JP2008021321A - RFID tag and RFID tag system - Google Patents

Abstract

Provided are an RFID tag and an RFID tag system that can restore an invalid RFID function only by an authorized person.
Storage means for storing a nonvolatile non-rewritable PIN code and an operation control flag for setting ON / OFF of a rewritable or one-time writable operation, and instructing an RFID tag ID identification code request When any command is received, it is checked whether or not the operation control flag is ON by referring to the storage means. If the flag is ON, the own ID is transmitted and the flag is OFF. A tag controller that controls communication with the antenna that transmits that the flag is OFF, and stores the password-on code and the password code received from the outside, and stored in the storage means When the password code matches, the on / off state of the operation control flag stored in the storage means is rewritten.
[Selection] Figure 1

Description

  The present invention relates to an RFID tag whose operation can be arbitrarily controlled and an RFID tag system using the RFID tag.

  In general, an RFID (Radio Frequency Identification System) tag is used to identify an object in a non-contact manner by electromagnetic waves, and information such as its own identification code is recorded. Ability to send and receive information. This RFID tag has been researched as a product identification and management technology that replaces conventional barcodes. For example, a trace function that traces the distribution route of a product by attaching or incorporating a small RFID tag in the product Is envisaged.

  One use of the RFID tag is real-time inventory monitoring in a store or the like. Inventory monitoring by the prior art generally uses a tag of a long transmission / reception distance (several hundred millimeters or more) type, communicates with the entire storage shelf or storage space, and an RFID tag that exists in the corresponding area is pasted A method for confirming the existence of products to be managed at once has been proposed.

When this RFID tag is attached to a consumer product, there is a problem that the trace function may infringe privacy. For this reason, from the viewpoint of protecting personal information, when the product is delivered to the end user A function for stopping the operation of RFID has been put into practical use.
Japanese Utility Model Publication No. 7-24166

  For the purpose of protecting the privacy, the prior art incorporating an invalidation switch that stops functioning again to stop the operation of the RFID makes it impossible to trace after invalidation, and enables tracing over the life cycle of the RFID tag. For example, even if the manufacturer tries to analyze a defect of a product that has occurred after invalidation, the RFID function is invalidated, so that even ID information cannot be obtained.

  An object of the present invention is to eliminate the above-described problems caused by the prior art, and is effective for an RFID tag system that can restore an invalid RFID function only by a legitimate authorized person using an inexpensive RFID tag. It is to provide an RFID tag.

In order to achieve the above object, the present invention is an RFID tag capable of communication within a predetermined signal transmission / reception distance range, and is turned on or off with a non-rewritable PIN code that can be rewritten or written once. When the storage means for storing the operation control flag to be set to OFF and the anyone (watermelon) command for instructing the RFID tag ID identification code request are received, the operation control flag is ON with reference to the storage means. If the flag is ON, the ID is transmitted, and if the flag is OFF, the tag that performs communication control with the antenna that transmits that the flag is OFF With a controller,
When the tag controller receives an operation on / off command and a password from the outside, and the password code received with reference to the storage means matches the password code stored in the storage means, The first feature is to rewrite the stored operation control flag on or off.

  Further, the present invention is characterized in that the RFID tag has a plurality of password codes stored in the storage means, and the number of digits of the plurality of password codes is different. In this RFID tag, the tag controller includes: A third feature is that when a command for confirming the operation state is received, the operation control flag of the storage means is referred to and the fact that the operation is on or off is transmitted to the outside.

Furthermore, the present invention provides an RFID tag including storage means for storing a non-rewritable, non-rewritable password code and an operation control flag for setting on / off of a rewritable operation within a predetermined signal transmission / reception distance range. And a control system for controlling the RFID tag,
A database storing passwords corresponding to identification codes of a plurality of RFID tags, wherein the control system refers to the database using the identification codes of the RFID tags as keys, and assigns passwords corresponding to the identification codes; A fourth feature is that a command for rewriting the operation control flag of the RFID tag is transmitted using the identification code and the password.

