RU2679545C1 - Products authenticity verification method - Google Patents

Abstract

FIELD: testing equipment.SUBSTANCE: invention relates to the product authenticity verification method. Method is implemented using the system containing a public blockchain type database (DB) connected to the Internet and configured to assign identifiers to the DB users; make calls of the programmed by users data management functions (smart contract), which are able to perform the following actions: in case if the product with the specified identifier is missing in the DB, add the product identifier and indicate this product identifier compliance with the manufacturer identifier; change the correspondence between the product identifier and the owner identifier in the presence of a digital signature (EDS) from the current product owner and the new owner EDS; change the correspondence between the product identifier and the owner identifier with the transactions between chain owners the specification with all of the intermediate owners correct EDS indication; add the users smart-contracts; wherein at the next product transfer, the current owner sends the signed by its signature transaction directly to the next owner, avoiding the need to make the transaction into the blockchain.EFFECT: technical result is reduction in the transaction costs, increase in the products transferring procedure productivity.1 cl

Description

FIELD OF THE INVENTION

The present invention relates to methods for tracking the authenticity of the product, control and reduce the likelihood of counterfeit copies.

State of the art

Various methods for authenticating products are currently known. Among them:

1) applying to the product special distinctive holographic stickers (RF patent No. 2242802, priority dated 04.17.2003);

2) drawing on the product a special identifying code, with the possibility of checking in a public database the compliance of this code with this product (RF patent No. 2225032, priority dated October 18, 2002);

3) applying RFID tags (RF patent No. 2292587, priority dated June 21, 2005);

4) record of the product identifier and the identifier of the current owner in a blockchain-type database (DB) (RF patent No. 2639015, priority dated January 26, 2017; RF patent No. 2643503, priority dated May 12, 2017).

The disadvantage of the method using holographic stickers is the difficulty of checking such stickers for authenticity; requires special equipment, often inaccessible to a wide consumer, this complicates the application of the method.

The disadvantage of the method using the identifying code is that when an attacker receives at least one reliable product identifier, nothing prevents the production of copies with the same identifier. This significantly narrows the scope of the method.

The disadvantage of the method using RFID tags is the need to have special equipment, both for the production of tags and for checking them. Such equipment is often inaccessible to a wide consumer, which complicates the application of the method.

A method using recording information about the product and the current owner in a blockchain-type database seems to be the most promising. This method has several advantages compared to other methods of tracking the authenticity of the product: in addition to the identifier of the product itself, the identifier of each subsequent owner of the product is recorded in a publicly accessible database, forming a continuous chain. At the next transfer, the participant who wants to take possession of the product can verify that the product in front of him is really genuine by comparing the information about the current owner with a unique product identifier in the database, and also make sure that the product with this identifier was actually produced.

A situation is possible in which the owner of the genuine product transfers the counterfeit product under the guise of genuine. But he does not make economic sense to do this - after the transfer of the counterfeit product, the record of ownership of the product will be changed to the next owner, thus, the original product left in the hands of the seller will lose its legal status, which will invariably affect its value downward.

Another argument in favor of this type of database is its immutability properties: even the manufacturer of the products will not be able to replace information about the owner either intentionally or erroneously, thus the credibility of it is higher than that of traditional databases.

An additional argument is that blockchain-type databases have the high availability feature, so it is not susceptible to DDoS attacks.

At the moment, the EverLedger project is known (EverLedger Project, information at https://www.everledger.io/#technology), which implements a system for controlling the authenticity of precious products based on blockchain technology. However, in addition to the fact that the system exists and operates, there is no public information about its technical structure.

A known method of verifying the authenticity of goods or services (RF patent No. 2643503, priority of 05/12/2017), based on blockchain technology. The technical result of the described method is the ability to configure access rights to data stored in the database about goods or services. The idea of the method is that not all product data should be publicly available; in this case, part of the data should be available only to authorized persons (for example, regulatory authorities), and the rest of the data is available to the ordinary buyer.

