JP4032358B2 - RFID authentication system, RFID authentication method, and program therefor - Google Patents

Description

  The present invention relates to a security method that can be used without being aware of the security function during normal use while maintaining high security against unauthorized use during loss or theft, and an RFID tag system using the security method About.

  An RFID tag (Radio Frequencey IDentification TAG) incorporates an ID number or identification information equivalent to it in an integrated circuit, and reads the information from outside by wireless means.

One of the uses of the RFID tag is an application to a security system.
This is because the RFID tag and the security system communicate with each other when necessary, and the target RFID tag, the person carrying the RFID tag, or the RFID tag is attached based on the ID code obtained from the RFID tag by the communication This is to prove the legitimacy of the goods.

  As this conventional example, there exist some which were described in Unexamined-Japanese-Patent No. 2000-214942 (patent document 1) and Unexamined-Japanese-Patent No. 2001-283171 (patent document 2), for example.

  Japanese Patent Laid-Open No. 2000-214942 (Patent Document 1) describes a case where a device (security device such as an RFID tag) responsible for a part of a security function removable from a computer body is illegally removed. The purpose is to provide a technology that prohibits access to the computer. For this purpose, the fact that the security device is once installed is stored in the non-volatile memory and triggered by an event such as power-on. Monitoring or monitoring at regular intervals, referring to the non-volatile memory, and detecting that the security device is once attached to the computer and then removed (authentication ID from an RFID tag or other security device is detected) If this is not possible, it is determined to be unauthorized use and access to the computer is prohibited. Are those was, this way, to prevent unauthorized access by a person there is no legitimate use rights.

  Japanese Patent Laid-Open No. 2001-283171 (Patent Document 2) describes a non-contact type IC card that is widely used for office security systems, entrance / exit of housing complexes, and personal confirmation of cash cards ( An object of the present invention is to provide an RFID tag device capable of preventing the danger of being used while the RFID tag) is lost or stolen and is inactivated by contacting the management company. Therefore, using the first authentication RFID tag and the second authentication RFID tag, reading from the security system reader (interrogator) to the first authentication RFID was started. As a result, communication is performed between the first authentication RFID tag and the second authentication RFID tag, and security is established when authentication is established between the two RFID tags. Performs reply to reader system, so that to establish authentication. In this configuration, if a pair of RFIDs do not exist at the same time, authentication is not established, so that the lost or stolen RFID tag can be prevented from being used illegally.

JP 2000-214942 A JP 2001-283171 A

  In recent years, functions such as electronic money, credit cards, identification cards, commuter passes, and the like have been integrated into one electronic card one after another, and user convenience has been improved. On the other hand, since many financial functions are integrated, there is a concern that the damage caused by unauthorized use of illegally acquired cards will be serious, and a reliable authentication function is required.

  On the other hand, multi-functionalization of an electronic card means that the frequency with which one electronic card is used increases, and therefore, an authentication method that does not burden the user is required.

  An authentication method using an RFID tag for authentication, such as the above-mentioned Japanese Patent Application Laid-Open No. 2000-214942 (Patent Document 1) and Japanese Patent Application Laid-Open No. 2001-283171 (Patent Document 2), does not place a burden on the user. The above-mentioned needs are met in that it can be prohibited from unauthorized use when lost or stolen.

  However, the multi-functionalization of the electronic card also brings about diversification of scenes to be used. This is particularly true when two RFID tags such as JP-A-2001-283171 (Patent Document 2) are used. There were frequent cases where the authentication was not successful, and there were cases where it became an obstacle to use.

  For example, in the case of a commuter pass that employs a method using two RFID tags (an RFID tag for authentication and an RFID tag that becomes a commuter pass) as described in Japanese Patent Laid-Open No. 2001-283171 (Patent Document 2) An RFID tag commuter pass is inserted into an automatic ticket vending machine made of a metal casing. At this point, the metal casing acts as a shield, communication with the authentication RFID tag is not established, and the commuter pass cannot be used. The following problem arises.

  In addition, when paying with a credit card when paying at a restaurant, the customer generally deposits an RFID tag credit card with the employee while sitting at his / her own seat, but the employee of the restaurant holds the credit card. As soon as we went to the cashier, there was a problem that the credit card held by the employee and the RFID tag for authentication held by the customer were separated and communication was interrupted, making the credit card unusable.

  Therefore, in the above case, even when the communication between the RFID tag type commuter pass or credit card and the authentication RFID tag is long and communication is interrupted, the RFID tag is used only for a period that does not cause a security problem. There has been a demand for an invention that enables the use of tag-type commuter passes and credit cards.

  Further, in a system such as Japanese Patent Laid-Open No. 2001-283171 (Patent Document 2), a function for exciting or starting an authentication RFID tag on a credit card or a commuter pass to which the system is applied is necessary. This means that transmission from an RFID tag such as a credit card or commuter pass needs to be performed with large transmission power, and it is difficult to implement a power supply and transmission function for this purpose in the card. There was a problem.

  For this reason, there has been a demand for an invention that eliminates the function of exciting or activating the authentication RFID on the RFID tag credit card or commuter pass side.

  Therefore, the present invention solves the above-described problems and does not cause security inconvenience even when communication between the RFID tag type commuter pass or credit card and the authentication RFID tag is long and communication is interrupted. RFID tag-type commuter passes and credit cards can be used only for a certain period, and the RFID tag-type credit card and commuter pass have an authentication-dedicated tag that does not require a function to excite or activate authentication RFID. Another object of the present invention is to provide an RFID tag authentication system, an RFID tag authentication method, and an RFID tag authentication program therefor.

  In order to achieve the above object, the present invention uses the following means. First, an outline will be described.

  In the present invention, a user carries a unit using an authentication RFID tag (authentication RFID unit) simultaneously with an RFID tag type card (RFID card) such as a credit card or a commuter pass to be used. The RFID tag such as the credit card or commuter pass is inquired from the authentication RFID tag at regular time intervals (for example, every 1 minute), the RFID card such as the credit card or commuter pass is activated, and authentication is performed by mutual communication. Establish.

  After the authentication is established, the RFID card side such as a credit card or commuter pass keeps the state where the authentication is established for a certain time (for example, several minutes). While the authentication is established, an RFID card such as a credit card or commuter pass operates as a normal RFID card.

  However, if an RFID card such as a credit card or commuter pass leaves the user due to loss or theft and communication with the authentication RFID is lost, the authentication establishment state will be lost after a few minutes, and the credit card, commuter pass, etc. The RFID card is automatically disabled.

  When the authentication establishment state is lost, it is convenient to make it possible to return to the authentication establishment state (valid state) temporarily for a certain period by inputting the personal identification number and to use it.

  The above technical idea of the present invention can also be applied to a mobile phone. When the authentication establishment state is lost, some or all of the functions of the mobile phone are invalidated, and the invalidation is performed by inputting a personal identification number. May be canceled.

