JP2003281495A - Information storage device that stores information using tags and device related to them - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To hold user information even in a non-contacting IC card using an inexpensive wireless tag without EEPROM. <P>SOLUTION: Information of the wireless tag, that about the user, etc., are encoded and the result of it is held in the non-contacting IC card to which the wireless tag is mounted by an electronic method for storing information, a printing-like method for storing information and a magnetic method for storing information. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to a method of applying a wireless tag using a non-contact IC chip.

[0002]

2. Description of the Related Art A conventional wireless tag has a writing function, and the function is used to record information about the user of the wireless tag in the tag. When a wireless tag is attached to a card and used as a contactless card, a wireless tag with a writing function is used for personal information of the user of the card, such as name and address.

[0003]

In order to realize the writing function, a memory that can be electrically written to the RFID tag, for example, an EEPROM (Electric Erasable Programmable) is used.
e Read Only Memory). However, the EEPROM requires a special circuit to electrically rewrite the memory, the area of the IC chip that realizes the RFID tag increases, the price of the IC chip increases, and the RFID tag or a non-attached RFID tag is used. There was a problem that the price of contact cards increased. The present invention is to make it possible to hold individual information such as user information even in a non-contact IC card using a low-cost wireless tag that does not have an EEPROM.

[0004]

[Means for solving the problems] ROMs without EEPROM (Re
Using a wireless tag with a memory of ad only memory)
In order to securely retain individual information such as user information, processing is performed by combining the RFID tag information and individual information. One of the safe processing methods is to encrypt.
The encrypted information is stored in an information storage object such as a non-contact IC card equipped with a wireless tag by an electronic information storage method, a print information storage method, or a magnetic information storage method. By performing processing such as encryption, it is possible to securely retain source information such as individual information about users. When the individual information is taken out, the held information is read out, and the reverse processing of the processing, for example, decryption in the case of encryption processing, is restored to the original user information which is the source information. Furthermore, it is confirmed that the contactless card is not counterfeited by judging / confirming whether the information of the RFID tag in the decrypted information matches the information of the RFID tag attached to the contactless card. To do. By doing so, individual information such as information about the user can be safely stored in the contactless card using a wireless tag that does not have a writing function, and even if only the stored information printed on the contactless card is copied. It makes it possible to copy contactless cards.

[0005]

DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 shows the configuration of an IC chip for a wireless tag. The IC chip 102 includes an antenna unit 104, a power supply unit 106, a logic unit 108, and a memory unit 110.
The non-contact IC chip does not have a contact point and supplies radio waves from a reader / writer that reads information of the IC chip to the antenna unit 104 to supply power and transmit / receive clock and data. The antenna section is for transmitting data in order to receive radio waves from an antenna attached to the outside and to transmit internal data to the outside. In the present invention, a wireless tag using microwaves is assumed, but there are several methods such as electromagnetic induction as a non-contact communication method between the reader / writer and the antenna section of the wireless tag. The present invention does not depend on the non-contact communication method and can be applied to any of them.

The operation of the IC chip for the wireless tag will be described. The antenna unit 104 receives the radio waves from the reader / writer, and the power supply unit 106 converts the electric power into a power supply to generate a power supply used in the circuit of the entire IC chip. In addition, a clock component is extracted from the radio wave received by the antenna unit 104 and used as a clock for the circuit of the entire IC chip. The logic unit 108 is
Processing is performed according to the command sent from the reader / writer. The memory unit 110 is an area for storing information to be stored in the IC chip. As the IC chip of the wireless tag of the present invention, the one in which the ROM is used in the memory part is also used. Since the data of the ROM type wireless tag is written at the factory at the time of manufacturing, even if the tag is passed to the customer, the data cannot be changed. When the wireless tag sends data to the reader / writer, the microwave received from the reader / writer is used as a power source, the antenna unit 104 is used as a transmitter, and the contents of the memory are sent back to the reader / writer.

FIG. 2 shows an example of a wireless tag. The wireless tag is formed by attaching antennas 206 and 208 for transmitting and receiving between the IC chip 204 of the wireless tag and the reader / writer and sandwiching the seal 202 for reinforcement.

An example of the data held by the wireless tag is shown in FIG.
It shows in 0. The service identifier 1004 is data that identifies the field of use of the wireless tag. Service data 1006
Is data specific to the field of use. In addition, a serial number may be held in order to make all the RFID tag data different. In the present invention, it may be desirable to use different data for all the wireless tags used so that no wireless tag having the same data exists.

