WO2016192537A1

WO2016192537A1 - System for establishing product authenticity identification data module by using internet of things

Info

Publication number: WO2016192537A1
Application number: PCT/CN2016/082664
Authority: WO
Inventors: 李皞白; 陈煜仁; 黄祥麟; 陈育进
Original assignee: 李皞白; 陈煜仁
Priority date: 2015-06-05
Filing date: 2016-05-19
Publication date: 2016-12-08

Abstract

A system for establishing a product authenticity identification data module by using the Internet of Things comprises: at least one product, wherein a product identifier is configured on each product; a reading device, having a specific user identifier and a coordinates positioning device, so as to read a product identifier of a product; a cloud device, having a function of communicating with the reading device; and an agent servo device, having a URL and a password, and being capable of communicating with the reading device and the cloud device, so as to directly transmit, to the cloud device, the production identifier read by the reading device as well as reading time and a reading position. In the cloud device, the product authenticity identification data module that has a relationship in which the reading time is corresponding to the reading position is established according to the production identifier.

Description

System for establishing product authenticity identification data module using Internet of Things

Technical field

The invention relates to a system for cloud service application, in particular to a system for establishing a product authenticity identification data module using the Internet of Things, and the object network system has the function of authenticating the authenticity of the product in real time, and can further query the authentic product. The production experience of the IoT system.

Background technique

With the rapid development of technology and the dramatic changes in the structure of the economy, the traditional "business-to-business" competition has evolved into a "supply chain to supply chain" competition. Improving the information integration function of the supply chain to improve logistics efficiency and reduce logistics costs is an important issue for companies to create competitiveness today. With the advancement of "Radio Frequency Identification (RFID) technology, RFID has gradually been adopted in supply chain activities and process transformation.

The use of the IoT management system to improve the competitiveness of the industry is characterized by efficiency and integrity. First of all, in terms of efficiency, it is not only the delivery of the product to the customer within a certain period of time, but also the integrated delivery method that delivers different products to different customers in the same time. Secondly, in terms of completeness, not only the integrity of the product is provided, but also the product content information, including the production history of the product, whether the product is genuine or not. In order to improve these two characteristics, manufacturers must obtain real-time information of the product itself. Therefore, the Internet of Things can be used to assist consumers, enterprises and partners through the combination of sensing components (eg RFID, electronic label) technology and cloud monitoring system. (Distributor), able to provide real-time information on the product at the first time.

By providing real-time information provided by the sensing component and the cloud monitoring system on the product, the customer's satisfaction with the integrity of the product can be improved. The integrity of a product is not only the integrity of the physical product, but also the provision of information about its product content. And for the product from the original material, the product manufacturing process to the product after the factory, until the customer's hand, in this In the process, the real-time information of the product can be controlled through the Internet of Things, and the product information of the product to be purchased by the consumer can be provided in real time, and the quality or authenticity of the product to be purchased can be further evaluated.

These applications can be formed because of the establishment of the Internet of Things (IOT) connection system. The Internet of Things connects all people and everything around them in a network through a highly integrated cloud network; for example: manufacturers, consumers, machines, production materials, product manufacturing processes, logistics management, product sales or It is the consumption habits, etc., all from product manufacturing to product sales, to big data based on the sales status of these products, inferring or estimating the consumer's consumption habits, etc., can be configured by sensing on the product. Components (eg RFID, electronic tag) and software programs are connected to the IoT platform. Similarly, the Internet of Things is the two most important conditions for efficiency and security. However, efficiency and security are two mutually contradictory indicators. Therefore, how to balance efficiency and safety is the key to the successful application of the logistics management system.

Summary of the invention

In order to practically apply the above requirements to enterprise operations, the main object of the present invention is to provide a system for establishing a product authenticity identification data module using the Internet of Things, comprising: a product, a product identifier configured on the product; a reading device, a device having a wireless communication function, and having a specific user identifier and coordinate positioning device for reading a product identifier of the product; the cloud device having a function of communicating with the reading device, confirming reading by a specific user identifier The device is a device in the Internet of Things; and a proxy server having a URL or a URI and a password, and capable of communicating with the reading device and the cloud device for using the identifier of the product read by the reading device, the reading time, and The reading position is directly transmitted to the cloud device; wherein, after confirming that the specific user identifier of the reading device is the reading device in the Internet of Things, the reading device reads the product identifier, reading time and reading position The message can only communicate with the proxy server via the URL or URI and password, and then the proxy server communicates with the cloud device and is in the cloud device. And establishing a product authenticity identification data module corresponding to the read position relationship corresponding to the reading time according to the product identifier.

