DE102007061825A1 - Electronic label for protecting product, has processor for processing program, memory and algorithm, in which series of authentication codes specified by algorithm are generated with algorithm - Google Patents

Abstract

The electronic label (100) has a processor (110) for processing a program, a memory (120) and an algorithm (f) for producing an authentication code (AC6-AC9). A series of authentication codes specified by the algorithm are generated with the algorithm and a sub-series included in the series from an authentication code is stored in the electronic label. A sub-series of two authentication codes is temporarily stored. An independent claim is also included for a method for protecting a product with an electronic label.

Description

The The invention relates to an electronic label for product safety, which label is a processor for processing a program, a memory and an algorithm for generating an authentication code and a corresponding product safety procedure.

WO 2004/114173 A2 describes a method of product backup in which an encrypted hash value about product information, e.g. B. via a serial number, is used as a product code. The product code can either be printed or stored in a chip.

WO-2006/099118 A2 describes an electronic label for product assurance, which label has a processor for processing a program, a memory, and an algorithm for generating an authentication code (authentication number), according to the preamble of claim 1. The label also has a display for displaying stored in the memory Label information, and optional buttons to control the display. With the algorithm of the label, a variable serial number can be generated, in which, for example, the current time can be received.

Even if a changeable serial number already brings a greater degree of security than a static, unchanging serial number, that puts out WO-2006/099118 A2 known serial number in a limited time interval yet a static, unchangeable serial number.

Of the Invention is based on the object, an electronic label to create the type mentioned with a high degree of security. One the corresponding procedure for product assurance is also indicated become.

The Task is solved by an electronic tag according to claim 1 and by a method according to claim 6. Advantageous embodiments of the invention are in the dependent Claims specified.

The Inventive label according to claim 1 is intended for product safety. The label has a processor to process a program - eg. B. the below Algorithm - a memory, and an algorithm for generating an authentication code (eg authentication number). The label is characterized by this from that with the algorithm given by the algorithm Series of authentication codes can be generated, and that in the label a part series of at least one authentication code included in the series at least temporarily is stored.

Thereby, that with the algorithm one given by the algorithm Series of authentication codes can be generated, any subset generated of authentication codes as a one-time password series use is provided - at least within a for the product very big Time interval - only to be used once. In addition, the algorithm stored in the label itself, and the authentication code or the authentication codes are generated in the label itself. The time passwords So they are generated in a secure environment. Consequently, it is a fake of authentication codes. Therefore, according to claim 1 created a label with a high degree of security.

According to one further developed embodiment The invention is in the label a subset of at least two Authentication codes (AC6, ..., AC9) at least temporarily stored, d. H. the sub-series comprises at least two authentication codes (AC6, ..., AC9). The sub-series is identical to the Series. In this embodiment must be a valid Label meet two criteria, namely, that the authentication codes are correct and, in addition, that the sequence of authentication codes is correct. Characterized in that at least two authentication codes in the label at least temporarily are stored, whose sequence is determined by the algorithm is the label is therefore only with great effort to fake. Therefore, according to the educated embodiment a label with a high degree Security created.

Optional each sub-series is intended to - at least within one for the Product very big Time interval - only to be used once. Every time you use a Partial series is thus at least one authentication code within of the subseries different from each preceding and succeeding one Part series.

The Partial series generated is optionally in the memory, in particular in a memory area of the memory, stored. Preferably the part series is sketchy (ie temporarily) stored in memory. This is optionally achieved by that the memory is a volatile one Memory is, or by the fact that the partial series produced according to its intended use is deleted again.

The algorithm is preferably stored inaccessible in the label so that it can not be manipulated from outside the label. The algorithm is optionally in a memory area stored in the memory or implemented in the processor or in a processor area of the processor. The processor is optionally a microprocessor.

Of the Algorithm is used to generate each series authentication code optionally with a pseudorandom number from a predetermined pseudorandom sequence combined so that each pseudorandom number from the pseudorandom sequence corresponds to an authentication code from the series of authentication codes.

