CN1728162A - Anti-counterfeiting verification method and anti-counterfeiting system based on radio frequency identification technology - Google Patents

Abstract

Translated fromChinese

本发明属于产品防伪技术领域，具体为一种基于射频识别技术的防伪系统及防伪验证方法。本发明中，防伪系统至少包括射频识别电子标签的存储器，读写器和防伪信息服务系统。该存储器至少被划分为：基本信息区、数字签名区、防伪认证服务器地址索引区和产品历史区。数字签名区存储制造商用私钥对产品基本信息提取并加密生成的数字签名，产品历史区记录物流跟踪信息的基本数据，防伪认证服务器地址索引区存储服务器的地址和地址偏移量，采用分级认证的方式。本发明通过采用RFID自动识别技术、数字加密技术对商品进行唯一识别，且自身不易被仿冒，从而有效是解决商品防伪问题。

The invention belongs to the technical field of product anti-counterfeiting, and specifically relates to an anti-counterfeiting system and an anti-counterfeiting verification method based on radio frequency identification technology. In the present invention, the anti-counterfeiting system at least includes a memory of the radio frequency identification electronic tag, a reader-writer and an anti-counterfeiting information service system. The memory is at least divided into: basic information area, digital signature area, anti-counterfeiting authentication server address index area and product history area. The digital signature area stores the digital signature generated by the manufacturer using the private key to extract and encrypt the basic information of the product, the product history area records the basic data of the logistics tracking information, and the anti-counterfeiting authentication server address index area stores the address and address offset of the server, adopting hierarchical authentication The way. The invention uniquely identifies commodities by adopting RFID automatic identification technology and digital encryption technology, and is not easy to be counterfeited, thereby effectively solving the problem of commodity anti-counterfeiting.

Description

Translated fromChinese

一种基于射频识别技术的防伪验证方法及防伪系统Anti-counterfeiting verification method and anti-counterfeiting system based on radio frequency identification technology

技术领域technical field

本发明属于产品防伪技术领域，具体涉及一种产品防伪验证方法及防伪系统，尤其涉及一种基于射频识别技术的防伪验证方法及防伪系统。The invention belongs to the technical field of product anti-counterfeiting, in particular relates to a product anti-counterfeiting verification method and an anti-counterfeiting system, in particular to an anti-counterfeiting verification method and an anti-counterfeiting system based on radio frequency identification technology.

背景技术Background technique

商品伪造问题正日益成为全球经济领域面临的严重问题，各国经济都不同程度受到假冒伪劣产品的侵扰。商品伪造不仅出现在音乐，软件和贵重商品等领域，从食品、日用消费品到生产资料，从钞票、有价证券到各种证件、证书，从技术含量低的产品到高新技术产品，都不同程度受到假冒伪劣产品的冲击。目前世界上包装印刷的假冒制品仍在以每年至少20％的速度递增，假冒伪劣商品在世界市场上口趋泛滥，成为人类的公害。Commodity counterfeiting is increasingly becoming a serious problem in the global economy, and the economies of all countries are affected by counterfeit and shoddy products to varying degrees. Commodity counterfeiting not only occurs in the fields of music, software and valuable commodities, but also varies from food, daily consumer goods to means of production, from banknotes, securities to various documents and certificates, and from low-tech products to high-tech products. The extent of the impact of counterfeit and shoddy products. At present, the counterfeit products of packaging and printing in the world are still increasing at a rate of at least 20% per year, and the counterfeit and shoddy goods are flooding the world market, becoming a public hazard to human beings.

目前常用的防伪技术主要是通过在商品和包装上附加物理特性或者通过数码防伪技术来区分假冒伪劣商品。其中附加物理属性主要有纸基防伪技术、油墨基防伪技术、全息防伪技术、凹版印刷防伪技术、电话电码防伪技术等，附加物理属性的防伪技术存在着成本较高、本身容易伪造的缺陷。数码防伪技术中常见的是“中心数码防伪技术”，编码由中心数据库完成，并将所有入网产品的防伪编码存储于中心数据库中，中心数据库把消费者查询时发送的编码于数据库编码进行对比，若库中存有该编码，语音提示为正牌产品编码，否则提示为编码错误，谨防假冒。同一编码若再次查询，系统提示该编码已被查询过，谨防假冒。中心数码防伪技术是密码学与中心数据库结合型数码防伪系统。这类系统的防伪编码直接在生产标识物的印刷厂或生产企业的生产线上产生，并直接覆盖在标识物上或喷印在产品上进入市场，防伪中心不存储编码，它只对消费者查询时发送来的编码进行验证，中心数据库只对验证过的编码进行记录并再次加密。生产企业自建防伪系统。这类系统的编码由企业自己产生并储存，消费者可以通过电话和互联网进行防伪查询。At present, the commonly used anti-counterfeiting technology is mainly to distinguish fake and shoddy goods by attaching physical characteristics to goods and packaging or through digital anti-counterfeiting technology. Among them, the additional physical attributes mainly include paper-based anti-counterfeiting technology, ink-based anti-counterfeiting technology, holographic anti-counterfeiting technology, gravure printing anti-counterfeiting technology, telephone code anti-counterfeiting technology, etc. The anti-counterfeiting technology with additional physical attributes has the disadvantages of high cost and easy forgery. The most common digital anti-counterfeiting technology is "central digital anti-counterfeiting technology". The coding is completed by the central database, and the anti-counterfeiting codes of all networked products are stored in the central database. The central database compares the codes sent by consumers when they query with the database codes. If the code exists in the library, the voice prompt is a genuine product code, otherwise the prompt is a code error, beware of counterfeiting. If the same code is queried again, the system will prompt that the code has already been queried, beware of counterfeiting. Central digital anti-counterfeiting technology is a digital anti-counterfeiting system combining cryptography and central database. The anti-counterfeiting codes of this type of system are directly generated on the printing factory that produces the markers or the production line of the manufacturer, and are directly covered on the markers or printed on the products to enter the market. The anti-counterfeiting center does not store the codes, it only queries consumers The codes sent from time to time are verified, and the central database only records the verified codes and encrypts them again. Manufacturers build their own anti-counterfeiting systems. The code of this type of system is generated and stored by the enterprise itself, and consumers can conduct anti-counterfeiting inquiries through telephone and the Internet.

数码防伪技术的缺陷在于：The defect of digital anti-counterfeiting technology is:

1)防伪标识本身的技术含量低：数码标识的标识物为防伪编码的载体，防伪编码是通过标识物标识在产品上。标识物本身防伪功能非常有限，目前市场上大多数数码防伪标签本身容易被伪造，而且防伪标签并不精美，不适合作为包装要求精美的产品贴标。1) The technical content of the anti-counterfeiting mark itself is low: the marker of the digital mark is the carrier of the anti-counterfeiting code, and the anti-counterfeiting code is marked on the product through the marker. The anti-counterfeiting function of the marker itself is very limited. At present, most digital anti-counterfeiting labels on the market are easy to be forged, and the anti-counterfeiting labels are not exquisite, so they are not suitable for labeling products that require exquisite packaging.