The product authenticity identification data module established in the Internet of Things system of the present invention can provide the user with the authenticity of the product query; in addition, the object network system established by using the proxy server device according to the present invention can improve the authenticity identification of the product. Data module security; especially self-repair The intelligent judgment function can increase the stability and security of the system, especially when the system fails due to unknown reasons or when a hacker tampering, stealing or denying in the message transmission process, the security certification of the present invention can be used. Preventing password tampering or misappropriation can ensure the security of the IoT system and reduce the cost of system operation.

Another main object of the present invention is to provide a system for establishing a product authenticity identification data module using the Internet of Things, comprising: a product on which a product identifier is configured; and a cloud device, which is a device having wireless communication function and has been established and a production history data module for storing at least one product; the reading device is a device having a wireless communication function, having a specific user identifier and a coordinate positioning device for reading the product identifier of the product and communicating with the cloud device, and Obtaining a path of a product production history data module stored in the cloud device; and a proxy server having a URL or a URI and a password, and capable of communicating with the reading device and the cloud device for identifying the product read by the reading device The path of the symbol, the read time, the read position, and the product production history data module is directly transmitted to the cloud device; wherein, after confirming that the specific user identifier of the reading device is the reading device in the Internet of Things, the reading device will The read product identifier, read time, read position, and path information of the product production history data module. The proxy server can only communicate with the proxy server via the URL or URI and password, and the proxy server communicates with the cloud device, and in the cloud device, the read position corresponding to the read position and the product production history data are loaded according to the product identifier. The product authenticity identification data module.

The product authenticity identification data module established in the Internet of Things system according to the present invention can provide the user with the authenticity of the product, and can further connect with the production history data of the product to provide the production history data of the product; Inventing the Internet of Things system established by using the proxy servo device, in addition to improving the security of the product authenticity identification data module; especially the intelligent judgment function with self-repair can increase the stability and security of the system, especially when the system is unknown for unknown reasons. The failure or the hacker's tampering, misappropriation or denial in the message transmission process can prevent the password from being tampered with or stolen by the security authentication of the present invention, thereby ensuring the security of the Internet of Things system and also reducing The cost of system operation. At the same time, since the system of the Internet of Things can be in the process of querying the authenticity of the product, the cloud device can effectively know the location of the product being queried; therefore, when the product to be queried by the client identifies the product via the Internet of Things system After the evaluation of the fake product, the location of the fake product can be known by the Internet of Things system of the present invention, for example, it can be known The coordinates of the counterfeit, or knowing which areas of the fake appear most, so you can find out the location of selling fakes in real time, so as to stop the sale of fakes. Similarly, in addition to effectively copying fakes or fakes The probability of selling increases the profitability of brand manufacturers or original sales.

DRAWINGS

1A is a schematic diagram showing an Internet of Things connection system in accordance with the disclosed technology.

FIG. 1B is a schematic diagram showing an Internet of Things connection system according to the disclosed technology; FIG.

2 is a schematic diagram showing the establishment of a production history and product production history query system using an Internet of Things system in accordance with the disclosed technology.

3A is a schematic diagram showing the textual content of a product production history in accordance with the techniques disclosed herein.

FIG. 3B is a schematic diagram showing the text and pattern contents of the product production history according to the technology disclosed in the present invention. FIG.

3C is a schematic diagram of product warranty data content representing a product production history in accordance with the techniques disclosed herein.

4 is a flow chart showing the use of the Internet of Things to establish a production history and query production history in accordance with the disclosed technology.

FIG. 5 is a flow chart showing another embodiment of establishing a production history and querying a production history using the Internet of Things according to the technology disclosed in the present invention.

FIG. 6 is a schematic diagram of a system architecture for performing an anti-counterfeiting function of an Internet of Things system according to the disclosed technology.