The Label is optionally designed to be on a product attachable. Optionally, the label is in anyway a product provided control device integrated with a processor, in particular a microprocessor. Especially bigger products such as B. Industrial machinery (eg machine tools, production machines for the production of other products, etc.) or household appliances (eg washing machines, dishwashers, dryers, etc.) often have one control device integrated into the product with a microprocessor or on the product intended. Optionally, the label is flat, similar to an RFID transponder or a microprocessor chip card.

Optional the label has an indicator (display) and / or controls for Control of the display z. Example by means of the processor and / or the memory. Optionally, the display is identical to the one shown above cited Control unit. Optionally, the label has an interface to communicate with a reader, optionally a contactless and / or a contact interface over which transmitted in the label generated authentication codes out of the label can be.

Optional For example, the algorithm is a one-way function algorithm a hash algorithm.

Optional are the authentication codes by an application generated by the algorithm on product-specific identification data. The Identification data for the product, which in the authentication codes include, for example, type of product or product type (eg medicinal product, tobacco product, food, meat product, Industrial machine, car spare part etc.), manufacturer, place of manufacture, Production line, date of manufacture, time of manufacture, expiry date, lot number of the product and any combinations of these identification data and / or the current time at or shortly before the generation of the Authentication code.

Optional the label is set up so that the sub-series only on an authentication request is generated on the label. These embodiment has the advantage that in the unused label still no authentication codes are stored, so no authentication codes read and can be copied. Optionally, the sub-series is only temporarily stored in the label held. Optionally, the sub-series will only be stored in the label for so long held, as it is necessary to the subset for authentication to display, for example on a display the label or on a display of an external reader for the label or on a remote display.

at the method according to the invention for product safety according to claim 6 is in the label according to claim 1 generates with the algorithm the subset of at least one authentication code, optionally a subset of at least two authentication codes.

Preferably is the subset of authentication codes to an authentication request on the label to secure a label with the product to authenticate, generated. Optionally at the latest after the authentication of the product become the one or more authentication codes generated in the label optionally deleted from the label again, and / or the authentication codes be in a fleeting Memory kept stored. Optionally, generated authentication codes an indication (display) of the label or on a display of a external reader for the Label or displayed on a remote display.

Optional In the authentication request, a random variable is added to the Label is sent and the subset generated using the random size. Optionally, this is a subset with a single authentication code generated. In particular, the authentication is optionally according to a challenge-response method carried out, where in the authentication request a random number to the label is sent, and the label with the random number, one in the label stored secret key and calculating a single authentication code for the algorithm and outputs the authentication code, optionally via a display of the label, optionally over another interface of the label, optionally to a reader for the label, either contactless or contact-based. Optionally, in the challenge-response procedure in the Challenge a subset of multiple random numbers to the label and a partial series of several authentication codes in the label generated and sent back as a response, with one random number per authentication code.

Optional is used to verify the generated sub-series at a central office, the above the algorithm and possibly over the pseudorandom number sequence or via a pseudorandom number generator to generate the pseudorandom number sequence, the entire series of authentication codes generated and checked at the headquarters whether the Partial series of the series is included.

If the sub-series of the series is included, the sub-series as Verified and viewed the product as authenticated. This variant is particularly preferred for embodiments of the method, where at least two authentication codes are generated in the label become. The control center checks in this Case two criteria to verify the authenticity of the label, on the one hand the correctness of the authentication codes, and on the other hand the correct order of the authentication codes.

Optional becomes the partial series of authentication codes generated in the label for verification via sent a data connection to the central office. Optionally, over the Data connection in addition sent to the sub-series identification data used to generate the Authentication codes have been used. The data connection is optionally a wired data connection, z. For example, the Internet or a telephone connection, or a wireless data connection, e.g. B. a mobile connection. Optionally, the authentication codes generated in the label deleted from the label again, as soon as they are about to transfer over Data connection are provided and no longer needed in the label.

in the Below, the invention with reference to exemplary embodiments and under Reference to the drawing closer explains in the show:

1 an electronic label according to an embodiment of the invention;

2 a flow diagram illustrating a method for product assurance, according to an embodiment of the invention.