  According to the present invention, in the RFID tag system having the characteristics described above, the RFID tag receives a command for rewriting the operation control flag to an ON state, and sets the identification ID and password stored in the storage means and the operation to be turned off in the past. It is a fifth feature that it is determined whether or not the identification ID of the RFID tag and the password code match, and when it matches, the operation control flag is rewritten to an ON state. In this RFID tag system, the RFID tag When receiving an ON command and password that rewrites the control flag to the ON state, the identification ID and password stored in the storage means after the elapse of a predetermined time and the RFID tag whose operation has been set to OFF in the past The sixth feature is to execute on-command processing for determining whether or not the identification ID and the password match. To.

  The RFID tag and the RFID tag system according to the present invention can restore an invalid RFID function only by a legitimate authorized person by using the ID and password of the RFID tag.

Hereinafter, an RFID tag and an RFID tag system according to an embodiment of the present invention will be described in detail with reference to the drawings.
<Description of RFID tag>

An RFID tag according to an embodiment of the present invention transmits its own identification ID in accordance with radio waves from a general external antenna element. In particular, in the present invention, the RFID tag has a function of turning on / off the function. This embodiment will be described with reference to the drawings. FIG. 1 is an internal configuration diagram of an RFID tag according to the present embodiment, FIG. 2 is a configuration diagram for explaining the RFID tag control system, FIG. 3 is a diagram showing a configuration of a data group used in the system, and FIG. FIG. 5 is a diagram illustrating a sequence in which the control system according to the embodiment turns off the operation of the RFID tag, FIG. 5 is a sequence diagram in which the RFID tag responds to a communication request via a reader / writer, and FIG. FIG. 7 is a sequence diagram in which an RFID tag according to the present invention responds to a communication request via a reader / writer, and FIG. 8 is an operation in which the RFID tag turns on its operation. FIG. 9 is a sequence diagram for turning on the operation of this RFID tag, and FIG. 10 is an individual ID code, an individual password code, a category ID code, a category 11 is a conceptual diagram showing the relationship of the re-password, FIG. 11 is a diagram illustrating an example in which the individual ID code is set as the manufacturer category identification ID code and the product identification ID code, and FIG. 12 is the product password code inside the manufacturer category password. FIG. 13 is a diagram illustrating an example of an on-command processing sequence using a higher-level security code, and FIG. 14 is a sequence in which a simple means for confirming the operation status of the RFID tag operates. FIG. 15 is a diagram for explaining an implementation example of a simple means for confirming the operation status of the RFID tag.
<Description of RFID tag configuration>

  An example of the RFID tag control method and system according to this embodiment will be described. An RFID tag 211 shown in FIG. 1 includes a tag identification code 212, an operation control flag 213, a password code 214, and a tag controller 215, and is configured to operate under the control of the tag controller 215. As shown in FIG. In this manner, various data communication is performed by connecting to the host computer 223 via the reader / writer 222. The host computer 223 may be a store terminal such as a POS depending on the usage form of the RFID tag.

As shown in FIG. 3, the host computer 223 includes a plurality of identification code groups 231 assigned to individual RFID tags and individual information groups of management objects to which RFID tags linked to the individual identification codes are attached. 232 and an individual code group 333 linked to the individual identification code. These pieces of information may be stored in the host computer 223 or may be accessible via a network.
<Description of RFID tag off operation>

  The system configured as described above turns on / off the operation of the RFID tag according to an instruction from the host computer 223. First, the control system turns off the operation of the RFID tag (FIG. 4). Shown in In this sequence, as shown in the figure, the RFID tag 211 receives the identification code (or ID code) and the off function for specifying the RFID tag to be set off through the reader / writer 222, and the RFID tag accepts the RFID tag. When the off command to which the personal identification code is assigned is received (step ST241), the tag controller 215 determines whether or not the ID instructed by the off command is its own ID (step ST242).

If the ID code received in step ST242 is an off command addressed to itself, the tag controller 215 compares the password code to determine whether the password codes match (step ST243). Then, the operation control flag 213 is set to OFF (step ST244).
The operation flag 213 may be a single, rewritable memory or a plurality of one-time writable memories.
The operation in the case of a plurality of one-time writable memories is performed as follows. When the RFID tag has the first to fourth memories, the state is on when none is written, the state is off when written to the first memory, and the state is written to the second memory. In this case, the state is defined as ON. Thereby, even if it is not a rewritable memory, the state on and the state off can be created.