The data in the ROM can be written in a factory at the time of manufacturing an IC chip for a wireless tag, but it cannot be written in a contactless card. Therefore, it is impossible to write information about the user of the contactless card or individual information. Such data can be written on the surface of a contactless card by printing or the like, not as the data of the RFID tag. However, if it is confidential information related to privacy such as personal information, it will be easily stolen unless it is written in encrypted form. Also, if only printing is done, a card in which confidential information is written can be created only by printing technology, which may be unfavorable in terms of system security. For example, if you use a contactless card as a health insurance card, it should not be easily duplicated.

An object of the present invention is to inexpensively manufacture a contactless card which cannot be copied and cannot be secreted by processing secret information and information of a wireless tag in combination. Therefore, in order to prevent duplication of the card by using a cryptographic process etc. for concealing the confidential information, a wireless tag for storing individual information different for each individual is used and a combination of the confidential information and the wireless tag is defined. In addition, processing such as cryptographic processing is performed on confidential information and wireless tag information. In this way, when the contactless card is used as a credit card, the card cannot be duplicated and information such as a password can be securely held on the card. The present invention is an invention for realizing such a card. The wireless tag information and password are encrypted together and stored on the contactless card. When the card user uses it, it decrypts the stored information,
Check whether the information matches the wireless tag information on the contactless card, and if so, check the password. By doing this, you can prevent duplication of the card and identify yourself.

An embodiment of the non-contact card according to the present invention is shown in FIG. The contactless card 302 is an embodiment in which a wireless tag 304 is attached and original information such as secret information and information obtained by processing the information of the wireless tag are stored as a numeral 306. FIG. 4 is an example in which the processed information is held as a one-dimensional barcode 406. It may be realized with a two-dimensional barcode. FIG. 5 is an example in which processed information is held as a magnetic stripe 506. FIG. 6 shows an embodiment in which a wireless tag 604 is attached to a recording medium 602 such as a CD or a DVD, and information obtained by processing information such as music data and video data and information of the wireless tag is recorded on a CD or a DVD. is there.

When collating the fingerprint of the user to use the contactless card, the fingerprint is the original data. The retained information is
This is the data obtained by encrypting the information of the wireless tag and the fingerprint data. If the fingerprint information is A and the RFID tag information is B, then symmetric encryption such as DES can be used for encryption as follows. C = DES (K, (A + B)) where DES is the DES encryption process, K is the encryption key, and C is (A + B)
Is the encrypted data. The “+” in A + B indicates the combination of data. This cryptographic processing is performed when a contactless card is issued. The contactless card issuing device reads the fingerprint of the card user, generates the result of feature extraction in the fingerprint matching process, and sets the information related to the fingerprint as A. Further, the information B of the wireless tag previously attached to the contactless card to be issued is read. Then, connect A and B, encrypt with the encryption key K, generate C,
It is printed as a number or a bar code, or written on a magnetic stripe or the like, and the generated information C is held as holding information in an information storage such as a contactless card. Since the held information is encrypted, even if the held information is read, confidential information such as a fingerprint cannot be known. Even if the stored information is copied, the contactless card cannot be used unless the wireless tag can be copied. If the RFID tag information is different for each card, or if the same item is not easily available, a contactless card with retained information is difficult to forge to prove its identity. Therefore, it can be used as a card using an inexpensive RFID tag.

When the fingerprint of the user is collated in order to use the contactless card, the holding information and the data of the wireless tag are read by an information collating device which is a reader / writer, and the holding information C
Is decoded as follows. (A + B) = DES ^-1 (K, C) where DES ^-1 is the DES decryption process, K is the encryption key, and C is the information held in the contactless card. The encryption key K is stored in the information collating device, the held information C is read, and the read C and the encryption key K are used to decrypt with DES ^-1 , and the fingerprint information A and the RFID tag information B are extracted. . Then, it is confirmed whether the information read from the wireless tag of the contactless card matches B. If they do not match, the collation processing thereafter is stopped. If they match, the user's fingerprint is input, and it is checked whether or not it matches the information A related to the fingerprint, and if it matches, the user of the contactless card is recognized. The fingerprint matching here can be performed by using the pattern matching technology that is used in a conventional fingerprint matching device or the like. In the present invention, if the information of the wireless tag of the contactless card and the information of the wireless tag encrypted and recorded in the held information do not match, the contactless card is not recognized as a correct one. Moreover, by using the feature that it is extremely difficult to copy the RFID tag, it is possible to realize an ID card that is cheap and difficult to copy. Since the information A regarding the fingerprint has a large amount of data, it may be realized by reducing the amount of data by performing information compression or the like.

