CN116596550A

CN116596550A - Digital certificate anti-counterfeiting system, terminal and cloud public platform for geographic mark products

Info

Publication number: CN116596550A
Application number: CN202310261840.2A
Authority: CN
Inventors: 商松; 沙晓东
Original assignee: Shenzhen Laidiya Software Co ltd; Shenzhen Xinlong System Co ltd
Current assignee: Shenzhen Laidiya Software Co ltd; Shenzhen Xinlong System Co ltd
Priority date: 2023-03-10
Filing date: 2023-03-10
Publication date: 2023-08-15

Abstract

The application discloses a digital certificate anti-counterfeiting system, a terminal and a cloud public display platform of a geographic mark product.

Description

Digital certificate anti-counterfeiting system, terminal and cloud public platform for geographic mark products

Technical Field

The application relates to the technical field of digital certificates, in particular to a digital certificate anti-counterfeiting system, a terminal and a cloud public platform of a geographic mark product.

Background

According to the national quality inspection agency's regulations for protection of geotag products', a geotag product refers to a product produced from a particular region, having quality, reputation or other characteristics essentially dependent on natural and anthropogenic factors of the region, approved for naming by a geographic name, specifically including planted, cultured products and raw materials from the local region, all or part of which are from other regions, and produced and processed according to a specific process in the local region. Currently, geographic marking products are very attractive to consumers due to their high degree of knowledge and reputation established. Therefore, the geographic mark product becomes a marker post for driving the local economic development, brings great economic benefit to local producers, and has important promotion effects on increasing income of farmers and increasing efficiency of enterprises. However, with the continuous improvement of the value of the geographic mark products, the phenomenon that Li Gui is counterfeited to be the 'Liku' is frequently caused by the drive of high profit and low replication cost, and the traditional management method is adopted, so that the necessary anti-counterfeiting technical protection and supporting means are lacked, and the increase of the counterfeiting force does not affect the flooding of the counterfeits at all. The phenomenon of impersonating a geotag product is tremendous to the brand reputation of a national geotag product, affecting the economic stability and proper operation of the market.

The common anti-counterfeiting technology for the current geographic mark products is to perform anti-counterfeiting tracing in a two-dimension code mode, form two-dimension codes on related information of the geographic mark products, attach the two-dimension codes on the outer surfaces of the products, and enable consumers to realize anti-counterfeiting tracing through the two-dimension codes. For example, the quality of the Yangcheng lake hairy crabs is traced to carry out one-button management, each Yangcheng lake hairy crab must be worn by anti-fake crabs at delivery places of coastal producers and business companies, complete tracing information files are built, production operators are pushed to access the network for tracing through standard anti-fake crab management, and consumers can know all file information of products according to the anti-fake crab. Despite the anti-fake means of the anti-fake crab button, namely the anti-fake crab button with one code (two-dimensional code), the anti-fake crab button has still little effect, and a plurality of illegal operators not only counterfeits even sell the real anti-fake crab button on the internet, impersonate the real Yangcheng lake hairy crab, but also easily push each other to tear the skin once the quality problem occurs for the sales of the geographic mark products, so that the liability people are difficult to find and the consumer benefit is damaged.

Therefore, how to prevent illegal persons from counterfeiting the geographic mark products, realize the product tracing of the geographic mark products, quickly and effectively trace the source of products with quality problems, ensure that consumers purchase real geographic mark products, and ensure the rights and interests of consumers is a technical problem to be solved urgently.

Disclosure of Invention

The application aims to solve the technical problems that the existing geographic mark product is easy to counterfeit and the source of the product with quality problems is quickly and effectively tracked, and therefore, the application provides a digital certificate anti-counterfeiting system, a terminal and a cloud public platform of the geographic mark product.

In order to solve the technical problems, the application provides a digital certificate anti-counterfeiting system of a geographic mark product, which comprises:

the system comprises a registration terminal, a responsibility terminal, a behavior terminal and a cloud public platform, wherein the cloud public platform is respectively in communication connection with the registration terminal, the responsibility terminal and the behavior terminal;

the registration terminal is used for storing and managing an authentication digital certificate, the authentication digital certificate comprises a first certificate type, first signed content and a first time-space stamp, the first signed content comprises an authentication geographical range of a geographical mark product and an operation limiting range of a first agent, the first time-space stamp comprises time information and geographical position information when the authentication digital certificate is registered/used, after the first agent signs the authentication digital certificate, the authentication digital certificate is publicized through a cloud publicizing platform, and a liability digital certificate inviting link is generated;

the responsibility terminal is used for storing and managing responsibility digital certificates, the responsibility digital certificates comprise a second certificate type, second signed contents and a second time-space stamp, the second signed contents comprise posts and responsibilities of second agents, the second time-space stamp comprises time information and geographic position information when the responsibility digital certificates are registered/used, the second agents register the responsibility digital certificates according to the responsibility digital certificate invitation links, after the responsibility digital certificates are signed by the second agents, the second agents conduct publicity through the cloud public platform, and behavior digital certificate invitation links are generated;

The behavior terminal is used for storing and managing behavior digital certificates, the behavior digital certificates comprise a third certificate type, third signed content and third time-space stamps, the third signed content comprises operation behaviors of a third agent, the third time-space stamps comprise time information and geographic position information when the behavior digital certificates are registered/used, the third agent invites links to register the behavior digital certificates according to the behavior digital certificates, and after the third agent signs the behavior digital certificates, the third agent performs publicizing through the cloud publicizing platform.

Preferably, the authentication digital certificate further includes a first certificate signer and an authentication digital certificate applicant, the first certificate signer is an operator who operates the registration terminal, and user information of the operator includes a name, an ID, and a public key of the first certificate signer; the authenticated digital certificate applicant is an agent requesting registration of the geotag product, and the user information includes an organization name, an organization property description, responsible person information, an ID, and a public key of the authenticated digital certificate applicant.

Preferably, the responsible digital certificate further comprises a second certificate signer and a responsible digital certificate applicant, the second certificate signer manually authenticates the digital certificate applicant, and the user information of the authenticated digital certificate applicant comprises an ID and a public key of the authenticated digital certificate applicant; the responsible digital certificate applicant requests or invites a second agent joining the organization where the responsible terminal is located, and the user information of the second agent includes the ID and public key of the second agent.