One of the possible implementations of this method is known (Immersion in blockchain technology: the fight against counterfeit goods, article at https://habrahabr.ru/company/microsoft/blog/312054/), a method is proposed in which:

при производстве изделия, назначают уникальный идентификатор изделию;

in the manufacture of the product, assign a unique identifier to the product;

наносят на изделие назначенный идентификатор;

apply the assigned identifier to the product;

ставят в соответствие идентификатору изделия публично известный идентификатор изготовителя, и записывают данное соответствие в БД блокчейн;

associate the product identifier with the publicly known identifier of the manufacturer, and record this correspondence in the blockchain database;

(А) при передаче изделия следующему владельцу, передающая сторона посылает в блокчейн транзакцию о передаче прав на изделие следующему владельцу, указывая при этом идентификатор нового владельца;

(A) when transferring the product to the next owner, the transferring party sends to the blockchain a transaction on the transfer of rights to the product to the next owner, indicating the identifier of the new owner;

посылают транзакцию в блокчейн от принимающей стороны о согласии на принятие изделия во владение; ставят в соответствие идентификатору изделия идентификатор нового владельца и записывают данное соответствие в базу данных блокчейн;

send the transaction to the blockchain from the receiving party about the consent to take possession of the product; match the identifier of the product with the identifier of the new owner and record this correspondence in the blockchain database;

при последующих передачах переходят к пункту А. Известный способ принят за прототип. Однако, известный способ имеет недостатки.

in subsequent gears go to step A. The known method is adopted as a prototype. However, the known method has disadvantages.

One of them is high transaction costs. When transferring a large number of products, for example, a batch, it is necessary to carry out a large number of transactions, which is associated with tangible costs.

Another disadvantage is the need for a potentially long wait for a transaction record to be entered into the block at each transfer.

Disclosure of invention

The technical result of the invention is

1) reduction of transaction costs for participants in the ownership chain,

2) increasing the productivity of the product transfer procedure,

To this end, a method of product authentication is proposed, implemented using a system containing

базу данных (БД) типа публичный блокчейн, связанную с сетью Интернет и выполненную с возможностью:

a public blockchain-type database (DB) associated with the Internet and made with the possibility of:

назначать идентификаторы пользователям БД;

assign identifiers to database users;

осуществлять вызовы запрограммированных пользователями функций по управлению данными (смарт-контракт), которые способны выполнять следующие действия

make calls to user-programmed data management functions (smart contract) that are able to perform the following actions

в случае, если изделие с заданным идентификатором отсутствует в БД, добавлять идентификатор изделия и указывать соответствие этого идентификатора изделия идентификатору производителя;

if the product with the given identifier is not in the database, add the product identifier and indicate the correspondence of this product identifier to the manufacturer’s identifier;

менять соответствие между идентификатором изделия и идентификатором владельца, при наличие электронной цифровой подписи (ЭЦП) от текущего владельца изделия и ЭЦП нового владельца;

change the correspondence between the product identifier and the owner identifier, if there is an electronic digital signature (EDS) from the current owner of the product and the digital signature of the new owner;

менять соответствие между идентификатором изделия и идентификатором владельца, при указании цепочки транзакций между владельцами, с указанием корректных ЭЦП всех промежуточных владельцев;

добавлять смарт-контракты пользователей; способ заключается в том, что

change the correspondence between the product identifier and the owner identifier, when specifying the chain of transactions between the owners, indicating the correct digital signature of all intermediate owners;

Add user smart contracts the way is that

назначают уникальный идентификатор производителю в БД;

assign a unique identifier to the manufacturer in the database;

формируют смарт-контракт в БД, содержащий идентификатор производителя;

form a smart contract in the database containing the identifier of the manufacturer;

если произведено новое изделие, то

if a new product is made, then

назначают уникальный идентификатор изделию;

наносят назначенный идентификатор на изделие;

assign a unique identifier to the product;

put the assigned identifier on the product;

записывают в БД посредством смарт-контракта данные о соответствии идентификатора изделия идентификатору производителя; при необходимости передать изделие от производителя новому владельцу,

write to the database through a smart contract data on the correspondence of the product identifier to the manufacturer’s identifier; if necessary, transfer the product from the manufacturer to the new owner,

если у нового владельца отсутствует идентификатор в БД, назначают уникальный идентификатор новому владельцу;

if the new owner does not have an identifier in the database, a unique identifier is assigned to the new owner;

формируют транзакцию на передачу изделия от производителя новому владельцу, указывая идентификатор изделия, идентификатор производителя, идентификатор нового владельца;

form a transaction for transferring the product from the manufacturer to the new owner, indicating the product identifier, manufacturer identifier, identifier of the new owner;