2)查询率低；查询率低是目前数码防伪普遍存在的问题。商场、商店未提供查询工具，查询不方便；另外，查询成本过高，有些防伪公司利用声讯台作为消费者查询的主要平台，因为覆盖的范围窄，电话相对较少，加之高额声讯电话费用，导致查询率低，目前许多防伪公司已经推出利用手机短信功能查询商品真伪的方法，查询率有望提高。2) low query rate; low query rate is a common problem in current digital anti-counterfeiting. Shopping malls and stores do not provide inquiry tools, which makes it inconvenient to inquire. In addition, the inquiry cost is too high. Some anti-counterfeiting companies use voice channels as the main platform for consumers to inquire. Because of the narrow coverage, relatively few telephone calls, and high voice telephone charges, As a result, the query rate is low. At present, many anti-counterfeiting companies have launched a method to check the authenticity of goods using the SMS function of mobile phones, and the query rate is expected to increase.

3)标识方法单一：除了少数防伪公司实现了在生产线上直接打码外，绝大多数公司只用防伪标签一种标识方法，这样使得在数量庞大、高速流水线生产，低附加值的商品上无法应用，如饮料，小袋食品，卷烟等。3) The identification method is single: except for a few anti-counterfeiting companies that have realized direct coding on the production line, the vast majority of companies only use anti-counterfeiting labels as one identification method, which makes it impossible to use large quantities, high-speed assembly line production, and low value-added commodities. Applications such as beverages, sachets, cigarettes, etc.

4)机器无法识读：目前市场上能满足消费者查询的数码防伪标识，均无法进行机器读取，极大地阻碍了数码防伪技术的推广和应用。4) Unable to be read by machine: At present, the digital anti-counterfeiting labels that can meet the inquiries of consumers on the market cannot be read by machines, which greatly hinders the promotion and application of digital anti-counterfeiting technology.

上述两类技术都未能从根本上解决技术容易被仿冒、重复使用包装以及识别麻烦等问题。为了达到商品防伪的目的，需要解决如下问题：防伪标签的身份认证；商品生产者的不可抵赖性；标签本身的不可伪造性；防伪系统的安全性。The above two types of technologies have failed to fundamentally solve the problems of easy technology counterfeiting, reusable packaging, and identification troubles. In order to achieve the purpose of commodity anti-counterfeiting, the following problems need to be solved: identity authentication of anti-counterfeiting labels; non-repudiation of commodity producers; unforgeability of labels themselves; security of anti-counterfeiting system.

另外，目前的防伪验证通常采用一级防伪服务器，随着防伪验证的自动化和防伪验证信息量的倍增，势必造成服务器的瘫痪，所以有必要寻求一种有效的解决方式来缓解主防伪服务器的压力。In addition, the current anti-counterfeiting verification usually uses a first-level anti-counterfeiting server. With the automation of anti-counterfeiting verification and the doubling of the amount of anti-counterfeiting verification information, the server will inevitably be paralyzed. Therefore, it is necessary to find an effective solution to relieve the pressure on the main anti-counterfeiting server. .

发明内容Contents of the invention

本发明的主要目的是提出一种基于射频识别(RFID)技术的防伪验证方法，通过结合产品的唯一编码技术、RFID自动识别技术、数字加密技术可以对商品进行唯一识别，且自身不容易被仿冒，而且可以记录产品的流通历史，并对商品的来源和供应渠道进行跟踪，是解决商品防伪问题的一种有效途径；同时提出一种基于射频识别(RFID)技术的商品防伪系统，采用分级认证的方式，避免主服务器的数据堵塞，通过设置不同的基址，不同级别的偏移量和不同的偏移量的大小就可以使得地址索引指向不同地址的防伪认证服务器，这样做的好处在于可以避免所有需要进行防伪验证的产品访问同一个防伪服务器而造成的数据堵塞，并且便于对需要防伪的产品进行分类管理。The main purpose of the present invention is to propose an anti-counterfeiting verification method based on radio frequency identification (RFID) technology, which can uniquely identify commodities by combining unique coding technology, RFID automatic identification technology, and digital encryption technology, and it is not easy to be counterfeited , and can record the circulation history of the product, and track the source and supply channel of the commodity, which is an effective way to solve the problem of commodity anti-counterfeiting; at the same time, a commodity anti-counterfeiting system based on radio frequency identification (RFID) technology is proposed. By setting different base addresses, different levels of offsets and different sizes of offsets, the address index can point to anti-counterfeit authentication servers with different addresses. The advantage of this is that it can It avoids data congestion caused by all products requiring anti-counterfeiting verification accessing the same anti-counterfeiting server, and facilitates classified management of products requiring anti-counterfeiting.

本发明的目的是通过如下技术方案实现的：The purpose of the present invention is achieved through the following technical solutions:

一种基于射频识别技术的防伪验证方法，射频识别电子标签的存储器至少被划分为：基本信息区、数字签名区和产品历史区；基本信息区，存储产品代码，即唯一编码，包括制造商代码和可区别单个物品的序列号；数字签名区，存储制造商用私钥对产品基本信息提取并加密生成的数字签名；产品历史区，记录物流跟踪信息的基本数据，在产品经过供应链中每一个预先设定的物流环节时，经过授权的读写器将在物流信息跟踪区写入操作的相关信息，如操作的时间，读写器的识别号(ID号)等；An anti-counterfeiting verification method based on radio frequency identification technology, the memory of the radio frequency identification electronic tag is at least divided into: a basic information area, a digital signature area and a product history area; the basic information area stores the product code, that is, the unique code, including the manufacturer code and the serial number that can distinguish a single item; the digital signature area, which stores the digital signature generated by extracting and encrypting the basic information of the product with the private key; the product history area, which records the basic data of logistics tracking information. In the pre-set logistics link, the authorized reader will write the relevant information of the operation in the logistics information tracking area, such as the operation time, the identification number (ID number) of the reader, etc.;

验证流程至少包括：The verification process includes at least:

步骤一，标签初始化，基本信息唯一编码写入，生成数字签名，建立商品的历史文件；Step 1: Initialize the label, write the unique code of the basic information, generate a digital signature, and create a historical file of the product;

步骤二，在经过每一个预先设定的物流环节时，经过授权的读写器将在物流信息跟踪区写入操作的相关信息；Step 2, when going through each pre-set logistics link, the authorized reader will write the relevant information of the operation in the logistics information tracking area;

步骤三，读写器读取电子标签，向可以信任的认证中心提出检验申请，认证中心通过解读数字签名，对物品身份进行数字认证，若数字签名相符则进行步骤四，若不相符则产生伪造产品报警；Step 3: The reader reads the electronic tag and submits an inspection application to a trusted certification center. The certification center performs digital certification on the identity of the item by interpreting the digital signature. If the digital signature matches, proceed to step 4. If it does not match, a forgery will occur. Product alarm;

步骤四，查询产品历史区的信息，然后判断该产品的物流跟踪信息与预先设定的跟踪信息是否相符，相符则通过，不相符则产生伪造产品报警。Step 4: Query the information in the product history area, and then judge whether the logistics tracking information of the product is consistent with the preset tracking information.

所述的数字签名通过数字指纹技术和“公共密钥技术”的组合来实现，在制造商处，首先用HASH函数SHA-1生成产品编码的数字摘要，然后采用RSA算法用制造商的私有密钥对数字摘要进行加密，生成数字签名。The digital signature is realized through the combination of digital fingerprint technology and "public key technology". At the manufacturer, first use the HASH function SHA-1 to generate the digital summary of the product code, and then use the RSA algorithm to use the manufacturer's private key The key encrypts the digital digest to generate a digital signature.