Preferably, the behavioral digital certificate further comprises a third certificate signer and a signed object, the third certificate signer is a second agent which has completed the post activation at the responsible terminal, and the user information of the second agent comprises the ID and public key of the second agent; the signed object is archive information for processing the geotag product, the archive information including the registered digital certificate, the responsible digital certificate, and user information for the third agent.

Preferably, the liability digital certificate invitation link and the behavior digital certificate invitation link are in the form of hyperlinks or two-dimensional codes.

Preferably, the cloud end public platform verifies the IDs and public keys of the first certificate signer or the second certificate signer and the third certificate signer before the registration digital certificate, the liability digital certificate and the behavior digital certificate are disclosed, and performs public display after the verification is passed.

Another embodiment of the present invention provides a registration terminal for storing and managing an authentication digital certificate including a first certificate type, a first signed content including a geographical range of authentication of a geotag product and an operation limit range of a first agent, and a first time stamp including time information and geographical position information when the authentication digital certificate is registered/used, and being disclosed when the first agent signs the authentication digital certificate.

Another embodiment of the present invention provides a liability terminal for storing and managing liability digital certificates, the liability digital certificates including a second certificate type, second signed contents including a second agent's post and responsibilities, and a second time-stamp including time information and geographical location information when the liability digital certificates are registered/used, the second agent signing the liability digital certificates after registration of the liability digital certificates and performing public disclosure.

Another embodiment of the present invention provides a behavioural terminal for storing and managing behavioural digital certificates, the behavioural digital certificates including a third certificate type, third signed content including operation behaviors of a third agent, and third time-stamps including time information and geographical position information when registering/using the behavioural digital certificates, the behavioural digital certificates being signed and publicized after the behavioural digital certificates are registered by the third agent.

Another embodiment of the present invention provides a cloud end signing platform, which is used for verifying an ID and a public key signed by a first certificate of an authenticated digital certificate, an ID and a public key of a second certificate signer of a responsible digital certificate, and an ID and a public key of a third certificate signer of a behavioural digital certificate, and for signing the authenticated digital certificate, the responsible digital certificate, and the behavioural digital certificate after the verification is passed.

The invention discloses a digital certificate anti-counterfeiting system, a terminal and a cloud public platform of a geographic mark product, wherein a first agent completes application of an authentication digital certificate through a registration terminal and forms a liability digital certificate invitation link, a second agent completes application of a liability digital certificate through a liability terminal and forms a behavior digital certificate invitation link, a third agent completes application of a behavior digital certificate through a behavior terminal, each behavior certificate signs a time stamp, so that generation forming time and space of each digital certificate are fixed, behavior and liability of a holder of each digital certificate can be traced according to the time stamp, and the behavior digital certificate is printed into a two-dimensional code to be attached to an outer package of the geographic mark product so as to check recording information of the whole life cycle of the geographic mark product. If the geographic mark product is sold, a consumer can scan a two-dimensional code of the product outer package, check all information before the product reaches the consumer, accurately position a responsible person, realize the product tracing of the geographic mark product, quickly and effectively trace the source of the product with quality problems, and add a concept of a time stamp on the basis of a digital certificate by utilizing the characteristics of transparency, non-falsification and the like of a cloud public platform, realize the identity control from two aspects of a time dimension and a space dimension, reduce the occurrence of various problems such as identity impersonation, identity transfer and the like, prevent impersonation of the geographic mark product, and enable the consumer to purchase the real geographic mark product.

Drawings

FIG. 1 is a schematic diagram of a digital certificate anti-counterfeit system according to an embodiment of the present application;

FIG. 2 is a schematic diagram of another embodiment of a digital certificate anti-counterfeit system of the present application;

FIG. 3 is a schematic diagram of a registration terminal according to an embodiment of the present application

FIG. 4 is a schematic diagram of an embodiment of a responsibility terminal according to the present application;

FIG. 5 is a schematic diagram of an embodiment of a behavior terminal according to the present application;

fig. 6 is a schematic structural diagram of an embodiment of a cloud platform according to the present application.

Detailed Description

In order to further describe the technical means and effects adopted by the present application for achieving the purpose of the predetermined application, the following detailed description of the present application is given with reference to the accompanying drawings and preferred embodiments.

It should be noted that the terms "first," "second," and the like in the description and the claims of the present application and the above figures are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate in order to describe the embodiments of the application herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

In the present application, the terms "upper", "lower", "left", "right", "front", "rear", "top", "bottom", "inner", "outer", "middle", "vertical", "horizontal", "lateral", "longitudinal" and the like indicate an azimuth or a positional relationship based on that shown in the drawings. These terms are only used to better describe the present application and its embodiments and are not intended to limit the scope of the indicated devices, elements or components to the particular orientations or to configure and operate in the particular orientations.

Also, some of the terms described above may be used to indicate other meanings in addition to orientation or positional relationships, for example, the term "upper" may also be used to indicate some sort of attachment or connection in some cases. The specific meaning of these terms in the present application will be understood by those of ordinary skill in the art according to the specific circumstances.

Furthermore, the terms "mounted," "configured," "provided," "connected," "coupled," and "sleeved" are to be construed broadly. For example, it may be a fixed connection, a removable connection, or a unitary construction; may be a mechanical connection, or an electrical connection; may be directly connected, or indirectly connected through intervening media, or may be in internal communication between two devices, elements, or components. The specific meaning of the above terms in the present application can be understood by those of ordinary skill in the art according to the specific circumstances.

It should be noted that, without conflict, the embodiments of the present application and features of the embodiments may be combined with each other. While the application may be susceptible to further details of embodiments and examples of means and effects for achieving the desired purpose, the drawings are provided for the purpose of reference and illustration only and are not intended to be limiting.

Considering that in the prior art, illegal persons impersonate the geographic marking products and sell on the market, not only the brand reputation of the national geographic marking products is influenced, but also the economic stability and normal operation of the market are influenced, and consumers are difficult to buy the real geographic marking products, after buying the real geographic marking products, the quality problems of the products occur, and the problems that responsible persons are difficult to find and the benefits of consumers are damaged are solved.

