CN202957830U

CN202957830U - Distributed general false-proof system based on NFC and mobile communication

Info

Publication number: CN202957830U
Application number: CN 201220389660
Authority: CN
Inventors: 张剑平; 王成林; 唐劼; 于世刚; 苏循刚; 张飞龙
Original assignee: Beijing Xintai Elvision Video Science & Technology Co Ltd
Current assignee: Beijing Xintai Elvision Video Science & Technology Co Ltd
Priority date: 2012-08-07
Filing date: 2012-08-07
Publication date: 2013-05-29
Anticipated expiration: 2022-08-07

Abstract

The utility model provides a distributed general false-proof system based on NFC and mobile communication. A core false-proof subsystem includes a public key distribution module and an enterprise processing module. The data output terminal of the public key distribution module is connected with the data input terminal of the enterprise processing module. A terminal authentication subsystem includes an NFC read-write module, an authorization code generating module, and an authentication module. The NFC data output terminal of the NFC read-write module is connected with the NFC data input terminal of the authentication module. The authorization code data output terminal of the authorization code generating module is connected with the authorization code data input terminal of the authentication module. An interface conversion subsystem includes a logic decryption module, a screening module, and a transmitting module. The data output terminal of the logic decryption module is connected with the data input terminal of the screening module. The data output terminal of the screening module is connected with the data input terminal of the transmitting module. The distributed general false-proof system based on NFC and mobile communication enriches the false-proof technology approaches, improves the false-proof technology reliability, and reduces the false-proof technology cost.

Description

A kind of distributed general Antiforge system based on NFC and mobile communication

Technical field

The utility model relates to a kind of distributed general Antiforge system based on NFC and mobile communication, belongs to the wireless communication technique field.

Background technology

NFC(Near Field Communication, near-field communication) be a kind of short-range high frequency wireless communication technology, allow to carry out contactless Point-to-Point Data Transmission (in ten centimetres) swap data between electronic equipment.This technology is developed by contact-free formula radio-frequency (RF) identification (RFID), and backward compatible RFID, and being mainly used in provides the M2M communication of (Machine to Machine) in the handheld device such as mobile phone.Because NFC has natural fail safe, therefore, the NFC technology is considered to have great application prospect in fields such as mobile-phone payments.

Some mobile antifogery technology based on mobile phone are arranged in the prior art, for example in the RFID label, write unique sequence number, make the user can pass through RFID device scan RFID label, and scanning result is sent to mobile phone, form by SMS sends to remote server by this sequence number again, thereby judges that whether the RFID label that this sequence number is corresponding is legal.But the method need to rely on existing mobile communication network, need to produce certain expense, cause the cost of anti-counterfeiting technology higher, but also need the support of SMS, the anti-counterfeiting technology means are single, reliability is poor; In addition, anti-pseudoprocess also needs extra RFID equipment, has further improved the cost of anti-counterfeiting technology.

Summary of the invention

The problem that means are single, reliability is poor, cost is higher that the utility model exists for solving existing radio-frequency (RF) identification and anti-counterfeiting technology, and then a kind of distributed general Antiforge system based on NFC and mobile communication is provided.For this reason, the utility model provides following technical scheme:

A kind of distributed general Antiforge system based on NFC and mobile communication, comprise the false proof subsystem of core, terminal authentication subsystem and interface conversion subsystem; The false proof subsystem of described core comprises public key distribution module and business processes module, and the data output end of described public key distribution module is connected with the data input pin of described business processes module; Described terminal authentication subsystem comprises NFC module for reading and writing, authorization code generation module and authentication module, the NFC data output end of described NFC module for reading and writing is connected with the NFC data input pin of described authentication module, and the authorization code data output end of described authorization code generation module is connected with the authorization code data input pin of described authentication module; Described interface conversion subsystem comprises logic deciphering module, examination module and sending module, the data input pin of described logic deciphering module is connected with the data output end of described public key distribution module, the data output end of described logic deciphering module is connected with the data input pin of described examination module, and the data output end of described examination module is connected with the data input pin of described sending module.

The technical scheme that the utility model execution mode provides is by by the combination of NFC label and mobile communcations system, not only enriched anti-counterfeiting technology means, improved the reliability of anti-counterfeiting technology, and do not need extra equipment, reduced the cost of anti-counterfeiting technology.

The accompanying drawing explanation

In order to be illustrated more clearly in the technical scheme of the utility model embodiment, in below describing embodiment, the accompanying drawing of required use is briefly described, apparently, accompanying drawing in the following describes is only embodiment more of the present utility model, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain according to these accompanying drawings other accompanying drawing.

Fig. 1 is the structural representation of the distributed general Antiforge system based on NFC and mobile communication that provides of embodiment of the present utility model.

Embodiment

Below in conjunction with the accompanying drawing in the utility model embodiment, the technical scheme in the utility model embodiment is clearly and completely described, obviously, described embodiment is only the utility model part embodiment, rather than whole embodiment.Embodiment based in the utility model, those of ordinary skills are not making under the creative work prerequisite the every other embodiment obtained, and all belong to the scope of the utility model protection.