FIG. 7 is a schematic diagram showing the authenticity identification process of the first product with real-time reply product anti-counterfeiting function according to the technology disclosed by the present invention.

FIG. 8 is a schematic diagram showing the process of authenticity identification of a second product having a real-time reply product anti-counterfeiting function according to the disclosed technology.

FIG. 9 is a schematic diagram showing the process of authenticity identification of a third product with real-time reply product anti-counterfeiting function according to the disclosed technology.

detailed description

The present invention will be understood by those skilled in the relevant art, and the present invention will be described in the following description. The invention is further illustrated by the following examples, but the following examples are not intended to limit the invention, and the following drawings are intended to be illustrative of the features of the invention. In addition, in the following description of the Internet of Things architecture of the present invention, when the client device performs different communication purposes, the client device may have different device names, for example, the client device may be a personal computer, a notebook computer, or a smart phone. , smart portable devices or smart reading devices.

First, please refer to FIG. 1A, which is a schematic diagram of the Internet of Things connection system of the present invention. As shown in FIG. 1A, the Internet of Things connection system is composed of a client device 100, a cloud device 500, and at least one broker device 700. The client device 100 is a client device 100. A device having a wireless or wired communication function and having a specific user identifier; the cloud device 500 having a function of communicating with the client 100, and confirming the client device 100 as one of the Internet of Things by the specific user identifier of the client 100 a client device 100; and a proxy server 700 having a Uniform Resource Location (hereinafter referred to as a URL or a web address) or a Universal Resource Identifier (hereinafter referred to as a URI) and a password, and capable of communicating with the cloud device 500; wherein the present invention In the networked connection system, the client device 100 may have different device names. For example, the client device 100 may be a personal computer, a notebook computer, a smart phone, a smart portable device, or an intelligent reading device.

In the Internet of Things connection system of the present invention, the client device 100 may be a floating IP address (Internet Protocol Address) that changes at any time, or may be a device for fixed IP wireless communication functions (for example, a personal computer or a notebook). a computer, a smart phone, a smart portable device, or a smart reading device, etc., and each client device 100 has a unique identifier (eg, a code set by the manufacturer at the factory; for example : Hardware data such as MAC Address) is used to generate a Universally Unique Identifier (uuid) of the client device 100 for verifying system health, identifying the identity of the client device 100, or preventing hacking. Further, in the Internet of Things connection system of the present invention, the cloud device 500 is a fixed domain name system (DNS), which has a server function and has a function with each client device 100. Wireless communication The function of the cloud device 500 is at least composed of a receiving/transmitting interface module, a data processing module and a memory module; therefore, the cloud device 500 has recorded all the uuids belonging to all clients in the Internet of Things of the present invention and has been stored. In the memory module 530, a database is formed. Furthermore, the proxy server 700 is a floating IP that can be changed at any time, and can be transmitted to the client by the cloud device after generating the URL or URI, the account number and the password, and the most important task is to confirm that it is for the Internet of Things. The encoded data string transmitted by the client device 100 must be transmitted by the IP address of the assigned proxy server 700, and after the proxy server 700 receives the encoded data string, it is directly transmitted to the cloud device 500; After receiving the data string transmitted by the client device, the proxy server 700 does not perform any processing, but directly transmits the received data string, so the processing time at the proxy server 700 is very short, about several To tens of milliseconds (ms). After the cloud device 500 receives the data string of the proxy server 700 and decodes it, the data string transmitted by the client device 100 is processed. Obviously, in the Internet of Things connection system of the present invention, in the process that the entire client device 100 transmits data to the cloud device 500, the cloud device 500 does not directly expose its own address, so the cloud device can be reduced. The probability of 500 being hacked can greatly improve the security of the Internet of Things.