Hereinafter, the configuration of the present invention for achieving the above object will be described in detail.
(1) An RFID tag authentication system according to the present invention includes an RFID card reader / writer, an RFID card, and an authentication RFID tag. The RFID card includes a means for receiving a command from the RFID reader / writer, and at least the card. Data storage means for holding card data including an ID and an authentication ID associated with the card ID, and an authentication state timer means for measuring the time after being pulled away from the authentication RFID tag to a distance where communication is impossible And an authentication ID received from the authentication RFID tag at a fixed time interval measured by an authentication interval control timer means to be described later , and the received authentication ID and the authentication ID held in the data storage means are collated. thereby determining valid authentication state when Te appropriate, after the authentication state is determined to be valid, RFID tag for authentication Communication is determined that the valid period the authentication status from becoming impossible until a certain period of time is measured by the authentication state timer means, after determining the authentication status is valid, communicates with the authentication RFID tag not An authentication state determination unit that determines that the authentication state is invalid after a certain period of time has elapsed since it has become possible, and that determines that the authentication state is valid again when approaching a distance capable of communicating with the authentication RFID tag; and the authentication state determination unit When the authentication state is determined to be valid, the data storage means has transmission means for transmitting data including at least the card ID to the RFID card reader / writer, and the authentication RFID tag is held A means for transmitting the authentication ID, and an authentication interval control timer means for controlling the timing for performing authentication at regular time intervals .

(2) An RFID tag authentication system using an RFID card reader / writer, an RFID card, and an authentication RFID tag, wherein the RFID card includes a means for receiving a command from the RFID reader / writer, at least a card ID, and Data storage means for holding card data including an authentication ID associated with the card ID, and an authentication state timer means for measuring a time after being separated from the authentication RFID tag to a distance where communication is impossible, A card ID is transmitted to the authentication RFID tag at a fixed time interval measured by an authentication interval control timer means described later, the authentication ID is received from the authentication RFID tag, and the received authentication ID and data are stored in the data storage means. The authentication status is determined to be valid if it is valid by comparing it with the stored authentication ID, and the authentication status After is determined to be valid, authenticates the length of time as a impossible communicate with authentication RFID tag until a certain period of time is measured by the authentication state timer means state is determined to be valid, the authentication status is valid After the determination, the authentication state is determined to be invalid after a certain period of time has passed since communication with the authentication RFID tag has become impossible. determining an authentication state judging means, if the authentication condition is determined to be valid by the authentication state determining means, transmitting means for transmitting data including at least card ID stored in the data storage unit in the RFID card reader / writer has, RFID tag for authentication, means for storing relationships of the card ID and the authentication ID, by referring to the section, corresponding to the card ID received from the RFID card It means for extracting and transmitting authentication ID that has an authentication interval control timer means for controlling the timing of performing authentication at regular time intervals.

(3) Further, one or both of the RFID card and the authentication RFID tag have a power source, and when one of them has no power source, power is supplied from the side having the power source. .

(4) An RFID tag authentication system using an RFID card reader / writer, a mobile phone, and an authentication RFID tag, and the mobile phone receives a command from the mobile phone means and the RFID reader / writer. A data storage means for holding card data including at least a card ID and an authentication ID associated with the card ID, an authentication interval control timer means for controlling the timing of performing authentication at regular time intervals, and authentication An authentication state timer means for measuring the time since the RFID tag was separated from the communication RFID tag, and an authentication ID from the authentication RFID tag at a fixed time interval measured by the authentication interval control timer means. And verifying the received authentication ID with the authentication ID held in the data storage means Thereby determining valid authentication state when those of, after the authentication state is determined to be valid, since they are no longer communicate with authentication RFID tag until after a period of time measured by the authentication state timer means The authentication status is determined to be valid, the authentication status is determined to be valid, the authentication status is determined to be invalid after a certain period of time has elapsed after communication with the authentication RFID tag is disabled, and further authentication An authentication state determination unit that determines that it is valid again when approaching a distance that can communicate with the RFID tag, and at least a card that is held in the data storage unit when the authentication state is determined to be valid by the authentication state determination unit It has a transmission means which transmits the data containing ID to the said RFID card reader / writer, and the RFID tag for authentication has a means which transmits ID for authentication currently hold | maintained.

(5) An RFID tag authentication system using an RFID card reader / writer, a mobile phone, and an authentication RFID tag, the mobile phone receiving mobile phone means and who command from the RFID reader / writer Data storage means for holding card data including at least a card ID and an authentication ID associated with the card ID, and an authentication interval control timer means for controlling the timing of authentication at a constant time interval, An authentication status timer means for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible, and an authentication RFID tag at a fixed time interval measured by the authentication interval control timer means The authentication ID is received from the authentication RFID tag, and the received authentication ID and data are received. Thereby determining valid authentication state when by matching the authentication ID stored in storage means reasonable, after the authentication state is determined to be valid, after becoming impossible communicate with authentication RFID tags After a certain period of time measured by the authentication state timer means, the authentication state is determined to be valid, and after the authentication state is determined to be valid, a certain period of time has passed since communication with the authentication RFID tag became impossible After that, the authentication state is determined to be invalid, and further, the authentication state determination unit determines that the authentication state is valid again when approaching a distance that can be communicated with the authentication RFID tag, and the authentication state determination unit determines that the authentication state is valid. The data storage means has at least a transmission means for transmitting data including the card ID to the RFID card reader / writer. A means for storing relationships of the authentication ID, by referring to the means, the means for extracting and transmitting authentication ID corresponding to the card ID received from the mobile phone.

(6) Further, the portable phone has a power source, and power is supplied from the power source to an RFID tag having no power source.

(7) Further, when the authentication state is invalid, a part or all of the cellular phone functions determined by the setting are invalidated.

(8) Further, the mobile phone function has a personal identification number input means for inputting a personal identification number, and is invalidated when a predetermined valid personal identification number is inputted from the personal identification number input means when the authentication state is invalid Means for enabling a part or all of the functions for a certain period.

(9) Further, the data storage means holds one or more authentication IDs, and the valid case is one or more authentications in which the authentication ID received from the authentication RFID tag is held in the data storage means. It is a case where it corresponds with business ID.

(10) Furthermore, the data storage means holds an authentication ID upper limit value and an authentication ID lower limit value. In the appropriate case, the authentication ID received from the authentication RFID tag is stored in the data storage means. It is characterized by being between the upper limit value for authentication ID and the lower limit value for authentication ID.

(11) Further, the personal identification number input means for inputting the personal identification number is provided, and when the predetermined valid personal identification number is inputted from the personal identification number input means when the authentication state is invalid, the authentication state is changed only for a certain period. It has the means to validate, It is characterized by the above-mentioned.