подписывают сформированную транзакцию ЭЦП производителя;

sign the generated transaction with a digital signature of the manufacturer;

отправляют сформированную транзакцию новому владельцу;

send the generated transaction to the new owner;

проверяют правильность указания идентификаторов производителя, нового владельца и изделия; если какой-либо из идентификаторов указан неверно, то прерывают сделку;

check the correctness of the identifiers of the manufacturer, new owner and product; if any of the identifiers is indicated incorrectly, they terminate the transaction;

проверяют корректность ЭЦП производителя; если проверка прошла неуспешно, то прерывают сделку;

check the correctness of the manufacturer's EDS; if the verification is unsuccessful, then the transaction is terminated;

проверяют соответствие идентификатора изделия идентификатору производителя в БД; если проверка прошла неуспешно, то прерывают сделку;

check compliance of the product identifier with the manufacturer identifier in the database; if the verification is unsuccessful, then the transaction is terminated;

производят передачу изделия от производителя новому владельцу;

transferring the product from the manufacturer to the new owner;

подписывают транзакцию ЭЦП нового владельца;

Sign a new owner’s EDS transaction;

если изделие не планируется более передавать в ближайшее время, то записывают транзакцию в БД посредством смарт-контракта, иначе сохраняют полученную транзакцию у нового владельца;

if the product is not planned to be transferred anymore in the near future, then the transaction is recorded in the database through a smart contract, otherwise the received transaction is saved from the new owner;

if necessary, transfer the product from the current owner to the new owner, if the fact of ownership of the product by the current owner is recorded in the database,

формируют транзакцию на передачу изделия от текущего владельца новому владельцу, указывая идентификатор изделия, идентификатор текущего владельца, идентификатор нового владельца;

form a transaction for transferring the product from the current owner to the new owner, indicating the product identifier, identifier of the current owner, identifier of the new owner;

подписывают сформированную транзакцию ЭЦП текущего владельца;

Sign the generated EDS transaction of the current owner;

отправляют сформированную транзакцию новому владельцу;

send the generated transaction to the new owner;

проверяют корректность ЭЦП текущего владельца; если проверка прошла неуспешно, то прерывают сделку;

check the correctness of the EDS of the current owner; if the verification is unsuccessful, then the transaction is terminated;

проверяют соответствие идентификатора изделия идентификатору текущего владельца, если проверка прошла неуспешно, то прерывают сделку;

check the correspondence of the product identifier to the identifier of the current owner; if the verification is unsuccessful, then the transaction is terminated;

производят передачу изделия от текущего владельца новому владельцу;

transferring the product from the current owner to the new owner;

подписывают транзакцию ЭЦП нового владельца;

Sign a new owner’s EDS transaction;

если изделие не планируется более передавать в ближайшее время, то записывают транзакцию в БД посредством смарт-контракта, иначе сохраняют полученную транзакцию у нового владельца;

if the product is not planned to be transferred anymore in the near future, then the transaction is recorded in the database through a smart contract, otherwise the received transaction is saved from the new owner;

if necessary, transfer the product from the current owner to the new owner, if the fact of ownership of the product by the current owner is not recorded in the database,

формируют расширенную транзакцию на передачу изделия от текущего владельца новому владельцу, указывая

form an extended transaction for the transfer of the product from the current owner to the new owner, indicating

идентификатор изделия;

Product ID

идентификатор текущего владельца, идентификатор нового владельца;

identifier of the current owner, identifier of the new owner;

всю цепочку предыдущих транзакций передач от идентификатора владельца, зафиксированного в базе данных, вплоть до текущего владельца;

the entire chain of previous transfer transactions from the owner identifier recorded in the database, up to the current owner;

подписывают расширенную транзакцию ЭЦП текущего владельца;

Sign an extended EDS transaction of the current owner;

отправляют расширенную транзакцию новому владельцу;

send an extended transaction to the new owner;

проверяют корректность ЭЦП всех владельцев из цепочки транзакций в составе расширенной транзакции; если проверка прошла неуспешно, то прерывают сделку;

check the correctness of the digital signature of all owners from the transaction chain as part of an extended transaction; if the verification is unsuccessful, then the transaction is terminated;

производят передачу изделия от текущего владельца новому владельцу;

transferring the product from the current owner to the new owner;

подписывают расширенную транзакцию ЭЦП нового владельца;

Sign an extended digital signature transaction of the new owner;

если изделие не планируется более передавать в ближайшее время, записывают расширенную транзакцию в БД посредством смарт-контракта, иначе сохраняют расширенную транзакцию.

if the product is not planned to be transferred anymore in the near future, the extended transaction is written to the database through a smart contract, otherwise the extended transaction is saved.