An embodiment for verifying a user by using a password to use a contactless card will be described. In this embodiment, an asymmetric cryptographic RSA is used. If the password information is A and the RFID tag data is B, then RSA can be used to encrypt as follows. C = (A + B) ^e mod n Here, the encryption key is (e, n). Also, a mod n is a
Indicates the remainder divided by n. In the contactless card issuing device, the password A of the card user is input, the information B of the wireless tag previously attached to the contactless card to be issued is read, A and B are connected, and the encryption key (e , n) encrypt and generate C. The retained information C is retained in an information storage such as a non-contact card by printing it as a number or a bar code on the non-contact card or writing it on a magnetic stripe of the non-contact card. In the encryption process, it is necessary to make the data length constant, so in order to make the A + B data length or the password data length constant, there is a case where predetermined data (for example, “00”) is added. is there.

When the user's password is collated in order to use the contactless card, the held information C is decrypted with the RSA private key stored in the information collating device. (A + B) = C ^d mod n where the decryption key is (d, n). Further, C is information held by the contactless card. The information matching device has a decryption key (d,
n) is stored, the held information C is read, the read C and the decryption key (d, n) are used to decrypt, and the information A regarding the password and the information B of the wireless tag are extracted. Check if the information read from the wireless tag on the contactless card matches B. If they do not match, the collation processing thereafter is stopped. If they match, the password entered by the user is compared with the password A encrypted on the contactless card, and if they match, the user of the contactless card is recognized. Also in this embodiment, it is realized that it is difficult to copy the contactless card by using the difficulty of copying the wireless tag. Then, the confidential information is encrypted and held in a contactless card by an inexpensive recording means, and a means for realizing the card used for the identification card in a low-cost and secure manner is provided.

The information about the fingerprint and the password in the above two embodiments are used as the information for determining whether the card user is correct, but the information for determining whether the card user is correct. Alternatively, depending on the application, a name, an address, an ID number given to an individual, or the like may be used as the information for using / using the personal information of the card user. The term "use / use" as used here means that the user needs to apply for his / her own information (for example, if a public institution issues specific certificates, or if he / she becomes a member of a service provided by a company). ), The use / use of the system that accepts applications. in this case,
Personal information such as name and address becomes confidential information to be encrypted, and if it is possible to confirm that the information read from the wireless tag of the contactless card and the information of the decrypted wireless tag match, the name and address that were decrypted at the same time. Information such as is output to the outside of the system so that it can be used.

An embodiment for confirming notation information and the like of the contactless card will be shown. This is a means for confirming that the recorded information such as name and address is displayed correctly on the contactless card. This is a method to prevent tampering with the information displayed on the contactless card. In this embodiment, RSA is used as the asymmetric encryption. Assuming that the recorded information such as name is A and the RFID tag data is B, using RSA, the signature verification data (digital signature) is as follows.
C can be generated. C = (A + B) ^d mod n Here, the decryption key is (d, n). This decryption key is an asymmetric encryption key and is also called a secret key.

In RSA, the encryption key and the decryption key can be bidirectionally encrypted and decrypted. Cryptographic keys, also known as public keys, are used to encrypt information. On the other hand, the decryption key is used to decrypt the encrypted information. Generally, many people have an encryption key, and only one person has a decryption key. The decryption key is an important key in the RSA framework. There is digital authentication as a means to confirm that the decryption key is the created information. A digital signature is obtained by encrypting information with a decryption key. When confirming information, both the original information and the information (digital signature) obtained by encrypting the information with the decryption key are sent, the digital signature is decrypted with the encryption key, and the original information can be generated. Is
It can be confirmed that the information is generated by the person who has the decryption key. This is because only a person who has a decryption key can create a digital signature. In such a digital authentication framework, the person who has the decryption key is the person who maintains the integrity of information such as the government.

In the contactless card issuing device, information A such as name is input, information B of the wireless tag previously attached to the contactless card to be issued is read out, and A
Connect B, encrypt with the decryption key (d, n), digital signature C
To generate. The digital signature C is printed on a contactless card with numbers or the like and retained. In addition, recorded information such as name is written on the contactless card.

