Computer system and information carrying medium

Abstract

TAn information carrying card (10) stores identification information data (50) or the like in a first inlet (41) of a UHF band RFID tag, and stores highly confidential information on a second inlet (45) of an HF band RFID tag. A card use system (200) is installed in a service space. A UHF band RFID reader is provided at the entrance and reception of the service space, and identification information data (50) and the like are read from the information carrying card (10) of the visitor and used for reception. A service providing spot in the service space is provided with an authentication device and an HF band RFID reader / writer, and the highly confidential information is used by reading same from the information carrying card (10) through the personal identification and approval of the user.

Description

Computer system and information carrying medium

[0001] This relates to computer systems, etc. that are installed in a service space, which is a fixed space such as a store, facility, or place that provides services to users or sells products, and that communicate wirelessly with information-carrying media carried by users.

[0002] Portable terminal devices, such as contactless IC (Integrated Circuit) cards, are known as information carrying media. Patent Document 1 describes a technology in which the contactless IC card is called an IC tag and two types of antennas are built into the IC tag.

[0003] International Publication No. 2016 / 035771

[0004] However, Patent Document 1 only describes the incorporation of two types of antennas into an information-carrying medium called an IC tag. Even if an information-carrying medium capable of multiple types of communication by incorporating multiple types of antennas can be realized, if the information-carrying medium is used in different stores or facilities that provide different services depending on the antenna of the information-carrying medium, it would simply be aggregating multiple types of information-carrying media into a single information-carrying medium. In other words, Patent Document 1 does not describe a system that realizes a rational use of an information-carrying medium capable of multiple types of communication.

[0005] Similar problems arise even if the information carrying medium is in the form of a cylinder, coin, or other type of information carrying medium, rather than a card such as a contactless IC card.

[0006] The problem that the present invention aims to solve is to provide a system that can realize rational use of information carrying media capable of multiple types of communication, or technology for information carrying media used in such a system.

[0007] The first form is a computer system that is installed in a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, and that communicates wirelessly with an information carrying medium carried by the user, wherein the information carrying medium is equipped with a first communication unit that is capable of wireless communication within a first communication distance for communication related to identification information data stored in a first memory unit, and a second communication unit that is not capable of communication within the first communication distance but is capable of wireless communication within a second communication distance that is shorter than the first communication distance for communication related to personal information data stored in a second memory unit; a visit detection unit that detects the user's visit by communicating wirelessly with the first communication unit to obtain the identification information data when the information carrying medium is present within the first communication distance; a reception control unit that, when detection is made by the visit detection unit, receives information related to the visiting user; and a main processing unit that, when the information carrying medium is present within the second communication distance, communicates wirelessly with the second communication unit to obtain, update, or add data to the personal information data.

[0008] In a first embodiment of the computer system, a visitor detection unit detects the visit of a user carrying an information carrying medium by acquiring identification information data from the information carrying medium located within a first communication distance in a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, and when this detection is made, a reception control unit accepts the visit of the user. Furthermore, a main processing unit acquires personal information data from an information carrying medium located within a second communication distance that is shorter than the first communication distance, and updates or adds data to the personal information data.

[0009] From the user's perspective, when the user visits the service space and the distance to the visitor detection unit is within the first communication distance, the visit is detected. The user can then be accepted by the reception control unit. Furthermore, by bringing the information carrying medium within a second communication distance, which is shorter than the first communication distance, the personal information data stored on the information carrying medium can be read, updated, or additional data can be added. Therefore, it is possible to build a system that realizes rational use of information carrying media capable of multiple types of communication.

[0010] A second form is a computer system in which, in the above-mentioned computer system, the second memory unit stores the personal information data as data that can be determined through a predetermined security processing, and the main processing unit has a security processing unit that performs the security processing.

[0011] According to the second embodiment, the second storage unit stores data that can be determined through security processing (e.g., processing such as decrypting encrypted data). Therefore, even if the information carrier medium is within a second communication distance that is shorter than the first communication distance and personal information data is read, the content of the data cannot be determined simply by reading it. In other words, the security of the data stored in the information carrier medium can be ensured.

[0012] In a third aspect, in the computer system described above, the security processing is processing related to biometric authentication using a physical feature, and the computer system further includes a physical feature acquisition unit that acquires the physical feature of the user to be used for the biometric authentication, and the main processing unit performs the security processing using data acquired by the physical feature acquisition unit.

[0013] According to the third aspect, a system with an even higher security level can be realized.

[0014] A fourth form is a computer system in which, in the above-mentioned computer system, the information carrying medium has a display unit that displays rewritable code information that encodes the user's personal information, and further has a reading unit that reads the code information displayed on the display unit, and the main processing unit controls updating of the code information displayed on the display unit.

[0015] According to the fourth aspect, the information carrying medium is provided with a display unit that displays code information obtained by encoding the user's personal information, and a system can be realized that can update the code information displayed on the display unit of the information carrying medium.

[0016] A fifth form is an information carrying medium carried by a user that wirelessly communicates with a computer system installed in a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, wherein the computer system includes a low-grade system having a predetermined low security grade for information processing and a high-grade system having a predetermined high security grade, the high-grade system is equipped with a security processing unit that performs predetermined security processing to determine data content, and the service space includes a low-grade space in which the low-grade system is installed and a high-grade space in which the high-grade system is installed, An information carrying medium comprising: a first memory unit that stores identification information data; a first communication unit that is capable of wireless communication with the low-grade system and the high-grade system within a first communication distance for communication related to the data stored in the first memory unit; a second memory unit that stores personal information data that can be determined through the security processing; and a second communication unit that is not capable of communication within the first communication distance but is capable of wireless communication with the high-grade system within a second communication distance that is shorter than the first communication distance for communication related to the data stored in the second memory unit.

[0017] According to the fifth aspect, the user can position the information carrying medium within a first communication distance for either a high-grade system or a low-grade system according to the security grade, and the information carrying medium can be wirelessly communicated with by the first communication unit. On the other hand, when the information carrying medium is positioned within a second communication distance that is shorter than the first communication distance, wireless communication by the second communication unit is possible in the high-grade system.

[0018] That is, according to the fifth aspect, it is possible to realize an information carrying medium that can be used in a rational manner by using an information carrying medium that is capable of multiple types of communication.

