TW201944758A - Non-centralized data certificate and verification system with NFC secure element and method thereof - Google Patents

Abstract

A non-centralized data certificate and verification system with NFC secure element and a method thereof are disclosed. The method comprises: storing certificate data and a feature value by a NFC secure element of a mobile device; performing a hash operation of the certificate data and the feature value to generate a certificate data hash value by a certificate module; recording the certificate data hash value to provide a block record and a position record by a non-centralized blockchain service module, and then storing the block record and the position record into the NFC secure element; and obtaining verification data, the feature value, the block record and the position record by a verification module, and then obtaining the certificate data hash value according the block record and the position record from the non-centralized blockchain service module, performing a hash operation of the verification data and the feature value to generate a verification data hash value, and then comparing the verification data hash value with the certificate data hash value to send a comparing result of the verification data hash value and the certificate data hash value to the mobile device.

Description

   Non-centralized data storage and verification system with NFC security element and method thereof   

The present invention relates to a technology for data storage and verification, and in particular to a non-centralized data storage and verification system with near field communication (NFC) security elements and a method thereof.

In the prior art for the certification or verification of related data, it is usually necessary to store the data or related characteristic information with an impartial third party, and to assist in the certification or verification of the data with the assistance of an impartial third party.

Furthermore, the prior art also proposes an NFC-based blockchain logistics traceability tracking and anti-counterfeiting method, which provides a publicly certifiable blockchain back-end system, a blockchain gateway system, a mobile smart read-write terminal, a cache database, NFC (IC) or built-in NFC (IC) card anti-counterfeit tag, read the anti-counterfeit tag with NFC device through public key and private key method, and change the data contained in the anti-counterfeit tag with public key and private key The flow is recorded to the blockchain, and the object history is tracked through the blockchain.

However, the above-mentioned existing technologies require the assistance of a fair third party in order to document or verify the data, nor can they quickly and effectively perform complete record, certificate, and verification of the data.

Therefore, how to solve the above-mentioned shortcomings of the prior art has become a major issue for those skilled in the art.

The invention provides a non-centralized data storage and verification system and method with an NFC (Near Field Communication) security element, which can combine a mobile device with an NFC security element with a storage module, a verification module, a hash operation and a non- The centralized blockchain service performs certificate and verification of data.

The non-centralized data storage and verification system with an NFC security element in the present invention includes: a mobile device with an NFC security element, which stores the storage data and characteristic values; and a storage module, which stores the storage of the NFC security element. The hash data of the certificate data and characteristic values are hashed to generate the hash value of the certificate data; the non-centralized blockchain service module records the hash value of the certificate data from the certificate module, and then provides a block of the hash value of the certificate data Records and location records: The block records and location records of the hash value of the certificate data are transmitted to the mobile device through the certificate storage module and stored in the NFC secure element; and the authentication module obtains the authentication stored by the NFC secure element Data, characteristic values, block records and location records, and the verification data is the same or different from the certificate data, where the verification module sends a non-centralized blockchain service module based on the block records and location records from the NFC secure element Obtain the hash value of the certificate data, and then hash the verification data and characteristic values from the NFC secure element to generate a hash value of the verification data. Hash value of data as evidence information and the hash value of the non-centralized services module block chain of the recorded for comparison, to serve than the results transmitted to the mobile device.

The non-centralized data certification and verification method with an NFC security element in the present invention includes the following steps: storing the certification data and characteristic values by the NFC security element of the mobile device; and storing the certificate stored by the NFC security element by the certification module The data and characteristic values are hashed to generate the certificate data hash value; the non-centralized blockchain service module records the hash value of the certificate data from the certificate module, and then provides the block record and the hash value of the certificate data. Location record: The block record and location record of the hash value of the certificate data are transmitted to the mobile device through the certificate storage module and stored in the NFC secure element; the authentication module obtains the authentication data and characteristic values stored by the NFC secure element , Block record and location record, and the verification data is the same or different from the certificate data; and the verification module obtains the certificate data from the non-centralized blockchain service module according to the block record and location record from the NFC secure element Hash value, and then hashing the authentication data and characteristic values from the NFC secure element to generate a hash value of the authentication data, and the authentication module As evidence information hash value chain blocks and decentralized service module to compare the records of, to serve than the results sent to mobile devices.

In order to make the above features and advantages of the present invention more comprehensible, embodiments are described below in detail with reference to the accompanying drawings. Additional features and advantages of the present invention will be partially explained in the following description, and these features and advantages will be partially obvious from the description, or may be learned through practice of the present invention. The features and advantages of the invention are realized and achieved by means of elements and combinations specifically pointed out in the scope of the patent application. It should be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not intended to limit the scope of the invention as claimed.

