CN1655161A

CN1655161A - Business delivery certification system

Info

Publication number: CN1655161A
Application number: CN 200510011391
Authority: CN
Inventors: 廖鸿宇
Original assignee: FUJIAN RONGJI SOFTWARE DEVELOPMENT Co Ltd
Current assignee: FUJIAN RONGJI SOFTWARE DEVELOPMENT Co Ltd
Priority date: 2005-03-07
Filing date: 2005-03-07
Publication date: 2005-08-17

Abstract

This invention relates to commercial transaction certification system, composed of certified identification on a certified subject, an identification discriminator, a mobile communication terminal, a wireless network, a transaction certification management data base, a commercial operation businessman data base, a bank certification manage data base, a central genuine identifying data base and a producer genuine identifying data base, among which, the businessman data base sends the transaction information to the transaction data base, the false or genuine of goods are identified by the central genuine identifying information and fingerprint data are transferred to the transaction data base and the bank data base via the identifier, the fingerprint identifier, the mobile communication terminal and the wireless network to compare the fingerprint then to transfer accounts and the information is transferred to the mobile communication center and the businessman data base.

Description

A kind of business delivery certification system

Technical field

The present invention relates to a kind of comprehensive luminescent crystal smart-tag authentication technology, finger print identifying recognition technology, mobile network's mechanics of communication, data encryption transmission technology and ecommerce operation management technology in a kind of business delivery certification system of one.

Background technology

In vogue day by day along with various business forms such as the recent network business, Mobile businesses, commodity purchaser and dealer have been face-to-face no longer each other, therefore complete a business transaction with debt at commodity and complete a business transaction aspect, occurred to trust and to complete a business transaction nonsynchronous problem mutually, specifically have: malice purchase order information, goods be to the risk of not paying the bill, malice debt, commercial quality, the true and false are uncertain or the like, in addition exchange goods in addition, the problem of other extraneous expenses such as the return of goods.

Particularly to complete a business transaction the deficiency that the aspect exists more obvious for debt.Pay by mails at present and mainly contain dual mode: special use pay the fees card and credit card or Web bank's mode.The special use card mode of paying the fees is that specially card is special-purpose, and usable range is little, and is extremely inconvenient to the user, lacks the value of promoting; Credit card or Web bank complete a business transaction, number of the account and password will expose on the internet fully, be difficult to obtain customer's approval, though used the encrypted transmission technology in practice, as SSL (Secure Socket Layer (SSL)), but the transmission data usually will therefore only by data encryption, can't be said and take highly effective strategy to deal with the risk of stealing with data falsification through a large amount of unspecified nodes on the internet; Owing to the prior confirmation credit card, find out and forge and check that credit card signature is impossible, therefore, determine that for the dealer whether credit card user in the ecommerce is that real user is unusual difficulty.But also do not have effective method to stop to have the people illegally to obtain other people credit card number and pretend to be card user illegally to buy product.

Summary of the invention

The objective of the invention is to utilize at random the luminescent crystal of spraying have different reflectance spectrum principles produce have uniqueness, not reproducible product mark label, depend on the product, utilize radio network technique, mobile communication equipment with authentication information collection and finger print information acquisition function, carry out the authentication of product and send transfer request information, and authentication result is fed back to the consumer and notifies networking a kind of business delivery certification system that bank transfers accounts

The concrete scheme of Verification System of the present invention is as follows:

This system is by the authentication sign that depends on the certified article, the authentication identity recognizer, Fingerprint Identification Unit, communication terminal, wireless network, the delivery certification management database, commercial affairs operator management database, bank's authentication management database, the Jianzhen of central authorities management database, manufacturer Jianzhen management database is formed, commercial affairs operator management database sends to the delivery certification management database with Transaction Information, by central Jianzhen's management database, the true and false of manufacturer's authentication management database authentication commodity, when completing a business transaction commodity, the client will authenticate the information and the finger print data of sign, by the authentication identity recognizer, Fingerprint Identification Unit, communication terminal, wireless network, reach the delivery certification management database, transfer accounts behind bank's authentication management database comparison fingerprint, the information of will completing a business transaction is again passed to communication terminal and commercial operator management database by the delivery certification management database by wireless network again.

Authentication is designated luminescent crystal product certification label, and by constituting attached to metal on the certified article or nonmetal crystal particle, concrete structure can be referring to application number: 200520022803.3.

The authentication sign also can be the authenticating tag of bar code, magnetic recording, digital image texture, IC-card, rfid card, dna technique or storage digital code information, connects the communication terminal of luminescent crystal collection of illustrative plates scanner simultaneously, also loads the recognition unit of respective labels.

The authentication identity recognizer is a luminescent crystal collection of illustrative plates scanner, is made of digital signal processing chip (DSP), light emitting source, imageing sensor, light shield, data-interface 1, data-interface 2.Concrete structure can be referring to application number: 200520022802.9.

Fingerprint Identification Unit is a fingerprint scanner, is the product that can buy on market, is used to scan client's fingerprint, obtains finger print data.

Communication terminal is meant the administration module of installing in terminal, comprise scanner management unit, encryption/decryption element, data transmit-receive unit, finger scan administrative unit, entrust registration unit, data storage cell, public key encryption unit.Scanner management cell processing is carried out serial communication with the luminescent crystal collection of illustrative plates scanner that is connected, and sends the scanning label instructions and receives the bitonal bitmap data; Encryption/decryption element is responsible for the wireless transmission data encryption and decryption; Data transmit-receive unit by using wireless communication networks sends the verify data of encrypting to the delivery certification management database, and when entrusting registration, send the registration data of encrypting to bank's authentication management database, carry out communication based on Transmission Control Protocol (stream socket); The finger scan administrative unit is carried out serial communication with the luminescent crystal collection of illustrative plates scanner that is connected, and sends the scanning fingerprint instruction and receives finger print data to the fingerprint scanner that connects by its data-interface 2; Entrust registration unit to be responsible for importing when the client handles bank's trust registration the IP of bank, port numbers, account No. etc.; Data storage cell is stored in PKI, Routing Number, customer bank account number, the customer name of receiving in the storage space of communication terminal; Public key encryption finger print data and total charge that the public key encryption unit gives with bank generate the public key data bag.

Communication terminal is mobile phone, PDA or computing machine.

Wireless network is the platform that is connected that communication terminal and delivery certification management database carry out data communication, can be the GSM/GPRS/CDMA/WIWI network transmission protocol or the INTERNET (internet) of wireless communication networks.

The delivery certification management database includes the data distribution center cell, short message sends platform, encryption/decryption element, scanner management unit, spectrum analysis unit, delivery certification Data Management Unit, data statistics unit and delivery certification database.The data distribution center cell is responsible for opening the connection request that a port is monitored commercial operator management database, receives transaction data and the label data encrypted; Set up and to be connected, the label data of transmission encryption and label ID number with the Socket of central Jianzhen's management database; Open a port and monitor the connection request of communication terminal, receive the delivery certification data of encrypting; Foundation is connected with the Socket of bank's authentication management database, data such as the public key data bag that transmission is encrypted, customer bank account number, operator's account No.; Open a port and monitor the connection request of bank's authentication management database and central Jianzhen's management database, receive bank or Jianzhen's verify data of encrypting; Foundation is connected with the Socket of commercial operator management database, sends bank or Jianzhen's verify data of encrypting; Open the communication serial ports, the information that need are sent with the encapsulation of short message PDU form after, send platform to the short message that connects and send the AT instruction.Short message sends platform and receives the AT instruction, and the authentication result information that encapsulates is sent to communication terminal.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal.The scanner management unit of scanner management unit and communication terminal is identical.The spectrum analysis unit is based on image recognition technology, and by interval division and pattern match, the mode data that bitonal bitmap is converted to the respective symbols string outputs to next unit.The delivery certification Data Management Unit is responsible for use, the storage to all operations data, each verify data that receives is decomposed, and to the retrieval of writing down in trading record sheet, tag record table, manufacturer's table, operator's table, bank information table and the log recording table, insertion, renewal, deletion etc.The statistics of delivery certification database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.The delivery certification database is responsible for the storage of data, includes trading record sheet, tag record table, manufacturer's table, operator's table, bank information table, log recording table, statistics table and corresponding dictionary table etc.