When the recorded information such as the name is confirmed using the contactless card, the digital signature C is decrypted with the RSA encryption key stored in the information collating device. (A + B) = C ^e mod n where the encryption key is (e, n). C is the digital signature of the contactless card. The information matching device has an encryption key.
(e, n) is stored, the digital signature C is read, the read C and the encryption key (e, n) are used to perform the decryption process, and the recorded information A about the name and the information B of the wireless tag are obtained. Take it out. Check if the information read from the wireless tag on the contactless card matches B. If they do not match, the collation processing thereafter is stopped. If they match, the recorded information A such as the name is checked against the name information written on the contactless card.
If it can be verified, it has been confirmed that the name information has not been tampered with, so various services using the contactless card are executed. By doing so, it is possible to make a contactless card that cannot be copied and to confirm that the recorded information and the like written on the contactless card are correct information, and to enable correct service. In addition, MAC (Message Authentication Cer
tificate) can also be used.

When it is desired to combine the personal information of the card user with the fingerprint information, which is the personal information for determining whether or not the card user is correct, and the password, the information on the fingerprint in the above-mentioned embodiment or This can be realized by combining password information and personal information, encrypting them, and storing them as retained information. When using a card, the information collating device decrypts the information for determining whether the card user is correct and personal information from the stored information, determines whether the card user is correct, and if it is correct, , It can be realized to use and use personal information.

Although media information such as music, video information, and games are stored in CDs and DVDs for sale, there is a problem that they can be easily copied. To solve this problem, a wireless tag is attached to a CD or DVD, and the information stored in the CD or DVD is processed in combination with the information on the wireless tag to realize that copying cannot be done easily. it can.

It is also possible to realize by encrypting the media information using the symmetric encryption or the asymmetric encryption as in the previous embodiment. Further, in order to process at high speed, it is not necessary to use cryptographic processing.

The embodiment of the media information is a method of converting the media information and the data of the wireless tag and processing as follows. C = f (A, B) where A is media data, B is RFID tag data, and f
Is a conversion process by a function. f may be processing such as encryption processing or processing such as simple addition of data. In the case of addition processing, wireless tag data is repeatedly added to media data. The retained information C is the result of performing the process of f on the media data and the data of the wireless tag. This is stored in an information storage such as a CD or DVD.

When the information storage material is reproduced, the following inverse conversion of the processing of f is performed. A = f ^-1 (C, B) where C is the holding information, B is the RFID tag data, and f ^-1 is f
Is an inverse conversion process of. In the information reproducing apparatus, the information B of the RFID tag is read, the stored information C and B are inversely converted to f, and the original media data is reproduced. If f is an addition process,
The original data can be generated by repeatedly subtracting the RFID tag information B from the held information C. Music or video is played back using the generated original media data A. Even if the stored information C before the reverse conversion is used for reproduction, correct music or video cannot be reproduced. To make copying more difficult, it is better to perform cryptographic processing rather than conversion such as simple addition. In the case of media information,
Since a large number of CDs and DVDs with the same contents are created by the press, it is necessary to make the holding information C the same for each CD or DVD with the same contents. Therefore, it is necessary to store the same data in the information of the RFID tag attached to the CD or DVD of the same title, and use the data to process it.

Although data can be stored in the wireless tag in advance, encryption processing can be used to increase the reliability of the data. The wireless tag is shown in Fig. 10.
As shown in, the service data can have application-specific data. There is digital authentication technology as a method of increasing the reliability of the data. However, since digital authentication uses asymmetric encryption such as RSA, the data length is required to be at least 512 bits or more. If the data length that can be stored in the wireless tag is less than 512 bits, digital authentication technology may not be used. Therefore, in the present invention, even if the data length that can be stored in the wireless tag is less than 512 bits, a part or all of the data required for digital authentication can be stored electronically, printed, or magnetically. A technique for improving the reliability of the information of the RFID tag by using a digital authentication technology while maintaining it with various information storage methods.

FIG. 11 shows an embodiment in which a wireless tag and data required for digital authentication are held. The label 1102 has a wireless tag 1104 and holding information 1106 including a digital signature. The retention information 1106 including the digital signature is retained as a barcode. It may be retained with a magnetic stripe or printed characters. In this embodiment, a digital signature is created using the decryption key of the asymmetric encryption RSA, and digital authentication is performed using the encryption key (sometimes called the public key). The creation of the digital signature is as follows. B = A ^d mod n Here, A is the information of the wireless tag, the decryption key is (d, n), and B is the retained information including the digital signature. In addition to the wireless tag, the information storage holds the information of the holding information B including a digital signature.

