KR20190009921A - Terminal and platform for authenticating genuine products and the authenticating method by using the same - Google Patents

Abstract

The present invention relates to a terminal and platform for authenticating genuine products and a method thereof. In the production, distribution, sales, and consumption stages of the products, a portable terminal is used as an authentication terminal. When an identification mark attached to the products (such as a product, a document, a ticket, a coupon, or various kinds of objects connected to goods on the Internet) is captured (scanned) by using only with a basic application installed from the time of the sale of the portable terminal without a separate application, it is automatically accessed to an authentication server by using information recognized from the captured identification mark. The authentication server performs a process of authenticating the genuine products to provide authentication information to the authentication terminal. The authentication terminal includes an identification marker acquiring part; an access request part; a key verification part; and an authentication result display part.

Description

TECHNICAL FIELD [0001] The present invention relates to an activation terminal, a platform, and a method for activating the activation terminal,

The present invention relates to an activation terminal, a platform, and a method for activating a product, and a method for activating the activation terminal, (Scans) an identification mark attached to a product (product, document, ticket, coupon, various kinds of objects connected with goods on the Internet, etc.) using only the basic application installed in the terminal, The present invention relates to an activation platform and an activation method for automatically accessing an authentication server using the authentication server and performing authentication for each authentication terminal and product in the authentication server and providing activation information to the authentication terminal.

The development of information technology has led to the so - called super - connected society in which each member of society is connected in a global and real - time manner. The secular society is making society increasingly complex and diverse because the whole world is integrated into one, organically sharing information among members. Each member of society is able to get the information they want whenever they want, and as a result, a lot of new products have been created, and the kinds, shapes and shapes of the products or products being produced are also exploding. In addition to the above products and products, there are a number of objects connected to personal goods on the Internet including documents, tickets, coupons, and the like.

As the variety of products and products becomes more diverse and producers (including producers of products, documents, credits, etc.) who produce the products can exist anywhere on the earth, and producers do not need enough technology, I was able to learn production technology. As a result, it is not uncommon for a producer who originally develops, manufactures and sells products to soon find counterfeits similar to his own products or products.

Fortunately, the consumer of the product hopes to purchase the genuine product rather than the counterfeit product. However, it is difficult for a consumer to distinguish whether a product he or she purchased is genuine or counterfeit, unless he or she is particularly interested or finds information about the product. Also, even if you know exactly the manufacturer information of the product, even if you forge it, there is no way for the consumer to know whether it is true or false.

Recently, many solutions have been released to distinguish whether a particular product or product is a genuine product or not. The solution to the so-called authentication service recognizes the tag attached to the product, recognizes whether the product is a genuine product, and informs the user whether the product is genuine. Since the activation tag is encrypted, In order to recognize, an application (or an application) capable of decrypting the tag must be installed in the user terminal. The fact that an application capable of recognizing the tag is installed in the user terminal means that the user has to perform a complex application installation procedure and there is a great deal of delay in spread of the application due to the troubles of the application installation procedure .

That is, even if the tag is made complicated and robust against hacking, if a general user terminal needs to install an application program to which a decryption technology is applied in order to read and decode the tag, the user will be turned off. Especially, if the product is expensive, it may be visited directly to the store to check the authenticity of the product, or if the product is a low-priced product, the product itself may not be considered important.

Therefore, the present invention aims to solve the problem of the prior art that a separate application must be installed to enable activation. More precisely, the present invention does not require a separate app for authentication but does not mean that no apps or tools are required. That is, activation is performed by using a basic tool that is essentially installed in a user terminal. Therefore, it is one of the technical features of the present invention that a user does not have to perform a dedicated dedicated application installation process for activation.

Next, a brief description will be given of the prior arts that exist in the technical field of the present invention, and technical matters which the present invention intends to differentiate from the prior arts will be described.

A Korean Patent Registration No. 1298224 (published on Mar. 13, 2013) discloses an authentication method using a two-dimensional code, wherein a terminal reads a two-dimensional code from which a screening means has been removed, Dimensional code, and can display the authentication object information when the terminal reads the two-dimensional code to judge authenticity of the authentication object to which the two-dimensional code is attached. In the present invention, the two-dimensional code includes connection information that can be connected to the authentication server and authentication request information required for authentication. The application accesses the two-dimensional code reading and authentication server through a dedicated or general purpose application, When the authentication is completed, the authentication server can permanently end the authentication of the authentication object that has been authenticated, thereby preventing an unspecified number of authentication through duplication or reuse of the two-dimensional code.

This prior art is similar to the present invention in that it is connected to the authentication server through the connection information of the QR code and authentication is performed by the authentication request information, but a separate application must be provided. The information of the terminal is converted into the authentication completion information, and if it is stored in the authentication server after comparison with the authentication completion information, it is judged that the authentication or authentication fails. According to the present invention, there is no need to provide a separate application in the terminal, and even if the terminal has already been authenticated to the authentication server and the product information, it can be re-authenticated to distinguish whether it is genuine or good. Since there is no mention of the technical characteristics of the authentication method through the interaction between the terminal and the authentication server, the two are obviously different in terms of their technical configurations.

