JP2013061844A - Authenticity verification device, authenticity verification object, authenticity verification method, program, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authenticity verification device and the like making a fraudulent use by forgery difficult, and facilitating an addition and deletion of a verification item according to a facility environment and a security level.SOLUTION: An object 10 having random and inseparable unique physical features is provided with a verification parameter 13 in which the number of verifications, a method for reading the physical features, a method for calculating an eigenvalue from the physical features and the like are specified. A verification device 2 reads the verification parameter 13 by a verification information acquiring device 21; reads the unique physical features of the object 10 by a physical feature reader 22 according to the read verification parameter 13; calculates the eigenvalue from the read physical features; and compares it with a true eigenvalue. By the setting of the verification parameter 13, the verification device changes the reading method for the physical features and the eigenvalue calculating method from the physical features to calculate a plurality of eigenvalues, compares each eigenvalue with the true eigenvalue to execute a verification process and, when all the eigenvalues match the true eigenvalue, defines the object 10 as a true.

Description

  The present invention relates to an authenticity verification apparatus or the like using an artifact metric technique that extracts unique physical features that cannot be separated from an article and verifies the authenticity of the article based on the extracted physical characteristics.

  In recent years, an artefact metric technique has been proposed as a technique for authenticating authenticity (authentication verification) of public certificates such as industrial products, product packages, certificates, and securities such as gift certificates. Artifact metric technology measures unique physical characteristics that are randomly assigned to an object (artifact) in an inseparable manner, and compares the data based on this with the true data measured in advance. By doing so, the authenticity of the object is verified. That is, a unique physical feature corresponding to a human fingerprint is read from an artifact and used for verification.

  Physical characteristics unique to the object are roughly classified into optical characteristics, magnetic characteristics, electrical characteristics, vibration characteristics, and the like. Examples of the optical characteristics include various surface images such as a transmission or reflection image pattern of a paper fiber or the like contained in the object. Moreover, as an example of a magnetic characteristic, there exists what reads the pattern of the magnetic fiber penetrated into the target object. These characteristics unique to the object are read by a reading device corresponding to the characteristics. For example, regarding optical characteristics, it is generally read as image data by an imaging device such as a scanner or a camera.

  As an example of such an artifact metric, Japanese Patent Laid-Open No. 2004-228561 provides a card with an authenticity authentication chip, and another card (authentication proof chip) on the card. The image of the authentication chip is read and digitized, and at the same time, the encrypted data of the authentication chip attached to the same card is read and decrypted, and the data decrypted from the authentication chip is compared with the data of the authentication chip. An authentication system for determining the authenticity of a card is described.

  Moreover, in patent document 2, the characteristic of a banknote is read using red light, the amount of money is identified by this, and as a genuineness determination, the characteristic of a banknote is read by an infrared light line sensor, and several evaluation values are based on this. It describes a bill recognition device that calculates and determines that a bill is authentic if it is within an allowable range.

International Publication No. WO2007 / 072793 International Publication No. WO2009 / 072211

  However, even if artifact metric technology is used, the possibility of duplication or forgery cannot be completely denied. Thus, if verification is performed by combining features unique to the object in a more complicated manner, security is improved. However, if it is difficult to prepare a facility environment for verification, convenience is impaired. As an authenticity verification system, it is desired to improve practicality so that it can cope with various verification environments and can easily change the verification method according to the required security level. However, in the conventional methods such as the methods of Patent Document 1 and Patent Document 2, it is not easy to change the verification method according to the verification environment and increase the security.

  The present invention has been made in view of such a problem, and it is an object of the present invention to provide an authenticity verification device that makes it difficult to use illegally by forgery and that can be easily set according to the facility environment and security level. To do.

  In order to solve the above-described problem, the first invention is an authenticity verification device for verifying the authenticity of an object, the verification parameter acquiring means for acquiring a verification parameter for the object, and the acquired verification object Authenticity determining means for determining the authenticity of the object by comparing the eigenvalue acquired based on the physical characteristic unique to the object and a true eigenvalue calculated in advance according to the parameter. It is a verification device.

The verification parameter acquisition unit acquires a plurality of different verification parameters for the object, and the authenticity determination unit acquires a plurality of eigenvalues and a plurality of eigenvalues acquired based on the physical characteristics according to the different verification parameters. It is desirable to determine the authenticity of the object by comparing each of the true eigenvalues.
In addition, it is preferable that the authenticity determination unit determines that the object is true when a predetermined number of eigenvalues among the plurality of eigenvalues match the true eigenvalue.
Furthermore, it is preferable that the authenticity determination means determines that the object is not true when a predetermined eigenvalue among the eigenvalues does not match the true eigenvalue.

It is preferable that the verification parameter includes designation regarding a method for reading physical characteristics of the object.
The verification parameter preferably includes designation of a calculation method for calculating the eigenvalue from the physical feature.
Furthermore, it is preferable that the verification parameter includes designation of an inquiry destination of the true eigenvalue.
In addition, the verification parameter acquisition unit may include the encoded and printed verification parameter, the verification parameter stored in a memory attached to the object, or a server connected to the authenticity verification device. It is desirable to obtain the stored verification parameters.

  According to a second aspect of the present invention, there is provided a verification parameter for determining authenticity by comparing an inherent physical characteristic and an eigenvalue acquired based on the inherent physical characteristic with a true eigenvalue calculated in advance by an authenticity verification device. It is an authenticity verification object characterized by having.

The authenticity verification object of the second invention is a plurality of different verifications for determining authenticity by comparing each of a plurality of eigenvalues acquired based on the physical characteristics and a plurality of true eigenvalues by an authenticity verification device. It is desirable to have parameters for use.
Further, it is preferable that the verification parameter includes designation regarding a method for reading the physical feature of the object.
The verification parameter preferably includes designation of a calculation method for calculating the eigenvalue from the physical feature.
Furthermore, it is preferable that the verification parameter includes designation of an inquiry destination of the true eigenvalue.
Further, it is preferable that the verification parameter is encoded and printed, or stored in a memory attached to the authentic verification target.