Example 1

In order to prevent illegal persons from counterfeiting the geographic mark product, realize the product tracing of the geographic mark product, trace the source of the product with quality problem fast and effectively, make consumers purchase the true geographic mark product, guarantee consumer's rights and interests, the application provides a digital certificate anti-counterfeiting system of the geographic mark product, as shown in figure 1, figure 1 is a schematic diagram of the structure of an embodiment of the digital certificate anti-counterfeiting system of the application, the digital certificate anti-counterfeiting system includes:

The system comprises a registration terminal 1, a responsibility terminal 2, a behavior terminal 3 and a cloud public platform 4, wherein the cloud public platform 4 is respectively in communication connection with the registration terminal 1, the responsibility terminal 2 and the behavior terminal 3; in other embodiments of the present invention, the registration terminal 1 may be communicatively connected to the responsibility terminal 2 and the behavior terminal 3. The communication connection modes are common modes such as a wireless network, a wired network or Bluetooth, are not listed here, are not limited, and can be selected according to specific situations by one of ordinary skill in the art, and are selected from the registration terminal 1, the responsibility terminal 2, the behavior terminal 3 and the cloud public platform 4.

The registration terminal 1 is configured to store and manage an authentication digital certificate, where the authentication digital certificate includes a first certificate type, a first signed content, and a first time stamp, the first signed content includes a geographical range of authentication of a geotag product and an operation limit range of a first agent, the first time stamp includes time information and geographical location information when the authentication digital certificate is registered/used, and after the first agent signs the authentication digital certificate, the authentication digital certificate is publicized by the cloud publicizing platform 4, and a liability digital certificate invitation link is generated;

A digital certificate (digital certificate), also called public key certificate or identity certificate, is an electronic document that proves the public key owner, and typically, the digital certificate content includes a public key, identification information of the public key owner, and a digital signature of an issuing entity that verifies the digital certificate content. The authentication digital certificate adds related information of the applicant authenticating the geotag product based on the basis of the digital certificate, so that the authentication digital certificate is suitable for the field of the geotag product. The digital certificate anti-counterfeiting system adopts a non-difference showing mechanism and takes a tamper-proof behavior equity showing route; the system is a shared database, and data or information stored in the shared database has the characteristics of 'non-falsifiable', 'whole trace', 'traceable', 'open transparent', 'collective maintenance' and the like. Based on these features, digital certificate technology lays a solid "trust" foundation, creating a reliable "collaboration" mechanism.

The first actor is a person who has a request for a geo-marking product or helps a person who has a request for a geo-marking product to apply for a geo-marking product, the registration terminal 1 is a terminal device, such as a smart phone, a tablet computer, a notebook computer, etc., for the first actor to apply for a geo-marking product, and the registration terminal 1 is used for storing and managing authentication digital certificates. The registration terminal 1 is in communication connection with the cloud public platform 4, and the authentication digital certificate stored by the registration terminal 1 is disclosed through the cloud public platform 4.

The first agent submits an authentication digital certificate through the registration terminal 1, the authentication digital certificate including a first certificate type, a first signed content and a first time-stamp, the first certificate type being a digital certificate, the first signed content including a geographical range of authentication of the geotag product and an operation limit range of the first agent, the geographical range being a source place of production of the geotag product to which the first agent is to apply, the operation limit range of the first agent indicating which actions the first agent can operate; the first time-space stamp includes time information and geographical location information at the time of registering/using the authentication digital certificate, thereby forming a time and space fixation for the generation of the authentication digital certificate, and according to the time-space stamp, the behavior and responsibility of the holder of the authentication digital certificate can be traced back. The registration terminal 1 acquires the first certificate signer ID and the public key by authenticating the digital certificate, and stores the first certificate signer ID and the public key in the certificate signer right benefit list of the cloud public platform 4. The method comprises the steps of obtaining a private key of a first certificate signer, signing an authentication digital certificate based on a first time-space stamp by using the private key of the first certificate signer, and obtaining a signed authentication digital certificate, wherein the authentication digital certificate comprises a first certificate type, first signed content, a first time-space stamp and a signature of the first certificate signer, and the signature is a signature of the authentication digital certificate by the private key of the first certificate signer.

The registration terminal 1 sends the signed authentication digital certificate to the cloud public platform 4, and the cloud public platform 4 verifies and publicizes after receiving the signature digital certificate and generates a responsible digital certificate invitation link, specifically:

after receiving the authentication digital certificate sent by the registration terminal 1, the cloud public platform 4 obtains the public key of the corresponding first certificate signer according to the ID of the first certificate signer, obtains the public key stored in the local of the registration terminal 1 by the first certificate signer to carry out matching verification, and if verification passes, the authentication digital certificate passes the authentication of the first certificate signer, and the authentication digital certificate is not tampered and has reliability, the authentication digital certificate is disclosed. When the digital certificate is authenticated, it means that the certificate holder has the corresponding rights. And generating a liability digital certificate invitation link according to the registered digital certificate passing verification, and carrying out the publicization through a cloud publicizing platform 4, wherein the invitation link has various forms, such as hyperlink, two-dimensional code and the like. In the invention, the two-dimensional code is taken as an example, the authentication digital certificate holder prints the authentication digital certificate to form the two-dimensional code digital certificate, and the two-dimensional code can be shown by the cloud showing platform 4, so that the rights information can be checked at any time.

If the verification is not passed, the cloud public platform 4 returns the authentication digital certificate to the registration terminal 1 and informs the registration terminal 1 that the verification is not passed, the authentication digital certificate is suspected of being tampered, the correct authentication digital certificate is submitted again, and otherwise, the authentication digital certificate is not disclosed.