In addition, China Patent No. 103077467 (published on Jun. 29, 2016) relates to a method and system for verifying authenticity of a product, wherein the network server includes a judging unit and a registering unit to verify the history tracking code and piracy prevention, The unit verifies the authenticity of the product based on the history tracking code and the security code judgment, sends authenticity information verifying the product to the mobile terminal, and sends the trigger information to the registration unit when it is verified that the product is authentic , The registration unit registers the history tracking code, the security code, and the mobile terminal based on the trigger information of the determination unit. The registration of the mobile terminal establishes a correspondence relationship between the history tracking code, the security code, and the mobile terminal, and is a legitimate terminal that can follow the history tracking code and security code inquiry information. The mobile number or SIM card number, which is the information of the mobile terminal of the first scan or legal scan, is sent to the network server.

Although the prior art has a similarity in that the mobile terminal is managed in the QR code activation step, the mobile terminal is distinguished from the identification key given to the mobile terminal by the authentication server as in the present invention, , There is no description of a mechanism for performing the mutual authentication procedure between the mobile terminal and the authentication server.

That is, each of the above-mentioned prior arts is characterized in that each authentication process for the genuine product is performed by installing a separate authentication application, so that each authentication process is very specialized and the procedure for authentication is simple. In other words, if you install a dedicated authentication app on a portable terminal, the authentication method is very simple because the app can embed various authentication mechanisms. However, there is a problem that the user must download and install the application on his / her portable terminal. In the present invention, since it is the first object to solve such a hassle, the difference between the present invention and the prior art is obvious in this part.

Since the portable terminal does not need to have a separate dedicated application or install it, the portable terminal of the user reads the identification mark to automatically perform the activation process with the authentication server while the user does not recognize it, If the identification mark is scanned by the terminal, there is an advantage that it can be known whether the article is genuine or not.

The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a portable terminal capable of using a product (goods, documents, tickets, coupons, The authentication platform, and the authentication method by which the authenticity of the product can be authenticated by merely scanning the identification mark attached to the authentication terminal, the authentication platform, and the like.

Further, the present invention provides a mechanism for automatically connecting to an authentication server using information recognized from an identification mark scanned by an authentication terminal, and enabling authentication of the product or product from the authentication server and the authentication terminal, Another object of the present invention is to provide an activation terminal, an authentication platform, and an authentication method for enabling a product or a product to be authenticated.

In addition, the present invention relates to a method for accessing an authentication server by using an identification mark scanned by an authentication terminal, managing the connection history by using the information about the authentication terminal and the identification mark recognized by the authentication server at this time, It is another object of the present invention to provide an activation terminal, an authentication platform, and an authentication method for enabling authentication.

The present invention also provides a method of providing an authentication result of a specific product or a product requested by an authentication terminal from an authentication server to an authentication terminal by expressing it differently according to various levels (order, retrieval, priority, level, importance, The present invention also provides an authentication terminal, an authentication platform, and an authentication method using the same, which enable a consumer to grasp more intuitively through display of an authentication result.

The activation method according to an embodiment of the present invention includes: acquiring authentication codes associated with a specific object and an authentication server in a terminal, accessing the authentication server using the access information in the terminal, Transmitting a response to the authentication server by confirming whether an identification key or a product authentication key is issued in the terminal according to a request from the authentication server and receiving a result of authentication from the authentication server, And outputting the output signal to the output terminal.

The terminal confirms whether the identification key or the product authentication key is issued and transmits a response to the authentication server. If the issued identification key or the product authentication key exists in the terminal, the terminal transmits the issued identification key to the authentication server If it does not exist, it issues an issuance request of the identification key or the product authentication key to the authentication server and receives the identification key from the authentication server. If the product authentication key according to the authentication code stored in the authentication server is already issued and exists in the terminal, the authentication code is already authenticated, and if not, it is determined that authentication is first performed. Wherein the authentication server includes an authentication server that receives the first authentication result and the authentication result of the first authentication server, the authentication server including a message, an image, a web page, a sound, a reward, And outputs it to the screen of the terminal.

According to still another aspect of the present invention, there is provided a method for activating an authentication server, the method including: receiving an authentication code for a specific object from an authentication server; receiving, by the authentication server, Issuing an authentication key, and matching the identification key with the authentication code in the authentication server, and providing the authentication result according to the matching to the terminal.

The terminal accesses the authentication server through access information obtained from an identification mark associated with the specific object, and the terminal obtains the authentication code from the identification mark and provides the authentication code to the authentication server. The imaginary element authentication server requests the product authentication key from the terminal, and if the product authentication key corresponding to the authentication code stored in the authentication server has already been issued, the authentication code is already authenticated, and if not present It is judged to be authenticated. When the authentication is performed for the first time and the authentication is already performed, authentication results including a message, an image, a web page, a sound, a reward, or a combination thereof provided to the terminal by the authentication server are expressed differently, .