The next time the product is transferred, the current owner sends the transaction signed by his signature directly to the next owner, avoiding the need to make the transaction on the blockchain. This avoids transaction and time costs when transferring the product.

Currently, the average transaction cost is about 0.7 USD, and the transaction confirmation time on the Ethereum blockchain network is on average 10 seconds (Ethereum blockchain platform, information at www.ethereum.org). In the event that it is required to make records for a plurality of products (lots), the costs can become significant.

Despite the fact that the transaction on the fact of the transfer of the product is not sent to the blockchain, at any time the new owner has evidence of ownership: the entire chain of signed transfers, from the manufacturer, to the current owner. If the new owner wants to consolidate his ownership status in the blockchain, he sends the extended transaction to the smart contract; In an extended transaction, all intermediate transfers are fixed that took place, starting from the last owner recorded in the blockchain, and to the current owner.

It can be noted that if the manufacturer implemented the proposed method, the attackers have little motivation for the production of counterfeit products attributed to this manufacturer. Since the procedure for establishing the correspondence of the owner and the unique identifier of a product is fixed in an immutable smart contract that can be studied in a blockchain type database, any buyer, having access to the Internet, can authentically verify the authenticity of the product. If the identifier of the transferred product does not appear on the blockchain, then it is clearly counterfeit, since the manufacturer did not manufacture the product with this identifier. If in the blockchain the product identifier is assigned to another owner, and the current owner does not have proof of transfer of the product from the previous owner, then the product is either illegally acquired or counterfeit, which will significantly complicate its sale.

A scenario is possible in which an attacker acquires a genuine product in order to produce counterfeit copies of it. If, when selling a counterfeit product, an attacker convinces the new owner not to send the transaction to the blockchain and does not fix his owner status, the attacker still has the opportunity to resell the counterfeit copy of the product until the new owner sends the transaction to the smart contract.

In practice, however, such a development of events is unlikely: if the product is piecewise and expensive, for example, such as a gem or a picture, with a high degree of probability the next buyer will want to secure his status on the blockchain at the time of transfer, and thereby interfere with the attacker sell counterfeit copies.

If there is a sale of a less expensive product, for example, a watch, then in this case, only the mass sale of counterfeit copies of the product can become economically viable for the attacker, and this is unlikely to happen, since with each new buyer the probability that he will fix the status of the owner in the blockchain is increasing.

With this in mind, the proposed method, despite the possibility of introducing counterfeit into the chain, nevertheless, in practice, significantly complicates the mass production of counterfeit copies.

The implementation of the invention

The implementation of the proposed method can be demonstrated by the example of a gemstone authentication system.

The jewelry manufacturer creates an identifier in the Ethereum DB public blockchain ((Ethereum Blockchain Platform, information at www.ethereum.org)): in this case, the identifier is the hash value from the public key; The private key is kept by the manufacturer.

The producer writes to the blockchain a smart contract implemented in the Solidity programming language (Solidity programming language, information at solidity.readthedocs.io/en/v0.4.21/), made with the possibility of:

добавлять новые изделия в БД, в случае, если изделие с заданным идентификатором до сих пор не было добавлено;

add new products to the database, if the product with the given identifier has not yet been added;

назначать соответствие идентификатору изделия идентификатор владельца, при условии наличия ЭЦП текущего владельца и нового владельца;

Assign the owner’s identifier to the product’s identifier, subject to the availability of the EDS of the current owner and new owner

изменять соответствие между идентификатором изделия и идентификатором владельца, при указании цепочки транзакций между владельцами, с указанием корректных ЭЦП всех промежуточных владельцев.

change the correspondence between the product identifier and the owner identifier, when specifying the chain of transactions between the owners, indicating the correct digital signatures of all intermediate owners.

