JP2011088330A - Label printing system - Google Patents

Abstract

A label printing system capable of issuing a label printed with information on which measures for preventing forgery and tampering are provided.
A function for authenticating authentication information of a user who uses a label printer, after generating label information from a label information seed received from the label printer and performing a cryptographic process to calculate an electronic signature of the label information After authenticating the user of the IC card 11 having a function of returning the label information with the electronic signature, which is the label information with the electronic signature, to the label printer 10 and the user who uses the label printer 10 using the IC card 11 A label printer 10 that transmits a label information seed to the IC card 11, generates print information including label information with an electronic signature generated inside the IC card 11, and issues the security label 2 by printing the print information; Thus, the label printing system 1 is configured.
[Selection] Figure 1

Description

  The present invention relates to a system for printing a label to be attached to an article such as a paper document or a document file.

  With the advent of the digitized society, documents that were previously paper media have also been digitized. Even in the case of electronic documents that have been digitized, a mechanism to prevent forgery and falsification of electronic documents is required, as is the case with signatures and seals for paper-based documents. An electronic signature using a public key cryptosystem is used as a mechanism for preventing tampering.

  Even if electronic documents become widely used with the advent of the digital society, the need for paper-based documents remains in the field of contracts, etc., and paper-based documents are the same as electronic documents. It is now required to be able to manage documents electronically.

  In order to give various information to an article such as a paper document, for example, a label issued by a label printer as disclosed in Patent Document 1 may be attached to the article. The label printer disclosed in Patent Document 1 is an invention that focuses on managing goods to be distributed without using a server such as a database. The label printer disclosed in Patent Document 1 uses a two-dimensional barcode encoded with various distribution data. The device is merely an apparatus for issuing a label to be printed, and no device for preventing forgery / falsification of information printed on a label issued by the label printer is provided.

Japanese Patent No. 4132225

  Accordingly, in view of the above-described problems, an object of the present invention is to provide a label printing system capable of issuing a label printed with information on which measures for preventing forgery and tampering are applied.

  The first invention for solving the above-described problem is to generate label information by combining a label information seed transmitted from an external device and a part of memory information stored in a memory, and using a secret key Cryptographic information provided with label information generating means with proof information that returns proof information label information that is the label information to which the proof information is attached after calculating the proof information of the label information by performing a cryptographic operation A token, a label information seed, a print information generating means for generating print information of the label information with certification information obtained from the cryptographic token, and a security label by instructing the printer to print the print information A label printing system comprising at least a label printer having label issuing means for issuing A.

  Furthermore, the second invention is characterized in that the print information generating means of the label printer includes image data of an optical mark in which the label information with certification information is encoded in the print information. It is a label printing system as described in invention.

  Furthermore, the third invention is characterized in that the print information generating means of the label printer includes a part or all of the text data of the label information included in the label information with certification information in the print information. The label printing system according to the second invention.

  Furthermore, the fourth invention is the means for calculating the proof information of the ciphertext of the label information after the proof information generating means of the cryptographic token encrypts the label information with the secret key. The print information generation unit of the printer generates a text to be included in the print information by decrypting a ciphertext of the label information included in the label information with the certification information using an encryption key paired with the secret key. The label printing system according to the third invention is characterized by the above.

  Further, according to a fifth aspect of the present invention, the cryptographic token includes a verification unit for verifying the authentication information of the user of the label printer and the reference information stored in the cryptographic token, and the label printer is obtained from the user. The authentication information is collated with the cryptographic token to provide user authentication means for authenticating the user, and the security label can be issued only when user authentication is successful. , A label printing system according to any one of the first to fourth inventions.

  Further, according to a sixth aspect of the invention, in any one of the first to fifth aspects, the label printer includes a label information seed acquisition unit that acquires the label information seed. It is a label printing system of description.

  Furthermore, the seventh invention is characterized in that the label printer includes a character input device as the label information seed acquisition means, and uses information input to the character input device as the label information seed. 6. A label printing system according to the invention of claim 6.

  Further, the eighth invention is characterized in that the label printer includes a clock circuit as the label information seed acquisition means, and uses time information acquired from the clock circuit as the label information seed. It is a label printing system as described in invention or 7th invention.

