WO2015154646A1

WO2015154646A1 - Currency or security anti-counterfeiting tracing system based on one-time certificate technology

Info

Publication number: WO2015154646A1
Application number: PCT/CN2015/075949
Authority: WO
Inventors: 江峰; 江欣屿
Original assignee: 江峰
Priority date: 2014-04-09
Filing date: 2015-04-07
Publication date: 2015-10-15
Also published as: WO2015154595A1; CN103971250B; WO2015154647A1; CN103971250A; WO2015154482A1

Abstract

The present invention is based on network technology, and provides a currency or security anti-counterfeiting tracing system based on one-time certificate technology, said system being capable of overcoming the issue that traditional currency anti-counterfeiting technology is easily grasped by counterfeiters, and of effectively preventing the solution wherein counterfeiters copy RFID electronic tags on scale via system vulnerabilities. On the principle that any participant of the system and any device provider used by the system are unreliable, an entire block box system security architecture is built, and the security of the anti-counterfeiting system is ensured by the entire security architecture of the system.

Description

An anti-counterfeiting traceability system for money or securities based on one-one-one-one-check technology

Technical field

The invention relates to the field of money or securities security technology.

Background technique

The proliferation of counterfeit currency is a problem that plagues governments and financial institutions around the world. At present, the currency anti-counterfeiting technology is still limited to setting an anti-counterfeiting mark on each currency, and a currency check device matched with it. For example, the magnetic counterfeiting technology on the RMB banknote counter is 6 kinds: 1. Detecting the magnetic ink distribution of the banknote, and also detecting the fifth version of the RMB security line; 2. Fluorescent counterfeiting: checking the quality of the banknote with ultraviolet light, coupled with the photoelectric sensor Monitoring, as long as there are subtle paper changes, can be counterfeit; 3, penetrating for counterfeiting: according to the characteristics of the renminbi, coupled with the penetrating authentication mode, to increase the ability to identify various counterfeit coins; 4, infrared counterfeiting: the use of Advanced fuzzy recognition technology, according to the infrared characteristics of banknotes, can effectively identify various counterfeit coins; 5, multi-spectral forgery: multi-spectral light source, lens array, image sensor unit array formed by arranging LED particles of different wavelengths into a matrix , control and signal amplification circuit and input/output interface; multi-spectral light source and lens array form an optical path system for emitting light and focusing the reflected light on the renminbi onto the image sensor unit array, using multi-spectral image sensor image analysis function, Banknotes for authenticity identification; 6, digital quantitative qualitative analysis detection and authentication: using high-speed parallel AD conversion circuit, high fidelity Set signal, quantitative analysis of ultraviolet light, can detect counterfeit banknotes with weak fluorescence reaction; quantitative analysis of magnetic ink of RMB; fixed-point analysis of infrared ink; use fuzzy mathematics theory to use some factors that are unclear and not easy to quantify Quantitatively, and established a multi-level evaluation model for safety performance assessment to verify the authenticity of banknotes.

The above anti-counterfeiting technology can solve the problem of currency anti-counterfeiting in a certain period of time, but over time, in theory, these technologies will be mastered by the lawless. Therefore, countries have to continuously develop new anti-counterfeiting labels to replace the currency.

Can I verify the currency for security through Internet technology?

With the development of mobile communication technology, especially the development of 2.45GHz radio frequency identification technology and mobile phone short-range wireless communication technology (NFC 13.56MHz), the close-range recognition function of mobile phones and terminal devices is increasingly powerful. The mobile Internet and the Internet of Things are infiltrating into the realm of people's lives. Anti-counterfeiting recognition technology based on this technology emerges in an endless stream. For example, the Chinese patent "a commodity anti-counterfeiting system based on mobile terminals and RFID electronic tags" is a successful application of the Internet of Things to trace and verify currency or valuable securities information through mobile internet. This technology has largely prevented counterfeiting and has been successfully applied in practice.

However, the old problem is solved and new problems will appear again. The technical level of counterfeiting is also correspondingly improved. The counterfeiters illegally obtain the encrypted authentication data in the electronic tag and illegally copy it by various means such as decryption of the electronic tag, thereby counterfeiting the electronic tag to achieve the purpose of fraud. Therefore, the existing Internet anti-counterfeiting authentication system needs to be improved and improved from the system security.

Summary of the invention

The object of the present invention is to provide a system scheme for effectively preventing counterfeiters from copying RFID electronic tags through security vulnerabilities of electronic tags or security vulnerabilities of other anti-counterfeiting system components, and applying them to anti-counterfeiting identification of money or securities. in. In order to achieve the unreliable principle of any device supplier used by any participant and system of the system, the entire black box system security architecture is built, and the security of the anti-counterfeiting system is ensured from the overall security architecture of the system.

The technical solution adopted for achieving the object of the present invention is such a currency or securities security anti-counterfeiting traceability system based on the one-one-one-one-in-one technology, which is characterized in that it comprises a system server and RFID electronic products set on money or securities. A tag and a terminal device having the function of reading and writing an RFID electronic tag.

