The present invention generally relates to an ID tag, a tag reader, ID tag transmitting and recovering methods, and a tag manager utilized in mobile communication systems, and particularly relates to such an ID tag, a tag reader, ID tag transmitting and recovering methods, and a tag manager capable of recognizing counterfeit tags.
RFID tags are well known in this art as disclosed in, for example, Patent Documents #1, #2 and #3 below, which can be applied to mobile communication systems. An example of such an RFID system is shown in
In
In such a location notifying service, the first tag 7 is placed at A station East exit. The tag ID of the first tag 7 and the location information of the first tag 7 are correlated and held in the server 2. When a reader 6 coupled to or integrated with the mobile station 5 moves close to the first tag 7, the reader 6 receives tag ID information transmitted from the first tag 7.
The reader 6 outputs the received tag ID information to the mobile station 6. The mobile station 6 extracts a tag ID (“12345678” in the example shown in
Accordingly, the user of the mobile station 5 recognizes that he is now at the East exit of A station.
A counterfeit tag (a second tag 8 in
In another available service, a user having a mobile station with tag reader function can monitor an ID transmitted from a tag attached to his wallet to always know where the wallet is, and he can notice that he forgot or dropped the wallet. Such a tag transmits a constant ID. Therefore, someone can detect the constant ID and know where the tag holding person is, which may invade individual privacy.
A general object of the present invention is to provide an ID tag, a tag reader, ID tag transmitting and recovering methods, and a tag manager that can recognize counterfeit tags and avoid service degradation and privacy invasion.
The above object of the present invention is achieved by an ID tag for RF transmitting its own tag ID information, comprising: an ID storage for outputting the tag ID information stored therein; an ID concealing unit that conceals the tag ID information based on a certain value relating to time and outputs a concealed ID; a time information concealing unit that conceals the certain value based on a stored tag unique value and outputs concealed information; and a data outputting unit that receives and combines the concealed ID and the concealed information, and outputs combined data.
The object of the present invention is achieved also by an ID tag for RF transmitting its own tag ID information, comprising: a timer for outputting time information; an ID storage for outputting the tag ID information stored therein; an ID concealing unit that conceals the tag ID information based on a tag unique value and the time information, and outputs a concealed ID; and a data outputting unit that outputs a changed value of the concealed ID.
The object of the present invention is achieved also by an ID tag as claimed in claim 1, further comprising: an ID divider for dividing the tag ID information output from the ID storage into plural fragments; wherein the ID concealing unit conceals the fragments based on the certain value.
The object of the present invention is achieved also by a tag reader for receiving data RF transmitted from an ID tag, comprising: a data separator for separating the received data into at least concealed information and concealed ID information; a time information recovering unit that recovers the concealed information based on a tag unique value, and outputs a certain value relating to the recovered time; and an ID recovering unit that recovers the concealed ID information based on the certain value.
The object of the present invention is achieved also by a tag reader for receiving data RF transmitted from an ID tag, comprising: a timer for outputting time information; an ID recovering unit that recovers the received data based on a tag unique value and the time information; and a timer corrector for correcting the time information of the timer by recognizing a value dependent on tag tine, from the received data.
The object of the present invention is achieved also by a method of RF transmitting tag ID information, comprising the steps of: outputting the tag ID information; outputting time information; scrambling the tag ID information with the time information, and outputting a scrambled ID; and transmitting the scrambled ID and concealed time information.
The object of the present invention is achieved also by a method of recovering data RF transmitted from an ID tag, comprising the steps of: separating received data into concealed time information and concealed ID information; and recovering the concealed ID information based on a value dependent on the recovered concealed time information.
The object of the present invention is achieved also by a tag manager for directly or indirectly receiving data RF transmitted from an ID tag, comprising: a storage that correlates tag ID information of at least one tag and location information of the tag, and stores the correlated information; and an authenticator that determines authenticity of the tag based on tag ID information and location information included in the received data, with reference to the tag ID information and the location information stored in the storage.
The following is a description of embodiments of the present invention, with reference to the accompanying drawings. Specifically ID tags, tag readers, tag ID transmission methods, ID tag recovering methods, and tag managers according to embodiments of the present invention are explained below.
Throughout all the figures, members and parts having the same or similar functions are assigned the same or similar reference numerals or symbols, and redundant explanations are omitted.
A first embodiment of the present invention is explained below with reference to
The ID tag 101 comprises an ID storage 102, an ID scrambler 103, a random value generator 104, a first tag unique value 105, a timer 106, a data constructer 107, a time information scrambler 108, a second tag unique value 109 and an output terminal 110.
In each tag 101, a predetermined unique tag ID is stored in the ID storage 102. Each tag can be identified by using this ID. An RF ID tag is typical for an RF transmission tag, but the present invention can be applied to the ID tag systems utilizing visible light and infrared-rays.