  The third invention is an authenticity verification method for verifying the authenticity of an object, wherein the authenticity verification apparatus acquires a verification parameter for the object according to the verification parameter acquisition step and the acquired verification parameter Authenticity verification, comprising: performing an authenticity determination step of determining authenticity of the object by comparing an eigenvalue acquired based on a physical characteristic unique to the object and a true eigenvalue calculated in advance. Is the method.

In the verification parameter acquisition step, a plurality of different verification parameters for the object are acquired, and in the authenticity determination step, a plurality of eigenvalues and a plurality of eigenvalues acquired based on the physical characteristics according to the plurality of different verification parameters. It is desirable to determine the authenticity of the object by comparing each of the true eigenvalues.
In the authenticity determination step, it is preferable that the object is determined to be true when a predetermined number of eigenvalues that are not all coincide with the true eigenvalue among the plurality of eigenvalues.
Further, in the authenticity determination step, it is desirable that the object is determined not to be true when a predetermined eigenvalue among the plurality of eigenvalues does not match the true eigenvalue.

It is preferable that the verification parameter includes designation regarding a method for reading physical characteristics of the object.
The verification parameter preferably includes designation of a calculation method for calculating the eigenvalue from the physical feature.
Furthermore, it is preferable that the verification parameter includes designation of an inquiry destination of the true eigenvalue.
In the verification parameter acquisition step, the verification parameter stored in the memory attached to the object, or the server connected to the authenticity verification device is encoded and printed. It is desirable to obtain the stored verification parameters.

  According to the first, second, and third inventions, the authenticity of the object is determined by comparing the eigenvalue acquired based on the physical characteristic unique to the object and the true eigenvalue calculated in advance by the verification parameter. Since the method to do this can be set variably, it is easy to change, add, or delete settings according to the equipment environment and security level. Therefore, the setting according to the required security level becomes flexible and simple, and its practicality is improved, for example, by increasing the security level as necessary to make unauthorized use difficult.

In addition, by calculating a plurality of eigenvalues for each target using a plurality of different verification parameters and using them for verification, even if the target is counterfeited, the result of successful verification cannot be easily obtained. Unauthorized use becomes difficult.
The plurality of eigenvalues may be determined to be true on the condition that all of the eigenvalues match the true eigenvalue. On the other hand, a predetermined number of eigenvalues that are not all match the true eigenvalue. You may make it determine a target object as true on condition.
In other words, since there may be scratches, dirt, etc. in the reading range of the physical characteristics of the object, some eigenvalues coincide with the true eigenvalue even if the object is actually true. There is a possibility not to. Therefore, by making the condition that a predetermined number of eigenvalues that are not all coincide with the true eigenvalue, the possibility of erroneous determination due to such scratches and dirt can be reduced.
Moreover, the accuracy of authenticity determination can be improved by determining eigenvalues that must always match true eigenvalues.

  The above parameters can be set variably by including specification of the reading method of the physical characteristics of the object, the calculation method of calculating the eigenvalue from the physical characteristics, and the inquiry destination of the true eigenvalue as the verification parameters. The security can be improved easily, and it is easy to cope with various equipment environments, and the practicality is improved.

  Further, when the verification parameter coded by printing is given to the object, the verification parameter can be given simply and at low cost, and the verification parameter can be easily obtained. Further, when the verification parameters are stored in the memory attached to the object, reading errors of the verification parameters can be prevented. Further, when the verification parameters are stored in the server, security can be enhanced and the manufacturing cost of the object can be reduced.

A fourth invention is a program for causing a computer to function as the authenticity verification device of the first invention.
A fifth invention is a storage medium storing a program for causing a computer to function as the authenticity verification device of the first invention.
According to the fourth and fifth inventions, the computer can function as the authenticity verification device of the first invention.

  ADVANTAGE OF THE INVENTION According to this invention, the authenticity verification apparatus etc. which make illegal use by forgery difficult and can perform the setting according to an installation environment or a security level easily can be provided.

The figure which shows the whole structure of the authenticity verification system 1 The figure explaining the target object 10 The figure which shows an example of the content of the verification parameter 13 provided to the target object 10 Diagram explaining how to specify the verification method The figure explaining each reading range of different target object 10A, 10B The block diagram which shows the hardware constitutions of the verification apparatus 2 The figure which shows the function structure of the verification apparatus 2 Block diagram showing the hardware configuration of the verification servers 3 and 5 Flow chart explaining the overall flow of authentication verification processing Flowchart explaining the flow of verification processing Flowchart explaining inquiry / comparison verification process A flowchart for explaining another example of the entire flow of authentication verification processing

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
First, an authenticity verification system 1 including an authenticity verification device according to a first embodiment of the present invention will be described with reference to FIGS.

  As shown in FIG. 1, the authenticity verification system 1 includes an object 10 (authentication verification object), a verification device 2 (authentication verification device), and verification servers 3 and 5. The verification device 2 is connected to an external verification server 3 via a network 4 such as the Internet, and is connected to a local verification server 5 via a network 6 such as a LAN.

  The object 10 has random and inseparable physical characteristics inherent to the object 10 and is provided with a verification parameter 13. The physical characteristics unique to the object 10 are already formed in the object 10 when the object 10 is distributed as a product. As described above, transmission or reflection of paper fibers or the like contained in the object 10 is performed. Are various general surface images such as the above image pattern, and patterns of magnetic fibers randomly drawn into the object 10.

FIG. 2 is an example of a top view of the object 10.
As shown in the figure, the verification parameter 13 is given by printing on the base material 11 of the object 10 in the form of a code such as a two-dimensional code. Or you may store in the memory of the IC chip provided in the inside of the target object 10, or the surface. In addition, the verification parameter 13 is encoded and printed on a sticker, and the sticker is attached to an object, or included in a memory in a sealed IC chip, and the sticker is attached to the object. It is also possible to include it in a holographic memory that has been processed, or to include it in a sealed holographic memory and to stick the seal to an object.
Each object 10 is also given an ID. The ID is given by, for example, a two-dimensional code or stored in an IC chip or the like. In addition, it is possible to give this by using various methods as described above as appropriate.

