KR101192972B1 - An authenti cation system for anti-forgery using the smart card chip and method of thereof - Google Patents

Abstract

PURPOSE: A forgery prevention authenticating system using a smart card chip and a method thereof are provided to perform safe interactive authentication with an authentication center without exposure of information. CONSTITUTION: A smart card chip(10) is installed in a product(A). An authentication(C) authenticates information of the smart card chip through a reader(20) of a shop host(B). The smart card chip is composed of an applet capable of performing product authentication and a file system capable of storing and managing the product, a buyer and selling information, etc. The product, a buyer, sale information, etc are stored and managed in the file system. [Reference numerals] (10) Smart card chip; (20) Reader; (A) Product; (B) Shop host; (C) Authentication center

Description

Authentication system for anti-counterfeiting using smart card chip and its method {An authenti cation system for anti-forgery using the smart card chip and method of

The present invention relates to a system and method for acknowledging a legitimate product using a smart card chip, and more particularly, to configure a JCVM file system to securely store and manage information about a product in a smart card chip. Anti-counterfeiting certification using smart card chip that prevents the production and distribution of counterfeit products at the source by enabling secure mutual authentication with the authentication center of the product through the APDU protocol without exposing stored information using the RSA encryption algorithm. A system and method thereof are provided.

Today, as buyers' desire for expensive products increases and consumption increases, more and more cases of forging and producing expensive products are increasing. In order to block the production and distribution of such counterfeit products, manufacturers that attach and manufacture techniques such as ID, hologram, or RFID TAG are increasing.

For example, the "product anti-counterfeiting method and system using RFID" developed by the patent publication 2006-0103383 is disclosed by the patent publication.

Patent Publication No. 2006-0103383, "Product anti-counterfeiting method using the RFID and its system" is a product 100, the code number management unit 310 is attached to the RFID tag (tag) 120 as shown in Figure 1 , An RFID terminal 330, and an ID terminal 300 including a network module 350, a mobile communication network 500, a manufacturing information manager 710, a distribution path manager 730, and an alert message generator 750. The product management server 700 and the mobile terminal 900 are configured to use a RFID technology that can read, modify, and update a plurality of information simultaneously to solve or actively solve various problems that the bar code technology has not overcome. By countermeasures, counterfeiting and illegal distribution of products can be prevented.

However, in the above-described Patent Publication No. 2006-0103383, "A method and system for preventing product forgery using RFID", since the RFID tag is mounted on the outside of the product, the function of the RFID is easily damaged when the tag chip of the RFID tag is arbitrarily damaged. There has been a problem that it is impossible to prevent counterfeiting and illegal distribution of desired products due to disappearance.

The present invention has been invented to solve various defects and problems caused by the conventional method for preventing forgery of products in consideration of the above circumstances, and the object thereof is to securely and efficiently store information on products by embedding a physically secure smart card in the product. The present invention provides an anti-counterfeiting authentication system and method using a smart card chip that stores and manages the data, and is equipped with a high-performance encryption algorithm to perform secure mutual authentication with an authentication center without exposing information.

Another object of the present invention is to prevent the counterfeiting and copying of expensive products by distributing the distribution and sale of the original product to prevent damage to manufacturers and consumers of the product and the authentication system using a smart card chip that can guarantee the product And a method thereof.

It is still another object of the present invention to provide an anti-counterfeiting authentication system and method using smart card chips having high economical efficiency because they can efficiently store and manage unique information on a product by using a low-cost smart card. There is.

Anti-counterfeiting authentication system using the smart card chip of the present invention for achieving the above object is a smart card chip (10) mounted in the product (A); A reader 20 of the shop host B; Characterized by the authentication center (C) having a database 30 for accepting and verifying the information of the smart card chip 10 through the reader 20.