Commercial affairs operator management database includes data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, operator's Data Management Unit, data statistics unit and commercial operator database.The connection request that a port is monitored the delivery certification management database is responsible for opening in the data transmit-receive unit, receives the authentication return message of encrypting; Set up and be connected transaction data and label data that transmission is encrypted with the Socket of delivery certification management database.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal.The scanner management unit of scanner management unit and communication terminal is identical.The spectrum analysis unit of spectrum analysis unit and delivery certification management database is identical.Operator's Data Management Unit is responsible for use, the storage to all operations data, each verify data that receives decomposed, and to the retrieval of writing down in trading record sheet, tag record table and the log recording table, insertion, renewal, deletion etc.The statistics of commercial operator database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Commercial affairs operator database is responsible for the storage of data, includes trading record sheet, tag record table, log recording table, statistics table and corresponding dictionary table etc.

Bank's authentication management database includes data transmit-receive unit, encryption/decryption element, asymmetric cryptography administrative unit, payment for goods administrative unit, finger print data administrative unit, data statistics unit and fingerprint database.The connection request that a port is monitored communication terminal is responsible for opening in the data transmit-receive unit, receives the concurrent PKI of bringing back to life of finger print data, Routing Number, account No., the customer name encrypted; Open a port and monitor the connection request of delivery certification management database, receiving encryption key; Set up and be connected the authentication result information that transmission is encrypted with the Socket of delivery certification management database.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal.The asymmetric cryptography administrative unit is responsible for generating a pair of asymmetric cryptography, and promptly PKI and private key are responsible for the public key data bag of receiving is decrypted.The payment for goods administrative unit is responsible for getting in touch with banking system, proposes transfer request and reception result information.The finger print data administrative unit is responsible for use, the storage to all operations data, the authentication request data that receive decomposed, and to the retrieval of writing down in fingerprint recording table and the log recording table, insertion, renewal, deletion etc.The statistics of finger print data database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Fingerprint database is responsible for the storage of data, includes fingerprint recording table, log recording table, statistics table and corresponding dictionary table etc.

The Jianzhen of central authorities management database includes data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, central Jianzhen's Data Management Unit, data statistics unit and central Jianzhen's database.The connection request that a port is monitored the delivery certification management database is responsible for opening in the data transmit-receive unit, receives label ID number and mode data encrypting; Set up and be connected label ID number and mode data that transmission is encrypted with the Socket of manufacturer Jianzhen management database; Set up and be connected Jianzhen's authentication result information that transmission is encrypted with the Socket of delivery certification management database; Open a port and monitor the connection request of manufacturer Jianzhen management database, receive Jianzhen's authentication result information of encrypting.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal.The scanner management unit of scanner management unit and communication terminal is identical.The spectrum analysis unit of spectrum analysis unit and delivery certification management database is identical.The Jianzhen of central authorities Data Management Unit is responsible for use, the storage to all operations data, each Jianzhen's verify data that receives and Jianzhen's authentication result information are decomposed, and to the retrieval of writing down in tag record table, manufacturer's record sheet and the log recording table, insertion, renewal, deletion etc.The statistics of central Jianzhen's database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.The Jianzhen of central authorities database is responsible for the storage of data, includes tag record table, manufacturer's record sheet, log recording table, statistics table and corresponding dictionary table etc.

Manufacturer Jianzhen management database includes data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, manufacturer Jianzhen Data Management Unit, data statistics unit and manufacturer Jianzhen database.The connection request that a port is monitored central Jianzhen's management database is responsible for opening in the data transmit-receive unit, receives label ID number and mode data encrypting; Set up and be connected Jianzhen's authentication result information that transmission is encrypted with the Socket of central Jianzhen's management database.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal.The scanner management unit of scanner management unit and communication terminal is identical.The spectrum analysis unit of spectrum analysis unit and delivery certification management database is identical.Manufacturer Jianzhen Data Management Unit is responsible for use, the storage to all operations data, the authentication request information that receives decomposed, and to the retrieval of writing down in tag record table, product information table and the log recording table, insertion, renewal, deletion etc.The statistics of manufacturer Jianzhen database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Manufacturer Jianzhen database is responsible for the storage of data, includes tag record table, product information table, log recording table, statistics table and corresponding dictionary table etc.

The engineering process of luminescent crystal collection of illustrative plates scanner is: after digital signal processing chip (DSP) is received instruction from data-interface 1, the decision instruction content, if the scanning label instructions is then exported a control signal, ruddiness is sent in the driven for emitting lights source, be radiated at luminescent crystal product certification label surface, crystal grain produces the unordered reflection of all directions in the luminescent crystal layer.Digital signal processing chip (DSP) is exported a signal controlling imageing sensor simultaneously and is started working, and obtains the reflection light and dark reflective collection of illustrative plates that forms, and obtains 8 gray level images, sends digital signal processing chip (DSP) to.Digital signal processing chip (DSP) then judges whether existence checking sign earlier to image binaryzation, exports bitonal bitmap if exist then by data-interface 1, otherwise the output scanning failure information; If what receive is the scanning fingerprint instruction, then digital signal processing chip (DSP) sends the scanning fingerprint instruction by data-interface 2 to the fingerprint scanner that connects, wait for that then fingerprint scanner beams back finger print data, receive data, by data-interface 1 output finger print data by data-interface 2.

The workflow of spectrum analysis unit is: bitonal bitmap is carried out interval division, be divided into individual interval, 64 (8 * 8), every interval corresponding pixel points is 80 * 60, then pattern match is carried out in each interval reference mode storehouse of putting with Installed System Memory, the reference mode storehouse be sampling the interval graph picture that might occur, correspondence is divided into 64 class storages, and each is classified with an identifier.By pattern match, bitonal bitmap is converted to the identification string data of regular length, be referred to as mode data, output to next unit.

The operation workflow of this business delivery certification system is:

1) after the luminescent crystal label was produced, authentication service merchant used luminescent crystal collection of illustrative plates scanner scans label, deposits data in central Jianzhen's management database.Concrete workflow is as follows: open communication serial ports 1, the initialization serial ports, after clicking the beginning scan button, send the scanning label instructions to the luminescent crystal collection of illustrative plates scanner that connects, whether have data, up to the data of finding and sense data, judge to read " scan error " character string whether if surveying the serial ports buffer zone repeatedly, if get back to and wait for the beginning scanning mode; If not " scan error ", then call the collection of illustrative plates parsing module, parsing is obtained mode data in the tag record table, retrieve, if retrieval has record, this label that then cancels is got back to and is waited for the beginning scanning mode; Do not retrieve record, in the tag record table, insert a strip label record, then wait for beginning to scan next label.Each operation such as all gets back at label position to be scanned, if conclusion button is then clicked in no longer scanning, finish closed communication serial ports 1 back.When authentication service merchant gives each product producer with luminescent crystal product certification label distribution, upgrade manufacturer's field contents of respective labels record.