公共密钥技术使用一个公共密钥与一个私有密钥，其中公共密钥公开而私有密钥保密，私有密钥用于加密和签名，而公共密钥用于解密；制造商的私有密钥只能由制造商自己使用，公开密钥可以由多个验证机构使用。Public key technology uses a public key and a private key, where the public key is public and the private key is kept secret, the private key is used for encryption and signature, and the public key is used for decryption; the manufacturer's private key is only Can be used by the manufacturer itself, the public key can be used by multiple certification authorities.

所述的解读数字签名，对物品身份进行数字认证，至少包括：The said interpretation of the digital signature and the digital authentication of the identity of the item at least include:

在进行防伪验证时，验证方使用HASH函数SHA-1生成产品唯一编码的数字摘要1，同时利用RSA算法以制造商的公开密钥对数字签名进行解密操作，获得产品唯一编码的数字摘要2，如果数字摘要1与数字摘要2相同，则签名有效。When performing anti-counterfeiting verification, the verifier uses the HASH function SHA-1 to generate the uniquely coded digital digest 1 of the product, and at the same time uses the RSA algorithm to decrypt the digital signature with the manufacturer's public key to obtain the uniquely coded digital digest 2 of the product. If digital digest 1 is the same as digital digest 2, the signature is valid.

所述的数字签名在写入电子标签的存储器后被锁定，以后只能进行读操作。The digital signature is locked after being written into the memory of the electronic tag, and can only be read in the future.

所述公共密钥和私有密钥必须由指定的设备和安全系统产生。The public and private keys must be generated by designated equipment and security systems.

产品历史区的存储空间既可以进行读操作，也可以进行写操作。The storage space in the product history area can be read or written.

所述射频识别电子标签的存储器还包括防伪认证服务器地址索引区，该地址索引区保存防伪认证服务器的IP地址以及IP地址的索引，通过上述索引，可以指示保存产品检测信息文件的服务器地址，0级索引指的是直接标识防伪服务器的IP地址，1级及1级以上的地址索引则包含一个检索的基址和若干级的偏移量。The memory of the radio frequency identification electronic tag also includes an anti-counterfeiting authentication server address index area, the address index area stores the IP address of the anti-counterfeiting authentication server and the index of the IP address, through the above-mentioned index, it can indicate the server address for saving the product detection information file, 0 The level index refers to the IP address that directly identifies the anti-counterfeiting server, and the address index of level 1 and above includes a search base address and offsets of several levels.

一种基于射频识别技术的防伪系统，至少包括电子标签的存储器、读写器和防伪信息服务系统；电子标签的存储器包含基本信息区、数字签名区、防伪认证服务器地址索引区和产品历史区；防伪信息服务系统包含产品检测信息文件和认证信息，记录的内容包括由生产商录入的产品属性、标签的编码、标签的读取时间以及执行读操作的读写器编号、产品的环境信息等。信息服务系统可以由可信的生产商或者第三方机构来负责维护，其特征在于：信息服务系统中设置N级防伪服务器，在电子标签的存储器中存储认证服务器的IP地址以及IP地址的索引；0级索引指的是直接标识防伪服务器的IP地址，1级及1级以上的地址索引则包含一个检索的基址和若干级的偏移量，N级索引的商品防伪，可以通过访问基址指向的服务器，再参照N级的偏移量得到实际的防伪服务器的IP地址通，过上述索引，可以指示保存产品检测信息文件的最终服务器地址。An anti-counterfeiting system based on radio frequency identification technology, at least including an electronic tag memory, a reader and an anti-counterfeiting information service system; the electronic tag memory includes a basic information area, a digital signature area, an anti-counterfeiting authentication server address index area, and a product history area; The anti-counterfeit information service system includes product testing information files and certification information. The recorded content includes product attributes entered by the manufacturer, label code, label reading time, reader-writer number that performs the read operation, and product environmental information. The information service system can be maintained by a credible manufacturer or a third-party organization. It is characterized in that: an N-level anti-counterfeiting server is set in the information service system, and the IP address of the authentication server and the index of the IP address are stored in the memory of the electronic label; The 0-level index refers to the IP address that directly identifies the anti-counterfeiting server. The address index of level 1 and above contains a search base address and several levels of offsets. The product anti-counterfeiting of the N-level index can be accessed by accessing the base address Point to the server, and then refer to the N-level offset to obtain the actual IP address of the anti-counterfeiting server. Through the above-mentioned index, the final server address for saving the product detection information file can be indicated.

所述IP地址以及IP地址索引的数值事先由防伪系统的实施者来确定，地址索引在写入电子标签后被锁定，以后只能进行读操作。The value of the IP address and the IP address index is determined in advance by the implementer of the anti-counterfeiting system, and the address index is locked after being written into the electronic tag, and can only be read in the future.

采用RFID技术进行商品防伪和安全管理具有如下优势：The use of RFID technology for commodity anti-counterfeiting and safety management has the following advantages:

1)本身具有很好的防伪特性。现有技术难以仿制，仿制设备或手段的成本高，对仿制者技术能力的要求非常高。芯片设计和制造技术是非常复杂的高尖端技术、必须具备高尖端的人才(培养期十五年以上)、昂贵的设计工具(几十万到上千万美金)、巨额的设备投资(国际上一个晶圆厂的投资额通常是十亿美元，即便是买淘汰的生产线的投资是几亿人民币。)、复杂的技术壁垒及学习曲线(在半导体芯片制造领域的知识产权数量全球每年是几十万、在此领域经验很重要，新手成功率不高)。1) It has good anti-counterfeiting characteristics. Existing technologies are difficult to imitate, the cost of imitating equipment or means is high, and the requirements for the technical capabilities of the imitators are very high. Chip design and manufacturing technology is a very complex high-tech, must have high-end talents (training period of more than 15 years), expensive design tools (hundreds of thousands to tens of millions of dollars), huge investment in equipment (internationally The investment of a fab is usually one billion U.S. dollars, even if the investment to buy out the production line is hundreds of millions of RMB.), complex technical barriers and learning curves (the number of intellectual property rights in the field of semiconductor chip manufacturing is tens of millions of dollars per year in the world. Wan, experience in this field is very important, the success rate of novices is not high).

2)通过自动识别的手段可以提高工作效率，对于生产线的安全管理或者人员管理等具有独到的优势。2) The work efficiency can be improved through the means of automatic identification, which has unique advantages for the safety management or personnel management of the production line.

3)因为是以数字形式传输数据，便于结合现有的互联网技术、信息安全技术等数字技术构造信息服务系统，便于信息处理。3) Because the data is transmitted in digital form, it is convenient to combine the existing Internet technology, information security technology and other digital technologies to construct an information service system, which is convenient for information processing.

基于RFID的防伪系统可以较好地解决传统防伪技术的识别手段落后、识别速率低等缺陷，而且本身不易被伪造。The anti-counterfeiting system based on RFID can better solve the shortcomings of traditional anti-counterfeiting technology, such as backward identification means and low identification rate, and it is not easy to be forged.

