KR100701103B1 - System for tracking and forgery detection of products with built-in security information-preservable device and method therefor - Google Patents

Abstract

Disclosed are a method for tracking and duplicating a product using an embedded security information device, and a device thereof. The present invention records information such as serial number, amount, date of issue and expiration date of a product on a product having a built-in security information device including a contact security information device and a contactless security information device and encrypts it with a public key of a legal authority. By storing a ciphertext, the authority having legal authority in the environment where the product is freely used understands the distribution flow of the product with the built-in security information device so that the owner of the device does not expose the built-in security information. A method and apparatus capable of identifying illegal copying of a product with a device.

Embedded security information device, invisible tracking, piracy

Description

System for tracking and forgery detection of products with built-in security information-preservable device and method therefor}

1 is a view showing the configuration of an embodiment of a conventional read-only contactless security information system,

2 is a diagram illustrating an embodiment of a distribution system for a product including a built-in security information device according to the present invention;

3 is an embodiment of a data structure stored in a database server;

4 is a diagram showing the configuration of an embodiment of a built-in security information device according to the present invention;

5 is a flowchart illustrating an embodiment of a method of setting an initial value for invisible tracking and piracy identification for a product having a built-in security information device according to the present invention;

6 illustrates an invisible tracking method for a product having a built-in security information device according to the present invention, and

7 is a flowchart illustrating a method for identifying an illegal copy of a product having a built-in security information device according to the present invention.

The present invention relates to a security information device and a method for identifying whether a distribution path of a product having a security information device is tracked and duplicated, and more particularly, to a product having a security information device including a contact and a contactless security information area. It relates to a method for tracking invisible distribution channels and determining whether or not to replicate.

In a system using a conventional read-only contactless security information device, the contactless security information device maintains a unique serial number assigned in advance, and then transmits the serial number at the request of the contactless security information device reader. Consists of a system that sends the serial number to a host computer that can verify the serial number of the product and is notified of the validity of the serial number.

1 is a diagram showing the configuration of an embodiment of a conventional read-only contactless security information system.

Referring to FIG. 1, a product 100 having a read-only contactless security information device includes a contactless security information device 102 having a serial number for proving uniqueness of the product. The contactless security information device reader 110 provided in a financial institution, a store, etc. receives a serial number from the contactless security information device 102 included in the product, and manages the host computer 120 for serial number management operated by a government agency or an issuer. Send the serial number received to the) to check its validity. Such a conventional read-only non-contact security information system has an advantage of preventing illegal copying crimes using various copying equipment such as color copying machines and computer scanners.

However, the enhanced security information system should be able to identify not only illegal copies using various copying equipment such as color copiers and computer scanners, but also illegal copy products with contactless security information devices with the same serial number, and have access to contactless devices. Only security information device readers should have access control that reveals their serial number.

However, the conventional system using a read-only non-contact security information device simply queries the host computer with the serial number of the non-contact security information device to confirm the validity of the serial number. Therefore, the system does not identify the counterfeit product forging the same serial number as the original. There is a problem.

In addition, the conventional product with a built-in read-only contactless security information device does not have an access control function for a contactless security information device reader that wants to read its serial number. Reveal the number. This has the problem of providing a basis for the illegal eavesdropper to grasp how much product the owner of the product embedded with the contactless security information device owns.

An object of the present invention is to provide a method of tracking a distribution path for a product having a built-in security information device and easily identifying whether a product is duplicated.

Another object of the present invention is to provide a security information device embedded in a product that can track a distribution path for a product and easily grasp whether or not the product is duplicated.