In the information collating apparatus, the stored information including the RFID tag data and the digital signature of the information storage is read and the following processing is performed. A = B ^e mod n Here, the encryption key for confirming the signature is (e, n). A
If the information matches with the information of the wireless tag read by, the wireless tag can be considered to be digitally signed.
With asymmetric cryptography, the original information cannot be retrieved with the encryption key unless the decryption key is known. Therefore, if you use a decryption key in a safe place to create a digital signature, the reliability of the data can be increased. In this embodiment,
It is possible to improve the reliability of the information of the wireless tag by creating a digital title of the information of the wireless tag.

FIG. 7 shows an embodiment of an information collating device for reading the data of the RFID tag and judging the information. The information collating device 702 has a wireless tag reading unit 704, a retained information reading unit 706, a data input unit 710, and a processing result display unit 708. At the time of collation, the information storage object is brought close to the upper part of the reading unit, the wireless tag reading unit 704 reads the information of the wireless tag, and the held information reading unit 706 reads the held information held in the information stored object. Data is input from the data input unit 710 as necessary. Here, it is assumed that data such as a password is input.
When performing fingerprint matching, the information matching device requires a fingerprint input unit and a fingerprint matching function. The comparison result is displayed on the display unit 708.
Is displayed in. For media information, a CD player or
The function of the information collating device is built into the reproducing device such as a DVD player. It is necessary for the player to have a reading unit for reading information on the RFID tag in addition to a reading unit for reading medium information on CDs and DVDs. In such a player, the medium information of the CD or DVD is converted by the read information of the wireless tag, and the data such as music or video obtained by the conversion is reproduced.

The configuration of the contactless card issuing device for adding new information is similar to that of the information collating device shown in FIG. However, the holding information reading unit 706 becomes the holding information writing unit. Individual information such as a password is input from the data input unit 710, and the RFID tag reading unit 704 is input.
The information of the RFID tag and the individual information read in step 3 are processed, and the held information obtained by processing is recorded in the non-contact card by the held information writing unit 706.

FIG. 17 shows a block diagram of the information collating device or the contactless card issuing device. A wireless tag reading unit 704 for reading information of a wireless tag, a holding information reading unit (writing unit) 706 for reading (writing) holding information, a data input unit 710 for inputting data such as key input, and data for displaying contents of processing results. The display unit 708 is the control unit 17
02 is connected. The control unit 1702 controls each unit, performs encryption processing or decryption processing, and checks consistency.

An embodiment of a contactless card verification process using an external input such as a password or a fingerprint in the information verification device will be described with reference to FIG. In the information collating device, the information of the wireless tag of the contactless card is read by the wireless tag reading unit 704 (804), the external information of the password and the fingerprint is input from the data input unit 710 (806), and further the held information reading unit 706. The held information is read (808). The control unit 1702 decodes the read holding information (810), and the control unit 1702 compares the read RFID tag information and the input data that has been input (812). Displayed in section 708 (81
6) If the collation cannot be performed, the fact that the collation cannot be performed is displayed on the display unit 708 (818). The decryption process of 810 is a DES decryption process or an RSA decryption process, as shown in the previous embodiment. As shown in the previous embodiment, the matching process 812 is a character matching process for a password and a pattern matching process for a fingerprint.

FIG. 12 shows an embodiment in which the external information such as a password or a fingerprint is combined with the information of the wireless tag to create the retained information.
Shown in. In order to create the holding information, the RFID tag information is read by the RFID tag reading unit 704 (1204), external information such as a password is input by the data input unit 710 (1206), and the RFID tag information and the external information are combined. In combination, the control unit 1702 encrypts and holds information (1208). After that, the held information is held in the card or the like by the held information writing unit 706.

In the information collating device, using a contactless card,
FIG. 13 shows an embodiment in which personal information such as an encrypted name is decrypted and used. In the information collating apparatus, the information of the wireless tag of the contactless card is read by the wireless tag reading unit 704 (1304), and then the held information is read by the held information reading unit 7
It is read at 06 (1306). Then, the control unit 1702 decodes the read holding information (1308), and the control unit 1702 collates whether a part of the decoded holding information matches the information of the wireless tag (1310). If you can check
The fact that the collation is successful is displayed on the display unit 708 (1314),
The personal information such as the name in the decrypted retained information is used / used (1318) to provide various services. If the collation cannot be performed, the fact that the collation cannot be performed is displayed on the display unit 708 (1316) and the service or the like is not performed. 130
The decryption process of No. 8 is the DES decryption process or the RSA decryption process, as shown in the previous embodiment.