The responsibility terminal 2 is configured to store and manage a responsibility digital certificate, where the responsibility digital certificate includes a second certificate type, a second signed content, and a second time-stamp, where the second signed content includes a post and responsibility of a second agent, and the second time-stamp includes time information and geographic location information when the responsibility digital certificate is registered/used, and the second agent registers the responsibility digital certificate according to the responsibility digital certificate invitation link, and when the responsibility digital certificate is signed by the second agent, the responsibility digital certificate is public through the cloud public platform 4, and generates a behavior digital certificate invitation link;

the second agent is a person invited to join his business/organization by the authenticated digital certificate holder or a person actively joining his business/organization by the authenticated digital certificate holder, the liability terminal 2 is a terminal device such as a smart phone, a tablet computer, a notebook computer, etc. held by the second agent, and the liability terminal 2 is used for storing and managing the liability digital certificate. The responsibility terminal 2 is in communication connection with the cloud end showing platform 4, and the responsibility digital certificate stored by the responsibility terminal 2 is shown through the cloud end showing platform 4.

The second agent registers the liability digital certificate invitation link with the liability digital certificate, the second agent submits the liability digital certificate through the liability terminal 2, the liability digital certificate includes a second certificate type, a second signed content and a second time-space stamp, the second certificate type is a digital certificate, the second signed content includes the post and responsibilities of the second agent, for example, the post of the second agent is a general manager, a general manager assistant, a general staff, etc., the responsibilities are matched with the post, and when the second agent selects the proper post, the responsibilities are automatically adaptively matched. The second time stamp includes time information and geographical location information at the time of registering/using the liability digital certificate, so that the generation of the liability digital certificate forms a time and space fixation, according to which the behavior and liability of the holder of the liability digital certificate can be traced back. The responsibility terminal 2 obtains the second certificate signer ID and the public key through the responsibility digital certificate, and stores the second certificate signer ID and the public key in the certificate signer right benefit list of the cloud public platform 4. In an embodiment of the invention, the second certificate signer may be the first leader or a person authorized by the first leader of the business/organization holding the authenticated digital certificate. And obtaining a second certificate signer private key, signing a responsible digital certificate based on a second time-stamp by using the second certificate signer private key to obtain a signed responsible digital certificate, wherein the responsible digital certificate comprises a second certificate type, second signed content and a second time-stamp, a certification digital certificate and a signature of the second certificate signer, and the signature is a signature of the responsible digital certificate by the second certificate signer private key.

The responsibility terminal 2 sends the signed responsibility digital certificate to the cloud public platform 4, and the cloud public platform 4 verifies and publicizes after receiving the responsibility digital certificate and generates a behavior digital certificate invitation link, specifically:

after receiving the responsible digital certificate sent by the responsible terminal 2, the cloud public platform 4 obtains the public key of the corresponding second certificate signer according to the ID of the second certificate signer, obtains the public key stored in the local part of the responsible terminal 2 by the second certificate signer to carry out matching verification, and if the verification passes, the responsible digital certificate passes the authentication of the second certificate signer, and the responsible digital certificate is not tampered and has reliability, the responsible digital certificate is disclosed. And generating a behavior digital certificate invitation link according to the verified responsibility digital certificate, and carrying out the publicizing through the cloud publicizing platform 4, wherein the invitation link has various forms, such as hyperlink, two-dimensional code and the like. In the invention, taking a two-dimension code form as an example, a responsible digital certificate holder prints the responsible digital certificate to form the two-dimension code digital certificate, the two-dimension code can be shown through the cloud showing platform 4, the ownership information can be checked at any time, the ownership information of the authentication digital certificate can be obtained by checking the responsible digital certificate two-dimension code, and the responsibility can be traced to the source.

If the verification is not passed, the cloud public platform 4 returns the responsibility digital certificate to the responsibility terminal 2 and informs the responsibility terminal 2 that the verification is not passed, the responsibility digital certificate is suspected of being tampered, the correct responsibility digital certificate is submitted again, and otherwise, the responsibility digital certificate is not disclosed.

The behavior terminal 3 is configured to store and manage a behavior digital certificate, where the behavior digital certificate includes a third certificate type, third signed content and a third timestamp, the third signed content includes an operation behavior of a third agent, the third timestamp includes time information and geographic location information when the behavior digital certificate is registered/used, the third agent invites a link to register the behavior digital certificate according to the behavior digital certificate, and after the third agent signs the behavior digital certificate, the third agent performs a public display through the cloud public platform 4.

The third agent is a person performing various operations on the geographic mark product in a full life cycle, the behavior terminal 3 is terminal equipment such as a smart phone, a tablet computer, a notebook computer and the like held by the third agent, and the behavior terminal 3 is used for storing and managing behavior digital certificates. The behavior terminal 3 is in communication connection with the cloud end showing platform 4, and the behavior digital certificate stored by the behavior terminal 3 is shown through the cloud end showing platform 4.

The third agent registers the action digital certificate for the action digital certificate invitation link, the third agent submits the action digital certificate through the action terminal 3, the action digital certificate comprises a third certificate type, third signed content and a third time-space stamp, the third certificate type is a digital certificate, the third signed content comprises the operation actions of the third agent, for example, the third agent is a packer, and each geographic mark product packed by the third agent records packing record information of the third agent and destination record information of the packed geographic mark product. The third time stamp includes time information and geographical location information at the time of registering/using the behavioural digital certificate, so that the generation of the behavioural digital certificate forms a fixed time and space, and the behaviour and responsibility of the holder of the behavioural digital certificate can be traced back according to the time stamp. The behavioural terminal 3 obtains the third certificate signer ID and the public key through the behavioural digital certificate, and stores the third certificate signer ID and the public key in the certificate signer right benefit list of the cloud public platform 4. In an embodiment of the invention, the third certificate signer may be the lead of the third agent. And obtaining a third certificate signer private key, signing a behavior digital certificate based on a third time-stamp by using the third certificate signer private key to obtain a signed behavior digital certificate, wherein the behavior digital certificate comprises a third certificate type, third signed content and a third time-stamp, a certification digital certificate, a responsible digital certificate and a signature of a third certificate signer, and the signature is a signature of the behavior digital certificate by the third certificate signer private key.