[0019] The sixth form is an information carrying medium comprising the above-mentioned information carrying medium, which is provided with a display unit that displays rewritable code information that encodes the user's personal information, and the high-grade system is provided with a reading unit that reads the code information and a control unit that controls updating of the code information displayed on the display unit.

[0020] According to the sixth aspect, an information carrying medium can be realized that has a display unit that displays code information that encodes the user's personal information. The code information displayed on the display unit can be read and updated by a high-grade system.

[0021] A seventh form is an information carrying medium further comprising a display unit that displays rewritable code information that encodes the user's personal information, wherein the computer system has a medium-grade system whose security grade is higher than the low grade and lower than the high grade, the medium-grade system having a reading unit that reads the code information, the service space has a medium-grade space in which the medium-grade system is installed, and the first communication unit is capable of wireless communication with the low-grade system, the medium-grade system, and the high-grade system within the first communication distance.

[0022] According to the seventh aspect, one information carrying medium can be used for a plurality of systems with different security levels.

[0023] 7 is a diagram showing an example of the configuration of an operation system. FIG. 8 is a diagram showing an example of the configuration of an information carrying card. FIG. 9 is a diagram for explaining the data stored in an information carrying card and the storage location. A table summarizing examples of information content, storage location, acquisition method, and encryption / decryption key examples for data stored in an information carrying card, by confidentiality grade. A flowchart for explaining the flow of processing executed by a card issuing machine. A flowchart for explaining the flow of processing executed in a card usage system. A flowchart continuing from FIG. 6. A flowchart continuing from FIG. 7. A diagram for explaining an example of using an information carrying card in a plurality of service spaces equipped with a card usage system. A diagram showing an example of the configuration of an information carrying card in a second embodiment. A diagram showing an example of the structure of data stored in an information carrying card in the second embodiment. A flowchart for explaining the processing flow of an information carrying card in the second embodiment.

[0024] [First embodiment] Fig. 1 is a diagram showing an example of the configuration of an operation system. The operation system 3 includes information carrying cards 10, card issuing machines 100, and card usage systems 200. In actual operation, the number of information carrying cards 10, card issuing machines 100, and card usage systems 200 is not limited to the number shown in the figure. Furthermore, the size of each of the information carrying cards 10, card issuing machines 100, and card usage systems 200 in the figure is drawn to an appropriate scale.

[0025] The information carrying card 10 is an information carrying medium that functions as a contactless IC card that is owned and carried by each user. The information carrying card 10 has an EPD (Electric-Paper-Display) 30 on its surface, which displays a facial image 12 of the user who owns the card and code information 14 that encodes the user's personal information data. In the example of Fig. 1, a matrix-type two-dimensional code is shown as the code information 14, but other types of codes may also be used.

[0026] 2 is a diagram showing an example of the configuration of the information carrying card 10. The information carrying card 10 is a card with a laminated structure having a panel layer 16 and an IC layer 18. Note that the information carrying card 10 may also have layers other than the panel layer 16 and the IC layer 18 (for example, a surface protective transparent resin layer, a back surface protective resin layer, etc.).

[0027] The information carrier card 10 includes an EPD 30 on the panel layer 16. The IC layer 18 includes an EPD control IC 32, an EPD antenna 34, an EPD communication IC 36, a power storage unit 38, and an electromagnetic induction coil 39.

[0028] The EPD control IC 32 has a display control circuit for the EPD 30 and a memory that stores data of images to be displayed on the EPD 30. The EPD control IC 32 wirelessly communicates with an external device via the EPD antenna 34 and the EPD communication IC 36, and acquires and stores image and text data to be displayed on the EPD 30 from the external device. Then, the EPD control IC 32 displays an image (face image 12 and code information 14) based on the stored data on the EPD 30.

[0029] The power required to drive the EPD 30, the EPD control IC 32, etc. is supplied by generating electricity by receiving radio waves for wireless communication with the EPD control IC 32 from the outside using an electromagnetic induction coil 39, and storing the electricity in a power storage unit 38. A configuration in which the EPD antenna 34 also serves as the electromagnetic induction coil 39 is also possible. Depending on the power consumption of the EPD 30, the power storage unit 38 may be omitted, or a thin battery or secondary battery may be installed instead of the power storage unit 38.

[0030] The information carrier card 10 has a first inlet 41 and a second inlet 45 in the IC layer 18. The first inlet 41 is a UHF band RFID tag having a UHF band antenna 42 and an IC chip 43 that realize near-field communication within a first communication distance of 10 meters or less, preferably within a few meters. The second inlet 45 is an HF band RFID tag having an HF band antenna 46 and an IC chip 47 that enable near-field communication within a second communication distance of 1 meter or less, preferably within a few tens of centimeters, but not capable of communication over several meters.

[0031] 3 is a diagram for explaining the data stored in the information carrying card 10 and the storage location. The information carrying card 10 stores data according to a confidentiality grade required depending on the content of the data, and stores data in four grades: grade 0, grade 1, grade 2, and grade 3. Grade 0 is the lowest confidentiality grade, corresponding to unconditional disclosure. The confidentiality grades increase in the order of grade 1 → grade 2 → grade 3, with grade 3 being the highest confidentiality grade. The number of confidentiality grades may be three or less, or five or more. The confidentiality grades can be set appropriately depending on the content of the data stored in the information carrying card 10.

[0032] The zeroth grade data is stored in first inlet 41. Specifically, first inlet 41 stores identification information data 50, which is identification information unique to the card, name tag data 52, and template data for biometric authentication of identity (identification template 54, second grade template 56, third grade template 58).

[0033] The identification information data 50 is data for identifying the information carrying card 10 and is stored as non-rewritable data unique to the information carrying card 10. The name tag data 52 is text data such as the name, age, and gender of the user who owns the information carrying card 10. The identity verification template 54 is template data for facial authentication. The second grade template 56 is template data for biometric authentication to obtain second grade data and also serves as the identity verification template 54. The third grade template 58 is template data for biometric authentication to obtain third grade data.

[0034] The first-grade data is stored in the EPD control IC 32. Specifically, the EPD control IC 32 stores EPD display face image data 60 for displaying the face image 12 and code information data 62 for displaying the code information 14. The code information data 62 is one type of personal information data of the user. Taking medical-related data as an example, the code information data 62 is coded data such as allergy information, including names of foods and drugs to which the user is allergic, and medication instruction information for prescribed medication. Medication instruction information includes, for example, the type and number of medications to be taken for each timing of medication administration, instructions on when to take medication (before / during / after meals), and names of foods to avoid with prescribed medication. Of course, other information may also be coded. Therefore, the EPD 30 is a display unit 9h that rewritably displays the coded code information 14 of the user's personal information (see FIG. 2 ).

