WO2015154595A1

WO2015154595A1 - One-time pad authentication system based on closed-loop authentication theory and internet

Info

Publication number: WO2015154595A1
Application number: PCT/CN2015/073591
Authority: WO
Inventors: 江峰
Original assignee: 江峰
Priority date: 2014-04-09
Filing date: 2015-03-03
Publication date: 2015-10-15
Also published as: CN103971250B; CN103971250A; WO2015154646A1; WO2015154482A1; WO2015154647A1

Abstract

Provided is a one-time pad authentication system based on a closed-loop authentication theory and the Internet. The system comprises a system server, readable and writable memories arranged on each item, and a terminal device capable of performing reading and writing operations on the readable and writable memories, and of establishing communication with the server. On the principle that any participant of the system and any device provider used by the system are unreliable, an entire block box system security architecture is built, and the security of an anti-counterfeiting system is ensured by the entire security architecture of the system.

Description

One-time authentication system based on closed-loop authentication theory and Internet

Technical field

The invention relates to the field of commodity anti-counterfeiting technology.

Background technique

With the development of communication technologies, especially the development of 2.45 GHz radio frequency identification technology and mobile phone short-range wireless communication technology (NFC 13.56 MHz), the proximity recognition function of mobile phones and terminals is increasingly powerful. The Internet and the Internet of Things are infiltrating into the realm of people's lives. Anti-counterfeiting recognition technology based on this technology emerges in an endless stream. For example, the Chinese patent "a product anti-counterfeiting system based on terminals and RFID electronic tags" is a successful application of the Internet of Things to trace and verify product information through interconnection. This technology has largely prevented counterfeiting and has been successfully applied in practice. Based on RFID electronic tags and the Internet, commodity information inquiry and anti-counterfeiting applications are becoming more and more widespread, and the information security and encryption system of commodity electronic anti-counterfeiting systems are becoming more and more important.

At present, the technical level of counterfeiting is correspondingly improved. The counterfeiters illegally obtain the encrypted authentication data in the electronic tag and illegally copy it through various means such as decryption of the electronic tag, thereby counterfeiting the electronic tag to achieve the purpose of fraud. Therefore, the existing Internet anti-counterfeiting authentication system needs to be improved and improved from the system security.

The traditional authentication system is mostly based on the open-loop chain or tree-shaped encryption authentication theory system of A→B (→C...) (read-write memory A→authentication server B), and its security is often cracked by the authenticated label. Being counterfeited, in the highly developed Internet and mobile Internet today, our newly created A→(B→)A closed-loop authentication encryption theory system (authentication server A→read/write memory B→authentication server A) will become the authentication system. The mainstream, this is a good solution to the security problems caused by the cracking of all aspects of the authentication system including the authenticated label in the authentication system. One time and one secret is the highest security scheme of encryption theory. It can not be cracked due to the one-time use of password. The invention combines closed-loop authentication and one-time secret to build a new authentication security architecture, so that the system authentication scheme reaches a new security height. , Its advancement and security are obvious.

Summary of the invention

It is an object of the present invention to provide a system solution for effectively preventing a counterfeiter from copying an IC card or an RFID electronic tag by a security hole of an IC card or an electronic tag or a security hole of other anti-counterfeiting system components. In order to achieve the unreliable principle of any participant and any device provider used by the system, the entire system security architecture is built, and the security of the anti-counterfeiting system is ensured from the overall security architecture of the system.

The technical solution adopted for achieving the object of the present invention is such a one-time secret authentication system based on closed-loop authentication theory and the Internet, which is characterized in that it comprises a system server and a readable and writable storage device disposed on each item. And a terminal device capable of reading and writing the readable and writable storage device and establishing communication with the server.

Anti-counterfeiting of items through the following process:

1) Each item is generated with a key K _i,j and the item uniquely identifying SN _i before being placed in the public environment space.

2) Encryption operation of SN _i using a specific encryption algorithm. In this process, K _{i,j is} used as the key of one-time encryption operation, and the ciphertext CSN _i,j corresponding to SN _{i is} obtained _, and SN _i and CSN _{i,j are} stored in the object security server. Where i is a pointer connecting SN _i , K _i,j and CSN _i,j . j is the number of times a secret key is generated. i ∈ {E}, SN _i ∈ {R}, j is a natural number, and the set {E}, and {R} are a collection of sequences consisting of numbers and/or letters.

