KR102007159B1 - Terminal and platform for authenticating genuine products and the authenticating method by using the same - Google Patents

Abstract

The present invention relates to an activation terminal, a platform and an activation method for activation, using a portable terminal as an authentication terminal in the production, distribution, sales, and consumption phases of a portable terminal without installing a separate dedicated application. When capturing (scanning) an identification mark attached to a product (products, documents, tickets, coupons, various kinds of objects connected to goods on the Internet, etc.) using only the basic application, which is essentially installed at the time of sale, the captured identification mark The present invention relates to a genuine authentication platform and a genuine authentication method for automatically accessing an authentication server using information recognized from the authentication server, and performing authentication on the authentication server to provide authentication information to an authentication terminal.

Description

Activation terminal, platform and activation method {TERMINAL AND PLATFORM FOR AUTHENTICATING GENUINE PRODUCTS AND THE AUTHENTICATING METHOD BY USING THE SAME}

The present invention relates to an activation terminal, a platform, and an activation method, which are essential from the sale of a portable terminal without the need for a consumer to install a dedicated application by using his portable terminal as an authentication terminal after the product is sold to the consumer. If only the basic application installed in the application captures (scans) the identification mark attached to the product (products, documents, tickets, coupons, various kinds of objects connected to the goods on the Internet), the information recognized from the captured identification mark Automatic access to the authentication server using the authentication server, and the authentication terminal and product activation by the authentication terminal and product activation method for providing the activation information to the authentication terminal.

The development of information technology has led to the so-called hyperconnected society, where members of society connect globally in real time. Hyper-connected societies are making society more complex and diverse, as the whole world is united into one and organically shared by each member. Every member of society can get the information he / she wants whenever and wherever he or she wants, resulting in a number of new products being born, and the number, shape and shape of the products or products produced are exploding. In addition to the products and products, there are a number of objects connected to personal goods on the Internet, including documents, tickets, coupons, and the like.

The variety of products and types of products is increasing, and the producers of those products (including producers of goods, documents, credit, etc.) can exist anywhere on the planet, and each producer can also Production skills can be mastered. As a result, a producer who developed, produced, and sold a product for the first time often encounters a counterfeit similar to his or her product.

Fortunately, consumers want to buy and use genuine products rather than counterfeits. However, it is difficult for a consumer to properly determine whether a product he or she purchased is genuine or a counterfeit unless he or she is particularly interested in or find information about the product. Also, even if the manufacturer's information on the product is accurately identified, even if it is forged, there is no way for the consumer to know the authenticity of the product he or she purchased.

Recently, many solutions have been released to distinguish whether a particular product or product is genuine or fake. The so-called activation solution is a service that recognizes a tag attached to a product and recognizes whether the corresponding product is genuine, and informs the user whether the product is genuine. In order to recognize, an application (or an app) capable of decoding the tag must be installed in the user terminal. The fact that an app capable of recognizing the tag should be installed on the user terminal means that the user has to perform a complicated app installation procedure, and there are many cases in which the spread of the app is delayed due to the hassle of the app installation procedure. .

In other words, even if a tag is complicated and robust to hacking, if a user needs to install an application program with a separate decryption technology in order to read and decode the tag in a general user terminal, the user will turn away. In particular, in case of expensive products, the authenticity of the product may be checked by visiting the store or in the case of low-cost products, activation may not be considered important.

Therefore, the present invention is to solve the problem of the prior art that can be activated by installing a separate app. More specifically, the present invention does not require a separate app for authentication, but does not mean that no app or tool is required. In other words, the activation is performed by utilizing the basic tools installed in the user terminal. Therefore, one of the technical features of the present invention is that the user does not have to perform a separate dedicated app installation process for activation.

Next, the prior art existing in the technical field of the present invention will be briefly described, and then the technical matters to be made differently from the prior art will be described.

First, Korean Patent No. 1298224 (August 13, 2013) relates to an authentication method using a two-dimensional code, and the terminal reads the two-dimensional code attached authentication object by reading the two-dimensional code from which the screening means is removed. The present invention relates to an authentication method using a two-dimensional code that can be authenticated, and when the terminal reads the two-dimensional code, the authentication target information is displayed to determine the authenticity of the authentication object to which the two-dimensional code is attached. In the present invention, the two-dimensional code includes connection information that can connect to the authentication server and authentication request information required for authentication, and the application accesses the two-dimensional code reading and authentication server through a dedicated or general purpose application, and finally authentication is performed. Upon completion, the authentication server may permanently terminate the authentication of the authentication object for which authentication has been completed, thereby preventing an unspecified number of authentications through duplication or reuse of two-dimensional code.

This prior art is similar to the present invention in that it is connected to the authentication server through the connection information of the QR code, the authentication is made by the authentication request information, but should be provided with a separate application, the corresponding authentication server at the first authentication After converting the information of the terminal into the authentication completion information, and then stored in the authentication server compared to the authentication completion information, it is determined that the authentication or authentication failed. In the present invention, there is no need to provide a separate app in the terminal, even if the authentication server has the terminal and the product information already authenticated, it can be distinguished whether authentic or false by re-authenticating, the prior art to present in the present invention Since the technical features of the authentication method through the interaction between the terminal and the authentication server are not mentioned at all, the two are obviously different in technical configuration from each other.