The behavior terminal 3 sends the signed behavior digital certificate to the cloud notification platform 4, and the cloud notification platform 4 verifies and notifies after receiving the digital certificate, and specifically:

after receiving the behavioural digital certificate sent by the behavioural terminal 3, the cloud public platform 4 obtains the corresponding public key of the third certificate signer according to the ID of the third certificate signer, obtains the public key stored in the local of the behavioural terminal 3 by the third certificate signer to carry out matching verification, and if the verification passes, the behavioural digital certificate passes the authentication of the third certificate signer, the behavioural digital certificate is not tampered, and the behavioural digital certificate is disclosed. The behavior digital certificate holder prints the behavior digital certificate to form a two-dimensional code digital certificate, and can attach the two-dimensional code to the outer package of the geographic mark product, so that the property information can be checked at any time, the property information of the authentication digital certificate and the responsibility digital certificate can be obtained by checking the two-dimensional code of the behavior digital certificate and the responsibility digital certificate, the whole life cycle of the geographic mark product can be traced to the source, the record information of the whole life process of the geographic mark product from 0 to 1 can be inquired, the responsible person can be accurately positioned, and the quality problems of the geographic mark product can be rapidly solved.

If the verification is not passed, the cloud public platform 4 returns the behavior digital certificate to the behavior terminal 3 and informs the behavior terminal 3 that the verification is not passed, the behavior digital certificate is suspected of being tampered, the correct behavior digital certificate is submitted again, and otherwise, the behavior digital certificate is not disclosed.

In this embodiment, the first agent completes the application of the authentication digital certificate through the registration terminal and forms the liability digital certificate invitation link, the second agent completes the application of the liability digital certificate through the liability terminal and forms the behaviour digital certificate invitation link, the third agent completes the application of the behaviour digital certificate through the behaviour terminal, each behaviour certificate is signed with a time stamp, thereby fixing the generation forming time and space of each digital certificate, tracing the behaviour and liability of the holder of each digital certificate according to the time stamp, and printing the behaviour digital certificate into a two-dimensional code to be attached to the outer package of the geographic marker product for checking the record information of the whole life cycle of the geographic marker product. If the geographic mark product is sold, a consumer can scan a two-dimensional code of the product outer package, check all information before the product reaches the consumer, accurately position a responsible person, realize the product tracing of the geographic mark product, quickly and effectively trace the source of the product with quality problems, and add a concept of a time stamp on the basis of a digital certificate by utilizing the characteristics of transparency, non-falsification and the like of a cloud public platform, realize the identity control from two aspects of a time dimension and a space dimension, reduce the occurrence of various problems such as identity impersonation, identity transfer and the like, prevent impersonation of the geographic mark product, and enable the consumer to purchase the real geographic mark product.

Example two

Referring to fig. 2, fig. 2 is a schematic structural diagram of another embodiment of a digital certificate anti-counterfeiting system according to the present invention, where the digital certificate anti-counterfeiting system includes:

the system comprises a registration terminal 1, a responsibility terminal 2, a behavior terminal 3 and a cloud public platform 4, wherein the cloud public platform 4 is in communication connection with the registration terminal 1, the responsibility terminal 2 and the behavior terminal 3;

the registration terminal 1, the responsibility terminal 2, the behavior terminal 3, and the cloud public platform 4 in this embodiment are identical to those in the embodiment, and are not described here again.

The first agent submits an authentication digital certificate through the registration terminal 1, the authentication digital certificate including a first certificate type, a first signed content and a first time-stamp, the first certificate type being a digital certificate, the first signed content including a geographical range of authentication of the geotag product and an operation limit range of the first agent, the geographical range being a source place of production of the geotag product to which the first agent is to apply, the operation limit range of the first agent indicating which actions the first agent can operate; the first time-space stamp includes time information and geographical location information at the time of registering/using the authentication digital certificate, thereby forming a time and space fixation for the generation of the authentication digital certificate, and according to the time-space stamp, the behavior and responsibility of the holder of the authentication digital certificate can be traced back. The authentication digital certificate further includes a first certificate signer for operating the operator of the registration terminal 1 and an authentication digital certificate applicant including user information of the operator including a name, an ID, and a public key of the first certificate signer; the method comprises the steps that an authentication digital certificate is applied for an agent for registering a geographic mark product by people, user information of an applicant is included in the authentication digital certificate, the user information comprises an organization name, an organization property description, responsibility person information, an ID and a public key of the authentication digital certificate applicant, wherein the organization name is the name of an enterprise/organization where the applicant who obtains the authentication digital certificate is located, the organization property description is the operation range of the enterprise/organization, and the description of the relation between the quality characteristics of the product and natural factors and humane factors of a production place, the description of product standards, production, sales, historical source and other aspects can be added; the responsible person is a person who obtains the authentication digital certificate, and includes personal information thereof in the authentication digital certificate. The registration terminal 1 acquires the first certificate signer ID and the public key by authenticating the digital certificate, and stores the first certificate signer ID and the public key in the certificate signer right benefit list of the cloud public platform 4. The method comprises the steps of obtaining a private key of a first certificate signer, signing an authentication digital certificate based on a first time-space stamp by using the private key of the first certificate signer, and obtaining a signed authentication digital certificate, wherein the authentication digital certificate comprises a first certificate type, first signed content, a first time-space stamp and a signature of the first certificate signer, and the signature is a signature of the authentication digital certificate by the private key of the first certificate signer.

The registration terminal 1 sends the signed authentication digital certificate to the cloud end showing platform 4, the cloud end showing platform 4 verifies after receiving the signature digital certificate, the cloud end showing platform 4 shows the authentication digital certificate and sends the authentication digital certificate to the registration terminal 1 after the signature digital certificate passes the verification, and the registration terminal 1 generates a liability digital certificate invitation link based on the authentication digital certificate after receiving the authentication digital certificate sent by the cloud end showing platform 4. The registration terminal 1 can be used for displaying the liability digital certificate invitation link through the cloud display platform 4, or directly sending the liability digital certificate invitation link to the liability terminal 2 or the action terminal 3. In this embodiment, the cloud platform 4 is used as an example for the disclosure.

