TWI733590B - Identity recognition system and method using active nfc tag and tokenization - Google Patents

Abstract

The present invention provides an identity recognition system and method using active NFC (Near-field communication) tag and tokenization, and the identity recognition system including a mobile device with NFC function, an active NFC tag, an execution module and a tokenization subsystem, in which a user’s tokenization verification information for identity verification is written into the active NFC tag through the mobile device with NFC function, so that the active NFC tag actively transmits the tokenization verification information . In this way, the active NFC tag actively sent the tokenization verification information to the tokenization subsystem, so that the user's identity is verified by the tokenization subsystem.

Description

Identity recognition system and method adopting active NFC tag and coding technology

The present invention is an identity recognition technology, and particularly refers to an identity recognition system and method using active NFC (Near-field communication) tags and Tokenization technology.

In conventional technologies, NFC is often used for short-distance information transmission, such as the transmission of multimedia information (photos, videos, or music files), or as an electronic ticket, electronic ID card, or electronic key to replace traditional tickets.

Furthermore, conventional devices with NFC function usually have at least one of the following three modes: Card emulation mode, Reader/Writer mode or Peer-to-Peer mode .

In detail, the card analog mode is similar to the conventional radio frequency identification (RFID) technology used for IC cards (Integrated circuit cards). For example, when the NFC-enabled device adopts the card analog mode, it can be Instead of traditional credit cards, transportation cards, access cards, etc., to provide a card reader to read the device with NFC function, and then achieve the function of the aforementioned card.

When the card reader mode is adopted, the NFC-enabled device can be used as a non-contact card reader to read the NFC tag, and then obtain the information in the NFC tag, for example, read the NFC tag set in the art exhibition, In order to obtain exhibition introduction materials. Or, the device with NFC function can write information to the NFC tag.

In addition, when the peer-to-peer mode is adopted, multimedia information (files such as photos, videos or music) can be transferred between two NFC-enabled devices, and a connection between the two devices can be quickly established. However, the transmission distance of NFC is relatively short, and the transmission volume per second of NFC is lower than that of Bluetooth (Bluetooth). Therefore, conventional technologies usually combine NFC and Bluetooth to quickly establish a connection and increase the transmission volume. Transmission distance.

On the other hand, nowadays NFC technology is often used in mobile devices (such as smart phones) to replace credit cards, transportation cards (youyou cards, all-in-one cards, Octopus, etc.) functions to make life more convenient for users. However, currently mobile devices using mainstream operating systems, such as those using Apple’s iOS system or Google’s Android system, among which mobile devices using iOS systems (such as iPhone) do not support NFC cards In the analog mode, it is difficult to achieve the above-mentioned card function, and the mobile device using the Android system needs to replace the NFC SIM (Subscriber Identity Module) card in order to use the above-mentioned card function. Therefore, there are many inconveniences in use.

Furthermore, when the mobile device uses the NFC card analog mode, the security element (SE) of the hardware or the host card emulation (HCE) of the software must be built-in to ensure the security of the user during the transaction. . However, the secure element (SE) needs to be bound to the hardware (such as the internal mobile device, external SD card or NFC chip), so the set-up cost is higher and the flexibility is lower. In addition, although the host card analog (HCE) is implemented by pure software, it can reduce the setup cost and increase the configuration flexibility, but it is also more vulnerable to external malicious attacks, so there are considerable doubts about security.

Therefore, how to improve the compatibility of NFC on the device to effectively reduce the cost of system construction and have higher security to avoid malicious attacks on devices with NFC function is one of the urgent issues to be solved. .

The present invention provides an identity recognition system using active Near-field communication (NFC) tags and coding technology, which includes: a mobile device with an application program for inputting an authentication password on the application program To enable the application to decrypt a code packet, where the application forms identity verification information based on the current time, information in the code packet, and the authentication password, and then forms identity verification information based on the information in the code packet and the identity verification information A code verification information; an active NFC tag, which is communicatively connected to the mobile device to receive the code verification information from an application of the mobile device, so that the active NFC tag actively transmits the code verification information; The execution device is communicatively connected to the active NFC tag to transmit code verification information from the active NFC tag; and a coding subsystem is communicatively connected to the execution device to receive and verify the code from the execution device Code verification information, so that the coded subsystem commands the execution device to act.