3) After the key K _{ij is} written into the readable and writable storage device fixed on the corresponding item, the item is placed in the public environment space.

4) When the item holder performs anti-counterfeiting verification on the item, the terminal device is used to read the key K _x,j on the item and send it to the server.

Extract the key K _x,j on the item containing the pointer x, where: x ∈ {E}, find the corresponding SN _x and CSN _{x, j in the} server. Here, the same algorithm as in step 2) is used, and K _{x, j is} used as a key to perform cryptographic operations on SN _x to obtain ciphertext P.

If the ciphertext P=CSN _x,j , then the item is true and jump to the next step.

If the ciphertext P ≠ CSN _{x, j} , the system server sends the information that the item is false to the terminal, and ends the authenticity check operation.

5) The system server sends information to the terminal that the item is true.

At the same time, j is updated with the value of j+1, and the system server generates a new key K _x,j . Using the same algorithm as in step 2), using the new K _x,j as the key, encrypting the SN _x to obtain a new ciphertext CSN _x,j and storing it in the server to update the original CSN _x,j and send a new key K _x,j to the terminal device to update the original K _{x,j in the} readable and writable storage device.

Further, the article is an IC card with a contact, an RFID electronic tag or a magnetic stripe card.

Further, the item is a commodity, a bank card or a resident identity card. The readable and writable storage device is a magnetic stripe card, an IC card with contacts, or an RFID electronic tag that is independently present or attached to any item.

Further, in the step 5), after updating CSN _x,j to CSN _x,j+1 , CSN _{x,j+1 is} used as the basis for verifying the verification key on the item read by the terminal device next time. However, CSN _{x, j} is still stored in the historical data area of the server and is not used as a verification basis.

If the server receives the verification key on the item read by the terminal device, and the verification result of the key is the data in the historical data area, it is determined that the key has been stolen and is written into the counterfeit In the RFID tag on the item.

The terminal device sends the time and geographical location of the scanned product RFID to the server, and if there is a counterfeit item, the counterfeiting time and the geographical location of the counterfeiter can be provided for the anti-counterfeiting and anti-counterfeiting.

The article is an IC card with contacts, an RFID electronic tag or a magnetic stripe card.

Further, the item is a commodity, a bank card or a resident identity card.

The readable and writable storage device is a magnetic stripe card, an IC card with contacts, or an RFID electronic tag that is independently present or attached to any item.

If the server receives the verification key on the item read by the terminal device, and the verification result of the key P≠CSN _x,j , but P is the data in the historical data area, it is determined that the key has been It was stolen and written into a readable and writable storage device on a counterfeit item.

The terminal device sends to the server the time and geographical location of scanning the readable and writable storage device of the verified item, and if there is a counterfeit item, it can provide the counterfeiting time and geographical location of the counterfeit, and the use of the fake certificate or the item for the anti-counterfeiting and anti-counterfeiting. User's history Between and where.

Further, SN _i includes the product production time and the product serial number.

Further, if the item is a consumable item, the RFID electronic tag is destroyed when it is activated.

Further, K _i,j is not stored on the server.

Further, the readable and writable storage device is an RFID, an ID card, a bank card or various IC card applications.

Further, the terminal device is a terminal such as a mobile phone or a tablet computer or a POS machine, a cash register or an ID card reader, and various IC card reading devices.

Further, the SN _i =i.

Further, the K _i,j are randomly generated.

The technical effect of the present invention is undoubted, and the solution can effectively prevent the electronic tag on the item from being decrypted or being copied and copied by the illegal counterfeiter of the tag itself. From the system architecture, the present invention adopts a one-card dynamic signature authentication system, and only a relatively irregular key is written into the label on the item, and the isolation prevention is successfully realized. Whether the counterfeiter decrypts the tag or breaks the server, it is impossible to achieve large-scale fraud.

detailed description

The invention is further illustrated by the following examples, but it should not be understood that the scope of the invention described above is limited to the following examples. Various changes and modifications may be made without departing from the spirit and scope of the invention.