According to still another aspect of the present invention, there is provided a method for activating a terminal, comprising: obtaining, by a terminal, an authentication code related to a specific object and access information of an authentication server, accessing the authentication server using the access information, Checking whether the identification key or the product authentication key is present in the terminal, checking whether the identifier or the product authentication key exists, and if the identification key or the product authentication key is present, And transmitting the predetermined authentication identifier to the authentication server when it is determined that there is no product authentication key corresponding to the authentication code stored in the authentication server, Providing an authentication result to the terminal if it is determined that the authentication result is already authenticated, It includes.

If the authentication server confirms whether the identification key or the product authentication key exists in the terminal, and if the authentication server does not exist, the authentication server issues the identification key or the product authentication key to the terminal.

According to another aspect of the present invention, there is provided an activation terminal comprising: an identification mark acquisition unit for acquiring an authentication code related to a specific object and access information of an authentication server; A key verification unit for confirming whether an identification key or a product authentication key is issued according to a request from the authentication server and transmitting a response to the authentication server; And an authentication result display unit for outputting the authentication result.

Wherein the transmitting of the response to the authentication server by checking whether the identification key or the product authentication key is issued from the terminal is performed by transmitting the identification key or the product authentication key to the authentication server if it exists, Lt; / RTI > If the product authentication key corresponding to the authentication code stored in the authentication server has already been issued and exists, the authentication code is already authenticated, and if not, it is determined that the authentication is first performed. When the authentication is first performed and when the authentication is already performed, the authentication result including a message, an image, a web page, a sound, a reward, or a combination thereof provided by the authentication server is displayed on a different screen .

According to still another aspect of the present invention, there is provided an activation platform comprising: a connection controller for receiving a connection request from a terminal and receiving an authentication code for a specific object, a received authentication code, a terminal, An authentication information storage unit for storing a product authentication key, an identification key, or a combination thereof, a key issuing unit for matching the authentication code with the identification key, the product authentication key, or a combination thereof, And an authentication result providing unit for providing a result to the terminal.

The terminal accesses through access information obtained from an identification mark associated with the specific object, and the terminal obtains and provides the authentication code from the identification mark. By confirming the identification key, the product authentication key, or a combination thereof from the terminal, it can be confirmed whether the identification key or the product authentication key has already been issued. If the identification code, the product authentication key, or a combination thereof is issued for the first time, the authentication code is first authenticated, and if the identification code, the product authentication key, or a combination thereof has been issued, It is. The authentication result including the message, the image, the web page, the sound, the reward, or a combination thereof provided to the terminal is differently displayed on the screen of the terminal when the authentication is performed for the first time .

As described above, according to the activation terminal, the authentication platform, and the authentication method using the activation terminal of the present invention, it is not necessary to install a separate dedicated application for authentication, so that the consumer can easily grasp whether the goods or the goods he / Therefore, the accessibility of the authentication through the portable terminal is excellent, the space to be stored in the portable terminal can be saved, and the ease of use can be increased.

According to the advantages of the present invention, the present invention does not require a separate app on the level of the terminal, and authentication can be performed without a separate dedicated terminal, and since the authentication server can be applied variously in production, There is a high advantage of scalability.

1 is a conceptual diagram for explaining an activation terminal, an authentication platform, and an authentication method therefor according to an embodiment of the present invention.
2 is a conceptual diagram illustrating a concept of performing activation between an authentication server and a terminal according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of an authentication server according to an embodiment of the present invention.
4 is a block diagram illustrating a configuration of an authentication terminal according to an embodiment of the present invention.
5 is a signal flow diagram between an authentication terminal and an authentication server for activation according to an embodiment of the present invention.
FIG. 6 is a flowchart illustrating a process of performing activation by sequentially performing terminal authentication and product authentication according to an exemplary embodiment of the present invention. Referring to FIG.
FIG. 7 is a flowchart illustrating a process of activating a terminal and a product in accordance with an embodiment of the present invention to perform activation.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an activation terminal, an authentication platform, and an authentication method according to the present invention will be described in detail with reference to the accompanying drawings. The present invention may be embodied in many different forms and is not limited to the embodiments described herein. Like parts are designated with like reference numerals throughout the specification.

In the present invention, the identification key is a concept of a secret key or a private key (private key, individual key, secret key) assigned to each terminal, and is also a representative key of products for performing activation on a terminal-by-terminal basis. The identification key is a key for distinguishing a terminal, and is an uniquely issued key for each terminal in an authentication server. There is only one identification key issued to one terminal, and the key is guaranteed to be uniqueness by a Universal Unique Identifier (UUID) assigned differently for each terminal.

The product authentication key is a key that is assigned to each product and is issued for each product each time the terminal activates. For example, each product is assigned to each of a plurality of products each time activation is performed in one terminal. Similarly, the product authentication key is guaranteed to be unique to a universal single identifier (UUID) that is assigned differently for each key. When requesting activation of the corresponding terminal provided with the identification key, the authentication server can determine the authenticity of the product by checking the matching relation between the authentication code of the product and the product authentication key.