附图说明Description of drawings

图1为基于RFID的商品防伪系统框图；Fig. 1 is a block diagram of an RFID-based commodity anti-counterfeiting system;

图2为签名和认证过程示意图；Figure 2 is a schematic diagram of the signature and authentication process;

图3为包含一级索引的RFID防伪系统数据流图；Fig. 3 is the data flow diagram of the RFID anti-counterfeiting system comprising a primary index;

图4为基于RFID的商品防伪系统工作流程图。Fig. 4 is a work flow chart of the RFID-based commodity anti-counterfeiting system.

具体实施方式Detailed ways

以下结合附图详细说明本发明的技术方案。The technical solution of the present invention will be described in detail below in conjunction with the accompanying drawings.

基于RFID的商品防伪系统框架如图1所示。该系统包括RFID基本系统，企业应用程序和信息服务系统。其中RFID基本系统可以在授权的情况下对资源进行操作，信息服务系统包含产品检测信息和认证信息，记录的内容包括由生产商录入的产品属性，标签的编码和读写器的编码以及标签的读取时间，产品的环境信息等，信息服务系统可以由可信的生产商或者第三方机构来负责维护。当商品在供应链中流通时，授权的读写器将对电子标签进行读写操作，执行上述操作的读写器编号和操作时间等信息将会记录在电子标签的物流信息跟踪区中。The framework of RFID-based commodity anti-counterfeiting system is shown in Figure 1. The system includes RFID basic system, enterprise application program and information service system. Among them, the RFID basic system can operate resources under authorization. The information service system includes product testing information and certification information. The recorded content includes product attributes entered by the manufacturer, label coding and reader coding, and label information Read time, product environment information, etc., the information service system can be maintained by a trusted manufacturer or a third-party organization. When the commodity circulates in the supply chain, the authorized reader will read and write the electronic tag, and the reader number and operation time of the above operation will be recorded in the logistics information tracking area of the electronic tag.

在电子标签初始化时，将标签芯片的存储器划分为若干个区。本发明将电子标签存储器进行如下分区：基本信息区、数字签名区、防伪认证服务器地址索引区和产品历史区。When the electronic tag is initialized, the memory of the tag chip is divided into several areas. The invention divides the electronic label memory into the following partitions: basic information area, digital signature area, anti-counterfeit authentication server address index area and product history area.

1)基本信息区，存储产品代码，包括制造商代码和可区别单个物品的序列号，是产品的唯一标识。首先需要给每一个产品进行代码分配，编码规则可以根据通用的编码规则，或者根据行业的编码规则，建立对单品的唯一标识，将编码写入电子标签。目前国际上针对单品的编码规则主要有EPC编码和UID编码等，但对于特殊商品的编码可以由产品制造商自行设计。基本信息在建立电子标签和产品的关联之前被写入电子标签的存储器，并执行锁定操作，以后只能进行读操作。1) The basic information area stores the product code, including the manufacturer code and the serial number that can distinguish a single item, which is the unique identification of the product. First of all, it is necessary to assign a code to each product. The coding rules can be based on general coding rules or industry coding rules to establish a unique identifier for a single product and write the code into the electronic label. At present, the international coding rules for single products mainly include EPC code and UID code, etc., but the code for special products can be designed by the product manufacturer. The basic information is written into the memory of the electronic tag before the association between the electronic tag and the product is established, and the lock operation is performed, and only the read operation can be performed later.

2)数字签名区，存储制造商用私钥对产品基本信息进行数字签名。数字签名一般通过数字指纹技术和“公共密钥技术”的组合来实现，即先采用单向函数对产品的基本信息进行数字摘要的提取，然后用“公共密钥技术”算法进行加密。数字指纹只能保证信息的完整性，但不能完成身份认证。通过数字指纹只能保证信息在传输过程中没有被修改，带不能保证信息的来源。数字签名则不但可以实现数据的完整性和不可伪造性，还能实现不可抵赖性，保证信息来自指定的发送者，这一点对于防伪来说十分重要，它可以保证产品来源的准确性。数字签名在写入后被锁定，以后只能进行读操作。2) Digital signature area, which stores the manufacturer's digital signature on the basic information of the product with the private key. Digital signatures are generally realized through a combination of digital fingerprint technology and "public key technology", that is, first use a one-way function to extract the digital abstract of the basic information of the product, and then use the "public key technology" algorithm to encrypt. Digital fingerprints can only guarantee the integrity of information, but cannot complete identity authentication. Digital fingerprints can only guarantee that information has not been modified during transmission, but cannot guarantee the source of information. Digital signatures can not only achieve data integrity and unforgeability, but also achieve non-repudiation, ensuring that the information comes from the designated sender, which is very important for anti-counterfeiting, and it can ensure the accuracy of the product source. Digital signatures are locked after being written and can only be read later.

所谓数字指纹是指通过某种算法对数据信息进行综合计算得到的一个固定长度的数字序列，它与内容高度相关。数字指纹能实现两个目的：数据完整性，如果数据块的内容被改变，则它的数字指纹也会改变；不可伪造性，信息伪造者很难伪造这样的数据信息，使它的指纹与真实信息的数据指纹一模一样。有许多算法能完成数字指纹计算，本发明采用SHA-1算法(见附注1)进行数字摘要的提取。The so-called digital fingerprint refers to a fixed-length digital sequence obtained by comprehensive calculation of data information through a certain algorithm, which is highly related to the content. Digital fingerprint can achieve two purposes: data integrity, if the content of the data block is changed, its digital fingerprint will also change; unforgeability, it is difficult for information forgers to forge such data information, so that its fingerprint and real The data fingerprint of the information is exactly the same. There are many algorithms that can complete the digital fingerprint calculation, and the present invention uses the SHA-1 algorithm (see note 1) to extract the digital abstract.

典型的“公共密钥技术”有RSA算法和DSA(见附注2)等。公共密钥技术使用一个公共密钥与一个私有密钥，其中公共密钥公开而私有密钥保密。如果某人给你发送的信息使用你的公共密钥加密的，那么只有用你的私有密钥才能正确解密，其他人都无法做到。反之，如果你用你的私有密钥对信息进行签名，那么其它人能用你的公共密钥来检验你的签名，只有你的签名才能通过验证，如果信息被修改或者使用别人的签名，那么检验就会失败。Typical "public key technologies" include RSA algorithm and DSA (see Note 2), etc. Public key technology uses a public key and a private key, where the public key is made public and the private key is kept secret. If someone sends you a message encrypted with your public key, it can only be decrypted correctly with your private key, and no one else can. Conversely, if you use your private key to sign information, then others can use your public key to verify your signature, only your signature can pass the verification, if the information is modified or someone else's signature is used, then The test will fail.

通过“公共密钥技术”和数字指纹技术的组合实现的数字签名具有如下特征：(1)接收文件者能够核实发送文件者对文件的签名；(2)发送文件者在事后不能抵赖对文件的签名；(3)接收文件者不能伪造对文件的签名。The digital signature realized through the combination of "public key technology" and digital fingerprint technology has the following characteristics: (1) the recipient of the file can verify the signature of the sender on the file; (2) the sender cannot deny the signature of the file afterwards Signature; (3) The recipient of the document cannot forge the signature on the document.