In the preferred embodiment of the Internet of Things connection system of the present invention, the plurality of client devices 100 can be divided into a plurality of groups, each group corresponding to or paired with a proxy server 700, so that the present invention In the Internet of Things connection system, there may be multiple proxy server devices 700, as shown in FIG. 1B. When the cloud device 500 determines that one of the proxy server devices 700 has been hacked, the proxy server 700 can be selected to be shut down, or the URL or URI and password of a new proxy server 700 can be re-established. Invent the security of the Internet of Things. Further, in the embodiment of the present invention, the proxy server 700 selects a communication protocol using MQTT (Message Queuing Telemetry Transport) to perform data string transmission. Because MQTT is a protocol designed for the Internet of Things, especially the lightweight messaging protocol based on the publish/subscribe model, which was invented by Dr. Andy Stanford-Clark of IBM and Dr. Arlen Nipper of Arcom in 1999; A protocol designed with a large amount of computing power and communication between remote sensors and control devices operating in low bandwidth, unreliable networks. Therefore, MQTT has the advantages of small transmission data and light weight, which can have great advantages in bandwidth and speed; also because of the network it needs. The bandwidth is very low, so the hardware resources required are low, so the IoT system or various commercial operating systems using the IoT system (such as logistics management or production history of products) can be established. The efficiency of the query or the identification of the authenticity of the product, etc.) can also effectively reduce the cost of commercial operations.

Next, the process and method of actually completing the connection of the Internet of Things of the present invention will be described in detail.

Referring to FIG. 1A, first, the client device 100 logs in to the cloud device 500 (such as the communication direction indicated by S1 in FIG. 1A). For example, the client device 100 logs in to the cloud device 500 through https to start the Internet of Things. system. Then, when the cloud device 500 receives the request from the client device 100 (such as the communication direction indicated by S2 in FIG. 1A), the cloud device 500 first verifies whether the hardware uuid (such as MAC Address) used by the client device 100 has been Stored in the database of the cloud device 500; if it is confirmed that the hardware uuid (such as MAC Address) Address used by the client device 100 is already stored in the database of the cloud device 500, a client uuid is generated; then, the cloud The device 500 generates a pair of keys used by the exclusive client. In the preferred embodiment of the present invention, the key is an Asymmetric Key (RSM); thus, a pair of client_pub_keys can be generated. And client_pri_key; wherein the RSM asymmetric key has a long decoding time, so the security is high. In addition, in another preferred embodiment, the cloud device 500 can also selectively generate a symmetric key (client) key client_share_key specific to the client device 100. Therefore, in the preferred embodiment of the present invention, the RSM asymmetric key and the symmetric key can be selectively used together; since the symmetric key has a short decoding time and relatively low security, The client_share_key needs to be changed at any time to ensure security; for this reason, the cloud device 500 further generates/sets a change time (share_key_expiry date time), and improves the security by changing the share_key_expiry date time from time to time; After detecting that the client_share_key changed at any time has exceeded the time of the change of the share_key_expiry date time setting, the device 500 automatically generates a new client_share_key to ensure security. When the cloud device 500 confirms that the hardware uuid (such as MAC Addresses) data of a client device 100 is the same as that stored in the database, it is determined that the client device 100 is a client in the Internet of Things, and then the cloud device 500 will The generated uuid and key information is transmitted back to the client device. 100 (as indicated by the S3 communication direction in FIG. 1A), the messages transmitted back to the client device 100 include: client_uuid, sever_pub_key (this sever_pub_key is client_pub_key; since all client devices 100 use the same pub_key, so Also known as sever_pub_key) and client_pri_key.

In addition, if the cloud device 500 receives the request from the client device 100, and the cloud device 500 compares the hardware uuid (such as MAC Address) used by the client device 100 to the database of the cloud device 500, it is determined. If the hardware uuid (such as MAC Address) used by the client device 100 is not the client device 100 in the Internet of Things, the hardware uuid (such as MAC Address) message is stored in another database for subsequent comparison. In particular, the backhaul mechanism of the S3 communication direction is generally not erroneous, but there is still a mechanism for error; for example, if the server (Server) reflects the time too long and the connection fails, then It will be re-executed by the client device 100 again, but the cloud device 500 at this time determines that the hardware uuid (such as MAC Address) has been recorded in the database, and thus the hardware uuid (such as MAC Address) is still corresponding. The uuid is returned, at this time, a pair of keys generated by the cloud device 500 and transmitted back to the client device 100 are updated. Therefore, even if a fake device uses any method to spoof the hardware uuid (such as MAC Address) of the client device 100, the same key cannot be obtained. In other words, only a certain uuid can survive in the system.