In an embodiment of the present invention, the identification key and the product authentication key are issued separately, but they may be combined with each other to constitute a single key or may be separately managed. Therefore, when the authentication server requests identification of the identification key or the product authentication key The identification key, the product authentication key, or a combination of the identification keys, the product authentication key, or a combination of the identification keys and the product authentication key, The authentication code is stored and matched with each other, and the determination as to whether or not the product is authentic is also performed.

In the present invention, an object is referred to as a product, a product, a product, a document, an invisible image, a ticket, a coupon, and various kinds of virtual objects connected to goods on the Internet. In other words, an object is a physical object, but it also includes a virtual object.

1 is a conceptual diagram for explaining an activation terminal, an authentication platform, and an authentication method therefor according to an embodiment of the present invention.

As shown in FIG. 1, in the present invention, an authentication platform including the authentication server 100 and a database (DB) can be constructed. In addition to the authentication server, a plurality of special purpose dedicated servers exist in the platform It is possible. The activation platform according to the present invention provides an activation service for a product to a consumer through an authentication server.

The activation server 100 provides activation services to a plurality of terminals, and each terminal can request activation of a plurality of commodities through the authentication server and receive the corresponding services.

The product manufacturer purchases an identification mark with a unique identification code from the agency issuing the identification mark and attaches it to the produced product. The product is transmitted to the seller through the logistics, and after the distribution process, the seller transmits the product It sells. Accordingly, the database 300 stores the authentication code, the identification key (private key, secret key, individual key, etc.), the product authentication key, and the identification key for each product for matching and stores them, When the request arrives, it carries out the product authentication immediately and delivers the result to the consumer.

When providing the activation result, the authentication server includes a predetermined phrase, an image, a moving picture, or a combination thereof. The authentication server may include a different message, an image, a moving image, or a combination thereof according to the activation result Content.

2 is a conceptual diagram illustrating a concept of performing activation between an authentication server and a terminal according to an embodiment of the present invention.

Hereinafter, a process of authenticating a genuine product by scanning a QR code for a specific product between an authentication server and a terminal (consumer terminal, etc.) will be described with reference to FIG.

First, the terminal scans the identification mark (for example, QR code) to obtain the access information to the authentication server, the authentication code (or product code), and the product information. Here, the authentication code (product code) is a unique code given by the seller of the identification mark to sell to the producer of the product. The terminal accesses the authentication server using the access information at the same time as the scan. The authentication server requests the terminal to confirm whether it has been given an identification key (e.g., a private key, a secret key, etc.), a product authentication key, or a combination thereof. Next, the terminal transmits the identification key, the product authentication key, or a combination thereof stored in the terminal itself to the authentication server in response to the confirmation request. If the identification key and the product authentication key exist, the authentication server matches the identification key and the product authentication key with the authentication code and stores the identification key, the product authentication key, A combination of these is issued, and a newly issued identification key, a product authentication key, or a combination thereof and an authentication code are matched and stored. Through this process, the authentication server allows the consumer terminal to perform the activation.

Here, if the new authentication code is input to the authentication key issued by the authentication server, the authentication server issues a new product authentication key, matches the identification code and the product authentication key, stores the new authentication code, The authentication result of the product is provided to the terminal, and the terminal outputs the authentication result to the screen.

When the authentication result is output to the screen, the authentication server transmits different message, audible and visual information to the terminal depending on whether the authentication is the initial authentication, the authentication over a plurality of times, or the authentication, It makes it easy to intuitively recognize the authentication result. If the authentication is unsuccessful, the user can automatically access the server of the counterfeit center or the server of the police station and register the information or output the information including the warning message, the harmful information, the penalty problem, and the counterfeit notification information to the consumer terminal. On the other hand, consumers who are authenticated consecutively can offer coupons, cyber money, admission tickets and so on.

The configuration of the authentication server and the terminal according to the present invention for performing such a role will now be described with reference to FIGS. 3 and 4. FIG.

FIG. 3 is a block diagram illustrating a configuration of an authentication server according to an embodiment of the present invention. FIG. 4 is a block diagram illustrating a configuration of a terminal for performing authentication according to an embodiment of the present invention.

3, the authentication server 100 according to an exemplary embodiment of the present invention includes a connection control unit 110, a key issuing unit 120, a key confirmation request unit 130, an activation unit 140, A web service unit 150, an authentication result providing unit 160, an authentication information storage unit 170, an authentication information access unit 180, and an authentication information management unit 190. Of course, since each of the above-described components can be integrated, it is natural that the present invention will be practiced even if the name of the component performing the role of the component has other components.

The connection control unit 110 controls the connection between the terminal and the authentication server, including whether or not to allow connection of the terminal, when the terminal accesses the authentication server according to the connection information acquired by the terminal do. For example, the authentication server may block the connection to the illegal terminal in advance, or may consider the attack as a hacker attack in case of frequent connection requests and block the connection in advance. In addition, if a connection request comes from an area where service is not possible, or a connection request is received that is not a permitted carrier, it can be rejected.

When the terminal is connected, the key issuing unit 120 issues an identification key or a product authentication key to the terminal. The issuing unit 120 generates and transmits (transmits) an identification key or a product authentication key to the terminal . The key issuing unit 120 issues an identification key unique to each terminal when the terminal first connects to the authentication server, and issues a unique product authentication key when each terminal transmits an authentication code of a different product. Therefore, it can be assumed that the identification key or the product authentication key issued by the key issuing unit 120 is once transmitted to the terminal.