2) product producer is affixed on the label that obtains on the product of having produced, uses luminescent crystal collection of illustrative plates scanner scans label, deposits data in manufacturer Jianzhen management database, and sets up corresponding relation with the corresponding product record.Concrete workflow is as follows: open the communication serial ports, the initialization serial ports, if scan new a collection of product, then import product information earlier, comprise name of product, date of manufacture, valid until, batch number, checker etc., preserve the back and in the product record sheet, insert a record, exist in the variable in addition ID number, before upgrading, it is this ID number that the label of later scanning is all given tacit consent to.Click begins scanning, sends the scanning label instructions to the luminescent crystal collection of illustrative plates scanner that connects, and whether survey the serial ports buffer zone then repeatedly has data, up to finding and sense data, judge whether " scan error " character string of the data read, if get back to and wait for the beginning scanning mode; If not " scan error ", then call the collection of illustrative plates parsing module, parsing is obtained mode data in the tag record table, retrieve, if retrieval has record, this label that then cancels is got back to and is waited for the beginning scanning mode; Do not retrieve data, in the tag record table, insert a strip label record, comprise product Record ID number in the field, then wait for beginning to scan next label.Each operation such as all gets back at tag state to be scanned, if conclusion button is then clicked in no longer scanning, finishes behind the closed communication serial ports.

3) use this business delivery certification system, the client needs to entrust earlier registration in bank.Concrete workflow is as follows: the client can or directly propose to the bank agency by the website of bank on the internet, telephone bank to entrust application, after bank accepts applications, obtains bank IP address and port numbers.The client is after importing account No., the IP of bank, port numbers on the trust registration interface of mobile phone, open the communication serial ports, the initialization serial ports, the instruction of transmission scanning fingerprint, whether have data, up to finding and sense data if surveying the serial ports buffer zone then repeatedly, close serial ports, judge whether the information of makeing mistakes then, if then finish in screen output " scanning failure " back; If normal finger print data, encrypt, create Socket, adopt Transmission Control Protocol, be connected with bank authentication management database, send data encrypted, wait for the information that bank returns that receives, the reception back disconnects and connecting, the data that deciphering is received, judgment data is if error message is exported on screen; Correct information should be to include customer name, Routing Number, account No., private key, data is deposited in the mobile phone FLASH, at screen display: " registering successfully ".

4) processing entrusts the concrete workflow of registration as follows in bank's authentication management database: create Socket, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port.Open monitoring, have connection request then to accept, receive enciphered data, use the encryption and decryption module decrypts, obtain finger print data, in the fingerprint recording table, retrieve, if retrieve a record, then take out record date return data: " you finish registration in XXXX XX month XX day, can not repeat registration."; If do not retrieve fingerprint recording, then produce a pair of password by the asymmetric cryptography administrative unit, increase a fingerprint recording, comprise customer bank account number, finger print data, private key, record date etc.Then customer name, Routing Number, account No., PKI are together encrypted the back and sent, get back to the listening port state at last.

5) after the customer selecting business delivery certification mode, commercial affairs operator input transaction record, gather label data, send to the delivery certification management database after the encryption, concrete workflow is as follows: the client is when shopping, confirm that Payment Methods are the business delivery certification mode, then commercial operator can import transaction record, open the communication serial ports, the initialization serial ports, click begins scanning, send the scanning label instructions to the luminescent crystal collection of illustrative plates scanner that connects serial ports, whether then surveying the serial ports buffer zone repeatedly has data, finishes up to luminescent crystal collection of illustrative plates scanner scans, and data are sent to the serial ports buffer zone, sense data, judge whether " scan error " character string of the data read, if get back to the wait scanning mode; If not " scan error ", then call the collection of illustrative plates parsing module, parsing is obtained mode data in the tag record table, retrieve, if retrieval has record, get back to the wait scanning mode; Do not retrieve record, then in the tag record table, insert one, get back to the wait scanning mode.After having scanned all commodity, withdraw from scanning mode, the closed communication serial ports.Follow the Checking label record sheet, obtain and corresponding all tag records of this transaction record, Transaction Information and label data are merged into a string data by certain format, enciphered data is created Socket1, adopts the Transmission Control Protocol mode, connect with the delivery certification management database, send data then, disconnect connection, close Socket1.

6) after the delivery certification management database receives transaction data, be stored in the delivery certification database, and label data is sent to central Jianzhen's management database authentication.Concrete workflow is as follows: create Socket, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port.Open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, the data that obtain are decomposed, obtain operator's transaction id number, Transaction Information and label data, deposit operator's transaction id number and Transaction Information in trading record sheet, label data deposits the tag record table in, corresponding trading record sheet corresponding ID number.With transaction record ID Checking label record sheet, obtain all corresponding label ID numbers and label data, create Socket2 then, adopt the Transmission Control Protocol mode, connect with central Jianzhen's management database, take out a strip label record, synthesize a string data with label data with set form label ID number, send after encrypting these data, then take out next strip label record and send, all be sent completely, disconnect and connecting until the tag record of correspondence, close Socket2, finish thread.

7) central Jianzhen's management database receives Jianzhen's authentication information, is transmitted to manufacturer Jianzhen management database after the preliminary authentication.Concrete workflow is as follows: create Socket, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port.Open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, the data that obtain are decomposed, obtain label ID number and label data (bitonal bitmap), carry out obtaining mode data behind the spectrum analysis, in the tag record table, retrieve with mode data, if retrieve a record, then label ID number of receiving upgraded the respective field of this record, manufacturer's code that retrieval obtains retrieval in manufacturer's table obtains manufacturer IP and port numbers, encoded tag ID number and mode data, create Socket2, adopt the Transmission Control Protocol mode, connect with manufacturer Jianzhen management database, send enciphered data, disconnect connection, close Socket2, finish thread; If do not retrieve at the tag record table, then define authentication information: " authentication is unsuccessful, and this product is palmed off.", with the ID number synthetic return data of (label ID number), authentication information and authentication classification, encrypting return data, establishment Socket3; adopt Transmission Control Protocol, connect with the delivery certification management database sends enciphered data, disconnects connecting; close Socket3, and the interpolation log record finishes thread.

8) manufacturer Jianzhen management database carries out authentication challenge, and return authentication information.Concrete workflow is as follows: create Socket, adopt Transmission Control Protocol, bind this machine IP and port.Open monitoring, have connection request then to accept, receive enciphered data, create new thread and handle, continue then to monitor.In the thread of opening, by the encryption/decryption element deciphering, decomposition data obtains label ID number and mode data, and with mode data Checking label record sheet, if do not retrieve record, then define authentication information: " product certification is unsuccessful, and these commodity are palmed off.", add log record; If retrieve a record, judge authentication field again, if unverified mistake, production code member retrieval product record sheet by the tag record table, obtain: field contents such as name of product, date of manufacture, the term of validity, the definition authentication information: " product certification passes through; this name of product is XXXXXXX; the date of manufacture: XXXX XX month XX day; valid until: XXXX XX month XX day, product batch number is: XXXXXXX, checker: XXX ", change tag record table authentication field and authenticated time field again, add log record; If authentication field then obtains tag record table authenticated time field contents for having authenticated, the definition authentication information: " this product when the XXXX XX month XX day XX XX divide and finish smart-tag authentication, this time authentication is invalid.", add and say the will record.Each process all with label ID number, authentication information and the synthetic return data of authentication classification, is encrypted return data after adding log record, create Socket2, adopt Transmission Control Protocol, connect, send data with central Jianzhen's management database, disconnect connection, close Socket2, finish thread.