(12) An RFID tag authentication method according to the present invention is an RFID tag authentication method using an RFID card reader / writer, an RFID card, and an authentication RFID tag, and the RFID card receives commands from the RFID reader / writer. The step of receiving, the step of holding the card data including at least the card ID and the authentication ID associated with the card ID in the data storage means, and the authentication ID held by the authentication RFID tag At a predetermined time interval measured by an authentication interval control timer means, and the RFID card receives an authentication ID from the authentication RFID tag, and the received authentication ID and the data storage means While validating the authentication ID that is held and determining that the authentication status is valid when valid After the authentication state is determined to be valid, the length of time as a impossible communicate with the authentication RFID tag until after a period of time measured by said authentication state timer means authentication state are judged to be valid, authentication after the state is determined to be valid, the authentication become RFID tag and communication is not possible the predetermined period elapsed authentication state after it is determined to be invalid from the further the communicable distance with authentication RFID tags An authentication state determination step for determining again valid when approaching, and when the authentication state is determined to be valid in the authentication state determination step, data including at least a card ID held in the data storage means A transmitting step of transmitting to the card reader / writer.

(13) An RFID tag authentication method using an RFID card reader / writer, an RFID card, and an authentication RFID tag, in which the RFID card receives a command of who from the RFID reader / writer, and at least a card ID and The step of holding card data including the authentication ID associated with the card ID in the data storage means, and the RFID card stores the card ID in the authentication RFID tag at a fixed time interval measured by the authentication interval control timer means. A step of transmitting, a step of extracting and transmitting an authentication ID corresponding to the card ID received from the RFID card with reference to the correspondence relationship between the card ID and the authentication ID held by the authentication RFID tag; Authentication ID and data storage means received by RFID card from RFID tag for authentication Thereby determining valid authentication state when the authentication ID held reasonable by matching, after the authentication state is determined to be valid, the authentication after becoming impossible communicate with authentication RFID tag state timer After a certain period of time has elapsed since it was determined that the authentication status is valid and the authentication status is valid, and the communication with the authentication RFID tag is impossible. An authentication state determination step that determines that the authentication state is invalid and that the RFID card is valid again when approaching a distance that allows communication with the authentication RFID tag, and that the RFID card determines that the authentication state is valid in the authentication state determination step If it is, the data storing means has a transmitting step of transmitting data including at least the card ID to the RFID card reader / writer.

(14) Card data including an RFID card reader / writer, mobile phone means, means for receiving a command from the RFID reader / writer, at least a card ID and an authentication ID associated with the card ID Data storage means to be held , authentication interval control timer means for controlling the timing of authentication at regular time intervals, and an authentication state for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible An RFID tag authentication method using a mobile phone having a timer means and an authentication RFID tag , wherein an authentication ID held by the authentication RFID tag is measured by the authentication interval control timer means. transmitting at a time interval, the mobile phone, the authentication ID from the authentication RFID tags Receiving, while determined to be valid authentication state when the authentication ID thus received the data storage means appropriate by matching the authentication ID held in, after the authentication state is determined to be valid, authentication the length of time as a impossible communicates with use RFID tags to a certain period of time measured by the authentication state timer means determines authentication state effective, after the authentication state is determined to be valid, the RFID tag for authentication An authentication state determination step that determines that the authentication state is invalid after a certain period of time has elapsed since communication is impossible, and determines that the authentication state is valid again when approaching a distance that allows communication with the authentication RFID tag ; When the authentication status is determined to be valid in the authentication status determination step, the data including at least the card ID held in the data storage means is stored in the RFID card reader / writer. A transmitting step of signal to.

(15) Card data including an RFID card reader / writer, mobile phone means, means for receiving a command from the RFID reader / writer, at least a card ID and an authentication ID associated with the card ID Data storage means to be held , authentication interval control timer means for controlling the timing of authentication at regular time intervals, and an authentication state for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible An RFID tag authentication method using a mobile phone having a timer means and an authentication RFID tag, wherein the mobile phone measures the card ID held in the data storage means by the authentication interval control timer means. transmitting the authentication RFID tags at predetermined time intervals that, RFID data authentication Refers to the correspondence between the held card ID and the authentication ID, extracts and transmits the authentication ID corresponding to the card ID received from the mobile phone, and the mobile phone When the authentication ID is received from the tag and the received authentication ID is compared with the authentication ID held in the data storage means to determine that the authentication state is valid and the authentication state is determined to be valid. Then, after the communication with the authentication RFID tag is impossible, it is determined that the authentication state is valid for a certain period of time measured by the authentication state timer means, and after the authentication state is determined to be valid, authenticate after a certain period has elapsed from when the impossible communication with authentication RFID tag state is determined to be invalid, to determine re-enabled and when approaching more communicable distance and authentication RFID tags Having an authentication state determination step, if the authentication state authentication state determining step is determined to be valid, a transmission step of transmitting data including at least card ID stored in the data storage unit in the RFID card reader / writer .

(16) An RFID tag authentication program according to the present invention is an RFID tag authentication program for realizing an RFID tag authentication system using an RFID card reader / writer, an RFID card, and an authentication RFID tag. An RFID tag authentication program for executing processing of each step in the RFID tag authentication method.

  According to the present invention, an authentication function that is automatically controlled can be realized by adding an authentication RFID unit using an authentication RFID tag, and the user can perform a troublesome authentication operation while maintaining high security performance. There is an effect that an RFID commuter pass can be inserted into an automatic ticket vending machine without being bothered and prepaid points are charged, and an RFID credit card can be deposited with a store clerk at the time of payment.

  In addition, since all of these automatically performed authentication functions are closed on the RFID card side such as credit cards and commuter passes, the facilities of commuter pass gates and credit card companies that read RFID cards such as credit cards and commuter passes are not There is also an effect that conventional RFID equipment can be used as it is. This authentication function is also effective for controlling the mobile phone function (preventing unauthorized use).

  Even if the authentication state is invalid, it can be changed to valid for a certain period by inputting the personal identification number, so that the usability is further improved.

  Embodiments of an RFID tag authentication system and an RFID tag authentication method according to the present invention will be described below in detail with reference to FIGS.

(First embodiment)
FIG. 1 is a diagram showing a configuration of an authentication system using two RFID tags according to the present embodiment.

  As shown in the figure, the authentication system according to the present embodiment includes two RFID tags (in this embodiment, for convenience, one RFID tag is “RFID card 111 such as a credit card or commuter pass”, and the other An example using “authentication RFID tag 101”) as an RFID tag will be described.

  As shown in FIG. 1, an RFID card 111 such as a credit card or commuter pass is used for communication with a reader / writer 113 of an external system 112 that uses data from the RFID card 111 such as the credit card or commuter pass. An RFID card wireless communication unit 110, an authentication state timer unit 109 for maintaining an authentication state for a predetermined time, an authentication state determination unit 108 for determining an authentication state with reference to the authentication state timer unit 109, and the external system 112 A data storage unit 107 for storing data used for communication, and an RFID card control unit 106 for controlling the operation of each unit.