  Further, according to a ninth aspect of the invention, the label printer includes a memory that stores an individual identification number of the label printer as the label information seed acquisition unit, and the fixed identification number acquired from the memory is used as the label information seed. The label printing system according to any one of the sixth to eighth inventions, wherein the label printing system is used.

  In addition, according to a tenth aspect of the present invention, the label printer includes a reader that reads a mark encoded with information used as the label information seed as the label information seed acquisition unit, and decodes the mark read by the reader. The label printing system according to any one of the sixth to ninth inventions, wherein information obtained in this manner is used as the label information seed.

  Further, the eleventh invention is characterized in that the label printer includes a network interface as the label information seed acquisition means, and uses information received from a device connected to the network as the label information seed. A label printing system according to any one of claims 6 to 10.

  Further, the twelfth invention is characterized in that the proof information generating means for the cryptographic token includes the identification information of the user stored in the memory of the cryptographic token in the memory information. It is a label printing system as described in any one of invention to 11th invention.

  Further, the thirteenth invention is characterized in that the proof information generating means for the cryptographic token includes the user attribute information of the user stored in the memory of the cryptographic token in the memory information. It is a label printing system as described in any one of invention of 12th invention.

  Further, the fourteenth invention is characterized in that the proof information generating means for the cryptographic token includes the user information of the user stored in the memory of the cryptographic token in the memory information. A label printing system according to any one of the invention to the thirteenth invention.

  Furthermore, the fifteenth aspect of the invention is characterized in that the proof information generation means for the cryptographic token includes the issuer information of the cryptographic token stored in the memory of the cryptographic token in the memory information. A label printing system according to any one of claims 6 to 14.

  Furthermore, in the sixteenth aspect of the invention, in the label printing system, the encryption token is used to manage entry / exit into the room where the label printer is installed, and the encryption possessed by the user who enters the room. A door gate for writing room information of the room in a token memory is included, and the proof information generating means for the cryptographic token includes the room information in the memory information. A label printing system according to any one of the inventions.

  According to the label printing system of the first aspect of the invention, the security label print content includes label information with certification information. The label information with certification information includes the label information generated by the cryptographic token and the cryptographic token. The certification information of the label information generated using the stored secret key is included.

  Therefore, if the validity of the proof information of the label information with the proof information is verified using the encryption key that is paired with the secret key stored in the crypt token, the proof information Since the verification of the validity of the certification information of the label information with information fails, it is possible to prevent the falsification and forgery of the print contents of the security label by making it possible to verify the validity of the certification information of the label information with certification information.

  In addition, by attaching a security label printed by a label printer to an article such as a document or document file that is a paper medium, even if the document is not electronic information, the identity of the document creator and prevention of forgery of the document are prevented. Can be managed electronically.

  Further, as in the second invention, if the image data of the optical mark encoded with the label information with certification information is included in the printing information, the label information with certification information printed on the security label can be easily read. Yes.

  Furthermore, as in the third aspect of the invention, if part or all of the text data of the label information included in the label information with certification information is included in the print information, the security label can be viewed only by human eyes. The contents of will be understood.

  Furthermore, if the label information included in the label information with proof information is encrypted as in the fourth invention, it can be made difficult to understand that the label information to which the proof information is attached is printed.

  Further, as in the fifth aspect, by allowing the security label to be issued only when the user authentication of the user of the label printer is successful, the users who can use the label printer can be limited.

  In the present invention, as in the sixth aspect, the label printer can be provided with label information seed acquisition means for acquiring information used as the label information seed. The information used as the label information seed may be arbitrary. For example, the information input by the user as in the seventh invention, the time information as in the eighth invention, and the individual identification of the label printer as in the ninth invention Numbers can be used.

  Further, as in the tenth aspect of the invention, when the label printer is equipped with a reader that reads a mark encoded with information used as the label information seed as the label information seed acquisition means, information corresponding to the article to which the security label is to be attached is obtained. It can be used as a label information seed.

  Further, as in the eleventh aspect of the invention, when the label printer is provided with a network interface as a label information seed acquisition means, information used as a label information seed can be transmitted from the computer connected to the network to the label printer. become.

  Further, the memory information included in the label information by the cryptographic token may be arbitrary. As the memory information, the user identification information (for example, user ID) as in the twelfth invention, the user's identification information as in the thirteenth invention, and the like. User attribute information (for example, the name of the organization to which the user belongs, the name of the group to which the user belongs, the title of the title), the user information of the user (for example, name, address, telephone number, etc.) as in the fourteenth invention, and the fifteenth invention The issuer information of the cryptographic token can be used.