The present invention also provides an identity recognition method using active Near-field communication (NFC) tags and coding technology, which includes: enabling an application in a mobile device to receive an authentication password to make the application Decrypt a code packet; make the application form an identity verification information based on the current time, information in the code packet, and the authentication password; make the application form a code verification information based on the information in the code packet and the identity verification information ; Make an active NFC tag receive the code from the application of the mobile device Code verification information, so that the active NFC tag actively transmits the code verification information; causes an execution device to transmit the code verification information from the active NFC tag; and causes a coding subsystem to receive and verify the code verification information from the execution device Code verification information, so that the coded subsystem commands the execution device to act.

In one embodiment, the information in the code packet includes a coded information and a corresponding code ID (identification code), a one-time verification key group and a corresponding key ID group, the one-time verification key The group includes a plurality of one-time verification keys, and the key ID group includes a plurality of key IDs.

In one embodiment, the application program combines the current time, the coded information in the code packet, and the authentication password to form the identity verification information.

In one embodiment, the application program uses the one-time verification key in the code packet to encrypt the identity verification information to form an encrypted identity verification information.

In one embodiment, the application program then uses the one-time verification key in the code packet to compress the encrypted identity verification information, the code ID, and the key ID corresponding to the one-time verification key to A signature is generated, and the application program then forms the code verification information with the encrypted identity verification information, the code ID, the key ID corresponding to the one-time verification key, and the signature.

In one embodiment, the coding subsystem obtains the corresponding decryption key set from the storage module in the coding subsystem according to the code ID in the code verification information, and the coding subsystem obtains the corresponding decryption key set according to the code packet The key ID corresponding to the one-time verification key obtains one of the decryption keys in the decryption key group.

In one embodiment, the coding subsystem decrypts the encrypted identity verification information in the code verification information through the decryption key to obtain the current time, the coding information, and the certification in the identity verification information password.

In one embodiment, the coding subsystem verifies whether the identity verification information and the signature in the code verification information are correct, and when the identity verification information and the signature in the code verification information are verified, the coding The subsystem obtains a real code from the storage module according to the code ID, so as to return the real code to the execution device.

In one embodiment, when the application is used for the first time, the application receives valid information for verification and sets the authentication password, so that the application sends the valid information and the authentication password to the coding subsystem to request Get the code packet.

In one embodiment, after the coding subsystem verifies that the valid information is correct, the coding subsystem generates and transmits the code packet to the application program, so that the application program encrypts the code packet and stores the code packet The code is packaged in a secure storage location in the mobile device.

It can be seen from the above that the identity recognition system and method using active NFC tag and coding technology of the present invention writes a user’s code verification information for identity verification into the active NFC tag through a mobile device with NFC function. Therefore, the code verification information is sent to the back-end coding subsystem to verify whether the user's identity is correct. Therefore, compared with the conventional technology, even mobile devices with NFC function do not have the card analog mode (such as iPhone) , Or the NFC SIM card (such as Android) is not installed, the user identity can also be verified through the card reader mode of the mobile device. Therefore, compared to storing the verification information in hardware (such as NFC SIM) in the past, Compatible with more different types of devices, and can also achieve the same or higher level of security verification.

1: An identity recognition system using active NFC tags and coding technology

10: Mobile device

100: application

11: Active NFC tag

12: Execution equipment

13: Coding subsystem

130: storage module

S21 to S26: steps

S31 to S314: steps

Figure 1 is a schematic diagram of the identity recognition system using active NFC tags and coding technology of the present invention;

Figure 2 is an application flow chart of the identity identification method using active NFC tags and coding technology according to the present invention; and

Fig. 3 is a flow chart of the authentication method of the identity recognition method using active NFC tag and coding technology of the present invention.

It should be noted that the structure, ratio, size, etc. shown in the drawings in this manual are only used to match the content disclosed in the manual for the understanding and reading of those who are familiar with the art, and are not intended to limit the implementation of the present invention. Therefore, it does not have any technical significance. Any structural modification, proportional relationship change or size adjustment, without affecting the effects and objectives that can be achieved by the present invention, should still fall within the scope of the present invention. The technical content disclosed by the invention can be covered. At the same time, the terms such as "一", "first", "second", "上" and "下" cited in this manual are only for ease of description and are not used to limit the scope of the present invention. The scope of implementation, and the change or adjustment of the relative relationship, shall be regarded as the scope of the implementation of the present invention without substantial changes to the technical content.