Next, as shown in the communication direction indicated by S4 in FIG. 1A, when the client device 100 uses the encoded client_uuid (ie, client_uuid will be garbled according to sever_pub_key), the URL of the client_share_key, share_key_expiry date time, MQTT_Broker, or URI is obtained through https "request". And the MQTT_Broker account and password (username/password); and when the cloud device 500 receives the cryptographic code client_uuid, it will decode according to the sever_pri_key to confirm whether the client_uuid is correct; after the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes client_share_key, share_key_expiry date time, MQTT_Broker's URL or URI, and MQTT_Broker account and password, etc., with client_pub_key, and then transmits it back to client device 100 (as indicated by S5 in Figure 1A). In addition, the present invention can further encode the URL or URI, account number and password of another proxy server 700' and send it back to the client device 100 for storage; as a subsequent cloud device 500, the message is delivered to the client. The client device 100 can communicate and communicate with the client device 100 via the path of the proxy server 700'.

In addition, in a preferred embodiment of the present invention, the URL or URI, account number and password of the MQTT_Broker can be selected to be obtained twice; for example, the first time (the communication direction indicated by S4 in FIG. 1A), the client device 100, after the encoded client_uuid (that is, client_uuid will be garbled according to sever_pub_key), obtain the URL or URI of client_share_key, share_key_expiry date time and MQTT_Broker through https "requirement"; and when the cloud device 500 receives the client_uuid converted into garbled code, it will The sever_pri_key is decoded to confirm whether the client_uuid is correct. After the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the client_share_key, the share_key_expiry date time, and the URL or URI of the MQTT_Broker with the client_pub_key, and then transmits the result to the client device 100 (for example, The communication direction indicated by S5 in Fig. 1A). The second time (as indicated by the communication direction indicated by S6 in FIG. 1A), the client device 100 further obtains the MQTT_Broker account and password through the https "request" by using the encoded client_uuid (ie, client_uuid will be garbled according to sever_pub_key); After receiving the garbled client_uuid, the cloud device 500 decodes according to the sever_pri_key to confirm whether the client_uuid is correct. After the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the MQTT_Broker account and password with the client_pub_key and returns the code. To the client device 100 (the communication direction indicated by S7 in FIG. 1A). In particular, the first and second time to obtain the content, only the MQTT_Broker URL or URI, account number and password are required to be obtained twice, the other is not limited.

Obviously, in the process of identifying and confirming the client device 100 and the cloud device 500, the https used is a hybrid password security protocol, a secure communication protocol (Secure Sockets Layer (SSL), or a transport layer security protocol (Transport). Layer Security; TLS), which is a recognized security protocol itself, and the recognized credentials required by the cloud device 500, can be confirmed by the client device 100 by the digital signature of the authentication center to confirm whether the message is directly transmitted by the cloud device 500. Therefore, when a hacker tampering, misappropriating or denying the message transmission process, these security certificates can be used to prevent password tampering or misappropriation.

Next, the communication direction indicated by S8 in FIG. 1A, when the client device 100 is from the cloud device After obtaining the relevant data, the client device 100 will then connect with the proxy server 700; however, before proceeding with the proxy server 700, it must be confirmed that the received message must be complete. The complete message includes: 1. Sever_pub_key ; 2.Client_pri_key; 3.MQTT_Broker URL or URI; 4.MQTT_Broker username/password;5.client_Share_key;6.Share_key_expiry date time. After the client device 100 confirms receipt of the complete message, it uses the client_share_key to encode the client_uuid and the data content to be transmitted to the cloud by the client device 100, and then uploads it to the proxy server 700 (ie, MQTT Broker). ).

In a preferred embodiment of the present invention, the client device 100 further checks whether the aging of the Share_key_expiry date time has expired (eg, the expiration date is 2015/0501); if the aging of the Share_key_expiry date time has elapsed (eg : The result of the check date is 2015/0502), the client device 100 will re-encode the client_uuid (ie, client_uuid will be garbled according to sever_pub_key), and obtain a new share_key_expiry date time message through https; and when the cloud device 500 After receiving the hacked client_uuid, it will decode according to the sever_pri_key to confirm whether the client_uuid is correct. After the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the new share_key_expiry date time with the client_pub_key and sends it back to the client. Device 100. In addition, for increasing security, the time set by the share_key_expiry date time may be periodic or random, and may be determined by the cloud device 500.