  Further, as in the sixteenth aspect of the invention, if the room information written by the door gate in the cryptographic token is included in the label information, the room (location) where the security label is issued can be printed on the security label.

  As described above, according to the present invention, it is possible to provide a label printing system capable of issuing a label printed with information on which measures for preventing counterfeiting and tampering are applied.

The figure explaining the structure of the label printing system in this embodiment. The figure explaining an IC card. The figure explaining a label printer. The flowchart explaining operation | movement of a label printer. The figure explaining an example of the security label issued in this embodiment. The block diagram of the label printing system which cooperates with a door gate. The figure explaining an example of the security label issued with the label printing system which cooperates with a door gate.

  From this, the embodiments of the present invention will be described to the extent that those skilled in the art of the present invention can understand the contents of the present invention and implement the present invention.

  FIG. 1 is a diagram for explaining the configuration of a label printing system 1 according to the present embodiment. The label printing system 1 illustrated in FIG. 1 is a system in which a label printer 10 that issues a security label 2 and an encryption token (IC card 11 in FIG. 1) possessed by a user of the label printer 10 cooperate.

  The IC card 11 possessed by the user generates label information from the label information seed received from the label printer 10, the function of authenticating the authentication information (here, PIN: Personal Identification Number) of the user who uses the label printer 10, After calculating the proof information of the label information by performing encryption processing, the label printer 10 has a function of returning the label information with proof information, which is the label information to which the proof information is added, to the label printer 10. After authenticating the user who uses the label printer 10 by using it, the label information seed is transmitted to the IC card 11, and the printing information including the label information with the certification information generated inside the IC card 11 is printed, thereby ensuring security. Label 2 is issued.

  According to the label printing system 1 illustrated in FIG. 1, the printed content of the security label 2 includes label information with certification information. The label information with certification information includes the label information generated inside the IC card 11 and the label information with certification information. , The certification information of the label information generated using the secret key stored in the IC card 11 is included.

  When verification information is generated by a device other than the valid IC card 11 by verifying the validity of the certification information included in the label information with certification information using an encryption key paired with the secret key stored in the IC card 11 Since the verification of the validity of the certification information of the label information with certification information fails, it is possible to verify the legitimacy of the certification information of the label information with certification information, so that the print contents of the security label 2 can be falsified and forged. Can be prevented.

  In addition, by attaching the security label 2 printed by the label printer 10 to an article such as a document or a document file that is a paper medium, even if the document is not electronic information, the identity of the document creator or forgery of the document is obtained. Prevention can be managed electronically.

  In FIG. 1, the cryptographic token is illustrated as the IC card 11, but the IC card 11 is only an example of a cryptographic token, and may be a USB cryptographic token such as a USB key.

  From here, the IC card 11 and the label printer 10 constituting the label printing system 1 will be described in detail.

  First, the IC card 11 constituting the label printing system 1 will be described. FIG. 2 is a diagram for explaining the IC card 11.

  FIG. 2A is a diagram for explaining the hardware provided in the IC card 11. As shown in FIG. 2A, the IC card 11 has a CPU 11a (Central Processing Unit) as hardware. RAM 11c (Random Access Memory), ROM 11b (Read # Only Memory), UART 11e according to the transmission control protocol with the reader / writer 10c provided in the label printer 10, EEPROM 11d which is an electrically rewritable nonvolatile memory, The cryptographic operation coprocessor 11f, which is an arithmetic circuit specialized for the cryptographic algorithm, is provided.

  In the EEPROM 11d or the ROM 11b of the IC card 11, as a computer program for operating the IC card 11, authentication means (here, PIN) transmitted from an external device (here, the label printer 10) is verified. A collation command 110 that functions, and a label information generation command 111 that functions as a label information generation unit that generates label information with certification information from the label information seed received from the label printer 10 are implemented, and information used by these commands The reference information (in this case, the reference PIN) that the verification command 110 matches with the authentication information, the secret key used by the label information generation command 111 with certification information, the user ID of the user who owns the IC card 11, the user's User attribute information (for example, Name, department name), such as the issuer information of the IC card is stored in the EEPROM11d. Note that the user information (for example, address and name) of the user can be stored in the IC card 11 instead of the user attribute information of the user.