Two unique values of the first tag unique value 105 and the second tag unique value 109 are previously given to each tag 101. These tag unique values are not related to a tag ID mentioned below, and can be determined at random. The tag unique values do not have to be different from each other, but should be kept secret from persons other than readers and servers having authenticating functions. As for tags held by a mobile user, the “other person” means any person other than the mobile user. As for tags located at a predetermined location for providing location related services, the “other person” means any entity other than the provider of the services. In a tag, the first tag unique value and the second tag unique value may be the same, but when these values are different from each other, their security becomes higher because the decryption has to be done twice.
The first tag unique value 105 given to the tag 101 is input from the ID storage 102 to the random value generator 104. In the random value generator 104, using variables dependent on the first tag unique value 105, time information output from the timer 106 is converted to a random value dependent on time. As such randomizing operation processes, complex operational processes such as remainder calculation by generating a polynomial or bit permutation based on a matrix can be performed. More specifically, the random value generator 104 generates a matrix or vector uniquely corresponding to the first tag unique value 105, and can bit-permute the time information output from the timer 106 utilizing the matrix or can calculate remainders of division by the vector. The randomization is an example of concealing. In the present Specification and claims, the “time” means not only an absolute time but also a counter for counting up by a time duration (such as one minute, one hour, one day, etc.) and the like, and the “time information” means an amount of the absolute time and a value in the counter and the like.
The generated random value dependent on time is input to the ID scrambler 103. In the ID scrambler 103, the ID of the tag 101 output from the ID storage 102 is scrambled with the random value. The scrambling process may include bit-to-bit exclusive OR operations between two input values. Scrambling is one example of concealing. Since the time information is employed, the resultant values are not constant even without any complex calculation, and have regularity, because of which the transmitted time information can be easily recovered in a receiver.
The scrambled tag ID is output to the data constructor 107 and subjected to additional processing mentioned below in the data constructor 107.
On the other hand, the second tag unique value 109 given to the tag 101 is input to the time information scrambler 108. In the time information scrambler 108, the time information output from the timer 106 is scrambled with the second tag unique value 109. Scrambling is one example of concealing. As an example of scrambling processing, a bit string uniquely corresponding to the second tag unique value 109 can be generated, and bit-to-bit exclusive OR operations are done between the bit string and the time information output from the timer 106.
The scrambled time information is input to the data constructor 107. In the data constructor 107, the scrambled time information is added to the scrambled tag ID to construct one data string as shown in
The operating process in the tag 101 is explained using alpha expressions.
In the random value generator 104, the first unique value “i” is randomized with the time information c output from the timer 106, to obtain B(i)ct. In the ID scrambler 103, the tag ID “a” is scrambled with the random value B(i)ct, to obtain the scrambled tag ID at(+)B(i)ct. On the other hand, in the time information scrambler 108, the time information “c” is scrambled with a scrambling vector d(j) dependent on the second tag unique value “j”, to obtain the scrambled time information ct(+)d(j)t. The data string (ct(+)d(j)t, at(+)B(i)ct) mixing those two data items is output from the data constructor 107. B(i) means conversion matrix in the random value generator 104, (+) means exclusive OR and “t” means translocation.
Next, a tag reader 111 receiving the tag ID from the tag 101 is explained.
The tag reader 111 comprises an input terminal 120, a data separator 112, a time information descrambler 113, a second tag unique value 114, an ID recoverer 115, a random value generator 116, a first tag unique value 117, an authenticator 118 and an output terminal 119.
The tag reader 111 is also previously given the first tag unique value 117 and the second tag unique value 114, which are the same as the first tag unique value 105 and the second tag unique value 109 given to the tag 101, respectively.
One method of registering the tag unique values in the tag reader 111 held by an individual is that the individual previously registers the tag unique values of the tag 101 into the tag reader 111. As for a tag placed at a specific location, a tag unique value can be downloaded or provided via a mobile station from a tag manager such as a server and registered into the tag reader.
Data from the tag 101 received through the input terminal 120 is input to the data separator 112. The data separator 112 performs an operation inverse to that of the data constructor 107 of the tag 101, to separate or divide the received data into the scrambled time information and the scrambled tag ID. The scrambled time information is input to the time information descrambler 113, and the scrambled tag ID is input to the ID recoverer 115. The time information descrambler 113 performs an operation (descrambling) inverse to that of the time information scrambler 108 of the tag 101, using the second tag unique value 114 to extract the time information.
The extracted time information is input to the random value generator 116. Similar to the random value generator 104, the random value generator 116 converts the input time information to a value dependent on time, using the first tag unique value 117.