  As described above, in order to execute the off command in the present embodiment, both the ID code and the password code need to match, and a different password code is set for each of an infinite number of ID codes. The linked personal identification code is stored in a database or the like (not shown). These passwords and ID codes may be sent from a wholesaler or a manufacturer upstream of the distribution along with the delivery of the management object, or stored in an information center managed by the RFID tag manufacturer of the RFID tag manufacturer. In the latter case, the code is obtained via the network every time the off function is executed.

The RFID tag off operation according to the present embodiment is suitable when, for example, a POS system arranged at a cash register detects that a managed object that is a product has been properly purchased.
<Description of RFID tag confirmation>

  Next, a sequence for responding to a communication request via the reader / writer of the RFID tag according to the present embodiment will be described with reference to FIG. In the RFID tag 211 according to the present embodiment, first, when receiving what or a watermelon command, which is a command for inquiring an ID code from the reader / writer 222 (step ST251), the tag controller 215 refers to the operation control flag 213. Then, it is determined whether or not the operation control flag 213 is on (step ST252). When the operation control flag 213 is on, its own ID code is transmitted (step ST253), and the process ends (step ST254).

  Next, when there is no reply in the sequence shown in FIG. 5, the reader / writer 222 determines whether the RFID tag (or system) is faulty, the RFID tag is not attached, or the operation control flag is turned off. Therefore, as shown in FIG. 6, when a status command for querying the status is prepared and the status command is received from the reader / writer 222 (step ST261), the tag controller 215 operates the operation control flag. It is determined whether or not the flag is turned on with reference to 213 (step ST262). When the operation control flag is turned on, it is returned that it is “ON” (step ST263), and the operation control flag is turned off. In the case of "OFF", the fact that it is in the "OFF" state is returned (step ST264), and the process is terminated (step ST26 5).

  That is, the system responds to the system by any command that asks the ID code shown in FIG. 5, and when there is no response, the RFID tag (or system) is faulty / RFID tag is originally attached by the status command. In order to distinguish whether the operation control flag is OFF or not, the operation is performed so as to inquire whether the operation control flag 213 is ON or OFF according to the state command.

  In the above embodiment, the example using both the who command and the status command shown in FIG. 5 has been described. However, the present invention is not limited to this, and as shown in FIG. When receiving (step ST271), it is determined whether or not the operation control flag 213 is on (step ST272). When the operation control flag 213 is on, the self ID is transmitted (step ST273). Step ST274) may be performed. According to this sequence, when there is no response, it can be determined that the RFID tag or the like is not broken or stuck.

  Further, the off operation of the operation control flag when the anyone command is used according to the present embodiment requires the transmission of both the ID code and the password code, and therefore the off command and the who command are executed in pairs. Is shown in the sequence on the host computer 23 side.

In this sequence, when a command is sent from the upper level (step ST282) and the ID code of the target RFID tag is received (step ST283), a password corresponding to the ID code is next searched (step ST284). The personal identification code is obtained, and the personal identification code and ID code are transmitted (step ST285).
<Description of ON operation>

  For example, when a product once sold is returned and it is necessary to record the history of the returned product, when investigating the history of a defective product, or investigating the history of stolen goods, etc. Therefore, it is necessary to return the operation control flag 213 to the on state again, and the operation for turning on the operation control flag will be described below.

First, as shown in FIG. 9, when the tag controller 215 of the RFID tag 211 receives an on command via the reader / writer 222 (step ST291), whether the ID code included in the on command is its own ID or not. (Step ST292), and when it matches with its own ID, it is determined whether or not the personal identification code matches with itself (Step ST293), and when it matches, the operation control flag 213 is set to ON (Step ST294), and in step ST293 or 294, when it does not coincide with the ID or password, the operation is ended.
<ID code recognition operation>

  When the operation control flag is turned on, there is a problem that there is no way to know the ID code because no target RFID tag executes any command. In the present invention, this problem is addressed by providing a hierarchically structured ID code and password.