  Further, the authentication RFID tag 101 transmits power to the RFID card 111 such as a credit card or a commuter pass to be activated, and the RFID wireless communication & excitation unit 104 for performing communication with each other and the timing for performing authentication at regular time intervals An authentication interval control timer unit 105 that controls the authentication, an authentication unit 102 that performs authentication with an RFID card 111 such as a credit card or a commuter pass, and an authentication RFID tag control unit 103 that controls the units.

  Although not shown, the RFID card 111 includes a CPU, a memory, an antenna, and the like. The RFID card wireless communication unit 110, the authentication state timer unit 109, the authentication state determination unit 108, the data storage unit 107, the RFID card The control unit 106 implements the corresponding function by reading a program corresponding to the function of each unit into the memory and executing the program by the CPU. A memory may be provided for each unit, or one memory may be divided into areas for each unit.

  Similarly, the authentication RFID tag 101 includes a CPU, a memory, an antenna, etc. (not shown). The RFID wireless communication & excitation unit 104, the authentication interval control timer unit 105, the authentication unit 102, and the authentication RFID tag control. The unit 103 implements the corresponding function by reading a program corresponding to the function of each unit into the memory and executing the program by the CPU. A memory may be provided for each unit, or one memory may be divided into areas for each unit.

  FIG. 12 is a diagram showing an example of data stored in the data storage unit 107 of the RFID card 111 in the case of a credit card.

  In this example, the data stored in the data storage unit 107 includes a card ID 124 and an authentication in addition to information held by a conventional credit card such as a credit card number 121, a credit card expiration date 122, and a credit card owner name 123. It has ID125.

  FIG. 2 is a diagram showing a sequence controlled by the RFID card control unit 106 for communication between the RFID card 111 such as a credit card or commuter pass according to the present invention and the reader / writer 113 of the external system 112. .

  In FIG. 2, when a who and what command is received from the reader / writer 113 of the external system 112 (step ST 21), the RFID card control unit 106 causes the authentication state determination unit 108 to execute an authentication state (ie, valid state). Or invalid state) is confirmed (step ST22).

  Here, when it is determined that the authentication state is “valid”, for example, data such as the credit card number 121 stored in the data storage unit 107 shown in FIG. 12 is transmitted to the reader / writer of the external system 112. 113. The authentication status is determined to be “valid” when the RFID card 111 such as a credit card or a commuter pass and the authentication RFID tag 101 are within a communicable distance or after being separated to a non-communicatable distance (for a certain time ( This is a settable value, for example, a period until 5 minutes elapses.

  When it is determined that the authentication state is “invalid”, data is not transmitted to the reader / writer 113 of the external system 112. The authentication status is determined to be “invalid” for a certain period of time after the RFID card 111 such as a credit card or commuter pass and the authentication RFID tag 101 are separated to a distance where communication is impossible (this is a settable value). For example, after 5 minutes).

  The RFID card 111 and the authentication RFID tag 101 may be separated from each other, for example, when one of the RFIDs is lost or stolen. For this reason, the authentication state is determined to be “invalid” after a predetermined time (for example, 5 minutes) has elapsed since the distance between the communication is impossible.

  FIG. 3 is a diagram showing a sequence in which the RFID card control unit 106 of the RFID card 111 such as a credit card or a commuter pass sets an authentication state.

  When the RFID card wireless communication unit 110 of the RFID card 111 such as a credit card or commuter pass receives an authentication start command from the authentication RFID tag 101 (step ST31), the card ID 124 stored in the data storage unit 107 of the own card is used. Transmit (step ST32).

  In the authentication RFID tag 101, a card ID and an authentication ID are registered in association with each other, and the transmitted card ID is confirmed to be a valid ID (registered card ID) on the authentication RFID tag 101 side. And the authentication ID stored in association with each other and an authentication set command.

  The RFID card 111 such as a credit card or commuter pass receives the authentication ID (step ST33).

  Next, when the RFID card 111 such as a credit card or commuter pass receives the authentication set command (step ST34), it is checked whether the authentication ID received in step ST33 matches the authentication ID 125 held in the data storage unit 107. Confirmation is made (step ST35), and if they match, it is determined that the authentication ID is valid and "authentication ID is valid" (step ST35: Y), and the timer of the authentication state timer unit 109 is set (step ST36).

  The above authentication sequence is a simple method for periodically sending out an authentication ID from the authentication RFID tag 101 side and determining only whether or not it matches the authentication ID 125 (see FIG. 12) in the data storage unit 107 of the RFID card 111. It may be anything.

  In this case, a plurality of authentication IDs may be prepared on the RFID card 111 side so that authentication set commands from a plurality of authentication RFID tags can be received. For example, one authentication ID can be used as a common authentication ID for RFID cards in a certain field, and another authentication ID can be used as a common authentication ID for RFID cards in other fields. it can.

  FIG. 13 is a diagram illustrating an example of the data storage unit 107 that stores two authentication IDs.

  In the case of this example, the data stored in the data storage unit 107 includes a card ID 131, a credit card number 121, a credit card expiration date 122, a credit card owner name 123, and other information held by a conventional credit card. It has a first authentication ID 132 and a second authentication ID 133.

  Then, the authentication ID sent from the authentication RFID tag 101 side is collated with the first authentication ID 132 and the second authentication ID 133 stored in the data storage unit 107, and the authentication ID sent from the authentication RFID tag 101 side. Is matched with either the first authentication ID 132 or the second authentication ID 133 (or both), the authentication state timer is set.

  This authentication ID may be used as a condition for determining a range between the upper limit value and the lower limit value, even if the condition does not necessarily match. FIG. 14 is a diagram illustrating an example of the data storage unit 107 that stores an authentication ID upper limit value and an authentication ID lower limit value.

  In the case of this example, the data stored in the data storage unit 107 includes a card ID 141, an authentication, in addition to information held by a conventional credit card such as a credit card number 121, a credit card expiration date 122, and a credit card owner name 123. It has an ID upper limit 142 and an authentication ID lower limit 143.

  In this example, an authentication ID upper limit value 142 and an authentication ID lower limit value 143 are stored in the data storage unit 107, and an authentication status timer is set when an authentication ID between both ID values is received from the authentication RFID tag 101 side. It was made to do.

  When the authentication state timer is set, it starts measuring elapsed time, and resets the authentication state to “invalid” after a predetermined time (for example, T) has elapsed.