After the client device 100 confirms that the complete message has been received, at this time, the client device 100 already knows the URL or URI of the MQTT_Broker of the proxy server 700 and the MQTT_Broker account and password, so the client device 100 can encode the client_uuid and The data string (for example, the production history of the product, etc.) is uploaded to the proxy server 700 (as indicated by S8 in FIG. 1A); then, the proxy server 700 receives the encoded client_uuid and data uploaded by the client device 100. After the string (for example, the production history of the product, etc.), the message uploaded by the client device 100 is directly transmitted (that is, without any processing) to the cloud device 500; obviously, the entire Internet of Things is at the client. The device 100 forwards its message to the cloud device 500, and the cloud device 500 It does not directly expose its own address, so it can reduce the probability of cloud device 500 failure or hacking. Since the proxy server 700 transmits the data uploaded by the client device 100 directly to the cloud device 500, since the time processed by the proxy server 700 is very short, the URL or URI of the MQTT_Broker and the MQTT_Broker account of the proxy server 700 can be reduced. The probability that the password is cracked can increase the security of the IoT communication process.

Next, as shown in the communication direction indicated by S9 in FIG. 1A, the cloud device 500 receives the data directly transmitted by the proxy server 700 (ie, the encoded client_uuid and the data string), and then uses the client_share_key for decoding (Decode). And will verify that the received client_uuid and data string (for example: product production history, etc.) are complete and correct; if correct, then store it in memory module 530, waiting for the user to receive the received data string (for example : Product production history, etc.) for specific applications; for example: establishing a production history database for at least one product; if the verification of the received client_uuid and the data string is incomplete or incorrect, then the recording is performed. It should be noted that the purpose of verifying an incorrect message is to prevent or reduce the chances of being successfully succeeded by the IoT system through artificial intelligence for deep learning or artificially added, modified or modified verification mechanisms. In this embodiment, the incorrect message includes, for example: (1) crawling the news by the web crawler to find the fake product of the current product; or (2) setting the same client_uuid at the beginning of the program. At the same time, it appears in two completely different places. At this time, the Internet of Things system will notify the company's inspectors or provide warnings, and the methods that the inspectors can make at least observe or ignore actions to achieve advance warning and prevention. The effect of the device; or (3) when the device 500 itself continues to be transmitted by the specific proxy server 700, for example, when the client_uuid message is unknown; when the incorrect message continues to occur, the proxy server 700 is determined. The cloud device 500 may choose to turn off the proxy server 700 (such as the communication direction indicated by S10 in FIG. 1A) if it is faulty or hacked.

In the embodiment of the present invention, the client_share_key encoding mode can be combined with a hash function to prevent tampering, wherein the hash function can select MD5, SHA-1, SHA-256, and the like. At the same time, client_share_key can also cooperate with different decoding methods, such as: block cipher, stream cipher, ECB mode or the aforementioned hybrid method, in addition to more effective to improve the cracking difficulty, without loss of decoding time.

Please refer to FIG. 1B, which is a schematic diagram of another embodiment of the Internet of Things connection system of the present invention. As shown in FIG. 1B, the Internet of Things connection system is composed of a plurality of client devices 100, a cloud device 500 and at least one proxy device 700; wherein each client device 100 has a wireless communication function and has a specific The device of the user identifier; the cloud device 500 has a function of communicating with each client device 100, and confirms that the client device 100 is in the Internet of Things by a specific user identifier unique to each client device 100. One of the client devices 100; the proxy server 700 has its URL or URI and password, and can communicate with the cloud device 500. Since the embodiment of FIG. 1B is the same as the embodiment of FIG. 1A in the basically connected system, the only difference between the two is that the cloud device 500 provides the URL or URI, account number and password of each proxy server 700. After the client devices 100 in at least one Internet of Things are paired, the paired client devices 100 can only communicate with the paired proxy server 700, and then the proxy server 700 communicates with the cloud device 500 to The data string on each client device 100 is transmitted to the cloud device 500. Therefore, the process of actually completing the connection of the Internet of Things in FIG. 1B is briefly described as follows.