[0035] Both the second-grade data and the third-grade data are encrypted personal user data, and both are stored in the second inlet 45. Examples of medical-related data include the name of the attending physician 70, prescription data 72, the name of the attending pharmacist 74, and a prescription history 76. The third-grade data includes diagnostic information data 78. Of course, data other than the example shown in FIG. 3 may also be used. The second-grade data group and the third-grade data group are appropriately provided with data headers 80a, 80b indicating the beginning of the storage area for the data group.

[0036] The IC chip 43 of the first inlet 41 is a first storage unit 9m that stores the identification information data 50. The first inlet 41 can be said to be a first communication unit 9a that is capable of wireless communication within a first communication distance for communication related to the identification information data 50 stored in the first storage unit 9m.

[0037] The IC chip 47 of the second inlet 45 is a second storage unit 9n that stores personal information data that can be determined through security processing. The second inlet 45 can be considered a second communication unit 9b that is incapable of communication within a first communication distance but is capable of wireless communication within a second communication distance that is shorter than the first communication distance for communication related to the personal information data stored in the second storage unit 9n. Examples of the personal information data stored in the second storage unit 9n include the code information data 62, the doctor's name 70, the prescription data 72, and the diagnosis information data 78.

[0038] 4 is a table summarizing examples of data stored in the information carrier card 10, sorted by confidentiality grade, including examples of information content, storage location, acquisition method, and encryption / decryption key. Grade 0 data and Grade 1 data are not encrypted. Grade 0 data is stored in the first inlet 41, and can be read by an RFID reader within the first communication distance corresponding to the first inlet 41.

[0039] First-grade data is code information 14 that indicates the code displayed on the EPD 30. In order for the card usage system 200 to obtain first-grade data, the code information 14 must be photographed with a camera. Therefore, if a user is willing to provide first-grade data, they must take out the information carrying card 10, expose it, and point the code information 14 at the camera at their own discretion. The user can decide on the spot whether or not to provide first-grade data. Therefore, first-grade data can be said to have a higher security level than zero-grade data.

[0040] Since the second-grade data and the third-grade data are stored in the second inlet 45, which has a communication distance of several tens of centimeters, the user must decide for himself whether to bring the information carrier card 10 closer to the card reader / writer. In other words, the user can decide on the spot whether to provide the second-grade and third-grade data.

[0041] Furthermore, second-grade data is encrypted with an encryption key generated from the facial image 12 and is decrypted with a decryption key generated from the facial image 12. Third-grade data is encrypted with an encryption key generated from one or both of the fingerprint and finger vein scan data and is decrypted with a decryption key also generated from one or both of the fingerprint and finger vein scan data. Therefore, second-grade and third-grade data can be said to have a higher security level than first-grade data.

[0042] Furthermore, while faces can be photographed relatively easily with a camera, fingerprints and finger veins require a form of authentication, such as the user intentionally placing their finger on a sensor. Therefore, third-grade data can be said to have a higher security level than second-grade data.

[0043] Returning to FIG. 1 , the card issuing machine 100 has a combined card reader / writer 102 , a wireless power supply unit 104 , a fingerprint scanner 106 , a finger vein scanner 108 , a touch panel display 110 , a camera 112 , and a control board 114 .

[0044] The combined card reader / writer 102 performs contactless communication with the EPD control IC 32, the first inlet 41, and the second inlet 45. Specifically, it is a combined device that includes an EPD data writer, a UHF band RFID reader / writer, and an HF band RFID reader / writer. It may be realized by three writer devices, or the EPD reader / writer may also function as an HF band RFID reader / writer. The UHF band RFID reader / writer and the HF band RFID reader / writer may be realized by a single reader / writer device that can switch frequencies.

[0045] The wireless power supply unit 104 has an electromagnetic coil that supplies power to the information carrying card 10 by generating power in the electromagnetic induction coil 39 of the information carrying card 10 by electromagnetic induction. In a configuration in which an RFID antenna is used as the EPD antenna 34, the wireless power supply unit 104 may also be used as the combined card reader / writer 102.

[0046] 5 is a flowchart for explaining the flow of processing executed by the card issuing machine 100. It is assumed that a new information carrying card 10 is placed on the combined card reader / writer 102 before the processing starts.

[0047] The card issuing machine 100 displays an operation guide on the touch panel display 110 to prompt the user to input information such as name and age, and accepts the input of information to be used as name tag data 52 (step S10). For example, a software keyboard is displayed on the touch panel display 110 to accept the input of name, age, etc. Then, the card issuing machine 100 generates name tag data 52 and writes it to the first inlet 41 (step S12).

[0048] Next, the card issuing machine 100 displays an operation guide on the touch panel display 110 informing the user that a face image will be taken with the camera 112, and then takes a face image (step S14).Then, the card issuing machine 100 generates face image data 60 for EPD display and writes it to the EPD control IC 32 (step S16).

[0049] Next, the card issuing machine 100 displays an operation guide on the touch panel display 110 to prompt the user to input allergy information, and accepts the input of the allergy information (step S18).Then, the input allergy information is coded to generate code information data 62, and the coded information data 62 is written to the EPD control IC 32 (step S20).

[0050] Next, the card issuing machine 100 generates an identity verification template 54 (second grade template 56) from the face image captured in step S14, and writes it into the first inlet 41 (step S22).

[0051] Next, the card issuing machine 100 displays an operation guide on the touch panel display 110 to prompt the user to place their finger on the fingerprint scanner 106, and scans the fingerprint and finger veins (step S24).Then, the card issuing machine 100 generates a third grade template 58 from the scan data and writes it to the first inlet 41 (step S26).

[0052] Returning to Figure 1, the card usage system 200 is a computer system that is installed in a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, and that communicates wirelessly with the information-carrying card 10 carried by the user.

[0053] The card usage system 200 includes a system control computer 202 , a customer database 204 , a reception UHF band RFID reader 206 , a reception touch panel display 208 , an authentication device 220 , and a card reader / writer 230 .

[0054] The system control computer 202 is connected to each of the following elements: a customer database 204, a reception UHF band RFID reader 206, a reception touch panel display 208, an authentication device 220, and a card reader / writer 230, via wired or wireless communication, and controls the system in an integrated manner.