FIG. 1 is a schematic diagram of the identity recognition system using active NFC (near field communication) tags and coding technology according to the present invention. As shown in FIG. 1, the identity recognition system 1 includes: a mobile device 10 with NFC function, an active NFC tag 11, an execution device 12, and a coding subsystem 13, wherein the mobile device 10 has a An NFC chip (not shown in the figure) and an application program 100, and the coding subsystem 13 has a storage module 130. It should be understood that the mobile device 10 includes, but is not limited to, a smart phone, a tablet computer, a smart watch, and other wearable devices.

Specifically, the mobile device 10 enables the mobile device 10 to have the NFC function through the NFC chip provided in the mobile device 10, and the application 100 has an operable user interface (UI) to provide downloading, For storage or operation, the active NFC tag 11 can actively transmit the written information to the back-end device (such as the execution device 12). In addition, the execution device 12 is built on a computer (such as a personal computer, a notebook computer, an embedded computer) or a microcontroller (or a single-chip microcomputer), or is implemented by software, firmware, or hardware through an execution module The form is presented in a physical device with a computing capability. The coding subsystem 13 is built on a server (such as a general server, a file server, a storage unit server, etc.). It should be understood that the mobile device 10 with the NFC function of the present invention can at least perform the NFC card reader mode, and the application 100 can be an application (APP) of a smart phone. While the conventional NFC tag can only provide information to a device (such as a card reader) to read or simply write data in the conventional NFC tag, the active NFC tag 11 of the present invention can more actively The written information is passed out.

Furthermore, the mobile device 10 communicates with the coding subsystem 13 through various networks, such as the Internet, and the active NFC tag 11 communicates through The device 12 is connected to the device 12 in a wired or wireless manner, and the execution device 12 is also connected to the coding subsystem 13 via various networks, such as the Internet.

In this embodiment, a user (not shown in the figure) uses the application 100 of the mobile device 10 to input valid information that can verify the user's identity on the application 100 and set the authentication password of the application 100 Then, the application program 100 transmits the valid information and the authentication password to the coding subsystem 13, so as to request the coding subsystem 13 to obtain a code packet based on the valid information and the authentication password, wherein the code packet It includes a coded information and a corresponding code ID (Identification, identification code), a one-time verification key group and a corresponding key ID group. It should be understood that the one-time verification key set and the corresponding key ID set respectively include a plurality of one-time verification keys and corresponding key IDs, and the code ID is a random number unique to the user , So the code ID cannot be reversed by mathematical formulas to avoid malicious cracking, which may cause information security problems. In addition, the valid information may include, but is not limited to, the user's personal information such as the user's ID number, birthday, name, employee number, and mobile phone number, and the authentication password may include, but is not limited to, passwords such as PIN codes.

Furthermore, after the coding subsystem 13 verifies that the valid information is correct, the coding subsystem 13 generates and transmits the code packet to the application program 100 of the mobile device 10. After the application program 100 of the mobile device 10 receives the coded information, the application program 100 encrypts the code packet and stores it in a safe storage location or a safe storage place in the mobile device 10. In particular, the coded information and the corresponding code ID in the code package can be obtained through the key in the iOS Secure enclave (Apple) or Android Keystore (Google) used for hardware encryption in the mobile device 10 The one-time verification key set and the corresponding key ID set are encrypted, and the application 100 will then encrypt the coded information and relative information after hardware encryption. The corresponding code ID, the one-time verification key set, and the corresponding key ID set are stored in an area protected by the application 100 permissions, that is, stored in a safe storage location or safe storage in the mobile device 10 Place.

In one embodiment, when the user needs to verify his identity to enable the execution device 12 to operate, the application 100 requests the user to enter the authentication password of the application 100, and the application 100 will be located in the safe place After decrypting the code packet, take it out. Then, the application 100 combines the current time, the coded information, and the authentication password to form an identity verification information, and selects one of the one-time verification key sets to encrypt the identity verification information to form Encrypted identity verification information, and note that one of the one-time verification key sets has been used.