Realize currency or securities security through the following process:

1) The message MB _{i,j is} written in the RFID tag embedded in any currency or securities. The message MB _i,j is a digital identity certificate for money or securities. Where i is the serial number of the currency or the securities, i=1, 2, ..., n, j is the number of times the RFID electronic tag writes the message, j=1, 2, . . . m. The system server stores the message set S={CB _i,1 , CB _i,2 . . . CB _i,j }. The message CB _{i, j} with the message MB _{i, j} corresponding to, and for the message MB _{i, j} for comparison operation, to verify the authenticity of money or securities. When any currency or securities is printed, the RFID electronic tag set on this currency or securities is written to MB _i,1 , and the system server stores the message set S={CB _i,1 }, ie j =1.

2) verifying the authenticity of the currency or the valuable security: after reading the RFID electronic tag on the tested currency or the valuable security using the terminal device, transmitting the message X in the read RFID electronic tag to the system The server performs an alignment operation with the elements in the message set S to verify the authenticity of the currency or the securities.

Divided into the following three cases:

A) if the comparison operation is performed, the message X does not match any one of the elements of the message set S, and the message X is not the message MB _i,j , and the test currency or the securities are false. The system server sends the money or the securities to the terminal device as false information, and ends the authenticity verification operation.

B) if the comparison operation is performed, the message X matches other elements of the message set S except the message CB _i,j , the message X is not the message MB _i,j , and the system server sends the message to the terminal device The money or securities are true and false suspicious information and end the authenticity verification operation.

C) if the comparison operation is performed, the message X matches the message CB _i,j , ie the message X is the message MB _i,j , and the system server sends the currency or the valuable securities to the terminal device as true Information and go to the next step.

3) Update certificate: The system server generates a message MB _{i, j+1} and sends it to the terminal device. The message MB _{i,j+1 is} written by the terminal device into the RFID electronic tag on the money to be tested or the valuable securities that has been determined by the step 2) to replace the original MB _i,j . The message MB _i,j+1 is a new digital identity certificate representing the currency or the securities for use by the user for authenticity verification of the currency or the securities. The system server stores the message MB _{i, j + 1} corresponding to the message CB _{i, j + 1,} i.e., the update message set S _{_{{CB i, 1, CB i}} , 2 ...... CB i, j, CB i, j ₊₁ }. The message CB _{i,j+1 is} used for the next comparison with the message MB _i,j+1 to verify the authenticity of the currency or the securities.

Further, the relationship between CB _i,j and MB _i,j is one of the following three cases:

a) The CB _i,j is equal to MB _i,j .

b) The CB _i,j is an encrypted message of MB _i,j .

c) The CB _i,j is the hash value after MB _i,j has been hashed.

Further, after the step 3) ends, the message CB _i,j is still stored in the system server. On the premise that the message CB _i,j+1 exists on the system server, the system server receives the to-be-verified message MB _i,k sent by the terminal device _{, and} obtains the corresponding CB from MB _i,k _i,k ∈{CB _i,1 , CB _i,2 ......CB _i,j ,CB _i,j+1 } and k≤j, it is judged that the message MB _i,k has been stolen and written Counterfeit currency or RFID tags on securities. The system server records and submits the scan time and geographic location of the terminal device that scans the currency or the securities, and simultaneously invokes and submits that the terminal device reads the currency or has the last time the system server receives the MB _i,k The time and geographical location of the RFID of the price securities provide the counterfeiting time and geographical location of the counterfeiters for anti-counterfeiting and counterfeiting.

The present invention includes another embodiment, that is, a currency or securities security traceability system based on one-on-one technology, including a system server, an RFID electronic tag embedded in each currency or securities, and having read and write A terminal device and a random number generator that function as an RFID electronic tag.

Realize currency or securities security through the following process:

1) Any one currency or portfolio corresponds to a message MA _i , i=1, 2, . . . n composed of serial numbers. The combined message T1 _{i,j is} written in the RFID electronic tag on any currency or security. The combined message T1 _{i,j is a} combination of the message CA _i and the message MB _i,j , ie T1 _i,j =CA _i &MB _i,j , wherein the message CA _i is obtained by performing an encryption operation on the MA _i , ie CA _i = E(MA _i ), the message MB _i,j is a random number generated by the random number generator, as a digital signature certificate of the message MA _i , j is the number of times the RFID electronic tag is updated and written into the message, j=1, 2, ... m.

The system server stores a set of messages S={T2 _i,1 , T2 _i,2 . . . T2 _i,j }, where T2 _i,1 =MA _i &CB _i,1 , T2 _i,2 =MA _i &CB _{i , 2} , ... T2 _{i, j} = MA _i & CB _i,j , the message CB _i,j is obtained by performing encryption operation on MB _i , that is, CB _i,1 =H(MB _i,1 ), CB _{i , 2} = H(MB _{i, 2} ), ... CB _{i, j} = H(MB _{i, j} ). The message T2 _{i, j} with the message T1 _{i, j} corresponds to, and a message for T1 _{i, j} for comparison operation, to verify the authenticity of currencies or securities. When any currency or securities is printed, the RFID electronic tag implanted in this currency or securities is written to T1 _i,1 , and the system server stores the message set S={T2 _i,1 }, ie j=1.

2) verifying the authenticity of the currency or the valuable security: after reading the RFID electronic tag on the tested currency or the valuable security using the terminal device, transmitting the message X in the read RFID electronic tag to the system server.

