TW201701611A - Authenticity determination device, authenticity determination system, and authenticity determination method - Google Patents

Abstract

The present invention relates to an authenticity determination device which determines whether a machine is authentic or an imitation. This authenticity determination device is provided with: a communication unit which receives component information indicating information about components constituting the inside of a target device for which authenticity is to be determined, device information indicating information specific to the target device, and signature information for the combination of the component information and the device information of the target device; a verification key storage unit which stores a verification key corresponding to a generating key that generated the signature information; a signature verification unit which uses the verification key to verify the validity of the combination of the component information, the device information and the signature information received by the communication unit; and a determination unit which determines the authenticity of the target device on the basis of the validity verified by the signature verification unit.

Description

Authentic product identification device, authentic product identification system, and authentic product identification method

The present invention relates to a genuine product discrimination device for discriminating that a machine is a regular product or an imitation product.

With the development of machine manufacturing technology, the imitation of counterfeit regular machines has become easier, and the importance of discriminating techniques for identifying genuine and imitation products has increased. As one of the methods for discriminating genuine products, there is a method in which only the information for authentic product manufacturer's genuine product identification can be generated, and attached to the machine in the form of a barcode or a two-dimensional barcode, etc., by reading this. Bar code for authentic product identification. Patent Document 1 discloses that the identification information unique to each machine is cryptographically recognized by a key known to a regular machine manufacturer, and the cryptographic data obtained by the machine is given, whereby the authenticity can be discriminated.

[advance technical documents] [Patent Document]

[Patent Document 1] Japanese Patent Publication No. 2007-166519

Patent Document 1 method, since only regular machine builders It is possible to generate correct authentic product identification information as a barcode, and provide a structure that can detect this information even if a malicious attacker appropriately prepares the information for authentic product identification. However, when the attacker succeeds in the normal machine, the copying of the correct authentic product identification information bar code is given to the machine, and the imitation machine is provided, and there is a problem that the imitation product can be produced by the genuine product. In addition, it is possible to detect inappropriate information when the same number of genuine product identification information is found, but this method may only work when a small number of machines perform genuine product identification.

Since the present invention is formed to solve the above-mentioned problems, not only the information on the barcode, but also the information constituting the components inside the machine is acquired at the same time, and the authentic product identification is performed, so that the imitation product generated according to the barcode copy can be detected. The purpose of the authentic product discriminating device.

In order to solve the problem, the authenticity product discriminating device of the present invention includes a communication unit that receives component information that displays information of components inside the device that determines the authenticity of the authenticity, device information that displays the unique information of the device to be identified, and The signature information of the device information of the target device and the component information; the verification key memory unit memorizes the verification key corresponding to the generation key of the signature information; the signature verification unit uses the verification key to verify the component information and device information received by the communication unit and The matching legitimacy of the signature information; and the determination unit determines the authenticity of the device to be determined based on the validity of the verification by the signature verification unit.

According to the present invention, the information of the components constituting the inside of the machine is simultaneously obtained, and the authentic product discrimination is performed, and the effect of detecting the copy produced by the copying of the barcode is obtained.