In addition, the application 100 uses one of the one-time verification key sets to compress the encrypted identity verification information, the key ID and the code ID corresponding to one of the one-time verification key sets to A signature is generated, and finally the encrypted identity verification information, the code ID, the key ID corresponding to one of the one-time verification key sets, and the signature form a code verification information, and then the mobile device 10 The code verification information is written into the active NFC tag 11.

In detail, the one-time verification key loses its effectiveness after being used, and when all the one-time verification key sets and the corresponding key ID sets in the application 100 lose their effectiveness, the application 100 can The coding subsystem 13 is requested to supplement the new one-time verification key set and the corresponding key ID set through the network, and the coding subsystem 13 can evaluate the current mobile device 10 according to the usage status of the application 100 After the risk, the new one-time verification key set and the corresponding key ID set are sent to the application 100 of the mobile device 10 again.

In one embodiment, when the active NFC tag 11 receives the code verification information, the active NFC tag 11 transmits the code verification information to the execution device 12 through a line interface, and the execution device 12 then passes The network transmits the code verification information to the coding subsystem 13 so that the coding subsystem 13 verifies the code verification information. In detail, the coding subsystem 13 obtains the corresponding decryption key set from the storage module 130 according to the code ID in the code verification information, and then obtains the corresponding decryption key set according to one of the one-time verification key sets. The key ID obtains one of the decryption keys in the decryption key group, and then decrypts the encrypted authentication information through the decryption key to obtain the current time, the coded information, and the authentication password in the identity authentication information .

Furthermore, the coding subsystem 13 verifies whether the identity verification information and the signature are correct, and when the verification is passed, the coding subsystem 13 obtains the user's real code from the storage module 130 according to the code ID and It is sent back to the execution device 12 to make the execution device 12 act. It should be understandable that the user's real code may include, but is not limited to, the user's personal information such as the user's ID number, birthday, name, employee number, and mobile phone number.

This embodiment is an embodiment of the identity recognition system 1 using active NFC tags and coding technology of the present invention, as shown in FIG. 1. When an employee in the company needs to use the identity recognition system 1 of the present invention that uses active NFC tags and coding technology to identify his identity, the employee needs to use one of the applications 100 in one of the NFC-enabled mobile devices 10 Apply first.

In other words, the employee first installs the application 100 on the mobile device 10 with NFC function, and enters the account and password issued by the company to the employee on the application 100 (such as the valid information mentioned above). And set the authentication password (such as PIN code) of the application 100, The application program 100 transmits the account and password of the employee and the authentication password of the application program 100 via the network to a coding subsystem 13 for application.

At this time, the coding subsystem 13 receives the employee’s account and password, and the authentication password, and the coding subsystem 13 verifies the validity of the employee’s account and password, and confirms that the employee’s account and password are legal After sex, the coding subsystem 13 sends a code packet to the application program 100, where the code packet includes a coded information and a corresponding code ID, a one-time verification key set and a corresponding key ID. Furthermore, the application program 100 encrypts the code packet and stores the code packet in a safe storage location or a safe storage place in the mobile device 10.

In this embodiment, when the employee enters his company and needs to verify his identity, the employee first enters the authentication password of the application 100, and the application 100 decrypts the code packet stored in the secure storage and takes it out. Combine the current time, the coded information, and the authentication password to form an identity authentication information. Then, the application program 100 selects one of the one-time verification key sets to encrypt the identity verification information to form encrypted identity verification information.

Furthermore, the application 100 uses one of the one-time verification key sets to compress the encrypted identity verification information, the key ID and the code ID corresponding to one of the one-time verification key sets to Generate a signature. In addition, the application program 100 forms a code verification information with the encrypted identity verification information, the code ID, the key ID corresponding to one of the one-time verification key sets, and the signature, and then transmits the code verification information through the mobile device 10 Write the code verification information into an access control device (not shown in the figure). It should be understood that the access control device includes an active NFC tag 11 And the execution device 12 of the active NFC tag 11 is communicatively connected, and the mobile device 10 writes the code verification information into the active NFC tag 11.

Therefore, when the access control device receives the code verification information, the execution device 12 of the access control device transmits the code verification information to the coding subsystem 13, so that the coding subsystem 13 verifies the information according to the code. The code ID obtains the corresponding decryption key set from a storage module 130, and then obtains one of the decryption key sets in the decryption key set according to the key ID corresponding to one of the one-time verification key sets, and then uses the The decryption key decrypts the encrypted identity verification information to obtain the current time, the coded information, and the authentication password in the identity verification information.