In addition, Chinese Patent No. 103077467 (announced on June 29, 2016) relates to a product authenticity verification method and system. The network server includes a determination unit and a registration unit to verify a history tracking code and unauthorized copy protection, and the determination The unit verifies the authenticity of the product based on the history tracking code and the security code judgment, sends the authenticity information verifying the product to the mobile terminal, and if the product is verified to be true, sends the trigger information to the registration unit. The registration unit registers the history tracking code, the security code, and the mobile terminal based on the trigger information of the determination unit. The registration of the mobile terminal is to establish a corresponding relationship between the history tracking code, the security code and the mobile terminal, and he is a legal terminal that can subsequently use the history tracking code and the security code inquiry information. The mobile number or SIM card number, which is the information of the mobile terminal of the first scan or the legitimate scan, is sent to the network server.

The prior art is similar in that it manages the mobile terminal in the QR code activation step, but distinguishes the mobile terminal by the identification key assigned to the mobile terminal in the authentication server as in the present invention, and does not require a separate app for this Since the mechanism for performing the mutual authentication procedure between the mobile terminal and the authentication server is not described, the technical configuration of the two are obvious from each other.

That is, each of the aforementioned prior arts is characterized by performing a certification process for the genuine product by installing a separate certification app, and each certification process is very specialized, and the procedure for authentication is simple. In other words, if a dedicated authentication app is installed on a portable terminal, the authentication method becomes very simple because the app can embed various authentication mechanisms. However, there is a hassle that a user needs to download and install an app on his portable terminal. In the present invention, eliminating this hassle is the first goal, so the difference between the present invention and the prior art is obvious in this section.

Since the user does not need to install or install a separate dedicated app, the present invention is automatically performed while the user does not recognize the activation process with the authentication server by reading the identification mark of the user's portable terminal. Just by scanning the identification mark with the terminal has the advantage that you can know immediately whether the object is genuine or false.

The present invention was created to solve the above problems, the user does not need to install a separate app on their portable terminal, utilizing as an authentication terminal product (products, documents, tickets, coupons, connected to goods on the Internet) It is an object of the present invention to provide an authenticating terminal, an authentication platform, and an authentication method through these, which can authenticate authenticity of a corresponding product by simply scanning an identification mark attached to a number of objects).

In another aspect, the present invention provides a mechanism for automatically accessing the authentication server using the information recognized from the identification mark scanned by the authentication terminal, by providing a mechanism to enable authentication of the product or product from the authentication server and the authentication terminal, Another object of the present invention is to provide an authenticating terminal, an authentication platform, and an authentication method through these, which enable authentication of a product or product.

In addition, the present invention is connected to the authentication server using the identification mark scanned by the authentication terminal, and at this time, by managing the connection history by using the information on the authentication terminal and the identification mark recognized by the authentication server, re-regarding the product or product Another object of the present invention is to provide a genuine authentication terminal, an authentication platform, and an authentication method through the same.

In addition, in the present invention, in providing the authentication result of a specific product or product requested by the authentication terminal from the authentication server to the authentication terminal, it is expressed differently according to various levels (order, frequency, priority, level, importance, etc.) or the corresponding information is displayed. Another object of the present invention is to provide a genuine authentication terminal, an authentication platform, and an authentication method through these, which allow consumers to more intuitively grasp through the display of the authentication result.

In the activation method according to an embodiment of the present invention, obtaining an authentication code associated with a specific object in the terminal and the access information of the authentication server, the terminal accessing the authentication server using the access information and the authentication code Transmitting a response to the authentication server by checking whether an identification key or a product authentication key is issued by the terminal according to a request of the authentication server, and receiving an authentication result from the authentication server. It characterized in that it comprises a step of outputting.

The terminal confirms whether an identification key or a product authentication key is issued and transmits a response to the authentication server. If the issued identification key or product authentication key exists in the terminal, the issued identification key is transmitted to the authentication server. If not present, the authentication server requests for issuing an identification key or a product authentication key and receives the identification key from the authentication server. If the product authentication key according to the authentication code stored in the authentication server is already issued and present in the terminal, the authentication code is already authenticated, if not present, it is determined that the first authentication. When the first authentication and the first authentication is already authenticated, the authentication results including the message, image, web page, sound, reward, or a combination thereof provided by the authentication server to the terminal are different from each other. Output to the screen of the terminal.

In addition, in the activation method according to another embodiment of the present invention, the authentication server receives the authentication code for a specific object from the terminal, the authentication server to the terminal identification key or product for the received authentication code Issuing an authentication key, and matching the identification key with the authentication code in the authentication server, and providing an authentication result according to the matching to the terminal.

The terminal accesses the authentication server through the access information obtained from the identification mark associated with the specific object, and the authentication code is obtained from the identification mark by the terminal and provided to the authentication server. The imaginary authentication server requests the product authentication key from the terminal, and if a product authentication key according to the authentication code stored in the authentication server has already been issued and exists, the authentication code is already authenticated, and if it does not exist first, It is considered to be certified. When the first authentication and the first authentication, the authentication result including a message, an image, a web page, a sound, a reward, or a combination thereof provided by the authentication server to the terminal, respectively, is expressed differently and displayed on the screen of the terminal. Do it.