9) central Jianzhen's management database receives the information that manufacturer Jianzhen management database returns, and is transmitted to the delivery certification management database after the interpolation daily record.Concrete workflow is as follows: create Socket4, adopt Transmission Control Protocol, bind this machine IP and port 2, open monitoring, have connection request then to accept, receive enciphered data, create new thread and handle, continue then to monitor.In the thread of opening, decipher by encryption/decryption element, decomposition data obtains label ID number, authentication information and authentication classification, and authentication information is generated a log record, creates Socket5, adopt Transmission Control Protocol, connect with the delivery certification management database, transmit former enciphered data, disconnect connection, close Socket5, finish thread.

10) when commodity are sent to, the client uses the mobile phone that has connected luminescent crystal collection of illustrative plates scanner and fingerprint scanner to carry out delivery certification.Concrete workflow is as follows: the menu in client's operating handset begins delivery certification, open the communication serial ports earlier, the initialization serial ports, whether send the scanning fingerprint instruction to the luminescent crystal collection of illustrative plates scanner that connects, surveying the serial ports buffer zone repeatedly has data, up to finding and sense data, judge the whether error message of the data read, if screen output " scanning failure " finishes this operation; If not error message, then on mobile phone, import total charge, then send the scanning label instructions to the luminescent crystal collection of illustrative plates scanner that connects, survey the serial ports buffer zone repeatedly whether data are arranged, up to the data of finding and sense data, judge to read " scan error " character string whether, if, screen output " scanning is unsuccessful " such as gets back at next label position to be scanned; If " scanerror ", next label position to be scanned such as directly get back to.All Commercial goods labelses are all behind the end of scan, click to begin to send button.System takes out customer name, Routing Number, account No. and PKI from mobile phone Flash, with PKI finger print data and total charge are encrypted as a public key data bag, by encryption/decryption element public key data bag, luminescent crystal product certification label bitonal bitmap data, total charge, customer name, Routing Number and customer bank account number etc. are encrypted together again.Create Socket2 then, adopt the Transmission Control Protocol mode, connect, send enciphered data, disconnect connection, close Socket2, finish this operation with the delivery certification management database.

11) after the delivery certification management database receives verify data,, compare errorless back and send out data to bank's authentication management database with respective transaction record comparison in the delivery certification database.Concrete workflow is as follows: open communication serial ports 2, the initialization serial ports is created Socket2, adopts the Transmission Control Protocol mode, binds this machine IP and fixed port 2.Open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, obtain cell-phone number, Routing Number, account No., public key data bag and label data etc. after the decomposition.Take out a label data then, call the collection of illustrative plates parsing module, parsing is obtained mode data in the tag record table, retrieve, if retrieval then defines return message less than record: " authentication is unsuccessful, the label data retrieval less than.", the rollback database manipulation with note PDU form encapsulation return message, sends an AT and sends instructions to communication serial ports 2, finishes thread; Retrieve record, then take out transaction record ID number, be temporarily stored in the variable, check again whether Jianzhen's field is " 1 ", if not, then define return message: " authentication is unsuccessful, and commodity Jianzhen is unsuccessful.", the rollback database manipulation with note PDU form encapsulation return message, sends an AT and sends instructions to communication serial ports 2, finishes thread; Not that " 1 " then revises tag record table attribute field for " 1 ", and then take out next strip label data, carry out work such as spectrum analysis and comparison tag record, when taking out transaction record ID,, the same then continue to check Jianzhen's field with the variable comparison; The different return message that then defines: " authentication is unsuccessful, the label data retrieval less than.", the rollback database manipulation with note PDU form encapsulation return message, sends an AT and sends instructions to communication serial ports 2, finishes thread.Compare label data repeatedly, up to all label datas all compare errorless after, submit database manipulation to.Retrieval this transaction record ID number and attribute field are not " 1 " in the tag record table, if retrieve one or more records, then define return message: " authentication is unsuccessful, also has commodity not scan.", the attribute field of revising all tag records of this transaction record ID number is " 0 ", with note PDU form encapsulation return message, sends an AT and sends instructions to communication serial ports 2 then, finishes thread; If do not retrieve record, again transaction record ID number is retrieved in trading record sheet, the total charge in the comparison record whether with the client send consistent, if inconsistent, the definition return message: " authentication is unsuccessful, and the transaction total charge is inconsistent.", the attribute field of revising all tag records of this transaction record ID number is " 0 ", with note PDU form encapsulation return message, sends an AT and sends instructions to communication serial ports 2 then, finishes thread; If it is consistent, just cell-phone number is deposited in this trading record sheet, Routing Number is retrieved in the banker's record table, obtain IP and port numbers, definition transmission information, include: operator's account No. of storing in transaction record ID number, customer bank account number, total charge, public key data bag and the transaction record etc., encrypt transmission information, create Socket3, adopt the Transmission Control Protocol mode, by the IP of bank and the port numbers that retrieve, connect with bank authentication management database, send enciphered data, disconnect and connecting, close Socket3, finish thread.

12) after bank's authentication management database receives the data that the delivery certification management database sends,, compare and errorless send transfer request, then information is returned the delivery certification management database to banking system with record comparison in the fingerprint database.Concrete workflow is as follows: create Socket2, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port 2, open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, decomposition data obtains transaction record ID number, customer bank account number, total charge, public key data bag and operator's account No. etc., with customer bank account number retrieval fingerprint table, if do not retrieve record, the definition authentication information: " this account No. is unregistered, can not conclude the business."; Retrieve record, then take out private key and finger print data, with private key deciphering public key data bag, the finger print data that obtains is compared, if inequality, the definition authentication information: " finger print data is incorrect, and transaction is unsuccessful."; If the fingerprint unanimity is then sent transfer request by the total charge in the public key data bag to the banking system that connects, outstanding message returns, and judges the information of returning, and transferring accounts successfully then defines authentication information: " transfer accounts successfully."; Account transfer is unsuccessful, then defines authentication information by the unsuccessful reason of returning: " account transfer is unsuccessful, reason XXX." behind the definition authentication information in whole workflow; all will be; encrypt return data then; create Socket3, adopt the Transmission Control Protocol mode, connect with the delivery certification management database; transmission information; disconnect and connecting with transaction record ID number, authentication information and the synthetic return data of authentication classification, close Socket3, finish thread.

13) the delivery certification management database receives the information of bank's authentication management database or the transmission of central Jianzhen's management database, deposits the delivery certification database after the analysis in, and to corresponding commercial operator and client's return message.Concrete workflow is as follows: create Socket4, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port 3, open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, decomposition data obtains ID number, the information content and authentication classification.Judge the authentication classification, if " 1 " then is bank's authentication information, " 2 " are Jianzhen's authentication informations.Bank's authentication information is handled: in trading record sheet, retrieve with ID number, obtain operator code, operator's transaction id number and cell-phone number, judge whether the information content is authentication success, if, then change authentication marks position in the trading record sheet into " 1 ", log; If not, direct log.Then receive the information content with the encapsulation of note PDU form, send an AT and instruct communication serial ports 2, retrieve in the operation record sheet with operator code, obtain IP of operator and port numbers, definition sends data: " ID number: the XXX+ information content: XXX+ information category: XXX ".Jianzhen's authentication information is handled: in trading record sheet, retrieve with ID number, obtain transaction record ID number and label data, judge Jianzhen's authentication result, if authentication is for true, then change " 0 " in the authentication result adding tag record table and with the authentication marks position, log finishes thread; If authentication is for false, then authentication result is added in the tag record table and with the authentication marks position and change " 0 " into, log, ID retrieves in trading record sheet with transaction record, obtain operator code and operator's transaction id number, retrieve in operator's record sheet with operator code, obtain IP and port numbers, definition sends data and comprises: ID number, information category, the information content and label data.After processing bank authentication information and processing Jianzhen authentication information arrive definition transmission data, all to carry out following steps: create Socket5, adopt Transmission Control Protocol, IP of operator that obtains with retrieval and port numbers and commercial operator management database connect, encrypt and send data, send data, disconnect connection, close Socket5, finish thread.