[0055] The customer database 204 stores various information (customer information) associated with each customer of the service provider who uses the system.

[0056] The reception UHF band RFID reader 206 and the reception touch panel display 208 are installed at the entrance to the service space. The reception UHF band RFID reader 206 wirelessly communicates with the first inlet 41 of the information carrying card 10, automatically recognizes the information carrying card 10 that has entered its communication range, and reads various data stored in the first inlet 41 (see FIG. 3 ). The reception UHF band RFID reader 206 then outputs the data read from the first inlet 41 to the system control computer 202. Thus, when an information carrying card 10 (information carrying medium) is present within the first communication distance of the first inlet 41, the reception UHF band RFID reader 206 wirelessly communicates with the first communication unit 9a to acquire the identification information data 50, thereby functioning as a visitor detection unit 9c that detects the arrival of a user.

[0057] The reception touch panel display 208 displays various information related to the reception of users who visit the service space and accepts operational inputs. The reception touch panel display 208 is equipped with a camera 210 for photographing the user's face and the code information 14 on the information carrying card 10, and outputs the photographed image data, i.e., biometric information, to the system control computer 202. Thus, the camera 210 is a physical feature acquisition unit 9g that acquires the user's physical features to be used for biometric authentication. The camera 210 also serves as a reading unit 9j that reads the code information stored on the information carrying card 10.

[0058] The system control computer 202 identifies the visitor user from the identification information data 50 and name tag data 52 among the data read from the first inlet 41. If the identification information data 50 and name tag data 52 are not registered in the customer database 204, a given new reception display prepared for new customers is displayed on the reception touch panel display 208. If the identification information data 50 and name tag data 52 are registered in the customer database 204, a given return reception display prepared for customers is displayed on the reception touch panel display 208. In other words, when a visit is detected by the visit detection unit 9c, the system control computer 202 functions as the reception control unit 9d that receives the visiting user.

[0059] The new reception display may display, for example, "Welcome, Mr. / Ms. [Name included in name tag data 52]. This is your first time using the service. We will now accept your new reception." After that, the system accepts input of information necessary for customer registration, and displays information necessary for new provision of services to be provided in the service space. The return reception display may display, for example, "Welcome, Mr. / Ms. [Name included in name tag data 52]. We are pleased to see you again. We will now accept your return reception based on your previous record." Other information necessary for new provision of services to be provided in the service space may also be displayed. The reception control unit 9d may perform reception processing based on the identification information data 50 instead of the name tag data 52. In this case, if the user's identification name associated with the identification information data 50 is registered in the customer database 204, the return reception display may be displayed using that identification name.

[0060] The system control computer 202 identifies the visitor from the identification information data 50 and name tag data 52 among the data read from the first inlet 41, reads a customer information file from the customer database 204, and executes various processes related to the provision of services. For example, if the service space equipped with the card usage system 200 is a hospital, it reads medical record information, etc.

[0061] The authentication device 220 acquires information necessary for authentication to read additional information from the visitor's information carrying card 10 in connection with the provision of services. The authentication device 220 includes a touch panel display 222, a face authentication camera 224, a fingerprint scanner 226, and a finger vein scanner 228. Additionally, the device may be equipped with a control microcomputer, a communication device, etc. as appropriate. The face authentication camera 224, the fingerprint scanner 226, and the finger vein scanner 228 constitute a physical feature acquisition unit 9g that acquires the user's physical features for use in biometric authentication. The camera 224 also serves as a reading unit 9j that reads code information stored in the information carrying card 10.

[0062] The authentication device 220 and the card reader / writer 230 are installed as a set at a service provision spot where services are directly provided to users. The service provision spot is set up within a service space. For example, if the card usage system 200 is installed in a hospital, the authentication device 220 and the card reader / writer 230 are installed as a set in an examination room or treatment room. If the card usage system 200 is installed in a dispensing pharmacy, the authentication device 220 and the card reader / writer 230 are installed as a set at each of multiple reception counters within the store.

[0063] The authentication device 220 displays operation guides and the like on a touch panel display 222 under display control of the system control computer 202, and in some cases accepts input of a personal identification number, password, etc., and outputs this data to the system control computer 202. It also outputs image data captured by a camera 224 and scan data obtained by a fingerprint scanner 226 and a finger vein scanner 228 to the system control computer 202.

[0064] The card reader / writer 230 is a device capable of contactless communication with the EPD control IC 32, the first inlet 41, and the second inlet 45. Specifically, it includes an EPD data writer, a UHF band RFID reader / writer, and an HF band RFID reader / writer. It may be realized by three reader / writer devices, or the EPD data writer may also function as the HF band RFID reader / writer. The UHF band RFID reader / writer and the HF band RFID reader / writer may be realized by a single reader / writer device capable of switching frequencies.

[0065] In other words, when an information carrying card 10 (information carrying medium) is present within the second communication distance of the second inlet 45, the system control computer 202 functions as a main processing unit 9e that performs wireless communication with the second inlet 45 (second communication unit 9b) to acquire, update, or add personal information data (various types of information of the second and third grades, for example, prescription data 72, diagnostic information data 78, etc.; see Figure 3).

[0066] 6 to 8 are flowcharts for explaining the flow of processing executed by the card usage system 200. FIG.

[0067] As shown in Figure 6, the card usage system 200 communicates with the first inlet 41 of the information-carrying card 10 that has entered the communication range of the reception UHF band RFID reader 206, and reads the identification information data 50, name tag data 52, personal identification template 54 (second grade template 56), and third grade template 58 from the first inlet 41 (step S50).

[0068] Next, the card usage system 200 accesses the customer database 204 to search for the presence or absence of a customer registration corresponding to the read identification information data 50 and name tag data 52 .

[0069] If the customer is not registered (NO in step S52), the card usage system 200 displays a new reception screen on the reception touch panel display 208 and executes new reception processing (step S54).If the customer is registered (YES in step S52), the card usage system 200 displays a return visit reception screen on the reception touch panel display 208 and executes return visit reception processing (step S56).

[0070] Next, the card usage system 200 performs identity verification of the visitor. Specifically, a request is displayed on the reception touch panel display 208 requesting that the visitor's face be photographed with the camera 210 for identity verification (step S60). The face image is then captured with the camera 210 (step S62), and the image is compared with the scanned identity verification template 54 to perform identity verification (step S64).