Referring to FIG. 1B, first, each client device 100 logs in to the cloud device 500 via https. Then, after the cloud device 500 receives the request of each client device 100, the cloud device 500 first verifies whether the hardware uuid (such as MAC Address) used by each client device 100 has been stored in the database of the cloud device 500. If it is confirmed that the hardware uuid (such as MAC Address) used by each client device 100 has been stored in the database of the cloud device 500, each client's respective dialect code (client uuid) is generated; then, the cloud The device 500 generates a pair of keys used by the exclusive client according to each client device 100. After the cloud device 500 determines that each client device 100 is a client in the Internet of Things, the cloud device 500 will generate each of the generated devices. The information such as uuid and key is transmitted back to each of the corresponding client devices 100, and the messages transmitted back to each client device 100 include: client_uuid, sever_pub_key, and client_pri_key.

Then, each client device 100 can obtain the client_share_key, share_key_expiry date time, MQTT_Broker URL or URI, and MQTT_Broker account and password (username/password) through the https "request" of the encoded client_uuid; and when the cloud device 500 receives After turning into garbled client_uuid, it will be based on the respective sever_pri_key Decoding to confirm whether each client_uuid received is correct; after the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the client_share_key, the share_key_expiry date time, the URL or URI of the MQTT_Broker, and the MQTT_Broker account and password with the client_pub_key. Transfer to the client device 100. For example: return the URL or URI, account number and password of the proxy device (Broker-1) to Client-1 to Client-5; return the URL or URI, account number and password of the proxy device (Broker-2) to the client- 6~Client-15; return the URL or URI, account number and password of the proxy device (Broker-3) to Client-16~Client-50; obviously, the Internet of Things has 50 separate client devices 100 The pairing is performed by the three proxy server devices 700 to communicate with the cloud device 500. Then, after each client device 100 obtains relevant data through the cloud device 500, the client device 100 will then connect with the paired proxy server 700 obtained by the client device 100; meanwhile, when each client device 100 confirms its The message received by the cloud device 500 already includes: 1.Sever_pub_key; 2.Client_pri_key; 3.MQTT_Broker URL or URI; 4.MQTT_Broker username/password; 5.Client_Share_key; 6.Share_key_expiry date time, will use client_share_key The client_uuid and the data content to be transmitted to the cloud by the client device 100 are encoded and then uploaded to the proxy server 700 (ie, the MQTT Broker).

Because, when each client device 100 confirms that the complete message has been received, at this time, the client device 100 already knows the URL or URI of the MQTT_Broker and the MQTT_Broker account and password of the proxy server 700 it is paired with, so the client The device 100 may upload the encoded client_uuid and the message string (for example, the production history of the product, etc.) to the paired proxy server 700; then, each proxy server 700 receives the encoded client_uuid uploaded by the paired client device 100 and After the message string (for example, the production history of the product, etc.), the message uploaded by the client device 100 is directly transmitted (that is, without any processing) to the cloud device 500; obviously, the entire Internet of Things is in the client. When the end device 100 passes the message to the cloud device 500, the cloud device 500 does not directly expose its own address, so the probability that the cloud device 500 is damaged or hacked can be reduced. Since each proxy server 700 transmits the data uploaded by the client device 100 directly to the cloud device 500, since the time processed by the proxy server 700 is very short, the URL or URI of the MQTT_Broker of the proxy server 700 can be reduced. The probability of the MQTT_Broker account and password being cracked can increase the security of the IoT communication process. Then, after receiving the data directly transmitted by each proxy server 700 (ie, the encoded client_uuid and the data string), the cloud device 500 then decodes each client_share_key and verifies the received client_uuid and Whether the data string (for example, the production history of the product, etc.) is complete and correct; if it is correct, it is stored in the memory module 530, waiting for the user to perform the specific application of the received data string; for example, establishing at least one product The production history database; if the received client_uuid and the data string are incomplete or incorrect, the recording is performed; in this embodiment, the generation of the incorrect message may include: the frequency of each client publishing information has a certain regularity. If the information published by the client is abnormal or excessive frequency is generated, it is regarded as an incorrect message; or the proxy server 700 itself publishes the information without the MQTT method, and attempts to connect to the cloud device 500, etc.; When the message continues to appear, it is judged that the proxy server 700 may be damaged or hacked; then the cloud device 5 00 can optionally turn off this proxy server 700.