  In this embodiment, the collation command 110 provided in the IC card 11 executes a process of confirming that the PIN received from the label printer 10 matches the user's reference PIN stored in advance in the IC card 11. It is a command. The authentication information used for user authentication may be other than PIN. For example, when the user's biometric information is used for user authentication, the verification command 110 provided in the IC card 11 is a command for authenticating the biometric information. Thus, reference information corresponding to the biometric information is stored in the IC card 11, and the label printer 10 is provided with a sensor for reading the user's biometric information.

  In the present embodiment, the label information generation command 111 provided in the IC card 11 is sent to the memory of the IC card 11 (here, the EEPROM 11d) as the label information seed received from the external device (here, the label printer 10). The label information is generated by combining the memory information (here, the user ID, the user attribute information of the user and the issuer information of the IC card) stored in the IC card, and the secret key stored in the IC card 11 is used. A command that returns the label information with proof information, which is the label information to which the proof information is attached, to the external device (here, the label printer 10) after calculating the proof information of the label information by executing the cryptographic operation. 110 is a command set to be operable only when PIN verification succeeds. When the user information (for example, address, name) of the user is stored in the IC card 11 instead of the user attribute information of the user, the user information of the user is handled as memory information.

  As described above, the reason why the label information with the proof information of the label information is generated inside the IC card 11 is to enable the security label 2 to verify the correctness of the printed contents, and the secret stored in the IC card 11 If the cryptographic operation using the key is executed and the label information with the proof information of the label information is generated, the proof read from the security label 2 by using the encryption key that is paired with the secret key stored in the IC card 11 The validity of the certification information included in the label information with information can be verified.

  The secret key stored in the IC card 11 depends on the specification of the certification information generated by the label information generation command 11, and the IC card 11 is provided with a cryptographic operation coprocessor 11f adapted to the encryption algorithm of the secret key.

  The certification information generated by the label information generation command 11 may be a MAC (Message Authentication Code) or electronic signature. When the MAC is used as the certification information, the secret key stored in the IC card 11 is a common encryption method. (For example, DES). When an electronic signature is used as certification information, the secret key stored in the IC card 11 is a secret key of a public encryption method (for example, RSA).

  The label information included in the label information with proof information generated by the label information generation command 111 provided in the IC card 11 may be plain text, but it is difficult to understand that the label information with the proof information is printed. For this purpose, the label information can be encrypted with the secret key of the IC card 11, and the certification information of the ciphertext of the label information can be included in the label information with certification information attached to the ciphertext of the label information. When the ciphertext of the label information is included in the label information with proof information, the ciphertext of the label information is decrypted with an encryption key that is paired with the secret key of the IC card 11 and then included in the label information with proof information. What is necessary is just to verify the validity of proof information.

  Next, the label printer 10 constituting the label printing system 1 will be described. FIG. 3 is a diagram for explaining the label printer 10.

  FIG. 3A is a diagram for explaining hardware provided in the label printer 10. As shown in FIG. 3A, the label printer 10 is mounted with a CPU, a RAM, a ROM, and the like. When presenting information to a user, a computer board 10a, a reader / writer 10c for data communication with an IC card 11 possessed by the user of the label printer 10, a character input device 10b operated when the user inputs characters or numbers A display device 10d for use in printing, a clock circuit 10e for measuring time, and a printer 10f for use in printing the security label 2. In FIG. 1, the character input device 10b and the display device 10d are illustrated as being realized by a touch panel.

  The reader / writer 10c provided in the label printer 10 corresponds to the communication interface of the cryptographic token that the user possesses. If the cryptographic token is a contact IC card, the reader / writer 10c provided in the label printer 10 is a contact IC. If the cryptographic token is a contactless IC card, the reader / writer 10c provided in the label printer 10 becomes a reader / writer for the contactless IC card.

  Further, as the printer 10f provided in the label printer 10, it is common to use a printer having a structure in which information indicated on the roll-shaped original of the security label 2 is printed and then cut into the dimensions of the security label 2. It is.

