tag. The method according to claim 8 or 9, Privacy protection device using an electronic tag, characterized in that the privacy level can be specified separately for each detailed information included in the privacy information. The method of claim 4, wherein The information storage unit is a privacy protection device using an electronic tag, characterized in that for storing information indicating the position of the product with the electronic tag from the position of the reader for reading the information stored in the electronic tag. The method of claim 4, wherein The information disclosure determination processing unit, if the owner related to the electronic tag is determined after the information related to the electronic tag, the privacy protection device using an electronic tag, characterized in that notifying the owner through a predetermined communication network. (a) storing in advance including recognition information of electronic tags and privacy information related to each electronic tag; (b) receiving recognition information of an electronic tag and information on a user requesting information on the electronic tag through a predetermined communication network; (c) determining whether privacy information for the electronic tag corresponding to the recognition information of the received electronic tag is stored; And (d) comparing the received user information with a predetermined criterion for the disclosure of privacy information when privacy information for the electronic tag is stored; And (e) determining and providing to what level privacy information for the electronic tag is provided to the user; privacy protection method using an electronic tag comprising a. The method of claim 13, Receiving information indicating that the owner of the electronic tagged product has been changed or determined, including recognition information of the electronic tag, from the retailer of the electronic tagged product and updating the contents stored in the information storage unit; Privacy protection method using an electronic tag characterized in that it further comprises. The method according to claim 13 or 14, And receiving and updating a predetermined criterion for disclosure of the privacy information together with information that can verify the renewal authority from the changed or determined owner. The method of claim 13, Receiving information indicating that information on a service target corresponding to the electronic tag has been changed or determined, including recognition information of the electronic tag, from a service provider corresponding to the electronic tag and updating the contents stored in the information storage unit; Privacy protection method using an electronic tag, characterized in that it further comprises. The method of claim 13, The privacy information includes at least one of a product code, a product type, a product name, a production year, product information including manufacturing and processing information, distribution information, and payment information of a product with an electronic tag. How to protect your privacy with electronic tags. The method of claim 13, Privacy protection method using an electronic tag, characterized in that the privacy level can be specified separately for each detailed information included in the privacy information.

Images