1‧‧‧ Genuine product identification device

2‧‧‧Target device

3‧‧‧Densus information registration device

4‧‧‧ Genuine product identification system

5‧‧‧Discrimination information acquisition device

6‧‧‧Network

20‧‧‧Verification key memory

21‧‧‧Signature Verification Department

22‧‧‧Discrimination Department

23‧‧‧Communication Department

30‧‧‧ Busbars

31‧‧‧ memory

32‧‧‧ processor

33‧‧‧Communication module

34‧‧‧Input interface

35‧‧‧ display

40‧‧‧ components

41‧‧‧Component Information Memory Department

42‧‧‧Component Information Acquisition Department

43‧‧‧Communication Department

44‧‧‧Device Information Memory Department

45‧‧‧Signature Memory

70‧‧‧ busbar

71‧‧‧ memory

72‧‧‧ processor

73‧‧‧Communication module

74‧‧‧ input interface

75‧‧‧ display

80‧‧‧ Signature Key Generation Department

81‧‧‧ Signature key to the memory department

82‧‧‧Signature Generation Department

83‧‧‧Communication Department

84‧‧‧Digital Information Registration Department

100‧‧‧ busbar

101‧‧‧ memory

102‧‧‧Processor

103‧‧‧Barcode printing machine

104‧‧‧Communication module

105‧‧‧Input interface

106‧‧‧ display

110‧‧‧Component Information Acquisition Department

111‧‧‧Device Information Acquisition Department

112‧‧‧Communication Department

113‧‧‧Display Department

120‧‧‧ busbar

121‧‧‧ memory

122‧‧‧Processor

123‧‧‧Barcode Reader

124‧‧‧ camera

125‧‧‧Communication Module

126‧‧‧ input interface

127‧‧‧ display

160‧‧‧Received Data Verification Department

170‧‧‧ Input Department

[Fig. 1] is a view showing an example of a configuration of a genuine product discrimination system for determining the legitimacy of the determination target device 2 by the authentic product discrimination device 1 of the first embodiment; [Fig. 2] shows the authenticity of the first embodiment. FIG. 3 is a view showing an example of the hardware configuration of the genuine product discrimination device 1; FIG. 4 is a view showing a configuration of the discrimination target device 2 of the first embodiment. [Fig. 5] is a diagram showing an example of component information stored in the component information storage unit 41; [Fig. 6] is an example diagram showing device information memorized by the device information storage unit 44; [Fig. 7] An example of the hardware configuration of the discrimination target device 2 is shown; [Fig. 8] shows a configuration example of the discrimination information registration device 3 of the first embodiment; [Fig. 9] shows the signature key pair memory unit. An example diagram of the generation key and the verification key of the memory; [Fig. 10] is an example diagram showing the hardware configuration of the discrimination information registration device 3; [Fig. 11] shows the discrimination information acquisition apparatus of the first embodiment. An example of a configuration of 5; [Fig. 12] is a diagram showing an example of the hardware configuration of the discrimination information acquisition device 5; [Fig. 13] is a flowchart showing the flow of the operation of the discrimination information registration device 3 of the first embodiment; [Fig. 14] A flowchart showing the flow of the operation of the authenticity product discriminating device 1 of the first embodiment; [Fig. 15] shows the legitimacy of the discriminating device 2 for judging the connected network by the authentic product discriminating device 1 of the second embodiment. An example of a genuine product discrimination system; [FIG. 16] shows a configuration example of the authentic product discrimination device 1 of the second embodiment; [17] shows the determination target device 2 of the second embodiment. FIG. 18 is a view showing an example of the configuration of the discrimination information acquisition device 5 of the second embodiment; and FIG. 19 is a flow chart showing the operation of the authenticity discrimination device 1 of the second embodiment. flow chart.

[First Embodiment]

1 is a view showing an example of a configuration of the authenticity product discrimination system 4 for determining the legitimacy of the determination target device 2 by the authentic product discrimination device 1 of the first embodiment.

In the first drawing, the authenticity product discrimination system 4 includes the determination target device 2, which is a target for determining a genuine product, and the discrimination information acquisition device 5 The target device 2 acquires discrimination information for discriminating the authenticity. The discrimination information is, for example, component information, device information, signature information, and the like of the discrimination target device 2. Further, the authenticity product discrimination device 1 is connected to the discrimination information acquisition device 5 via the network 6, and determines the legitimacy of the determination target device 2 by the digital signature technique based on the discrimination information acquired by the discrimination information acquisition device 5.

In the authenticity product discriminating device 1 and the discrimination target device 2, when the genuine product discrimination system 4 is manufactured at the factory, the discrimination information registration device 3 registers the discrimination information for discriminating the authenticity. After that, the authenticity discrimination device 1 having the registration determination information and the authenticity discrimination system 4 of the determination target device 2 are shipped as products from the factory.

Fig. 2 is a view showing an example of the configuration of the genuine product discriminating device 1 of the first embodiment.

The authenticity product discrimination device 1 receives the request from the discrimination information acquisition device 5, and performs the identification of the authenticity of the determination target device 2 by the digital signature technique. In the second drawing, the verification key storage unit 20 stores a verification key for verifying the signature of the signature information stored in the signature storage unit 45 of the determination target device 2.

The signature verification unit 21 performs signature verification processing by using the verification key of the signature stored in the verification key storage unit 20. This signature verification process can be implemented using signature verification techniques of existing cryptographic techniques.

The determination unit 22 performs the determination of the authenticity of the determination target device 2 based on the result of the signature verification processing executed by the signature verification unit 21.

The communication unit 23 is a communication module that communicates with the outside of the genuine product discrimination device 1.

Fig. 3 is a view showing the hardware configuration of the genuine product discrimination device 1. An example diagram.

The genuine product discrimination device 1 is a computer, and each component of the genuine product discrimination device 1 can be realized by a program. The hardware configuration of the authenticity discrimination device 1 is to connect the memory 31, the processor 32, the communication module 33, the input interface 34, and the display 35 to the bus bar 30.

The memory 31 is, for example, a main memory device such as a RAM (Random Access Memory) or a ROM (read only memory) or an external memory device such as a flash memory or a hard disk device.

The processor 32 is a CPU (Central Processing Unit) or the like that executes a program.

The communication module 33 is an electronic circuit that performs communication processing of data, such as a communication port.

The input interface 34 is a device that processes input data to the authenticity discrimination device 1, for example, a touch panel, a hardware key, a mouse, a keyboard, and the like.

The display 35 is a device that displays the output data of the authenticity determination result generated by the genuine product discrimination device 1.

The program, which is usually stored in the memory 31, is read into the processor 32 and executed. This program is a program for explaining the functions of the signature verification unit 21, the determination unit 22, and the communication unit 23 that constitute the authentic product discrimination device 1.

Further, in the external memory device of the memory 31, the operating system (OS) is also stored, and at least a part of the OS is loaded into the main memory device, and the processor 32 executes the program while executing the OS.

In the description of the following embodiment, the information or data stored in the key storage unit 20 is verified, and information, data, signal values, and variable values of the processing results of the signature verification unit 21, the determination unit 22, and the communication unit 23 are displayed as file memories. In mind Recall within body 31.

Further, the configuration of Fig. 3 is, in principle, an example of the hardware configuration of the display device, and the hardware configuration of the device is not limited to the configuration described in Fig. 3, and other configurations may be employed.

Fig. 4 is a view showing an example of the configuration of the discrimination target device 2 of the first embodiment.

The discrimination target device 2 memorizes the discrimination information for proving that it is a legitimate device, and transmits the discrimination information to the discrimination information acquisition device 5.

In Fig. 4, the element 40 indicates the consistency of the constituent elements of the discrimination target device 2. For example, an example of the component 40 is the entire interior of the device except for the frame portion in the discrimination target device 2. In the present embodiment, the case where the determination target device 2 has a single element 40 will be described. However, the determination target device 2 may have a plurality of elements.