In addition, the activation method according to another embodiment of the present invention, the terminal acquires the authentication code and the authentication information associated with the specific object in the terminal, by using the access information to access the authentication server to obtain the authentication code Transmitting, by the authentication server, checking whether the identification key or the product authentication key exists in the terminal; checking whether the identifier or the product authentication key exists in the terminal; Transmitting a predetermined identifier to the authentication server if it does not exist, and if it is confirmed that there is no product authentication key according to the authentication code stored in the authentication server, the first authentication result is transmitted to the terminal. Providing to the terminal an authentication result that has already been authenticated if it is confirmed to exist It includes.

The authentication server further checks whether the identification key or the product authentication key exists in the terminal, and if the authentication server does not exist, the authentication server issues the identification key or the product authentication key to the terminal.

On the other hand, the activation terminal according to another embodiment of the present invention, the identification mark acquisition unit for obtaining the authentication code and the authentication information associated with the specific object, the authentication server by accessing the authentication server through the connection information Access request unit for transmitting a code, a key verification unit for sending a response to the authentication server by checking whether the identification key or product authentication key is issued according to the request of the authentication server, and receives the authentication result from the authentication server on the screen An authentication result display unit is output.

The terminal confirms whether the identification key or the product authentication key is issued and transmits the response to the authentication server. If present, the identification key or product authentication key is transmitted to the authentication server. By sending it. If the product authentication key according to the authentication code stored in the authentication server has already been issued and exists, the authentication code is already authenticated, if not present, it is determined that the first authentication. When the first authentication and the first authentication, the authentication results including the message, image, web page, sound, reward, or a combination thereof provided by the authentication server, respectively, to output differently on the screen .

In addition, the activation platform according to another embodiment of the present invention, the access control unit for receiving a connection request from the terminal, the authentication code for a specific object, the received authentication code, the terminal or a combination thereof Key issuing unit for issuing a product authentication key, identification key or a combination thereof to the terminal, an authentication information storage unit for matching and storing the identification key, product authentication key or a combination thereof and the authentication code, and authentication according to the matching It includes an authentication result providing unit for providing a result to the terminal.

The terminal accesses through access information obtained from an identification mark associated with the specific object, and the authentication code is obtained from the identification mark and provided by the terminal. By receiving the identification key, the product authentication key or a combination thereof from the terminal, it is possible to check whether the identification key or the product authentication key has already been issued. If the identification key, product authentication key, or a combination thereof is issued for the first time, the authentication code is first authenticated. If the identification key, product authentication key, or a combination thereof has already been issued, the authentication code has already been authenticated. It is. When the first authentication and the first authentication, the authentication result including the message, image, web page, sound, reward, or a combination thereof provided to the terminal, respectively, to express differently to output on the screen of the terminal It is done.

As described above, according to the activation terminal of the present invention, the authentication platform, and the authentication method through these, consumers do not need to install a separate dedicated app for authentication, so consumers can easily check the authenticity of the goods or goods purchased by them. Therefore, the accessibility of authentication through the portable terminal is excellent, the space to be stored in the portable terminal can be saved, and the convenience of use can be improved.

According to this advantage, the present invention does not require a separate app in terms of the terminal, it is possible to authenticate even without a separate dedicated terminal, and in the authentication server, it can be applied in various stages of production, logistics, and sales. It has the advantage of high scalability.

1 is a conceptual diagram illustrating a genuine authentication terminal, an authentication platform, and an authentication method through these according to an embodiment of the present invention.
2 is a conceptual diagram for explaining a concept of performing the activation between the authentication server and the terminal according to an embodiment of the present invention.
3 is a block diagram showing the configuration of an authentication server according to an embodiment of the present invention.
4 is a block diagram showing the configuration of an authentication terminal according to an embodiment of the present invention.
5 is a signal flow diagram between an authentication terminal and an authentication server for activation according to an embodiment of the present invention.
6 is a flowchart illustrating a process of performing genuine certification by sequentially performing terminal and product certification according to an embodiment of the present invention.
7 is a flowchart illustrating a process of authenticating by performing a terminal and a product certification at the same time according to an embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings will be described in detail a genuine authentication terminal, the authentication platform and the authentication method through them. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. Like parts are designated by like reference numerals throughout the specification.

In the present invention, the identification key is a concept of a secret key or a private key (private key, individual key, secret key) assigned to each terminal and is also a representative key of products for performing activation for each terminal. The identification key is a key for distinguishing the terminal and is uniquely issued for each terminal in the authentication server. There is only one identification key issued for one terminal, and the key is guaranteed to be a universal unique identifier (UUID) uniquely assigned to each terminal.

The product authentication key is a key given to each product, and is a key issued for each product whenever the terminal is activated. For example, a product authentication key is assigned to each product whenever a terminal is activated for a plurality of products. Similarly, the product authentication key is guaranteed to be unique with a universal single identifier (UUID) that is assigned differently for each key. When requesting activation in the terminal to which an identification key has been assigned, the authentication server may determine whether the license is genuine based on a matching relationship between the authentication code of the corresponding product and the product certification key.

In the embodiment of the present invention, the identification key and the product authentication key are issued separately, but in practice, they may be combined with each other to be configured as a single key or separately managed. Therefore, when the authentication server requests confirmation of the identification key or the product authentication key from the terminal, The identification key, the product authentication key, or a combination thereof may be returned in an integrated form, or each may be returned separately, and the identification key and the product authentication key may be separated from the authentication server, or may be separately provided and The authentication code is matched with each other, stored, and the determination of authenticity is also performed.

