KR101527582B1 - System for verifying product genuineness using double security key and method thereof - Google Patents

Abstract

The present invention relates to a system for verifying product genuineness using a double security key, and more specifically, to a system for verifying product genuineness and a method thereof which recognize an NFC and a bar code with a terminal with a product genuineness checking application installed, check the identity with the recognized information through an identity checking server, and convey a product information and search history to a user terminal through a decoding server and an authentication server. The present invention prevents a reuse of a double security key which can check the product genuineness, provides a search history and a product information about a product after checking the identity through a MAC address of a smartphone of the user and an ID check, and can strengthen the security of the product information by having a double security key and a triple server. In addition, the present invention saves the MCA address of the smartphone of the user, ID access history, and the double security search history in a server and can prevent a terminal from repeatedly recognizing a copied or a defected double security key and prevent a search for the purpose of copying or forging the double security key.

Description

[0001] The present invention relates to a system and method for verifying authenticity using dual security keys,

The present invention relates to a validation system using a dual security key, and more particularly, to a system and method for recognizing an NFC (Near Field Communication) tag and a barcode attached to a surface of a product packaging, To a product validation system and a validation method for delivering product information and an inquiry history to a user terminal through a decryption server and an authentication server after confirming an identity at an identity verification server using a user terminal MAC address and a user ID.

A producer attaches a specific trademark to a corresponding product so that the consumer can identify the commodity of the commodity and the commodity of the other commodity. The consumer recognizes that the commodity is a commodity produced by a specific producer and purchases the commodity. Therefore, the consumer can trust the product according to the brand recognition and function as one identification mark.

Therefore, as the brand awareness leads to sales, the distribution of counterfeit goods imitating the goods and trademarks is also increasing. Because of the quality of the counterfeit product, such a counterfeit product has a low credibility of the product and the sale of the genuine product is disturbed by the consumer who believes the product.

In order to prevent the distribution of counterfeit goods, RFID (Radio Frequency IDentification) is used, which is a method of verifying authenticity using an existing barcode and a method of reading information stored in a chip wirelessly using a semiconductor chip and recording new contents have.

Particularly, RFID is a non-contact type technology, and it is capable of transmitting and receiving information, so that it can read information of many tags at the same time, and has a great recognition speed and thus has a considerable advantage in terms of work efficiency. Recently, Near Field Communication (NFC), which is a kind of RFID technology, is getting attention.

Near Field Communication (NFC) is a non-contact communication technology that uses the frequency band of 13.56 MHz as one of the technologies of radio frequency identification (RFID). It is a next-generation LAN technology that is attracting attention due to its relatively low security and relatively low price because of its short communication distance. Because it can use both data reading and writing functions, it does not need reader that is needed for general RFID use, and it is similar to conventional short distance communication technology such as Bluetooth, but it does not need to set between devices like Bluetooth.

Due to this feature of RFID technology, RFID tags or NFC tags are being applied to distribution systems for identifying fake or counterfeit goods of luxury goods such as premium wines such as whiskey, vodka, golf clubs, jewelry, bags, watches and the like.

However, even if such an anti-counterfeiting system exists, there is a problem that a consumer or a seller who understands the anti-counterfeiting system does not easily understand how to identify a counterfeit product, or an apparatus or an expensive system for discrimination is required.

In order to solve such a problem, Patent Document 1 discloses a service application for authenticating a genuine product to smart device users and allows users to access the management server through the distributed application to inquire whether or not the mainstream products are registered However, it is possible to resell NFC of a product that has already been validated by re-attaching it to a counterfeit product, and to recognize NFC of several genuine products with impure intention and manufacture replica NFC etc. .

1. Korean Patent Publication No. 10-2014-0040370

In order to solve the above-mentioned problems, the present invention provides a system and method for preventing reuse of NFC that can confirm whether a product is a genuine product, providing product inquiry and record information after identification of a user through a MAC address and ID inquiry of a user smart phone, We intend to provide a validation system that enhances the security of information.