1‧‧‧ Non-centralized data storage and verification system with NFC security element

10‧‧‧ mobile device

11‧‧‧Data Deposit Module

12‧‧‧NFC Secure Element

13‧‧‧Data Verification Module

20‧‧‧Certificate server

21‧‧‧Deposit module

30‧‧‧ Decentralized Blockchain Service Module

31‧‧‧blockchain data recording unit

32‧‧‧ Blockchain Core Recording Unit

33‧‧‧Blockchain data acquisition unit

40‧‧‧verification server

41‧‧‧Verification Module

AD‧‧‧Location History

BL‧‧‧ Block Record

D‧‧‧Documentary Information

D'‧‧‧ Verification Information

F‧‧‧ characteristic value

H‧‧‧Hash value of certificate data

H'‧‧‧ hash value of verification data

Steps S1 to S9‧‧‧‧

FIG. 1 is a schematic architecture diagram of a non-centralized data storage and verification system with NFC security elements in the present invention; and FIG. 2 is a diagram of a non-centralized data storage and verification system with NFC security elements in the present invention. Schematic flowchart of the verification method.

The following describes the embodiments of the present invention with specific specific implementation forms. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this description, and can also be implemented by other different specific implementation forms. Or apply.

FIG. 1 is a schematic architecture diagram of a non-centralized data storage and verification system 1 with an NFC (Near Field Communication) security element in the present invention. As shown in the figure, the non-centralized data storage and verification system 1 with an NFC security element may include a mobile device 10, a storage module 21, a non-centralized blockchain service module 30, and a verification module 41.

The mobile device 10 may be, for example, a smart phone, a tablet computer, or a notebook computer, and has a data storage module 11, an NFC secure element 12, and a data verification module 13. The data storage module 11 can store the storage data D and the characteristic value F, and the characteristic value F can be the characteristic value of the mobile device 10 or the NFC secure element 12, such as an identification code (ID), which can identify the mobile device 10 or NFC. The size of the secure element 12. The certificate storage module 21 and the verification module 41 may be located on the same server or different servers. For example, the certificate storage module 21 and the verification module 41 in this embodiment are located on the certificate storage server 20 and the verification operation server, respectively.器 40 中。 In the device 40. In another embodiment, the certificate storage module 21 and the verification module 41 may be located on the same operation server.

The decentralized blockchain service module 30 can be a decentralized architecture and is formed by a series of servers. The decentralized blockchain service module 30 can have a blockchain data recording unit 31 and a blockchain. The core recording unit 32 and the blockchain data obtaining unit 33. The blockchain data recording unit 31 can store the block record BL and the location record AD of the certificate data hash value H, and the blockchain core recording unit 32 can store the certificate data hash value H.

For example, when the mobile device 10 (user) has a need for certification, the data certification module 11 can obtain the certification data D and the characteristic value F from the NFC secure element 12, and then send it to the certification module 21 (certification). The operation server 20) requests a certificate deposit operation related to the certificate deposit data D and the characteristic value F. Moreover, the certificate storage module 21 (the certificate storage operation server 20) may perform a hash operation on the certificate data D and the feature value F stored in the NFC secure element 12 according to a hash function to generate a certificate data hash value H. At the same time, the decentralized blockchain service module 30 can record the hash value H of the certificate data from the certificate storage module 21 (the certificate operation server 20), and then provide the block record BL and the hash value H of the certificate data Position record AD for the certificate storage module 21 (certificate storage server 20) to associate the block record BL of the hash value H of the certificate storage data with the location record AD to the certificate storage data D stored in the NFC secure element 12, The block record BL and the location record AD of the hash value H of the certificate data are transmitted to the mobile device 10 through the certificate storage module 21 (the certificate storage operation server 20) and stored in the NFC secure element 12.

Furthermore, when the mobile device 10 (user) has a verification requirement, the data verification module 13 may transmit the verification data D ′, the feature value F, the block record BL, and the location record AD stored in the NFC secure element 12 to the verification module. Group 41 (the verification operation server 40), and the verification data D 'may be the same or different from the certificate data D. Then, the verification module 41 (the verification operation server 40) can obtain the verification data D ', the characteristic value F, the block record BL, and the position record AD stored by the NFC secure element 12 through the data verification module 13, and then based on the data from the NFC. The block record BL and location record AD of the secure element 12 obtain the hash value H of the certificate data from the decentralized blockchain service module 30, and then the verification data D 'and the characteristic value F from the NFC secure element 12 are based on the hash function. A hash operation is performed to generate a verification data hash value H '.