After receiving the message X sent by the reader, the system server first determines whether the format of X is the same as the combined message T1 _i,j . If not, the money to be tested or the securities to be tested is false, that is, the message X is not the combined message T1 _i,j , and the authenticity verification operation is ended.

If the format of the message X is the same as the combined message T1 _i,j , the message X is split into two parts, XA and XB. The format of the XA is the same as that of the CA _i , and the format of the XB is the same as MB _{i, j} , that is, X= XA&XB. The message XA is decrypted to obtain a value of MXA=E ^-1 (XA). If MXA≠MA _i , the currency or the securities are false, that is, the message X is not the combined message T1 _i,j , and the authenticity check is ended. operating. If MXA=MA _i , find the CB _i,j corresponding to MA _i and perform a one-way function operation on XB to get CXB=H(XB), which is divided into the following three cases:

A) If CXB is not any element of {CB _i,1 , CB _i,2 ... CB _i,j }, message X is not a combined message T1 _i,j , and the test currency or the securities are false. The system server sends the money or the securities to the terminal device as false information, and ends the authenticity verification operation.

B) If CXB is any element other than CB _i,j in {CB _i,1 , CB _i,2 ... CB _i,j }, the message X is not the message T1 _i,j , the system server The terminal device sends true or false suspicious information of the currency or the securities, and ends the authenticity verification operation.

C) If CXB=CB _i,j , then the money to be tested or the securities to be tested is true, that is, the read message X is a combined message T1 _i,j , and the system server sends money or price to the terminal device. The securities are true information and go to the next step.

3) Update the certificate: The system server randomly generates a new random number MB _{i, j+1} . The random number MB _{i,j+1 is} used as a new digital signature certificate for the message MA _i . The message MB _{i,j+1 is} written by the terminal device into the RFID electronic tag on the money to be tested or the securities that have been determined to be true by the step 2), so as to replace the original combined message T1 _i,j = CA _{_i} & MB _{_i, j} of the MB _{i, j,} that has been step 2) is determined to be true or a combination of currency to be tested RFID tag message on existing securities update T1 _{i, j + 1} = CA _i & MB _{i, j+1} , used for the next time the user authenticates this currency or securities.

At the same time, the system server calculates CB _{i, j+1} = H(MB _{i, j+1} ), forms a new message combination T2 _{i, j+1} = MA _i & CB _{i, j+1} , and saves in the In the system server, the message set S is updated to {T2 _i,1 , T2 _i,2 ... T2 _i,j , T2 _i,j+1 }. The combined message T2 _{i, j+1 is} used for the next time the user authenticates the currency or the securities, and compares the combined messages T1 _{i, j+1} to verify the currency or the price. The authenticity of the securities.

Further, after the step 3) ends, the message T2 _i,j is still stored in the system server. On the premise that the message T2 _{i, j+1} exists on the system server, when the system server receives the to-be-verified message X=XA&XB=CA _i &MB _i,k sent by the terminal device, the system calculates CB _i,k =H(MB _i,k ), if CB _i,k ∈{CB _i,1 , CB _i,2 ......CB _i,j ,CB _i,j+1 } and k≤j, ie It is judged that the message T2 _{i, k} = CA _i & MB _{i, k} has been stolen and written into the counterfeit currency or the RFID electronic tag on the securities. The system server records and submits the scan time and geographic location of the terminal device that scans the currency or the securities, and invokes the last time the system server receives the MB _i,k when the terminal device reads the currency or has a price. The time and geographical location of the securities RFID provide the counterfeiting time and geographical location of the counterfeiters for anti-counterfeiting and counterfeiting.

Further, the combined message T1 _i,j pre-written in the RFID tag on each currency or securities has randomness and uniqueness. The CA _i and MB _i,j are not present in the system server after T1 _i,j =CA _i &MB _i,j are written into the RFID electronic tag, and T1 _i,j =CA _i &MB _{i, the} value of _j cannot pass Attack system servers are stolen and copied on a scale.

Further, the length of the message MA _i or MB _i,j is 8 to 1024 bits. The currency or portfolio serial number portion MA _i includes a currency or securities printing time and a currency or securities serial number.

Further, when the currency or marketable securities are enabled, the RFID reader is a mobile phone or terminal device with a radio frequency identification function or a short-range wireless communication NFC function.

Further, a part of the bytes in MB _i,j serves as a key for decrypting CA _i .

Further, in the CA _i , a key for decrypting the CA _{i is} implicitly included according to a certain rule.

Further, in the event of a stolen money or securities, the system server marks the messages CB _i,j corresponding to the stolen money or securities. When one or more of the stolen money or securities are verified by the terminal device,

The system server records and submits the scan time and geographic location of the terminal device that scans the currency or the securities, that is, the time and geographic location at which the stolen money or the securities are present.