Example 1:

A first-time secret authentication system based on closed-loop authentication theory and the Internet, comprising: a system server and a readable and writable storage device disposed on each item, and A terminal device capable of reading and writing the readable and writable storage device and establishing communication with the server.

Anti-counterfeiting of items through the following process:

1) Each item (commodity, bank card, ID card, etc.) generates a key K _i,j and the item unique identifier SN _i before being placed in the public environment space.

2) Encryption operation of SN _i using a specific encryption algorithm. In this process, K _{i,j is} used as the key of one-time encryption operation, and the ciphertext CSN _i,j corresponding to SN _{i is} obtained _, and SN _i and CSN _{i,j are} stored in the object security server. Where i is a pointer connecting SN _i , K _i,j and CSN _i,j . j is the number of times a secret key is generated. I∈{E}, SN _i ∈{R}. j is a natural number and is the number of times the key is generated. The set {E}, and {R} are a collection of sequences of numbers and/or letters. That is, the server has a set {SN ₁ , SN ₂ ... SN _i ...} corresponding to each item, and the data in this set is fixed. In addition, there is a set of {CSN _1,j , CSN _2,j ... CSN _i,j ...} corresponding to each item in the server, and the data in this set changes when each item is verified, j The value will also change.

3) After the key K _ij and the corresponding item serial number SN _{i are} written into the readable and writable storage device fixed on the corresponding item, the item is placed in the public environment space.

4) When the item holder performs anti-counterfeiting verification on the item, the terminal device (mobile phone, etc.) is used to read the key K _x,j on the item and send it to the server.

Extract the key _x contained in the key K _x,j on the item and find the corresponding SN _x , CSN _{x,j in the} server. Where j is the number of times the key is generated. Using the same algorithm as in step 2), K _{x, j is} used as a key to perform cryptographic operations on SN _x to obtain ciphertext P. Where: x ∈ {1, 2, ..., n}, y ∈ {1, 2, ..., m}, of course, if the extracted K _{x, j} digital form is inconsistent with K _{i, j} , then directly Determine that the item is counterfeit.

If the ciphertext P=CSN _x,j , then the item is true and jump to the next step.

5) The system server sends information to the terminal that the item is true.

At the same time, j is updated with the value of j+1, and the system server generates a new key K _x,j . Using the same algorithm as in step 2), using the new K _x,j as the key, encrypting the SN _x to obtain a new ciphertext CSN _x,j and storing it in the server to update the original CSN _x,j , and sends a new key K _x,j to the terminal device to update the original K _{x,j in the} readable and writable storage device.

Example 2

The main steps of this embodiment are the same as those of Embodiment 1:

The item is a consumable item - white wine.

A manufacturer has a total of 5 liquor products shipped from the factory. Five items were shipped with RFID tags respectively written with randomly generated messages K _i,j . That is, RFID tags of K _1,1 , K _2,1 , K _3,1 , K _4,1 , K _5,1 . Specifically, K _1,1 =1, K _2,1 = 2, K _3,1 =3, K _4,1 =4, K _5,1 =5.

Corresponding to these five liquor products, there are five SN _i values stored in the server. That is, SN ₁ =1234567891, SN ₂ =1234567892, SN ₃ =1234567893, SN ₄ =1234567894, SN ₅ =1234567895.

The SN _i value is encrypted. The encryption rule is: the first digit and the F digit are interchanged, and F=K _i,j , that is, K _{i,j is} used as the key of the encrypted SN _i to obtain the CSN _{i. , j} : CSN _1, ₁ =1234567891, CSN _2,1 =2134567892, CSN _3,1 =3214567893, CSN _4,1 =4231567894, CSN _5,1 =5234167895. CSN _{i,j is} stored in the server's certificate storage data storage area.

When a consumer buys a bottle of white wine and performs anti-counterfeiting verification, the mobile phone with the function of reading and writing the RFID tag reads the data X on the bottle of white wine and sends it to the server.

The server determines that X = K 2, ₁ = 2, and contains the pointer i = 2.

Found server exist in the server, corresponding to the SN ₂ K _2,1 and CSN _2,1.