签名和认证的过程如图2所示，本发明采用SHA-1散列函数和RSA算法的组合进行产品的数字签名。在制造商处，首先用HASH函数SHA-1生成产品编码的数字摘要，然后采用RSA算法用制造商的私有密钥对数字摘要进行加密，生成数字签名。在电子标签上将同时保存数字签名和产品的编码。在进行防伪验证时，验证方使用HASH函数SHA-1生成产品ID号的数字摘要1，同时利用RSA算法以制造商的公开密钥对数字签名进行解密操作，获得产品ID号的数字摘要2，如果数字摘要1与数字摘要2相同，则签名有效。The process of signature and authentication is shown in Fig. 2, the present invention adopts the combination of SHA-1 hash function and RSA algorithm to carry out the digital signature of product. At the manufacturer, first use the HASH function SHA-1 to generate a digital abstract of the product code, and then use the RSA algorithm to encrypt the digital abstract with the manufacturer's private key to generate a digital signature. The digital signature and product code will be saved on the electronic label at the same time. When performing anti-counterfeiting verification, the verifier uses the HASH function SHA-1 to generate the digital digest 1 of the product ID number, and at the same time uses the RSA algorithm to decrypt the digital signature with the manufacturer's public key to obtain the digital digest 2 of the product ID number. If digital digest 1 is the same as digital digest 2, the signature is valid.

制造商的密钥对(私有密钥和公开密钥)必须由指定的设备和安全系统产生。制造商的私有密钥只能由制造商自己使用，必须保密。公开密钥可以由多个验证机构使用，在分发公开密钥时，并不要求保密，但必须保持公开密钥的完整性。即不能给攻击者任何替换密钥值的机会，因为这些密钥是一方所信赖的其它方的公开密钥，否则的话，下述形式的攻击就有可能会成功。假定验证系统A正在对由制造商B进行数字签名的产品进行验证，但这时，冒名顶替者伪造了信息并用自己的私人密钥签名，还用他的公开密钥代替了A系统所认为B的公开密钥，这样A系统(使用错误的公开密钥)对数字签名进行的检查当然认为是正确的。由此，冒名顶替者成功地伪装成了B，从而使得防伪系统失去了防伪的效果。认证是证明某人或者某对象身份的过程，是保证系统安全的重要措施。当服务器对外提供服务时，需要确认来访者的身份，以满足其需要，访问者有时也需要确认服务提供者的身份，以防上当受骗。The manufacturer's key pair (private key and public key) must be generated by the designated device and security system. The manufacturer's private key can only be used by the manufacturer himself and must be kept secret. The public key can be used by multiple verification agencies. When the public key is distributed, it is not required to keep it secret, but the integrity of the public key must be maintained. That is, the attacker cannot be given any opportunity to replace the key value, because these keys are the public keys of other parties trusted by one party, otherwise, the following attack may succeed. Assume that verification system A is verifying a product digitally signed by manufacturer B, but at this time, an imposter forges the information and signs it with his own private key, and also replaces what system A thinks is B with his public key. public key, so the check of the digital signature by system A (using the wrong public key) is of course considered correct. Thus, the impostor successfully disguises as B, thereby making the anti-counterfeiting system lose the anti-counterfeiting effect. Authentication is the process of proving the identity of someone or an object, and is an important measure to ensure system security. When the server provides external services, it needs to confirm the identity of the visitor to meet its needs. Sometimes the visitor also needs to confirm the identity of the service provider to prevent being deceived.

3)防伪认证服务器地址索引区，该地址索引区保存防伪认证服务器的IP地址以及IP地址的索引，通过上述索引，可以指示保存产品检测信息文件的服务器地址。所述地址索引可以包含0至N级。0级索引指的是直接标识防伪服务器的IP地址，1级及1级以上的地址索引则包含一个检索的基址和若干级的偏移量，例如1级索引的商品防伪，可以通过访问基址指向的服务器，再参照1级的偏移量得到实际的防伪服务器的IP地址，2级索引的商品防伪可以通过访问基址指向的服务器，而后参照1级的偏移量得到2级服务器的基址，再参照2级的偏移量得到实际的防伪服务器的IP地址，更多级别的索引以此类推。1级索引的防伪服务器地址查询如图3所示。3) Anti-counterfeiting authentication server address index area, the address index area stores the IP address of the anti-counterfeiting authentication server and the index of the IP address, through the above-mentioned index, it can indicate the server address for storing the product detection information file. The address index may contain 0 to N levels. Level 0 index refers to the IP address that directly identifies the anti-counterfeiting server, and address indexes of level 1 and above include a search base address and offsets of several levels. address, and then refer to the level 1 offset to obtain the actual IP address of the anti-counterfeiting server. The commodity anti-counterfeiting of the level 2 index can be accessed by accessing the server pointed to by the base address, and then refer to the level 1 offset to obtain the IP address of the level 2 server. The base address, and then refer to the second-level offset to get the actual IP address of the anti-counterfeiting server, and so on for more levels of indexes. The anti-counterfeiting server address query of level 1 index is shown in Figure 3.

基址和索引的数值事先由防伪系统的实施者来确定，通过设置不同的基址，不同级别的偏移量和不同的偏移量的大小就可以使得地址索引指向不同地址的防伪认证服务器。这样做的好处在于可以避免所有需要进行防伪验证的产品访问同一个防伪服务器而造成的数据堵塞，并且便于对需要防伪的产品进行分类管理。地址索引在写入电子标签后被锁定，以后只能进行读操作。The values of the base address and the index are determined in advance by the implementer of the anti-counterfeiting system. By setting different base addresses, different levels of offsets and different offset sizes, the address index can point to different addresses of anti-counterfeiting authentication servers. The advantage of this is that it can avoid data congestion caused by all products requiring anti-counterfeiting verification accessing the same anti-counterfeiting server, and it is convenient for classified management of products requiring anti-counterfeiting. After the address index is written into the electronic tag, it is locked and can only be read in the future.

4)产品历史区，记录物流跟踪信息的基本数据，在产品经过供应链中每一个预先设定的物流环节时，经过授权的读写器将在物流信息跟踪区写入操作的相关信息，如操作的时间，读写器的识别号(ID号)等。产品历史区的存储空间既可以进行读操作，也可以进行写操作。4) The product history area, which records the basic data of logistics tracking information. When the product passes through each preset logistics link in the supply chain, the authorized reader will write the relevant information of the operation in the logistics information tracking area, such as The time of operation, the identification number (ID number) of the reader, etc. The storage space in the product history area can be read or written.

产品检测信息文件保存在防伪认证服务器的数据库中，产品检测信息可以由产品的编号进行索引，每一个产品都有一个对应的产品检测信息文件。每一个产品的检测信息文件至少应当包含三方面的信息，(1)产品的基本信息；(2)产品跟踪检测信息；(3)产品验证信息。The product testing information file is stored in the database of the anti-counterfeiting authentication server, and the product testing information can be indexed by the product number, and each product has a corresponding product testing information file. The testing information file of each product should contain at least three aspects of information, (1) basic information of the product; (2) product tracking testing information; (3) product verification information.