Also, there is a need to provide a security validation validation system equipped with a double security key and a triple server.

In addition, the user smartphone MAC address and ID access record and dual security key lookup history are stored in each server so that one terminal can recognize duplicated or bad dual security keys or search for duplicate security keys for the purpose of duplication or falsification And to provide a genuine validation system capable of preventing and confirming such a problem.

According to another aspect of the present invention, there is provided a system for authenticating a dual security key using an NFC tag attached to a product, a dual security key registered in a barcode, and a validation application, An identity verification server for receiving a user terminal, the user terminal information and the recognized double security key information to identify the identity and decrypting the double security key to a decryption server, A decryption server for decrypting the duplicate security key by collating the issued encryption key, an authentication server for transmitting and storing the product information on the duplicate security key from the producer, and transmitting the product information and the inquiry history to the user terminal , When the dual security key is looked up in the user terminal, The decryption server decrypts the duplicate security key with the stored producer-generated encryption key and the received decryption key to generate an authentication key, and the authentication server sends the authentication key to the decryption server And transmits the product information and the inquiry history to the user terminal.

According to a preferred embodiment of the present invention, the identification server stores the double security key inquiry record and the user terminal information, and confirms whether the user is a legitimate user through the stored user terminal information.

As a preferred embodiment of the present invention, the terminal information is a MAC address and ID information generated at the time of subscription to the application, and the decryption server is physically separated and includes an internal and external network switching module to prevent hacking.

In a preferred embodiment of the present invention, the NFC tag and the barcode are formed of anti-reattachment stickers, and the authentication key is a product serial number.

According to another aspect of the present invention, there is provided a method for authenticating a duplicate security key, the method comprising: generating a duplicate security key including a NFC tag and a barcode; An identification step of identifying the user with the double security key information and the user terminal information; a decryption step of decrypting the double security key to generate an authentication key; And transmitting the product information and the inquiry history to the authenticated user terminal.

In a preferred embodiment of the present invention, the generating of the duplicate security key includes generating a duplicate security key including a bar code and an NFC tag in the producer terminal, transmitting the cryptographic key for the duplicate security key to the decryption server, Transmitting product information on a security key to an authentication server, and storing the encryption key information transmitted to the decryption server and the product information transmitted to the authentication server.

As a preferred embodiment of the present invention, the double security key recognition step includes a step of generating an ID by subscribing to a genuine validation application installed in a user terminal, and a step of inquiring the user terminal of the double security key do.

In a preferred embodiment of the present invention, the identification step may include transmitting the recognized double security key information and the user terminal information to the identification server, and checking whether the user is a legitimate user through the terminal information transmitted to the identification server And transmitting the generated decryption key to the decryption server.

In a preferred embodiment of the present invention, the decrypting step includes a step of decrypting the double security key with the decryption key transmitted from the ID server and the encryption key information stored in the decryption server to generate an authentication key, And transmitting the key to the authentication server.

The present invention prevents the reuse of a duplicate security key that can confirm whether a product is genuine or not, and provides an inquiry record and product information of the product after confirming the identity through the MAC address and ID information of the user smart phone, .

In addition, the double secret key of the present invention is superimposed and attached as an electromagnetic wave NFC tag 120 and an optical barcode 110, so that only the barcode is seen from the outside, Removing the bar code can damage the NFC and prevent duplication.

In addition, a double security key and a triple server can be provided to prevent intrusion or hacking from outside, thereby enhancing security.

Also, by storing the MAC address and ID access record of the user smartphone and the double security key inquiry history in each server, one terminal can recognize duplicated or bad dual security keys or duplicate security keys for the purpose of duplication or falsification Can be prevented.

The present invention can be applied to expensive luxury products where counterfeiting or reproduction occurs, or ginseng-related products in which the credibility and reputation of producers are important.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a plan view showing an attachment form of a double security key according to the present invention; FIG.
2 is a block diagram of a validation system using a dual security key according to the present invention.
3 is a flowchart illustrating an operation of a validity checking system using a duplicate security key according to the present invention.
4 is a flowchart illustrating a method of authenticating a product using a dual security key according to the present invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not intended to limit the invention to the particular forms disclosed. And shall not interpret it.