Embodiment of the present utility model provides a kind of distributed general Antiforge system based on NFC and mobile communication, as shown in Figure 1, comprises the false proof subsystem 1 of core, terminal authentication subsystem 2 and interface conversion subsystem 3; The false proof subsystem 1 of core comprises public key distribution module 11 and business processes module 12, and the data output end of public key distribution module 11 is connected with the data input pin of business processes module 12; Terminal authentication subsystem 2 comprises NFC module for reading and writing 21, authorization code generation module 22 and authentication module 23, the NFC data output end of NFC module for reading and writing 21 is connected with the NFC data input pin of authentication module 23, and the authorization code data output end of authorization code generation module 22 is connected with the authorization code data input pin of authentication module 23; Interface conversion subsystem 3 comprises logic deciphering module 31, examination module 32 and sending module 33, the data input pin of logic deciphering module 31 is connected with the data output end of public key distribution module 11, the data output end of logic deciphering module 31 is connected with the data input pin of examination module 32, and the data output end of examination module 32 is connected with the data input pin of sending module 33.

Concrete implementation comprises: the false proof subsystem 1 of core and interface conversion subsystem 3 all can adopt IBM Systemx3650 M3 (7945O25) server, operation Windows Server 2008 R2 operating systems, the database in the false proof subsystem 1 of core and interface conversion subsystem 3 can adopt SQL Server 2010/MySql/Oracle large database; Terminal authentication subsystem 2 can adopt with the smart mobile phone of RFID function or NXP RC522 13.56M read write line.In the false proof subsystem 1 of core, terminal authentication subsystem 2 and interface conversion subsystem 3, standard agreement used and algorithm comprise: ICP/IP protocol stack, ISO14443-A agreement, 3DES cryptographic algorithm/AES cryptographic algorithm and AES cryptographic algorithm/3DES cryptographic algorithm.

Wherein the public key distribution module 11 of the false proof subsystem 1 of core can be used existing key to generate software, as Mobile-OTPV.2, RSA key Core Generator etc.; Business processes module 12 can adopt existing file encryption software, and by operating system, corresponding function is processed.Terminal authentication subsystem 2 is that NFC module for reading and writing 21 is integrated in existing smart mobile phone or panel computer, can realize corresponding function.Interface conversion subsystem 3 directly is connected with the false proof subsystem 1 of core, and corresponding logic deciphering module 31, examination module 32 and sending module 33 all can adopt the existing decryption software of operating system, comparison software and transmission software to realize corresponding function.Although the technical scheme that this embodiment provides is that a kind of hardware and software module is in conjunction with the system realized, but software module wherein all adopts existing program to realize, without existing program is innovated, and the innovative point of the technical scheme that this embodiment provides is the annexation of subsystems, comprise that the false proof subsystem 1 of core is connected with the entity of interface conversion subsystem 3, and interface conversion subsystem 3 and terminal authentication subsystem 2 are by the connection of wireless network, software module wherein is that support system realizes corresponding function, its main inventive point is still realized by hardware, therefore the structure that the application belongs to product carries out improved innovation and creation.

The operation principle of the distributed general Antiforge system based on NFC and mobile communication that this embodiment provides is:

The false proof subsystem 1 of core comprises public key distribution module 11 and business processes module 12.The signing client for certain, at first public key distribution module 11 generates a random code, then in conjunction with producer's information (PKI), generate unique producer's key, the sign of distinguishing as each manufacturer, and by producer's key of generation by sending to interface conversion subsystem 3, interface conversion subsystem 3 is by this close will preservation.Wherein the form of producer's key is as follows:

Random code

Manufacturer's coding

SIC code

Public key distribution module 11, also by RSA Algorithm, generates producer's certificate according to manufacturer's key, and the content of producer's certificate comprises producer's code, industry code, signing time etc., and producer's certificate of generation is issued to business processes module 12.Business processes module 12 all in manufacturer's internal placement, can avoid manufacturer's information to reveal, specifically for the producer's certificate according to receiving, in conjunction with the producer's private key information generated label substance of oneself all hardware and database.Wherein the form of information labels content is as follows:

Private key

Digital certificate

The product type coding

Product coding

The information labels content can be set up on their own by producer, is kept in the server of producer oneself, and server is by firewall protection, divulges a secret avoiding.Business processes module 12 generates the final content that writes by the information labels content of generation by the RSA+SHA-1 Digital Signature Algorithm again, and writes in the NFC label of appointment.Wherein the final form that writes content is as follows:

The tag recognition code

Private key

Digital certificate

The product type coding

Product coding

The information finally write generated can send to specific database storage (registration), for the use of false proof audit in the future.After business processes module 12 is received information, at first use the private key of manufacturer, by the decrypts information of receiving.As decipher unsuccessful, the explanation be not the qualified products of this manufacturer, return to " not being qualified products " information; After successful decryption, will obtain tag recognition code and product information.The retrieved information data storehouse, check unique identification code, as can't detect, and explanation is not the qualified products of this manufacturer, returns to " not being qualified products " information; Searching database, check the product information of comparing this product, with the product information in information database, compares, as compare unsuccessful, explanation is not the qualified products of this manufacturer, returns to " not being qualified products " information, and in database, this product comparison errors number is added to one; As compare successfully, return to " this product is qualified products " information, and in database, this product comparison number of success is added to one.