In the present invention, an object includes a product, a product, an article, a document, an invisible image, a ticket, a coupon, and various kinds of virtual objects connected to the goods on the Internet. In other words, an object can be a physical thing but a virtualized thing.

1 is a conceptual diagram illustrating a genuine authentication terminal, an authentication platform, and an authentication method through these according to an embodiment of the present invention.

As shown in FIG. 1, in the present invention, an authentication platform may be established including an authentication server 100 and a database, and the platform may include a plurality of special purpose dedicated servers in addition to the authentication server. It may be. The activation platform according to the present invention provides a product activation service to a consumer through an authentication server.

The activation server 100 may provide an activation service to a plurality of terminals, and each terminal may receive a corresponding service by requesting activation for the plurality of products through the authentication server.

The producer of the product purchases the identification label with the unique certification code from the issuing organization and attaches it to the produced product.The product is sent to the seller through logistics, and the seller passes the product to the consumer through distribution. Sell. Therefore, the database 300 matches and stores an authentication code, an identification key (private key, secret key, individual key, etc.), a product authentication key, and an identification key for each product for activation. As soon as the request arrives, it performs product certification and delivers the result to the consumer.

When providing the activation result, the authentication server has a predetermined phrase, image, video or a combination thereof, and the terminal includes different messages, images, videos or a combination thereof according to the activation result. Provide content.

2 is a conceptual diagram for explaining a concept of performing the activation between the authentication server and the terminal according to an embodiment of the present invention.

Hereinafter, referring to FIG. 2, a process of authenticating a genuine product by scanning a QR code for a specific product between an authentication server and a terminal (a consumer terminal, etc.) will be described.

First, the terminal scans an identification mark (for example, a QR code) to obtain access information, authentication code (or product code) and product information to the authentication server. Here, the authentication code (product code) is a unique code given to the seller of the identification mark when selling to the product producer. The terminal simultaneously accesses the authentication server using the access information at the same time as the scan. The authentication server requests the terminal to check whether there is an identification key (for example, private key, secret key, etc.), product authentication key, or a combination thereof. Next, the terminal transmits the identification key, the product authentication key, or a combination thereof stored in the authentication server to the authentication server. Subsequently, the authentication server confirms that the identification key and the product authentication key exist in the terminal, and if present, matches and stores the corresponding identification key and the product authentication key and the authentication code. Issuing a combination of these, the newly issued identification key, product authentication key or a combination thereof and the authentication code is stored. Through this process, the authentication server allows the consumer terminal to perform activation.

Here, the authentication server, when a new authentication code is input for the previously issued identification key, it is judged as an authentication request for a new product, issuing a new product authentication key, matching and storing the corresponding authentication code and identification key and product authentication key, The authentication result of the corresponding product is provided to the terminal, and the terminal outputs the authentication result on the screen.

When the authentication result is output to the screen, the authentication server delivers different messages, audible and visible information to the terminal according to whether the authentication is the first authentication, multiple authentications or unauthentication results. Intuitive recognition of authentication results is easy. In addition, if the authentication fails, the server may automatically register with the server of the counterfeit accusation center or the police station, or print information on the consumer terminal, including a warning message, harmful information, punishment problem, and a notification of counterfeit goods. On the other hand, consumers can receive coupons, cyber money, tickets, etc. as a reward to consumers who are authentically authenticated.

Next, the configuration of the authentication server and the terminal according to the present invention for performing such a role will be described with reference to FIGS. 3 and 4.

3 is a block diagram showing a configuration of an authentication server according to an embodiment of the present invention, Figure 4 is a block diagram showing the configuration of a terminal for performing authentication according to an embodiment of the present invention.

As shown in FIG. 3, the authentication server 100 according to an embodiment of the present invention includes a connection control unit 110, a key issuing unit 120, a key confirmation requesting unit 130, a genuine authentication unit 140, The web service unit 150, the authentication result providing unit 160, the authentication information storage unit 170, the authentication information access unit 180, and the authentication information management unit 190 are included. Of course, each of the above components may be configured to be integrated, it is natural that the implementation of the spirit of the present invention even if there is a component having a different name to perform the role of the corresponding component.

The access controller 110 controls the connection between the terminal and the authentication server, including whether to allow the connection of the terminal when the terminal accesses the authentication server according to the access information to the authentication server obtained from the terminal. do. For example, the authentication server may block access to an illegal terminal in advance or, if too many connection requests are received, may be regarded as a hacker attack and block the connection in advance. In addition, if an access request comes from an area where service is not available, or an access request is made that is not an allowed carrier, it may be denied.

When the terminal is connected, the key issuing unit 120 issues an identification key or a product authentication key for the corresponding terminal, wherein the issue includes generating and providing (transmitting) an identification key or a product authentication key to the corresponding terminal. . The key issuer 120 issues a unique identification key only once when the terminal first accesses the authentication server for each terminal, and issues a unique product authentication key when each terminal transmits authentication codes of different products. Therefore, it may be assumed that the identification key or the product authentication key issued by the key issuing unit 120 has been delivered to the terminal.