The present invention relates to a genuine validation system and a genuine validation method using a dual security key, and more particularly, to a terminal authenticating application (hereinafter referred to as a " genuine validation application ") recognizing NFC and a bar code And transmitting the security key information to the triple server to inform the user of identity and authenticity.

FIG. 1 is a view showing an attachment mode of a dual security key according to the present invention, in which the double security key is superimposed as an NFC tag 120 of an electromagnetic wave type and an optical barcode 110. On the surface, only the barcode (110) is shown and it is not authenticated even if the validation is done because there is no NFC hidden in the inside by copying it. Also, if the bar code label is tapped to duplicate the NFC attached to the backside, the NFC tag is damaged and can not be replicated.

The dual secret key is password protected and must be released by the manufacturer's encryption key and the decryption key issued by the identity verification server.

The standard barcode is 13 digits. The first 3 digits are the country identification code, the next 4 digits are the manufacturer number, the next 5 digits are the product code, and the last 1 digit is the check code. In the present invention, Since there are not many types of manufacturers or products, they can be reduced to 8 digits. In order to prevent reattachment to duplicate or counterfeit goods, it may be arranged so as not to re-attach if removed or to damage the underlying NFC tag.

The NFC tag 120 (or sticker) is a non-contact wireless communication module (NFC), a non-contact communication technology using a frequency band of 13.56 MHz as one of radio frequency identification (RFID) technologies. The NFC can be composed of ID information and data information with 22 digits of information. The ID information can be transmitted to the authentication server only when the decryption server matches the barcode information using the MAC address, so that the authentication procedure can be performed. The data information includes product information such as a product name, a manufacturer, and a manufacturing date, and allows the user to use a purchase date if purchased. As with barcodes, removal can cause information to be corrupted.

In addition, since NFC has a short communication distance, it is relatively safe and relatively inexpensive, so it is suitable to be attached and distributed to each product. It does not require a dongle (reader) to use wireless tags and can be recognized as a tablet PC equipped with a smart phone or a camera.

FIG. 2 is a block diagram of a validity checking system using a duplicate security key according to the present invention. The duplicate security key 100 for confirming authenticity and the MAC address and ID (Hereinafter, referred to as 'terminal information') and information of the recognized dual security key 100 to the triple server 300. After confirming the identity of the user in each of the triple servers 300, And is transmitted to the terminal 200.

In addition, a genuine validation application is distributed to the Android Market or the App Store so that the user can use the validation system, and is installed directly in the user terminal 200 so that the user can use the genuine validation service.

Recognizes the duplicate security key 100 by the user terminal 200 installed with the genuine validation app and transmits the duplicated security key 100 information and the terminal information recognized through the wired / wireless network to the identity verification server 310. [ Transmits the decryption key of the duplicate security key 100 to the decryption server 320 by confirming the user's identity through the transmitted terminal information. The decryption server 320 decrypts the double security key 100 by combining the decryption key issued by the identity verification server and the encryption key issued by the producer and transmits the decrypted authentication key to the authentication server 330, The product information and the inquiry history are transmitted to the user terminal 200 in step 330 so that the user can confirm the product information.

By constructing a triple server, it is possible to prevent cloning or forgery because it is costly to construct a system because it is costly to build a system. Therefore, a triple server can prevent a hacking by separating a server firewall or a physical network .

FIG. 3 is a flowchart illustrating an operation of a validation system using a dual security key according to the present invention. The validity checking system using the dual security key includes the dual security key 100, the user terminal 200, the identification server 310, the decryption server 320, and the authentication server 330, It is possible to confirm the identity through the triple server 300 and transmit the product information and the inquiry history to the user terminal 200 to confirm whether or not the product is authentic.