In addition, the anti-counterfeiting authentication method using the smart card chip of the present invention is the initial authentication step of authenticating whether the product is a legitimate product before being purchased by the purchaser in the state in which the smart card chip 10 is built (step S10). Wow; Legitimacy authentication step (S20) of the product to confirm the legitimacy of the product through communication with the authentication center (C); After the purchase is made, characterized in that the information storage step (S30 step) for storing a variety of information about the purchased product.

The present invention is to embed a physically secure smart card in the product to safely and efficiently store and manage information about the product, and equipped with a high-performance encryption algorithm can perform a secure mutual authentication with the authentication center without exposing the information, In addition, by preventing the counterfeit, duplication, distribution, and sales of expensive products, the company can prevent damages to manufacturers and consumers of the products and guarantee the products, and use low-cost smart cards to protect products. The efficient storage and management of information has the special advantage of high economical efficiency.

1 is a block diagram of the anti-counterfeiting authentication system using the present invention smart card chip,
2 illustrates a smart card JCVM file system entry in accordance with the present invention.
3 is a flow chart illustrating a process of confirming the legitimacy of a product in detail according to the present invention, and storing the buyer and seller information;
4 is a flowchart illustrating an authentication process for confirming whether a legitimate product according to the present invention.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the anti-counterfeiting authentication system and method using the present invention smart card chip.

1 is a block diagram of the anti-counterfeiting authentication system using the smart card chip of the present invention, Figure 2 is a view showing a smart card JCVM file system items according to the present invention. Figure 3 is a flow chart showing the step of confirming the validity of the product in detail according to the present invention, the process of storing the buyer and seller information, Figure 4 is a flow chart showing the authentication process to confirm whether the legitimate product according to the present invention, The anti-counterfeiting authentication system using the smart card chip of the present invention includes a smart card chip (10) mounted in the product (A); A reader 20 of the shop host B; It consists of an authentication center (C) having a database 30 for acknowledging and verifying the information of the smart card chip 10 through the reader 20.

The smart card chip 10 includes an applet capable of performing product authentication; It consists of a file system where product, buyer and sales information will be stored and managed.

On the other hand, the anti-counterfeiting authentication method using the smart card chip of the present invention is the initial authentication step of authenticating whether the product is a legitimate product before the purchase is made by the buyer in the state that the smart card chip 10 is built (step S10) )Wow; Legitimacy authentication step (S20) of the product to confirm the legitimacy of the product through communication with the authentication center (C); After the purchase is made, the information storage step (S30 step) of storing a variety of information about the purchased product.

Nj)

Result) 수행하여 RSDATA Reader로 송신하는 RSDATA 송신단계와; 리더기(20)는 ShopID

Nj를 통해 결과를 획득하여 결과를 사용자에게 확인하는 결과확인단계로 이루어져 있다.The initial authentication step (S10 step) is a product according to the information request of the reader 20, the random number generation step of the product to generate its own random number Ni; An authentication acquiring step of acquiring an authentication name (LuxName) and an authentication ID (LuxID) after PIN verification of the Lux Applet; An LSC execution step of performing LSC = Ekpub (Ni || LuxName || LuxID) as a public key of the authentication center (C); An LSC transmitting step of transmitting the LSC to the reader 20; A reader random number generation step of the reader 20 generating its own random number Nj; An SDATA execution step of performing SDATA = Ekpub (Nj || ShopID) as a public key of the authentication center C with its ID, ShopID; An LSC and SDATA transmission step of transmitting the LSC and SDATA to the authentication center C; The authentication center C includes the steps of executing LSC and SDATA which perform Dkpri (LSC) and Dkpri (SDATA); An information acquisition step of acquiring Ni, Nj, LuxName, LuxID, and ShopID; Confirming the LuxName and the LuxID in the Secure DB 30; RSDAT A = ((ShopID

Nj)

Result) RSDATA transmission step of performing and transmitting to the RSDATA Reader; Reader 20 is ShopID

It consists of a result checking step of acquiring the result through Nj and confirming the result to the user.