1 shows an electronic label 100 , according to an embodiment of the invention. The label 100 has the following components: a processor 110 for processing a program, a memory 120 , an algorithm f for generating an authentication code which is in a partial area of the memory 120 is stored, an ad 130 to display z. B. generated authentication codes and an antenna coil 140 for communication with a reader (not shown), e.g. B. for sending generated authentication codes to the reader. In another subarea of the memory, identification data IDP of the product 100 stored. In the label 100 integrated is also a pseudo-random number generator 150 for example as part of the processor 110 or as an additional crypto processor. The algorithm f is a one-way function, e.g. B. hash function. The processor 110 and the pseudo-random number generator 150 are from outside the label 100 inaccessible. The label 100 is attached to a product (not shown).

2 shows a flowchart illustrating a method of product assurance in the label 100 out 1 , according to an embodiment of the invention.

Exactly is in 2 a method of authenticating one with the label 100 provided product (not shown). With the processor 110 of the label 100 a subset of authentication codes AC6, AC7, AC8, AC9 is generated (sub-figure (a)). This is done with the pseudo-random number generator 150 a subset of random numbers RDN6, ... RDN9 generated. By applying the algorithm f to the identification data IDP from the memory 120 and one of the pseudorandom numbers RDN6, ... RDN9, an authentication code AC6, AC7, AC8, AC9 is generated in each case. The identification data IDP and the generated subseries of authentication codes AC6, AC7, AC8, AC9 are transmitted via the antenna coil 140 electronically from the label 100 read out and to a central office 200 Posted. The central office 200 has an identically acting algorithm f and an identically acting pseudo-random number generator like the label 100 , At the headquarters 200 A complete predetermined pseudorandom number sequence RDN1,..., RDN11,... is generated (subfigure (b)) whose beginning and end are determined by certain determinable parameters. With the pseudorandom number sequence RDN1, ..., RDN11, ... is at the headquarters 200 generates a complete series of authentication codes AC1,..., AC11,... corresponding to the pseudorandom number sequence RDN1,..., RDN11,. At the headquarters 200 Will check if the label 100 generated partial series of authentication codes AC6, AC7, AC8, AC9 in the complete series of authentication codes AC1, ..., AC11, ... is included. In the example off 2 Is that the case. This is the product on which the label 100 appropriate, successfully authenticated.

Claims (12)

Electronic label ( 100 ) for product safety, which label ( 100 ) a processor ( 110 ) for processing a program, a memory ( 120 ) and an algorithm (f) for generating an authentication code (AC1, ...), characterized in that with the algorithm (f) a generated by the algorithm (f) predetermined series of authentication codes (AC1, ... AC11, ...), and that in the label ( 100 ) comprises a part of the series comprised series of at least one authentication code (AC6, ..., AC9) at least temporarily stored Label ( 100 ) according to claim 1, wherein a subset of at least two authentication codes (AC6, ..., AC9) is stored at least temporarily. Label ( 100 ) according to claim 1 or 2, wherein the algorithm (f) is a one-way function algorithm. Label ( 100 ) according to one of claims 1 to 3, which is an indicator ( 130 ) having. Label ( 100 ) one of claims 1 to 4, which is further arranged so that the sub-series only on an authentication request to the label ( 100 ) is generated. Procedure for product assurance with a label ( 100 ) according to one of claims 1 to 5, wherein with the algorithm (f) the subset of at least one authentication code (AC6, ..., AC9) is generated. The method of claim 6, wherein a subset of at least two authentication codes (AC6, ..., AC9) is generated. Method according to claim 6 or 7, wherein the subseries (AC6, ..., AC9) respond to an authentication request to the label ( 100 ) to put one with the label ( 100 ) to authenticate the product to be secured. Method according to claim 8, wherein in the authentication request at least one random variable is applied to the label ( 100 ) and the sub-series (AC6, ..., AC9) is generated using the random variable. Method according to one of claims 6 to 9, wherein for the verification of the generated subseries (AC6, ..., AC9) at a control center ( 200 ), which has the algorithm (f), the entire series of authentication codes (AC1, AC11, ...) is generated and at the headquarters ( 200 ) is checked whether the sub-series (AC6, ..., AC9) of the series (AC1, ..., AC11, ...) is included. Method according to claim 10, wherein the subseries (AC6, ..., AC9) for verification via a data connection to the central office ( 200 ) is sent. Method according to one of claims 6-11, wherein the authentication codes displayed as a barcode on the label display.