The dual security key 100 may be formed of an NFC tag 120 and a barcode 110 and may be attached to a product and the NFC tag 120 and the barcode 110 may be formed as a reattachment sticker. The producer can generate the double security key 100 composed of the barcode 110 and the NFC tag 120 with the producer terminal 400 or the like.

The producer terminal 400 may transmit the generated encryption key for the dual security key 100 to the decryption server 320 and send the product information for the dual security key 100 to the authentication server 330 have. And stores the transmitted encryption key information and the product information in the decryption server 320 and the authentication server 330, respectively.

The user terminal 200 can recognize the dual security key 100 by installing a validation confirmation app. The genuine confirmation application is installed in the user terminal 200 and the ID is generated by subscribing. The user terminal 200 installed with the genuine validation application can recognize and inquire the double security key 100.

The identity verification server 310 can confirm the identity by receiving the user terminal 200 information and the recognized double security key 100 information. The terminal information is a MAC address and ID information generated at the time of subscription to the genuine validation app. The identity verification server 310 may store the inquiry record of the double security key 100 and the user terminal 200 information and confirm whether the user is a legitimate user through the stored user terminal 200 information.

The MAC address is a unique number for each terminal, and the ID information is generated at the time of subscription to the validation system, and inputs basic user information such as a telephone number and an address at the time of subscription. The identity of the user can be confirmed by using the telephone number of the terminal provided at the time of subscription instead of the ID information. The dual security key 100 inquiry record and the user terminal 200 information are stored in the ID verification server 310 so that one terminal 200 may duplicate or identify a redundant security key 100 that is duplicated or defective It is possible to prevent an inquiry for duplication or falsification of the duplicate security key 100. If it is confirmed to be a legitimate user, a decryption key is generated and transmitted to the decryption server 320, and if the identity verification is impossible, the use of the validation application can be restricted and terminated.

The decryption server 320 may store the encryption key information for the dual security key 100 issued by the manufacturer and may decrypt the dual security key 100 against the decryption key issued by the identity verification server . The decryption key is information corresponding to the decryption key so as to be decryptable, and may be the same as or different from the encryption key. The decryption server 320 decrypts the double security key 100 with the encryption key information issued by the manufacturer and the decryption key transmitted from the ID server 310 to generate an authentication key, And transmits the authentication key to the authentication server 330. The authentication key may be a product serial number. If the decryption server 320 determines that it is not decrypted, forged, or duplicated, it is transmitted to the authentication server 330 to confirm that it is a non-genuine article.

In addition, the decryption server 320 may be blocked or physically blocked by the identification server, the authentication server, and the firewall, and an internal and external network switching module may be installed to prevent hacking. The decryption server 320 may be switched to the internal network and may be disconnected from the external network so that external hacking is disabled.

The authentication server 330 may receive the product information for the dual security key 100 from the producer, store the product information, and transmit the product information and the inquiry history to the user terminal 200. The decryption server 320 receives the decrypted authentication key and transmits the stored product information and the retrieval history corresponding to the authentication key to the authenticated user terminal 200. Product information that is not decrypted by the decryption server 320 and is confirmed as non-genuine can be transmitted to the user terminal 200 to confirm that the product is non-genuine.

FIG. 4 is a flowchart illustrating a method of authenticating a product using a duplicate security key according to an embodiment of the present invention. The method of authenticating a product using a duplicate security key includes a duplicate security key generation step S10, a double security key recognition step S20, (S30), a decryption step (S40), and an authentication step (S50).

The dual security key generation step S10 is a step of generating a dual security key composed of an NFC tag and a barcode. The producer terminal can generate a duplicate security key consisting of a barcode and an NFC tag. The dual secret key is password protected and must be released by the manufacturer's encryption key and the decryption key issued by the identity verification server. The producer terminal may transmit the generated encryption key to the decryption server for decrypting the double security key, and may transmit the product information on the double security key to the authentication server. And stores the transmitted encryption key information and the product information in the decryption server and the authentication server, respectively.