The component information storage unit 41 stores component information on the information of the component 40.

Fig. 5 is a view showing an example of component information stored in the component information storage unit 41.

In Fig. 5, examples of component information, such as component name, component manufacturing date, component number, and the like.

The component information acquisition unit 42 receives the acquisition request from the communication unit 43, acquires the component information stored in the component information storage unit 41, and transmits the acquired component information to the communication unit 43.

The device information storage unit 44 stores device information of the information inherent in the discrimination target device 2.

Fig. 6 is a view showing an example of device information stored in the device information storage unit 44.

In Fig. 6, an example of device information, such as device name, device manufacturing date, serial number, and the like. Moreover, in this embodiment, the device information, such as a bar code or a two-dimensional code, is memorized in an optically readable form.

The signature memory unit 45 stores the component information stored in the component information storage unit 41 and the device information stored in the device information storage unit 44, and stores the signature generation key of the signature generation key stored in the memory unit 81 by the signature key of the discrimination information registration device 3. Signature of the results of the processing. Further, in the present embodiment, the signature information, such as a bar code or a two-dimensional code, is memorized in an optically readable form.

The communication unit 43 is a communication module that communicates with the outside of the determination target device 2.

Fig. 7 is a view showing an example of the hardware configuration of the discrimination target device 2.

The determination target device 2 is a computer, and each component of the determination target device 2 can be realized by a program. The hardware configuration of the determination target device 2 is to connect the memory 71, the processor 72, the communication module 73, the input interface 74, and the display 75 to the bus bar 70.

The memory 71 is, for example, a main memory device such as a RAM (Random Access Memory) or a ROM (read only memory) or an external memory device such as a flash memory or a hard disk device.

The processor 72 is a CPU (Central Processing Unit) or the like that executes a program.

The communication module 73 is an electronic circuit that performs communication processing of data, such as a communication port.

The input interface 74 is a device that processes input data for the target device 2, such as a touch panel, a hardware key, a mouse, a keyboard, and the like.

The display 75 is a device that displays the output data generated by the discrimination target device 2.

The program, usually stored in memory 71, is read into processor 72 and executed. This program is a program for explaining the functions of the component information acquisition unit 42 and the communication unit 43 that constitute the determination target device 2.

Further, in the external memory device of the memory 71, the operating system (OS) is also stored, and at least a part of the OS is loaded into the main memory device, and the processor 72 executes the program while executing the OS.

In the description of the following embodiments, the information or data stored in the component information storage unit 41, the information on the processing results of the component information acquisition unit 42 and the communication unit 43, the data, the signal value, and the variable value are stored in the memory as an archive. Within 71.

Further, the configuration of Fig. 7 is, in principle, an example of the hardware configuration of the display device, and the hardware configuration of the device is not limited to the configuration described in Fig. 7, and other configurations may be employed.

Fig. 8 is a view showing an example of the configuration of the discrimination information registration device 3 of the first embodiment.

The discrimination information registration device 3 registers the identification information of the information for authentic product identification in the authentic product discrimination device 1 and the determination target device 2.

In Fig. 8, the signature key pair generating unit 80 generates a pairing of a signature key and a verification key necessary for the digit signature. The process of generating the pairing of the generated key and the verification key can be realized by the public key cryptography technique of the existing cryptographic technique. For example, a secret key that generates an RSA cipher is used as a signature generation key, and a public key of the RSA cipher paired with the secret key is generated as a signature verification key.

The signature key pair storage unit 81 stores a paired memory of the signature generation key and the verification key generated by the signature key pair generation unit 80.

Fig. 9 is a view showing an example of a generation key and a verification key which the signature key memorizes in the memory unit 81.

In Fig. 9, the signature key pair memory unit 81 pairs and memorizes the generation key ks and the verification key kv.

The signature generation unit 82 generates signature information for the digital signature of the input provided by the signature key generation key generated by the generation unit 80. The generation of this signature information can be realized by the public key cryptography technique of the existing cryptographic technique.

The identification information registration unit 84 registers the signature key of the signature stored in the memory unit 81 by the signature key and the discrimination target device 2, and the signature generation unit 82 generates signature information and the like. In the present embodiment, when the signature information is stored in the form of a bar code or the like, the discrimination information registration unit 84 includes a bar code printer that prints a barcode or the like.

The communication unit 83 is a communication module that communicates with the outside of the discrimination information registration device 3.

Fig. 10 is a view showing an example of the hardware configuration of the discrimination information registration device 3.

The discrimination information registration device 3 is a computer, and each component of the discrimination information registration device 3 can be realized by a program. As a hardware configuration of the discrimination information registration device 3, the memory 101, the processor 102, the barcode printer 103, and the communication module are connected. 104. Input interface 105, display 106 to bus bar 100.

The memory 101 is, for example, a main memory device such as a RAM (Random Access Memory) or a ROM (read only memory) or an external memory device such as a flash memory or a hard disk device.

The processor 102 is a CPU (Central Processing Unit) or the like that executes a program.

The bar code printer 103 is a device for reprinting the signature information after the signature information is stored in the form of a bar code or the like.

The communication module 104 is an electronic circuit that performs communication processing of data, such as a communication port.

The input interface 105 is a device for processing input data for discriminating the information registration device 3, for example, a touch panel, a hardware key, a mouse, a keyboard, and the like.

The display 106 is a device that displays the output data of the information registration device 3.

The program, which is usually stored in the memory 101, is read into the processor 102 and executed. This program is a program for explaining the functions of the signature key pair generation unit 80, the signature generation unit 82, the communication unit 83, and the discrimination information registration unit 84 that constitute the discrimination information registration device 3.