  It should be noted that it is preferable to use an original film provided with an adhesive layer so that the security label 2 can be attached to the original film of the security label 2 attached to the printer 10f provided in the label printer 10. If you want to enhance the security of No. 2, if you print the optical mark or text on the security label 2 and then transfer the hologram layer, you can not only counterfeit the information printed on the security label 2, Forgery of the security label 2 medium itself can be prevented. In addition, in order to prevent forgery of the security label 2 medium itself, it is also possible to use an original fabric on which a forgery prevention measure has been applied, for example, by attaching a hologram in advance.

  FIG. 3B is a diagram for explaining functions provided in the label printer 10 by a computer program mounted on a computer board that controls hardware provided in the label printer 10. In the present embodiment, FIG. Uses the IC card 11 to authenticate the user, and causes the IC card 11 to generate label information with certification information and generates print information including the label information with certification information acquired from the IC card 11 Print information generating means 101 for controlling the printer, label issuing means 102 for issuing the security label 2 by printing the print information on the original side of the security label 2, and label information seed acquiring means for acquiring the label information seed 103 is provided.

  The specific contents of the label information seed acquisition unit 103 provided in the label printer 10 may be arbitrary. In this embodiment, the character input device 10b and the clock circuit 10e provided in the label printer 10 are connected to the label information seed acquisition unit 103. Information used and input by the character input device 10b and time information obtained from the clock circuit 10e are used as a label information seed.

  From here, each means with which the label printer 10 was equipped is demonstrated, describing operation | movement of the label printer 10. FIG. FIG. 4 is a flowchart for explaining the operation of the label printer 10.

  When the label printer 10 issues the security label 2, first, the user authentication means 100 of the label printer 10 displays a message for prompting input of authentication information (here, PIN) on the display device 10d, and the user inputs a character input device. The character string input to 10b is acquired as a PIN (S1). Then, a command message of the verification command 110 including the PIN acquired from the user is generated and transmitted to the IC card 11, and the IC card 11 is verified to authenticate the user of the label printer 10 (S2).

  The user authentication means 100 of the label printer 10 branches the process according to the user authentication result (S3). When the user authentication is successful, that is, when the response indicating the successful PIN verification is received from the IC card 11, the label authentication is performed. The label information seed obtaining unit 103 of the printer 10 is activated to proceed to the next step. Further, when the user authentication unit 100 of the label printer 10 fails in the user authentication, that is, when the response indicating the PIN verification failure is received from the IC card 11, the label authentication seed acquisition unit 103 of the label printer 10 is activated. Instead, the process returns to step S1 to execute the process of acquiring the PIN from the user.

  When the label information seed acquisition unit 103 of the label printer 10 is activated, a message prompting the user to input a character string related to the article (document, document file, etc.) to which the security label 2 is attached is displayed on the display device 10d, and the character input device 10b is used. In addition to the article information obtained from the character string input by the user, the print information generating means uses the time information obtained from the clock circuit 10e of the label printer 10 and the individual identification number stored in the label printer 10 as the label information seed. 101, the print information generation means 101 transmits a command message of a label information generation command 111 including a label information seed to the IC card 11, causes the IC card 11 to generate label information with certification information, and from the IC card 11. Obtain label information with certification information (S4)

  In the present embodiment, the print information generation unit 101 of the label printer 10 causes the user to input an article ID for identifying an article to which the security label 2 is to be attached, and generates article information by giving the article name to the article ID. . The character string itself input by the user using the character input device can be used as article information, or the user can input the name of the article and assign a serial number managed by the label printer 10. Article information may be generated.

  When the print information generating unit 101 of the label printer 10 acquires the label information with certification information from the IC card 11, the print information generation unit 101 executes processing for generating print information including the label information with certification information (S5).

  The print information generated by the print information generation means 101 of the label printer 10 preferably includes image data of an optical mark encoded with label information with certification information. The image data of the optical mark is used as print information. If included, the optical mark can be printed on the security label 2, and the optical mark (for example, a two-dimensional barcode) printed on the security label 2 is read by an optical recognition device (for example, a barcode reader). Thus, the label information with certification information encoded in the print information can be input to the computer side to which the optical recognition device is connected.

  The print information generated by the print information generating means 101 of the label printer 10 includes the label information included in the label information with certification information in addition to the optical mark image data encoded with the label information with certification information. Some or all of the text data may be included.

  By including part or all of the text data of the label information included in the label information with certification information in the print information, a person who has seen the article with the security label 2 visually inspects the contents of the security label 2 You can check with.