产品基本信息可以包括产品的生产日期，生产单位(更详细的，可以保存产品的生产者)，产品外观(大小，颜色等)，产品属性(材料，重量等)，保质期，以及产品在物流过程中的特殊要求(如产品的保存温度，是否可以倒置等)。The basic information of the product can include the production date of the product, the production unit (in more detail, the producer of the product can be saved), product appearance (size, color, etc.), product attributes (material, weight, etc.), shelf life, and the product in the logistics process Special requirements in (such as the storage temperature of the product, whether it can be inverted, etc.).

产品跟踪检测信息主要标识产品所必须经过的物流环节，具体形式，最简单的，可以是读写器的ID号的排序。根据产品的供应链设计，在真实产品必须经过的供应链的环节用授权的读写器进行验证操作，在产品检测信息中保存执行验证操作的读写器的编号和顺序，用来验证产品是否是通过正常渠道进行了运输和验证。伪造的商品的一个共同特征是：假冒伪劣的产品混入了正常的供应链渠道，欺骗用户或消费者。对供应链的验证和管理有利于防止伪造商品的进入，并有利于确定伪造商品进入的途径，对供应链运营商进行评估和监督。The product tracking and testing information mainly identifies the logistics links that the product must pass through. The specific form, the simplest, can be the sorting of the ID numbers of the readers. According to the supply chain design of the product, the authorized reader-writer is used to perform the verification operation in the link of the supply chain that the real product must pass through, and the serial number and sequence of the reader-writer performing the verification operation are saved in the product testing information to verify whether the product is It was shipped and verified through normal channels. A common feature of counterfeit goods is that counterfeit and shoddy products are mixed into normal supply chain channels to deceive users or consumers. The verification and management of the supply chain is conducive to preventing the entry of counterfeit goods, and is conducive to determining the entry route of counterfeit goods, and evaluating and supervising supply chain operators.

产品验证信息记录产品被验证过的次数和时间，以及执行产品防伪验证的读写器ID号码。这样有利于确定是否存在恶意的攻击行为。Product verification information records the number and time of product verification, as well as the ID number of the reader that performs product anti-counterfeiting verification. This is beneficial to determine whether there is malicious attack behavior.

对于产品的防伪验证将分为两个部分，一部分为数字签名的校验，另一部分为产品历史的追踪和比较。The anti-counterfeiting verification of products will be divided into two parts, one part is the verification of digital signature, and the other part is the tracking and comparison of product history.

数字签名的加解密采用1024位的RSA算法，签名的密钥对由指定的系统或者安全机构产生，数字加密的私有密钥由制造商保存，制造商在产品的电子标签上利用私有密钥产生数字签名，数字解密的生产商的公共密钥通过PKI系统的数字证书来发放。使用公共密钥进行解密和签名可以通过授权的读写器或者通过可以信任的防伪认证机构来完成。进行防伪验证的授权读写器的拥有者要事先向可信的数字证书管理机构申领数字证书，证书中包含制造商的公共密钥。公共密钥可以保存在与读写器相连的数据处理系统中，也可以保存在可以插入读写器指定接口的SIM卡中，此时读写器需要专门设计，可以供防伪验证专用。通过第三方的防伪认证机构来进行防伪校验是指用户利用读写器读取电子标签的防伪信息后，通过通信网络向可信的第三方认证机构发出防伪校验的申请，由第三方的认证机构执行防伪验证的操作，并向用户返回验证的结果。用户与第三方认证机构之间的联系方式可以包括短信，电话，电子邮件，可以通过建立专门用于防伪验证的通信协议或在用于防伪校验的读写器中设计专门的嵌入式软件来整合验证的各个步骤，简化验证过程，使得验证的过程细节对用户透明。如果数字签名通过验证，则认定产品的真实性，如果不一致，则发出警告信息。The encryption and decryption of the digital signature adopts the 1024-bit RSA algorithm. The key pair of the signature is generated by the designated system or security agency. The private key of the digital encryption is kept by the manufacturer, and the manufacturer uses the private key on the electronic label of the product to generate Digital signature, digital decryption of the manufacturer's public key is issued through the digital certificate of the PKI system. Decryption and signature using the public key can be done through authorized readers or through a trusted anti-counterfeiting certification authority. The owner of the authorized reader for anti-counterfeiting verification shall apply for a digital certificate from a trusted digital certificate management agency in advance, and the certificate contains the manufacturer's public key. The public key can be stored in the data processing system connected to the reader, or in a SIM card that can be inserted into the designated interface of the reader. At this time, the reader needs to be specially designed for anti-counterfeiting verification. Anti-counterfeiting verification through a third-party anti-counterfeiting certification body means that after the user reads the anti-counterfeiting information of the electronic tag with a reader, he sends an application for anti-counterfeiting verification to a trusted third-party certification body through the communication network, and the third-party The certification authority performs the anti-counterfeiting verification operation and returns the verification result to the user. The contact information between the user and the third-party certification agency can include text messages, phone calls, emails, and can be established by establishing a communication protocol dedicated to anti-counterfeiting verification or designing special embedded software in the reader for anti-counterfeiting verification. Integrate the various steps of verification, simplify the verification process, and make the details of the verification process transparent to users. If the digital signature is verified, the authenticity of the product is determined, and if it is inconsistent, a warning message is issued.

产品历史的追踪和比较的目的主要是控制产品的流通环节。其基本验证过程如下：产品的制造商在产品生产完成后，登陆防伪验证服务器创建产品检测信息文件，登陆过程需要进行身份认证。初次建立的产品检测信息包括产品的基本信息，产品跟踪检测信息。产品在经过供应链的各个环节(批发商，配送中心，第三方物流等)时，通过授权的读写器在电子标签的物流信息区写入物流跟踪信息，所述物流跟踪信息可以包括读写器的ID号码、写入时间、操作者信息等。防伪校验时，校验方将通过电子标签上的索引区的信息访问防伪验证服务器，将物流信息区的信息内容和防伪服务器上产品检测信息中预设的产品跟踪检测信息进行对比，比较内容包括授权读写器的ID号码以及写入的时间顺序，如果对比结果一致，则认定产品来源的合法性，如果不一致，则发出警告信息。此外，产品验证信息将记录对产品进行防伪验证的读写器的ID号码和验证的时间和次数，并可以根据验证方的要求提供其验证历史。The purpose of tracking and comparing product history is mainly to control the circulation of products. The basic verification process is as follows: After the production of the product is completed, the manufacturer of the product logs in to the anti-counterfeiting verification server to create a product detection information file, and identity authentication is required during the login process. The product testing information established for the first time includes the basic information of the product and the product tracking testing information. When the product passes through each link of the supply chain (wholesaler, distribution center, third-party logistics, etc.), the authorized reader writes the logistics tracking information in the logistics information area of the electronic label. The logistics tracking information can include reading and writing device ID number, write time, operator information, etc. During anti-counterfeiting verification, the verifying party will access the anti-counterfeiting verification server through the information in the index area on the electronic label, and compare the information content in the logistics information area with the product tracking and detection information preset in the product detection information on the anti-counterfeiting server. Including the ID number of the authorized reader and the time sequence of writing. If the comparison results are consistent, the legality of the product source will be determined. If not, a warning message will be issued. In addition, the product verification information will record the ID number of the reader-writer who has verified the anti-counterfeiting of the product and the time and times of verification, and its verification history can be provided according to the requirements of the verification party.