Further, in the external memory device of the memory 101, the operating system (OS) is also stored, and at least a part of the OS is loaded into the main memory device, and the processor 102 executes the program while executing the OS.

In the following description of the embodiment, the signature key displays information and data of the processing result of the signature key pair generation unit 80, the signature generation unit 82, the communication unit 83, and the discrimination information registration unit 84 on the information or data stored in the storage unit 81. The signal value and the variable value are stored in the memory 101 as an archive.

Further, the configuration of Fig. 10 is, in principle, an example of the hardware configuration of the display device, and the hardware configuration of the device is not limited to the configuration described in Fig. 10, and other configurations may be employed.

Fig. 11 is a view showing an example of the configuration of the discrimination information acquisition device 5 of the first embodiment.

The discrimination information acquisition device 5 acquires the discrimination information for authenticity discrimination from the determination target device 2, and requests the authenticity product discrimination device 1 to determine the authenticity. In the eleventh diagram, the component information acquisition unit 110 acquires the component information stored in the component information storage unit 41 of the determination target device 2. The acquisition of the component information may be performed via a wired connection such as a USB (Universal Sequence Bus) connection, and may be performed via a wireless connection using NFC (Near Field Communication) or REID (Radio Frequency Identifier).

The device information acquisition unit 111 acquires the device information stored in the device information storage unit 44 of the determination target device 2 and the signature information stored in the signature storage unit 45. In the present embodiment, when the device information and the signature information are memorized in the form of a bar code or the like, the device information acquisition unit 111 can be realized, for example, by a bar code reader or a video camera.

The display unit 113 displays a display of the authenticity discrimination result and the like received from the genuine product discrimination device 1.

The communication unit 112 is a communication module that communicates with the outside of the discrimination information acquisition device 5.

Fig. 12 is a view showing an example of the hardware configuration of the discrimination information acquiring device 5.

The discrimination information acquisition device 5 is a computer, and each component of the discrimination information acquisition device 5 can be realized by a program. The hardware configuration of the information acquisition device 5 is determined. The memory 121, the processor 122, the barcode reader 123, the camera 124, the communication module 125, the input interface 126, and the display 127 are connected to the bus bar 120.

The memory 121 is, for example, a main memory device such as a RAM (Random Access Memory) or a ROM (read only memory) or an external memory device such as a flash memory or a hard disk device.

The processor 122 is a CPU (Central Processing Unit) or the like that executes a program.

The barcode reader 123 reads the barcode to obtain the signature information when the signature information is stored in the form of a barcode or the like.

The camera 124 is the same as the barcode reader 123. When the signature information is stored in the form of a bar code or the like, it is a camera having a function of reading the barcode to obtain the signature information.

The communication module 125 is an electronic circuit that performs communication processing of data, such as a communication port.

The input interface 126 is a device that processes input data for discriminating the information acquisition device 5, such as a touch panel, a hardware key, a mouse, a keyboard, and the like.

The display 127 is a device that displays the output data of the discrimination information acquisition device 5.

The program is usually stored in the memory 121, read into the processor 122, and executed. This program is a program for explaining the functions of the component information acquisition unit 110, the device information acquisition unit 111, and the communication unit 112 that constitute the discrimination information acquisition device 5.

Further, in the external memory device of the memory 121, the operating system (OS) is also stored, and at least a part of the OS is loaded into the main memory device, and the processor 122 executes the program while executing the OS.

In the description of the following embodiments, information, data, signal values, and variable values of the processing results of the display element information acquisition unit 110, the device information acquisition unit 111, and the communication unit 112 are stored in the memory 121 as files.

Further, the configuration of Fig. 12 is, in principle, an example of the hardware configuration of the display device, and the hardware configuration of the device is not limited to the configuration described in Fig. 12, and other configurations may be employed.

Next, the operational flow of the authenticity discrimination system 4 of the first embodiment will be described. The operation of the authentic product discrimination system 4 is roughly classified into (1) initial setting of the entire system (2) discrimination information registration processing (3) signature verification key registration processing (4) authentic product identification processing, and four processing. Hereinafter, each process will be described with reference to a flowchart. Further, the information transmission and reception between the devices uses the communication unit of each device.

In the processing of the above-described (1) to (3), the determination information registration device 3 registers the identification information of the information necessary for the authenticity determination of the authentic product discrimination device 1 and the determination target device 2. Further, in the present embodiment, before the registration processing, the determination target device 2 is manufactured, and the component information of the device is stored in the component information storage unit 41, and the device information about the unique information of the device is stored in the device information storage unit 44. .

Fig. 13 is a flow chart showing the flow of the operation of the discrimination information registration device 3 of the first embodiment.

(1) Initial setting of the whole system

First, in step S100, the apparatus determines that the information entered on the signature key generation portion 80 3, the digital signature is generated using the necessary signature key pair is generated and the verification key k _s k _v a. In the process of generating the signature generation key k _s and the verification key k _v , for example, the following key generation algorithm is executed.

<Key generation algorithm>

Step 1: Produce a large enough prime number p, q, n = pq.

Step 2: Select a positive number e that does not reach Φ(n) and is mutually prime with Φ(n) with Φ as the Φ function of Euler.

Step 3: Find a positive number c that becomes ce = 1 (mod Φ (n)).

Step 4: Determine c as the secret information generation key k _s and decide that e and n are the verification keys k _v of the public information.