The key confirmation request unit 130 requests to check whether there is an identification key or a product authentication key stored in the connected terminal. The authentication request of the identification key is transmitted from the authentication server to the terminal. If there is an identification key stored in the terminal, the terminal transmits the identification key to the authentication server. Otherwise, the terminal transmits 'NULL' or transmits a predetermined identifier. The authentication server recognizes an identifier or an identification key received by the authentication server as a terminal that has issued the identification key if the identification key is a normal identification key, and otherwise identifies the terminal as a terminal that has not yet issued the identification key and issues a new identification key to the terminal. In addition, the confirmation request for the product authentication key is transmitted to the terminal, and if the product authentication key is stored in the terminal, the terminal transmits the product authentication key to the authentication server. Otherwise, the terminal transmits NULL or transmits a predetermined identifier. The authentication server recognizes the product authentication key or the identification key received from the authentication server as a terminal that has already issued the product authentication key if it is a normal product authentication key and recognizes the product authentication key as a terminal that has not yet issued the product authentication key, . At this time, the authentication server stores the product authentication key that is first issued for the specific authentication code as the product authentication key that is issued first, and stores the matching result with the authentication code and the product authentication key that is issued first. The identification key is for distinguishing a terminal, and a product authentication key is further mapped to an identification key that is mapped to an actual authentication code.

The activation unit 140 performs activation using the first issued product authentication key, which is stored in correspondence with each authentication code for each product. After receiving the authentication code and the product authentication key from the terminal, it is determined whether the product is authentic by comparing the product authentication key issued first according to the authentication code with the product authentication key received from the terminal. If the first issued product authentication key stored according to the received authentication code matches the received product authentication key, it is determined that the activation is valid. If the first stored product authentication key stored according to the received authentication code is inconsistent with the received product authentication key, it is determined that re-authentication is required. If there is no stored authentication code for the received authentication code, it is determined that the activation has failed.

On the other hand, the activation unit 140 can manage the authentication result for each identifier by using an identifier that identifies the terminal at every activation of each product. The activation unit 140 manages the authentication code that attempts to activate the result for each of the identifiers and the result of activation of the activation result for each product.

When the terminal accesses the authentication server through the connection control unit 110, the web service unit 150 provides the web page that the authentication server 100 has to the terminal. Since all the information provided from the actual authentication server to the terminal is provided in the form of web, the web service unit 150 provides necessary information to the terminal through a markup language.

The authentication result providing unit 160 provides the authentication result authenticated by the activation unit 140 to the terminal. The authentication result is classified into an initial authentication, a re-authentication, and an authentication failure. It is preferable to provide different messages, images, and sounds for initial authentication, re-authentication, and authentication failure. Of course, it is also possible to construct a simple video or pop-up screen so that the consumer can intuitively recognize the authentication result.

The authentication information storage unit 170 stores the matching relationship with respect to each authentication result as well as information about each product and each product. The terminal information, the identification key, the product information, the authentication code, and the like are grouped and stored, and the terminal must be prepared to respond to the authentication request immediately.

The authentication information access unit 180 searches the information related to the product / logistics / sales / authentication stored in the authentication information storage unit 170, the identification key, and the terminal information by querying the specific access information. That is, the identification key, product information, and terminal information associated with the authentication code can be accessed and extracted using the specific authentication code.

The authentication information management unit 190 monitors whether a status change occurs with respect to stored product / logistics / sales / authentication information, an identification key, etc., and updates the DB by reflecting the change in status, Always keep new information in DB. For example, when it is recognized that the information of the terminal has been changed in the information stored in the DB, it can be managed to update and store all the information about the terminal.

In addition, the authentication server basically includes functions to be provided in a normal platform server such as operating system, memory, user management, device management, and web page management. These configurations are self-explanatory, so they are not shown or described separately. However, it is preferable that the authentication server according to the present invention basically interprets these functions.

4, the authentication terminal 200 according to an exemplary embodiment of the present invention includes a connection request unit 220, an identification marker acquisition unit 210, a key storage unit 230, a key verification unit 240, And an authentication result display unit 250. [

The connection request unit 220 obtains the connection information, the authentication code, and the product information of the authentication server acquired by the terminal 200 through the identification marker acquisition unit 210, and when accessing the authentication server 100, And an interface is provided so that a communication line can be set up so that the authentication server 100 can be accessed using the corresponding connection information and can interact with each other. The connection request unit 220 may perform a communication session authentication procedure with the connection control unit 110 of the authentication server 100. [ In this case, it is possible to form a communication channel with enhanced security between the terminal and the authentication server.

If the identification mark is, for example, a QR code, the identification mark obtaining unit 210 can obtain the access information of the authentication server included in the QR code, the authentication code of the product, and the product information by reading the QR code . Among the pieces of information, the authentication code is used for authenticating the product, and the connection information includes address information on the Internet for the terminal to automatically connect to the authentication server. In addition, the identification mark may further include product information.