In order to achieve the above technical problem, an embodiment of a security information device according to the present invention, in a security information device that is built in the product to communicate with the contact terminal and the contactless terminal, and communicates with the contact terminal Contact security information means for storing product-specific information, including product serial number, read-only; And non-contact security information means for storing security information including the product unique information, the unique number of the contactless terminal, and the number of write operations, and determining an access right to the security information of the contactless terminal based on the product unique information. It includes;

In order to achieve the above technical problem, an embodiment of a product tracking method incorporating a security information device according to the present invention includes a security information device including a contact security information means and a contactless security information means. A tracking method, comprising: (a) reading encrypted security information from said contactless security information means; (b) decrypting the security information to obtain a serial number of a product and a value of the number of times of writing to the contactless security information means; (c) a database server storing product specific information including a serial number of a product, a unique number of a terminal performing a read / write to a security information means built into the product, and a number of times of writing to the security information device; Transmitting a serial number of the obtained product; And (d) receiving a terminal information list corresponding to the serial number of the product and the number of write operations from the database server.

In order to achieve the above technical problem, an embodiment of the illegal copy identification method of the product according to the present invention identifies a illegal copy of a product having a security information device including a contact security information means and a contactless security information means. A method comprising the steps of: (a) reading product unique information including a serial number of a product stored in said contact security information means; (b) acquiring access rights to the contactless security information means based on the product unique information; (c) obtaining the number of times of writing from said contactless security information means to said contactless security information means, if said access right is granted; And (d) comparing the number of writes corresponding to the serial number of the product stored in a predetermined database server with the number of writes obtained from the contactless security information means to determine whether the product is duplicated.

In this way, the invisible tracking of the product and whether or not the illegal copy of the product can be easily identified.

2 is a diagram illustrating an embodiment of a distribution system for a product including a built-in security information device according to the present invention.

Referring to FIG. 2, the distribution system includes a product 240 having a legal authority 200, a database server 210, an issuer 220, a distribution point 230, 235, and a security information device 242. .

Legal authority 200 is the signature value of the issuer 220 for product initial information and product initial information, including product serial number, amount, date of issue, and expiration date, without being visible to the owner of the product. Determining, and refers to the authority having the legal authority to determine the distribution path and illegal copy of the product from the database server 210.

The product 240 having the embedded security information device 242 according to the present invention uses the public key of the legal authority 200, product initial information and product initial information including serial number, amount, issue date, and expiration date. The signature value of the issuing authority 220 is encrypted and stored in the first information area of the contactless embedded security information device 242. Therefore, even if the contactless security information device reader reads the first information area of the contactless embedded security information device using RF communication, the read information cannot be decrypted, and only the legal authority 200 restores the information read as its private key. can do.

The database server 210 sorts and maintains the serial number of the product and the main data associated with the serial number according to the serial number, and determines whether the serial number is illegally copied if necessary.

3 is an embodiment of a data structure stored in a database server. Referring to FIG. 3, the data stored in the database 300 includes a serial number 305, an amount 310, an issue date 315, an effective authority 320, a contactless read / write terminal unique number 325, and a contactless type. The write operation counter 330 and the set time 335.

There are three cases in which the database server 210 performs an operation.

First, as an initialization operation, the issuing organization 220 first displays data on the serial number, the amount of money, the issue date, the expiration date, the issuer's contactless read / write terminal unique number, and the contactless write operation counter (initial value: 1). It is time to send an initialization request. When the database server 210 receives the initialization request from the issuer 220, the received product serial number, amount, issue date, validity agency, issuer contactless read / write terminal unique number, and contactless write operation counter ('1'). ), Etc. are stored in the database and the set time is saved as the current time.

Second, as an operation supporting tracking of the legal authority 200, the legal authority 200 sends a serial number, a contactless read / write terminal unique number, and a contactless write operation counter value to store a predetermined value stored in the database server 210. It's time to ask for information. At this time, the database server 210 transmits the contactless read / write terminal unique number list and the contactless write operation counter value list stored in association with the serial number received from the legal authority 200 to the legal authority 200. .