14) after commercial operator management database received the data that the delivery certification management database sends, decomposition data deposited bank's authentication information or Jianzhen's authentication information in database.Concrete workflow is as follows: create Socket2, adopt the Transmission Control Protocol mode, bind this machine IP and fixed port, open monitoring, have connection request then to accept, receive enciphered data, create thread and handle, continue then to monitor.In the thread of opening, in encryption/decryption element, be decrypted earlier, decomposition data obtains ID number, authentication classification, the information content and label data, judges the authentication classification, if " 1 " then is bank's authentication information, " 2 " are Jianzhen's authentication informations.Bank's authentication information is handled: in trading record sheet, retrieve with ID number, judge whether the information content is authentication success, if, changing authentication marks position in the trading record sheet into " 1 ", log finishes thread; If authentication is unsuccessful, then behind the log,, finish thread in screen output information content.Jianzhen's authentication information is handled: retrieve in the tag record table with label data, add authentication result in the tag record table and the authentication marks position changes " 1 " into, log in screen output information content, finishes thread.

15) ultimate consumer receives short message, checks authentication result.

The present invention has following characteristics:

1. uniqueness:

To reflect collection of illustrative plates all be unique because luminescent crystal spraying, forms the light of each label at random; User's finger print data also has uniqueness.

2. level security

At first client's finger print data is only deposited in bank's fingerprint database, avoids malice to pretend to be the client to carry out e-commerce transaction; Rivest, shamir, adelman is adopted in data encryption, and the Any user that does not have private key all can't be decrypted these data, obtains the user fingerprints data; The transaction of the debt of native system is not undertaken by the internet, and the consumer does not need to input Bank Account Number and the password of oneself in process of exchange, can make that consumer safety is relieved concludes the business.

3. synchronism

Consumer (perhaps client) and commercial operator be by this business delivery certification system, realizes synchronously that commodity are completed a business transaction with debt to complete a business transaction, and avoids both sides owing to distrust the transaction hysteresis that produces, reduction both sides' transaction risk.

4. realize that product Jianzhen authenticates

The luminescent crystal product certification label of product, central Jianzhen's authentication subsystem, manufacturer Jianzhen authentication subsystem are formed the exclusive product Jianzhen certification mode of native system, absolute assurance commodity that the client buys are genuine piece, effectively stop to occur counterfeit goods in the business transaction, safeguard consumer's interests.

5. convenient, flexible.

This business delivery certification system, the communication terminal that uses the consumer to carry does not need other special-purpose complex apparatus, and is very flexible and convenient.

6. credible wilfulness

Business transaction is to carry out in computer network or phone, and commodity purchaser and commercial operator are not face-to-face each other, authentication service merchant among the present invention is the wright of luminescent crystal product certification label, be again the true and false authentication service merchant of the product of purchasing, the both sides that complete a business transaction for commercial affairs provide very high credibility.

7. improve businessman's collection rate

By this business delivery certification system, the secure way of using the consumer to approve is fully given the dealer by bank transfer immediately, does not exist goods to not paying the bill or malice debt problem, can improve businessman's collection rate to greatest extent.

8. reduce the generation of commercial fraud

Carry out product Jianzhen simultaneously at business transaction and authenticate, can reduce commercial fraud.

Description of drawings

Fig. 1: system flowchart of the present invention

Fig. 2: luminescent crystal collection of illustrative plates scanner workflow diagram

Fig. 3: spectrum analysis unit process flow diagram

Fig. 4: communication terminal workflow diagram

Fig. 5: communication terminal workflow diagram

Fig. 6: delivery certification management database workflow diagram

Fig. 7: delivery certification management database workflow diagram

Fig. 8: delivery certification management database workflow diagram

Fig. 9: commercial operator management database workflow diagram

Figure 10: commercial operator management database workflow diagram

Figure 11: bank's authentication management database work process flow diagram

Figure 12: bank's authentication management database work process flow diagram

Figure 13: central Jianzhen's management database workflow diagram

Figure 14: central Jianzhen's management database workflow diagram

Figure 15: central Jianzhen's management database workflow diagram

Figure 16: manufacturer Jianzhen management database workflow diagram

Figure 17: manufacturer Jianzhen management database workflow diagram

Wherein: 1, luminescent crystal product certification label 2, luminescent crystal collection of illustrative plates scanner 21, data-interface 122, data-interface 2 23, digital signal processing chip (DSP) 24, light emitting source 25, imageing sensor 26, light shield 3, fingerprint scanner 4, communication terminal 5, wireless network 6, delivery certification management database 61, spectrum analysis unit 62, interval division 63, pattern match 64, generation string data

7, commercial operator management database 8, bank's authentication management database 9, central Jianzhen's management database 10, manufacturer Jianzhen management database

Embodiment

With reference to the accompanying drawings a kind of business delivery certification system of the present invention is described in detail below.

As shown in Figure 1, mobile wireless network identifying system of the present invention is made up of the authentication sign luminescent crystal product certification label (1), authentication identity recognizer luminescent crystal collection of illustrative plates scanner (2), Fingerprint Identification Unit fingerprint scanner (3), communication terminal (4), Radio Network System (5), delivery certification management database (6), commercial operator management database (7), bank's authentication management database (8), central Jianzhen's management database (9), the manufacturer Jianzhen management database (10) that depend on the certified commodity

Make luminescent crystal product certification label by authenticating tag manufacturer, concrete structure can be referring to application number: 200520022803.3.

The authentication identity recognizer is a luminescent crystal collection of illustrative plates scanner, and concrete structure can be referring to application number: 200520022802.9.

Fingerprint Identification Unit is fingerprint scanner (3), uses the miniature fingerprint scanner of AuthenTec AES2510 here, is connected on the data-interface 2 (22) of luminescent crystal collection of illustrative plates scanner (2).

Communication terminal (4) is mounted in the interior administration module of storer Flash of mobile phone or PDA, comprises scanner management unit, encryption/decryption element, data transmit-receive unit, finger scan administrative unit, entrusts registration unit, data storage cell, public key encryption unit.The communication serial ports is responsible for opening in scanner management unit, carries out serial communication with the luminescent crystal collection of illustrative plates scanner (2) that is connected, and sends the scanning label instructions and receives the bitonal bitmap data.Encryption/decryption element is responsible for the wireless transmission data encryption and decryption, adopts DES (DataEncryption Standard) algorithm, and all encryption/decryption elements all use this algorithm in the native system.The des encryption technology is a kind of symmetric cryptosystem commonly used, and this technology algorithm is open, and Cipher Strength is big, and fast operation is widely used in every profession and trade even military field.Raw data of DES computing (data before encrypting) and encryption key all are 64, and raw data through initial displacement, through the series of iterations computing, is passed through inverse permutation with sub-key (being produced by encryption key) then at last again, can obtain enciphered data.The algorithm of DES is symmetrical, not only can be used for encrypting but also can be used for deciphering, and decrypting process similarly.Data transmit-receive unit by using wireless communication networks sends the delivery certification data of encrypting to delivery certification management database (6), carries out communication based on Transmission Control Protocol (stream socket).For the module of embedded in mobile phone, GPRS or cdma wireless communications protocol are transparent relatively, and therefore when programming, the Socket socket that can directly create Transmission Control Protocol carries out data and sends.The finger scan administrative unit is responsible for carrying out serial communication with the luminescent crystal collection of illustrative plates scanner (2) that is connected, and sends the scanning fingerprint instruction and receives finger print data.Entrust registration unit to be responsible for importing when the client handles bank's trust registration the IP of bank, port numbers, account No. etc.Data storage cell is stored in PKI, Routing Number, customer bank account number, the customer name of receiving in the storer Flash of mobile phone or PDA; The public key encryption unit is based on RSA Algorithm, and public key encryption finger print data and total charge with bank gives generate the public key data bag.RSA Algorithm is first perfect public-key cryptosystem that Rivest, Shamir and Adleman proposed in 1977, and its security is based on the difficulty of decomposing large integer.RSA Algorithm is that first can be used to encrypt the algorithm with digital signature simultaneously, generally believes it is one of present classic PKI scheme.It is right that the very big prime number of its use is constructed key.Each key is to sharing the product of two prime numbers, i.e. modulus, but each key is to also having specific index.