The key storage unit 230 stores the identification key or the product authentication key provided by the authentication server in a specific storage space. The identification key or the product authentication key stored in the key storage unit 230 is transmitted to the authentication server 100 by the key verification unit 240 at the request of the authentication server 100. [ On the other hand, the identification key is issued by the authentication server in relation to the terminal, and it should also store the product authentication key issued regarding the authentication code of the product. The key storage unit 230 stores and holds the identification key and the product authentication key in the terminal.

The key verification unit 240 searches the stored identification key or the product authentication key and transmits it to the authentication server 100, thereby confirming the identification key or the product authentication key. If the identification key is not found, "NULL" is assigned to the identification key returned to the authentication server and is transmitted. Of course, it is also possible to assign predetermined predetermined information to the authentication server in addition to "NULL ". Also, the key verification unit 240 can check the product authentication key that has been issued and stored, and return it to the authentication server. That is, the key verification unit 240 confirms the identification key and the product authentication key stored in the terminal with the authentication server.

The authentication result display unit 250 receives information on the authentication result transmitted from the authentication server and outputs the information on the screen of the terminal. It is preferable that the authentication result is edited and produced by the authentication server, but it is also possible that the terminal interprets the authentication result provided by the authentication server and outputs the authentication result differently from the authentication server itself.

Hereinafter, a signal flow in a process of automatic connection, authentication and output of an authentication result between an authentication server and a terminal according to an embodiment of the present invention will be described.

5 is a signal flow diagram between an authentication terminal and an authentication server for activation according to an embodiment of the present invention.

5, the authentication terminal 200 scans or reads an identification mark (e.g., a QR code) directly or indirectly attached to the product, and obtains the Internet access information (e.g., URL, URI: (Uniform Resource Locator, Uniform Resource Identifier), authentication code (product unique number, etc.), and product information (expiration date, ingredient, usage, usage method, note, manufacturer, etc.). The authentication server 100 has a function of a web server and stores the received authentication code and product information in response to a connection request of the terminal, (Key () function execution request) for the existence of the identification key, the product authentication key, or a combination thereof. In this case, the key () function only needs to perform a function equivalent to that which the web server can request to retrieve and return the identification key or the product authentication key to the terminal.

The terminal executes the key () function according to the command of the markup (xml, html, etc.) language received from the authentication server. What the key () function does is retrieve whether the terminal has an identity key (private_key), a product key (product_key), or a combination of these. Then, if there is an identification key / product authentication key, the corresponding identification key / product authentication key is assigned to the key value and transmitted to the authentication server. If not, a predetermined identification key / product authentication key (e.g., null) And transmits them.

First, when null is transmitted as a key value, the authentication server confirms that the terminal / product is the terminal / product that performs the authentication for the first time, and stores the generated identification key / product authentication key in the DB as the terminal / product identifier. And transmits the corresponding identification key / product authentication key to the terminal.

On the other hand, if the identified identification key / product authentication key has a specific key value and customer information for the corresponding identification key / product authentication key exists, the terminal / product is recognized as a terminal / product of the existing customer, And transmits corresponding information (web page) to the terminal. At this time, if it is a reauthentication, it outputs a message different from the initial authentication, so that it is convenient for the user to recognize it. Wherein the authentication result includes an image, a web page, a sound, a reward, or a combination thereof, in addition to the message. Web pages can also contain user-defined displays, for example, static images and dynamic images, and can display historical information about the activation history and activation confirmation information. It may be separately prepared and transmitted. For example, for the best authentication, a dynamic image, fanfare, coupon, reward (compensation), etc. can be provided to distinguish it from re-authentication.

The flow of performing the activation of the terminal and the individual products centering on the above description will be described in more detail.

FIG. 6 is a flowchart illustrating a process of performing activation by sequentially performing terminal authentication and product authentication according to an exemplary embodiment of the present invention. Referring to FIG.

As shown in FIG. 6, the terminal scans the identification mark directly or indirectly attached to the product to obtain connection information, authentication code, product information, and the like (S100). The authentication code and product information may or may not be encrypted here. However, the access information, the authentication code, and the product information are encoded in the QR code, and when the terminal scans the QR code, the access information of the unencrypted authentication server included in the QR code can be recognized immediately.

And connects to the authentication server based on the recognized connection information (S110). At this time, it is preferable to transmit the authentication code and the product information together. Of course, the QR code may also include advertising and promotional information for the product.

The authentication server requests confirmation of the identification key to the terminal that has been connected (S120). If the terminal does not have an identification key in the terminal (S130), the terminal issues an identification key to the terminal (S140), and if it exists (S130), the terminal sends the existing identification key to the authentication server Lt; / RTI >

Then, the authentication server requests the terminal to confirm the product authentication key for each product (per authentication code) (S200). In step S210, the terminal determines whether a product authentication key exists for the request. If the product authentication key does not exist in the terminal in response to the request, the terminal returns null to the authentication server, and the authentication server issues the product authentication key to the terminal for the first time (S220) And transmits the stored product authentication key to the authentication server.