The second agent obtains the liability digital certificate invitation link through the liability terminal 2, the second agent registers the liability digital certificate of the liability digital certificate invitation link, the second agent submits the liability digital certificate through the liability terminal 2, the liability digital certificate comprises a second certificate type, second signed content, a second time-space stamp, a second certificate signer and a liability digital certificate applicant, the second certificate signs a person to authenticate the digital certificate applicant, and user information of the authenticated digital certificate applicant comprises an ID and a public key of the authenticated digital certificate applicant; the responsible digital certificate applicant requests or invites a second agent to join the organization in which the responsible terminal 2 is located, and the user information of the second agent includes the ID and public key of the second agent. After the second agent submits the responsible digital certificate through the responsible terminal 2, the responsible terminal 2 obtains the ID and the public key of the second certificate signer through the responsible digital certificate, and stores the ID and the public key of the second certificate signer in the certificate signer right benefit list of the cloud public platform 4. In an embodiment of the invention, the second certificate signer may be the first leader or a person authorized by the first leader of the business/organization holding the authenticated digital certificate. Obtaining a second certificate signer private key, signing a liability digital certificate based on a second time-stamp by using the second certificate signer private key to obtain a signed liability digital certificate, wherein the signed liability digital certificate comprises a second certificate type, second signed content and a second time-stamp, a certification digital certificate and a signature of the second certificate signer, and the signature is a signature of the liability digital certificate by the second certificate signer private key.

The responsibility terminal 2 sends the signed responsibility digital certificate to the cloud public platform 4, the cloud public platform 4 verifies and shows the responsibility digital certificate after receiving the signature, the cloud public platform 4 sends the responsibility digital certificate to the responsibility terminal 2 after verifying, and the responsibility terminal 2 generates a behavior digital certificate invitation link based on the responsibility digital certificate after receiving the responsibility digital certificate sent by the cloud public platform 4. The responsibility terminal 2 can be used for displaying the behavior digital certificate invitation link through the cloud display platform 4 or directly sending the behavior digital certificate invitation link to the behavior terminal 3. In the present embodiment, taking the example that the liability terminal 2 directly transmits the behavioural digital invitation link to the behavioural terminal 3.

After receiving the action digital certificate invitation link from the responsibility terminal 2 through the action terminal 3, the third agent registers the action digital certificate with the action digital certificate invitation link, the third agent submits the action digital certificate through the action terminal 3, the action digital certificate comprises a third certificate type, third signed content, a third time stamp, a third certificate signer and a signed object, the third certificate signer is a second agent which completes the position activation at the responsibility terminal 2, and the user information of the second agent comprises the ID and the public key of the second agent; the signed object is archive information for processing the geotag product, the archive information including the registered digital certificate, the responsible digital certificate, and user information for the third agent. The behavioural terminal 3 obtains the third certificate signer ID and the public key through the behavioural digital certificate, and stores the third certificate signer ID and the public key in the certificate signer right benefit list of the cloud public platform 4. In an embodiment of the invention, the third certificate signer may be the lead of the third agent. And obtaining a third certificate signer private key, signing a behavior digital certificate based on a third time-stamp by using the third certificate signer private key to obtain a signed behavior digital certificate, wherein the behavior digital certificate comprises a third certificate type, third signed content and a third time-stamp, a certification digital certificate, a responsible digital certificate and a signature of a third certificate signer, and the signature is a signature of the behavior digital certificate by the third certificate signer private key.

The behavior terminal 3 sends the signed behavior digital certificate to the cloud notification platform 4, and the cloud notification platform 4 verifies and notifies after receiving the signed behavior digital certificate. After receiving the behavioural digital certificate sent by the behavioural terminal 3, the cloud public display platform 4 obtains the corresponding public key of the third certificate signer according to the ID of the third certificate signer, obtains the public key stored in the local of the behavioural terminal 3 by the third certificate signer to carry out matching verification, and if the verification passes, the behavioural digital certificate passes the authentication of the third certificate signer, the behavioural digital certificate is not tampered, and has reliability, the behavioural digital certificate is displayed and sent to the behavioural terminal 3. The behavior digital certificate holder prints the behavior digital certificate to form a two-dimensional code digital certificate, and can attach the two-dimensional code to the outer package of the geographic mark product, so that the property information can be checked at any time, the property information of the authentication digital certificate and the responsibility digital certificate can be obtained by checking the two-dimensional code of the behavior digital certificate and the responsibility digital certificate, the whole life cycle of the geographic mark product can be traced to the source, the record information of the whole life process of the geographic mark product from 0 to 1 can be inquired, the responsible person can be accurately positioned, and the quality problems of the geographic mark product can be rapidly solved.

In another embodiment of the present invention, the registration terminal 1 generates a behavioural digital certificate invitation link after acquiring the authenticated digital certificate, and the behavioural digital certificate invitation link is disclosed by the cloud-side disclosure platform 4 or directly transmitted to the behavioural terminal 3, and the third agent receives the behavioural digital certificate invitation link by the behavioural terminal 3, registers the behavioural digital certificate based on the behavioural digital certificate invitation link, and submits the behavioural digital certificate by the behavioural terminal 3. In this embodiment, the registration terminal 1 is communicatively connected to the behavioural terminal 3, so that the third certificate signing person authenticates the digital certificate applicant, the third agent obtains a third certificate signer private key through the behavioural terminal 3, and signs the behavioural digital certificate based on the third time-stamp using the third certificate signer private key to obtain a signed behavioural digital certificate, wherein the behavioural digital certificate comprises the third certificate type, the third signed content and the third time-stamp, the authentication digital certificate and the signature of the third certificate signer. The behavior terminal 3 sends the signed behavior digital certificate to the cloud notification platform 4, and the cloud notification platform 4 verifies and notifies the signed behavior digital certificate after receiving the signed behavior digital certificate, so that the certification of the behavior digital certificate is completed. And printing the behavior digital certificate by the third agent to form a two-dimensional code, attaching the two-dimensional code on the outer package of the geographic mark product, wherein the responsible person of the geographic mark product is the authentication digital certificate applicant before the geographic mark product reaches the logistics agent.