FIG. 3 shows an example of the contents of the verification parameter 13.
As shown in FIG. 3, the verification parameter 13 includes
(A) Information on the number of verifications <Number of verification targets = “2”>
(B) Information relating to each verification method <Verification verifyId = “0” method = “am01”>, etc. (c) Information relating to the reading method ((reading) range, orientation) <Range x = “10” y = “20 “Width =“ 100 ”height =“ 15 ”/>, <direction angle =“ 0 ”/>, etc. (d) Auxiliary information <auxiliary information format =“ hex ”> 9402b1ac38d35d. . . </ Auxiliary information> etc. (e) Contact information at the time of verification <Inquiry contact = “self” format = “hex” encryption = “true”> 60a5b91d74c. . . <Inquiry /> or <inquiry contact = “server” format = “url”> https: // dnp. co. jp / verifyserver. asp <inquiry /> etc. are described.
The verification parameter 13 is a method for determining the authenticity of the object 10 by comparing and verifying the eigenvalue acquired based on the physical characteristic unique to the object 10 by the verification device 2 and the true eigenvalue calculated in advance. Is specified.

(A) The information on the number of verifications reads physical characteristics of the object, acquires eigenvalues based on the read physical characteristics, and designates the number of times of verification based on the acquired eigenvalues. The above values are set.
In the example of FIG. 3, the number of verifications is specified by “number of times”. That is, <verification target count = "2"> specifies that verification is performed twice.

(B) The information regarding the verification method for each round is for specifying the method for reading the physical characteristics of the object and calculating the eigenvalue based on the read physical characteristics for each verification round.
In the example of FIG. 3, the method used for the verification times specified by “verifyId” is specified by “method”. For example, by <verification verifyId = “0” method = “am01”>, the eigenvalue is obtained by the method specified by am01 for the first verification round (the count of verifyId starts from 0) and used for the verification. It is specified by the verification parameter 13a for the first verification time. The second verification time is similarly designated by the verification parameter 13b.

  The storage unit of the verification apparatus 2 stores various programs for activating various reading devices to read physical characteristics, various eigenvalue calculation programs for obtaining eigenvalues based on the read physical characteristics, and the like. At the same time, as shown in FIG. 4, a table 23 is stored in advance for defining the association with the reading device to be used, the eigenvalue calculation program, etc. for each method ID (methodID) such as am01.

  (C) The information related to the reading method determines the reading range and reading direction for reading the physical characteristics of the object. The reason for designating the reading direction is that if the value calculated from the read physical feature includes a two-dimensional feature, the value changes depending on the reading direction. As a simple example, considering the case where a planar luminance distribution is acquired as a matrix from the read physical features, the matrix is different between when reading in the vertical direction and when reading in the horizontal direction.

In the example of FIG. 3, the reading range is designated by “range”, and the reading direction in this reading range is designated by “direction”.
For example, in the verification parameter 13a of the first verification round, <range x = “10” y = “20” width = “100” height = “15” /> and <direction angle = “0” /> In the coordinate system in which the upper left corner of the object 10 is the origin, the direction from left to right is positive in the x-axis direction, and the direction from top to bottom is positive in the y-axis direction, the physical in the first verification round The feature reading range is defined as a rectangular shape with the coordinates of the top left vertex being (10, 20), the width being 100, and the height being 15 (unit: mm). Furthermore, it is determined that the physical characteristics in this range are read in a direction that forms an angle of 0 ° with respect to a predetermined direction (for example, the width direction of the object). The second verification time is similarly determined by the verification parameter 13b. Note that the method of specifying the reading range and reading direction is not limited to this, and the setting of the coordinate system is not limited to this. It is also possible to specify the reading device to be used as described above.

  (D) Auxiliary information is used when obtaining eigenvalues, and enhances robustness of eigenvalues against deviations of objects when reading physical features and reduces authentication errors. For example, Yasuhiro Fukuda and Tsutomu Matsumoto “A method of an artifact metric system that extracts unique values from paper” described in IEICE Information Security Study Group (ISEC), ISEC2010-16, pp41-46, 2010 As described above, the parity bit generated by applying the error correction code to the value calculated from the read physical feature can be used.

  In the example of FIG. 3, the value of the auxiliary information is described, and the content of the value is designated by “format”. For example, in the verification parameter 13a of the first verification round, <auxiliary information format = “hex”> 9402b1ac38d35d. . . </ Auxiliary information> specifies that the value of the auxiliary information used in the first verification round is “9402b1ac38d35d...”, Which is described in hexadecimal (format = “hex”). . The second verification time is similarly determined by the verification parameter 13b.

  (E) The inquiry destination information at the time of verification designates the verification servers 3 and 5 that hold the true eigenvalues to be compared with respect to the above eigenvalues. Further, when the comparison process is performed by the verification apparatus 2 itself, this is designated.

In the example of FIG. 3, when the inquiry destination is the verification servers 3 and 5, the server is designated by “contact”, and the address of the designated server is described as a value. Further, “format” designates the contents such as the above value being url, IP address or the like.
For example, looking at the verification parameter 13b in the second verification round, the inquiry destination information is <inquiry contact = “server” format = “url”> https: // dnp. co. jp / verifyserver. asp <inquiry />. In this case, an inquiry is made to the external verification server 3 at the time of verification (contact = “server”), and the address value of the external verification server 3 (https://dnp.co.jp/verifyserver.asp). In addition, it is specified that this value indicates url (format = “url”).
Although not shown in FIG. 3, the case where the local verification server 5 is designated and the inquiry is made is almost the same as the above example. For example, when contact = “local”, it is determined to make an inquiry to the verification server 5, and the IP address of the verification server 5 is described as the address value of the verification server 5, and “format” is used. , Specify that this indicates an IP address.

On the other hand, when the comparison process is performed by the verification device 2 itself, the verification device 2 itself is designated by “contact” and the true eigenvalue to be compared is also described. Further, “format” designates the content such as that the eigenvalue is a value expressed in hexadecimal. If necessary, “encryption” specifies whether or not the unique value is encrypted. The true eigenvalue is an eigenvalue calculated in advance for the object 10 in accordance with the reading method or the verification method specified by the verification parameter 13.
For example, when viewing the verification parameter 13a in the first verification round, the inquiry destination information is <inquiry contact = “self” format = “hex” encryption = “true”> 60a5b91d74c. . . It is <inquiry />. In this case, in addition to the comparison process performed by the verification apparatus 2 itself (contact = “self”), the true eigenvalue to be compared (60a5b91d74c...), And this value is described in hexadecimal. “Yes” (format = “hex”) and encryption (encryption = “true”) are also described.