Third, as an operation for supporting illegal copy identification of the distribution points 230 and 235, the distribution points 230 and 235 send a serial number, a contactless read / write terminal unique number, and a contactless write operation counter value to inquire whether the copy is illegal. At this time, the database server 210 compares the contactless write operation counter value stored in association with the serial numbers received from the distribution points 230 and 235 and the contactless write operation counter value received from the distribution point to determine whether to be illegal copying, and to determine the illegal copy. Send the result to the distribution point.

The issuer 220 refers to an organization that assigns a serial number, an amount of money, an issue date, an effective authority, and a signature value to a product, and stores the assigned values in the contact security information device 242. In addition, the issuing agency 220 may display the product initial information including the serial number, the amount, the issue date, and the expiration date stored in the contact security information device 242 and the signature value of the product initial information. Encrypted with a public key and stored in the first information area of the contactless security information device 242 embedded in the product using the contactless read / write terminal of the issuing organization 220 itself, and the contactless read / write terminal of the issuer 220 (222) A unique number, a contactless write operation counter initial value ('1'), and a random number are stored in the second information area of the contactless security information device 242 embedded in the product. Since the issuer 220 calculates a serial number, an amount of money, an issue date, and a signature value for a valid authority using its signature secret key, the issuer 220 discloses a public key for signature verification for verifying a signature value of a corresponding product.

Distribution points 230 and 235 refer to locations having authorized contact readers 232 and 237 and contactless read / write terminals 234 and 239. For example, when the application form of the product 240 having the built-in security information device 242 according to the present invention is a personal identification of an enterprise or a public office, the entrance of each building provided with a contact reader and a contactless read / write terminal is Distribution points (230,235). In addition, when the built-in security information device 242 according to the present invention is utilized in financial activities such as banknotes, securities, and credit cards, general stores equipped with a contact reader and a contactless read / write terminal are provided with distribution points 230 and 235. And it is to check the integrity and illegal copy of the amount of money written in the product 240 has passed through the embedded security information device 242.

Authorized contact readers 232 and 237 held by distribution points 230 and 235 may obtain from the product 240 the issuer's signature value for product initial information and product initial information, including the serial number, amount, date of issue and expiration date. Read. If the issuer's signature is verified to be a legitimate value, the serial number, amount, issue date, and validity of the issuer are verified.

Then, the authorized contactless read / write terminals 234,239 possessed by the distribution points 230 and 235 are the contactless read / write terminals of the distribution point just passed before being stored in the second information area of the contactless security information device of the product 240. It reads the unique number, the counter information of the contactless write operation, and the random number.

In addition, the contactless read / write terminals 234 and 239 possessed by the distribution points 230 and 235 may display their own contactless read / write terminal unique numbers, contactless write operation counter values, and random numbers generated by the contactless second information area of the contactless security information device. The first information area of the contactless security information device, wherein the cipher text is encrypted by encrypting the serial number, the amount, the issue date, the expiration date, and the signature value of the issuer with the public key of the legal authority 200. And update the serial number, its own contactless read / write terminal unique number and the counter value of the contactless write operation to the database server 210 to inquire whether the product is illegally copied.

The built-in security information device 242 collectively refers to the security information information of the contact security information device and the contactless security information device, the contact security information device does not allow a write operation after the initial value setting, only read by the contact reader A read-only memory that permits only operation, a contactless security information device is a device that combines a read / write memory, a random number generation, a hash function, a hash value comparison function, and a device capable of RF communication. Say. The contact memory stores the product's serial number, amount, date of issue, expiration date and signature.

Invisible tracking in the present invention is recorded in the contactless security information device through RF communication even if the authority having the legal authority to track the product with the embedded security information device is not recognized by the owner of the product with the embedded security information device. It refers to the serial number, amount, issue date, expiration date, and signature value of the issuer by receiving the cipher text, and is informed of the distribution route of the product in real time from the database server.

In addition, in the present invention, piracy identification means that a pirated product that perfectly copies stored information such as serial number, amount, issue date and expiration date possessed by a product having a normal embedded security information device is distributed. The database server recognizes that a product with a number is illegally copied and notifies the distribution point in real time.