In this embodiment, taking the application of the gan na navel orange as an example, the first agent submits an authentication digital certificate through the registration terminal 1, the first agent is a gan na navel orange applicant or a assignee of the gan na navel orange applicant, the registration terminal 1 obtains a first certificate signer ID and a public key through the authentication digital certificate, and stores the first certificate signer ID and the public key in the certificate signer rights list of the cloud public platform 4. And acquiring a private key of a first certificate signer, signing an authentication digital certificate based on the first time empty stamp by using the private key of the first certificate signer, and obtaining a signed authentication digital certificate. The registration terminal 1 sends the signed authentication digital certificate to the cloud notification platform 4, and the cloud notification platform 4 verifies and notifies after receiving the signature and generates a responsible digital certificate invitation link. At this time, it means that the applicant of the gan navel orange completes the registration of the enterprise, has the qualification of the gan navel orange, and the applicant of the gan navel orange changes identity and becomes the responsible person of the enterprise who has the geographic marking product of the gan navel orange.

The enterprise responsible person invites a second agent to join the enterprise through the liability digital certificate invitation link, the second agent is a natural person with work requirements, the second agent receives the liability digital certificate invitation link through the liability terminal 2, the second agent registers the liability digital certificate of the liability digital certificate invitation link, the second agent submits the liability digital certificate through the liability terminal 2, the liability terminal 2 acquires a private key of a second certificate signer, and signs the liability digital certificate based on a second time-space stamp by using the private key of the second certificate signer to obtain the signed liability digital certificate. The responsibility terminal 2 sends the signed responsibility digital certificate to the cloud public platform 4, the cloud public platform 4 verifies and publicizes after receiving the signature, and generates a behavior digital certificate invitation link, at this time, the second agent is added into the enterprise and becomes the responsible person of each department of the enterprise, the second agent can be multiple persons, each person adapts different responsibilities according to the added positions, and takes responsibility of different processes. The enterprise completes the internal post construction.

The third agent receives the behavioural digital certificate invitation link through the behavioural terminal 3, and the third agent is staff of each department, for example, couriers of the logistics department, packagers of the packaging department or producers of the production department. And the third agent registers the behavior digital certificate of the behavior digital certificate invitation link, submits the behavior digital certificate through the behavior terminal 3, acquires a third certificate signer private key, signs the behavior digital certificate based on a third time-stamp by using the third certificate signer private key, and acquires the signed behavior digital certificate. The behavior terminal 3 sends the signed behavior digital certificate to the cloud public platform 4, and the cloud public platform 4 verifies and public after receiving the signed behavior digital certificate, at this time, all operation behaviors of the third agent are recorded through the behavior digital certificate, which means that the whole life cycle of the Gannan navel orange is recorded in the behavior digital certificate. The third agent can be a plurality of people, each person adapts different responsibilities according to own post and bears different responsibilities. The behavior digital certificate is formed into a two-dimensional code and printed and attached to the outer package of Gannan navel orange, a consumer can check the recorded information of the whole life cycle of the purchased product through the two-dimensional code on the outer package of Gannan navel orange, if the product has a problem, a responsible person can be accurately positioned, the source of the product with quality problem can be quickly and effectively tracked, the transparency, tamper-proof and other characteristics of the cloud public platform 4 are utilized, the concept of a time stamp is added on the basis of the digital certificate, the identity control in two aspects of 'time dimension' and 'space dimension' is realized, the occurrence of various problems such as identity impersonation and identity transfer is reduced, the impersonation of the geographic marker product is prevented, and the consumer can purchase the real geographic marker product.

In this embodiment, each agent applies for and authenticates the digital certificate through the corresponding terminal, so that the rights and responsibilities of the agent are clarified, a final behavior digital certificate is formed, the behavior digital certificate is printed to form a two-dimensional code and then attached to the geographic mark product, thus the record of the full life cycle of the geographic mark product can be checked, the responsibilities can be accurately positioned, and the quality and other problems of the geographic mark product can be rapidly solved. Meanwhile, the application and authentication operation based on the digital certificate are required to be shown on the showing platform each time, so that the unchangeable attribute of the whole operation process is ensured, the safety and traceability of the sale of the geographic marking product are improved, illegal molecules are prevented from counterfeiting the geographic marking product, and consumers purchase the real geographic marking product.

Example III

Referring to fig. 3, fig. 3 is a schematic structural diagram of a registration terminal according to an embodiment of the invention.

Another embodiment of the present invention provides a registration terminal including a storage module 301, the registration terminal for storing and managing an authentication digital certificate, wherein the authentication digital certificate is stored in the storage module 301. The authentication digital certificate includes a first certificate type, first signed content including a geographical range of authentication of the geotag product and an operation limit range of the first agent, and a first time stamp including time information and geographical location information when the authentication digital certificate is registered/used, and is disclosed when the first agent signs the authentication digital certificate. Other contents of the authentication digital certificate may refer to the first embodiment and the second embodiment, and will not be described herein.

Example IV

Referring to fig. 4, fig. 4 is a schematic structural diagram of an embodiment of a responsibility terminal according to the present invention.

Another embodiment of the present invention provides a liability terminal comprising a storage module 401, the liability terminal being configured to store and manage liability digital certificates, wherein the liability digital certificates are stored in the storage module 401. The liability digital certificate includes a second certificate type, second signed content including a post and responsibilities of a second agent, and a second time-stamp including time information and geographical location information when registering/using the liability digital certificate, the second agent signing the liability digital certificate and performing public disclosure after registering the liability digital certificate. Other contents of the liability digital certificate may refer to the first embodiment and the second embodiment, and will not be described herein.

Example five

Referring to fig. 5, fig. 5 is a schematic structural diagram of an embodiment of a behavior terminal according to the present invention.

Another embodiment of the present invention provides a behavior terminal including a storage module 501, where the behavior terminal is configured to store and manage a behavior digital certificate, and the behavior digital certificate is stored in the storage module 501. The behavior digital certificate comprises a third certificate type, third signed content and a third time-stamp, wherein the third signed content comprises the operation behavior of a third agent, the third time-stamp comprises time information and geographic position information when the behavior digital certificate is registered/used, and the third agent signs the behavior digital certificate and performs publicity after registering the behavior digital certificate. Other contents of the behavioral digital certificate may refer to the first embodiment and the second embodiment, and will not be described herein.

Example six

Referring to fig. 6, fig. 6 is a schematic structural diagram of an embodiment of a cloud platform according to the present invention.