  If the label information included in the label information with certification information is encrypted, it is included in the label information with certification information using an encryption key that is paired with the secret key stored in the IC card 11. What is necessary is just to generate the text data included in the print information by decoding the label information.

  When the print information generating unit 101 of the label printer 10 generates the print information including the label information with the certification information, the label issuing unit 102 of the label printer 10 is operated to apply the security label 2 on which the print information is printed to the label issuing unit. 102 is issued (S6).

  When the label issuing means 102 of the label printer 10 issues the security label 2, the print information is delivered from the print information generating means 101 of the label printer 10, and the label issuing means 102 instructs the printer to print the print information. When the security label 2 on which the printing information is printed is issued and the security label 2 on which the printing information is printed is issued, this procedure ends.

  FIG. 5 is a diagram illustrating an example of the security label 2 issued in the present embodiment. On the left side of the security label 20 shown in FIG. 5A, an optical mark 20a (in this case, a two-dimensional barcode) encoded with label information with certification information is printed, and on the right side of the security label 2 Is printed with label information text 20b (here, article ID, time information, user ID) included in the label information with certification information.

  FIG. 5B illustrates an example of the use of the security label 2. The security label 20 illustrated in FIG. 5A is, for example, a company report 21 (in FIG. 5B, a business trip). Report) is used. For example, as shown in FIG. 5B, if the security label 2 is stamped 22 from above, the security label 2 can be prevented from being peeled off.

  Further, the optical mark (here, a two-dimensional barcode) printed on the security label 2 is read by an optical recognition device (for example, a barcode reader), and the IC card 11 is connected to the computer connected to the optical recognition device. By verifying the label information with proof information encoded in the optical mark using the encryption key that is paired with the secret key stored in, it is possible to prove that the person has correctly stamped 22.

  Note that the use of the security label 2 described with reference to FIG. 5B is merely an example, and the security label 2 issued by the label printer 10 can be affixed to the back cover of the document file, and can be used as a product to be distributed. By attaching security label 2, it can also be used for merchandise management. Further, the optical mark shown in FIG. 5A is merely an example, and the optical mark obtained by encoding the label information with certification information may be a one-dimensional barcode or a tint block pattern.

  The present invention is not limited to the embodiments described so far, and various modifications and changes can be made.

  For example, the label information seed is not limited to the information described above, and a device that functions as the label information seed acquisition unit 103 that acquires the label information seed can be provided in the label printer 10. For example, if the device is provided with a reader that reads a mark encoded with an ID or the like of an article to which the security label 2 is attached, the information encoded in the mark can be included in the label information seed.

  Marks encoded with the ID or the like of the article to which the security label 2 is attached include a one-dimensional or two-dimensional barcode, an optical mark such as a tint block, and artificial artifact metrics that have clone resistance (for example, , Irregularities on the surface of the paper), a dot pattern that is printed on a document to which the security label 2 is attached, such as Anoto paper, and the ID of the document is encoded.

  Further, in the above-described embodiment, the label printer 10 is not connected to the network. However, the label printer 10 may be provided with a network interface so that the label information seed is obtained from a computer connected to the network. .

  At this time, the label printer 10 establishes a TCP / IP connection with a computer connected to the network, and uses data received from the computer as a label information seed. The data to be transmitted from the computer to the label printer 10 includes the item information selected on the computer screen, the user information of the user who has logged into the computer (for example, the user name registered in the computer), The date and time can be considered.

  Further, the label printing system 1 described so far and the door gate can be made to cooperate.

  FIG. 6 is a configuration diagram of a label printing system that cooperates with a door gate. In the label printing system 3 shown in FIG. 6, a label printer 30 that issues a security label 4 to a room 5 in which entrance / exit is managed by a door gate 32 is provided. Has been placed.

  The door 320 of the room 5 is provided with a door gate 32 having a reader / writer 321 for data communication with the IC card 31 possessed by the user. A user who enters the room 5 inserts the IC card 31 into the reader / writer 321. When the user ID read from the IC card 31 is registered in advance in the door gate 32, the door gate 32 is installed in the room 5 in which the door gate 32 is installed. After the room information (for example, the room number) is written in the IC card 31, the door 320 is unlocked.