The legitimacy authentication step of the product (step S20) includes an authentication request reception step of receiving an authentication request from the reader 20; Random number generation step of generating the random number Ni by obtaining the information of the file; An LUSDATA executing step of performing LUSDATA = Ekpub (Ni || LuxID || UserID || Sh opID) as a public key of the authentication center (C); A LUSDATA transmission step of transmitting LUS DATA to the reader 20; A reader random number generation step of the reader 20 generating its own random number Nj; Generating an SDATA; A LUSDATA and SDATA transmission step of transmitting LUSDATA and SDATA to the authentication center C; The authentication center C includes an information acquisition step of obtaining information by performing Dkpri (LUSDATA) and Dkpri (SDATA); An RSDATA transmission step of generating RSDATA by comparing the information extracted through the LUSDATA with the information in the Secure DB 30 and transmitting it to the reader 20; The reader 20 obtains the result and the user confirms the result.

The information storage step (S30 step) is an LSC transmission step of generating an LSC according to the information request of the reader 20 to transmit to the LSC Reader; A reader random number generation step of the reader 20 generating its own random number Nj; USERINFO = {UserN ame, UserID} received from the user, and SH OPINFO = {SHOPID, DATE_PUR, DATE_WARR} as SUDATA = Ekpub (N j || USERINFO || SHOPINFO} with the public key of the authentication center (C). LSC, SUDATA transmission step of transmitting SUDATA to the authentication center (C); the authentication center (C) registers in the Secure DB (30) through Dkpri (LSC) and Dkpri (SUDATA), generates RSDATA, and generates a reader (20). A result transmitting step of transmitting a result to the user; the reader 20 transmits USERINFO and SHOPIN FO to the smart card chip 10 after confirming the result acquisition; and the smart card chip 10 receives the corresponding information. It consists of an information storage step of storing the file system.

Next, the anti-counterfeiting authentication system and method using the present invention smart card chip made as described above will be described in detail as an embodiment.

3 is a diagram illustrating a smart card JCVM file system item according to the present invention. The authentication information of the product A is stored in the smart card chip 20. The smart card chip 20 stores information in a method of directly recording to Applet and a storage and management method through a file system. In the present invention, it is possible to effectively cope with the resale of a product and a change in the warranty period of the product. We designed a file structure dedicated to authentication in the smart card file system.

The file system of the smart card chip 10 is basically designed according to the ISO 7816-4 standard file structure. The corresponding file is designed as an authentication-only file structure based on the top-level file called MF. At this time, authentication information is largely classified into three types.

- Authentication Information  =

  { Luxname , LuxID , Manufacture Name , Manufacture Address  }

- User Information  =

  { User Name , User ID  }

- Shop Information  =

  { Shop ID , Date of Purchase , Data of Warrant  }

You can safely store this information. In addition, in order to block external access to the corresponding file, each file has an Access Condition. In the present invention, the basic authentication is designed to access the corresponding file only by performing authentication by verifying the applet's PIN. Secures the file itself by preventing programs other than applets from accessing the file.

Figure 4 is a flow chart showing the step of confirming the validity of the product in detail, and the process of storing the buyer and seller information according to the present invention. That is, the initial authentication step (S10 step) of initial authentication whether the product (A) is a legitimate product before the purchase is made by the buyer in the state in which the smart card chip (10) is mounted and the purchase price After the information storage step (S30 step) for storing a variety of information on the purchased product (A) is made up largely consists of two steps. In the initial authentication step (step S10), before the product A on which the smart card chip 10 is mounted is sold, that is, before the information of the buyer is recorded, the purchaser confirms that the corresponding product A is a legitimate product, not a counterfeit. Providing information to the desired user goes through the following authentication steps.

step 1: According to the information request of the reader 20, the product A generates its own random number Ni,

          After Lux Applet PIN verification, LuxName and LuxID are obtained.