Then, the verification module 41 (the verification operation server 40) can compare the hash value H 'of the verification data with the hash value H of the certificate data recorded by the decentralized blockchain service module 30, and then hash the verification data. The comparison result between the value H 'and the hash value H of the certificate data is transmitted and returned to the mobile device 10 (user). For example, if the comparison result is that the hash value H 'of the verification data is the same as the hash value H of the certificate data, the verification module 41 (the verification operation server 40) responds to the verification success to the mobile device 10 (user); or, if When the comparison result is that the hash value H 'of the verification data is different from the hash value H of the verification data, the verification module 41 (the verification operation server 40) responds to the verification failure to the mobile device 10 (the user).

FIG. 2 is a schematic flowchart of a non-centralized data storage and verification method with an NFC (Near Field Communication) security element in the present invention, and is described with reference to the above-mentioned FIG. 1. At the same time, the main technical contents of Figure 2 are as follows, and the remaining technical contents are as described in Figure 1 above, and will not be repeated here.

As shown in FIG. 2 and FIG. 1 above, the non-centralized data storage and verification method with NFC security element in the present invention mainly includes: storing the storage data D and characteristic value F by the NFC security element 12 of the mobile device 10 ; The certificate storage module 21 stores the certificate data D and the characteristic value F stored in the NFC secure element 12 according to a hash function to generate a hash value H of the certificate data; recorded by the non-centralized blockchain service module 30 Hash value H of the certificate data from the certificate storage module 21, and then provide the block record BL and location record AD of the hash value H of the certificate storage data. 将 Block record of the hash value H of the certificate storage data through the certificate storage module 21. The BL and the location record AD are transmitted to the mobile device 10 and stored in the NFC secure element 12; the verification module 41 obtains the verification data D ', the characteristic value F, the block record BL and the location record AD stored in the NFC secure element 12, And the verification data D 'is the same or different from the certificate data D; and the verification module 41 obtains the certificate data from the decentralized blockchain service module 30 according to the block record BL and the location record AD from the NFC secure element 12 The hash value H will in turn be derived from the NFC secure element 12 The verification data D 'and the characteristic value F are hashed according to a hash function to generate a verification data hash value H'. The verification module 41 then stores the verification data hash value H 'and the records recorded by the non-centralized blockchain service module 30. The hash value H of the verification data is compared, and the comparison result between the hash value H 'of the verification data and the hash value H of the verification data is transmitted and returned to the mobile device 10 (user).

Specifically, in step S1 of FIG. 2, the NFC secure element 12 of the mobile device 10 stores the certificate data D and the characteristic value F. When the mobile device 10 (user) needs a certificate, the data certificate module 11 of the mobile device 10 obtains the certificate data D and the characteristic value F from the NFC secure element 12. The characteristic value F may be a characteristic value of the mobile device 10 or the NFC secure element 12, such as an identification code (ID).

In step S2 in FIG. 2, the data storage module 11 requests the storage module 21 (the storage server 20) for the storage operation of the storage data D and the characteristic value F.

In step S3 of FIG. 2, the certificate storage module 21 (the certificate storage server 20) performs a hash operation on the certificate data D and the characteristic value F according to a hash function to generate a certificate data hash value H, and The centralized blockchain service module 30 records the hash value H of the certificate data, and then provides the block record BL and the location record AD of the certificate data hash value H.

The above-mentioned non-centralized blockchain service module 30 may have a decentralized architecture and is formed by connecting a plurality of servers in series. The decentralized blockchain service module 30 may also have a blockchain data recording unit 31 and a blockchain core recording unit 32. The blockchain data recording unit 31 is used to store a block record BL of the hash value H of the certificate data And location record AD, and the blockchain core record unit 32 is used to store the hash value H of the certificate data. However, the present invention is not limited to this.

In step S4 of FIG. 2, the block record BL and the position record of the hash value H of the certificate storage data from the non-centralized blockchain service module 30 are stored by the certificate storage module 21 (the storage operation server 20). The AD transmits to the data storage module 11 of the mobile device 10, and further associates the block record BL and the location record AD of the hash value H of the storage data with the storage data D stored in the NFC secure element 12.

In step S5 of FIG. 2, the data storage module 11 stores the block record BL and the location record AD of the hash value H of the storage data in the NFC secure element 12.

