UA58402A - Method for authentication of a product - Google Patents

Abstract

The proposed method for authentication of a product consists in applying an individual identification code to the product. The customer shall report the said identification code to the corresponding inspection service. The inspection service provides the authentication of the product by comparing the reported identification code with the recorded identification code of the product. Additionally, to the product, a protection code is applied.

Description

Description of the invention

The invention relates to methods of determining the authenticity of controlled objects and can be applied 2 for a wide range of goods, primarily for some types of medicines and alcoholic products.

There is a known method of determining the authenticity of a controlled object, which consists in putting labels on it containing information about the object, followed by reading this information and comparing the information obtained as a result of reading with a database of information about real objects. At the same time, information about the object is formed in digital form, including information about the type of object, manufacturer, production date, 70 unique number of the object, accompanying documents to the object, signs it with an electronic digital signature of the marker, transforms the received information with digital form into a barcode and apply it to an object or a label attached to the object, and when reading the information, they convert the barcode into a digital form, extract from it an electronic digital signature and information about the object, after which they make verification of the electronic digital signature, and if the signature is genuine, then the verification of the authenticity of the object is carried out by 12 comparing the read information about the object with the database of information about real objects, and if the information matches, then the object is identified as genuine (CI 2132569, 30707/00, 27.06.99).

The disadvantage of this method is the need for the buyer to have a device that reads a barcode, a device for comparing electronic signatures, as well as the need to maintain a database of information about real objects and insufficient security of the barcode, due to its visual openness.

There are also known technical solutions that use various marking tools (MO 97/19821 AIi, 05.06.97,

ОБ 5318326 А, 07.06.94, ЕК 2564782 АЙ, 29.11.85, ЕР 0773505 А2 14.05.97), however, their drawback is the low reliability of information associated with the possibility of counterfeiting of the marking.

The closest to the claimed invention is the method of determining the authenticity of the controlled object, which consists in applying to the product or label the code of the type of product and the individual code of the product, which is formed with the help of a random number generator (КО 2181503, С5О06КОУ/00, 50707/00, 20.04.2002). The applied codes are covered with an opaque, erasable film. The product type code and individual product code are recorded in the control service database. After purchasing the product, the buyer erases the opaque protective layer and sends the product type code and the product's individual code to the control service using one of the phone numbers or Internet addresses indicated on the product. In the database of the control service, a comparison of the received code and the code stored in the database from 30 is performed, and in the case of a match, a decision is made about the validity of the product. Disadvantages of this method are: - the need to store information about all product codes in the database; C - the need to protect against unauthorized access to the database that stores product codes, as well as the need to protect the information communication channel through which information about product codes is sent from the manufacturer to the control service; o - the use of a random number generator to obtain individual codes does not allow to exclude the coincidence of some codes, and, therefore, does not allow to exclude the possibility of an attacker producing counterfeit products, the codes of which coincide with the codes of one of the copies of the original product. "

In addition, making a decision about the authenticity of the product lies entirely with the control service and depends on the human factor, since information about authenticity is provided in the form of a message, for example, with "Television of the BOMU company is genuine" or "The type of product and the company are unknown - fake", which can lead to some distrust of this method on the part of the consumer. The disadvantages listed above lead to insufficient security of this method, as well as to its high operating cost.

The basis of the invention is the task of creating such a method of determining the authenticity of a product, in which 45 By using at least two codes connected to each other with the help of cryptographic transformations, an increase in the degree of product protection and the objectivity of assessing its authenticity is achieved. o In order to solve the problem, a method of determining the authenticity of the product is proposed, which includes applying an individual code to the product, reporting it to the information service by the buyer after purchasing the purchase, t - determining the appropriate code and identifying the product, in which, according to the invention, an additional 20 is applied to the product at least one security code formed using cryptographic transformation algorithms from the individual code of the product, and the determination of the corresponding code in the information service is carried out according to the same cryptographic transformation algorithm, and if it matches the security code affixed to the product, the latter is identified as authentic.

To exclude the possibility of forgery, the individual code and/or security code are made visually inaccessible before purchasing the product. They can be covered with an excise stamp or another opaque layer, c. or made with paint that manifests itself in certain conditions.

Several security codes may be applied to the product.

The technical result of the claimed invention consists in increasing the protection of products due to the use of at least two codes connected with each other by means of cryptographic transformations, which allows 60 to consider them as an electronic digital signature of the manufacturer and in providing the buyer with information sufficient to make an independent decision about the authenticity of the products. as well as in the possibility of detecting cases of distribution of counterfeit products.

As an individual product code, a simple numerical or textual expression is used, to which cryptographic transformations can be applied. For example, the Russian standard DST 28147-89 can be used as an algorithm for cryptographic transformations. DST 28147-89 is a block cipher with a 256-bit key and 32 conversion cycles, operating on 64-bit blocks. A forceful attack on the DST is absolutely hopeless.