When the authentication server first authenticates the specific authentication code, the authentication server stores and stores the product authentication key that matches the product authentication key issued for the first time. If the authentication server authenticates the product authentication key, the authentication server matches the product authentication key received from the terminal or the newly issued product authentication key S230). The product authentication key may issue a new product authentication key each time the terminal provides the authentication code, and may issue only one product authentication key for one authentication code. As a result, the authentication server matches and stores the identification key and the product authentication key with respect to the authentication code, and records information indicating whether the identification key and the product authentication key are issued for the first time or whether the terminal is issued to the product.

Then, the authentication code received from the terminal and the information of the product authentication key are compared with the authentication code recorded as sales to the producer and the product authentication key issued thereby to determine whether or not the product is authentic. It is determined whether the authentication code received from the terminal is an authentication code normally sold to the manufacturer (S240). If the authentication code received from the terminal is not a pre-sold authentication code, it is determined that the activation failed because it is a counterfeit product (S253). If the authentication code received from the terminal is a pre-sold authentication code, it is determined whether the terminal is the first terminal authenticated for the product (S250). Whether the terminal is the first authenticated terminal for a specific product is determined by whether the authentication code received from the terminal and the stored identification key are issued first or not. At this time, the stored identification key, the product authentication key, and the authentication code must agree with each other. On the other hand, if the identification key is not issued for the first time, it is determined to re-authenticate (S251).

Subsequently, the authentication server provides the authentication result according to each case of activation (first), re-authentication, and activation failure to the terminal, and the terminal receives the authentication result in the form of a web page and outputs the result to the screen (S260) . The authentication server provides different messages, videos, images, rewards, coupons, etc. for activation (first), re-authentication, and activation failure so that the terminal can output them to the screen through a web page 5).

FIG. 7 is a flowchart illustrating a process of activating a terminal and a product in accordance with an embodiment of the present invention to perform activation.

As shown in FIG. 7, the terminal scans the identification mark directly or indirectly attached to the product to obtain connection information, authentication code, product information, and the like (S310). The terminal accesses the authentication server based on the acquired connection information (S320).

The authentication server requests confirmation of the identification key, the product authentication key, or a combination of the identification keys, the product authentication key, and the like (S330). If the identification key, the product authentication key, or a combination thereof does not exist in the terminal in response to the request (S340), the terminal issues an identification key, a product authentication key, or a combination thereof to the terminal (S350) If it exists (S340), the terminal transmits the existing identification key, the product authentication key, or a combination thereof to the authentication server.

When the authentication server first authenticates the specific authentication code, the authentication server stores the identification key, the product authentication key, or a combination thereof, which is issued first, and stores the identification key, the product authentication key, (S360), and stores the matching key, the product authentication key, or a combination thereof. As a result, the authentication server matches and stores the identification key, the product authentication key, or a combination thereof to the authentication code, and records whether the identification key and the product authentication key are issued for the first time, .

Then, the authentication code and the product authentication key information received from the terminal are compared with the authentication code recorded as sales to the producer and the product authentication key issued thereby to determine whether or not the product is authentic. It is determined whether the authentication code received from the terminal is an authentication code normally sold to the manufacturer (S370). If the authentication code received from the terminal is not a pre-sold authentication code, it is determined that the activation of the product is a failure because it is a counterfeit product (S383). If the authentication code received from the terminal is a pre-sold authentication code, it is determined whether the terminal is the first terminal authenticated for the product (S380). Whether or not the terminal is the first authenticated terminal for a specific product is determined by determining whether the authentication code received from the terminal and the stored identification key are issued first (S382). At this time, the stored identification key, the product authentication key, and the authentication code must agree with each other. On the other hand, if the identification key is not issued for the first time, it is determined to re-authenticate (S381).

Subsequently, the authentication server provides the authentication result according to each case of activation (first), re-authentication, and activation failure to the terminal, and the terminal receives the authentication result in the form of a web page and outputs the result to the screen (S390) . The authentication server provides different messages, videos, images, rewards, coupons, etc. for activation (first), re-authentication, and activation failure so that the terminal can output them to the screen through a web page 5).

As described above, according to the present invention, since it is not necessary to install a separate dedicated app for authentication as described above, it is possible for the consumer to easily grasp whether the goods or goods he / she purchased are genuine or not, , The space to be stored in the portable terminal can be saved, and the ease of use can be increased.

According to the advantages of the present invention, the present invention does not require a separate app on the level of the terminal, and authentication can be performed without a separate dedicated terminal, and since the authentication server can be applied variously in production, There is a high advantage of scalability.

It will be apparent to those skilled in the art that various modifications may be made to the invention without departing from the spirit and scope of the invention as defined in the following claims And changes may be made without departing from the spirit and scope of the invention.