Wireless network is the platform that is connected that (5) communication terminal (4) and delivery certification management database (6) carry out data communication, can be the GSM/GPRS/CDMA/WIWI network transmission protocol or the INTERNET (internet) of wireless communication networks.

Delivery certification management database (6) includes the data distribution center cell, short message sends platform, encryption/decryption element, scanner management unit, spectrum analysis unit, delivery certification Data Management Unit, data statistics unit and delivery certification database.The delivery certification management database is all write by C Plus Plus and is finished, the delivery certification database is installed on the PC server, other unit is installed on the workstation, and the communication serial ports 1 of workstation is connected with luminescent crystal collection of illustrative plates scanner (2), and communication serial ports 2 connects short message and sends platform device.The data distribution center cell is responsible for opening the connection request that a port is monitored commercial operator management database (7), receives transaction data and the label data encrypted; Set up and to be connected, the label data of transmission encryption and label ID number with the Socket of central Jianzhen's management database (9); Open a port and monitor the connection request of communication terminal (4), receive the delivery certification data of encrypting; Set up and be connected data such as the public key data bag that transmission is encrypted, customer bank account number, operator's account No. with the Socket of bank's authentication management database (8); Open a port and monitor the connection request of bank's authentication management database (8) and central Jianzhen's management database (9), receive bank or Jianzhen's verify data of encrypting; Set up and be connected bank or Jianzhen's verify data that transmission is encrypted with the Socket of commercial operator management database (7); Open the communication serial ports, the information that need are sent with the encapsulation of short message PDU form after, send platform to the short message that connects and send the AT instruction.Short message sends platform and receives the AT instruction, the authentication result information that encapsulated is sent to client's communication terminal (4).Native system uses the TS-WGC8B GSM MODEM pond of the sincere company in wound sky, is commonly called as the note cat, can connect 8 SIM card, by serial communication, uses the control of standard A T instruction set to send and receive note, transmission note speed 3000-6000 bar/hour.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal (4).The scanner management unit of scanner management unit and communication terminal (4) is identical.Spectrum analysis unit (61) is the respective symbols string based on image recognition technology with the bitonal bitmap data conversion.Workflow is as shown in Figure 5: bitonal bitmap is carried out interval division (62), be divided into individual interval, 64 (8 * 8), every interval corresponding pixel points is 80 * 60, then pattern match (63) is carried out in each interval reference mode storehouse of putting with Installed System Memory, the reference mode storehouse be sampling the interval graph picture that might occur, correspondence is divided into the storage of 64 classes, and each classification is with an identifier, corresponding respectively 52 capital and small letter English alphabets, 10 arabic numeral and "+" number and "-" two characters.By pattern match (63), bitonal bitmap is converted to the identification string data (64) of regular length, be referred to as mode data, output to next unit.The delivery certification Data Management Unit is responsible for use, the storage to all operations data, each verify data that receives is decomposed, and to the retrieval of writing down in trading record sheet, tag record table, manufacturer's table, operator's table, bank information table and the log recording table, insertion, renewal, deletion etc.The statistics of delivery certification database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.The delivery certification database is responsible for the storage of data, is the Oracle relational database, includes trading record sheet, tag record table, manufacturer's table, operator's table, bank information table, log recording table, statistics table and corresponding dictionary table etc.The oracle database of Oracle is one of most popular RDS in the world, and its favorable compatibility, portability, connectivity are just meeting the needs of native system.

Commercial affairs operator's management databases (7) include data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, operator's Data Management Unit, data statistics unit and commercial operator database.Commercial affairs operator management database is all write by C Plus Plus and is finished, and commercial operator database is installed on the PC server, and other unit is installed on the workstation, and the communication serial ports 1 of workstation is connected with luminescent crystal collection of illustrative plates scanner (2).The connection request that a port is monitored delivery certification management database (6) is responsible for opening in the data transmit-receive unit, receives the authentication return message of encrypting; Set up and be connected transaction data and label data that transmission is encrypted with the Socket of delivery certification management database (6).Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal (4).The scanner management unit of scanner management unit and communication terminal (4) is identical.The spectrum analysis unit (61) of spectrum analysis unit and delivery certification management database (6) is identical.Operator's Data Management Unit is responsible for use, the storage to all operations data, each verify data that receives decomposed, and to the retrieval of writing down in trading record sheet, tag record table and the log recording table, insertion, renewal, deletion etc.The statistics of commercial operator database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Commercial affairs operator database is responsible for the storage of data, is the Oracle relational database, includes trading record sheet, tag record table, log recording table, statistics table and corresponding dictionary table etc.

Bank's authentication management database (8) includes data transmit-receive unit, encryption/decryption element, asymmetric cryptography administrative unit, payment for goods administrative unit, finger print data administrative unit, data statistics unit and fingerprint database.Bank's authentication management database is all write by C Plus Plus and is finished, and fingerprint database is installed on the PC server, and other unit is installed on the workstation.The connection request that a port is monitored communication terminal (4) is responsible for opening in the data transmit-receive unit, receives the concurrent PKI of bringing back to life of finger print data, Routing Number, account No., the customer name encrypted; Open a port and monitor the connection request of delivery certification management database (6), receiving encryption key; Set up and be connected the authentication result information that transmission is encrypted with the Socket of delivery certification management database (6).Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal (4).The asymmetric cryptography administrative unit is responsible for generating a pair of asymmetric cryptography, and promptly PKI and private key are responsible for the public key data bag of receiving is decrypted.The asymmetric encryption mode can make communicating pair in advance interchange key just can set up secure communication, what use in the native system is the RSA public-key cryptosystem.The payment for goods administrative unit is responsible for getting in touch with banking system, proposes transfer request and reception result information.The finger print data administrative unit is responsible for use, the storage to all operations data, the authentication request data that receive decomposed, and to the retrieval of writing down in fingerprint recording table and the log recording table, insertion, renewal, deletion etc.The statistics of finger print data database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Fingerprint database is responsible for the storage of data, is the Oracle relational database, includes fingerprint recording table, log recording table, statistics table and corresponding dictionary table etc.