FIG. 14 shows an embodiment in which a contactless card is used to encrypt personal information such as a name to generate retained information.
Shown in. In order to create the holding information, the RFID tag information is read by the RFID tag reading unit 704 (1404), and personal information such as a name is input by the data input unit 710 (140
6) The information of the RFID tag and the personal information are combined and encrypted by the control unit 1702 to generate the retained information (140
8). After that, the held information is held in the card or the like by the held information writing unit 706. FIG. 15 shows an embodiment in which the information collating device uses a contactless card to confirm information such as written name and the like. In the information collating apparatus, the RFID tag information of the contactless card is read by the RFID tag reading unit 704 (1504), and then the held information is read by the held information reading unit 706 (1506). The control unit 1702 decrypts the read retained information with the public key to generate original information (1508), and the control unit 1702 checks whether the decrypted original information matches the RFID tag information and the notation information (1
510). If the collation is successful, the display 70
8 is displayed (1512), and the notation information in the decrypted retained information is used / used (1514) to perform various services. If the verification cannot be performed, the display unit 7 indicates that the verification cannot be performed.
It is displayed in 08 (1516). The process of generating the original information from the held information of 1508 is performed by the RSA encryption key (public key). It can also be done using a symmetric key encryption key. If you just want to check the information such as name, enter 151
If the information of the RFID tag is matched with 0 and the consistency is obtained,
Information such as a name is displayed on the display unit 708 of the information collating device so that the information can be confirmed by visually checking the card, or the notation information is read in advance by the information collating device and judged and collated with the decrypted notation information, The result is displayed on the display unit 708.

FIG. 16 shows an embodiment in which a contactless card is used to generate retained information (digital signature) for confirming information such as written name. In order to create the holding information, the RFID tag information is read by the RFID tag reading unit 704 (1604), the notation information is input by the data input unit 710 (1606), the RFID tag information and the notation information are combined, and control is performed. The unit 1702 performs encryption using the asymmetrical decryption key to generate a digital signature and hold information (1608). After that, the held information is held in the card or the like by the held information writing unit 706.

FIG. 9 shows an embodiment in which the information of the wireless tag is confirmed by a digital signature. In the information collating device, the wireless tag reading unit 704 reads the information of the wireless tag of the contactless card (904), and the held information is held information reading unit 706.
Read with (906).

From the digital signature of the held information to the control unit 170
In step 2, the signature verification data is generated using the public key (90
8). The control unit 1702 obtains the consistency between the signature inspection data and the information of the wireless tag (910), and if the consistency is obtained, the display unit 708 displays that the information of the wireless tag is authenticated.
(912). If the consistency is not obtained, it is displayed on the display unit 708 that authentication is not performed (914).

[0039]

According to the present invention, a safe and inexpensive contactless card can be realized by using the IC chip of the RFID tag using the ROM type memory.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a non-contact IC chip that is an embodiment of the present invention.

FIG. 2 is a configuration diagram of a wireless tag in which the IC chip of FIG. 1 is attached to a sticker as seen from above.

FIG. 3 is an example of an information storage in which a wireless tag is attached and numbers are printed as holding information.

FIG. 4 is an example of an information storage in which a wireless tag is attached and a barcode is printed as holding information.

FIG. 5 is an example of an information storage in which a wireless tag is attached and holding information is stored in a magnetic stripe.

FIG. 6 is an example of a disc-shaped information storage product equipped with a wireless tag.

FIG. 7 is an example of an information collating device that reads information from an information storage object and collates the information.

FIG. 8 is a processing flow of an information collating device that collates by external input.

FIG. 9 is a processing flow of an information matching device that authenticates information of a wireless tag with a digital signature.

FIG. 10 is an example of wireless tag information.

FIG. 11 is an information storage that holds a digital signature of information of a wireless tag in the form of a barcode.

FIG. 12 is a flow of encrypting information of a wireless tag and external input information, and generating retained information.

FIG. 13 is a flow of decrypting the held information, confirming the consistency with the information of the wireless tag, and using the decrypted personal information.