  Communication with the authentication RFID tag 101 is performed for a certain time (for example, T) from when the authentication state timer is set and the authentication state is “valid” to when the authentication state is reset and the authentication state is set to “invalid”. Even if the password is lost, the authentication status remains “valid”. By using this, it is possible to insert a commuter pass into an automatic ticket vending machine, deposit a credit card with an employee of a store or restaurant, and perform a charging procedure for a credit account.

  It should be noted that the measurement of a fixed time (for example, T) for resetting the authentication state to return to the “invalid” state after the predetermined time has elapsed may use an operation as a timer counter or may be charged to a capacitor. It is also possible to use a (natural) discharge of a different charge. In the latter case, since the process is automatically performed even when the RFID card 111 such as a credit card or a commuter pass is not activated, this method is suitable for a passive RFID card.

  One of the RFID card and the authentication RFID tag may have a power source, and power may be supplied from the side having the power source to the side not having the power source. In addition, if both the RFID card 111 and the authentication RFID tag 101 have a built-in power supply and both are made active, it is not necessary to excite the other during updating (in this case, a large amount of power is required). There is an advantage that can be downsized.

  On the other hand, on the authentication RFID tag 101 side, it is necessary to measure the time interval for transmitting the authentication start command. The time interval for transmitting the authentication start command is set to be sufficiently shorter than the “valid” holding time measured by the authentication timer (for example, several seconds to 10 seconds). This is to prevent the remaining “valid” holding time from fluctuating greatly depending on the timing at which the contact between both RFIDs is lost, and to restore the “valid” state as soon as possible when the contact is restored. It is.

FIG. 4 is a diagram showing a sequence on the authentication RFID tag 101 side.
In the figure, the authentication RFID tag control unit 103 of the authentication RFID tag 101 monitors the elapsed time since sending the previous authentication start command, and when a set time (for example, 10 seconds) has passed (step ST41: Y). ), The authentication start command is transmitted again (step ST42).

  As a response to this authentication start command, the card ID sent from the RFID card 111 such as a credit card or commuter pass is received (step ST43). When it is confirmed that the received card ID is a regular ID registered in the authentication RFID tag 101 (step ST44: Y), an authentication set command is transmitted (step ST45), and further, the card ID The authentication ID associated with is transmitted (step ST46).

  Here, the reason why the card ID transmitted from the RFID card 111 such as a credit card or commuter pass and the authentication ID transmitted from the authentication RFID tag 101 are different IDs is that a malicious third party credits the card or the commuter pass. This is to prevent the card ID transmitted by the RFID card 111 from being stolen and misused. If there is no fear of misuse, the same ID can be used. In this case, the configuration of the authentication RFID tag 101 and the like is simplified.

  FIG. 5 is a diagram showing an image of the transition of the authentication state in the RFID card 111 such as a credit card or a commuter pass with respect to the elapsed time.

  An authentication set command (51) issued from the authentication RFID tag 101 is indicated by a circle, and a state in which the authentication state of the RFID card 111 such as a credit card or a commuter pass is “valid” is indicated by a bold line (52).

  While the authentication set command is issued at a constant interval t (57), the authentication status is “valid” updated and held at a constant interval t (57). The update stops when the contact between both RFIDs is lost (53), but the "valid" state is maintained (54) for a set time T (58). After the set time T elapses, the authentication state becomes “invalid”. When the contact between both RFIDs is restored again (55), the authentication state is restored to "valid" (56).

(Second embodiment)
Next, a second embodiment of another aspect of the present invention will be described.
Mobile phones and PHS (Personal Handyphone System) that are currently being put to practical use incorporate an RFID tag function in the mobile phone and PHS itself, and realize functions such as credit cards and commuter passes in the mobile phone and PHS itself. is there. Hereinafter, the mobile phone and the PHS are collectively referred to as a mobile phone.

  Such a further accumulation of functions means that the effects at the time of loss or theft become more serious, and it is essential to improve security by applying the present invention.

  When the present invention is applied to a portable telephone having an ample power supply and a sufficient transmission function for output, the present invention is applied to a passive RFID card such as the credit card or commuter pass of the first embodiment. In contrast to this, an active RFID card can be used.

  FIG. 6 is a diagram showing a second embodiment using an active RFID card.

  As shown in the figure, the mobile phone 601 having an RFID card function such as a credit card or a commuter pass in the present embodiment is similar to the configuration of FIG. An RFID card wireless communication unit 110 for communicating with the RFID card reader / writer 113 of the external system 112 that uses data from the RFID card function of the device, an authentication state timer unit 109 for holding the authentication state for a certain period of time, An authentication state determination unit 108 that determines an authentication state with reference to the authentication state timer unit 109, a data storage unit 107 that stores data for interacting with the external system 112 and the authentication RFID tag 101, and each of them RFID card control unit that controls the operation of the unit With the door 106.

  The configuration shown in FIG. 1 assuming a passive RFID card is different from the configuration of FIG. 1 in that an authentication interval control timer unit 205 that controls the timing of authentication at a certain time interval and an authentication RFID tag 101 are activated by transmitting power to each other. An RFID wireless communication & excitation unit 204 for performing communication and a mobile phone unit 602 which is an original function of the mobile phone are newly provided. The mobile phone unit 602 has a sufficient power supply and output transmission function.

  For this reason, the configuration of the authentication RFID tag 101 is simplified, the authentication interval control timer unit 105 that requires power shown in FIG. 1 is unnecessary, and the RFID wireless communication & excitation unit 104 is authenticated without the excitation function. The RFID wireless communication unit 603 can be replaced with a passive RFID tag. This is useful for reducing the size and thickness of the authentication RFID tag 101 and freeing it from maintenance.

  For this reason, the authentication RFID tag 101 can be embedded in the body, and in this case, there is no fear of losing the authentication RFID tag, and reliable authentication can be realized. Even in other cases, the authentication RFID tag 101 can be incorporated in a small item such as a ring or a wristwatch, and the possibility of loss can be greatly reduced.

  The authentication mechanism described above can also be applied to control of mobile phone functions (prevention of unauthorized use). FIG. 7 is a diagram showing a sequence when the above authentication mechanism is applied to control of the mobile phone function (prevention of unauthorized use).

  In the figure, when an operation on the mobile phone (pressing the button of the mobile phone) occurs (step ST71), it is confirmed whether the authentication status is “valid” by the same procedure as in the first embodiment. If it is “valid” (step ST72), the operation of the portable telephone is permitted (step ST73). If the authentication state is “invalid”, the operation of the mobile phone is not permitted and the process is terminated as it is (step ST74).

  The functions of the mobile phone can be stopped by stopping all functions, stopping only a part of functions (stopping operation functions as described above, stopping only functions selected by the user, stopping functions other than standby) Etc.).