In the present embodiment, a plurality of verification times and different verification parameters 13a and 13b for each verification time specify a reading method and a verification method at each time, and a plurality of different reading methods and It is possible to specify a verification method.
For example, in the example of FIG. 3, the ranges corresponding to the reading range (1) 12a and the reading range (2) 12b in FIG. 2 are designated as (c) information relating to the reading method. A method of reading and acquiring the eigenvalue based on this is specified as information on (b) each verification method.

Note that (b) as information on each verification method, it is possible to specify reading physical features using different devices or reading physical features having different characteristics. For example, a certain reading range is a scanner. In another reading range, it is possible to specify reading with a microscope while irradiating predetermined irradiation light, or reading optical characteristics in a certain reading range and reading magnetic characteristics in another reading range.
In this way, by describing parameters with different reading methods and verification methods at the first verification (verifyId = “0”) and the second verification (verifyId = “1”), each verification is performed. It is possible to perform verification with different eigenvalues at different times.

  Furthermore, in the present embodiment, the verification parameter 13 is different for each target object 10, and different parameters can be set for each target object 10 when setting a reading method, a verification method, and the like.

For example, as shown in FIG. 5, different reading methods can be designated for the object 10A and the object 10B.
That is, it is possible to describe as the verification parameter 13 that the object 10A reads the two reading ranges 12c and 12d and calculates the eigenvalues for the physical characteristics of each range, and the object 10B has three reading ranges 12e and 12f. , 12g can be described as the verification parameter 13 to calculate eigenvalues for the physical characteristics of each range. By the corresponding verification method, eigenvalues are calculated based on the physical features read for each range and used for verification.

  Note that the information specified by the verification parameter 13 is not limited to that described with reference to FIG. 3, but includes the reading environment such as the above-described reading device designation (for example, designation of necessary cameras from many types of cameras). (For example, lighting conditions, camera distance, magnification, angle, etc.), various image correction specifications (for example, white balance, sharpness, black / white reversal, etc.), laser irradiation area, intensity, incident angle, etc. Specification (when using a laser as a reading device) or the like can also be included.

  Returning to the description of the authenticity verification system 1 in FIG. The verification device 2 reads a physical characteristic unique to the object 10 according to the verification parameter 13, calculates an eigenvalue based on the read physical characteristic, and verifies the authenticity of the object 10 using this. .

FIG. 6 is a diagram illustrating a hardware configuration of the verification device 2.
As shown in FIG. 6, the verification device 2 includes a control unit 201, a storage unit 202, an input unit 203, a display unit 204, a media input / output unit 205, a communication I / F (interface) 206, a peripheral device I / F 207, and the like. They are connected via a bus 209. In addition, a reader 20 having a verification information acquisition device 21 and a physical feature reading device 22 is connected to the peripheral device I / F 207.

The control unit 201 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like.
The CPU calls and executes a program stored in the storage unit 202, ROM, recording medium, or the like to a work memory area on the RAM, and drives and controls each unit connected via the bus 209. The ROM permanently holds a computer boot program, a program such as BIOS, data, and the like. The RAM temporarily holds the loaded program and data, and includes a work area used by the control unit 201 to perform various processes described later.
In addition, the control unit 201 executes authenticity verification processing described later according to a program corresponding to the verification method specified by the verification parameter 13 stored in the storage unit 202 or the like.

The storage unit 202 is an HDD (hard disk drive) or the like, and stores a program executed by the control unit 201, data necessary for program execution, an OS (operating system), and the like. These program codes are read as necessary by the control unit 201, transferred to the RAM, and read and executed by the CPU.
As described above, in the storage unit 202, various programs for starting various reading devices to read physical characteristics, various eigenvalue calculation programs for obtaining eigenvalues based on the read physical characteristics, FIG. The table 23 shown in FIG. 5 and other programs necessary for executing the authenticity verification process are stored in advance.

  The input unit 203 is an input device such as a keyboard, a mouse, a touch panel, a pointing device such as a tablet, or a numeric keypad, and outputs input data to the control unit 201.

The display unit 204 includes, for example, a display device such as a liquid crystal panel or a CRT monitor, and a logic circuit (video adapter or the like) for executing display processing in cooperation with the display device, and is input under the control of the control unit 201. Display information is displayed on a display device.
Note that the input unit 203 and the display unit 204 may be integrated with a touch panel type input / output unit.

The media input / output unit 205 is a media input / output device such as a CD drive or a DVD drive, and performs data input / output.
The communication I / F 206 includes a communication control device, a communication port, and the like, and is a communication interface that mediates communication with the verification servers 3 and 5 via the networks 4 and 6 and performs communication control.

The peripheral device I / F 207 is a port for connecting the peripheral device to the verification device 2, and the verification device 2 transmits and receives data to and from the peripheral device via the peripheral device I / F 207. The peripheral device I / F 207 is configured by a USB or the like, and usually includes a plurality of peripheral devices I / F. The connection form with the peripheral device may be wired or wireless.
The bus 209 is a path that mediates transmission / reception of control signals, data signals, and the like between the devices.

The verification information acquisition device 21 reads the verification parameter 13 and the ID assigned to the object 10.
In the present embodiment, as described above, the verification parameter 13 is given to the object 10 as a two-dimensional code, and an optical reader such as a code reader, a scanner, or a camera is used to read this. When the verification parameter 13 is stored in an IC chip memory or the like provided in the object 10, a corresponding IC reader / writer or the like is used. Similarly, the ID of the object 10 is read using a corresponding reading device.

  The physical feature reader 22 uses a reader corresponding to the characteristics to be read. For example, when reading optical characteristics, an image reading device such as a scanner, a CCD camera, or a microscope is used. Further, when reading magnetic characteristics, a magnetic reading device is used as the physical feature reading device 22, and when reading electrical characteristics, a detector or the like that reads electric charge may be used.