Another embodiment of the present invention provides a cloud end public indication platform, which includes a verification module 601 and a public indication module 602, wherein the cloud end public indication platform verifies an ID and a public key signed by a first certificate of an authentication digital certificate, an ID and a public key of a second certificate signer of a liability digital certificate, and an ID and a public key of a third certificate signer of a behavior digital certificate through the verification module 601, and indicates the authentication digital certificate, the liability digital certificate, and the behavior digital certificate through the public indication module 602 after the verification is passed. Other contents of the cloud public platform can refer to the first embodiment and the second embodiment, and are not described herein.

In the foregoing, only the specific embodiments of the present invention are described, and it will be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working processes of the systems, modules and units described above may refer to the corresponding processes in the foregoing method embodiments, which are not repeated herein. It should be understood that the scope of the present invention is not limited thereto, and any equivalent modifications or substitutions can be easily made by those skilled in the art within the technical scope of the present invention, and they should be included in the scope of the present invention.

The present application is not limited to the above-mentioned embodiments, but is intended to be limited to the following embodiments, and any modifications, equivalent changes and variations in the above-mentioned embodiments can be made by those skilled in the art without departing from the scope of the present application.

Claims

1. A digital certificate anti-counterfeiting system for a geotag product, the digital certificate anti-counterfeiting system comprising:

the registration terminal is used for storing and managing an authentication digital certificate, the authentication digital certificate comprises a first certificate type, first signed content and a first time stamp, the first signed content comprises an authentication geographical range of the geographic mark product and an operation limiting range of a first agent, the first time stamp comprises time information and geographical position information when the authentication digital certificate is registered/used, after the first agent signs the authentication digital certificate, the authentication digital certificate is publicized through the cloud publicizing platform, and a liability digital certificate invitation link is generated;

The responsibility terminal is used for storing and managing a responsibility digital certificate, the responsibility digital certificate comprises a second certificate type, second signed content and a second time-stamp, the second signed content comprises the post and responsibility of a second agent, the second time-stamp comprises time information and geographic position information when the responsibility digital certificate is registered/used, the second agent registers the responsibility digital certificate according to the responsibility digital certificate invitation link, and after the second agent signs the responsibility digital certificate, the second agent is publicized through the cloud publicizing platform and generates a behavior digital certificate invitation link;

the behavior terminal is used for storing and managing a behavior digital certificate, the behavior digital certificate comprises a third certificate type, third signed content and a third time-space stamp, the third signed content comprises operation behaviors of a third agent, the third time-space stamp comprises time information and geographic position information when the behavior digital certificate is registered/used, the third agent invites a link to register the behavior digital certificate according to the behavior digital certificate, and after the third agent signs the behavior digital certificate, the third agent performs a public representation through the cloud public representation platform.

2. The digital certificate anti-counterfeiting system for a geotag product according to claim 1, wherein the authenticated digital certificate further comprises a first certificate signer and an authenticated digital certificate applicant, the first certificate signer manually operating an operator of the registration terminal, and user information of the operator comprises a name, an ID, and a public key of the first certificate signer; the user information of the authenticated digital certificate applicant comprises an organization name, an organization property description, responsible person information, an ID and a public key of the authenticated digital certificate applicant.

3. The digital certificate anti-counterfeiting system for a geotag product according to claim 1, wherein the responsible digital certificate further comprises a second certificate signer and a responsible digital certificate applicant, the second certificate signer manually authenticating the digital certificate applicant, and the user information of the authenticated digital certificate applicant comprises an ID and a public key of the authenticated digital certificate applicant; the responsible digital certificate application requests or invites a second agent to join the organization where the responsible terminal is located, and the user information of the second agent comprises the ID and public key of the second agent.

4. The digital certificate anti-counterfeiting system for a geotag product according to claim 1, wherein the behavioral digital certificate further comprises a third certificate signer and a signed object, the third certificate signer being the second agent who has completed post activation at the responsible terminal, the user information of the second agent comprising an ID and a public key of the second agent; the signed object is archive information for processing the geographic marking product, wherein the archive information comprises the registered digital certificate, the responsible digital certificate and user information of the third agent.

5. The digital certificate anti-counterfeiting system for a geotag product according to claim 1, wherein the liability digital certificate invitation link and the behavior digital certificate invitation link are in the form of hyperlinks or two-dimensional codes.

6. The digital certificate anti-counterfeiting system for a geotag product according to any one of claims 2 to 4, wherein the cloud signing platform verifies the IDs and public keys of the first certificate signer or the second certificate signer, the third certificate signer, and the public key before signing the registered digital certificate, the responsible digital certificate, and the behavioural digital certificate, and performs signing after the verification is passed.

7. A registration terminal for storing and managing an authentication digital certificate, the authentication digital certificate including a first certificate type, a first signed content including a geographical range of authentication of the geotag product and an operation limit range of a first agent, and a first time stamp including time information and geographical position information when the authentication digital certificate is registered/used, the first time stamp being disclosed after the first agent signs the authentication digital certificate.

8. The responsibility terminal is used for storing and managing a responsibility digital certificate, the responsibility digital certificate comprises a second certificate type, second signed content and a second time-stamp, the second signed content comprises the post and responsibility of a second agent, the second time-stamp comprises time information and geographic position information when the responsibility digital certificate is registered/used, and the second agent signs the responsibility digital certificate and performs publicity after registering the responsibility digital certificate.

9. The behavior terminal is characterized in that the behavior terminal is used for storing and managing a behavior digital certificate, the behavior digital certificate comprises a third certificate type, third signed content and a third time-space stamp, the third signed content comprises operation behaviors of a third agent, the third time-space stamp comprises time information and geographic position information when the behavior digital certificate is registered/used, and the third agent signs the behavior digital certificate and performs publicity after registering the behavior digital certificate.

10. The cloud end showing platform is used for verifying the ID and the public key signed by the first certificate of the authentication digital certificate, the ID and the public key of the second certificate signer of the liability digital certificate and the ID and the public key of the third certificate signer of the action digital certificate, and showing the authentication digital certificate, the liability digital certificate and the action digital certificate after the authentication is passed.