The signature key pair generating unit 80 stores the generated signature generation key k _s and the verification key k _v in the signature key pair storage unit 81. The above is the processing of the initial setting of the entire system of the system (1).

(2) Discriminating information registration processing

Then, in step S101, the signature generation unit 82 acquires the component information p from the component information storage unit 41 of the determination target device 2 via the communication unit 83, and acquires the device information d from the device information storage unit 44. Specifically, the signature generation unit 82 transmits the acquisition request of the component information p and the device information d to the communication unit 43 of the determination target device 2. In the communication unit 43, the component information acquisition unit 42 acquires the component information p stored in the component information storage unit 41, and transmits the component information p to the communication unit 83 of the discrimination information registration device 3. Further, the communication unit 43 acquires the device information d stored in the device information storage unit 44, and transmits the device information d to the communication unit 83 of the discrimination information registration device 3. The communication unit 83 transmits the received component information p and the device information d to the signature generation unit 82.

Further, the component information p and the device information d are, for example, the component information and device resources memorized by the component information storage unit 41 and the device information storage unit 44. The link of the news is provided. Specifically, in the example of the component information p of FIG. 5, it is provided by p=XYZ-parts20141201111111, and in the example of the device information d of FIG. 6, it is provided by d=ABC-device20150115012345.

Next, in step S102, the signature generation unit 82 generates the signature information m as the association between the component information p and the device information d, and the signature generation information m executes the signature generation operation Fs by the signature generation key k _{s to} generate the signature. Information s.

<Signature generation operation>

s=Fs(m,c)=m ^c (mod n)

However, m: signature object information, c: secret information, n: public information.

Here, since c=k _s , s=Fs(m,k _s )=m ^ks (mod n)

Then, in step S103, the identification information registration unit 84 registers the signature information s in the signature storage unit 45 of the determination target device 2. Specifically, the determination information registration unit 84 transmits the registration information of the signature information s to the communication unit 43 of the determination target device 2 via the communication unit 83, and the communication unit 43 registers the received signature information s in the signature memory. In the department 45. The above is the discrimination information registration process of (2).

(3) Signature verification key registration processing

Next, in step S104, login information determination unit 84 transmits to the verification key k _v genuine counterfeit discrimination apparatus 1, authenticity verification key k _v counterfeit determination apparatus 1 receives login authentication key in the memory unit 20. The above is the verification key registration process of the signature of (3).

(4) Identification of genuine products

Next, in the authenticity product discrimination processing, the authenticity of the determination target device 2 is determined based on the authenticity product discrimination device 1 of the above (3) registration verification key.

Fig. 14 is a flow chart showing the flow of the operation of the authenticity discrimination device 1 of the first embodiment.

First, in step S200, the component information acquisition unit 110 of the discrimination information acquisition device 5 acquires the component information p stored in the component information storage unit 41 of the determination target device 2.

Then, in step S201, the device information acquisition unit 111 of the discrimination information acquisition device 5 acquires the device information d stored in the device information storage unit 44 of the determination target device 2 and the signature information s stored in the signature storage unit 45.

Next, in step S202, the communication unit 112 of the information acquisition device 5 determines that the acquired component information p, the device information d, and the signature information s are paired to the authentic product discrimination device 1.

Next, in step S203, the signature verification unit 21 of the authenticity product discrimination device 1 performs the signature verification operation F _V on the verification key k _{v to} verify whether the received signature information s is correct for the component information p and the device information d. Specifically, the signature verification unit 21 generates the signature target information m as the association between the component information p and the device information d, and performs the following signature verification operation F _{V on the} signature target information m, and verifies the signature target information m and the signature information s. Pairing legitimacy, get the verification result r.

<Signature Verification Operation>

r=Fv(m, s, e)=“verification succeeded” (when m=s ^e (mod n)) = “verification failed” (m≠s ^e (mod n))

, m: signature object information; s: signature information; e, n: public funding Message (verification key kv).

Next, in step S204, the determination unit 22 determines whether or not the verification is successful based on the verification result r generated by the signature verification unit 21. If the verification result r is "verification successful", the process proceeds to step S205 based on the Yes score, and the notification determination information acquisition means 5 determines that the target device 2 is a legitimate device. The verification result r is "verification failure", and the process proceeds to step S206 based on the No., and the notification determination information acquisition means 5 determines that the target device 2 is not a legitimate device. The discrimination information acquisition device 5, which is notified of the verification result, displays the determination result on the display unit 113 as the device information d. The above is the authentic product discrimination process of (4).

As described above, in the invention of the first embodiment, the information constituting the components inside the device is simultaneously obtained, and the effect of the imitation product generated by the bar code copying can be obtained by performing the authentic product discrimination. Because the digital signature technology confirms the pairing legitimacy of the component information p, the device information d, and the signature information s, even if a malicious attacker can obtain a barcode including the device information d and the signature information s, as long as the corresponding component does not exist, It is not possible to make imitations that are judged by genuine products.

Further, even in the case where the corresponding element is present, since the copying of the element is more difficult than the copying of the bar code, the imitation can be made difficult to manufacture. Moreover, it is also difficult for an attacker who has only a hand-discarding component to manufacture an effect of a copy as judged by a genuine product.

Further, in the first embodiment, the digital signature technique based on the public key cipher is used, and the signature generation key and the verification key are other values, but according to the digital signature technique of the common key cipher, for example, HMAC (Hash-based Message) is utilized. Authentication Code (mandatory message verification code) and other technologies can. At this time, the signature generation key and the verification key have the same value.