FIG. 7 is a diagram showing a functional configuration of the verification apparatus 2.
As shown in FIG. 7, the verification device 2 includes a verification parameter acquisition unit 210 and an authenticity determination unit 230.
In the verification parameter acquisition unit 210, the control unit 201 of the verification device 2 acquires the verification parameter 13 of the object 10 by the verification information acquisition device 21.
The authenticity determination means 230 is based on the physical feature read by the control unit 201 of the verification device 2 according to the information of the verification parameter 13 by reading the physical feature unique to the object 10 by the physical feature reading device 22. The eigenvalue is calculated, and the authenticity of the object 10 is determined by a method described later using the calculated eigenvalue and the ID of the object 10.

  The verification servers 3 and 5 hold true eigenvalues in advance for each eigenvalue calculated from the object 10, and are used when verifying the authenticity of the object 10.

FIG. 8 is a diagram showing a hardware configuration of the verification servers 3 and 5.
As shown in FIG. 8, the verification servers 3 and 5 are connected to a control unit 301, a storage unit 302, an input unit 303, a display unit 304, a media input / output unit 305, a communication I / F 306, and the like via a bus 309. Configured.

The control unit 301 includes a CPU, ROM, RAM, and the like.
The CPU calls a program stored in the storage unit 302, ROM, recording medium, or the like to a work memory area on the RAM and executes it, and drives and controls each unit connected via the bus 309. The ROM permanently holds a computer boot program, a program such as BIOS, data, and the like. The RAM temporarily stores the loaded program and data, and includes a work area that is used by the control unit 301 to perform various processes described later.

  The storage unit 302 is an HDD or the like, and stores a program executed by the control unit 301, data necessary for program execution, an OS, and the like. These program codes are read as necessary by the control unit 301, transferred to the RAM, and read and executed by the CPU.

  The input unit 303 is an input device such as a keyboard, a mouse, a touch panel, a pointing device such as a tablet, or a numeric keypad, and outputs input data to the control unit 301.

  The display unit 304 includes a display device such as a liquid crystal panel or a CRT monitor, and a logic circuit (such as a video adapter) for executing display processing in cooperation with the display device. The display unit 304 is input under the control of the control unit 301. Display information is displayed on a display device.

The media input / output unit 305 is a media input / output device such as a CD drive or a DVD drive, and performs data input / output.
The communication I / F 306 has a communication control device, a communication port, and the like, and is a communication interface that mediates communication with the verification device 2 via the network 4 or 6 and performs communication control.
A bus 309 is a path that mediates transmission / reception of control signals, data signals, and the like between the devices.

  The storage unit 302 of the verification servers 3 and 5 stores true eigenvalues corresponding to the reading method, the verification method, and the like for each target object 10. As described above, the true eigenvalue is calculated in advance for the object 10 in accordance with the reading method or the verification method specified by the verification parameter 13, and the above-described reading method or verification method is used in the verification parameter 13. In addition, each server designated as an inquiry destination is registered in association with the ID of the object 10 or the like.

Next, the flow of authentication verification processing in the authentication verification system 1 will be described.
9 is a flowchart for explaining the overall flow of the authenticity verification process, FIG. 10 is a flowchart for explaining the details of the verification process, and FIG. 11 is a flowchart for explaining the inquiry / comparison verification process.

First, the entire flow of the authentication verification process will be described with reference to FIG.
When the object 10 is set in the reader 20 of the verification device 2, the control unit 201 of the verification device 2 reads the verification parameter 13 by the verification information acquisition device 21 (step S101). At this time, the ID of the object 10 is also read.

  The control unit 201 of the verification apparatus 2 acquires (a) the number of verifications from the read verification parameter 13 (step S102). As a result, the processing in steps S103 to S105 is repeated (at the maximum) for the obtained number of verifications.

  The control unit 201 of the verification device 2 performs verification processing of the target object 10 (step S103), and acquires the authenticity of the target object 10 as a verification result. This verification process will be described later.

If the verification result is “false” (step S104; false), the control unit 201 of the verification apparatus 2 determines that the object 10 is not a genuine product (the object is not true) (step S106), and verification is performed. The result is displayed on the display unit 204.
On the other hand, if the verification result is “true” (step S104; true), the control unit 201 of the verification apparatus 2 further determines whether all the verifications for the number of verifications have been completed, and all the verifications have been completed. If not (step S105; No), the process proceeds to step S103, and the next verification process is performed.
When the verification process is repeated as many times as the number of verifications and the results of all verifications are “true” (step S104; true, step S105; Yes), the object 10 is a genuine product (the object is true). (Step S107) and the verification result is displayed on the display unit 204.

  Next, the verification process in step S103 will be described with reference to FIG.

In the verification process, first, the control unit 201 of the verification apparatus 2 acquires (b) each time verification method and (c) the reading method (range, orientation) from the verification parameter 13 read in step S101 (step S201). Step S202).
For example, method = “am01” is acquired as the first verification method from the first verification parameter 13a shown in FIG. 3, and x = “10” y = “20” as the reading method. “Width =“ 100 ”height =“ 15 ”is acquired, and as the reading direction, angle =“ 0 ”is acquired.

  The control unit 201 of the verification device 2 executes a program corresponding to the verification method acquired in step S201, controls the physical feature reading device 22, and reads the object 10 along the reading method acquired in step S202. A physical feature is read for the range, and a value based on the read physical feature is calculated and acquired (step S203).

As described above, the program corresponding to the above method = “am01” is stored in the storage unit 202, and according to this, the physical feature is read and the value based on the physical feature is calculated.
For the calculation of values, a known calculation method for various physical characteristics is prepared as a program, and a corresponding method may be applied. As an example, the above-mentioned paper by Fukuda et al. Uses a one-dimensional vector in which an image of a predetermined range of an object is read, the luminance value in each minute area within the read range is obtained, and the luminance distribution is quantized and arranged. Is described.

Next, the control unit 201 of the verification apparatus 2 acquires (d) auxiliary information from the verification parameter 13 read in step S101 (step S204).
As described above, the auxiliary information is corrected by correcting this value in order to prevent an error in the value calculated from the physical characteristics due to a positional deviation at the time of reading the target object 10. This is information used to obtain a robust value for the deviation or the like as an eigenvalue, and the above-described parity bit can be applied as an example.
For example, “9402b1ac138d35d...” Is acquired as auxiliary information used for the first verification from the verification parameter 13a illustrated in FIG.