4 is a diagram illustrating a configuration of an embodiment of a built-in security information device according to the present invention.

Referring to FIG. 4, the embedded security information device 400 is largely composed of a contactless security information device and a contact security information device. The non-contact security information device includes a first information area 405 and a second information area 410.

The contact security information device 415 stores the serial number, the amount of money, the issue date, the expiration date, and the signature value of the issuer.

The first information area 405 of the contactless security information device includes an issuer 220 for product initial information and product initial information including a serial number, an amount of money, an issue date, and an expiration date stored in the contact security information device 415. A cipher text encrypted with the public key of the legal authority 200 is stored, and the second information area 410 stores a unique number of a contactless read / write terminal which has finally performed a write operation to a contactless security information device. The write operation counter value and the random number generated by the contactless read / write terminal which finally performed the write operation to the contactless security information device are stored.

The public key operation algorithm used in the product having the embedded security information device 400 according to the present invention uses the E1 Gamal algorithm, which is one of the well-known methods. The E1 Gamal algorithm is an algorithm that can recover plain text using a separate cryptographic factor without knowing the secret key. There are seven parameters used in the E1 Gamal algorithm, of which the public parameters are generator g, public key y, first ciphertext a, and second ciphertext b. The private parameters are a private key x, a plain text message m, and an encryption factor r.

The encryption algorithm E1 Gamal described herein is one embodiment, and the present invention can be implemented through other conventional encryption algorithms. First, the encryption and decryption of the E1 Gamal algorithm will be described.

[E1 Gamal Algorithm Encryption Behavior]

x: self-generated where cryptographic operations are performed as secret keys

r: self-generated where cryptographically acts as a cryptographic factor

y = g ^x : Exponent secret key in constructor as public key

a = g ^r : exponential power of the cryptographic factor in the constructor as the first ciphertext

b = m · y ^r : The second ciphertext multiplied by the plaintext message multiplied by the cryptographic factor exponent of the public key.

[E1 Gamal Algorithm Decoding Using Secret Key]

b = m-y ^r

m = b / y ^r = b / (g ^x ) ^r = b / (g ^r ) ^x = b / a ^x

That is, a and b are publicly available, and if ^x is known, a ^x can be obtained, so m can be restored.

[E1 Gamal Algorithm Decoding Using Password Factors]

b = m-y ^r

m = b / y ^r

That is, since b and y are publicly known and y ^r can be obtained by knowing the cryptographic factor r, m can be restored.

FIG. 5 is a flowchart illustrating an embodiment of a method of setting an initial value for invisible tracking and illegal copy identification for a product having a built-in security information device according to the present invention.

[Initial value setting of the read-only contact security information device 415 of the product] (S500, S505)

: 일련번호, 금액, 발행일자, 유효기간 및 발행기관의 서명값.

: Serial number, amount, issue date, expiration date and signature of the issuer.

Where S is the serial number, || is the concatenation, den is the denomination, DoI is the Date of Issue, VT is the Valid Through, and Σ is the signature value ( signature) (Σ = Sig (SK _B , [S∥den], Sig is the signature function, SK _I is the issuer signature key).

[Initial value of the first information area 405 of the non-contact security information device of the product] (S530, S535)

C: Public authority ciphertext of legal authority for serial number, amount, issue date, expiration date and signature value of issuer 220

C = Enc (PuK _L , [Σ∥S∥den], [ID _r ∥count∥r])

Here, Enc is an encryption function, PuK _L is a public key of the legal authority 200, ID _r is a contactless read / write terminal ID, and count is a contactless write operation counter. (counter) and r are random numbers.