Therefore, the coding subsystem 13 verifies whether the identity verification information and the signature are correct. If they are correct, the coding subsystem 13 obtains the employee’s information from the storage module 130 according to the code ID. The employee number is returned to the execution device 12 of the access control device, so that the execution device 12 of the access control device executes the unlocking function, so that the employee can enter the company.

FIG. 2 is the application flow chart of the identity recognition method using active NFC tag and coding technology of the present invention, and refer to FIG. 1 as well. As shown in Figure 2, this application process includes the following steps S21 to S26:

In step S21, input valid information that can verify the identity of a user and set an authentication password (such as a PIN code) on the application 100 in a mobile device 10 with NFC function.

In step S22, the application program 100 transmits the valid information and the authentication password to a coding subsystem 13.

In step S23, the coding subsystem 13 verifies the valid information.

In step S24, if the valid information is correct, the coding subsystem 13 generates a code packet, where the code packet includes a coded information and a corresponding code ID, a one-time verification key set, and relative information. The corresponding key ID group.

In step S25, the coding subsystem 13 transmits the code packet to the application program 100 of the mobile device 10.

In step S26, the application 100 encrypts and stores the code package in the mobile device 10.

FIG. 3 is a flowchart of the authentication method of the identity recognition method using active NFC tags and coding technology according to the present invention, and also refer to FIG. 1 for description. As shown in Figure 3, this verification process includes the following steps S31 to S314:

In step S31, a user inputs an authentication password (such as a PIN code) into the application 100 of a mobile device 10.

In step S32, the application program 100 decrypts a code packet to take out the code packet, where the code packet includes a coded information and a corresponding code ID, a one-time verification key set, and a corresponding Key ID group.

In step S33, the application 100 combines the current time, the coded information, and the authentication password to form an identity verification information, and selects one of the one-time verification key sets to encrypt the identity verification information. To form encrypted identity verification information, and at the same time note that one of the one-time verification key sets has been used.

In step S34, the application 100 uses one of the one-time verification key sets to perform the encrypted identity verification information, the key ID corresponding to one of the one-time verification key sets, and the code ID. Compress the code to generate a signature.

In step S35, the encrypted identity verification information of the application 100, the code ID, the key ID corresponding to one of the one-time verification key sets, and the signature form a code verification information.

In step S36, the mobile device 10 writes the code verification information into the active NFC tag 11.

In step S37, the active NFC tag 11 will receive the code verification information from the application program 100 of the mobile device 10, and actively transmit the code verification information to the execution device 12 through a line interface.

In step S38, the execution device 12 transmits the code verification information from the active NFC tag 11 to a coding subsystem 13 via the network.

In step S39, the coding subsystem 13 obtains the corresponding decryption key set according to the code ID in the code verification information, and then obtains the decryption according to the key ID corresponding to one of the one-time verification key sets One of the key sets decodes the key.

In step S310, the coding subsystem 13 decrypts the encrypted identity verification information according to the decryption key to obtain the current time, the coding information, and the authentication password in the identity verification information.

In step S311, the coding subsystem 13 verifies whether the identity verification information and the signature are correct.

In step S312, when the verification is passed, the coding subsystem 13 obtains the real code of the user according to the code ID.

In step S313, the coding subsystem 13 transmits the real code of the user to the execution device 12.

In step S314, the execution device 12 executes its functions according to the user's real code, such as unlocking the door.

In summary, the identity recognition system and method using active NFC tags and coding technology of the present invention provide a convenient and safe identity verification method for users. Specifically, the present invention writes the code verification information used by the user for identity verification into the active NFC tag through a mobile device with NFC function, thereby transmitting the code verification information to the back-end coding subsystem for verification Whether the identity of the user is correct.

Furthermore, the identity recognition system and method using active NFC tag and coding technology of the present invention have at least the following technical differences and effects:

1. The present invention uses a mobile device with NFC function to store a code packet obtained by a user from a coding subsystem in the mobile device by means of software encryption, and then writes the code verification information for the user’s identity verification Into the active NFC tag, through the setting of the active NFC tag, even if the mobile device with NFC function does not have the card analog mode (such as iPhone), or the NFC SIM card (such as Android) is not installed, the mobile device can be used The card reader mode is used to verify user identity. Therefore, compared to storing the verification information in hardware (such as NFC SIM) in the past, it is compatible with more different types of devices and can achieve the same or higher level of security verification.