          Perform LSC = Ekpub (Ni || LuxName || LuxID) with the public key of the authentication center (C).

          The LSC is then sent to the reader 20.

step 2: the reader 20 generates its own random number Nj,

        SID = Ekpub (Nj || hopID) is performed with ShopID, its ID, as the public key of the authentication center C, and LSC and SDATA are sent to the authentication center C.

step 3: The authentication center (C) performs Dkpri (LSC) and Dkpri (SDATA),

         Acquire Ni, Nj, LuxName, LuxID, ShopID,

Nj)

Result)를 수행하여 RSDATA Reader로 송신한다.Check LuxName and LuxID in Secure DB 30 and check RSDATA = ((ShopID

Nj)

Result) is sent to RSDATA Reader.

Nj를 통해 Result 획득하고 결과를 사용자에게 확인시킨다.step 4: Reader 20 is ShopID

Acquire Result through Nj and confirm the result to the user.

In the information storage step of storing information (step S30), after the initial authentication as a step of storing the user information, the store information is made at the point of sale. It should be designed so that information can be stored by the same procedure even if the product is resold to others. The authentication procedure for this is as follows.

step 1: According to the information request from the reader 20, the LSC is generated and transmitted to the LSC Reader.

step 2: the reader 20 generates its own random number Nj,

         USERINFO = {UserName, UserID} received from the user,

         SHOPINFO = {SHOPID, DATE_PUR, DATE_WARR} is generated as the public key of the authentication center C and SUDATA = Ekpub (Nj || USERINFO || SHOPINFO} is generated to send LSC and SUDATA to the authentication center C.

Step 3: The authentication center C registers in the secure DB 30 through Dkpri (LSC) and Dkpri (SUDATA), generates RSDATA, and transmits the result to the reader 20.

Step 4: After confirming the result acquisition, the reader 20 transmits USERINFO and SHOPINFO to the smart card chip.

Step 5: The smart card chip stores the information in the file system.

4 is a flowchart illustrating a process of confirming validity of a product through communication with an authentication center (C). In this authentication step, all the authentication information is stored in the smart card chip 10 mounted in the product (A), and at any time whether the corresponding product (A) is legitimate can be authenticated on the host with the store or reader attached. That's a step. At this time, the authentication information should not remain on the host. The authentication procedure for this is as follows.

step 1: Receive the authentication request from the reader 920)

         Generates random number Ni by acquiring the information in the file,

        The LUSDATA is transmitted to the reader 20 by performing LUSDATA = Ekpub (Ni || LuxID || UserID || ShopID) as the public key of the authentication center (C).

step 2: the reader 20 generates its own random number Nj,

        Create SDATA and send LUSDATA and SDATA to the authentication center (C).

step 3: The authentication center (C) performs Dkpri (LUSDATA) and Dkpri (SDATA), obtains the information, compares the information extracted through the LUSDATA and the information in the Secure DB (30), generates RSDATA reader ( 20).

step 4: The reader 20 obtains the result and confirms the result to the user.

Here, Manufacture Name represents the manufacturer name, Manufacture Address represents the manufacturer address, User Name represents the product buyer name, User ID represents the product buyer ID, Shop ID represents the product distributor ID, and Date of Purchase represents the product. The date of sale is shown and Data of Warrant is the product warranty period.

While the present invention has been described as a preferred embodiment, the present invention is not limited thereto, and various modifications can be made without departing from the gist of the invention.