  Also, when the authentication status is “invalid” and the operation is prohibited, it is inconvenient if the mobile phone cannot be used at all. In such a case, an example of enabling use by a special operation of the user will be shown. Even if the authentication status is “invalid” and some operations are prohibited, for example, only the numeric keys are enabled and only the password is entered. It is possible to cancel the invalidation by a method such as accepting a PIN by pressing the key for a long time, or pressing any key when it is invalid, prompting for the PIN and accepting only the PIN .

  In this example, by using the telephone keyboard attached to the mobile phone to enter the PIN for unlocking the function, the mobile phone can be operated even if the authentication is “invalid”. This is an example of permission.

  FIG. 8 is a diagram showing a sequence for permitting an operation of a mobile phone whose authentication status is “invalid” by inputting a personal identification number into the mobile phone.

  As shown in the figure, when an operation on the mobile phone (pressing down the button of the mobile phone) occurs (step ST71), whether or not the authentication state is “valid” as in the first embodiment. Is confirmed (step ST72).

  If the authentication status is “invalid” (step ST72: N), a message requesting the input of a personal identification number is displayed on the screen of the mobile phone, and the personal identification number is input (number input is acceptable). When this is accepted (step ST81) and the accepted password is valid (legal password) (step ST82: Y), the operation of the portable telephone is permitted (step ST73), and the accepted password is received. Is invalid (not a valid password) (step ST82: N), the operation is terminated without permitting the operation of the mobile phone (step ST74).

  When the authentication state is “valid” (step ST72: Y), the operation of the mobile phone is permitted (step ST73) as in the case of FIG.

  This PIN code mechanism is also effective in controlling the RFID function. That is, when the authentication RFID tag stops operating for some reason, it can be used to urgently cancel the “invalid” authentication state.

  FIG. 9 is a diagram illustrating a sequence in a case where “invalid” of the authentication state is canceled when the authentication RFID tag stops operating.

  In the figure, first, upon receiving a person's (watermelon) command from the external system 112 (step ST21), the RFID card control unit 106 determines whether the authentication state is valid or invalid by the authentication state determination unit 108 as described above. Confirm (step ST22).

  If it is determined that the authentication state is “valid” (step ST22: Y), data such as the card ID of the RFID card is transmitted to the RFID card reader / writer 113 (step ST23).

  When it is determined that the authentication state is “invalid” (step ST22: N), an input of a personal identification number is accepted (step ST81).

  If the input password is valid (legal password) (step ST82: Y), data such as the RFID card ID is transmitted to the RFID card reader / writer 113 (step ST23). The process ends (step ST24). If the input password is invalid (not a valid password) (step ST82: N), the process is terminated as it is (step ST24).

  A method for setting the authentication state timer in the second embodiment will be described with reference to FIGS.

  As shown in FIG. 10, the authentication interval control timer unit 106 of the portable telephone (mobile phone or PHS) 601 having an RFID card function such as a credit card or a commuter pass has passed since the previous authentication start command was sent. The time is monitored (step ST1001). When a set time (for example, 10 seconds) has elapsed (step ST1001: Y), an authentication start command is transmitted (step ST1002). Subsequently, the card ID stored in the data storage unit 107 is transmitted (step ST1003).

  The authentication RFID tag 101 holds a correspondence relationship between the card ID and the authentication ID, and transmits an authentication ID corresponding to the received card ID.

  The portable telephone 601 receives the authentication ID sent from the authentication RFID tag 101 by the RFID wireless communication & excitation unit 204 (step ST1004).

  When it is confirmed that the received authentication ID is a regular authentication ID registered in the data storage unit 107 (step ST1005: Y), the authentication state timer unit is set to “valid” (step ST1006). . When the authentication state timer is set, it starts measuring elapsed time, and resets the authentication state to “invalid” after a predetermined time (T) has elapsed.

  On the other hand, a card ID and a corresponding authentication ID are registered in advance in the authentication RFID tag 101. As shown in FIG. 11, an authentication start command is received from the mobile phone 601 (step ST1101), and a credit card or A card ID is received from a portable telephone 601 having an RFID card function such as a commuter pass (step ST1102).

  When it is confirmed that the received card ID is a valid card ID (registered card ID) (step ST1103), the authentication RFID tag 101 transmits an authentication ID corresponding to the card ID (step ST1104).

  The reason why the card ID transmitted by the mobile phone 601 and the authentication ID transmitted by the authentication RFID tag 101 are different IDs is that, as in the first embodiment, a malicious third party can use a credit card, a commuter pass, etc. This is to prevent the card ID transmitted by the RFID card 111 from being stolen and misused. If there is no fear of misuse, the same ID can be used. In this case, the configuration of the authentication RFID tag 101 and the like is simplified.

  Since the above embodiment has been described with reference to an example applied to a credit card or commuter pass, the case where the RFID card data storage means holds the card number, the card expiration date, the card owner name, the card ID, and the authentication ID is shown. However, depending on the application field of the authentication technology using the RFID card, it is not always necessary to hold all of these data, and at least the card ID and the authentication ID associated with the card ID (or one ID that combines the card ID and the authentication ID) ). The card ID and the authentication ID (authentication ID) are not necessarily different, and the same ID may be used together, and the description “the card ID and the authentication ID associated with the card ID” in the claims refers to this Including cases.

  The RFID tag authentication program in which the process (see FIGS. 2 to 4 and FIGS. 7 to 11) in the RFID tag authentication system in the first and second embodiments is program-coded is described in each of the above embodiments. The function of each unit (means of claims) is executed using a computer resource such as a CPU or memory, and a computer-readable recording medium such as a CD-ROM, FD, or DVD, or a network such as the Internet. It can be distributed to the user via

  The present invention can be used for an RFID system that realizes high security and easy usability at the same time. A plurality of functions such as a credit card, wireless commuter pass, and identification card are integrated, and can be applied to a type of RFID tag that is lost or stolen leading to a large loss. While being used by a legitimate owner, it is possible to realize an RFID tag that provides a use environment equivalent to the conventional one without being conscious of security and becomes unusable when lost or stolen.

It is a figure which shows the structure of the authentication system of the RFID tag which concerns on 1st Example of this invention. It is a sequence diagram which the RFID card control unit concerning the 1st example of the present invention controls. It is a sequence diagram in which the RFID card control unit sets an authentication state in the first embodiment. It is a sequence diagram by the side of the authentication RFID tag. It is an image figure of the transition of the authentication state of the RFID card with respect to elapsed time. It is a block diagram for demonstrating the 2nd Example of this invention. It is a figure explaining the authentication mechanism in control of the mobile telephone function in this invention. FIG. 11 is a sequence diagram for permitting operation of the mobile phone when the authentication state is “invalid”. FIG. 10 is a sequence diagram in a case where an authentication state “invalid” is canceled urgently. It is a sequence diagram of the set of an authentication state timer in a 2nd Example. It is a sequence diagram of a set of authentication states in the second example. It is a figure which shows an example of the data stored in a data storage unit. It is a figure which shows the example which stored two authentication ID in the data storage unit. It is a figure which shows the example which stored authentication ID upper limit and authentication ID lower limit in the data storage unit.