2. The present invention does not require a hardware security element (SE) to be installed in the mobile device, so the cost of the mobile device can be reduced, and the mobile device is not restricted by the security element (SE), and can be applied more flexibly Different types of devices.

3. Although in the conventional technology, the host card analog (HCE) can be used to replace the secure element (SE), so that the mobile device can not be restricted by the secure element (SE), and then can cooperate with each family Vendor. However, the host card analog (HCE) is vulnerable to malicious attacks by external hackers, and if the mobile device does not have the card analog mode or the NFC SIM card is not installed, the host card analog (HCE) still cannot be used for verification. However, the present invention uses the function of the active NFC tag, so the mobile device may not have the card analog mode or the NFC SIM card is not installed, and it can also achieve the function of verifying the user's identity.

The above-mentioned embodiments only exemplarily illustrate the principles and effects of the present invention, and are not intended to limit the present invention. Anyone who is familiar with this technique can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention should be as listed in the scope of the patent application.

1: An identity recognition system using active NFC tags and coding technology

10: Mobile device

100: application

11: Active NFC tag

12: Execution equipment

13: Coding subsystem

130: storage module

Claims (20)

An identity recognition system using active Near-field communication (NFC) tags and coding technology includes: a mobile device with an application program for inputting an authentication password on the application program to make The application decrypts a code packet, where the application forms an identity verification information based on the current time, the information in the code packet, and the authentication password, and then forms a code verification based on the information in the code packet and the identity verification information Information; an active NFC tag, which is communicatively connected to the mobile device to receive the code verification information from the application of the mobile device, so that the active NFC tag actively transmits the code verification information; an execution device, It is communicatively connected to the active NFC tag to transmit code verification information from the active NFC tag; and a coding subsystem is communicatively connected to the execution device to receive and verify the code verification information from the execution device , The execution device is commanded by the coding subsystem to act, where the information in the code packet includes a coding information and a corresponding code ID (identification code), a one-time verification key set and a corresponding gold Key ID group. The identity recognition system according to claim 1, wherein the one-time verification key set includes a plurality of one-time verification keys, and the key ID set includes a plurality of key IDs. The identity recognition system according to claim 2, wherein the application combines the current time, the coded information in the code packet, and the authentication password to form the identity verification information, wherein the current time is the application The time point when the code packet is decrypted and taken out, the coding information in the code packet is used for the coding subsystem to verify whether the identity authentication information is correct, and the authentication password is included by the user in the application PIN code set on the above. The identity recognition system according to claim 3, wherein the application program encrypts the identity verification information by using the one-time verification key in the code packet to form an encrypted identity verification information. The identity identification system according to claim 4, wherein the application program then uses the one-time verification key in the code packet to correspond to the encrypted identity verification information, the code ID, and the one-time verification key The key ID is compressed to generate a signature, and the application program then forms the code verification information with the encrypted identity verification information, the code ID, the key ID corresponding to the one-time verification key, and the signature. The identity recognition system according to claim 2, wherein the coding subsystem obtains the corresponding decryption key set from the storage module in the coding subsystem according to the code ID in the code verification information, and the coding The subsystem obtains one of the decryption keys in the decryption key group according to the key ID corresponding to the one-time verification key in the code packet. The identity recognition system according to claim 6, wherein the coding subsystem decrypts the encrypted identity verification information in the code verification information through the decoding key to obtain the current time, The coded information and the authentication password. Such as the identity recognition system of claim 7, wherein the coding subsystem verifies whether the identity verification information and the signature in the code verification information are correct, and when the identity verification information and the signature in the code verification information are correct After the verification is passed, the coding subsystem obtains a real code from the storage module according to the code ID, so as to return the real code to the execution device. An identity recognition system using active Near-field communication (NFC) tags and coding technology, including: A mobile device with an application program for entering an authentication password on the application program to enable the application program to decrypt a code packet, wherein the application program forms a code packet based on the current time, the information in the code packet, and the authentication password Identity verification information, and then form a code verification information based on the information in the code packet and the identity verification information; an active NFC tag is communicatively connected to the mobile device to receive the code verification from the mobile device’s application Information to actively transmit the code verification information by the active NFC tag; an execution device is communicatively connected to the active NFC tag to transmit the code verification information from the active NFC tag; and a coding subsystem , Is to communicate with the execution device to receive and verify