  Then, the control unit 201 of the verification device 2 receives the value calculated from the read physical feature and the auxiliary information, corrects the value, and outputs a corrected value (step S205). Are acquired as eigenvalues (step S206). The method for acquiring the hash value can be determined as appropriate.

  Note that the above steps S204 to S206 are performed for the purpose of using for comparison verification as a characteristic value a value that reduces the influence of positional deviation or the like when the object 10 is read. For example, the position when the object 10 is read When the deviation is not taken into account, it is not always necessary to correct the value by the auxiliary information, and the acquisition of the hash value may be omitted, and the value itself obtained from the physical characteristics may be used as a unique value for subsequent authentication. Is possible. It is possible to predetermine (b) a program corresponding to each verification method (such as “am01”) to calculate the eigenvalue by performing the processing of steps S204 to S206 described above, or to omit it. is there.

  The control unit 201 of the verification apparatus 2 performs an inquiry / comparison verification process using the unique value (hash value) acquired in step S206, the ID of the target object 10 and the like (step S207).

  The inquiry / comparison verification process in step S207 will be described with reference to FIG.

  As shown in FIG. 11, first, the control unit 201 of the verification device 2 acquires (e) inquiry information from the verification parameter 13 acquired in step S101 (step S301). For example, contact = “self” format = “hex” encryption = “true” and true eigenvalue “60a5b91d74c...” From the verification parameter 13a of the first verification time shown in FIG. get.

If the acquired inquiry destination information specifies the verification apparatus 2 itself as in the verification parameter 13a (step S302; self), the control unit 201 becomes a comparison target described together with the inquiry destination. A true eigenvalue which is a value (a value obtained in advance by the same procedure as in steps S201 to S206) is acquired (step S303). If the true eigenvalue is described by being encrypted, it is decrypted and acquired. The decryption key used for decryption is stored in advance in the storage unit 202 of the verification device 2.
In this embodiment, the true eigenvalue is described together with the inquiry destination of (e) inquiry destination information. However, the present invention is not limited to this, and an IC provided on the object 10 apart from the verification parameter 13 is described. It may be stored in a chip memory or the like.

  Next, the control unit 201 of the verification device 2 compares and verifies the eigenvalue acquired in step S206 and the true eigenvalue acquired in S303, and determines whether or not they match (step S304).

On the other hand, if the acquired inquiry destination information specifies the local verification server 5 (step S302; local), the control unit 201 makes an inquiry to the verification server 5. At this time, the ID of the object 10 is transmitted to the verification server 5 via the network 6.
Upon receiving the ID of the target object 10, the verification server 5 stores the true eigenvalue of the target object 10 stored in the storage unit 302 of the verification server 5 in association with the ID of the target object 10. Send. The control unit 201 of the verification device 2 receives and acquires this true eigenvalue as a comparison target of the eigenvalue acquired in step S206 (step S305).

  The control unit 201 of the verification apparatus 2 compares and verifies the acquired true eigenvalue and the eigenvalue acquired in step S206 to determine whether or not they match (step S306).

In step S302, if the acquired inquiry destination information specifies the external verification server 3 (step S302; URL, server, etc.), the control unit 201 of the verification apparatus 2 connects the network to the verification server 3 with a network. 4, first, server authentication is performed (step S <b> 307).
If the authentication is successful, the control unit 201 of the verification device 2 transmits the hash value acquired in step S206 to the verification server 3 together with the ID of the object 10 as a unique value (step S308). Then, this eigenvalue is compared and verified on the verification server 3 side (step S309). The comparison verification in the verification server 3 is performed in the same manner as in step S306. That is, the received unique value is compared with the true unique value stored in the storage unit 302 in association with the ID of the object 10 to determine whether or not they match.

  The verification server 3 transmits the verification result of step S309 to the verification device 2, and the control unit 201 of the verification device 2 receives this (step S310).

  If the values match according to the verification result of step S304 or S306 or the verification result received at step S310, “OK” is passed to step S208 of FIG. 10, and “NG” is passed to step S208 if they do not match (step S208). Step S311). In the verification, the “match” does not need to be limited to a strict match, and may include those within a predetermined allowable range. The allowable range can be arbitrarily set in consideration of the accuracy required for authenticity determination.

In step S208 of FIG. 10, the control unit 201 of the verification apparatus 2 determines that the target object 10 is “true” if the verification result is “OK”, and the target object 10 if the verification result is “NG”. Is determined to be “false”. As described above, the verification process in step S103 of FIG. 9 is performed.
Based on the result, the processing after step S104 described above is performed. If the result is “true”, the next verification process (step S103) is different from the first one, and the reading method or the verification method specified by the verification parameter 13b at the second verification. The authenticity of the object 10 is determined by the above-described procedure.

In the present embodiment, the verification device 2 itself performs the first verification based on the inquiry destination information at (e) verification of the verification parameter 13 shown in FIG. Although it is performed on the verification server 3, for example, a plurality of verification processes can be performed by inquiring the same verification server.
In this case, the true eigenvalue at the time of each verification is associated with the ID of the object 10 and information indicating each verification time (verifyId = “0”, verifyId = “1”, etc. in FIG. 3) and the verification server And the ID of the object 10 and the information of the verification time (and the eigenvalue if necessary) may be transmitted to the verification server at the time of the above inquiry.
In response to this, the verification server can return the true eigenvalue associated with the ID of the object 10 and the information of the verification time to the verification device 2, and the verification device 2 can perform comparison determination (in steps S <b> 305 to S <b> 306). flow). Alternatively, the verification server can compare the eigenvalue received from the verification device 2 with the true eigenvalue associated with the ID of the object 10 and the verification time information, and return the verification result to the verification device 2 (step S308). To S310).
A plurality of verification processes can be performed by the verification apparatus 2 by the description of the verification parameter 13.
Therefore, in the present embodiment, the verification servers 3 and 5 are connected to the verification device 2 to configure the authenticity verification system 1. However, the verification is performed in one verification server as described above. The verification server 2 or the verification device 2 alone can be used. Therefore, only one of the verification servers 3 and 5 can be provided, or both can be omitted.