It is worth noting that the present invention can effectively prevent the electronic tag from being decrypted or being copied and copied by the fraudulent person of the tag itself. From the system architecture, the invention innovatively adopts a one-card dynamic signature authentication system. In the system security architecture, messages written to an electronic tag are in a one-time certificate. That is, when the currency or the securities are printed, the initial MB _i,j is stored in the electronic tag. When the user successfully scans the tag to obtain the currency or the securities information, the server automatically generates a new MB _i,j+1 and calculates a new one. Message CB _{i, j+1} . The new message MB _{i+1 is} rewritten into the electronic tag set on the currency or the valuable security by the mobile device such as a mobile phone, and the new message CB _i,j+1 is stored in the system server. The next time you scan the same currency or portfolio, the new MB _{i, j+1} will be read for verification to prevent the tag from being cracked and copied.

More preferably, in a preferred form of the invention, the system employs a fault tolerance mechanism to prevent password replacement failures due to network delays or other causes. And the system will make a complete certification record. Once a certain currency or securities certification is illegal, it can accurately locate the illegal start position and possible geographical area.

detailed description

The invention is further illustrated by the following examples, but it should not be understood that the scope of the invention described above is limited to the following examples. Various changes and modifications may be made without departing from the spirit and scope of the invention.

Example 1:

A currency or portfolio security traceability system based on one-on-one technology, including a system server, an RFID electronic tag disposed on each currency or securities, and a terminal device having the function of reading and writing RFID electronic tags. In an embodiment, the terminal device is a money detector. That is, in conjunction with money or securities provided with RFID electronic tags, devices that read and write RFID tags are installed on the money detectors that check these currencies. That is, the RFID device can be installed in the transmission component of the money detector.

Implement currency or securities security by following these steps:

1) The message MB _{i,j is} written in the RFID electronic tag on any currency or securities. The message MB _i,j is a digital identity certificate for money or securities. Where i is the serial number of the currency or the securities, i=1, 2, ..., n, j is the number of times the RFID electronic tag writes the message, that is, the number of times the RFID electronic tag is updated and written to the message, j=1, 2 , ...m. The system server stores the message set S={CB _i,1 , CB _i,2 . . . CB _i,j }. The message CB _{i, j} with the message MB _{i, j} corresponding to, and for the message MB _{i, j} for comparison operation, to verify the authenticity of currencies or securities. When any currency or securities is printed for the first time in the circulation field, the RFID electronic tag set on this currency or securities is written to MB _i,1 , and the system server stores the message set S={CB _{i , 1} }, ie j=1. For example, a message MB _1,1 is written in an RFID electronic tag, which is the first time the message is written into the RFID tag. The message written in the commercially available RFID tag will be the message set {MB _1,1 , MB _2,1 ,...,MB _n,1 ,...MB _1,2 ,MB _2,2 ,... ..., MB _{n, 2} , ... MB _{1, m} , MB _{2, m} , ... MB _{n, m} }.

The system server stores the message MB _{i, j} corresponding message CB _{i, j.} That is, the system server stores the message set as belonging to or equal to {CB _1,1 , CB _2,1 , . . . , CB _n,1 , . . . CB _1,2 , CB _2,2 , . . . , CB _n,2 , ...CB _1,m ,CB _2,m ,...CB _n,m }. The message CB _{i,j is} used for comparison with the message MB _i,j to verify the authenticity of the currency or the securities.

In an embodiment _, the relationship between CB _i,j and MB _i,j is one of the following three cases: a) the CB _i,j is equal to MB _i,j . b) The CB _i,j is an encrypted message of MB _i,j . c) The CB _i,j is the hash value after MB _i,j has been hashed.

2) Verification of the authenticity of the currency or the securities: After using the money detector to read the RFID electronic tag on the currency or securities under test, the RFID tag may also be a true electronic tag, or it may be It is an electronic tag on a counterfeit currency or a security. Transmitting the message X in the read RFID electronic tag to the system server, and performing comparison operation with the message stored in the system server to verify the authenticity of the currency or the securities (ie, the message X is possible Is the real message MB _{i, j} , or not, need the system server to judge).

Divided into the following three cases:

A) if the comparison operation is performed, the message X does not match any one of the elements of the message set S, and the message X is not the message MB _i,j , and the test currency or the securities are false. The system server sends the money or the securities to the counterfeit machine as false information, and ends the authenticity verification operation.

B) if the comparison operation is performed, the message X matches other elements of the message set S other than the message CB _i,j , the message X is not the message MB _i,j , the system server goes to the money detector Send true or false suspicious information on currency or securities and end the authenticity check operation.

C) if, by the comparison operation, the money to be tested or the securities are true, the message X matches the message CB _i,j , ie the message X is the message MB _i,j , the system server Send money or securities to the counter to the truth detector and go to the next step.

3) Update certificate: The system server generates a message MB _{i, j+1} and sends it to the money detector. The message MB _{i,j+1 is} written by the money detector into the RFID electronic tag on the money to be tested or the securities that has been determined to be true in step 2) to replace the original MB _i,j . The message MB _i,j+1 is a new digital identity certificate representing the currency or the securities for use by the user for authenticity verification of the currency or the securities. The system server stores the message MB _{i, j + 1} corresponding to the message CB _{i, j + 1,} i.e., the update message set S _{_{{CB i, 1, CB i}} , 2 ...... CB i, j, CB i, j ₊₁ }. The message CB _{i,j+1 is} used for the next comparison with the message MB _i,j+1 to verify the authenticity of the currency or the securities.