[Initial value of the second information area 410 of the non-contact security information device of the product] (S510, S515)

ID _T ∥count∥r: Contactless read / write terminal unique number, contactless write operation counter and random number

[Initial value of the database server 210] (S520, S525)

S: Serial number sent by the issuer 220 for database initialization

den: Amount information transmitted by the issuer 220 for database initialization

DoI: Issue date sent by the issuer 220 to initialize the database

VT: Effective authority that issuing agency 220 transmits for database initialization

ID _T : Issuer's contactless read / write terminal's unique number sent by the issuer 220 for database initialization

count: Initial value 1 issued by the issuer 220 for database initialization.

T: Database initialization setup time (year / month / day / hour / minute / second)

The right to read and write the information of the contact security information device 415 and the storage information of the first information area 405 and the second information area 410 of the contactless security information device according to the present invention is as follows.

[Information of the contact security information device 415]

Read: Distribution points (230,235) and issuers (220) with licensed contact readers

Write: Allow only one time to issuer 220 storing serial number, amount, date of issue, expiration date and signature value (change of stored information of contact security information device is not allowed after setting initial value once)

[First Information Area 405 of Contactless Security Information Device]

Read: All Contactless Security Information Readers

Write: Distribution points (230,235) and issuers (220) with licensed contact readers

The distribution point and the issuer who read the information of the contact security information device may perform the write operation by using the hashed value of the information of the contact security information device 415 as a shared key for access control. 1 The information stored in the information area 405 is the product's initial information including the serial number, amount, issue date, and expiration date of the product and the signature value of the issuer for the product initial information. The ciphertext encrypted with the public key of 200) is updated.

[Second Information Area 410 of Contactless Security Information Device]

Read: Distribution points (230,235) and period of issue (220) with licensed contact readers

The distribution points 230 and 235 and the issuing authority 220 which read the information of the contact security information device 415 perform a write operation using the hashed value of the information of the contact security information device as a shared key for access control.

Write: Distribution points (230,235) and issuers (220) with licensed contact readers

The distribution point and the issuer who read the information of the contact security information device 415 can perform a write operation by using the hashed value of the information of the contact security information device as a shared key for access control. 2 The information stored in the information area 410 is updated with a unique number of the contactless read / write terminals 234,239 of the distribution points 230 and 235, a contactless write operation counter, and a random number generated by the contactless read / write terminal.

FIG. 6 is a diagram illustrating a method for tracking invisible scars for a product having a built-in security information device according to the present invention.

Invisible tracking in accordance with the present invention is to know whether the legal authority (20 million owners do not know whether the product is owned, serial number, amount, issue date and expiration date, whether illegal copying and distribution flow.

Thus, the product may only respond to legal authority 200 or all contactless security information device readers with information about their serial number, amount, date of issue and expiration date stored in the contactless security information device. Only the institution 200 should be stored as a cipher text so that it can be decrypted.

In the invisible tracking method according to the present invention, the contactless security information device of the product responds to the information stored in its first information area 405 at the request of all contactless security information device readers, but the disclosure of the legal authority 200 By responding with the contents encrypted with the key, only the legal authority 200 having the private key corresponding to the public key can decrypt the serial number, the amount, the issue date, and the expiration date through the wireless signal (S600, S605).

In other words, when associating the cipher text of the first information area of the contactless security information device shown in FIG. 4 with the E1 Gamal algorithm, the encryption key corresponds to PuK _L and the plain text message corresponds to S ∥den∥DoI∥. VT ∥ Σ, and corresponding to the cipher factor is ID _T ∥count ∥ r. Therefore, if the legal authority 200 has the decryption key, it is possible to decrypt the cipher text stored in the first information area 405 of the contactless security information device.

However, the cipher text of the first information area 405 of the contactless security information device can be decrypted even if the encryption factor is known, and ID _T ∥count ∥r corresponding to the encryption factor is the second information area of the contactless security information device ( Because it is stored in plain text at 410, the contents of the second information area 410 of the contactless security information device should not be responsive to any contactless security information device reader. Therefore, it is preferable to limit the read / write authority of the second information area 410 of the contactless security information device to distribution points 230 and 235 and issuer 220 having a contact reader authorized.