Further, in the first embodiment, in the authenticity product discrimination processing of (4), the authenticity product discrimination device 1 performs only signature verification, but may perform additional verification regarding the determination of the genuine product. Examples of additional verification, such as the same information in the component information and device information, the verification method for confirming the identity, or the verification method for confirming the relationship between the date of manufacture of the component and the date of manufacture of the device, or First, remember the authenticity product identification history, and confirm the verification method of integration with the resume.

Further, in the first embodiment, the signature information is generated from the component information and the device information, but the signature information may be generated only from the component information. In particular, the determination target device 2 may not have the device information storage unit 44. However, in this case, the additional verifier method is limited as in the above-described genuine product discriminating device 1.

In the first embodiment, before the determination information registration processing of (2), the component information and device information of the determination target device 2 are stored in the component information storage unit 41 and the device information storage unit 44, but the information registration is determined. The device 3 may store component information and device information in the determination target device 2.

Further, in the first embodiment, the device information storage unit 44 and the signature storage unit 45 of the determination target device 2 are separately described, but these may be stored in the same memory area. In particular, device information and component information can be included in a single barcode.

Further, in the first embodiment, the determination target device 2 has a single element, but the determination target device 2 may have a plurality of elements. When there is a plurality of component information for a plurality of components, the signature object information includes all The component information of the department, so that it can be verified whether the combination of all components is correct.

Further, in the first embodiment, the signature object information is generated as a link between the component information and the device information. However, if the information is determined based on the respective information, the signature object information may be generated by any method.

Further, in the first embodiment, the discrimination information acquisition device 5 and the genuine product discrimination device 1 are separate devices, but the device may have both functions. Further, in the present embodiment, the determination information registration device 3 and the authenticity product discrimination device 1 are separate devices, but the device may have both functions.

In the first embodiment, the identification information registration device 3 may use the generation key and the verification key common to all the determination target devices, but may generate a generation key or a verification key different from each of the determination target devices. However, in this case, the verification key storage unit 20 of the authentic product discrimination device 1 must memorize a plurality of verification keys in a form corresponding to each determination target device.

[Second embodiment]

In the first embodiment, the determination information acquisition device 5 acquires component information, device information, and signature information from the determination target device 2, and performs authentic product discrimination. At this time, since the device information and the signature information are stored in an optically readable form, such as a bar code or a two-dimensional code, the information can be obtained by a simple operation. On the other hand, since the component is inside the discrimination target device 2, it is necessary to acquire component information via a wired connection such as a USB connection or a wireless connection such as NFC or RFID. However, when a large number of discrimination target devices 2 are used by the USB connection or the like, it is necessary to determine the conversion connection every time, and there is a problem that the operation is complicated. In the case of wireless connection such as NFC or RFID, this problem does not occur. Instead, the determination target device 2 and the discrimination information acquisition device 5 must separately construct the NFC and the RFID. The formation of elements (for example, IC chips or dedicated circuits, etc.) results in an increase in the cost of each device.

On the other hand, the device has a function of connecting to a network such as the Internet, and has become popular in recent years, and the number of devices frequently connected to the network is also increasing. At this time, if the component information is acquired via the connected network (for example, the Internet), the cost of the above operation and the device do not rise, and the component information can be used for authentic product identification. In the second embodiment, an embodiment for realizing a genuine product discrimination system is described. The component information is obtained via the connected network, and the same degree of work as in the case of the barcode unit can be performed, and the accuracy can be performed more than that of the barcode unit. Discrimination.

Next, the configuration of the genuine product discrimination device 1 of the second embodiment will be described.

Fig. 15 is a view showing an example of a genuine product discrimination system for discriminating the authenticity of the discrimination target device 2 connected to the network by the authentic product discrimination device 1 of the second embodiment.

In the fifteenth figure, the authenticity discrimination system 4 includes a discrimination target device 2 connected to the network, and a discrimination information acquisition device 5 that acquires discrimination information for authenticating from the determination target device 2. Further, the authenticity product discrimination device 1 is connected to the discrimination information acquisition device 5 via the network 6, and determines the legitimacy of the determination target device 2 by the digital signature technique based on the discrimination information acquired by the discrimination information acquisition device 5.

In the same manner as the first embodiment, the authenticity product discriminating device 1 and the discrimination target device 2, when the genuine product discrimination system 4 is manufactured at the factory, the discrimination information registration device 3 registers the discrimination information for discriminating the authenticity. After that, the authenticity discrimination device 1 having the registration determination information and the authenticity of the determination target device 2 The product discrimination system 4 is shipped as a product from the factory.

Fig. 16 is a view showing an example of the configuration of the authenticity discrimination device 1 of the second embodiment.

The authenticity product discrimination device 1 receives the request from the discrimination information acquisition device 5, and performs the identification of the authenticity of the determination target device 2 by the digital signature technique. In Fig. 16, the received data verification unit 160 verifies the validity of the paired data of the component information, the device information, and the signature information received by the communication unit 23. The other configurations are the same as those of the first embodiment.

Further, the configuration of the authenticity product discrimination device 1 is the same as the configuration shown in FIG. 3, and the program stored in the memory 31 realizes the function of the received data verification unit 160.

Fig. 17 is a view showing an example of the configuration of the discrimination target device 2 of the second embodiment.

The discrimination target device 2 memorizes the discrimination information for proving that it is a legitimate device, and transmits the discrimination information to the discrimination information acquisition device 5.

In Fig. 17, the input unit 170 receives an input from the outside of the determination target device 2. The input unit 170 can be implemented using a button or a touch panel.