Further, after the step 3) ends, the message CB _i,j is still stored in the system server. On the premise that the message CB _i,j+1 exists on the system server, the system server receives the to-be-verified message MB _i,k sent by the money detector _{, and} obtains corresponding information from MB _i,k CB _i,k ∈{CB _i,1 , CB _i,2 ......CB _i,j ,CB _i,j+1 } and k≤j, it is judged that the message MB _i,k has been stolen and written In the RFID tag on counterfeit currency or securities. The system server records and submits the scan time and geographic location of the money detector or the securities checker, and simultaneously calls and submits the last time the system server receives the MB _i,k when the money detector reads the currency Or the time and geographical location of the RFID of the securities, providing the counterfeiting time and geographical location of the counterfeiters for anti-counterfeiting and counterfeiting.

The specific implementation of this embodiment can also be illustrated by the following example:

A total of 10 banknotes were printed. When the 10 banknotes were printed, the messages MB _1,1 , MB _2,1 , MB _3,1 , MB _4,1 , MB _5,1 , MB _6,1 , MB _{7,1 were} written. RFID tags for MB _8,1 , MB _9,1 and MB _10,1 . Specifically, MB _1,1 =101, MB _2,1 =102, MB _3,1 =103, MB _4,1 =104, MB _5,1 =105, MB _6,1 =106, MB _7,1 = 107, MB ₈ , ₁ = 108, MB ₉ , ₁ = 109, MB ₁₀ , ₁ = 110.

The system server stores a message set S={CB _1,1 , CB _2,1 , . . . , CB _10,1 } for verifying the authenticity of the above ten banknotes. Among them, the message CB _1,1 is the hash value of the message MB _1,1 , the message CB _2,1 is the hash value of the message MB _2,1 , ... the message CB _10,1 is the hash of the message MB _10,1 Value, and so on.

After using the money detector with RFID read/write function to read the RFID electronic tag on a banknote to be tested, the RFID electronic tag may also be an electronic tag on one of the above 10 banknotes, or may be a counterfeit coin. Electronic label.

If the message X=200 in the RFID electronic tag read by the money detector is sent to the system server, the system server receives the message X=200, and then hashes it to obtain The hash value does not belong to the message set S, that is, it is judged that the banknote is not one of the above 10 true banknotes. The system server transmits the information determined to be counterfeit to the money detector, and ends the authenticity check operation.

If the money detector will read the message X=101 in the RFID electronic tag and send it to the system server, the system server receives the message X=101 and then hashes it. The obtained hash value belongs to the message set S, that is, it is judged that the banknote is one of the above 10 true banknotes. The system server will send the banknote to the money detector and enter the operation of updating the certificate: the system server generates the message MB _{1, 2} = 1011 and sends it to the money detector to pass the test. The read/write RFID device on the banknote writes the message MB _1,2 = 1011 into the RFID tag on the banknote that has been judged to be true, that is, the original message MB _1,1 =101 in the RFID tag of the banknote is replaced with MB. _1,2 = 1011. At the same time, the system server will increment the hash value "message CB _1,2 " of the message MB _1,2 in the message set S.

After again using the money detector to read the RFID electronic tag on the banknote, the money detector will message X=1011. The system server hashes the message X=1011, and the obtained hash value is “message CB _1,2 ”. When it belongs to the message set S, it is determined that the banknote is one of 10 pieces. The system server sends the banknote to the money detector and returns to the operation of updating the certificate: the system server generates a message MB _{1, 3} = 10111 and sends it to the money detector, through the The money detector writes the message MB _1,3 =10111 into the RFID electronic tag on the banknote that has been judged to be true, that is, the original message MB _1,2 =1011 in the RFID tag of the banknote is replaced by MB _1,3 = 10111. At the same time, the system server will increment the hash value "message CB _1,3 " of the message MB _1,3 in the message set S.

......

If the system server receives the message MB _1,1 =101 sent by the money detector more than once, and there are not only CB _{1,1 in the} system server, but also CB _1,2 , CB _1,3 ... CB _1, One or more of _m . That is, it is judged that the message MB _1,1 has been stolen and written into the RFID electronic tag on the counterfeit banknote. The system server records the time and geographical location of the data read by the money detector of the previously sent message MB _1,1 =101, that is, the anti-counterfeiting and counterfeiting provides the counterfeiting time and geographical location of the counterfeiter.

It is worth noting that, unlike the traditional banknote verification process, the present invention requires communication with the server over the network. It may take a certain amount of time for the money detector to receive data from the server. Therefore, it is necessary to improve the traditional money detector to meet the requirements. There are a variety of ways, for example, to increase the time for verifying each banknote, and to send the banknotes after the RFID tag is written. Or you can use two inspections, collect the information in the banknote for the first time, and pass it to the server. After receiving the feedback from the server, perform the second inspection. This time, you can check the counterfeit and update the real currency. The data in .

Example 2

This embodiment is a preferred mode of Embodiment 1, and further includes a random number generator to implement A combination of currency or securities that is encrypted for authentication.

An anti-counterfeiting source system for money or securities based on one-on-one technology, including a system server, an RFID electronic tag embedded in each currency or securities, a money detector with the function of reading and writing RFID electronic tags, and Random number generator.