Explanation of symbols

101: Authentication RFID tag 102: Authentication unit 103: Authentication RFID tag control unit 104, 204: RFID wireless communication & excitation unit 105, 205: Authentication interval control timer unit 106: RFID card control unit 107: Data storage unit 108: Authentication state Determination unit 109: Authentication state timer unit 110 for maintaining the authentication state for a certain time 110: RFID card wireless communication unit 111: RFID card such as a credit card or commuter pass 112: External system 113: RFID card reader / writer 121 of external system : Credit card number 122: Credit card expiration date 123: Credit card owner name 124, 131, 141: Card ID
125: Authentication ID
132: First authentication ID
133: Second authentication ID
142: Authentication ID upper limit value 143: Authentication ID lower limit value 501: Authentication set command 502: Authentication status is “valid” 503: Time when contact between both RFIDs is lost 504: Maintained “valid” status 505 : Contact between both RFIDs restored 506: restored “valid” state 507: fixed interval t when authentication set command is issued
508: Setting period in which setting time T is held 601: Mobile phone (mobile phone or PHS)
602: Mobile phone unit 603: Authentication RFID wireless communication unit

Claims (16)

An RFID tag authentication system using an RFID card reader / writer, an RFID card, and an authentication RFID tag,
The RFID card includes means for receiving a challenge command from said RFID reader / writer, a data storage means for storing the card data including the authentication ID associated with at least the card ID and the card ID, the authentication An authentication status timer means for measuring the time since the RFID tag is separated from a distance where communication is impossible, and an authentication ID from the authentication RFID tag at a fixed time interval measured by an authentication interval control timer means described later And verifying that the authentication state is valid when the received authentication ID and the authentication ID held in the data storage means are valid and valid, and after the authentication state is determined to be valid, the length of time as a impossible communicate with the authentication RFID tag until after a period of time measured by said authentication state timer means Testimony condition is determined to be valid, after determining the authentication status is valid, the after the lapse of a certain period from when the impossible communication between the authentication RFID tag determines the authentication state invalid, further wherein the authentication An authentication state determination unit that determines that it is valid again when approaching a distance that can be communicated with the RFID tag for use, and is stored in the data storage unit when the authentication state is determined to be valid by the authentication state determination unit Transmission means for transmitting data including at least a card ID to the RFID card reader / writer;
2. The RFID tag authentication system according to claim 1, wherein the authentication RFID tag includes means for transmitting a held authentication ID and authentication interval control timer means for controlling the timing for performing authentication at regular time intervals . An RFID tag authentication system using an RFID card reader / writer, an RFID card, and an authentication RFID tag,
The RFID card includes means for receiving a challenge command from said RFID reader / writer, a data storage means for storing the card data including the authentication ID associated with at least the card ID and the card ID, the authentication An authentication status timer means for measuring the time after being separated from the RFID tag so as not to communicate with the RFID tag, and the authentication RFID tag at a fixed time interval measured by an authentication interval control timer means described later And the authentication ID is judged to be valid if it is valid by comparing the received authentication ID with the authentication ID held in the data storage means. as well as, after the authentication state is determined to be valid, the authentication state tie from becoming impossible communicate with the authentication RFID tags The period until the lapse of a certain period measured by chromatography means determines authentication state effective, after the authentication state is determined to be valid, the predetermined period has elapsed from when the impossible communication between the authentication RFID tags After that, the authentication state is determined to be invalid, and further , the authentication state determination unit that determines that the authentication state is valid again when approaching a distance that can be communicated with the authentication RFID tag, and the authentication state determination unit determines that the authentication state is valid And a transmission means for transmitting data including at least the card ID held in the data storage means to the RFID card reader / writer,
The authentication RFID tag includes means for holding a correspondence relationship between a card ID and an authentication ID, means for referring to the means and extracting and transmitting an authentication ID corresponding to the card ID received from the RFID card ; An RFID tag authentication system comprising authentication interval control timer means for controlling the timing of performing authentication at a constant time interval .   3. One or both of the RFID card and the authentication RFID tag have a power supply, and when one of them does not have a power supply, power is supplied from the side having the power supply. The RFID tag authentication system described. An RFID tag authentication system using an RFID card reader / writer, a mobile phone, and an authentication RFID tag,
The portable telephone has a data storage for holding card data including a cellular phone means, means for receiving a command from the RFID reader / writer, and at least a card ID and an authentication ID associated with the card ID. Means, an authentication interval control timer means for controlling the timing of performing authentication at regular time intervals, and an authentication state timer means for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible The authentication ID is received from the authentication RFID tag at a fixed time interval measured by the authentication interval control timer means , and the received authentication ID is compared with the authentication ID held in the data storage means. thereby determining valid authentication state when Te appropriate, after the authentication state is determined to be valid, RFID for the authentication The length of time as a grayed and communication is not possible until after a period of time measured by said authentication state timer means determines authentication state effective, after the authentication state is determined to be valid, the authentication RFID tags and authentication state after the communication has the lapse of a certain period from when the impossible is determined to be invalid, and determines the authentication state determining means and re-enabled when approaching the more the communicable distance with authentication RFID tags And, when the authentication status is determined to be valid by the authentication status determination means, has a transmission means for transmitting data including at least the card ID held in the data storage means to the RFID card reader / writer,
The RFID tag authentication system, wherein the authentication RFID tag includes means for transmitting a held authentication ID. An RFID tag authentication system using an RFID card reader / writer, a mobile phone, and an authentication RFID tag,
The portable telephone has a data storage for holding card data including a cellular phone means, means for receiving a command from the RFID reader / writer, and at least a card ID and an authentication ID associated with the card ID. Means, an authentication interval control timer means for controlling the timing of performing authentication at a constant time interval, and an authentication state timer means for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible And the card ID is transmitted to the authentication RFID tag at a fixed time interval measured by the authentication interval control timer means, the authentication ID is received from the authentication RFID tag, and the received authentication ID and When it is determined that the authentication status is valid when it is valid by checking the authentication ID held in the data storage means To, after the authentication state is determined to be valid, the length of time as a impossible communicate with the authentication RFID tag until after a period of time measured by said authentication state timer means authentication state are judged to be valid , after the authentication state is determined to be valid, the determination after becoming the authentication RFID tag communication is impossible and invalid authentication state after a lapse the predetermined time period, which further can communicate with the authentication RFID tags An authentication state determination unit that determines that it is valid again when approaching the distance, and data that includes at least the card ID held in the data storage unit when the authentication state is determined to be valid by the authentication state determination unit A transmission means for transmitting to the RFID card reader / writer;