Also, due to the large number of conversion cycles, this standard is highly resistant to differential and linear cryptanalysis. In addition, the DST 28147-89 algorithm is well suited for software implementation, which allows us to recommend it for use in this method of determining product authenticity.

Next, the code of the type of product can be included in the individual code, which will allow to determine the type of product during the inspection, and a time stamp. As a time stamp, for example, a sequential week number starting from some fixed date can be used. This will allow you to change the encryption key every week, and when decrypting, find it in the saved key list using a time stamp. The individual code /o is applied to the product, label or packaging, and can be protected from visual inspection until the purchase of the product.

Cryptographic transformations are performed on the individual code to obtain one or more security codes. The security code is information that is practically impossible to forge without knowledge of the encryption key and individual code. The security code is applied to the product or label, and may also be /5 protected from visual inspection until the product is purchased.

Thus, the resistance against forgery of the received combination of individual code and security code will be determined by the cryptoresistance of the selected encryption algorithm and the used key management scheme.

After purchasing the product, the buyer can view the individual code and transfer it to the information service using telecommunication means of communication. Phone numbers, email addresses or

The Internet address of the information service is applied to the product or label or brought to the attention of buyers through mass media. The Information Service stores information about all protected products and all encryption keys used. Based on the received data, the following information can be determined in the information service - the type of product, the approximate date of its manufacture and the security code of the product.

This information is communicated to the buyer using the same telecommunication means of communication. If it completely matches the one indicated on the product, the buyer can be sure of the authenticity of the product.

This method makes it possible to form individual codes by, for example, encryption of serial or "serial numbers" of products, thanks to which the coincidence of individual codes for two or more units of products is completely excluded. Coincidence of product security codes is also completely excluded. This property excludes the possibility of generating these codes by an attacker, but does not exclude the possibility of copying codes from original products to counterfeit ones. In order to identify cases of sale of such counterfeit products, each request for verification of validity is recorded in the information service. In case of repeated application of another buyer with verification of the same individual about the code as before, a conclusion is made about the sale of counterfeit products and appropriate measures can be taken. "Mr

Let's consider the effect of the method in more detail on the example of cognac production. First, the individual code is determined. For this, the product type code is taken, for example 01, and a time stamp is added to it, for example 17, which means the 17th week of production from the beginning of the method implementation. Next, the serial number of the product is taken, for example 123456, encrypted using a key that is known only to the manufacturer and the information center. We receive, for example, number 98АЗ5В. The product type code, time stamp and encrypted serial number together make up an individual code, in our case it is 01 17 98АЗ5В, which is applied to the lid of the product and, if necessary, closed from view with a protective layer or an excise stamp. The security code is obtained using cryptographic transformations, where the product number is either 7) with the encryption key or the ciphertext. . The received security code, for example 465А85674, is considered as a digital signature of the manufacturer, and is applied to the product label.

After purchasing the product, the buyer opens the product number - 01 17 98АЗ5В, and reports it to the computer center using a ЗМ5 message. In the computing center, the same cryptographic transformations are applied to the received individual code c as during the production of the product, and the corresponding security code is obtained. Next, by code 01, the type of product is determined using the database and the buyer is informed by the message of the type: "Cognac Shustov, 0.5 l., manufactured - July 2003, security code - 465А85674". If their information completely matches the real one, the buyer recognizes the authenticity of the product.

All buyers' requests for verification of authenticity are recorded in the information service. When the service receives information about the individual code 011798A358 again, the buyer is informed, for example: "Cognac Shustov,

Ge 0.Bl., manufactured - July 2003, protection code - 465А85674, repeated request". This allows the buyer to detect a fake, in case he reports this individual code for the first time.

The widespread implementation of this method will minimize the production and distribution of counterfeit products.

Claims (4)

» The formula of the invention in 1. The method of determining the authenticity of the product, which includes applying an individual code to the product, reporting it to the information service by the buyer after purchasing the purchase, determining the appropriate code and identifying the product, which is distinguished by the fact that at least one security code is additionally applied to the product, which is formed with the help of algorithms of cryptographic transformations from the individual code of the product, and the determination of the corresponding code in the information service is carried out according to the same algorithm of cryptographic b5 transformations, and if it coincides with the security code placed on the product, the latter is identified as authentic. 2. The method according to claim 1, which differs in that a simple numerical or textual expression, or an expression to which cryptographic transformations were applied, is used as an individual product code. Q. The method according to claim 1 or claim 2, which differs in that the individual code and/or the security code are made visually inaccessible before purchasing the product. 4. The method according to any of claims 1-3, which differs in that several security codes are applied to the product. Official bulletin "Industrial Property". Book 1 "Inventions, useful models, topographies of integrated microcircuits", 2003, M 7, 15.07.2003. State Department of Intellectual Property of the Ministry of Education and Science of Ukraine. « with Zo o « (ee) IS o) - with . and? 1 (ee) sh» Ge Sho Ko) bo b5