In step S6 of FIG. 2, when the mobile device 10 (user) has a verification request, the data verification module 13 of the mobile device 10 obtains the verification data D ′, the feature value F, and the block stored in the NFC secure element 12. The record BL is the same as the location record AD, and the verification data D 'is the same or different from the certificate data D.

In step S7 of FIG. 2, the data verification module 13 transmits the verification data D ′, the feature value F, the block record BL, and the position record AD to the verification module 41 (the verification operation server 40).

In step S8 of FIG. 2, the verification module 41 (the verification operation server 40) obtains the certificate from the non-centralized blockchain service module 30 according to the block record BL and the location record AD from the NFC secure element 12. The data hash value H is further used to perform a hash operation on the verification data D ′ and the feature value F from the NFC secure element 12 according to a hash function to generate a verification data hash value H ′.

In step S9 of FIG. 2, the verification module 41 (the verification operation server 40) compares the hash value H ′ of the verification data with the hash value H of the certificate data recorded by the non-centralized blockchain service module 30. Yes, the comparison result between the hash value H 'of the verification data and the hash value H of the verification data is transmitted and returned to the mobile device 10 (user). For example, if the comparison result is that the hash value H 'of the verification data is the same as the hash value H of the certificate data, the verification module 41 (the verification operation server 40) responds to the verification success to the mobile device 10 (user); or, if When the comparison result is that the hash value H 'of the verification data is different from the hash value H of the verification data, the verification module 41 (the verification operation server 40) responds to the verification failure to the mobile device 10 (the user).

In summary, the non-centralized data storage and verification system and method with NFC (near field communication) security elements of the present invention can have the following advantages or technical effects:

1. The present invention combines the NFC security element of a mobile device with a certificate storage module, a verification module, a hash function operation, and a blockchain technology (non-centralized blockchain service module), which can quickly and effectively complete the integrity of the data. Sexual records, documentation and verification. At the same time, the present invention does not need to store data or related characteristic information by an impartial third party, and can also perform certificate or verification of the data without the assistance of an impartial third party.

2. The present invention is based on a hash function combined with a non-centralized blockchain service as the verification basis. When a mobile device (user) has a need for data storage and verification, it can directly communicate with the storage or verification through the convenience and security of the mobile device. The module (server) exchanges certificates or verification data.

3. The present invention uses the NFC secure element of the mobile device as a data storage vehicle, and uses the characteristic value of the mobile device or the NFC secure element as part of the verification information, which can be used to bind the certificate provided by the mobile device or the NFC secure element. Information security. At the same time, the present invention uses the service's NFC security element as a part of authentication to directly store data securely. Therefore, compared with the method of using a server database for data storage, the present invention has a simplified data storage process for the server. benefit.

4. The hash value of the certificate data (block record and location record) of the present invention is stored in both the NFC security element and the decentralized blockchain service module. The hash value of the certificate data (block record and location record) The exchange of) is implemented during the verification phase, so no complicated information exchange agreement is required for data verification, thereby improving the speed and convenience of data verification.

5. The present invention uses a non-centralized data blockchain service module with undeniable characteristics to assist in data storage, verification, and comparison, and replaces centralized system verification with a non-centralized blockchain service, which can effectively reduce verification. Demand for hardware load balancing required for service.

The above-mentioned embodiments merely exemplify the principles, features, and effects of the present invention, and are not intended to limit the implementable scope of the present invention. Anyone who is familiar with this technology can perform the above operations without departing from the spirit and scope of the present invention. Modifications and changes to the implementation form. Any equivalent changes and modifications made by using the disclosure of the present invention should still be covered by the scope of patent application. Therefore, the scope of protection of the rights of the present invention should be as listed in the scope of patent application.

Claims (16)