The communication unit 43 is a communication module that communicates with the outside. In the second embodiment, the determination target device 2 is often connected to the network via the communication unit 43, and is in a state in which communication with the authenticity discrimination device 1 is possible.

The other configuration in Fig. 17 is the same as the configuration of the same name in the discrimination target device 2 of the first embodiment.

Further, the hardware configuration of the determination target device 2 is the same as the configuration shown in Fig. 7, and the input unit 170 is the input interface 74.

Fig. 18 is a view showing an example of the configuration of the discrimination information acquisition device 5 of the second embodiment.

The discrimination information acquisition device 5 acquires the discrimination information for authentic product discrimination from the determination target device 2, and requests the authenticity product discrimination device 1 to determine the authenticity.

The configuration of Fig. 18 is the same as the configuration of the same name in the discrimination information acquisition device 5 of the first embodiment. However, unlike the discrimination information acquisition device 5 of the embodiment, the component information acquisition unit 110 is not included.

Next, the operational flow of the authenticity discrimination system 4 of the second embodiment will be described. The operation of the authenticity product discrimination system 4 is roughly the same as that of the first embodiment, and is roughly classified into (1) initial setting of the entire system (2) determination information registration processing (3) verification key registration processing of signature (4) authentic product identification processing, Four treatments. Here, the processing of (1) to (3) is the same as that of the first embodiment, and the description thereof is omitted. Hereinafter, (4) authentic product discrimination processing will be described.

(4) Identification of genuine products

Fig. 19 is a flow chart showing the flow of the operation of the authenticity discrimination device 1 of the second embodiment.

First, in step S300, the device information acquisition unit 111 of the discrimination information acquisition device 5 acquires the device information d stored in the device information storage unit 44 of the determination target device 2 and the signature information s stored in the signature storage unit 45.

Next, in step S301, the communication unit 112 of the information acquisition device 5 is determined to transmit the paired device information d and the signature information s to the authentic product discrimination device 1. Moreover, the execution status of the transmission processing by the communication unit 112 is displayed on the display unit 113, and the operator can recognize the execution status of the transmission and confirm it.

Next, in step S302, the operator operates the discrimination target device 2 Through the operation, the input unit 170 determines the communication unit 43 of the target device 2 and transmits the component information p to the authenticity discrimination device 1. Further, the operation of the input unit 170 may be performed for a predetermined period of time before and after the transmission by the discrimination information acquisition device 5 in step S301, and may be performed immediately after the transmission, at the same time as the transmission, or immediately before the transmission.

Next, in step S303, the received data verification unit 160 verifies the pairing legitimacy of the received device information d, signature information s, and component information p. Specifically, the received device information d, the signature information s, and the component information p are verified based on information such as the reception time, the transmission time, and the IP address, whether or not the information is received from the same operator. For example, when receiving such information within a certain period of time, it is determined as information received from the same operator.

Next, in step S304, the received data verification unit 160 determines whether or not the verification performed in step S303 is successful. For example, when the device information d, the signature information s, and the component information p are received for a predetermined period of time and it is determined that the information is received from the same operator, it is determined that the verification is successful, and the process proceeds to step S305 based on the Yes. On the other hand, when it is determined that the verification has failed, the process proceeds to step S306 based on the No., and the notification determination information acquisition device 5 determines that the target device 2 is not a proper device, and ends the process.

Next, in step S305, the signature verification unit 21 of the authenticity discrimination device 1 performs the signature verification operation F _V on the verification key k _{v to} verify whether the received signature information s is correct for the component information p and the device information d. Specifically, the same as the first embodiment in step S203, the signature verification unit 21, generates the signature target information as the coupling element information m and p d, device information, the object information for this signature m, executes the following signature verification operation F _V , verifying the validity of the matching of the signed object information m and the signature information s, and obtaining the verification result r.

<Signature Verification Operation>

r=F _V (m, s, e) = "verification succeeded" (when m=s ^e (mod n)) = "verification failed" (m≠s ^e (mod n))

And, m: device object information; s: signature information; e, n: public information (verification key k _v ).

Next, in step S307, the determination unit 22 determines whether or not the verification is successful based on the verification result r generated by the signature verification unit 21. If the verification result r is "verification successful", the process proceeds to step S308 based on the Yes score, and the notification determination information acquisition means 5 determines that the target device 2 is a legitimate device. The verification result r2 is "verification failure", and the process proceeds to step S309 based on the No., and the notification determination information acquisition means 5 determines that the target device 2 is not a legitimate device. The discrimination information acquisition device 5, which is notified of the result, displays the determination result on the display unit 113 as the device information d. Further, when there is a possibility that the pairing complex received from the same operator exists, the signature verification operation is performed for all the pairs.

When the verification result r is "verification successful", the display unit 113 of the discrimination information acquisition device 5 that has received the verification result r displays the determination result of the determination device 2 as the legitimate device, and the verification result r is "verification failure", and the determination target device is displayed. 2 is not the discriminating result of the proper device.

The above is the authentic product discrimination process of (4).

As described above, in the invention of the present embodiment, the authenticity product discrimination device 1 acquires the component information p of the discrimination target device 2 via the connected network, and the device information d and the signature information s received separately according to the input operation of the operator. Whether the component information p obtained by the additional verification is the processing of the legitimate data, and has the same degree of work as the case where the bar code unit performs the genuine product identification, and has It is possible to perform the effect of authenticity discrimination with higher accuracy than the case of the bar code unit.