The key confirmation request unit 130 requests confirmation whether there is an identification key or a product authentication key stored in the connected terminal. The request for confirmation of the identification key is transmitted from the authentication server to the terminal. If the identification key stored in the terminal exists, the terminal transmits it to the authentication server. If not, it transmits 'NULL' or a predetermined identifier. If the identification key or identification key received from the authentication server is a normal identification key, it is recognized as a terminal that has already issued the identification key. Otherwise, the identification key is recognized as a terminal that has not been issued yet, and a new identification key is issued to the terminal. In addition, the request for confirmation of the product authentication key is delivered to the terminal, and if the terminal has a product authentication key stored in its own, it is transmitted to the authentication server, and if not, 'NULL' or a predetermined identifier may be transmitted. Viewing the product authentication key or identification key received from the authentication server, if it is a normal product authentication key, it is recognized as a terminal that has already issued a product authentication key. Otherwise, the product authentication key is recognized as a terminal that has not yet issued a new product authentication key. To be issued. At this time, the authentication server stores the authentication code and the first issued product authentication key by matching the authentication code and the first issued product authentication key as the first product authentication key issued for the specific authentication code. The identification key is for distinguishing the terminal, and the product authentication key is further added to the identification key and mapped with the actual authentication code.

The activation unit 140 performs activation using the first issued product authentication key that is stored by matching each authentication code for each product. After receiving the authentication code and the product authentication key from the terminal, it is determined whether or not genuine by comparing the product authentication key received from the terminal with the product authentication key first issued according to the authentication code. If the stored first issued product authentication key according to the received authentication code and the received product authentication key match, it is determined as genuine authentication. If there is a mismatch between the first issued product authentication key and the received product authentication key according to the received authentication code, it is determined as re-authentication. And, if there is no authentication code stored for the received authentication code is determined to be genuine activation failure.

On the other hand, the authenticator 140 may manage the authentication result for each identifier by using an identifier for distinguishing the terminal every time activation of each product. The activation unit 140 manages the authentication code that attempts to activate the product for each identifier and the result of the activation when the product is authenticated.

When the terminal accesses the authentication server through the access control unit 110, the web service unit 150 serves to provide a web page included in the authentication server 100 to the terminal. Since all information provided from the actual authentication server to the terminal is provided in the form of a web, the web service unit 150 provides the terminal with necessary information through a markup language.

The authentication result providing unit 160 serves to provide an authentication result authenticated by the genuine authentication unit 140 to the terminal. The authentication results are classified into initial authentication, re-authentication, authentication failure, and the like, and it is preferable to provide guidance of different messages, images, sounds, etc. for the initial authentication, re-authentication, and authentication failure. Of course, it is also possible to construct a simple video or pop-up screen so that consumers can intuitively recognize the authentication result.

The authentication information storage unit 170 stores a matching relationship with each other about the authentication result as well as the information on each terminal and each product. While grouping and storing association information such as terminal information, identification key, product information, and authentication code, the terminal should be prepared to respond immediately when an authentication request is received from the terminal.

The authentication information access unit 180 searches for information related to the product / logistics / sales / authentication and the identification key and the terminal stored in the authentication information storage unit 170 using specific access information as a query. That is, the identification key, product information, and terminal information associated with the corresponding authentication code can be accessed and extracted using the specific authentication code.

The authentication information management unit 190 monitors whether or not a state change occurs with respect to the stored product / logistics / sales / authentication information, identification keys, and the like, and updates the DB by reflecting the change. Always keep new information in DB. For example, when it is recognized that the information of the terminal has been changed from the information stored in the DB, it may be managed to update and store all the information about the terminal.

In addition, the authentication server basically includes functions that should be provided in a normal platform server such as operating system, memory, user management, device management, and web page management. Since these configurations correspond to obvious technical elements, they are not separately indicated or described. However, it is preferable to interpret that the authentication server according to the present invention basically includes these functions.

As shown in Figure 4, the authentication terminal 200 according to an embodiment of the present invention is a connection requesting unit 220, identification mark acquisition unit 210, key storage unit 230, key confirmation unit 240 , The authentication result display unit 250 is configured.

The connection request unit 220 when the terminal 200 obtains the access information, authentication code and product information of the authentication server obtained through the identification mark acquisition unit 210, and wants to connect to the authentication server 100, It provides an interface to set up a communication line and to interact with each other to access the authentication server 100 by using the connection information. The connection request unit 220 may perform an authentication procedure of a communication session with the connection control unit 110 of the authentication server 100. In this case, it is possible to form a secure communication channel between the terminal and the authentication server.

The identification mark acquisition unit 210 may obtain the access information of the authentication server, the authentication code of the product and the information of the product included in the QR code by reading the QR code, if the identification mark is a QR code, for example. . Among the information, the authentication code is used to authenticate the product, and the access information includes address information on the Internet for the terminal to automatically access the authentication server. In addition, the identification mark may further include product information.

The key storage unit 230 stores the identification key or the product authentication key provided by the authentication server in a specific storage space. The identification key or the product authentication key stored in the key storage unit 230 is transmitted to the authentication server 100 by the key verification unit 240 at the request of the authentication server 100. On the other hand, the identification key is issued from the authentication server with respect to the terminal, and must also store the product authentication key issued with respect to the authentication code of the product. The key storage unit 230 serves to maintain and store the identification key and the product authentication key in the terminal.