Implement currency or securities security by following these steps:

The system server stores a set of messages S={T2 _i,1 , T2 _i,2 . . . T2 _i,j }, where T2 _i,1 =MA _i &CB _i,1 , T2 _i,2 =MA _i &CB _{i , 1} , T2 _{i, j} = MA _i & CB _{i, j} , the message CB _{i, j} is obtained by performing encryption operation on MB _i , that is, CB _{i, 1} = H(MB _{i, 1} ), CB _{i , 2} = H(MB _{i, 2} ), ... CB _{i, j} = H(MB _{i, j} ). The message T2 _{i, j} with the message T1 _{i, j} corresponds to, and a message for T1 _{i, j} for comparison operation, to verify the authenticity of currencies or securities. When any currency or securities is printed for the first time in the circulation field (never verified by the device with RFID read/write function), the RFID tag set on this currency or securities is written to T1. _i,1 , the system server stores the message set S={T2 _i,1 }, ie j=1.

For example, a message T1 _1,1 is written in an RFID electronic tag, which is the message written into the RFID tag for the first time. The message written in the RFID tag of the circulating genuine currency will be the message set {T1 _1,1 , T1 _2,1 ,...,T1 _n,1 ,...T1 _1,2 , T1 _2,2 ,... , T1 _{n, 2} , ... T1 _{1, m} , T1 _{2, m} , ... T1 _{n, m} }.

The system server stores a message T2 _i,j corresponding to the message T1 _i,j . That is, the system server stores the message set as belonging to or equal to {T2 _1,1 , T2 _2,1 , . . . , T2 _n,1 , . . . T2 _1,2 , T2 _2,2 , . . . , T2 _{n, 2} , ... T2 _1,m , T2 _2,m ,...T2 _n,m }. The message T2 _{i,j is} used for comparison with the message T1 _i,j to verify the authenticity of the currency or the securities.

2) verifying the authenticity of the currency or the securities: after using the money detector to read the RFID electronic tag on the currency to be tested or the securities, the message X in the read RFID tag is sent to the System server.

A) If CXB is not any element of {CB _i,1 , CB _i,2 ... CB _i,j }, message X is not a combined message T1 _i,j , and the test currency or the securities are false. The system server sends the money or the securities to the counterfeit machine as false information, and ends the authenticity verification operation.

B) If CXB is any element other than CB _i,j in {CB _i,1 , CB _i,2 ... CB _i,j }, the message X is not the message T1 _i,j , the system server The money detector sends true or false suspicious information on the currency or securities and ends the authenticity verification operation.

C) If CXB=CB _i,j , the money to be tested or the securities to be tested is a genuine coin, that is, the read message X is a combined message T1 _i,j , and the system server sends money to the money detector or The securities are true information and go to the next step.

3) Update the certificate: The system server randomly generates a new random number MB _{i, j+1} . The random number MB _{i,j+1 is} used as a new digital signature certificate for the message MA _j . The message MB _{i,j+1 is} written by the money detector into the RFID electronic tag on the currency to be tested or the securities that has been determined to be true in step 2) to replace the original combined message T1 _i,j =CA _i & MB _i,j in the _j,j , so that the combined message existing in the RFID tag on the money to be tested or the security document that has been judged as true in step 2) is updated to T1 _i,j+1 = CA _i & MB _{i, j+1 is} used for the next time the user authenticates this currency or securities.

At the same time, the system server calculates CB _{i, j+1} = H(MB _{i, j+1} ), forms a new message combination message T2 _{i, j+1} = MA _i & CB _{i, j+1} , and saves it in the office. In the system server, the message set S is updated to {T2 _i,1 , T2 _i,2 ... T2 _i,j , T2 _i,j+1 }. The combined message T2 _{i, j+1 is} used for the next time the user authenticates the currency or the securities, and compares the combined messages T1 _{i, j+1} to verify the currency or the price. The authenticity of the securities.

As a preferred mode of this embodiment, after the step 3) ends, the message T2 _i,j is still stored in the system server. On the premise that the message T2 _{i, j+1} exists on the system server, the system server receives the to-be-verified message X=XA&XB=CA _i &MB _i,k sent by the money detector CB _i,k =H(MB _i,k ), if CB _i,k ∈{CB _i,1 , CB _i,2 ......CB _i,j ,CB _i,j+1 } and k≤j, That is, it is judged that the message T2 _{i, k} = CA _i & MB _{i, k} has been stolen and written into the counterfeit currency or the RFID electronic tag on the securities. The system server records and submits the scan time and geographic location of the money detector or the securities checker, and simultaneously calls and submits the last time the system server receives the MB _i,k when the money detector reads the currency Or the time and geographical location of the RFID of the securities, providing the counterfeiting time and geographical location of the counterfeiters for anti-counterfeiting and counterfeiting.