the code verification information from the execution device, so as to command the execution device to act by the coding subsystem, wherein, when the application is used for the first time, the application receives With the valid information verified and the authentication password set, the application sends the valid information and the authentication password to the coding subsystem, so as to request the coding subsystem to obtain the code packet based on the valid information and the authentication password . The identity recognition system according to claim 9, wherein, after the coding subsystem verifies that the valid information is correct, the coding subsystem generates and transmits the code packet to the application program, so that the application program can The code packet is encrypted and the code packet is stored in a secure storage location in the mobile device. An identity identification method using active Near-field communication (NFC) tags and coding technology includes: enabling an application in a mobile device to receive an authentication password, so that the application can decrypt a code packet ； Make the application form an identity verification information based on the current time, the information in the code packet, and the authentication password; make the application form a code verification information based on the information in the code packet and the identity verification information; make a proactive The NFC tag receives the code verification information from the application of the mobile device, so that the active NFC tag actively transmits the code verification information; causes an execution device to transmit the code verification information from the active NFC tag; and The coding subsystem receives and verifies the code verification information from the execution device to command the execution device to act by the coding subsystem. The information in the code packet includes a coding information and a corresponding code ID ( Identification code), one-time verification key group and corresponding key ID group. The identity identification method of claim 11, wherein the one-time verification key set includes a plurality of one-time verification keys, and the key ID set includes a plurality of key IDs. The identity identification method of claim 12, wherein the application is made to combine the current time, the coded information in the code packet, and the authentication password to form the identity verification information, wherein the current time is the application The time when the program decrypts the code packet and takes it out. The coding information in the code packet is used by the coding subsystem to verify whether the identity authentication information is correct, and the authentication password is included by the user in the The PIN code set on the app. The identity identification method of claim 13, wherein the application is made to encrypt the identity verification information by using the one-time verification key in the code packet to form an encrypted identity verification information. The identity identification method according to claim 14, wherein the application program is made to reuse the one-time authentication key in the code packet to correspond to the encrypted identity authentication information, the code ID, and the one-time authentication key The key ID of the key ID is compressed to generate a signature, so that the application program then the encrypted identity verification information, the code ID, the key ID corresponding to the one-time verification key, and the signature form the code verification News. The identity identification method of claim 12, wherein the coding subsystem is made to obtain the corresponding decryption key set from the storage module in the coding subsystem according to the code ID in the code verification information, and the The coding subsystem obtains one of the decryption keys in the decryption key group according to the key ID corresponding to the one-time verification key in the code packet. The identity identification method according to claim 16, wherein the coding subsystem is made to decrypt the encrypted identity verification information in the code verification information through the decoding key to obtain the current time in the identity verification information , The coded information and the authentication password. The identity identification method of claim 17, wherein the coding subsystem is made to verify whether the identity verification information and the signature in the code verification information are correct, and when the signature in the identity verification information and the code verification information is correct After the chapter verification is passed, the coding subsystem is made to obtain a real code from the storage module according to the code ID, so as to return the real code to the execution device. An identity identification method using active Near-field communication (NFC) tags and coding technology includes: enabling an application in a mobile device to receive an authentication password, so that the application can decrypt a code packet ； Make the application form an identity verification information based on the current time, the information in the code packet, and the authentication password; make the application form a code verification information based on the information in the code packet and the identity verification information; make a proactive The NFC tag receives the code verification information from the application of the mobile device, so that the active NFC tag actively transmits the code verification information; causes an execution device to transmit the code verification information from the active NFC tag; and The coding subsystem receives and verifies the code verification information from the execution device, so that the coding subsystem commands the execution device to act. When the application program is used for the first time, the application program is made to receive valid information for verification. And set the authentication password to enable the application to send the valid information and the authentication password to the coding subsystem, so as to request the coding subsystem to obtain the code packet based on the valid information and the authentication password. The identity identification method according to claim 19, wherein after the coding subsystem verifies that the valid information is correct, the coding subsystem is caused to generate and transmit the code packet to the application program, so that the application program can The code packet is encrypted and the code packet is stored in a secure storage location in the mobile device.

Images