The key verification unit 240 serves to confirm the identification key or product authentication key by searching for the stored identification key or product authentication key and transferring it to the authentication server 100. If the identification key is not found, "NULL" is assigned to the identification key returned to the authentication server and transmitted. Of course, predetermined information other than "NULL" may be allocated and transmitted to the authentication server. In addition, the key verification unit 240 can also confirm by confirming the product authentication key stored and issued to the authentication server. That is, the key confirmation unit 240 confirms the identification key and the product authentication key stored in the terminal with the authentication server.

The authentication result display unit 250 receives information on the authentication result transmitted from the authentication server and outputs the information on the screen of the terminal. Preferably, the authentication result is edited and produced by the authentication server, but the terminal may interpret the authentication result provided by the authentication server in the terminal, and modify or add a different value than that provided by the authentication server.

Hereinafter, a signal flow of a process leading to automatic connection, authentication, and authentication result output between the authentication server and the terminal according to an embodiment of the present invention will be described.

5 is a signal flow diagram between an authentication terminal and an authentication server for activation according to an embodiment of the present invention.

As shown in FIG. 5, the authentication terminal 200 scans or reads an identification mark (for example, a QR code) directly or indirectly attached to a product, thereby accessing Internet access information (for example, URL, URI :) of the authentication server 100. Obtain uniform resource locator, uniform resource identifier, certification code (product unique number, etc.) and product information (expiration date, ingredients, usage, dosage instructions, manufacturer, etc.). The authentication server 100 accesses the authentication server based on the obtained information, and the authentication server 100 has a function of a web server, and stores the received authentication code and product information in response to the connection request of the terminal. Requests to confirm existence of identification key, product authentication key, or a combination thereof (request to execute key () function). Here, the key () function only needs to perform a function equivalent to that a web server can request the terminal to search for and return the existence of an identification key or a product authentication key.

The terminal executes the key () function according to the markup (markup-xml, html, etc.) command received from the authentication server. Performing in the key () function searches for the existence of an identification key (private_key), a product authentication key (product_key), or a combination thereof. Then, if the identification key / product authentication key exists, the identification key / product authentication key is assigned to the key value and transmitted to the authentication server. If not, the predetermined identification key / product authentication key (eg null) is assigned to the key value. Allocate it and send it.

First, if null is transmitted as the key value, the authentication server confirms that the terminal / product is the terminal / product that performs authentication for the first time, and stores the generated identification key / product authentication key as a terminal / product identifier in the DB. The identification key / product authentication key is transmitted to the terminal.

On the other hand, if the identified identification key / product authentication key has a specific key value, and customer information for the identification key / product authentication key exists, the terminal / product is recognized as a terminal / product of the existing customer, and re-authentication is performed. Send the relevant information (web page) to the terminal. In this case, in case of re-authentication, it outputs a different message from the initial authentication so that the user can recognize it. In this case, the authentication result includes an image, a web page, a sound, a reward, or a combination thereof in addition to the message. In addition, web pages can include user-defined marks, for example, to display activation results in a static image and a dynamic image, and to display history information and activation confirmation information on the activation history. You can also write and send separately. For example, the best certification can be distinguished from recertification by providing a dynamic image, fanfare, coupon, reward (reward), and the like.

Following the above description, the flow of performing the activation around the terminal and the individual products will be described in more detail.

6 is a flowchart illustrating a process of performing genuine certification by sequentially performing terminal and product certification according to an embodiment of the present invention.

As shown in Figure 6, the terminal scans the identification mark attached to the product directly or indirectly to obtain the access information, authentication code, product information and the like (S100). Here, the authentication code and the product information may or may not be encrypted. However, the access information, authentication code, product information, etc. are encoded in the QR code, and when the terminal scans the QR code, it can recognize the access information of the unencrypted authentication server included in the QR code.

Access to the authentication server based on the recognized access information (S110). At this time, it is desirable to transmit the authentication code and product information together. Of course, the QR code may further include advertising and promotional information of the product.

The authentication server requests the confirmation of the identification key with respect to the access terminal (S120). If the terminal does not have an identification key in response to the request (S130), the authentication server issues an identification key to the corresponding terminal (S140), and if present (S130), the terminal identifies the existing identification key in the authentication server. To transmit.

Subsequently, the authentication server requests the terminal to confirm the product authentication key for each product (per authentication code) (S200). In response, the terminal searches for whether a product authentication key exists for the request (S210). If the product authentication key does not exist in the terminal for the request, the terminal returns null to the authentication server, the authentication server first issues the product authentication key to the terminal (S220), the product authentication key already exists in the terminal When you send the stored product authentication key to the authentication server.

When authenticating for a specific authentication code for the first time, the authentication server stores and matches the product authentication key first issued, and in case of re-authentication, the authentication server matches and stores the product authentication key received from the terminal or a newly issued product authentication key ( S230). The product authentication key may issue a new product authentication key whenever the terminal provides an authentication code, or issue only one product authentication key for one authentication code. After all, the authentication server matches and stores the identification key and the product authentication key with respect to the authentication code, and records the corresponding information whether the identification key and the product authentication key are issued for the first time or previously issued to the terminal and the product.