The information decrypted from the radio wave by the legal authority 200 should be the same as the information of the contact security information device 415 of the product. Accordingly, the legal authority 200 reads the contents of the second information area of the contactless security information device by hashing the decrypted information and receiving access permission to the second information area of the contactless security information device (S610). Then, the legal authority 200 transmits the serial number of the product, the unique number of the contactless read / write terminal which has finally performed the write operation to the contactless security information device, and the contactless write operation counter value to the database server 210. Request the distribution flow and illegal copy related to the product (S615, S620, S625).

At this time, it is assumed that the legal authority 200 and the database server 210 can communicate in a secure channel. The database server 210 responds to the legal authority 200 with a list of a contactless read / write terminal unique number and a contactless write operation counter value list that read / write the contactless security information device on the product, and also receives the received contactless contact. By comparing the write operation counter value with the non-contact write operation counter value held, in other cases, it is determined that illegal copy is being distributed, and the result is returned to the legal authority 200, whereby the legal authority is invisible in real time about the product. Enable tracing.

7 is a flowchart illustrating a method for identifying an illegal copy of a product having a built-in security information device according to the present invention.

The illegal copy identification according to the present invention is for verifying whether the product is illegally copied at the distribution point 230 and the integrity of the stored information. The first operation in the distribution point 230 is the contact reader 232, the initial product information including the serial number, the amount, the issue date, the expiration date and the first security information stored in the contact security information device of the product The operation of reading the signature value of the issuer 220 for the initial information. The contact reader 232 is assumed to be an authorized device managed by the legal authority 200. As shown in FIG. 4, the signature value read by the distribution point from the contact security information device is Sig ( SKI , [ S || den || DoI || VT ]), and is restored to the public key for signature verification of the issuer 220. Distribution point 230 is a serial number, amount, issue date and expiration date S || den || DoI || You can get VT . Thus, the distribution point reads S || den || DoI || S || obtained by restoring the signature value of the VT and the issuer 220. den || DoI || If the VTs are the same, the serial number, amount, date of issue and expiration date of the product are normal values issued by the issuer.

After integrity verification, the distribution point reads information stored in the second information area 410 of the contactless security information device to identify whether the product is illegally copied. In order to read the contents of the second information area 410 of the contactless security information device, it is necessary to know a shared key which may have read permission. The shared key may include a serial number, an amount of money, and a value read from the contact security information device 415. The hash value of the issuer 220 for the product initial information including the issue date, the expiration date, and the product initial information is hashed.

Since the information of the contact security information device 415 is an immutable value after being set by the issuing authority, its hash value can also serve as an immutable shared key, and therefore, the write right of the first information area 405 of the contactless security information device. And a shared key for read / write authority of the second information area 410 of the contactless security information device. The information read by the distribution point 230 from the second information area 410 of the contactless security information device is a unique number of the contactless read / write terminal, a contactless write operation counter value, and a random number generated by the contactless read / write terminal. 2 The information read from the information area 410 is the IDT || count || r , decrypts the cipher text of the first information area 405 of the contactless security information device and compares the decrypted plain text with the stored information of the contact security information device, thereby issuing the serial number, amount, and issue of the product. The integrity of the date and expiration date is again verified.

The distribution point 230 is a serial number read from the contact security information device 415 and a contactless read / write terminal unique number read from the second information area 410 of the contactless security information device to inquire whether the corresponding product is illegally copied. And the contactless write operation counter value to the database server 210, and the database server 210 receiving the same compares the received contactless write operation counter value with the held contactless write operation counter value and, in other cases, an illegal copy is obtained. If it is determined that it is being distributed and the same case, it is determined that the normal product and the result is returned to the distribution point 230.

At this time, it is assumed that the distribution point 230 and the database server 210 can communicate in a secure channel. When the result of the normal product is returned, the distribution point 9230 transmits the serial number of the product, the unique number of its contactless read / write terminal, and the increased contactless write operation counter value to the database server 210 to transmit the database associated with the serial number. To update the database server, the database server 210 updates the database according to the request.