100: Authentication server 200: Authentication terminal
110: connection control unit 120: key issuing unit
130: key confirmation requesting unit 140:
150: Web service section 160:
170: Authentication information storage unit 180: Authentication information access unit
190: authentication information management unit 300: database (DB)
210: identification mark acquisition unit 220: connection request unit
230: key storage unit 240: key verification unit
250: Authentication result display part

Claims (19)

Acquiring authentication codes associated with a specific object and access information of an authentication server in a terminal;
Accessing the authentication server using the access information in the terminal and transmitting the authentication code;
Confirming whether an identification key or a product authentication key is issued in the terminal according to a request from the authentication server, and transmitting a response to the authentication server; And
And receiving an authentication result from the authentication server and outputting the authentication result to a screen of the terminal. The method according to claim 1,
The terminal confirms whether the identification key or the product authentication key is issued and transmits a response to the authentication server. If the issued identification key or the product authentication key exists in the terminal, the terminal transmits the issued identification key to the authentication server If the authentication key is not present, requesting the authentication server to issue the identification key or the product authentication key, and receiving the identification key from the authentication server. The method according to claim 1,
Wherein if the product authentication key according to the authentication code stored in the authentication server is already issued and exists in the terminal, the authentication code is determined to be already authenticated, and if not, the authentication is first performed Way. The method of claim 3,
Wherein the authentication server includes an authentication server that receives the first authentication result and the authentication result of the first authentication server, the authentication server including a message, an image, a web page, a sound, a reward, And outputting it to a screen of the terminal. The authentication server receiving an authentication code for a specific object from the terminal;
Issuing an identification key or a product authentication key to the terminal for the received authentication code; And
And matching the product authentication key with the authentication code in the authentication server, and providing the authentication result according to the matching to the terminal. The method of claim 5,
Wherein the terminal accesses the authentication server through the connection information obtained from the identification mark associated with the specific object, and the terminal obtains the authentication code from the identification mark and provides the authentication code to the authentication server . The method of claim 5,
The authentication server requests the product authentication key from the terminal, and if the product authentication key corresponding to the authentication code stored in the authentication server has already been issued, the authentication code is already authenticated, and if not, And a second authentication step of authenticating the user. The method of claim 7,
When the authentication is performed for the first time and the authentication is already performed, authentication results including a message, an image, a web page, a sound, a reward, or a combination thereof provided to the terminal by the authentication server are expressed differently, The authentication method comprising: Acquiring connection information of an authentication server and an authentication server associated with a specific object in the terminal, accessing the authentication server using the connection information, and transmitting the authentication code;
Confirming whether the authentication server has an identification key or a product authentication key;
Checking whether an identifier or a product authentication key is present in the terminal, transmitting the identification key or the product authentication key if it exists, and transmitting a predetermined identifier, if not existing, to the authentication server; And
Providing an initial authentication result to the terminal if it is determined that the product authentication key corresponding to the authentication code stored in the authentication server does not exist and providing an authentication result to the terminal that the authentication result is already authenticated The method comprising the steps of: The method of claim 9,
If the authentication server confirms whether the identification key or the product authentication key exists in the terminal, and if the authentication server does not exist, the authentication server issues the identification key or the product authentication key to the terminal How to Activate. An identification tag acquiring unit for acquiring an authentication code related to a specific object and access information of an authentication server;
A connection request unit connecting to the authentication server through the connection information and transmitting the authentication code;
A key verification unit for confirming whether an identification key or a product authentication key is issued according to a request of the authentication server and transmitting a response to the authentication server; And
And an authentication result display unit for receiving an authentication result from the authentication server and outputting the authentication result to a screen. The method of claim 11,
Wherein the transmitting of the response to the authentication server by checking whether the identification key or the product authentication key is issued from the terminal is performed by transmitting the identification key or the product authentication key to the authentication server if it exists, To the activation terminal. The method of claim 12,
Wherein the authentication terminal determines that the authentication code is already authenticated if the product authentication key according to the authentication code stored in the authentication server has already been issued and is present, 14. The method of claim 13,
The authentication result including the message, the image, the web page, the sound, the reward, or a combination thereof provided by the authentication server is output to the screen differently when the authentication is first performed and when the authentication is already performed Wherein the activation terminal comprises: A connection control unit for receiving a connection request from a terminal and receiving an authentication code for a specific object;
A key issuing unit for issuing a product authentication key, an identification key, or a combination thereof to the terminal for the received authentication code, terminal, or combination thereof;
An authentication information storage unit for matching and storing the identification key, the product authentication key, or a combination thereof, and the authentication code; And
And providing an authentication result to the terminal according to the matching. 16. The method of claim 15,
Wherein the terminal accesses through access information obtained from an identification mark associated with the specific object, and the terminal obtains and provides the authentication code from the identification mark. 16. The method of claim 15,
Wherein the authentication platform can confirm whether the identification key, the product authentication key, or a combination thereof has already been issued from the terminal to issue an identification key or a product authentication key. 18. The method of claim 17,
If the authentication code, the product authentication key, or a combination thereof is issued for the first time, the authentication code is first authenticated, and if the authentication code, the product authentication key, or a combination thereof has been issued, Wherein the activation platform is located on a computer. 19. The method of claim 18,
The authentication result including the message, the image, the web page, the sound, the reward, or a combination thereof provided to the terminal is differently displayed on the screen of the terminal when the authentication is performed for the first time An activation platform with.

Images