10: smart card chip 20: reader
30: Database A: Product
B: Shop Host C: Certification Center

Claims (6)

A smart card chip 10 mounted in the product A; A reader 20 of the shop host B; In the anti-counterfeiting authentication system using a smart card chip consisting of an authentication center (C) having a database 30 for accepting and verifying the information of the smart card chip (10) through the reader (20);
The smart card chip 10 includes an applet capable of performing product authentication; Anti-counterfeiting authentication system using a smart card chip, characterized in that consisting of a file system to be stored and managed products, buyers and sales information. delete An initial authentication step (step S10) of authenticating whether the product is a legitimate product before the purchase is made by the buyer in a state in which the smart card chip 10 is built; Legitimacy authentication step (S20) of the product to confirm the legitimacy of the product through communication with the authentication center (C); In the anti-counterfeiting authentication method using a smart card chip consisting of an information storage step (step S30) for storing a variety of information about the purchased product after the purchase is made;
The initial authentication step (S10 step) is a product according to the information request of the reader 20, the random number generation step of the product to generate its own random number Ni; A certification acquisition step of acquiring a product name (LuxName) and a product ID (LuxID) after PIN verification of the Lux Applet; An LSC execution step of performing LSC = Ekpub (Ni || LuxName || LuxID) as a public key of the authentication center (C); An LSC transmitting step of transmitting the LSC to the reader 20; A reader random number generation step of the reader 20 generating its own random number Nj; An SDATA execution step of performing SDATA = Ekpub (Nj || ShopID) as a public key of the authentication center C with its ID, ShopID; An LSC and SDATA transmission step of transmitting the LSC and SDATA to the authentication center C; The authentication center C includes the steps of executing LSC and SDATA which perform Dkpri (LSC) and Dkpri (SDA TA); An information acquisition step of acquiring Ni, Nj, LuxName, LuxID, and ShopID; Confirming the LuxName and the LuxID in the Secure DB 30; RSDAT A = ((ShopID

Nj)

Result) RSDATA transmission step of performing and transmitting to the RSDATA Reader; Reader 20 is ShopID

Authentication method for preventing counterfeit goods using a smart card chip, characterized in that the result obtained by confirming the result to the user to obtain the result through Nj. delete [4] The method of claim 3, wherein the validity authentication step (step S20) of the product comprises: an authentication request reception step of receiving an authentication request from the reader 20; Random number generation step of generating the random number Ni by obtaining the information of the file; An LUSDATA execution step of performing LUSDATA = Ekpub (Ni | | LuxID || UserID || ShopID) as a public key of the authentication center C; A LUSDATA transmission step of transmitting LUS DATA to the reader 20; A reader random number generation step of the reader 20 generating its own random number Nj; Generating an SDATA; An LUSDA TA and an SDATA transmission step of transmitting LUSDATA and SDATA to the authentication center C; The authentication center C includes an information acquisition step of obtaining information by performing Dkpri (LUSDATA) and Dkpri (SDATA); An RSDATA transmission step of generating RSDATA by comparing the information extracted through the LUSDATA with the information in the Secure DB 30 and transmitting it to the reader 20; Anti-counterfeiting authentication method using a smart card chip, characterized in that the reader 20 is obtained by the result obtained by the user confirms the result of the result check step. The method according to claim 3, wherein the information storing step (step S30) comprises: an LSC transmitting step of generating an LSC according to an information request of the reader 20 and transmitting the LSC to the LSC reader; A reader random number generation step of the reader 20 generating its own random number Nj; USERINFO = {UserN ame, UserID} received from the user, and SHOPINFO = {SHOPID, DATE_PUR, DATE_WARR} are generated using SUDATA = Ekpub (Nj || USERINFO || SHOPINFO} with the public key of the authentication center (C) to generate LSC and SUDATA. LSC, SUDATA transmission step of transmitting to the authentication center (C); the authentication center (C) registers in the Secure DB (30) through Dkpri (LSC) and Dkpri (SUDATA), generates RSDATA to the reader 20 A result transmitting step of transmitting a result; the reader 20 transmits USERINFO and SHOPIN FO to the smart card chip 10 after confirming the result acquisition; and the smart card chip 10 stores the corresponding information. Authentication method for preventing counterfeit goods using a smart card chip, characterized in that the information storage step to store in the system.

Images