The server encrypts SN ₂ =1234567892 with K _2,1 =2 as the key, and obtains P=2134567892. Since P=CSN _2,1 , it is judged that the commodity is true. At the same time, the server generates a new key K _2,2 =3, ie j=j+1, and performs an encryption operation on SN ₂ =1234567892 to obtain SN _2,2 =3214567892. Store SN _{2, 2} on the server and replace SN _2,1 . Send the new key K _2,2 =3 to the terminal, write the RFID tag, and replace K _2,1 .

Example 3

The main steps of this embodiment are the same as those of Embodiment 1:

The item is a bank card.

A total of 5 bank cards were issued, and the randomly generated message K _i,j was written separately. That is, RFID tags of K _1,1 , K _2,1 , K _3,1 , K _4,1 , K _5,1 . Specifically, K _1,1 =1, K _2,1 = 2, K _3,1 =3, K _4,1 =4, K _5,1 =5.

Corresponding to these five bank cards, there are five SN _i values stored in the server. That is, SN ₁ =1234567891, SN ₂ =1234567892, SN ₃ =1234567893, SN ₄ =1234567894, SN ₅ =1234567895.

When a pos machine swipes the card, the verification key X on the bank card is read and sent to the server.

The server determines that X = K 2, ₁ = 2, and contains the pointer i = 2.

The server encrypts SN ₂ =1234567892 with X=2 as the key, and obtains P=2134567892. Since P=CSN _2,1 , it is judged that the card is true. At the same time, the server generates a new key K _2,2 =3, and performs an encryption operation on SN ₂ =1234567892 to obtain SN _2, ₂ =3214567892. Store SN _{2, 2} on the server and replace SN _2,1 . Send the new key K _2,2 =3 to the pos machine, write the bank card, and replace K _2,1 in the card.

Example 4

The main steps of this embodiment are the same as those of Embodiment 1:

The item is an identity card.

A total of 5 ID cards were issued, and the randomly generated messages K _i,j were written separately. That is, RFID tags of K _1,1 , K _2,1 , K _3,1 , K _4,1 , K _5,1 . Specifically, K _1,1 =1, K _2,1 = 2, K _3,1 =3, K _4,1 =4, K _5,1 =5.

Corresponding to these 5 ID cards, there are 5 SN _i values stored in the server. That is, SN ₁ =1234567891, SN ₂ =1234567892, SN ₃ =1234567893, SN ₄ =1234567894, SN ₅ =1234567895.

Encryption operation is performed on the five SN _i values, and the encryption rule is: the first digit and the F digit are interchanged, and F=K _i,j , that is, K _{i,j is} used as the key of the encryption SN _i . Obtained CSN _i,j :CSN _1, ₁ =1234567891, CSN _2,1 =2134567892, CSN _3,1 =3214567893, CSN _4,1 =4231567894, CSN _5,1 =5234167895. CSN _{i,j is} stored in the server's certificate storage data storage area.

Once, when an institution verifies an identity card, it reads the verification key X on the identity card and sends it to the server.

The server determines that X = K 2, ₁ = 2, and contains the pointer i = 2.

The server finds SN ₂ and CSN _2,1 that exist in the server authentication data store.

The server encrypts SN ₂ =1234567892 with K _2,1 =2 as the key, and obtains P=2134567892. Since P=CSN ₂ , it is judged that the identity card is true. At the same time, the server generates a new key K _2,2 =3, and performs an encryption operation on SN ₂ =1234567892 to obtain SN _2,2 =3214567892. Store SN _{2, 2} on the server and replace SN _2,1 . Send the new key K _2,2 =3 to the pos machine, write the ID card, and replace the K _2,1 in the card.

In another round, when an institution verifies an identity card, it reads the verification key X on the identity card and sends it to the server.

The server determines that the value of X is 2 and contains the pointer i=2.

The server finds SN ₂ and CSN _2,2 that exist in the server authentication data storage area and correspond to K _2,1 .

The server encrypts SN ₂ =1234567892 with X=2 as the key, and obtains P=2134567892. Since CSN _{2, 2} = 3214567892, P≠CSN ₂ , ₂ , this ID card is counterfeit.