[0071] If the identity verification is successful (YES in step S66), the card usage system 200 displays a message on the reception touch panel display 208 urging the user to proceed to the service providing spot within the service space (step S68).

[0072] This completes the reception process, and the visitor then follows the instructions to the service providing spot, where an authentication device 220 and a card reader / writer 230 are installed.

[0073] The card usage system 200 executes a process for acquiring the first-grade data. Specifically, a message is displayed on the touch panel display 222 of the authentication device 220 requesting that the camera 224 photograph the code information 14 of the information carrying card 10 in order to read the first-grade data (step S70). The card usage system 200 then photographs the code information 14 with the camera 224 (step S72) and decodes the code information 14 (step S74).

[0074] Next, the card usage system 200 executes a process for acquiring second-grade data. Specifically, the card usage system 200 performs second-grade identity verification (step S80). That is, the system performs face authentication (biometric authentication) by comparing the captured facial image with the scanned second-grade template 56.

[0075] If the second-grade identity verification is passed (YES in step S82), the card usage system 200 then displays a message on the touch panel display 222 of the authentication device 220 urging the user to bring the information carrying card 10 closer to the card reader / writer 230 to read the second-grade data (step S84).Then, the card usage system 200 reads the data from the second inlet 45 with the HF band RFID reader 232 of the card reader / writer 230 (step S86).

[0076] 7, the card reader / writer 230 then generates a decryption key for the second grade from the captured facial image (step S88) and decrypts the read second grade data (step S90). In steps S88 and S90, the system control computer 202 can be said to have the function of a security processing unit 9f that performs security processing to make the data stored in the second inlet 45 of the information carrying card 10 discernible (see FIG. 1).

[0077] Next, the card usage system 200 executes a process for acquiring third-grade data. Specifically, the card usage system 200 displays a message on the touch panel display 222 of the authentication device 220 prompting the user to place their finger against the fingerprint scanner 226 and finger vein scanner 228 of the authentication device 220 to read the third-grade data (step S100). The card usage system 200 scans the fingerprint and finger veins (step S102) and compares them with the scanned third-grade template 58 to perform fingerprint authentication and finger vein authentication (biometric authentication) to verify the user's identity (step S104).

[0078] If the fingerprint authentication and finger vein authentication are successful (YES in step S106), a decryption key for the third grade is generated from the fingerprint and finger vein (step S108), and the read third grade data is decrypted (step S110). In steps S108 and S110, the system control computer 202 can be said to have the function of a security processing unit 9f that performs security processing to make it possible to identify the data stored in the second inlet 45 of the information carrier card 10 (see FIG. 1).

[0079] This allows the card usage system 200 to obtain various information required for providing services from the information carrying card 10.

[0080] Next, when the card usage system 200 detects an instruction to update the second-grade and third-grade information (YES in step S120), it creates second-grade data and third-grade original data for rewriting according to the instruction (step S122).Then, it generates an encryption key for the second-grade from the already captured facial image (step S124) and encrypts the second-grade original data for rewriting (step S126).

[0081] Next, the card usage system 200 generates a third-grade encryption key from the already read fingerprint and finger vein scan data (step S128), encrypts the created third-grade data (step S130), and writes the encrypted second-grade data and the encrypted third-grade data to the second inlet 45 (step S132).

[0082] 8, when the card usage system 200 detects an operation to change the information coded as the code information 14 (YES in step S150), it accepts an operation to edit the already decoded information (step S152).

[0083] Next, the card usage system 200 displays a request to bring the information carrier card 10 close to the card reader / writer 230 to rewrite the code information data 62 (step S154). If communication with the EPD control IC 32 is established within a predetermined time from the start of the request display (YES in step S156), the card usage system 200 determines that approval for rewriting the code information 14 has been obtained, and rewrites the code information data 62 in the EPD control IC 32 (step S158). In step S158, the system control computer 202 functions as a control unit 9k that controls updating of the code information 14 (see FIG. 1).

[0084] The card usage system 200 repeats steps S120 to S158 until a predetermined usage termination operation is input (NO in step S170). When a usage termination operation is input (YES in step S170), the series of processes ends.

[0085] If the user does not pass the identity verification process (for example, NO in step S66, NO in step S82, NO in step S106), or if the user's approval is not obtained (for example, NO in step S158), a predetermined authentication failure process is executed (step S172), and the process ends.

[0086] In a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, a visitor detection unit 9c detects a user's visit by acquiring identification information data 50 from an information carrying card 10 located within a first communication distance, and when this detection is made, a reception control unit 9d accepts the user. Furthermore, a main processing unit 9e acquires personal information data from an information carrying card 10 located within a second communication distance that is shorter than the first communication distance, and updates or adds data to this data.

[0087] From the user's perspective, when the user visits the service space and the distance to the visitor detection unit 9c is within the first communication distance, the visit is detected. The user can then be accepted by the reception control unit 9d. Furthermore, by bringing the information carrying card 10 closer to within a second communication distance, which is shorter than the first communication distance, the personal information data stored in the information carrying card 10 can be read, updated, or additional data can be added. Therefore, it is possible to build a system that realizes rational use of the information carrying card 10, which is capable of multiple types of communication.

[0088] There are multiple types of service spaces in which card usage systems 200 are installed, depending on the security level indicating the confidentiality of the information handled. In this embodiment, as a specific example, three types of service spaces are described: high-level space, medium-level space, and low-level space. There are also multiple types of card usage systems 200 depending on the service spaces according to the security levels. In this embodiment, the card usage systems 200 installed in high-level spaces are referred to as high-level systems, the card usage systems 200 installed in medium-level spaces are referred to as medium-level systems, and the card usage systems 200 installed in low-level spaces are referred to as low-level systems.

[0089] The high-grade system is a system in which the security level of information processing is a predetermined high level. The high-grade system is a system in which data of all grades, including data of grade 3, can be read and used from the information carrying card 10, and is a system with a relatively high security level. The high-grade system includes all elements of the card usage system 200 shown in Figure 1. The processing flow executed in the high-grade system is as described in Figures 6 to 8.

[0090] The medium-level system is a system in which the security level of information processing is a predetermined medium level. The medium-level system is a system in which data from grade 0 to grade 2 can be read and used from the information carrying card 10, and is a system with a relatively intermediate security level. The medium-level system includes all the elements of the card usage system 200 shown in FIG. 1, but does not perform processing related to grade 3 data (e.g., steps S100 to S110, steps S128 to S132, etc. in FIG. 7).