Further, the operator operates the input unit 170 of the determination target device 2, and by clearly indicating the transmission component information p, the determination unit 22 of the authentic product discrimination device 1 can determine the component information p and the device information d and the signature information s received from the respective devices. Is information received from the same operator.

Further, the change of the embodiment described in the first embodiment can be applied similarly to the second embodiment.

Further, in the second embodiment, in the authenticity product discrimination processing of (4), the determination unit 22 of the authenticity product discrimination device 1 performs verification of the validity of the component information p, the device information d, and the signature information s, but makes the discrimination target The device 2 and the discrimination information acquisition device 5 each have a position information acquisition unit, and also transmit position information of each device, whereby the position verification can be used to verify the validity of the determination target device 2. Specifically, when it is determined that the distance between the devices is equal to or less than a certain value based on the position information of each device, it is determined that each piece of information is received from the same operator. Further, the location information acquisition unit can be realized by using a GPS (Global Positioning System) or the like.

In addition, as another method of performing the verification of the validity of the determination target device 2, the determination information acquisition device 5 includes a random number generation unit that inputs the random number generated and displayed by the information acquisition device 5 to the input unit of the determination target device 2. 170. This random number can also be transmitted from each device to the authenticity discrimination device 1. On the other hand, the determination target device 2 may have the random number generation unit and the display unit, and the determination information acquisition device 5 may have an input unit. Further, the displayed random number may be manually input to each device, and may be mechanically read by the random number reading unit.

In the second embodiment, the authenticity verification device 1 performs the verification of the authenticity of the determination target device 2. However, the authenticity discrimination device 1 may have the random number generation unit and transmit the same random number to the determination target device 2. The identification information acquisition device 5 is displayed and displayed, and the operator confirms the validity of the random number, and the validity of the determination target device 2 is confirmed. In this case, the authenticity product discriminating device 1 can specify the IP address of the device or device based on the device information d, and the authenticity product discriminating device 1 can automatically acquire the components of the discriminating device 2 without determining the input unit 170 of the target device 2. The component information p memorized by the information storage unit 41.

1‧‧‧ Genuine product identification device

20‧‧‧Verification key memory

21‧‧‧Signature Verification Department

22‧‧‧Discrimination Department

23‧‧‧Communication Department

Claims (7)

A authenticity product discriminating device includes: a communication unit that receives component information that displays information of components inside the device that determines the authenticity of the device, device information that displays unique information of the device to be identified, and the above-described device for the discrimination target device a signature information of the pairing of the device information and the component information; a verification key storage unit that memorizes a verification key corresponding to the generation key of the signature information; and a signature verification unit that verifies the component information received by the communication unit using the verification key, The pairing legitimacy of the device information and the signature information; and the determination unit determines the authenticity of the device to be determined based on the validity of the verification by the signature verification unit. The authenticity product discriminating device according to claim 1, comprising a discriminating information registration device, comprising: a signature key pair generating unit that generates a pair of the generation key and the verification key; and a signature generation unit that determines the object from the determination The device acquires the device information and the component information, generates the signature information for pairing the device information and the component information by using the generation key generated by the signature key pair generating unit, and the identification information registration unit registers the signature key pair The verification key generated by the generation unit is in the verification key storage unit, and the signature information generated by the signature generation unit is registered in the determination target device. The authentic product discriminating device according to the first aspect of the patent application, wherein The device information and the signature information are displayed in a frame of the object of the discriminating device. The authenticity product discriminating device according to the first aspect of the invention, comprising: a component information obtaining unit that acquires the component information from the determination target device; and a device information acquisition unit that acquires the device information and the signature information from the determination target device And the discrimination information acquisition device transmits the component information, the device information, and the signature information to the communication unit. The authenticity product discriminating device according to claim 4, further comprising: a received data verification unit that acquires the component information from the determination target device via a network, and verifies the above-mentioned receiving unit receiving the information received from the determination information acquisition device The device information and the validity of the matching of the signature information and the obtained component information; wherein the signature verification unit verifies the pairing of the component information, the device information, and the signature information for verifying the validity of the received data verification unit. Justification. A genuine product discrimination system includes: a device for determining a target, comprising: a device information storage unit, device information for memorizing the information inherent in the device; a component information storage unit for memorizing display of component information of information constituting components inside thereof; and signature memory a part of the signature information for matching the device information with the component information; the discriminating information obtaining device includes: The component information acquisition unit acquires the component information from the determination target device, and the device information acquisition unit acquires the device information and the signature information from the determination target device, and the determination information acquisition device transmits the component information, the device information, and the signature. a communication to the communication unit; the communication unit receives the component information, the device information, and the signature information from the discrimination information acquisition device; and the authenticity product discrimination device includes: a verification key storage unit that memorizes a generation key corresponding to the generation of the signature information a verification key; the signature verification unit verifies the pairing validity of the component information received by the communication unit, the device information, and the signature information by using the verification key; and the determination unit determines the validity according to the verification by the signature verification unit The authenticity of the above-mentioned discrimination target device. A method for discriminating a genuine product, comprising: a product identification device for discriminating the authenticity of the device to be determined, comprising the following steps: a communication step, the communication unit receiving device information indicating the inherent information of the device to be identified, and displaying the above a component information for identifying information of components inside the target device, and signature information for pairing the device information with the component information; and a signature verification step, the signature verification unit verifies the above by using a verification key corresponding to a generation key for generating the signature information The above-mentioned component information received by the communication unit, the pairing legitimacy of the device information and the signature information, and a discriminating step, the discriminating unit verifies the above-mentioned legitimateity according to the signature verification unit The authenticity of the device to be discriminated is discriminated.