The double security key recognition step S20 recognizes the double security key as a user terminal installed with a validation application. Install a validation app on the user's terminal, connect to the identity verification server, enter basic user information such as phone number or address, and generate an ID. The dual security key can be recognized and inquired by the user terminal installed with the genuine validation app.

The identity checking step S30 is a step of confirming the identity of the user using the double security key information and the user terminal information. When the recognized double security key information and the user terminal information are transmitted to the identity verification server, the identity verification server stores the terminal information and the inquiry history information.

User smartphone MAC address and ID connection record and double security key inquiry history are stored in each server, so that one terminal does not duplicate or double check duplicate security key or inquire for duplication or falsification of security key can do. It is possible to confirm whether the user is a legitimate user through the terminal information transmitted to the ID verification server. If it is confirmed as a legitimate user, a decryption key is generated and transmitted to the decryption server. If you can not verify your identity, you can restrict your use of the validation app and terminate it.

The decryption step S40 is a step in which the decryption server decrypts the double security key to generate an authentication key. And a decryption unit for decrypting the decrypted decrypted key generated by the decrypted decrypted decrypted decrypted key generated by the decrypted decrypted decryption key, To the authentication server. The authentication key may be a product serial number. If it is determined that it is not decrypted, forged or duplicated, it can be transmitted to the authentication server to confirm that it is a non-genuine article.

The authentication step S50 is a step of receiving the decrypted authentication key and transmitting the product information and the inquiry history to the user terminal. If the manufacturer's encryption key and the decryption key do not exist or do not coincide with each other, the non-decrypted genuine confirmation can be determined to be non-genuine and the non-genuine guide message can be transmitted to the user terminal.

The authenticating method according to the present invention transmits the product information and the inquiry history when the authenticated user is confirmed to be a legitimate user, thereby preventing the reuse of the duplicate security key that can confirm the authenticity of the product, It is possible to increase the reliability of product information by providing the product information and the inquiry history after confirming the identity through the inquiry of the ID information, so that it can be applied to ginseng-related products such as expensive luxury goods or producers' credit.

100: double security key 110: bar code
120: NFC 200: user terminal
300: Triple Server 310: Identity Verification Server
320: decryption server 330: authentication server
400: Producer terminal

Claims (5)

A double security key recorded in the NFC tag and barcode attached to the product;
A user terminal installed with a validation application and recognizing the double security key;
An identity verification server for receiving the user terminal information and the recognized double security key information to confirm the identity and issuing a decryption key for decrypting the double security key to the decryption server;
A decryption server for decrypting the duplicate security key and issuing an authentication key to the authentication server by inputting the decryption key and the encryption key issued by the producer;
And an authentication server for transmitting and receiving product information on the double security key from a producer and transmitting product information and an inquiry history to the user terminal,
The barcode is superimposed on an upper portion of the NFC tag so that only the barcode is visible from the outside,
The identity verification server, the decryption server, and the authentication server may be configured to separate from each other by a firewall or a physical network between the servers,
When the dual security key is inquired to the ID server by the user terminal, the ID server transmits a decryption key to the decryption server when the ID is confirmed as a legitimate user,
The decryption server decrypts the duplicate security key with the stored producer-generated encryption key and the received decryption key to generate an authentication key, and transmits the generated authentication key to the authentication server.
Wherein the authentication server receives the authentication key and transmits product information and an inquiry history to the user terminal,
The identification server stores the double security key inquiry record and the user terminal information, confirms whether the user is a legitimate user through the stored user terminal information,
The terminal information is a MAC address and ID information generated at the time of subscribing to the application,
Wherein the NFC tag and the bar code are formed of a reattachment sticker,
The MAC address is a unique number for each terminal. The ID information is generated at the time of subscription to the validation system, and is a telephone number or an address at the time of subscription.
The dual security key inquiry record and the user terminal information are stored in the ID check server so that one terminal does not duplicate or double check duplicate security keys or inquire for duplication or falsification of duplicate security keys And authenticating the authenticity of the user by using the double security key. delete delete delete delete

Images