Further, after updating CSN _2,1 to CSN _2,2 , CSN _2,2 serves as the basis for verifying the verification key on the item read by the terminal device next time. However, CSN _2,1 is still stored in the historical data area of the server and is not used as a verification basis.

In the front, the server found that the ID card is fake, and P=2134567892 is exactly the data CSN _2,1 in the server historical data area. The time and geographic location of the terminal sending the ID card to the server, for the anti-counterfeiting and anti-counterfeiting The time and location of the holiday.

Claims

A first-time secret authentication system based on closed-loop authentication theory and the Internet, comprising: a system server and a readable and writable storage device disposed on each item, and capable of reading and writing the readable and writable storage device And a terminal device that establishes communication with the server;

Anti-counterfeiting of items through the following process:

1) Each item is generated before the release to the public environment space, the key K i,j and the item unique identifier SN i ;

2) Encryption operation is performed on SN i using a specific encryption algorithm; in this process, K i,j is used as a key for one-time encryption operation, and ciphertext CSN i,j corresponding to SN i is obtained , and SN i and CSN i are obtained. j is stored in the article security server; where i is a pointer connecting SN i , K i, j and CSN i, j ; j is the number of times a secret key is generated; i ∈ {E}, SN i ∈ {R} , j is a natural number, and the set {E}, and {R} are a collection of sequences of numbers and/or letters;

3) after the key K ij is written into the readable and writable storage device fixed on the corresponding item, the item is placed in the public environment space;

4) when the item holder performs anti-counterfeiting verification on the item, the terminal device is used to read the key K x,j on the item and send it to the server;

Extracting the key K x,j on the item containing the pointer x, where: x ∈ {E}, find the corresponding SN x and CSN x, j in the server; wherein, using the same algorithm as step 2), K x , j as a key, encryption operation on SN x , to obtain ciphertext P;

If the ciphertext P=CSN x,j , the item is true and jumps to the next step;

If the ciphertext P≠CSN x,j , the system server sends the information that the item is false to the terminal, and ends the authenticity verification operation;

5) the system server sends information that the item is true to the terminal;

At the same time, j is updated with the value of j+1, the system server generates a new key K x,j ; using the same algorithm as step 2), the new K x,j is used as the key to encrypt the SN x Obtaining a new ciphertext CSN x,j and storing it in the server to update the original CSN x,j and sending the new key K x,j to the terminal device to update the Read and write the original K x,j in the storage device.
The first-time secret authentication system based on the closed-loop authentication theory and the Internet according to claim 1, wherein the article is an IC card with a contact, an RFID electronic tag or a magnetic stripe card.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein the item is a commodity, a bank card or a resident identity card;

The readable and writable storage device is a magnetic stripe card, an IC card with contacts, or an RFID electronic tag that is independently present or attached to any item.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein in the step 5), CSN x, j is updated to CSN x, j+1 , CSN x, j +1 is the basis for verifying the verification key on the item read by the terminal device next time; however, CSN x, j is still stored in the historical data area of the server, and is not used as a verification basis;

If the server receives the verification key on the item read by the terminal device, and the verification result of the key P≠CSN x,j , but P is the data in the historical data area, it is determined that the key has been Stolen and written into a readable and writable storage device on a counterfeit item;

The terminal device sends to the server the time and geographical location of scanning the readable and writable storage device of the verified item, and if there is a counterfeit item, it can provide the counterfeiting time and geographical location of the counterfeit, and the use of the fake certificate or the item for the anti-counterfeiting and anti-counterfeiting. The user's historical time and location.
The first-time secret authentication system based on the closed-loop authentication theory and the Internet according to claim 1, wherein the SN i includes a commodity production time and a product serial number.
The one-time secret authentication system based on the closed-loop authentication theory and the Internet according to claim 1, wherein the RFID electronic tag is destroyed if the article is a consumable product and is enabled.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein K i,j is not stored on the server.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein the readable and writable storage device is an RFID, an ID card chip, a bank card or various IC card applications.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein the terminal device is a terminal such as a mobile phone or a tablet computer, or a POS machine, a cash register or an ID card reader, and various IC card reading device.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein said SN i = i.
The first-time secret authentication system based on closed-loop authentication theory and the Internet according to claim 1, wherein said K i,j are randomly generated.