  As described above, in the present embodiment, the verification parameter 13 indicating the reading method, the verification method, and the like is encoded and printed on the target object 10 and given to the target object 10 for verification. The verification information acquisition device 21 of the verification device 2 reads the verification parameter 13 from the target object 10, and according to the read verification parameter 13, the physical characteristic unique to the target object 10 is read and read by the physical feature reading device 22. The eigenvalue is calculated from the physical characteristics, and the authenticity determination process is executed by comparison with the true eigenvalue.

The verification parameter 13 makes it possible to variably set the reading method such as the reading range and reading direction of the physical feature, the method for calculating the eigenvalue from the physical feature, the inquiry destination of the true eigenvalue, etc. You can easily change, add, or delete items according to the level. Accordingly, the setting according to the required security level is made flexible and simple, for example, the security level is increased as necessary to make unauthorized use more difficult, and it is possible to deal with various equipment environments and improve the practicality.
In addition, since a plurality of eigenvalues are calculated and used for verification by changing the physical feature reading method and eigenvalue calculation method for each object 10 using a plurality of different verification parameters, the object 10 is forged. Even if it is not possible to obtain the result of the verification success easily, illegal use by forgery becomes difficult.

  Further, in the present embodiment, the verification parameter 13 is encoded and printed, and the printed object is given to the object 10. When the verification parameter is given by printing, the verification parameter 13 can be given to the object 10 easily and at low cost, and the acquisition of the verification parameter 13 becomes easy. As described above, the verification parameter 13 can be stored in the memory attached to the object 10, and in this case, a reading error of the verification parameter 13 can be prevented.

  As a modification of the present embodiment, instead of printing the verification parameter 13 as a two-dimensional code on the target object 10, information on the verification parameter 13 is associated with the ID of the target object 10 on the verification server side. You may make it have. In this case, in step S101, the verification apparatus 13 transmits the ID of the target object 10 to the verification server, and in response thereto, the verification server 13 stores the verification parameter 13 associated with the ID of the target object 10 in advance. Is transmitted to the verification device 2. The verification device 2 receives this and acquires the verification parameter 13, and can perform the subsequent processing in the same manner. Thereby, security can be strengthened and the manufacturing cost of the target object 10 can also be reduced.

In addition, the verification server 3 side has an additional verification parameter (designation method is the same as the verification parameter 13) that specifies the reading method, the verification method, and the like in association with the ID of the object 10. Additional verification may be performed.
In this case, processing similar to the above-described procedure is performed up to step S309 in FIG. 11. However, if the compared values match in step S309 in FIG. 11, the verification server 3 determines that the additional verification parameter Is further transmitted to the verification device 2. In accordance with the received additional verification parameter, the verification device 2 acquires an additional eigenvalue in the above-described steps S201 to S206 and transmits it to the verification server 3.
The verification server 3 stores the true eigenvalue associated with the ID or the like of the target object 10 for this eigenvalue, compares and verifies the same as in step S309, and then performs the same processing as in step S310 and subsequent steps. . Thereby, security can be further improved.
The same processing can be performed in the verification server 5. For example, when the values compared in step S306 match, the verification device 2 transmits the ID of the object 10 to the verification server 5. In response to this, the verification server 5 verifies an additional verification parameter stored in advance associated with the ID of the object 10 and a true eigenvalue when acquired along the additional verification parameter. Send to. The verification device 2 may compare and determine the value acquired according to the additional verification parameter and the true eigenvalue in the same manner as in step S306, and proceed with the subsequent processing.

In the present embodiment, the number of verifications is two, but the number of verifications is not limited to this, and the number of verifications can be increased or the number of verifications can be one.
Furthermore, among the plurality of verifications specified by the verification parameter 13, some verifications selected on the verification device 2 side may be performed. The verification selection method and the like can be stored in the storage unit 202 of the verification apparatus 2 and performed in accordance therewith. For example, in the verification parameter 13 shown in FIG. 3, it can be determined that only a predetermined verification (verifyID) verification is performed.

  Further, in this embodiment, only when it is determined to be “true” in all the verifications performed, the authenticity determination is OK, but the example of the security policy is not limited to this. Hereinafter, a second embodiment of the present invention will be described.

[Second Embodiment]
FIG. 12 is a flowchart showing an overall flow of the authentication verifying process according to the second embodiment. The second embodiment differs from the first embodiment in that the first embodiment needs to succeed in all the verifications that have been performed in order for the object 10 to be a genuine product. While it is determined that the object 10 is not a genuine product at the time of the failure, in the second embodiment, all verifications are performed regardless of the success or failure of the verification, and predetermined (not all) predetermined If the number of times is successfully verified, it is determined that the object 10 is a genuine product. That is, if the verification is successful a predetermined number of times, the object 10 is regarded as a regular product even if other verifications have failed.

With reference to FIG. 12 etc., the flow of the authenticity verification process of 2nd Embodiment is demonstrated.
The flow from reading the verification parameter 13 to performing the verification process of the object 10 (steps S401 to S403) is the same as that of the first embodiment. The processing described with reference to FIGS. 10 and 11 is performed in the same manner, and the verification apparatus 2 acquires the authenticity of the object 10 as a verification result and stores it in a RAM or the like.

In the second embodiment, the verification apparatus 2 subsequently determines whether or not all the verifications for the number of verifications have been completed. If all the verifications have not been completed (step S404; No), the process proceeds to step S403. Migrate and perform the next verification process.
After completing the verification process for the number of verifications (step S404: Yes), the verification apparatus 2 determines whether the verification result for the predetermined number of times is “true”. If the predetermined number of verification results are “true” (step S405: Yes), it is determined that the object 10 is a genuine product (step S406), and otherwise (step S405: No), the object 10 Is not a genuine product (step S407). For example, if verification is performed five times, and if the verification result is “true” three times, the object 10 is a genuine product, and if the verification result is “true” is less than three times, the target 10 Is not genuine.

  The above predetermined number of times can be determined in various ways, and can be specified by the verification parameter 13 or can be set and stored by the verification device 2.