  The IC card 31 possessed by the user has the same function as the IC card 31 described in the embodiment, but includes the room information stored in the IC card 31 in the memory information when generating label information with certification information. Execute the process. The label printer 30 installed in the room 5 has the same function as the label printer 11 described in the embodiment. However, when the print information is generated in step S5 shown in FIG. A process of including the text data of the room information itself included in the label information or text data (for example, the name of the room) that can be determined from the room information is included in the print information.

  FIG. 7 is a diagram for explaining an example of the security label 40 issued by the label printing system cooperating with the door gate. On the left side of the security label 40 shown in FIG. 7, as in FIG. 5, an optical mark 40a (here, a two-dimensional barcode) encoded with label information with certification information is printed. On the right side of, the label information text 40b (here, the article ID, the user ID, the time information, and the room name) included in the label information with certification information is printed.

DESCRIPTION OF SYMBOLS 1,3 Label printing system 10,30 Label printer 100 User authentication means 101 Print information generation means 102 Label issuing means 11,31 IC card 110 Verification command 111 Label information generation command 2,4 Security label

Claims (16)

  The label information proof information is generated by combining the label information seed transmitted from the external device with a part of the memory information stored in the memory to generate the label information and performing the cryptographic operation using the secret key. After the calculation, the cryptographic information token provided with label information generating means with proof information that returns the label information with proof information that is the label information to which the proof information is attached to the external device, and the label information seed is transmitted, A print information generating means for generating print information of the label information with certification information obtained from the cryptographic token; and a label printer comprising a label issuing means for issuing a security label by instructing the printer to print the print information; A label printing system comprising at least   2. The label printing system according to claim 1, wherein the print information generating means of the label printer includes image data of an optical mark obtained by encoding the label information with certification information in the print information.   The print information generation means of the label printer includes part or all of the text data of the label information included in the label information with certification information in the print information. Label printing system.   The proof information generation means of the cryptographic token is a means for calculating the proof information of the ciphertext of the label information after encrypting the label information with the secret key, and the print information generation means of the label printer is A text to be included in the print information is generated by decrypting a ciphertext of the label information included in the label information with certification information using an encryption key paired with the secret key. 4. The label printing system according to 3.   The cryptographic token includes verification means for verifying authentication information of the user of the label printer and reference information stored in the cryptographic token, and the label printer uses the authentication information acquired from the user as the cryptographic token. 5. The apparatus according to claim 1, further comprising: a user authentication unit that authenticates the user by collating with the security label, and the security label can be issued only when the user authentication is successful. The label printing system according to any one of the above.   The label printing system according to claim 1, wherein the label printer includes a label information seed acquisition unit that acquires information used as the label information seed.   The label printing system according to claim 6, wherein the label printer includes a character input device as the label information seed acquisition unit, and uses information input to the character input device as the label information seed. .   The label according to claim 6 or 7, wherein the label printer includes a clock circuit as the label information seed acquisition means, and uses time information acquired from the clock circuit as the label information seed. Printing system.   The label printer includes, as the label information seed acquisition unit, a memory that stores an individual identification number of the label printer, and uses the fixed identification number acquired from the memory as the label information seed. The label printing system according to any one of claims 6 to 8.   The label printer includes a reader for reading a mark encoded with information used as the label information seed as the label information seed acquisition unit, and information obtained by decoding the mark read by the reader is used as the label information. The label printing system according to claim 6, wherein the label printing system is used as a seed.   11. The label printer according to claim 6, wherein the label printer includes a network interface as the label information seed acquisition unit, and uses information received from a device connected to a network as the label information seed. The label printing system as described in one.   12. The proof information generation means for the cryptographic token includes the identification information of the user stored in the memory of the cryptographic token in the memory information. Label printing system described in one.   The proof information generation means for the cryptographic token includes user attribute information of the user stored in a memory of the cryptographic token in the memory information. The label printing system according to one.   The proof information generation means for the cryptographic token includes the user information of the user stored in the memory of the cryptographic token in the memory information. Label printing system described in one.   15. The proof information generation unit for the cryptographic token includes issuer information of the cryptographic token stored in the memory of the cryptographic token in the memory information. The label printing system as described in one. The label printing system manages entry / exit to a room where the label printer is installed using the cryptographic token, and the room of the room is stored in the memory of the cryptographic token possessed by the user who enters the room. The door gate for writing information is included, and the proof information generation unit of the cryptographic token includes the room information in the memory information. Label printing system.

Images