  To explain this step by step, first, assuming a situation where the flow rate of goods handled at retail stores is limited, the number of RFID tags set with an off command is also limited. In the store, the ID code that has issued the off command in the past and its password are sent out in a crawl. Or, the target product is used as a key, and the range is narrowed down from the ID code that has issued an off command in the past and its password. Thereby, although it takes time, the operation control flag can be turned on within a practical time range.

  Also, if the store where the off command was executed is unknown and the ID code that issued the off command in the past and the PIN code cannot be obtained, the data will be crushed without any clue. Even if it is sent, the operation control flag cannot be turned on within a realistic time range.

  For this reason, in this embodiment, a set of a high-level password code and an ID code configured to be collectively acted on a certain category to be managed (for example, the product type or the manufacturer itself) is prepared. By using the combination of the code and the ID code, the operation control flag of the target management object can be turned on even if the individual identification ID is unknown.

  The high-order password code and ID code are strictly stored as information that only the manufacturer of the management object or the RFID tag manufacturer knows, and in order to improve security, the number of digits of the password code is used for the individual ID code. It is desirable to increase the number.

  For example, as shown in FIG. 10, a category code (for example, a product code) is combined with a category ID code (for example, a product identification ID code 313 or a manufacturer category identification ID code 311) whose number of digits is shorter than that of the individual ID code 315. It is desirable to increase the number of digits of 314 and the manufacturer category code 312).

Furthermore, in the present embodiment, in order to save the memory area occupied by the identification code and password on the RFID tag, a part is shared. For example, as shown in FIG. It is desirable that the manufacturer category identification ID, the portion extended to the lower level be the product identification ID, and the portion in between are the product identification ID. Similarly, as shown in FIG. 12, the upper part of the entire manufacturer category code 431 may be the product code, the higher code may be the individual code, and the middle part may be the product code as shown in FIG.
<Third party fraud prevention>

In addition, according to the above-described embodiment, it is conceivable that an unauthorized third party decrypts the secret code with brute force. For this reason, in this embodiment, as shown in FIG. 13, the tag controller 215 of the RFID tag 211 intentionally lengthens the on-command processing time for the on-command processing using the higher-order password code. It is desirable to make it impossible to decipher the code in real time. In this sequence, as shown in FIG. 13, when the tag controller 215 of the RFID tag receives an ON command using the higher password (step ST421), the sequence loops through the elapsed time corresponding to the higher password (step ST422). ), And then by performing on-command processing (step ST423).
<Confirmation of operation control flag setting>

  In an actual system, it is effective to improve the reliability of the present system by preparing a simple means for confirming that the operation control flag is off. Such confirmation means operates in the sequence shown in FIG. 14, and when activated, first sends a command for starting RFID operation such as who command (step ST441), and then corresponds to the command of step ST441. It is determined whether or not there is reception (step ST442). If there is reception indicating that it is in operation, the RFID tag to be checked is displayed as “in operation” indicating that it is in operation (step 143). If reception is not successful in step ST441 and reception indicating operation is not possible even after waiting for a certain period of time (step ST444), the RFID tag is inactive, indicating that “tag operation is off”. Display.

  For example, as shown in FIG. 15, the confirmation device 451 is configured in a card shape to improve portability, and a solar cell 452 serving as a power source, an antenna 453 for communicating with the RFID tag, and the RFID tag are operated. A confirmation start switch 454 for starting confirmation of whether or not it is in progress, indicators 155 and 156 for displaying confirmation results, and a control circuit (not shown), and the control circuit has the sequence shown in FIG. The display 455 or 456 is turned on according to the result.

  When these indicators 455 and 456 are used to check the operation of the RFID tag, if the operation is OK, that is, if the operation is on, the display indicating “OK” or normal is lit, and the operation is NG, that is, the operation is off. If it is in a state, “NG” or a display indicating abnormality is turned on. On the other hand, if the confirmation device 451 is for confirming privacy by stopping the RFID tag, “NG” indicating that privacy is not secured if the operation is on or a display indicating an abnormality is lit. If the operation is off, “OK” indicating that privacy is ensured or a display indicating normality is lit. The shape of the confirmation device 451 shown in FIG. 35 may be other shapes.