Subsequently, the authenticity is determined by comparing the authentication code received from the terminal and the product authentication key with the authentication code recorded as sold to the producer and the product authentication key issued accordingly. It is determined whether the authentication code received from the terminal is the authentication code normally sold to the producer (S240). If the authentication code received from the terminal is not a pre-selling authentication code, it is determined as a genuine product failure because it is a counterfeit product (S253). If the authentication code received from the terminal is a previously sold authentication code, it is determined whether the terminal is the first authentication for the corresponding product (S250). Whether the terminal is the first terminal to authenticate a specific product is determined by whether the authentication code received from the terminal and the stored identification key are issued for the first time. At this time, the stored identification key, product authentication key and authentication code should match each other. On the other hand, if the identification key is not issued for the first time, it is determined as re-authentication (S251).

Subsequently, the authentication server provides the terminal with authentication results for each case of activation (first), re-authentication, and activation failure, and the terminal receives the corresponding authentication result in the form of a web page and outputs it to the screen (S260). . The authentication server provides different messages, videos, images, rewards, coupons, etc. for activation (first), re-authentication, and activation failure so that the terminal can output them on the screen through a web page (Fig. 5).

7 is a flowchart illustrating a process of authenticating by performing a terminal and a product certification at the same time according to an embodiment of the present invention.

As shown in FIG. 7, the terminal scans the identification mark attached directly or indirectly to the product to obtain access information, authentication code, product information, and the like (S310). The terminal accesses the authentication server based on the obtained access information (S320).

The authentication server requests the identification of the identification key, the product authentication key, or a combination thereof with respect to the connected terminal (S330). If the terminal does not have an identification key, a product authentication key or a combination thereof in response to the request (S340), the terminal issues an identification key, a product authentication key or a combination thereof from the authentication server (S350), If present (S340), the terminal transmits the existing identification key, product authentication key or a combination thereof to the authentication server.

When the authentication server first authenticates a specific authentication code, the authentication server matches and stores the identification key, product authentication key, or a combination thereof issued for the first time, and in case of re-authentication, the identification key, product authentication key, or the like received from the terminal. The matching or newly issued identification key, product authentication key or a combination thereof is stored and stored (S360). After all, the authentication server stores the identification key, the product authentication key, or a combination thereof for the authentication code, and records the corresponding information whether the identification key and the product authentication key were issued for the first time or previously issued to the terminal and the product. .

Subsequently, the authenticity is determined by comparing the authentication code received from the terminal and the product authentication key with the authentication code recorded as sold to the producer and the product authentication key issued accordingly. It is determined whether the authentication code received from the terminal is the authentication code normally sold to the producer (S370). If the authentication code received from the terminal is not a previously sold authentication code, it is determined to be a genuine product activation failure because of counterfeit goods (S383). If the authentication code received from the terminal is a previously sold authentication code, it is determined whether the terminal is the first authentication for the corresponding product (S380). Whether or not the terminal is the first authentication for a specific product is determined by whether the authentication code received from the terminal and the identification key stored accordingly are first issued (S382). At this time, the stored identification key, product authentication key and authentication code should match each other. On the other hand, if the identification key is not issued for the first time, it is determined as re-authentication (S381).

Subsequently, the authentication server provides the terminal with an authentication result for each case of activation (first), re-authentication, and activation failure, and the terminal receives the corresponding authentication result in the form of a web page and outputs it to the screen (S390). . The authentication server provides different messages, videos, images, rewards, coupons, etc. for activation (first), re-authentication, and activation failure so that the terminal can output them on the screen through a web page (Fig. 5).

As described above, the present invention does not need to install a separate dedicated app for authentication as described above, so that consumers can easily check the authenticity of the goods or goods purchased by them, and have excellent accessibility of authentication through a portable terminal. In addition, it can save space to be stored in the portable terminal and can increase the ease of use.

According to this advantage, the present invention does not require a separate app in terms of the terminal, it is possible to authenticate even without a separate dedicated terminal, and in the authentication server, it can be applied in various stages of production, logistics, and sales. It has the advantage of high scalability.

Herein, while the present invention has been described with reference to the preferred embodiments, those skilled in the art will variously modify the present invention without departing from the spirit and scope of the invention as set forth in the claims below. And can be changed.

100: authentication server 200: authentication terminal
110: connection control unit 120: key issuing unit
130: key confirmation request unit 140: product activation unit
150: Web service department 160: authentication result provider
170: authentication information storage unit 180: authentication information access unit
190: authentication information management unit 300: database (DB)
210: identification mark acquisition unit 220: connection request unit
230: key storage unit 240: key confirmation unit
250: certification result display unit

Claims (19)