In the manufacture of jewelry, a unique identifier is assigned to the product and applied to the product, for example, by the famous engraving method.

Then, the correspondence of the product identifier to the manufacturer identifier is recorded. The manufacturer’s identifier is publicly known, for example, published on the manufacturer’s official website. Thus, anyone can make sure that the product was manufactured by this manufacturer.

When selling a product, in case the buyer does not have an identifier in the Ethereum blockchain, a unique identifier is created for the buyer.

The manufacturer generates a transaction, which indicates the identifier of the transferred product, buyer and manufacturer; Signs a transaction with his own digital signature and sends it to the buyer. The buyer checks the correctness of filling in the fields and, in the case of a successful check, signs the transaction with his own digital signature. Depending on the further intentions of the new owner (buyer), the following can be done:

если изделие не планируется в ближайшее время передавать другому лицу, записывают сформированную транзакцию в блокчейн, используя смарт-контракт производителя; таким образом, соответствие между идентификатором данного изделия и идентификатором владельца будет надежно зафиксировано;

if the product is not planned to be transferred to another person in the near future, the generated transaction is recorded on the blockchain using the manufacturer’s smart contract; thus, the correspondence between the identifier of this product and the identifier of the owner will be reliably recorded;

если изделие планируется в ближайшее время передавать другому лицу, либо, если происходит передача сразу большого количества изделий, то можно не производить транзакцию, а сохранить ее у нового владельца на каком-либо носителе для возможности подтвердить свое право владения изделием в будущем, без необходимости проводить транзакцию в блокчейн.

if the product is planned to be transferred to another person in the near future, or if a large number of products are transferred immediately, then you can not make a transaction, but save it from the new owner on some medium to be able to confirm your ownership of the product in the future, without having to blockchain transaction.

When carrying out the next transfer of the product between the current owner and the new owner, if the correspondence between the product identifier and the identifier of the current owner was not fixed in the blockchain, do the following:

если у нового владельца отсутствует идентификатор в блокчейне, создают уникальный идентификатор (ключевая пара);

if the new owner does not have an identifier in the blockchain, create a unique identifier (key pair);

создают сетевое соединение между текущим владельцем и новым владельцем;

create a network connection between the current owner and the new owner;

формируют на стороне текущего владельца расширенную транзакцию, в которой указывают идентификатор текущего владельца, идентификатор нового владельца, идентификатор изделия, а также указывают сохраненную ранее транзакцию в качестве доказательства передачи изделия от производителя текущему владельцу;

form an extended transaction on the side of the current owner, in which the identifier of the current owner, the identifier of the new owner, the identifier of the product are indicated, and also the transaction saved earlier is indicated as evidence of the transfer of the product from the manufacturer to the current owner;

подписывают сформированный блок данных ЭЦП текущего владельца;

Sign the generated block of EDS data of the current owner;

отправляют расширенную транзакцию по сетевому соединению новому владельцу;

send an extended transaction over the network connection to the new owner;

на стороне нового владельца проверяют правильность заполнения полей, корректность ЭЦП текущего владельца и корректность транзакции, подтверждающей переход изделия от производителя текущему владельцу;

on the side of the new owner, check the correctness of filling in the fields, the correctness of the digital signature of the current owner and the correctness of the transaction, confirming the transfer of the product from the manufacturer to the current owner;

в случае, если какая-либо из проверок прошла неуспешно, прерывают сделку;

in the event that any of the checks was unsuccessful, the transaction is terminated;

проводят передачу изделия от текущего владельца новому владельцу;

transferring the product from the current owner to the new owner;

подписывают полученную транзакцию ЭЦП нового владельца;

Sign the received digital signature transaction of the new owner;

сохраняют транзакцию у нового владельца, либо отправляют ее в блокчейн, в смарт-контракт производителя.

save the transaction to the new owner, or send it to the blockchain, to the manufacturer’s smart contract.

As the EDS algorithm, the ECDSA algorithm with the elliptic curve secp256k1 can be used. This algorithm allows you to find out the public key of the signatory, if the signed information is known.

A software module that implements the formation of a transaction when transferring a product from owner to owner via a direct information channel can be implemented in any general-purpose programming language, for example, Python (Python programming language, information at www.python.org).