基于RFID的商品防伪系统工作流程如图4所示。RFID电子标签在生产商处被附着在商品上，每个商品将被赋予唯一编码，商品的唯一编码以及生产商的数字签名将被写入标签的存储器，并完成锁定操作。标签数字签名在标签初始化时实施，将标签ID码，制造商代码及其它相关参数，用HASH算法进行处理，生成数字指纹码，并用非对称密钥的私有密钥进行数据加密，签名用私钥由指定的设备和安全系统产生，用于认证的根证书存放在可以信任的认证中心。用户可以使用手持式的读写器或者带RFID读写功能的手机读取电子标签，通过短信向可以信任的认证中心提出检验申请，认证中心通过解读数字签名，对物品身份进行数字认证，验证产品的真实性；厂商通过授权获得生产商的公共密钥，直接验证产品的真实性。此外，可以通过在标签上记录产品的流通历史，并与防伪服务器上的产品检测信息进行比较，确定产品的流通过程是否符合规定，以补充验证产品来源的真实性。The workflow of the RFID-based commodity anti-counterfeiting system is shown in Figure 4. The RFID electronic tag is attached to the product at the manufacturer, and each product will be given a unique code. The unique code of the product and the manufacturer's digital signature will be written into the tag's memory and the locking operation will be completed. The digital signature of the label is implemented when the label is initialized. The label ID code, manufacturer code and other related parameters are processed with the HASH algorithm to generate a digital fingerprint code, and the data is encrypted with the private key of the asymmetric key, and the private key is used for the signature. Generated by the designated device and security system, the root certificate used for authentication is stored in a trusted certification center. Users can use a handheld reader or a mobile phone with RFID reading and writing functions to read the electronic tag, and submit an inspection application to the trusted certification center through SMS. The certification center can digitally authenticate the identity of the item and verify the product by interpreting the digital signature. The authenticity of the product; the manufacturer obtains the public key of the manufacturer through authorization, and directly verifies the authenticity of the product. In addition, by recording the circulation history of the product on the label and comparing it with the product detection information on the anti-counterfeiting server, it can be determined whether the circulation process of the product complies with the regulations, so as to supplement the verification of the authenticity of the product source.

上述基于RFID的商品防伪系统具有以下四个基本特征：The above-mentioned RFID-based commodity anti-counterfeiting system has the following four basic features:

1)通过产品编码对商品进行唯一标识。1) Uniquely identify the product through the product code.

产品代码的内容至少包括生产商代码，产品类别代码和产品序列号，每一个商品将获得唯一的产品编码。在把电子标签贴到产品上之前，将上述代码写入电子标签的存储器，并进行锁定，使得没一个产品获得唯一的，不可修改的编码。The content of the product code includes at least the manufacturer code, product category code and product serial number, and each commodity will receive a unique product code. Before attaching the electronic label to the product, write the above code into the memory of the electronic label and lock it, so that no product can obtain a unique and unmodifiable code.

2)通过RFID技术进行产品自动识别。2) Automatic product identification through RFID technology.

产品编码被存储在附着在产品上的电子标签的存储器中，电子标签可以通过与传感器的集成获取产品的环境信息，防伪识别过程中通过RFID读写器读取电子标签的信息，并且可以通过RFID中间件过滤重复读取的电子标签，实现多目标识别，大大提高识别的效率。供应链中的各个厂商的RFID读写器在获得授权的情况下对电子标签进行读操作和灭活操作，读写器的授权信息保存在可信的信息服务系统中。The product code is stored in the memory of the electronic tag attached to the product. The electronic tag can obtain the environmental information of the product through the integration with the sensor. During the anti-counterfeiting identification process, the information of the electronic tag is read by the RFID reader, and can The middleware filters the electronic tags that are repeatedly read, realizes multi-target recognition, and greatly improves the efficiency of recognition. The RFID readers of each manufacturer in the supply chain perform reading and inactivation operations on electronic tags when authorized, and the authorization information of the readers is stored in a trusted information service system.

3)采用数字签名保证数据安全性和不可抵赖性3) Digital signatures are used to ensure data security and non-repudiation

在电子标签上将保存制造商采用私钥签名的产品信息和产品唯一编号，数字签名将在制造商处写入电子标签，并进行锁定，使得其无法进行修改。进行防伪验证时，可以通过认证中心的公钥解密，并提取产品信息的HASH函数值，与标签内保存的HASH函数值进行比较，判断产品是否为该制造商生产。The product information and product unique number signed by the manufacturer with a private key will be saved on the electronic label, and the digital signature will be written into the electronic label at the manufacturer and locked so that it cannot be modified. When performing anti-counterfeiting verification, the public key of the certification center can be used to decrypt and extract the HASH function value of the product information, and compare it with the HASH function value stored in the label to determine whether the product is produced by the manufacturer.

4)利用产品历史补充验证产品来源4) Use product history supplement to verify product origin

产品的原始信息和产品的环境要求等由生产商提供，信息服务系统在产品出厂时为每一个产品创建一个产品检测信息文件。商品在整个物流过程中，经过授权的供应链厂商将利用RFID读写器在电子标签的产品历史区写入产品历史信息，包括读写器号和读写时间等。可以事先在产品所经过的供应链中设定若干个监测点，将检测点的读写器编号列表将保存在认证中心的数据库中，防伪认证时，将比较物流信息跟踪区与认证中心的预设读写器编号及序列，如果物流信息跟踪区中包含经过授权的本产品必须经过的所有供应链厂商的读写器编号，同时符合生产商对产品运输和储存的要求，则认定为可信产品，否则发出防伪提示信息。The original product information and product environmental requirements are provided by the manufacturer, and the information service system creates a product inspection information file for each product when the product leaves the factory. During the entire logistics process of goods, authorized supply chain manufacturers will use RFID readers to write product history information in the product history area of the electronic tag, including reader number and read and write time. A number of monitoring points can be set in advance in the supply chain that the product passes through, and the list of reader numbers of the detection points will be saved in the database of the certification center. During the anti-counterfeiting certification, the logistics information tracking area will be compared with the pre-set data of the certification center. Set the reader-writer number and sequence, if the logistics information tracking area contains the authorized reader-writer numbers of all supply chain manufacturers that the product must pass through, and meets the manufacturer's requirements for product transportation and storage, it is considered credible products, otherwise an anti-counterfeiting prompt message will be issued.

最后所应说明的是，以上实施例仅用以说明本发明的技术方案而非限制，尽管参照较佳实施例对本发明进行了详细说明，本领域的普通技术人员应当理解，可以对本发明的技术方案进行修改或者等同替换，而不脱离本发明技术方案的精神和范围，其均应涵盖在本发明的权利要求范围当中。Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention without limitation. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be Modifications or equivalent replacements of the technical solutions without departing from the spirit and scope of the technical solutions of the present invention shall be covered by the scope of the claims of the present invention.

附注1、RSA公钥密码系统是由Rivest、Shamir和Adleman联合提出，RSA的基础是数论的欧拉定理，它的安全性依赖于大数的因数分解的困难性，被认为是到目前为止最有希望的一种公钥密码系统。见参考文献[1]、[2]。Note 1. The RSA public key cryptosystem was jointly proposed by Rivest, Shamir and Adleman. The basis of RSA is Euler's theorem of number theory. Its security depends on the difficulty of factoring large numbers. It is considered to be the most A promising public-key cryptosystem. See references [1], [2].