    A non-centralized data certification and verification system with an NFC (near field communication) security element includes: a mobile device with an NFC security element that stores certification data and characteristic values; a certification module that secures the NFC The hash data of the certificate data and feature values stored by the component are hashed to generate a hash value of the certificate data; a non-centralized blockchain service module records the hash value of the certificate data from the certificate module, and then provides the The block record and location record of the hash value of the certificate data, the block record and location record of the hash value of the certificate data are transmitted to the mobile device through the certificate storage module and stored in the NFC secure element; and verification The module is to obtain the verification data, characteristic values, block records and location records stored by the NFC secure element, and the verification data is the same or different from the certificate data, wherein the verification module is based on the data from the NFC secure element. The block records and location records obtain the hash value of the certificate data from the non-centralized blockchain service module, and then hash the authentication data and characteristic values from the NFC secure element. To calculate the hash value of the verification data, the verification module then compares the hash value of the verification data with the hash value of the certificate data recorded by the non-centralized blockchain service module, and compares the hash value of the verification data with The comparison result of the hash value of the certificate data is transmitted to the mobile device.         The system according to item 1 of the scope of patent application, wherein the characteristic value is the characteristic value of the mobile device or the NFC secure element, and the certificate storage module and the authentication module are located on the same server or different servers in.         The system described in item 1 of the scope of patent application, wherein the mobile device further has a data storage module, and when the mobile device has a storage requirement, the data storage module obtains the information from the NFC security element. The certificate deposit data and the characteristic value are further requested from the certificate deposit module for the certificate deposit operation regarding the certificate deposit data and the characteristic value.         The system described in item 1 of the scope of patent application, wherein the mobile device further has a data verification module. When the mobile device has a verification requirement, the data verification module stores the verification data stored in the NFC secure element, The characteristic value, block record and position record are transmitted to the verification module.         According to the system described in item 1 of the scope of patent application, if the comparison result is that the hash value of the verification data is the same as the hash value of the certificate data, the verification module responds to the verification successfully to the mobile device, and If the comparison result is that the hash value of the verification data is different from the hash value of the certificate data, the verification module responds to the verification failure to the mobile device.         The system described in item 1 of the scope of patent application, wherein the certificate storage module further associates the block record and location record of the hash value of the certificate storage data with the certificate storage data stored by the NFC secure element.         The system described in item 1 of the scope of patent application, wherein the non-centralized blockchain service module has a decentralized architecture and is formed by a series of servers.         The system according to item 1 of the scope of patent application, wherein the non-centralized blockchain service module has a blockchain data recording unit and a blockchain core recording unit, and the blockchain data recording unit is used to store the The block record and location record of the hash value of the certificate data, and the core record unit of the blockchain is used to store the hash value of the certificate data.         A non-centralized data certification and verification method with an NFC (Near Field Communication) security element includes the following steps: the NFC security element of the mobile device stores the certification data and characteristic values; the NFC security element is stored by the certification module A hash operation is performed on the stored certificate data and characteristic values to generate a hash value of the certificate data; the decentralized blockchain service module records the hash value of the certificate data from the certificate module to provide the certificate The block record and location record of the data hash value. The block record and location record of the hash value of the certificate data are transmitted to the mobile device through the certificate storage module and stored in the NFC secure element; the verification module Obtain the verification data, characteristic values, block records and location records stored by the NFC secure element, and the verification data is the same or different from the certificate data; and the verification module according to the block records from the NFC secure element And location records to obtain the hash value of the certificate data from the non-centralized blockchain service module, and then hash the verification data and characteristic values from the NFC secure component to produce The hash value of the verification data, the verification module then compares the hash value of the verification data with the hash value of the certificate data recorded by the non-centralized blockchain service module, and then compares the hash value of the verification data with the certificate The result of the data hash comparison is sent to the mobile device.         The method according to item 9 of the scope of patent application, wherein the characteristic value is the characteristic value of the mobile device or the NFC secure element, and the certificate storage module and the authentication module are located on the same server or different servers in.         According to the method described in item 9 of the scope of patent application, when the mobile device has a certificate requirement, the data certificate module of the mobile device obtains the certificate data and the characteristic value from the NFC secure element. Then, the certificate storage module is requested to perform a certificate storage operation on the certificate data and the characteristic value.         The method described in item 9 of the scope of patent application, further includes when the mobile device has a verification requirement, the data verification module of the mobile device stores the verification data, feature values, block records and Location records are sent to the verification module.         The method described in item 9 of the scope of patent application, wherein if the comparison result is that the hash value of the verification data is the same as the hash value of the certificate data, the verification module responds to the verification successfully to the mobile device, and If the comparison result is that the hash value of the verification data is different from the hash value of the certificate data, the verification module responds to the verification failure to the mobile device.         The method described in item 9 of the scope of patent application, further includes associating a block record and a location record of the hash value of the certificate data with the certificate data stored by the certificate storage module.         The method according to item 9 of the scope of patent application, wherein the non-centralized blockchain service module has a decentralized architecture and is formed by connecting a plurality of servers in series.         The method according to item 9 of the scope of patent application, wherein the non-centralized blockchain service module has a blockchain data recording unit and a blockchain core recording unit, and the blockchain data recording unit is used to store the The block record and location record of the hash value of the certificate data, and the core record unit of the blockchain is used to store the hash value of the certificate data.