Obtaining, at the terminal, an authentication code related to a specific object and access information of the authentication server;
Transmitting the authentication code by accessing the authentication server using the access information in the terminal;
Confirming whether an identification key or a product authentication key is issued by the terminal according to a request of the authentication server and transmitting a response to the authentication server; And
And receiving an authentication result from the authentication server and outputting the authentication result to the screen of the terminal.
The terminal,
Do not use a separate dedicated application for activation.
If the issued identification key or product authentication key already exists at the request of the authentication server, the issued identification key or product authentication key is transmitted to the authentication server.
If the issued identification key or product authentication key does not exist in the terminal, the identification key or product authentication key is received from the authentication server.
And an authentication result of performing activation by matching the identification key or product authentication key given based on the authentication code associated with the object, from the authentication server. delete The method according to claim 1,
If the product authentication key according to the authentication code stored in the authentication server is already issued and present in the terminal, the authentication code is already authenticated, and if not present, genuine authentication characterized in that it is determined to be authenticated for the first time Way. The method according to claim 3,
If you are certified for the first time and have already been certified,
In each case, expressing an authentication result including a message, an image, a web page, a sound, a reward, or a combination thereof provided by the authentication server to the terminal may be output to the screen of the terminal differently from each other. Activation method. The authentication server receiving an authentication code for a specific object from a terminal;
The authentication server issuing an identification key or a product authentication key to the terminal with respect to the received authentication code; And
And matching the product authentication key with the authentication code in the authentication server, and providing an authentication result according to the matching to the terminal.
The authentication server,
Request the identification key or product authentication key to the terminal, and if the identification key or product authentication key according to the authentication code stored in the authentication server has already been issued to the terminal, the authentication code has already been authenticated, exists If not, it will be considered as the first certification.
While the terminal does not use a separate dedicated application for activation, if the issued identification key or product authentication key already exists in the terminal, the issued identification key or product authentication key is received from the terminal,
If it is determined that the issued identification key or product authentication key does not exist in the terminal, the identification key or product authentication key is transmitted to the terminal.
And authenticating by matching the identification key or product authentication key given based on the authentication code associated with the object, and providing an authentication result to the terminal. The method according to claim 5,
And the terminal connects to the authentication server through the access information obtained from the identification mark associated with the specific object, and provides the authentication server with the authentication code obtained from the identification mark. delete The method according to claim 5,
If you have authenticated for the first time and have already authenticated,
In each case, the authentication result of the authentication server including a message, an image, a web page, a sound, a reward, or a combination thereof provided by the authentication server to the terminal is expressed differently and outputted on the screen of the terminal. Way. Obtaining, by a terminal, an authentication code related to a specific object and access information of an authentication server, accessing the authentication server using the access information, and transmitting the authentication code;
Checking, by the authentication server, whether an identification key or a product authentication key exists in the terminal;
Checking, by the terminal, whether an identification key or a product authentication key exists, transmitting a corresponding identification key or a product authentication key if it exists, and if not present, transmitting a predetermined identifier to the authentication server;
Issuing an identification key or a product authentication key to the terminal when the authentication server determines that the identification key or the product authentication key does not exist in the terminal through the identifier; And
When it is confirmed that the product authentication key according to the authentication code stored in the authentication server does not exist, providing the first authentication result to the terminal, and if it is confirmed to exist, providing the authentication result of the already authenticated to the terminal. ;;
The terminal,
Do not use a separate dedicated application for activation.
The authentication server,
And authenticating by matching the identification key or the product authentication key given based on the authentication code associated with the object, and providing an authentication result. delete In the activation terminal for activating a specific object through the authentication server,
Identification mark acquisition unit for obtaining the authentication code and the authentication information associated with the specific object associated with the specific object;
A connection request unit which accesses the authentication server through the access information and transmits the authentication code;
A key checking unit for checking whether an identification key or a product authentication key is issued according to a request of the authentication server and transmitting a response to the authentication server; And
And an authentication result display unit for receiving the authentication result from the authentication server and outputting the authentication result on the screen.
The activation terminal,
Do not use a separate dedicated application for activation.
If the issued identification key or product authentication key already exists at the request of the authentication server, the issued identification key or product authentication key is transmitted to the authentication server.
If the issued identification key or product authentication key does not exist in the activation terminal, the identification key or product authentication key is received from the authentication server.
And an authentication result of performing activation by matching the identification key or product authentication key given based on the authentication code associated with the object, from the authentication server. delete The method of claim 11,
If the product authentication key according to the authentication code stored in the authentication server has already been issued and present, the authentication code is already authenticated, if not present, the activation terminal characterized in that it is determined that the first authentication. The method according to claim 13,
If you are certified for the first time and have already been certified,
In each case, the activation terminal, characterized in that for outputting the authentication results including the message, image, web page, sound, reward, or a combination thereof provided by the authentication server to the screen differently. In the activation platform for activating a specific object at the request of the terminal,
A connection control unit for receiving a connection request from a terminal and receiving an authentication code for a specific object;
A key issuing unit for issuing an identification key or a product authentication key with respect to the received authentication code;
An authentication information storage unit matching and storing the identification key or the product authentication key with the authentication code; And
And an authentication result providing unit for providing an authentication result to the terminal according to the matching.
The activation platform,
If the identification key or product authentication key is requested to the terminal and the identification key or product authentication key according to the authentication code stored in the activation platform has already been issued to the terminal, the authentication code has already been authenticated. , If it does not exist, it is considered to be authenticated first.
While the terminal does not use a separate dedicated application for activation, if the issued identification key or product authentication key already exists in the terminal, the issued identification key or product authentication key is received from the terminal,
And a product identification key matched with the identification key or the product authentication key given on the basis of the authentication code associated with the object, and activates the platform. The method according to claim 15,
The terminal is connected to the activation platform through the access information obtained from the identification mark associated with the specific object, the activation platform, characterized in that to provide the authentication code obtained from the identification mark to the activation platform. . delete delete The method according to claim 15,
If you have authenticated for the first time and have already authenticated,
In each case, the activation platform, characterized in that to express the authentication results including the message, image, web page, sound, reward, or a combination thereof provided to the terminal to output on the screen of the terminal.

Images