[0091] A low-grade system is a system in which the security grade of information processing is a predetermined low grade. A low-grade system is a system in which data from grade 0 to grade 1 can be read from the information carrying card 10 and made available, and is a system with a relatively low security grade. The low-grade system has a configuration in which the authentication device 220 and the card reader / writer 230 are omitted from the configuration of the card usage system 200 shown in FIG. 1. In addition, the low-grade system does not execute processing related to data of grades 2 and 3 (e.g., steps S80 to S132 in FIG. 7).

[0092] 9 is a diagram for explaining an example of using the information carrying card 10 in a plurality of service spaces equipped with the card usage system 200. A hospital 4, a dispensing pharmacy 5, and a restaurant 6 are given as examples of service spaces equipped with the card usage system 200.

[0093] Hospital 4 is a high-grade space capable of handling second-grade and third-grade information (e.g., doctor's name 70, prescription data 72, and diagnosis information data 78 in Figure 3), and is equipped with a high-grade card usage system 200H.

[0094] Dispensing pharmacy 5 is a medium-grade space that cannot handle third-grade information but can handle second-grade information (e.g., prescription data 72, name of pharmacist in charge 74, prescription history 76 in Figure 3), and is equipped with a medium-grade card usage system 200M.

[0095] Restaurant 6 is a low-grade space that cannot handle second-grade and third-grade information, and is equipped with a low-grade card usage system 200L.

[0096] The case will be described where a user carrying an information carrying card 10 is examined at a hospital 4, receives a prescription, receives the prescribed medicine at a dispensing pharmacy 5, eats at a restaurant 6, and then goes home.

[0097] As explained above, in each of the card usage systems 200H, 200M, and 200L, the reception UHF band RFID reader 206 and the reception touch panel display 208 are installed in a location suitable for reception, near the entrance to each service space.

[0098] When a user enters one of these service spaces and enters the communication range of the reception UHF band RFID reader 206, the identification information data 50 and name tag data 52 are read from the information carrying card 10, and a reception display for the user is displayed on the reception touch panel display 208. After completing the reception, the user goes to a service providing spot in each service space.

[0099] In the case of the hospital 4, the service provision spot is an examination room or a treatment room. Using the authentication device 220 or the card reader / writer 230 installed in the examination room or the treatment room, data from the first grade to the third grade can be read from the information carrying card 10 and used for examination by a doctor, etc.

[0100] Then, after the examination or the like is completed, the doctor can change the coded information coded as the code information 14 to new information (steps S152 to S158 in FIG. 8) by inputting a change operation for the information coded as the code information 14 into the card usage system 200 (step S150 in FIG. 8). For example, if a new allergy is discovered as a result of the examination or testing, the allergy information can be added, the code information data 62 can be updated, and the code information 14 displayed on the information carrying card 10 can be updated. Furthermore, depending on the diagnosed illness, information about dietary restrictions (for example, if the patient is diagnosed with diabetes, precautions regarding carbohydrate restriction) can be added to the code information data 62.

[0101] In addition, when a doctor issues a new prescription or makes a new diagnosis, he or she can rewrite the second-grade prescription data 72 and the third-grade diagnostic information data 78 stored on the information carrying card 10 (steps S122 to S132 in FIG. 7) by performing an update instruction operation for the second-grade and third-grade information (step S120 in FIG. 7).

[0102] In the case of the dispensing pharmacy 5, the service provision spot is the reception desk. Using the authentication device 220 installed at the reception desk, the second grade data stored in the second inlet 45 of the information carrying card 10 can be read out and used by the pharmacist in dispensing work.

[0103] After dispensing, the pharmacist issues an instruction to update the second- and third-grade information (see step S120 in FIG. 7) and creates a prescription history 76 as one of the services provided (see step S122 in FIG. 7). The pharmacist can then rewrite the data stored on the information carrying card 10 so that it is added to the second-grade data (steps S124 to S128 in FIG. 7). However, because the card usage system 200 of the dispensing pharmacy 5 is an intermediate-grade system, the third-grade data stored on the information carrying card 10, such as the diagnostic information data 78, cannot be read or changed.

[0104] Furthermore, if the pharmacist inputs an operation to change the information coded as code information 14 in the card usage system 200 (step S150 in FIG. 8), the pharmacist can add new information, such as medication instruction information for the currently prescribed drug, to the coded first grade information and change it (steps S152 to S158 in FIG. 8).

[0105] In the case of restaurant 6, the service provision spot is a table. Using the camera 210 of the reception touch panel display 208 installed on the table, allergy information, dietary restriction information, and medication instruction information can be extracted from the code information 14 of the information carrying card 10 and used to provide the service.

[0106] For example, the reception touch panel display 208 may be equipped with a menu display function, which may compare the ingredient information for each menu item and display a warning for menu items containing allergens to the user, or may display menu items containing allergens while hiding or making them unselectable. Furthermore, if the code information 14 includes dietary restriction information, a warning may be displayed for menu items whose content of restricted foods is close to or exceeds the limit. Furthermore, if the code information 14 includes medication instruction information, a warning regarding the timing of medication administration may be displayed. For example, for post-meal medication, the name and number of medications to be taken may be displayed after the average mealtime at the restaurant has elapsed (e.g., one hour), prompting the user to take the medication. If the name tag data 52 includes an email address, an email containing the name and number of medications to be taken and a message prompting the user to take the medication may be sent after the average mealtime at the restaurant has elapsed.

[0107] It should be noted that the card usage system 200L of the restaurant 6 is a low-grade system, and therefore the second-grade and third-grade data stored in the information carrying card 10 is not accessed.

[0108] Since the data required for personal authentication and the data for each grade are stored in the information carrying card 10, there is no need to prepare a server for personal authentication. Furthermore, for the card usage system 200 to read and use the data stored in the information carrying card 10, security barriers must be overcome, such as the user's consent, such as presenting the card or responding to a biometric authentication read, personal authentication through biometric authentication, and the generation and decryption of a decryption key based on the biometric information. Therefore, even if the information carrying card 10 is used in multiple service spaces, the data will not be read, used, or changed in a service space that does not meet the security grade. Users can carry their information safely.