And the distribution point 230 is the second information of the contactless security information device of the normal product of the unique number of its own contactless read / write terminal, the increased contactless write operation counter value and the random number generated by the contactless read / write terminal The product serial number, amount, issue date, expiration date and the serial number of the product, stored in the area 410 and also stored in the second information area 410 of the contactless security information device of the The issuer's signature value for the amount, issue date, and expiration date is again encrypted by the public authority of the legal authority 200, and the recalculated ciphertext is stored in the first information area 405 of the contactless security information device of the normal product. do.

This counter value comparison method operates as follows. If the database of the database server 210 associated with any banknote currently in circulation is a serial number of 1001, an amount of 10,000 won, a contactless read / write terminal unique number AAA, and a contactless write operation counter value 7, time 200409081730, normal distribution In the process, when the owner goes to store B and presents the bill, store B receives the normal bill from the database server 210, and then transmits the serial number 1001 to the database server 210, and the unique contact B / B terminal number BBB. And requesting a database update by sending a contactless write operation counter value of 8, and in addition, the shop B stores its contactless read / write terminal unique number BBB in the second information area 410 of the contactless security information device of the product, and increases the contactless write. Store the action counter value 8 and a random number; And it stores the public key cipher text of a legal authority institution 200 recalculated by the first information area 405 of the non-contact information security apparatus of the products.

Therefore, the database server 210 maintains the updated information, and the normal product maintains the newly stored cipher text, the new contactless read / write terminal unique number, the increased contactless write operation counter value, and the new random number. In this case, since the counter value is requested to be compared with the contactless read / write terminal identification number AAA and the contactless write operation counter value 7, which is information before the update, the database server 210 determines whether the product having the serial number is illegally copied. You can judge.

The counter value comparison method can detect the simultaneous distribution of normal and counterfeit products, so that even if the counterfeiters copy the products according to the present invention in the same way as the original, the counterfeit products cannot be used simultaneously. There is an advantage that can reduce the effect of piracy.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

The present invention identifies the distribution of counterfeit goods and supports product flow tracking by legal authorities. Looking at the effect according to the present invention in detail.                     

First, the information transmitted by radio waves in the embedded security information device according to the present invention is stored as an encrypted text encrypted with the public key of the legal authority. Therefore, only the legal authority can decipher the cipher text and only the legal authority can track the flow of distribution for the product with the embedded security information device.

Second, unlike a product having a conventional read-only contactless security information device that transmits the serial number, amount, issue date and expiration date of the product in plain text to any contactless security information device reader, the embedded security information device according to the present invention. A product with is a ciphertext in which information transmitted over radio waves is encrypted with the public key of the legal authority. Therefore, even if any contactless security information device reader receives the cipher text, it cannot determine what type of product it is and makes it impossible to grasp the value of the product possessed by the owner of the product.

Third, the illegal copy identification method for a product having a built-in security information device according to the present invention can find out the simultaneous distribution of a normal product and a pirated product.

Finally, the present invention provides the legal authority with the ability to grasp the distribution flow for the owner's products without the owner's knowledge, and also provides the ability to identify the distribution of counterfeit products. It has the effect of tracking and defending the violations of the national distribution order resulting from illegal transactions or illegal distribution of products.