Central authorities' Jianzhen's management databases (9) include data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, central Jianzhen's Data Management Unit, data statistics unit and central Jianzhen's database.The Jianzhen of central authorities management database is all write by C Plus Plus and is finished, and central Jianzhen's database is installed on the PC server, and other unit is installed on the workstation, and the communication serial ports of workstation is connected with luminescent crystal collection of illustrative plates scanner (2).The connection request that a port is monitored delivery certification management database (6) is responsible for opening in the data transmit-receive unit, receives label ID number and mode data encrypting; Set up and be connected label ID number and mode data that transmission is encrypted with the Socket of manufacturer Jianzhen management database (10); Set up and be connected Jianzhen's authentication result information that transmission is encrypted with the Socket of delivery certification management database (6); Open a port and monitor the connection request of manufacturer's Jianzhen's management database (10), receive Jianzhen's authentication result information of encrypting.Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal (4).The scanner management unit of scanner management unit and communication terminal (4) is identical.The spectrum analysis unit (61) of spectrum analysis unit and delivery certification management database (6) is identical.The Jianzhen of central authorities Data Management Unit is responsible for use, the storage to all operations data, each Jianzhen's verify data that receives and Jianzhen's authentication result information are decomposed, and to the retrieval of writing down in tag record table, manufacturer's record sheet and the log recording table, insertion, renewal, deletion etc.The statistics of central Jianzhen's database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.The Jianzhen of central authorities database is responsible for the storage of data, is the Oracle relational database, includes tag record table, manufacturer's record sheet, log recording table, statistics table and corresponding dictionary table etc.

Manufacturer Jianzhen management database (10) includes data transmit-receive unit, encryption/decryption element, scanner management unit, spectrum analysis unit, manufacturer Jianzhen Data Management Unit, data statistics unit and manufacturer Jianzhen database.Manufacturer Jianzhen management database is all write by C Plus Plus and is finished, and manufacturer Jianzhen database is installed on the PC server, and other unit is installed on the workstation, and the communication serial ports of workstation is connected with luminescent crystal collection of illustrative plates scanner (2).The connection request that a port is monitored central Jianzhen's management database (9) is responsible for opening in the data transmit-receive unit, receives label ID number and mode data encrypting; Set up and be connected Jianzhen's authentication result information that transmission is encrypted with the Socket of central Jianzhen's management database (9).Encryption/decryption element is responsible for transmitting the encryption and decryption of data, and is identical with the encryption/decryption element of communication terminal (4).The scanner management unit of scanner management unit and communication terminal (4) is identical.The spectrum analysis unit (61) of spectrum analysis unit and delivery certification management database (6) is identical.Manufacturer Jianzhen Data Management Unit is responsible for use, the storage to all operations data, the authentication request information that receives decomposed, and to the retrieval of writing down in tag record table, product information table and the log recording table, insertion, renewal, deletion etc.The statistics of manufacturer Jianzhen database data is responsible in the data statistics unit, generates various statisticss, deposits in the statistics table for inquiry.Manufacturer Jianzhen database is responsible for the storage of data, is the Oracle relational database, includes tag record table, product information table, log recording table, statistics table and corresponding dictionary table etc.

The detailed operation flow process of luminescent crystal collection of illustrative plates scanner as shown in Figure 2.

The detailed operation flow process of spectrum analysis unit as shown in Figure 3.

The detailed operation flow process of communication terminal such as Fig. 4, shown in Figure 5.Wherein the flow process of Fig. 4 is: the client imports authorized bank's account number, IP and port numbers in communication terminal, entrusts registration data to bank's authentication management database behind the scanning fingerprint; The flow process of Fig. 5 is: client's scanning fingerprint, label collection of illustrative plates, with finger print data and total charge with public key encryption after, same total charge, Routing Number, account No. etc. are together encrypted and are sent to the delivery certification management database.

Delivery certification management database detailed operation flow process such as Fig. 6, Fig. 7, shown in Figure 8, wherein the flow process of Fig. 6 is: after the delivery certification management database receives the transaction data of commercial operator management database transmission, be stored in the delivery certification database, and label data is sent to central Jianzhen's management database authentication; The flow process of Fig. 7 is: after the delivery certification management database receives the verify data of communication terminal transmission, with respective transaction record comparison in the delivery certification database, compare an errorless back data and arrive bank's authentication management database; The flow process of Fig. 8 is: the delivery certification management database receives the information of bank's authentication management database or the transmission of central Jianzhen's management database, deposits the delivery certification database after the analysis in, and to corresponding commercial operator and client's return message.

Commercial affairs operator's management database detailed operation flow process such as Fig. 9, shown in Figure 10, wherein the flow process of Fig. 9 is: after the customer selecting business delivery certification mode, commercial affairs operator input transaction record is gathered label data, sends to the delivery certification management database after the encryption; The flow process of Figure 10 is: after commercial operator management database received the data of delivery certification management database transmission, decomposition data deposited bank's authentication information or Jianzhen's authentication information in database.

Bank's authentication management database detailed operation flow process such as Figure 11, shown in Figure 12, wherein the flow process of Figure 11 is: bank's authentication management database receives the trust registration data that communication terminal sends, deposit finger print data in, and encrypt and beam back Routing Number, account No., customer name and PKI; The flow process of Figure 12 is: after bank's authentication management database receives the data of delivery certification management database transmission, with record comparison in the fingerprint database, compare and errorless send transfer request, then information is returned the delivery certification management database to banking system.

Central authorities' Jianzhen's management database detailed operation flow process such as Figure 13, Figure 14, shown in Figure 15, wherein the flow process of Figure 13 is: after the luminescent crystal label is produced, authentication service merchant uses luminescent crystal collection of illustrative plates scanner scans label, deposits data in central Jianzhen's management database; The flow process of Figure 14 is: central Jianzhen's management database receives Jianzhen's authentication information of delivery certification management database, is transmitted to manufacturer Jianzhen management database after the preliminary authentication; The flow process of Figure 15 is: central Jianzhen's management database receives the information that manufacturer Jianzhen management database returns, and is transmitted to the delivery certification management database after the interpolation daily record.

Manufacturer Jianzhen management database detailed operation flow process such as Figure 16, shown in Figure 17, wherein the flow process of Figure 16 is: product producer is affixed on the label that obtains on the product of having produced, use luminescent crystal collection of illustrative plates scanner scans label, deposit data in manufacturer Jianzhen management database, and set up corresponding relation with the corresponding product record; The flow process of Figure 17 is: manufacturer Jianzhen management database receives the authentication information of central Jianzhen's management database, searching database, and return authentication information.

Claims

1. a business delivery certification system is characterized in that: be made up of the authentication sign, authentication identity recognizer, Fingerprint Identification Unit, communication terminal, wireless network, delivery certification management database, commercial operator management database, bank's authentication management database, central Jianzhen's management database, the manufacturer Jianzhen management database that depend on the certified article.

2. a kind of business delivery certification system according to claim 1, it is characterized in that: communication terminal is meant the administration module of installing in terminal, comprise scanner management unit: handle and carry out serial communication, send the scanning label instructions and receive the bitonal bitmap data with the luminescent crystal collection of illustrative plates scanner that is connected; Encryption/decryption element: be responsible for the wireless transmission data encryption and decryption; Data transmit-receive unit: utilize wireless communication networks to send the verify data of encrypting to the delivery certification management database, and when entrusting registration, send the registration data of encrypting to bank's authentication management database, carry out communication based on Transmission Control Protocol (stream socket); Finger scan administrative unit: carry out serial communication with the luminescent crystal collection of illustrative plates scanner that is connected, send the scanning fingerprint instruction and receive finger print data to the fingerprint scanner that connects by its data-interface 2; Entrust registration unit: responsible client handles and imports the IP of bank, port numbers, account No. etc. when bank entrusts registration; Data storage cell: PKI, Routing Number, customer bank account number, the customer name received are stored in the storage space of communication terminal; The public key encryption unit: public key encryption finger print data and total charge with bank gives generate the public key data bag.