[0109] For a user, by positioning information carrying card 10 within a first communication distance, information carrying card 10 can communicate wirelessly via first communication unit 9a with any of the high-grade system (card use system 200H), medium-grade system (card use system 200M), and low-grade system (card use system 200L) according to the security grade. On the other hand, when information carrying card 10 is positioned within a second communication distance that is shorter than the first communication distance, wireless communication via second communication unit 9b is possible in the high-grade system and the medium-grade system. Therefore, it is possible to realize an information carrying card 10 that can be used in a rational manner using an information carrying card capable of multiple types of communication.

[0110] The security levels may be four or more instead of three, or may be two with no intermediate level system.

[0111] Second Embodiment Next, a second embodiment to which the present invention is applied will be described. This embodiment is basically the same as the first embodiment, but differs in the configuration of the information carrying card 10. Hereinafter, differences from the first embodiment will be mainly described, and elements similar to those in the first embodiment will be given the same reference numerals as in the first embodiment, and redundant explanations will be omitted.

[0112] 10 is a diagram showing an example of the configuration of an information carrying card 10B in the second embodiment. The information carrying card 10B includes an EPD 30B with a touch panel that is integrated with the touch panel and allows touch input to the display surface. Accordingly, a control circuit 20 is mounted instead of the EPD control IC 32. The control circuit 20 includes a CPU 21, a memory 22, an interface circuit 23, and a communication module 24.

[0113] The communication module 24 is connected to the EPD antenna 34, the UHF band antenna 42, and the HF band antenna 46, and realizes wireless communication in each frequency band. Note that the communication module 24 may be provided independently for each antenna.

[0114] By executing the control program stored in memory 22, CPU 21 controls wireless communication with card issuing machine 100 and card usage system 200 via communication module 24, operation input via the touch panel of EPD 30B, and management of various data stored in memory 22.

[0115] The memory 22 stores the control program and the data stored in the EPD control IC 32, the first inlet 41, and the second inlet 45 in the first embodiment (see FIG. 3) in a common data structure shown in FIG.

[0116] The memory 22 cumulatively stores data used in the card usage system 200. Each piece of stored data has a data ID 301, a usage system name 302, an information name 304, a confidentiality grade 306, a provision permission setting 308, and a data body 310.

[0117] The system name 302 is text data of the name of the card system 200 that uses the data.

[0118] The information name 304 indicates the content of the information contained in the data, such as text data such as "Name of doctor in charge," "Prescription from XX Hospital, June 5, 2023," and "Diagnosis information from XX Hospital, June 5, 2023."

[0119] The provision permission setting 308 indicates whether to permit or deny provision of the data to the card usage system 200. When the data is first stored in the memory 22, the initial value is set to permit. The CPU 21 controls so that the data is not provided even if a read request is made from the card usage system 200 for data that has been set to deny.

[0120] 12 is a flowchart for explaining the flow of processing of the information carrier card 10B. When the information carrier card 10B receives a predetermined data rewrite request signal via the EPD antenna 34 (YES in step S200), it rewrites the data for displaying the EPD (step S202).

[0121] When the UHF band antenna 42 receives a data write request signal for grade 0 (YES in step S204), the information carrying card 10B receives and stores grade 0 data such as the identification information data 50 and name tag data 52 (step S206).

[0122] When the UHF band antenna 42 receives a data read request signal for grade 0 (YES in step S208), the information carrier card 10B transmits grade 0 data such as the identification information data 50 and name tag data 52 (step S210).

[0123] When writing second or third grade data to the information carrying card 10B, the card using system 200 transmits the system name, the name of the information to be written, and the confidentiality grade together with a predetermined write request signal.

[0124] When the information carrier card 10B receives a write request signal via the HF band antenna 46 (YES in step S212), it searches for data that matches the received system name, information name, and confidentiality grade, and if there is any matching data, it overwrites and saves it. If there is no matching data, it saves it as new data (step S214).

[0125] When reading second-grade or third-grade data from the information carrying card 10B, the card using system 200 transmits the system name, the name of the information to be read, and the confidentiality grade together with a predetermined read request signal.

[0126] When the information carrier card 10B receives the read request signal via the HF band antenna 46 (YES in step S220), it displays the requestor's system name 302, the information name 304 for each requested data, and the provision permission setting 308 on the touch panel of the EPD 30B in association with each other, and asks the user to confirm whether or not to permit provision of the requested data (step S222).Then, the touch panel of the EPD 30B accepts a permission setting operation for each requested data (step S224).

[0127] The information carrier card 10B changes the provision permission setting 308 of each requested data in response to the permission setting operation (step S226), and then transmits the requested data for which the provision permission setting 308 is set to "permitted" (step S228).

[0128] According to this modification, the same effects as those of the above embodiment can be obtained, and the user can individually set whether or not to provide data to the card usage system 200 .

[0129] [Modifications] Although examples of embodiments to which the present invention is applied have been described above, the forms to which the present invention can be applied are not limited to the above-described forms, and components can be added, omitted, or modified as appropriate.

[0130] For example, the information carrying cards 10 and 10B may be implemented by being incorporated into a mobile terminal device, such as a smartphone, a tablet computer, or a wearable computer, rather than being a card.

[0131] Furthermore, in the above embodiment, hospitals, pharmacies, and restaurants are given as examples of service spaces in which the card usage system 200 is installed, but other locations are also possible. For example, banks, libraries, shops, movie theaters, etc. are also possible. In a bank, accounting data may be written to the information carrying card 10 as third-grade data. A bank should be equipped with the card usage system 200H, which is a high-grade system. In a library, a list of borrowed books may be written to the information carrying card 10. In a shop, a list of purchased and ordered items may be written to the information carrying card 10. Since this information can reveal an individual's tastes and preferences, it may be treated as second-grade data. Therefore, it is preferable to equip the card usage system 200M, which is a medium-grade system.

[0132] [Summary] The contents disclosed in this specification can be summarized as follows.

[0133] (First form) A computer system that is installed in a service space, which is a fixed space such as a store, facility, or location that provides services or sells products to users, and that communicates wirelessly with an information carrying medium carried by the user, wherein the information carrying medium comprises: a first communication unit that is capable of wireless communication within a first communication distance for communication related to identification information data stored in a first memory unit; and a second communication unit that is unable to communicate within the first communication distance but is capable of wireless communication within a second communication distance that is shorter than the first communication distance for communication related to personal information data stored in a second memory unit; a visit detection unit that detects the user's visit by communicating wirelessly with the first communication unit to obtain the identification information data when the information carrying medium is present within the first communication distance; a reception control unit that, when detection is made by the visit detection unit, accepts the visit of the visiting user; and a main processing unit that, when the information carrying medium is present within the second communication distance, communicates wirelessly with the second communication unit to obtain, update, or add data to the personal information data.