Claims (15)

A security information device embedded in a product for communicating with a contact terminal and a contactless terminal, A contact security information means in communication with said contact terminal for storing product-specific information including a product serial number for read-only; And Contactless security information means for storing security information including the product unique information, the unique number of the contactless terminal and the number of write operations, and determining an access right to the security information of the contactless terminal based on the product unique information; Security information device comprising a. The method of claim 1, And the product specific information includes product initial information including a product serial number, an amount of money, an issue date, and an expiration date, and a signature value for the product initial information. The method of claim 1, wherein the contactless security information means, The first security information encrypting the product unique information, the unique number of the contactless terminal, the number of write operations with a predetermined shared key, and second security information including the unique number of the contactless terminal, the number of write operations, and a random number. Security information device, characterized in that for storing. The method of claim 3, wherein the contactless security information means, The second security information is updated with a unique number of the contactless terminal that has performed the most recent communication and the number of times of the write operation is increased by one, and the product specific information is included by using the updated second security information as an encryption factor. And encrypting the first security information. The method of claim 1, wherein the contactless security information means, The access information of the contactless terminal using the hash value of the unique product information as a shared key, characterized in that the security information device. In the tracking method of a product containing a security information device comprising a contact security information means and a contactless security information means, (a) reading encrypted security information from said contactless security information means; (b) decrypting the security information to obtain a serial number of a product and a value of the number of times of writing to the contactless security information means; (c) a database server storing product specific information including a serial number of a product, a unique number of a terminal performing a read / write to a security information means built into the product, and a number of times of writing to the security information device; Transmitting a serial number of the obtained product; And (d) receiving a terminal information list corresponding to the serial number of the product and the number of write operations from the database server; tracking method of a product having a security information device embedded therein. The method of claim 6, (e) detecting that the product has been duplicated if the number of write operations received from the database server and the number of write operations obtained by decrypting the security information are different from each other. Tracking method. According to claim 6, wherein step (b), (b1) restoring product specific information including a serial number of a product from the security information using a predetermined encryption restoration key; And (b2) determining an access right to the write operation count information of the contactless security information means based on the product unique information; (b3) acquiring the write operation count information if the access authority is present; and tracking the product having a security information device. According to claim 6, wherein step (b), And verifying the integrity of the security information device by comparing the product specific information restored from the security information with the product specific information stored in the contact security information means of the security information device. How to track built-in products. The method of claim 6, wherein before step (a), (a1) storing product unique information including the serial number of the product in the contact security information means as read only; (a2) storing security information including the product unique information, the unique number of the contactless terminal, and the number of write operations so that an accessible contactless terminal having access identified based on the product unique information is accessible; And (a3) storing the product unique information and the security information in a predetermined database server. What is claimed is: 1. A method of identifying illegal copying of a product incorporating a security information device comprising contact security information means and contactless security information means. (a) reading product specific information including a serial number of a product stored in said contact security information means; (b) acquiring access rights to the contactless security information means based on the product unique information; (c) obtaining the number of times of writing from said contactless security information means to said contactless security information means, if said access right is granted; And (d) comparing the number of writes corresponding to the serial number of the product stored in a predetermined database server with the number of writes obtained from the contactless security information means, and determining whether to replicate the product. How to identify piracy of a product. The method of claim 11, wherein step (b) Confirming the access right by using the hash value of the unique product information as a shared key. The method of claim 11, (e) if the product is a normal product which is not duplicated, update the terminal unique number of the contactless security information means with the unique number of the terminal communicating with the contactless security information means, and write operation stored in the contactless security information means And increasing the number of times by one. The method of claim 11, wherein step (d) (d1) the database server storing the product specific information including the serial number of the product, the unique number of the terminal which read / writes to the security information device embedded in the product, and the information on the number of times the write operation is performed on the terminal; Transmitting a serial number of a product, a unique number of the contactless terminal, and the number of times of writing to the contactless security information means; (d2) comparing the number of writes obtained by searching the database server based on the serial number of the product with the number of writes obtained from the contactless security information means; And and (d3) determining that the product is illegally copied if the comparison result of the number of times of writing is different. The method of claim 11, wherein before step (a), (a1) storing product unique information including the serial number of the product in the contact security information means as read only; (a2) storing security information including the product unique information, the unique number of the contactless terminal, and the number of write operations so that an accessible contactless terminal having access identified based on the product unique information is accessible; And (a3) storing the product unique information and the security information in a predetermined database server.

Images