The random value obtained in the random value generator 116 is input to the ID recoverer 115. The ID recoverer 115 performs an operation inverse to that of the ID scrambler 103 of the tag 101, to convert the scrambled tag ID to the original tag ID.
The recovered tag ID is input to the authenticator 118. The authenticator 118 compares the previously stored tag ID and the recovered tag ID to determine authentication. If the tag ID transmitted by the tag 101 is incorrect, authentication is denied. Further, if the unique values used in the tag 101 transmitting the tag ID are incorrect, the recovered tag ID becomes incorrect, and then authentication is also denied. Accordingly, only when both the tag ID and the unique values are correct, authentication is affirmed. In this manner, authentication is performed by confirming whether the combination of the tag ID and the unique values are correct.
A tag ID determined to be authentic is output through the output terminal 119. A tag ID determined to be not authentic is discarded.
The operations process in the tag reader 111 is explained using alpha expressions.
The data separator 112 receives the data string (ct(+)d(j)t, at(+)B(i)ct), and separates the data. The separated scrambled time information ct(+)d(j)t is input to the time information descrambler 113 and the separated scrambled tag ID at(+)B(i)ct is input to the ID recoverer 115. The time information descrambler 113 uses the second tag unique value “j” and descrambles the scrambled time information ct(+)d(j)t to (ct(+)d(j)t) (+)d(j)t=ct, to extract the time information ct, which is input to the random value generator 116. The random value generator 116 uses the input time information ct and randomizes the first tag unique value “i” to obtain B(i)ct.
The scrambled tag ID (at(+)B(i)ct) is input from the data separator 112 to the ID recoverer 115, In the ID recoverer 115, the scrambled tag ID (at(+)B(i)ct) is descrambled with B(i)ct, to extract the recovered tag ID at, which is output to the authenticator 118.
In the above explained method, the tag ID and the time information are both transmitted each time as shown in
With reference to
In this alternative embodiment, a tag reader 911 monitors a tag ID transmitted from a tag 901. The tag 901 randomizes the tag ID with time information from a timer 906, in a similar manner. The timer 906 in the tag 901 and a timer 913 in the tag reader 911 are reset simultaneously.
The timer 913 of the tag reader 911 can be synchronized with the timer 906 of the tag 901 initially, and the tag reader can determine authenticity of tag IDs by utilizing the synchronized timer 913. However, both the timers 906 and 913 operate separately and become different from each other more and more with passing time.
When an authenticator 918 of the tag reader 911 determines that a tag ID is incorrect, the tag reader 911 performs a correction process on the timer 913. The correction process can be done by a method as shown in
Since the tag reader 911 knows the randomized tag ID value after resetting, the tag reader can recognize the timer value in the tag 901 by recognizing the received randomized tag ID value. It is also possible to correct the timer 913 to the time when the tag ID has been received.
In the alternative embodiment, CRC (Cycle Redundancy Code) generated by the tag ID can be also used.
As shown in
An authenticator 1118 of a tag reader 1111 calculates the CRC using a recovered tag ID, and compares the calculated CRC and a received CRC calculated by the tag 1101. If they are the same, the authenticator 1118 determines that the tag ID is authentic, and if they are different, the authenticator 1118 determines that the tag ID is counterfeit.
With reference to
A tag 201 comprises an ID storage 202, an ID divider 203, two padders 204, a timer 205, two ID fragment scramblers 206, two random value generators 207, a third tag unique value 208, a fourth tag unique value 209, an output switch 210, and an output terminal 211.
In the 201, a tag ID output from the ID storage 202 is input to the ID divider 203, where the tag is divided into a plurality of tag ID fragments. In this second embodiment, the number of fragments is two, but is not limited to two. The divided tag ID fragments may have the same length or may have different lengths. There may be a variety of dividing methods. As shown in
The divided tag ID fragments are subject to a padding process (filling with bits process) in the padder 204. For example, a 64-bit tag ID is divided into a 20-bit fragment and a 44-bit fragment, and the 20-bit fragment is padded with 44 bits to lengthen the fragment to the original size and the 44-bit fragment is padded with 24 bits to lengthen it to the original size. Each padder 204 can further scramble the tag ID fragment depending on the tag ID fragment ordering. The first tag ID fragment can be scrambled with a value dependent on the third tag unique value and the second tag ID fragment can be scrambled with a value dependent on the fourth tag unique value. This additional randomization makes it more difficult to counterfeit tag IDs.
After padding, the padded ID fragments are input to the ID scrambler 206.
On the other hand, time information output from the timer 205 is input to the random value generator 207, the same as the first embodiment. The random value generators 207 perform conversion depending on the third tag unique value 208 and the fourth tag unique value 209, respectively, to convert the time information to random values dependent on time and output them to the corresponding ID scramblers 206.