Terminal authentication subsystem 2 comprises NFC module for reading and writing 21, authorization code generation module 22 and authentication module 23.For the manufacturer that uses the NFC Antiforge system, the hardware foundation of terminal authentication subsystem 2 is mobile devices that the mobile phone of supporting NFC, flat board etc. have wireless communication function, or the integrate body of the said equipment and NFC module for reading and writing.The hardware foundation of the terminal authentication subsystem 2 of mobile device internal configurations is can the information read device of the mobile device phase interlock of wireless communication function be arranged with mobile phone, flat board etc., as the radio frequency reading device.Each terminal, when downloading and installing authentication service software, according to cell-phone number/MIC address, generates a unique authorization code in conjunction with random code, is kept on terminal, and is registered in the core anti-counterfeit server.Registration code limits if having time, and terminal meeting timing and database communication, generate new registration code, stolen to prevent terminal.Wherein the form of authorization code is as follows:

This cell-phone number

WiFi MIC address

Random code

The term of validity

Wherein, for the terminal that WiFi is only arranged, the cell-phone number field is empty.

NFC module for reading and writing 21 will read the information labels content in the NFC label and send to

authentication module

23, and 23 pairs of information that read of authentication module are carried out form/legitimacy/integrality judgement, as judge failure, point out the user " information format mistake "; Basis setting in advance of legal information, select, by short message mode or network mode, information is submitted to interface conversion subsystem 3, and terminal sets in advance short message customer service number and network interface in the authentication procedure downloaded and installed.The mode that sends note comprises: the mode with PDU sends note to default short message customer service number, and content has:

The endpoint registration code

PKI

The information of encrypting

False proof mode

Mode by Internet Transmission comprises: the sense terminals such as mobile phone, by mobile network or WiFi, adopt the Transmission Control Protocol interconnection network, and information is sent to default network interface; Submit unsuccessful prompting " Query Information is submitted to unsuccessfully, please check that network connects " to; Wait for the Query Result of interface conversion system loopback after submitting to successfully, and result is shown; Terminal authentication subsystem 2 when having network to connect, the query interface server, detecting the software whether redaction is arranged can be for downloading, if any new software connected to the network being downloaded and installed.

Interface conversion subsystem 3 comprises logic deciphering module 31, examination module 32 and sending module 33.Logic deciphering module 31 is received the information labels content that terminal authentication subsystem 2 transmits, and the PKI that passes through corresponding producer obtains producer's key to the information labels contents decryption; Examination module 32 is compared producer's key of obtaining and the log-on message self preserved, if compare unsuccessfully, returns to the information of " not in system "; After comparing successfully, sending module 33 is according to the ownership producer of producer's key judgement encrypted state product information, then the business processes module to producer proposes the inquiry application, and the Query Result finally producer returned former road loopback is to the terminal authentication system, to complete whole query script.

The technical scheme that adopts this embodiment to provide, by the combination by NFC label and mobile communcations system, not only enriched anti-counterfeiting technology means, improved the reliability of anti-counterfeiting technology, and do not need extra equipment, reduced the cost of anti-counterfeiting technology.

The above; it is only preferably embodiment of the utility model; but protection range of the present utility model is not limited to this; anyly be familiar with those skilled in the art in the technical scope that the utility model embodiment discloses; the variation that can expect easily or replacement, within all should being encompassed in protection range of the present utility model.Therefore, protection range of the present utility model should be as the criterion with the protection range of claim.

Claims

1. the distributed general Antiforge system based on NFC and mobile communication, is characterized in that, comprises the false proof subsystem of core, terminal authentication subsystem and interface conversion subsystem; The false proof subsystem of described core comprises public key distribution module and business processes module, and the data output end of described public key distribution module is connected with the data input pin of described business processes module; Described terminal authentication subsystem comprises NFC module for reading and writing, authorization code generation module and authentication module, the NFC data output end of described NFC module for reading and writing is connected with the NFC data input pin of described authentication module, and the authorization code data output end of described authorization code generation module is connected with the authorization code data input pin of described authentication module; Described interface conversion subsystem comprises logic deciphering module, examination module and sending module, the data input pin of described logic deciphering module is connected with the data output end of described public key distribution module, the data output end of described logic deciphering module is connected with the data input pin of described examination module, and the data output end of described examination module is connected with the data input pin of described sending module.