FIG. 14 is a flow of encrypting information of a wireless tag and personal information to generate retained information.

FIG. 15 is a flow of generating signature verification data of retained information, checking the consistency between the signature verification data and the information of the RFID tag and the notation information, and using the notation information.

FIG. 16 is a flow of generating signature verification data from wireless tag information and notation information, and generating holding information.

FIG. 17 is a block diagram of an information collating apparatus that reads information from an information storage object and collates the information.

[Explanation of symbols]

102 ... IC chip for RFID tag, 202 RFID tag in label form, 302, 402.502, 602 ... Information storage, 304, 404, 504, 604 ... RFID tag, 3
06, 406, 506, 606 ... Retained information, 702 ...
Information collating device, 704 ... Wireless tag reading unit, 706 ...
Holding information reading unit, 708 ... Display unit, 710 ... External input unit, 1002 ... RFID tag information, 1104 ... Service identifier, 1106 ... Service data

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06K 19/07 G06K 19/00 S 19/08 F H04L 9/32 H H04L 9/00 673D (72) Invention Toshitaka Kawaguchi 4-6, Kanda Surugadai, Chiyoda-ku, Tokyo Within Hitachi Mu Solution Venture Company (72) Inventor Ryo Imura 4-6, Kanda Surugadai, Chiyoda-ku, Tokyo F Term in Hitachi Mu Solution Venture Company (Reference) 2C005 MA33 MB01 MB05 SA02 SA06 SA12 SA13 SA15 TA22 5B035 AA13 AA14 BB01 BB02 BB09 BB11 BC01 CA06 CA23 CA29 5B058 CA15 CA27 KA02 KA05 KA06 KA11 KA32 KA33 KA35 KA37 KA38 5J104 KA17 NA33

Claims (33)