附注2、安全散列算法(SHA-1)是美国标准技术所NIST和美国国家安全局NSA一起设计的一种散列函数(Hash)，它设计是为了与数字签名标准DSS配套使用的，是目前所分析的Hash函数中最抗穷举攻击(包括生日攻击)的Hash函数。见参考文献[3]、[4]、[5]。Note 2. The Secure Hash Algorithm (SHA-1) is a hash function (Hash) designed jointly by the American Institute of Standards and Technology NIST and the National Security Agency NSA. It is designed to be used in conjunction with the digital signature standard DSS. It is Among the Hash functions analyzed so far, it is the most resistant to exhaustive attacks (including birthday attacks). See references [3], [4], [5].

参考文献：references:

[1]R.L.Rivest，A.Shamir，and L.M.Adleman，“A method for obtaining digitalsignatures and public-key cryptosystem.”Communication ofthe ACM.1978.21：pp.120～126.[1] R.L.Rivest, A.Shamir, and L.M.Adleman, "A method for obtaining digital signatures and public-key cryptosystem." Communication of the ACM.1978.21: pp.120～126.

[2]R.L.Rivest，A.Shamir，and L.M.Adleman，“On Digital Signatures and Public-KeyCryptsystems，”MIT Laboratory for Computer Science，Technical Report，MIT/LCS/TR-212.Jan 1979.[2] R.L.Rivest, A.Shamir, and L.M.Adleman, "On Digital Signatures and Public-KeyCryptsystems," MIT Laboratory for Computer Science, Technical Report, MIT/LCS/TR-212.Jan 1979.

[3]Federal Information Processing Standards(FIPS).Secure Hash Standard(SHA-1).Technical Report 180-1，National Institute of Standards and Technology(NIST)，April 1995.supersedes FIPS PUT 180，1993.[3] Federal Information Processing Standards (FIPS). Secure Hash Standard (SHA-1). Technical Report 180-1, National Institute of Standards and Technology (NIST), April 1995. supersedes FIPS PUT 180, 1993.

[4]Alma Technologies.SHA-1 Cores.http：//www.alma-tech.com[4] Alma Technologies. SHA-1 Cores.http://www.alma-tech.com

[5]CAST Inc.AES and SHA-1 Crypto processor Cores.http：//www.cast-inc.com[5]CAST Inc.AES and SHA-1 Crypto processor Cores.http://www.cast-inc.com

Claims (9)

1, a kind of anti-counterfeit authentication method based on REID is characterized in that, the storer of radio frequency recognizing electronic label is divided at least: the historical district of basic information region, digital signature district and product; Basic information region, the storage products code, promptly unique coding comprises manufacturer code and the sequence number that can distinguish Individual Items; The digital signature district, storage manufacturer is to the digital signature of product essential information; The historical district of product, the master data of record logistic track information, at product through in the supply chain during each predefined logistics link, will be through the read write line of authorizing in the relevant information of logistics information tracking area write operation, as the time of operation, the identifier of read write line etc.;

The checking flow process comprises at least:

Step 1, the label initialization, the unique coding of essential information writes, and generates digital signature, sets up the history file of commodity;

Step 2, through each predefined logistics link the time, will be through the read write line of authorizing in the relevant information of logistics information tracking area write operation;

Step 3, read write line reads electronic tag, proposes inspection request to the authentication center that can trust, authentication center is by understanding digital signature, article identity is carried out digital authenticating,, then do not produce the fake product warning if do not conform to if digital signature conforms to and then carries out step 4;

Step 4, the information in the historical district of inquiry product judges then whether this trace information conforms to predefined trace information, conforms to and then passes through, and does not conform to then to produce the fake product warning.

2, anti-counterfeit authentication method according to claim 1, it is characterized in that, described digital signature realizes by the combination of Digital Fingerprinting Technology and " public key technology ", locate in manufacturer, at first generate the digital digest of product coding with HASH function S HA-1, adopt RSA Algorithm digital digest to be encrypted then, generate digital signature with the private cipher key of manufacturer;

Public key technology is used a public keys and a private cipher key, and wherein public keys is open and private cipher key is maintained secrecy, and private cipher key is used for encrypting and signature, and public keys is used for deciphering; The private cipher key of manufacturer can only be used by manufacturer oneself, and public-key cryptography can be used by a plurality of certifying organization.

3, anti-counterfeit authentication method according to claim 1 is characterized in that, described deciphering digital signature is carried out digital authenticating to article identity, comprises at least:

When carrying out fake certification, authentication uses HASH function S HA-1 to generate the digital digest 1 of the unique coding of product, utilize RSA Algorithm digital signature to be decrypted operation simultaneously with the public-key cryptography of manufacturer, obtain the digital digest 2 of the unique coding of product, if digital digest 1 is identical with digital digest 2, then signature effectively.

4, anti-counterfeit authentication method according to claim 1 and 2 is characterized in that, described digital signature is locked after writing the storer of electronic tag, can only carry out read operation later on.

5, anti-counterfeit authentication method according to claim 1 and 2 is characterized in that, described public keys and private cipher key must be produced by appointed equipment and security system.

6, anti-counterfeit authentication method according to claim 1 is characterized in that, the storage space in the historical district of product both can carry out read operation, also can carry out write operation.

7, anti-counterfeit authentication method according to claim 1, it is characterized in that, the storer of described radio frequency recognizing electronic label also comprises anti-fake certificate server address index area, this allocation index district preserves the IP address of anti-fake certificate server and the index of IP address, by above-mentioned index, can indicate and preserve the server address that product detects message file, 0 grade of index refers to the IP address of direct sign anti-counterfeit server, and the allocation index more than 1 grade and 1 grade then comprises the plot of a retrieval and some grades side-play amount.

8, a kind of Antiforge system based on REID is characterized in that this Antiforge system comprises electronic tag, read write line and anti-counterfeiting information service system at least; The storer of electronic tag comprises the historical district of basic information region, digital signature district, anti-fake certificate server address index area and product; The anti-counterfeiting information service system comprises product and detects message file and authentication information, the content of record comprises by the time for reading of the coding of the product attribute of manufacturer's typing, label, label and carries out the read write line numbering of read operation, the environmental information of product etc. that the information service system manufacturer or the third-party institution are responsible for maintenance; N level anti-counterfeit server is set, the index of the IP address of authentication storage server and IP address in the storer of electronic tag in the information service system; 0 grade of index refers to the IP address of direct sign anti-counterfeit server, allocation index more than 1 grade and 1 grade then comprises the plot of a retrieval and some grades side-play amount, the commodity counterfeit prevention of N level index, can be by the server of visit plot sensing, it is logical that the side-play amount that refers again to the N level obtains the IP address of actual anti-counterfeit server, cross above-mentioned index, can indicate and preserve the final server address that product detects message file.

9, the Antiforge system based on REID according to claim 8, it is characterized in that: the numerical value of described IP address and IP allocation index is determined by the implementer of Antiforge system in advance, allocation index is locked after writing electronic tag, can only carry out read operation later on.

Images