[0134] (Second Mode) The computer system of the first mode, wherein the second storage unit stores the personal information data as data that can be determined through predetermined security processing, and the main processing unit has a security processing unit that performs the security processing.

[0135] (Third Form) The computer system of the second form, wherein the security processing is processing related to biometric authentication using physical characteristics, and further comprises a physical characteristic acquisition unit that acquires the physical characteristics of the user to be used for the biometric authentication, and the main processing unit performs the security processing using data acquired by the physical characteristic acquisition unit.

[0136] (Fourth Form) A computer system of any one of the first to third forms, wherein the information carrying medium has a display unit that displays rewritable code information that encodes the user's personal information, and further has a reading unit that reads the code information displayed on the display unit, and the main processing unit controls updating of the code information displayed on the display unit.

[0137] (Fifth Form) An information carrying medium carried by a user that performs wireless communication with a computer system installed in a service space, which is a fixed space such as a store, facility, or location that provides services or sells products to users, wherein the computer system includes a low-class system having a predetermined low security class for information processing and a high-class system having a predetermined high security class, the high-class system having a security processing unit that performs predetermined security processing to determine data content, the service space includes a low-class space in which the low-class system is installed and a high-class space in which the high-class system is installed, the information carrying medium comprising: a first memory unit that stores identification information data; a first communication unit that is capable of wireless communication with the low-class system and the high-class system within a first communication distance for communication related to data stored in the first memory unit; a second memory unit that stores personal information data that can be determined through the security processing; and a second communication unit that is unable to communicate over the first communication distance and is capable of wireless communication with the high-grade system within a second communication distance that is shorter than the first communication distance for communication related to data stored in the second storage unit.

[0138] (Sixth Form) An information carrying medium of the fifth form, comprising a display unit that displays rewritable code information that encodes the user's personal information, and the high-grade system comprises a reading unit that reads the code information and a control unit that controls updating of the code information displayed on the display unit.

[0139] (Seventh Form) An information carrying medium of the fifth or sixth form, further comprising: a display unit that displays rewritable code information that encodes the user's personal information; the computer system has a medium-grade system whose security grade is higher than the low grade and lower than the high grade; the medium-grade system has a reading unit that reads the code information; the service space has a medium-grade space in which the medium-grade system is installed; and the first communication unit is capable of wireless communication with the low-grade system, the medium-grade system, and the high-grade system within the first communication distance.

[0140] : 9a...first communication unit 9b...second communication unit 9c...visit detection unit 9d...reception control unit 9e...sec main processing unit 9f...security processing unit 9g...physical feature acquisition unit 9h...display unit 9j...reading unit 9k...control unit 10...information carrying card 12...face image 14...code information 41...first inlet 42...UHF band antenna 45...second inlet 46...HF band antenna 50...identification information data 52...name tag data 54...personal verification template 60...face image data for EPD display 62...code information data 100...card issuing machine 200...card usage system 202...system control computer 206...reception UHF band RFID reader 208...reception touch panel display 210...camera 220...authentication device 224...camera 226...fingerprint scanner 228... Finger vein scanner 230... Card reader / writer 232... HF band RFID reader

Claims

1. A computer system that is installed in a service space, which is a fixed space such as a store, facility, or place that provides services or sells products to users, and that wirelessly communicates with an information carrying medium carried by the user, wherein the information carrying medium is equipped with: a first communication unit capable of wireless communication within a first communication distance for communication related to identification information data stored in a first memory unit; and a second communication unit that is unable to communicate within the first communication distance and is capable of wireless communication within a second communication distance shorter than the first communication distance for communication related to personal information data stored in a second memory unit; a visit detection unit that detects the visit of the user by wirelessly communicating with the first communication unit to obtain the identification information data when the information carrying medium is present within the first communication distance; a reception control unit that, when detection is made by the visit detection unit, receives communication related to the visiting user; and a main processing unit that, when the information carrying medium is present within the second communication distance, wirelessly communicates with the second communication unit to obtain, update, or add data to the personal information data.

2. The computer system according to claim 1, wherein the second memory unit stores the personal information data as data that can be determined through a predetermined security process, and the main processing unit has a security processing unit that performs the security process.

3. The computer system according to claim 2, wherein the security processing is processing related to biometric authentication using physical characteristics, and further comprises a physical characteristic acquisition unit that acquires the physical characteristics of the user to be used for the biometric authentication, and the main processing unit performs the security processing using data acquired by the physical characteristic acquisition unit.

4. A computer system as claimed in any one of claims 1 to 3, wherein the information carrying medium has a display unit which displays rewritable code information which is an encoded version of the user's personal information, and further has a reading unit which reads the code information displayed on the display unit, and the main processing unit controls updating of the code information displayed on the display unit.

5. An information carrying medium carried by a user that wirelessly communicates with a computer system installed in a service space, which is a fixed space such as a store, facility, or place that provides services to users or sells products to the users, wherein the computer system includes a low-class system having a predetermined low security class for information processing and a high-class system having a predetermined high security class, the high-class system having a security processing unit that performs predetermined security processing to determine the contents of data, the service space includes a low-class space in which the low-class system is installed and a high-class space in which the high-class system is installed, the information carrying medium comprising: a first memory unit that stores identification information data; a first communication unit that is capable of wireless communication with the low-class system and the high-class system within a first communication distance as communication related to data stored in the first memory unit; a second memory unit that stores personal information data that can be determined through the security processing; a second communication unit in which communication is not possible over the first communication distance and which is capable of wireless communication with the high-grade system within a second communication distance shorter than the first communication distance for communication related to data stored in the second storage unit.

6. An information carrying medium as described in claim 5, further comprising a display unit which displays rewritable code information which is an encoded version of the user's personal information, said high-grade system further comprising a reading unit which reads said code information, and a control unit which controls updating of said code information displayed on said display unit.

7. An information carrying medium as described in claim 5 or 6, further comprising: a display unit which displays rewritable code information which is an encoded version of the user's personal information; the computer system includes a medium-class system whose security class is higher than the low class and lower than the high class, the medium-class system having a reading unit which reads the code information; the service space includes a medium-class space in which the medium-class system is installed; and the first communication unit is capable of wireless communication with the low-class system, the medium-class system and the high-class system within the first communication distance.