[Claims] 1. Information for processing the first information,
A tag having a storage unit for storing individual individual information for each of the first information. 2. Information for processing the first information,
An information storage characterized in that a tag having a storage unit for storing individual individual information is added to each of the first information, and holds the first information and processing information obtained by processing the individual information. . 3. Information for processing the first information,
An information adding device for adding new information to an information storage to which a tag having a storage unit for storing individual individual information for each of the first information is added, wherein the individual information stored in the storage unit is A reading unit for reading, an input unit for inputting the first information, and processing of the individual information read by the reading unit and the first information input by the input unit under specific processing conditions. An information adding device, comprising: a processing unit; and an adding unit that adds processing information processed by the processing unit to the information storage object. 4. Information for processing the first information,
A tag having a storage unit that stores individual individual information is added to each of the first information, and information of an information storage that holds processing information obtained by processing the first information and the individual information is determined. An information determination device, wherein a first reading unit that reads the processing information, a second reading unit that reads the individual information, and the processing information read by the first reading unit are reverse-processed, Whether or not the reverse processing unit that restores the first information and the individual information before processing, and the individual information returned by the reverse processing unit and the individual information read by the second reading unit match An information determination device comprising a first determination unit for determining. 5. A tag, which is information for processing personal information and has a storage unit for storing individual information individually for each individual. 6. Information for processing personal information, wherein a tag having a storage unit for storing individual information for each individual is added, and the personal information and the processing information processed for the individual information. A card characterized by holding. 7. The card according to claim 6, wherein the processing is symmetric encryption, asymmetric encryption, digital authentication, or function conversion. 8. The personal information includes fingerprint information, a password,
The card according to claim 6, which is a name, an address, or an individual ID. 9. The holding is electronic, printable, or
The card according to claim 6, wherein the card is a magnetic holder. 10. Information for processing personal information,
A card creation device for adding new information to a card to which a tag having a storage unit for storing individual individual information for each individual is added, the reading unit reading the individual information stored in the storage unit, An input unit for inputting the personal information, a processing unit for processing the individual information read by the reading unit and the personal information input by the input unit under specific processing conditions, and processing by the processing unit A card making apparatus, comprising: an addition unit for adding the processed information to the card. 11. The card making apparatus according to claim 10, wherein the processing is symmetric encryption, asymmetric encryption, digital authentication, or function conversion. 12. The specific processing condition is an encryption key of a target encryption, an encryption key of an asymmetric encryption, a decryption key of digital authentication, or a function conversion function.
0 card making device. 13. The card making apparatus according to claim 10, wherein the personal information is fingerprint information, a password, a name, an address, or a personal ID. 14. The card making apparatus according to claim 10, wherein the addition is electronic, print, or magnetic addition. 15. Information for processing personal information,
A card determination device to which a tag having a storage unit that stores individual individual information is added for each individual, and which determines information of a card that holds the personal information and processing information obtained by processing the individual information, A first reading unit that reads the processing information, a second reading unit that reads the individual information, the processing information read by the first reading unit is reversely processed, and the personal information before processing and A reverse processing unit for returning to the individual information, and a first determination unit for determining whether or not the individual information returned by the reverse processing unit and the individual information read by the second reading unit match. A card determination device comprising: 16. An input unit for inputting the personal information and the personal information returned by the reverse processing unit and input by the input unit when the individual information matches in the first judging unit. The card determination device according to claim 15, further comprising a second determination unit that determines whether or not the generated personal information matches, and collates the personal information. 17. The personal information returned by the reverse processing unit is output to the outside so that the personal information can be used / used when the first determination unit matches the individual information. The card determination device according to claim 15, wherein: 18. The personal information returned by the reverse processing unit is displayed when the individual information matches in the first determination unit, and the personal information can be confirmed. The card determination device according to claim 15. 19. If the individual information is matched by the first determination unit, the personal information returned by the reverse processing unit and the personal information written on the card in advance are matched. The card determination device according to claim 15, further comprising a second determination unit that determines whether or not the personal information is confirmed. 20. The card determination device according to claim 15, wherein the processing is processing by symmetric encryption, asymmetric encryption, digital authentication, or function conversion. 21. The reverse processing is reverse processing by decryption of symmetric encryption, decryption of asymmetric encryption, decryption of digital authentication, and inverse conversion of function conversion.
9. The card determination device according to item 9. 22. The card determination device according to claim 15, wherein the personal information is fingerprint information, a password, a name, an address, or a personal ID. 23. The card determination device according to claim 15, wherein the holding is electronic, printing, or magnetic holding. 24. Information for processing personal information,
An information adding method for adding new information to a card to which a tag having a storage unit for storing individual individual information for each individual is added, the reading step of reading the individual information stored in the storage unit, An input step of inputting the personal information, a processing step of processing the individual information read in the reading step and the personal information input in the input step under specific processing conditions, and processing in the processing step An information adding method comprising an adding step of adding the processed information to the card. 25. Information for processing personal information,
A method for determining information, wherein a tag having a storage unit that stores individual information for each individual is added, and information for a card that holds the personal information and processing information processed for the individual information is determined. A first reading step of reading the processing information; a second reading step of reading the individual information; and a reverse processing of the processing information read in the first reading step to obtain the personal information before processing and A reverse processing step of returning to the individual information, the individual information returned in the reverse processing step, and the second
The information determining method, comprising: a determining step of determining whether or not the individual information read in the reading step is matched. 26. A tag, which is information for processing media information, and has a storage unit for storing individual individual information for each content of the medium. 27. Information for processing media information, wherein a tag having a storage unit for storing individual individual information for each content of the media is added, and instead of the media information, the media information and the media information are added. A storage medium for storing processing information obtained by processing individual information. 28. The storage medium according to claim 27, wherein the processing is symmetric encryption, asymmetric encryption, digital authentication, or function conversion. 29. The storage medium according to claim 27, wherein the media information is video information, audio information, or game information. 30. Information for processing media information, wherein a tag having a storage unit for storing individual individual information for each content of the media is added, and instead of the media information, the media information and the media information are added. A storage medium reproducing device for mounting a storage medium for storing processed information processed for individual information and reproducing the medium information, the first reading unit reading the processed information, and reading the individual information. A second reading unit and the processing information read by the first reading unit are reverse-processed using the individual information read by the second reading unit to obtain the media information before processing. A storage medium reproducing apparatus comprising: a reverse processing unit for returning and a reproduction unit for reproducing the media information returned by the reverse processing unit. 31. The storage medium reproducing apparatus according to claim 30, wherein the processing is processing by symmetric encryption, asymmetric encryption, digital authentication, or function conversion. 32. The storage medium reproducing apparatus according to claim 30, wherein the reverse processing is reverse processing by decryption of symmetric encryption, decryption of asymmetric encryption, decryption of digital authentication, and inverse conversion of function conversion. . 33. The storage medium reproducing apparatus according to claim 30, wherein the media information is video information, audio information, or game information.