Claims

A currency or portfolio security anti-counterfeiting traceability system based on one-one-one-certification technology, comprising: a system server, an RFID electronic tag disposed on a currency or a valuable security, and a terminal device having a function of reading and writing an RFID electronic tag;

Realize currency or securities security through the following process:

1) In any RFID or electronic RFID tag embedded in the securities, the message MB i,j is written; the message MB i,j is a digital identity certificate of money or securities; wherein i is The serial number of the currency or the securities, i=1, 2, ..., n, j is the number of times the RFID electronic tag writes the message, j=1, 2, . . . m; the system server stores the message set S={CB i, 1, CB i, 2 ...... CB i, j}; the message CB i, j with the message MB i, j corresponding to, and for the message MB i, j for comparison operation to verify money or securities True or false; when any currency or securities is printed, the RFID electronic tag set on this currency or securities is written to MB i,1 , and the system server stores the message set S={CB i,1 } , ie j=1;

2) verifying the authenticity of the currency or the valuable security: after reading the RFID electronic tag on the tested currency or the valuable security using the terminal device, transmitting the message X in the read RFID electronic tag to the system a server, performing an alignment operation with the elements in the message set S to verify the authenticity of the currency or the securities;

Divided into the following three cases:

A) if the comparison operation is performed, the message X does not match any one of the elements of the message set S, and the message X is not the message MB i,j , and the test currency or the securities are false. The system server sends the money or the securities to the terminal device as false information, and ends the authenticity verification operation;

B) if the comparison operation is performed, the message X matches other elements of the message set S except the message CB i,j , the message X is not the message MB i,j , and the system server sends the message to the terminal device Truth or suspicious information of currency or marketable securities, and end the authenticity verification operation;

C) if the comparison operation is performed, the message X matches the message CB i,j , ie the message X is the message MB i,j , and the system server sends the currency or the valuable securities to the terminal device as true Information and go to the next step;

3) updating the certificate: the system server generates a message MB i,j+1 and sends it to the terminal device; writing the message MB i,j+1 by the terminal device has been judged as true by step 2) The original MB i,j is replaced by the RFID electronic tag on the currency to be tested or the securities; the message MB i,j+1 is a new digital identity certificate representing the currency or the securities, this use of a currency or authenticity securities user authentication; message system server stores MB i, j + 1 corresponding to the message CB i, j + 1, i.e., the update message set S {CB i , 1 , CB i, 2 ... CB i,j , CB i,j+1 }; the message CB i,j+1 is used for the next comparison with the message MB i,j+1 Check the authenticity of the currency or the securities.
The anti-counterfeiting traceability system for money or securities based on the one-one-one-check technology according to claim 1, characterized in that:

The relationship between CB i,j and MB i,j is one of the following three cases:

a) said CB i,j is equal to MB i,j ;

b) said CB i,j is an encrypted message of MB i,j ;

c) The CB i,j is the hash value after MB i,j has been hashed.
The anti-counterfeiting traceability system for money or securities based on the one-one-one-in-one technology according to claim 1 or 2, wherein after said step 3), said message CB i,j is still stored in said In the system server, on the premise that the message CB i,j+1 exists on the system server, the system server receives the to-be-verified message MB i,k sent by the terminal device, from MB i,k When the corresponding CB i,k ∈{CB i,1 , CB i,2 ......CB i,j ,CB i,j+1 } and k≤j are obtained, it is judged that the message MB i,k has been stolen, And written into the counterfeit currency or the RFID electronic tag on the securities; the system server records and submits the scan time and geographic location of the terminal device that scans the currency or the securities, and simultaneously calls and submits the last time When the system server receives the MB i,k , the terminal device reads the time and geographical location of the currency or the securities RFID, and provides the counterfeiting time and geographical location of the counterfeiter for the anti-counterfeiting and anti-counterfeiting.
An anti-counterfeiting traceability system for money or securities based on one-one-one-one-in-one technology, which is characterized in that it comprises a system server, an RFID electronic tag implanted in each currency or securities, and a function of reading and writing RFID electronic tags. Terminal equipment and random number generator;

Realize currency or securities security through the following process:

1) Any one currency or securities corresponds to a message consisting of serial numbers MA i , i=1, 2, . . . n; in any RFID or RFID tag on the securities, the combination is written. The message T1 i,j ;the combined message T1 i,j is a combination of the message CA i and the message MB i,j , ie T1 i,j =CA i &MB i,j , wherein the message CA i is an encryption of the MA i The computed result, ie CA i =E(MA i ), the message MB i,j is the random number generated by the random number generator, as the digital signature certificate of the message MA i , j is the RFID electronic tag is updated The number of times the message was written, j=1, 2, ... m;

The system server stores a set of messages S={T2 i,1 , T2 i,2 . . . T2 i,j }, where T2 i,1 =MA i &CB i,1 , T2 i,2 =MA i &CB i , 2 , ... T2 i, j = MA i & CB i,j , the message CB i,j is obtained by performing encryption operation on MB i , that is, CB i,1 =H(MB i,1 ), CB i , 2 = H(MB i, 2 ), ... CB i, j = H(MB i,j ); the message T2 i,j corresponds to the message T1 i,j and is used for the message T1 i,j The comparison operation is to verify the authenticity of the currency or the securities; when any currency or securities is printed, the RFID electronic tag implanted in the currency or the securities is written into T1 i,1 . The system server stores the message set S={T2 i,1 }, ie j=1;

2) verifying the authenticity of the currency or the valuable security: after reading the RFID electronic tag on the tested currency or the valuable security using the terminal device, transmitting the message X in the read RFID electronic tag to the system server;