Each of the ID fragment scramblers 206 uses a random value dependent on the receiving time, scrambles the padded tag ID fragment and outputs it to the output switch 210.
The output switch 210 switches the data received from the ID fragment scramblers 206, and alternately outputs them to the output terminal 211.
In this embodiment, the time information is randomized with each tag ID unique value and each of the tag ID fragments is scrambled with the randomized time information.
However, as shown in
In a further alternative embodiment, the tag ID fragments scrambled with time independent information or time dependent information can be accompanied by scrambled time information as shown in
It is necessary to recover the time information of the tag in a tag reader, and therefore the scrambled time information is desirably transmitted together with the data, similar to the
With reference to
The tag reader 221 has a third tag unique value 226 and a fourth tag unique value 227 the same as the third tag unique value 208 and the fourth tag unique value 209 given to the tag 201, respectively. A method of registering the tag unique values into the tag reader 221 is the same as in the first embodiment.
In this embodiment, plural data items sent from the tag 201 are needed in order to recover the tag 1D. The tag 201 data received via an input terminal 220 are first stored in a buffer 222. A fragmentation determiner 242 provided in the buffer 222 determines whether the received tag ID has been fragmented, divides it if fragmented, and outputs the divided fragments into corresponding ID fragment descramblers 224.
When registering the tag ID into the tag reader 221, the timer 205 in the tag 201 and the timer 223 in the tag reader 221 can be reset. The timer 223 can output synchronized time information to each random value generator 225. Each random value generator 225 performs conversion dependent on the third or fourth tag unique value, respectively, converts the time information to a random value dependent on time, and outputs it to the corresponding ID fragment descrambler 224.
Each ID fragment descrambler 224 performs an operation inverse to that of the ID fragment scrambler 206 of the tag 201, to extract a descrambled ID fragment and outputs it to a corresponding de-padder 228.
The de-padder 228 performs an operation inverse to that of the padder 204 in the tag 201, to de-pad (remove) the padded (filling) bits. In a case where scrambling or randomizing dependent on the order of the tag ID fragments has been performed on the tag 201 as shown in
The extracted tag ID fragments are input to an ID combiner 229. The ID combiner 229 performs an operation inverse to that of the ID divider 203 of the tag 201 to recover the tag ID.
The recovered tag ID is input to an authenticator 231, which determines whether the combination of recovered tag ID and its unique values is correct. If it is determined that the combination is incorrect, the division ratio in the buffer 222 is reversed and the same operations are performed again. If it is determined that the combination is still incorrect in the second trial, the resultant tag ID is discarded.
With reference to
A server 2 shown in
When a tag reader 6 moves close to a first tag 7 and receives information transmitted by the first tag 7, a mobile station 5 having the tag reader 6 is located in an area belonging to a first base station 3. The mobile station 5 sends an inquiry to the server 2 via the first base station 3 as to whether the first tag 7 is authentic.
The server 2 understands that the inquiry has been transmitted via the first base station 3, and therefore replies to the mobile station 5 that the first tag is authentic.
On the other hand, the tag reader 6 moves close to a second tag reader 8 and receives information transmitted by the second tag 8, the mobile station having the tag reader 6 being located in an area belonging to a second base station 4. The mobile station 5 sends an inquiry to the server 2 via the second base station 4 as to whether the second tag 8 is authentic.
The server 2 understands that the inquiry about the second tag 8 has been transmitted via the second bases station 4, and therefore replies to the mobile station 5 that the second tag 6 is counterfeit.
In this manner, the server holds information of the base stations close to tags, and therefore can determine whether tags are authentic or counterfeit. When the mobile station sends such an inquiry, it can also send information on the location of the mobile station at the time of receiving the information from the tag, and therefore the authenticity of the tag can be determined even when the mobile station sends the inquiry later instead of sending it immediately after receiving the tag information.
The tag manager 802 can be provided not only in the server but also in a base station, a mobile station, or a tag reader. In a case where the tag manager is provided in a mobile station, the information stored in the server can be downloaded to the tag manager in the mobile station and the mobile station can determine the authenticity. Instead of a server, a base station can have a storage for correlating and storing information about each tag, its tag ID, its information, and its location information. A tag reader can determine the authenticity, as in the first and second embodiments. Each base station can previously send to a server, information of tag IDs of tags located close to the base station.
ID tags, tag readers, ID tag security systems, and ID tag transmission and recovering methods can be utilized for improving the tag services in mobile communication systems.
The present application is based on Japanese Priority Application No. 2004-128834 filed on Apr. 23, 2004 with the Japanese Patent Office, the entire contents of which are hereby incorporated by reference.
Number | Date | Country | Kind |
---|---|---|---|
2004-128834 | Apr 2004 | JP | national |