The authentication RFID tag includes means for holding a correspondence relationship between a card ID and an authentication ID, and means for extracting and transmitting an authentication ID corresponding to the card ID received from the mobile phone with reference to the means An RFID tag authentication system comprising:   6. The RFID tag authentication system according to claim 4, wherein the portable telephone has a power source, and power is supplied from the power source to the RFID tag having no power source.   The RFID tag authentication system according to any one of claims 4 to 6, wherein when the authentication state is invalid, part or all of the cellular phone functions determined by setting are invalidated.   A part of the cellular phone function that has been invalidated when a predetermined valid code number is inputted from the code number input means when the authentication state is invalid, having a code number input means for inputting the code number; The RFID tag authentication system according to any one of claims 4 to 7, further comprising means for enabling all functions for a certain period. The data storage means holds one or more authentication IDs,
9. The valid case is a case where an authentication ID received from the authentication RFID tag matches one or more authentication IDs held in the data storage means. The RFID tag authentication system according to any one of the above. The data storage means holds an authentication ID upper limit value and an authentication ID lower limit value,
The valid case is characterized in that the authentication ID received from the authentication RFID tag is between the authentication ID upper limit value and the authentication ID lower limit value held in the data storage means. The RFID tag authentication system according to any one of claims 1 to 8, wherein:   A means for inputting a personal identification number, and a means for validating the authentication state for a predetermined period when a predetermined valid personal identification number is inputted from the personal identification number input means when the authentication state is invalid; The RFID tag authentication system according to any one of claims 1 to 10, further comprising: An RFID tag authentication method using an RFID card reader / writer, an RFID card, and an authentication RFID tag,
The RFID card receives a anyone command from the RFID reader / writer;
The RFID card holds card data including at least a card ID and an authentication ID associated with the card ID in a data storage unit;
Transmitting the authentication ID held by the authentication RFID tag at regular time intervals measured by an authentication interval control timer means ;
When the RFID card receives an authentication ID from the authentication RFID tag and compares the received authentication ID with the authentication ID held in the data storage means, the authentication state is valid. And determining that the authentication state is valid for a period from when communication with the authentication RFID tag is impossible until a predetermined period measured by the authentication state timer means elapses after the authentication state is determined to be valid. determined, after determining the authentication status is valid, the determination after becoming the authentication RFID tag communication is impossible and invalid authentication state after a lapse the predetermined time period, further communicates with the authentication RFID tags and determining authentication state determining step and re-enabled when approaching the possible distance, if the authentication state authentication state determining step is determined to be valid, store the data in said data storage means At least a transmission step of transmitting the data containing the card ID to the RFID card reader / writer that,
An RFID tag authentication method comprising: An RFID tag authentication method using an RFID card reader / writer, an RFID card, and an authentication RFID tag,
The RFID card receives a command of who from the RFID reader / writer, and holds card data including at least a card ID and an authentication ID associated with the card ID in a data storage unit;
The RFID card transmits the card ID to the authentication RFID tag at a constant time interval measured by an authentication interval control timer means ;
The authentication RFID tag refers to the correspondence relationship between the card ID and authentication ID held, and extracts and transmits the authentication ID corresponding to the card ID received from the RFID card;
When the RFID card is valid by comparing the authentication ID received from the authentication RFID tag with the authentication ID held in the data storage means, the authentication status is determined to be valid, and the authentication status is valid. After the determination, it is determined that the authentication state is valid for a period from when communication with the authentication RFID tag becomes impossible until a fixed period measured by the authentication state timer means elapses, and the authentication state is determined to be valid. and then, the authentication become RFID tag and communication is not possible the predetermined period elapsed authentication state after it is determined to be invalid from further the re-enabled when approaching the communicable distance with authentication RFID tags An authentication state determination step for determining
A transmission step of transmitting data including at least a card ID held in the data storage means to the RFID card reader / writer when the RFID card is determined to be valid in the authentication state determination step; An RFID tag authentication method comprising: RFID card reader / writer, mobile phone means, means for receiving any command from the RFID reader / writer, data storage means for holding card data including at least a card ID and an authentication ID associated with the card ID , An authentication interval control timer means for controlling the timing of performing authentication at a fixed time interval, and an authentication state timer means for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible RFID tag authentication method using a type telephone and an authentication RFID tag,
Transmitting the authentication ID held by the authentication RFID tag at regular time intervals measured by the authentication interval control timer means ;
When the mobile phone receives an authentication ID from the authentication RFID tag and compares the received authentication ID with the authentication ID held in the data storage means, the authentication state is valid. After the authentication state is determined to be valid, the authentication state is valid for a period from when communication with the authentication RFID tag is disabled until a predetermined period measured by the authentication state timer means elapses. a judgment, after determining the authentication status is valid, the determination after becoming the authentication RFID tag communication is impossible and invalid authentication state after a lapse the predetermined time period, and further wherein the authentication RFID tags and determining authentication state determining step and re-enabled when approaching the communicable distance, if the authentication state authentication state determining step is determined to be valid, is held in the data storage means RFID tag authentication method characterized by comprising the step of transmitting the data to the RFID card reader / writer comprising at least the card ID by which. RFID card reader / writer, mobile phone means, means for receiving any command from the RFID reader / writer, data storage means for holding card data including at least a card ID and an authentication ID associated with the card ID , An authentication interval control timer means for controlling the timing of performing authentication at a fixed time interval, and an authentication state timer means for measuring the time after being separated from the authentication RFID tag to a distance where communication is impossible RFID tag authentication method using a type telephone and an authentication RFID tag,
Transmitting the card ID held in the data storage means to the authentication RFID tag at a fixed time interval measured by the authentication interval control timer means ;
The authentication RFID tag refers to the correspondence relationship between the card ID and the authentication ID held, and extracts and transmits the authentication ID corresponding to the card ID received from the mobile phone;
When the mobile phone receives an authentication ID from the authentication RFID tag and collates the received authentication ID with the authentication ID held in the data storage means, the authentication state is valid. And determining that the authentication state is valid for a period from when communication with the authentication RFID tag is impossible until a predetermined period measured by the authentication state timer means elapses after the authentication state is determined to be valid. determined, after determining the authentication status is valid, the determination after becoming the authentication RFID tag communication is impossible and invalid authentication state after a lapse the predetermined time period, further communicates with the authentication RFID tags and determining authentication state determining step and re-enabled when approaching the possible distance, if the authentication state authentication state determining step is determined to be valid, is held in the data storage means RFID tag authentication method characterized by comprising the step of transmitting the data to the RFID card reader / writer including at least card ID are. An RFID tag authentication program for realizing an RFID tag authentication system using an RFID card reader / writer, an RFID card, and an authentication RFID tag,
An RFID tag authentication program for causing a computer to execute processing of each step in the RFID tag authentication method according to any one of claims 12 to 15.

Images