At the next transfer of the product, the current owner sends the transaction signed by his EDS directly to the next owner, avoiding the need to make a transaction on the blockchain. This avoids the transaction costs of paying for the transaction and waiting for the transaction to be included in the block.

Despite the fact that the transaction was not sent to the blockchain, at any time, the new owner has evidence of ownership: the entire chain of signed transfers, from the manufacturer, to the current owner.

The difficulty in the appearance of counterfeit copies is achieved due to the fact that an attempt to transfer the product with the identifier indicated on it allows you to check in the database the correspondence between the identifier of the current owner and the identifier of the transferred product.

If the identifier of the transmitting party does not match what is indicated in the database, it leads to an interruption of the transaction. The method also involves the ability to present evidence of ownership in addition to the database, through a direct information channel. But this can only be done by the true owner, since each transmission is certified by the digital signature of the transmitting party, which originates from the manufacturer.

Claims (46)

A method of authenticating products implemented using a system containing a public blockchain-type database (DB) connected to the Internet and configured to assign identifiers to database users; make calls of data management functions programmed by users (smart contract), which are able to perform the following actions: if the product with the given identifier is not in the database, add the product identifier and indicate the correspondence of this product identifier to the manufacturer’s identifier; change the correspondence between the product identifier and the owner identifier in the presence of an electronic digital signature (EDS) from the current owner of the product and the digital signature of the new owner; change the correspondence between the product identifier and the owner identifier when specifying the chain of transactions between owners with the correct EDS of all intermediate owners; Add user smart contracts the way is that assign a unique identifier to the manufacturer in the database; form a smart contract in the database containing the identifier of the manufacturer; if a new product is made, then assign a unique identifier to the product; put the assigned identifier on the product; write to the database through a smart contract data on the correspondence of the product identifier to the manufacturer’s identifier; if necessary, transfer the product from the manufacturer to the new owner, if the new owner does not have an identifier in the database, a unique identifier is assigned to the new owner; form a transaction for transferring the product from the manufacturer to the new owner, indicating the product identifier, manufacturer identifier, identifier of the new owner; sign the generated transaction with a digital signature of the manufacturer; send the generated transaction to the new owner; check the correctness of the identifiers of the manufacturer, new owner and product; if any of the identifiers is indicated incorrectly, they terminate the transaction; check the correctness of the manufacturer's EDS; if the verification is unsuccessful, then the transaction is terminated; check compliance of the product identifier with the manufacturer identifier in the database; if the verification is unsuccessful, then the transaction is terminated; transferring the product from the manufacturer to the new owner; Sign a new owner’s EDS transaction; if the product is not planned to be transferred anymore in the near future, then the transaction is recorded in the database through a smart contract, otherwise the received transaction is saved from the new owner; if necessary, transfer the product from the current owner to the new owner, if the fact of ownership of the product by the current owner is recorded in the database, form a transaction for transferring the product from the current owner to the new owner, indicating the product identifier, identifier of the current owner, identifier of the new owner; Sign the generated EDS transaction of the current owner; send the generated transaction to the new owner; check the correctness of the EDS of the current owner; if the verification is unsuccessful, then the transaction is terminated; check that the product identifier matches the identifier of the current owner; if the verification is unsuccessful, then the transaction is terminated; transferring the product from the current owner to the new owner; Sign a new owner’s EDS transaction; if the product is not planned to be transferred anymore in the near future, then the transaction is recorded in the database through a smart contract, otherwise the received transaction is saved from the new owner; if necessary, transfer the product from the current owner to the new owner, if the fact of ownership of the product by the current owner is not recorded in the database, form an extended transaction for the transfer of the product from the current owner to the new owner, indicating Product ID identifier of the current owner, identifier of the new owner; the entire chain of previous transfer transactions from the owner identifier recorded in the database, up to the current owner; Sign an extended EDS transaction of the current owner; send an extended transaction to the new owner; check the correctness of the digital signature of all owners from the transaction chain as part of an extended transaction; if the verification is unsuccessful, then the transaction is terminated; transferring the product from the current owner to the new owner; Sign an extended digital signature transaction of the new owner; if the product is not planned to be transferred anymore in the near future, the extended transaction is written to the database through a smart contract, otherwise the extended transaction is saved.