3. a kind of business delivery certification system according to claim 1 is characterized in that: wireless network is the GSM/GPRS/CDMA/WIWI network transmission protocol or the INTERNET (internet) of wireless communication networks.

4. a kind of business delivery certification system according to claim 1 is characterized in that: the authentication sign that depends on the certified article is the authenticating tag of luminescent crystal product certification label, bar code, magnetic recording, digital image texture, IC-card, rfid card, dna technique or storage digital code information.

5. a kind of business delivery certification system according to claim 1, it is characterized in that: commercial operator management database includes the data transmit-receive unit: be responsible for opening the connection request that a port is monitored the delivery certification management database, receive the authentication return message of encrypting, set up and be connected transaction data and label data that transmission is encrypted with the Socket of delivery certification management database; Encryption/decryption element: be responsible for the encryption and decryption of transmission data; Scanner management unit: handle and carry out serial communication, send the scanning label instructions and receive the bitonal bitmap data with the luminescent crystal collection of illustrative plates scanner that is connected; The spectrum analysis unit: based on image recognition technology, by interval division and pattern match, the mode data that bitonal bitmap is converted to the respective symbols string outputs to next unit; Operator's Data Management Unit: be responsible for use, storage, each verify data that receives is decomposed all operations data, and retrieval, insertion, renewal, deletion to writing down in trading record sheet, tag record table and the log recording table; Data statistics unit: be responsible for the statistics of commercial operator database data, generate various statisticss, deposit in the statistics table for inquiry; Commercial affairs operator database: be responsible for the storage of data, include trading record sheet, tag record table, log recording table, statistics table and corresponding dictionary table etc.

6. a kind of business delivery certification system according to claim 1, it is characterized in that: the delivery certification management database comprises the data distribution center cell: be responsible for opening the connection request that a port is monitored commercial operator management database, receive transaction data and the label data encrypted, set up and be connected with the Socket of central Jianzhen's management database, the label data of send encrypting and label ID number, open a port and monitor the connection request of communication terminal, receive the delivery certification data of encrypting, foundation is connected with the Socket of bank's authentication management database, send the public key data bag of encrypting, the customer bank account number, data such as operator's account No., open a port and monitor the connection request of bank's authentication management database and central Jianzhen's management database, receive bank or Jianzhen's verify data of encrypting, foundation is connected with the Socket of commercial operator management database, send bank or Jianzhen's verify data of encrypting, open the communication serial ports, the information that need are sent with the encapsulation of short message PDU form after, send platform to the short message that connects and send the AT instruction; Short message sends platform: receive the AT instruction, the authentication result information that encapsulates is sent to communication terminal; Encryption/decryption element: be responsible for the encryption and decryption of transmission data; Scanner management unit: handle and carry out serial communication, send the scanning label instructions and receive the bitonal bitmap data with the luminescent crystal collection of illustrative plates scanner that is connected; The spectrum analysis unit: based on image recognition technology, by interval division and pattern match, the mode data that bitonal bitmap is converted to the respective symbols string outputs to next unit; Delivery certification Data Management Unit: be responsible for use, storage to all operations data, each verify data that receives is decomposed, and to the retrieval of writing down in trading record sheet, tag record table, manufacturer's table, operator's table, bank information table and the log recording table, insertion, renewal, deletion etc.; Data statistics unit: be responsible for the statistics of delivery certification database data, generate various statisticss, deposit in the statistics table for inquiry; Delivery certification database: be responsible for the storage of data, include trading record sheet, tag record table, manufacturer's table, operator's table, bank information table, log recording table, statistics table and corresponding dictionary table etc.

7. a kind of business delivery certification system according to claim 1, it is characterized in that: bank's authentication management database includes the data transmit-receive unit: be responsible for opening the connection request that a port is monitored communication terminal, receive the concurrent PKI of bringing back to life of finger print data, Routing Number, account No., the customer name encrypted, open a port and monitor the connection request of delivery certification management database, receiving encryption key, set up and be connected the authentication result information that transmission is encrypted with the Socket of delivery certification management database; Encryption/decryption element: be responsible for the encryption and decryption of transmission data; The asymmetric cryptography administrative unit: be responsible for generating a pair of asymmetric cryptography, promptly PKI and private key are responsible for the public key data bag of receiving is decrypted; Payment for goods administrative unit: be responsible for getting in touch, propose transfer request and reception result information with banking system; The finger print data administrative unit: be responsible for use, storage, the authentication request data that receive are decomposed all operations data, and to the retrieval of writing down in fingerprint recording table and the log recording table, insertion, renewal, deletion etc.; Data statistics unit: be responsible for the statistics of finger print data database data, generate various statisticss, deposit in the statistics table for inquiry; Fingerprint database: be responsible for the storage of data, include fingerprint recording table, log recording table, statistics table and corresponding dictionary table.

8. a kind of business delivery certification system according to claim 1, it is characterized in that: central Jianzhen's management database includes the data transmit-receive unit: be responsible for opening the connection request that a port is monitored the delivery certification management database, receive label ID number and mode data encrypting, set up and be connected with the Socket of manufacturer Jianzhen management database, send label ID number and mode data encrypting, set up and be connected with the Socket of delivery certification management database, send Jianzhen's authentication result information of encrypting, open a port and monitor the connection request of manufacturer Jianzhen management database, receive Jianzhen's authentication result information of encrypting; Encryption/decryption element: be responsible for the encryption and decryption of transmission data; Scanner management unit: handle and carry out serial communication, send the scanning label instructions and receive the bitonal bitmap data with the luminescent crystal collection of illustrative plates scanner that is connected; The spectrum analysis unit: based on image recognition technology, by interval division and pattern match, the mode data that bitonal bitmap is converted to the respective symbols string outputs to next unit; The Jianzhen of central authorities Data Management Unit: be responsible for use, storage to all operations data, each Jianzhen's verify data that receives and Jianzhen's authentication result information are decomposed, and to the retrieval of writing down in tag record table, manufacturer's record sheet and the log recording table, insertion, renewal, deletion etc.; Data statistics unit: be responsible for the statistics of central Jianzhen's database data, generate various statisticss, deposit in the statistics table for inquiry; The Jianzhen of central authorities database: be responsible for the storage of data, include tag record table, manufacturer's record sheet, log recording table, statistics table and corresponding dictionary table etc.

9. a kind of business delivery certification system according to claim 1, it is characterized in that: manufacturer Jianzhen management database includes the data transmit-receive unit: be responsible for opening the connection request that a port is monitored central Jianzhen's management database, receive label ID number and mode data encrypting, set up and be connected Jianzhen's authentication result information that transmission is encrypted with the Socket of central Jianzhen's management database; Encryption/decryption element: be responsible for the encryption and decryption of transmission data; Scanner management unit: handle and carry out serial communication, send the scanning label instructions and receive the bitonal bitmap data with the luminescent crystal collection of illustrative plates scanner that is connected; The spectrum analysis unit: based on image recognition technology, by interval division and pattern match, the mode data that bitonal bitmap is converted to the respective symbols string outputs to next unit; Manufacturer Jianzhen Data Management Unit: be responsible for use, storage to all operations data, the authentication request information that receives is decomposed, and to the retrieval of writing down in tag record table, product information table and the log recording table, insertion, renewal, deletion etc.; Data statistics unit: be responsible for the statistics of manufacturer Jianzhen database data, generate various statisticss, deposit in the statistics table for inquiry; Manufacturer Jianzhen database is responsible for the storage of data, includes tag record table, product information table, log recording table, statistics table and corresponding dictionary table etc.

10. a kind of business delivery certification system according to claim 1 is characterized in that: communication terminal is mobile phone, PDA or computing machine.