After receiving the message X sent by the reader, the system server first determines whether the format of the X is the same as the combined message T1 i,j ; if not, the money to be tested or the securities is false, that is, the message X is not a combination. The message T1 i,j ends the authenticity check operation;

If the format of the message X is the same as the combined message T1 i,j , the message X is split into two parts, XA and XB. The format of the XA is the same as that of the CA i , and the format of the XB is the same as MB i, j , that is, X= XA&XB; decrypting the message XA to obtain the value MXA=E -1 (XA). If MXA≠MA i , the currency or the securities are false, that is, the message X is not the combined message T1 i,j , and the authenticity is ended. Verification operation; if MXA=MA i , find the CB i,j corresponding to MA i , and perform a one-way function operation on XB to get CXB=H(XB), which is divided into the following three cases:

A) If CXB is not any element of {CB i,1 , CB i,2 ... CB i,j }, message X is not a combined message T1 i,j , and the test currency or the securities are false. The system server sends the money or the securities to the terminal device as false information, and ends the authenticity verification operation;

B) If CXB is any element other than CB i,j in {CB i,1 , CB i,2 ... CB i,j }, the message X is not the message T1 i,j , the system server The terminal device sends true or false suspicious information of the currency or the securities, and ends the authenticity verification operation;

C) If CXB=CB i,j , then the money to be tested or the securities to be tested is true, that is, the read message X is a combined message T1 i,j , and the system server sends money or price to the terminal device. Securities is true information and proceeds to the next step;

3) updating the certificate: the system server randomly generates a new random number MB i, j+1 ; the random number MB i, j+1 is used as a new digital signature certificate of the message MA i ; The message MB i,j+1 is written into the RFID electronic tag on the currency to be tested or the securities that has been judged as true in step 2) to replace the original combined message T1 i,j =CA i &MB i,j MB i,j in the case , so that the combined message existing in the RFID electronic tag on the test currency or the securities that has been judged as true in step 2) is updated to T1 i, j+1 = CA i & MB i, j+ 1 , used for the next time the user authenticates this currency or securities;

At the same time, the system server calculates CB i, j+1 = H(MB i, j+1 ), forms a new message combination T2 i, j+1 = MA i & CB i, j+1 , and saves in the In the system server, the message set S is updated to {T2 i,1 , T2 i,2 . . . T2 i,j , T2 i,j+1 }; the combined message T2 i,j+1 is used for the user The next time the authenticity of this currency or securities is verified, it is compared with the combined message T1 i, j+1 to verify the authenticity of the currency or the securities.
The anti-counterfeiting and traceability system for money or securities based on the one-on-one technology according to claim 4, characterized in that after the step 3) is finished, the message T2 i,j is still stored in the system server. On the premise that the message T2 i, j+1 exists on the system server, when the system server receives the to-be-verified message X=XA&XB=CA i &MB i,k sent by the terminal device, Calculate CB i,k =H(MB i,k ), if CB i,k ∈{CB i,1 ,CB i,2 ......CB i,j ,CB i,j+1 } and k≤j , that is, it is judged that the message T2 i, k = CA i & MB i, k has been stolen and written into the counterfeit currency or the RFID electronic tag on the securities; the system server records and submits the scan currency or The scanning time and geographical location of the terminal device of the securities, and the time and geographic location of the terminal device reading the currency or the securities RFID when the system server receives the MB i,k , the last time the system server receives the data, and provides the anti-counterfeiting anti-counterfeiting The possible time and location of the counterfeiter.
A currency or portfolio security anti-counterfeiting traceability system based on the one-one-one-in-one technology according to claim 4, characterized in that the combined message T1 i pre-written in the RFID electronic tag on each currency or securities , j has randomness and uniqueness; the CA i and MB i, j are not present in the system server after T1 i,j =CA i &MB i,j are written into the RFID electronic tag, T1 i,j = The CA i & MB i, j value cannot be stolen and copied by attacking the system server.
The anti-counterfeiting traceability system for money or securities based on the one-one-one-one-in-one technology according to claim 4, wherein the length of the message MA i or MB i,j is 8 to 1024 bits; The securities serial number portion MA i includes a currency or securities printing time and a currency or securities serial number.
The anti-counterfeiting and traceability system for money or securities based on the one-one-one-one-in-one technology according to claim 1 or 4, wherein the RFID reader is a mobile phone with a radio frequency identification function or a short-range wireless communication NFC function. Or terminal equipment.
A currency or valuable securities anti-counterfeiting traceability system based on the one-one-one-in-one technology according to claim 4, wherein a part of the bytes in the MB i,j is used as a key for decrypting the CA i ;
The currency or valuable securities anti-counterfeiting traceability system according to claim 4, wherein the CA i implicitly includes a key for decrypting the CA i according to a certain rule.
The anti-counterfeiting traceability system for money or securities based on the one-one-one-one-in-one technology according to claim 1 or 4, characterized in that: in the event of a stolen money or securities, the system server pairs the stolen money or The message CB i,j corresponding to the securities is marked;

When one or more of the stolen money or securities are verified by the terminal device,

The system server records and submits the scan time and geographic location of the terminal device that scans the currency or the securities, that is, the time and geographic location at which the stolen money or the securities are present.