  Also in the second embodiment, the same effect as in the first embodiment can be obtained. Furthermore, it is possible to avoid an erroneous determination that is immediately determined not to be a genuine product when the verification result becomes “false” at a certain verification time due to scratches or the like of the object 10 even though the product is a genuine product.

  Similarly to the above, after performing some verifications selected by the verification device 2 among the verifications specified by the verification parameter 13, the above-described procedure results in a “true” verification result. ”, The object 10 may be determined to be a genuine product.

Furthermore, it is essential that the verification result is “true” for the predetermined verification, the verification result is “true” for the predetermined verification, and the verification result for the predetermined number of times is “true”. You may make it determine the thing 10 as a regular article.
The predetermined verification can be specified by, for example, the verification parameter 13. Or you may make it designate on the verification apparatus 2 side. In this case, for the verification times (verifyID) and the verification method (method) in the verification parameter 13 of FIG. 3, a specific one that requires the verification result to be “true” is determined in advance, and the storage unit 202 of the verification apparatus 2. Can be stored and used for determination.

  The preferred embodiments of the present invention have been described above, but the present invention is not limited to the above-described embodiments. It will be apparent to those skilled in the art that various changes or modifications can be conceived within the scope of the technical idea disclosed in the present application, and these are naturally within the technical scope of the present invention. Understood.

1. Authentic verification system 2 ... Verification devices 3, 5 ... Verification servers 4, 6 ... Network 10, 10A, 10B ... Object 11 ... Base materials 12a-12g ... Reading range 13, 13a, 13b ... Verification parameter 20 ... Reader 21 ... Verification information acquisition device 22 ... .... Physical feature reader

Claims (24)

An authenticity verification device for verifying the authenticity of an object,
Verification parameter acquisition means for acquiring verification parameters for the object;
Authenticity determination means for determining the authenticity of the object by comparing the eigenvalue acquired based on the physical characteristic unique to the object and a true eigenvalue calculated in advance according to the acquired verification parameter;
An authenticity verification device comprising: The verification parameter acquisition means acquires a plurality of different verification parameters for the object,
The authenticity determining means determines authenticity of the object by comparing each of a plurality of eigenvalues acquired based on the physical characteristics and a plurality of true eigenvalues according to a plurality of different verification parameters. Item 1. The authenticity verification device according to item 1.   3. The authenticity according to claim 2, wherein the authenticity determination unit determines that the object is true when a predetermined number of eigenvalues out of all of the plurality of eigenvalues match the true eigenvalue. Verification device.   4. The authenticity determining means determines that the object is not true when a predetermined eigenvalue among the plurality of eigenvalues does not match the true eigenvalue. Authenticity verification device.   The authenticity verification device according to claim 1, wherein the verification parameter includes designation of a method for reading a physical characteristic of the object.   6. The authenticity verification apparatus according to claim 1, wherein the verification parameter includes designation of a calculation method for calculating the eigenvalue from the physical feature.   The authenticity verification device according to claim 1, wherein the verification parameter includes designation of an inquiry destination of the true eigenvalue.   The verification parameter acquisition means is stored in a coded and printed verification parameter, the verification parameter stored in a memory attached to the object, or a server connected to the authenticity verification device. 8. The authenticity verification device according to claim 1, wherein the verification parameter is acquired. Inherent physical characteristics,
A verification parameter for determining authenticity by comparing the eigenvalue acquired on the basis of the intrinsic physical characteristic with the true eigenvalue calculated in advance by the authenticity verification device;
An authenticity verification object characterized by comprising:   The authenticity verification device includes a plurality of different verification parameters for determining authenticity by comparing each of a plurality of eigenvalues acquired based on the physical characteristics and a plurality of true eigenvalues. 9. The object of authenticity verification according to 9.   The authenticity verification object according to claim 9 or 10, wherein the verification parameter includes designation of a reading method of the physical feature of the object.   The authenticity verification object according to any one of claims 9 to 11, wherein the verification parameter includes designation of a calculation method for calculating the eigenvalue from the physical feature.   The authenticity verification object according to any one of claims 9 to 12, wherein the verification parameter includes designation of an inquiry destination of the true eigenvalue.   14. The verification parameter according to any one of claims 9 to 13, wherein the verification parameter is encoded and printed, or is stored in a memory attached to an authentic verification object. Authentic verification object. An authenticity verification method for verifying the authenticity of an object,
The authenticity verification device
A verification parameter acquisition step of acquiring a verification parameter for the object;
An authenticity determination step of determining the authenticity of the object by comparing the eigenvalue acquired based on the physical characteristic specific to the object and a true eigenvalue calculated in advance according to the acquired verification parameter;
The authenticity verification method characterized by performing. In the verification parameter acquisition step, a plurality of different verification parameters for the object are acquired,
The authenticity determination step includes determining the authenticity of the object by comparing each of a plurality of eigenvalues acquired based on the physical characteristics and a plurality of true eigenvalues according to a plurality of different verification parameters. Item 15. The authentication method according to Item 15.   The authenticity according to claim 16, wherein in the authenticity determination step, the object is determined to be true when a predetermined number of eigenvalues among the plurality of eigenvalues coincide with the true eigenvalue. Method of verification.   18. The authenticity determining step determines that the object is not true when a predetermined eigenvalue of the plurality of eigenvalues does not match the true eigenvalue. Authenticity verification method.   19. The authenticity verification method according to any one of claims 15 to 18, wherein the verification parameter includes designation of a method for reading a physical characteristic of the object.   20. The authenticity verification method according to claim 15, wherein the verification parameter includes designation of a calculation method for calculating the eigenvalue from the physical feature.   21. The authenticity verification method according to claim 15, wherein the verification parameter includes designation of an inquiry destination of the true eigenvalue.   In the verification parameter acquisition step, the verification parameter encoded and printed, the verification parameter stored in a memory attached to the object, or the server connected to the authenticity verification device is stored. The authenticity verification method according to any one of claims 15 to 21, wherein the verification parameter is acquired.   The program for functioning a computer as an authenticity verification apparatus in any one of Claims 1-8.   A storage medium storing a program for causing a computer to function as the authenticity verification device according to any one of claims 1 to 8.

Images