  As described above, the RFID tag according to the present embodiment can turn on / off the operation control flag according to a command from the host device, and, for example, functions when a product with the tag attached is sold to a general customer. Is turned off and the operation control flag 213 is turned on again for unavoidable reasons, such as when it is necessary to record the history of the returned product, when investigating the history of a defective product, or when investigating the history of stolen goods. It is possible to cope with a case where it is necessary to return to the state.

  The RFID tag according to the present invention is used for distribution management in consideration of privacy protection of products for individual consumers. When products for individual consumers are transferred from retail stores to individual consumers, the RFID tags are stopped at the retail stores to ensure personal privacy protection and at the same time re-activate the RFID tags. By making possible, it is possible to provide data that is effective for investigation in the event of a product accident or theft.

The internal block diagram of the RFID tag concerning this embodiment. The block diagram explaining the control system of the said RFID tag. The figure which shows the structure of the data group used by this system. The figure which shows the sequence which a control system turns off operation | movement of an RFID tag. The sequence diagram which responds with respect to the communication request | requirement via a reader / writer. FIG. 5 is a sequence diagram in which the RFID tag answers a status command. FIG. 5 is a sequence diagram in which an RFID tag responds to a communication request via a reader / writer. The sequence diagram in which this RFID tag turns on the operation | movement. The sequence diagram in which this RFID tag turns on the operation | movement. The conceptual diagram which shows the relationship of individual ID / individual password / category ID / category code. The figure explaining the example inside an individual ID code. The figure explaining the example inside a maker category code. FIG. 6 is a sequence diagram of on-command processing using a higher-level password. The figure explaining the operation | movement sequence which confirms the operation | movement condition of a RFID tag. The figure explaining the implementation example of the simple means which confirms the operation | movement condition of a RFID tag.

Explanation of symbols

212: Tag identification code, 213: Operation control flag, 214: Password code, 215: Tag controller, 222: Reader / writer unit, 312: Manufacturer category password code, 314: Product password code, 431: Entire manufacturer category password code, 451: Confirmation device, 452: Solar cell, 453: Antenna, 454: Confirmation start switch, 455: Display.

Claims (6)

  An RFID tag that can communicate with a signal transmission / reception distance within a predetermined range, and can be rewritten with a substantially non-volatile rewritable PIN code, or a plurality of one-time writable operations can be set on or off. Storage means for storing an operation control flag to be transmitted, and a tag controller for controlling communication with the antenna with reference to the storage means, and the tag controller receives an operation ON / OFF command and a password from the outside An RFID tag that receives and rewrites on or off of the operation control flag stored in the storage means when the password code received by referring to the storage means matches the password code stored in the storage means .   The RFID tag according to claim 1, wherein a plurality of password codes are stored in the storage means, and the number of digits of the plurality of password codes is different.   2. The tag controller, when receiving a command for confirming an operation state, refers to an operation control flag of the storage means and transmits to the outside that the operation is on or off. Or the RFID tag of 2. RFID tag including storage means for storing a non-rewritable and non-rewritable personal identification code within a predetermined signal transmission / reception distance range and an operation control flag for setting on / off of the rewritable operation, and the RFID tag An RFID tag system comprising a control system for controlling
A database storing passwords corresponding to identification codes of a plurality of RFID tags, wherein the control system refers to the database using the identification codes of the RFID tags as keys, and assigns passwords corresponding to the identification codes; An RFID tag system, wherein a command for rewriting an operation control flag of an RFID tag is transmitted using an identification code and a password.   The RFID tag receives a command for rewriting the operation control flag to the ON state, and the identification ID and password stored in the storage means match the identification ID and password of the RFID tag whose operation has been set to OFF in the past. The RFID tag system according to claim 4, wherein the operation control flag is rewritten to an on state when the two coincide with each other.   When the RFID tag receives an ON command and a password that rewrites the operation control flag to an ON state, the identification ID and password stored in the storage means are turned off in the past after a predetermined time has elapsed. 6. The RFID tag system according to claim 5, wherein an on-command process for determining whether or not the identification ID of the RFID tag set in (1) matches the password is executed.

Images