In summary, the main technical means of the Internet of Things connection system of the present invention is that after the cloud device 500 confirms that each client device 100 is a user of the Internet of Things, the cloud device 500 will use the URL or URI of the MQTT_Broker of the proxy server 700. The MQTT_Broker account number and password are transmitted back to each client device 100. Thereafter, each client device 100 is connected to the proxy server 700 according to the received URL or URI of the MQTT_Broker, the MQTT_Broker account and the password, and each client is connected. The data string to be transmitted by the end device 100 (for example, the production history of the product, etc.) is encoded and uploaded together to the proxy server 700; then, the proxy server 700 does not transmit the data string to the client device 100 (for example, production of the product) In the case where the processing is performed, the data string transmitted from the client device 100 is directly transmitted to the cloud device 500 for decoding and processing. It is obvious that the Internet of Things connection system of the present invention is connected in two stages, and after the identification of the client device 100 is completed in the first stage, the client device 100 can only interact with the proxy server 700 in the second phase. Connection; since the first phase is completed before the client device 100 performs the connection, when the client device 100 officially transmits the data string, it can only connect and communicate with the proxy server 700; therefore, the cloud device 500 It will not directly expose its own address, so it can reduce the probability of cloud device 500 failure or being hacked, which can effectively improve the Internet of Things. Connect the security of the system. Obviously, the IoT connection system of the present invention also has the self-checking intelligent judgment function, thereby increasing system stability and security; for example, especially when the system fails due to a nameless or when a hacker is in the message When the transfer process is falsified, stolen or denied, the security authentication of the present invention can be used to prevent the password from being tampered with or stolen; thus, the security of the Internet of Things system can be ensured.

Next, the implementation of the product production history and product production history query system using the Internet of Things system of the present invention will be further described.

Please refer to FIG. 2 , which is a schematic diagram of an embodiment of establishing a production history and product production history query system using the Internet of Things system according to the present invention. As shown in FIG. 2, the client device 100 can be a manufacturer-side reading device, which can take the entire production and delivery process of the product from the manufacturing step to the delivery to the store, and use the time axis as the production history of the product. After the item is recorded, after the confirmation of S1-S7 in FIG. 1A or FIG. 1B is completed (ie, it has been confirmed that each of the client devices 100 is one of the client devices 100 in the Internet of Things, and each of the client devices 100 has already After obtaining the URL or URI and password of the proxy server 700 to be connected, the client device 100 can encode the content data of the production process and then transmit the content data to the proxy server 700, and the proxy server 700 receives the messages. The proxy server 700 directly transmits the data string transmitted by the client device 100 to the cloud device 500 for decoding and processing without processing the data string (for example, the production history of the product) transmitted by the client device 100. In order to establish a production history database in the memory module 530 of the cloud device 500, the production history database can record each product from A manufacturing process continues until the entire production process of the delivery to the store; since the client device 100 transmits the data of the production history to the cloud device 500, it can only connect and communicate with the paired proxy server 700; therefore, the entire production history During the process of establishing the database, the cloud device 500 does not directly expose its own address, so the probability of the cloud device 500 being faulty or being hacked can be reduced, and the security of the production history database can be effectively improved. Also. The reading device of the present invention may communicate with the cloud device 500 in the form of a gateway, and the communication mode is connected to the cloud device 500 by a dynamic communication mode of the http hybrid proxy server (MQTT); Reduce the chances of the cloud device 500 failing or being successfully attacked by a hacker, thus ensuring communication security, stability, privacy, and speed.

Next, an embodiment of an inquiry system for the production history of the Internet of Things product disclosed in the present invention will be described. Referring to FIG. 2, after the Internet of Things has established the product production history database in the memory module 530 of the cloud device 500, the cloud device 500 can be based on the user's request (the user has confirmed that the user is logged in, for example: Smart phone), the production history of the product to be queried, the type of production history data (ie, select text, picture, voice or video) or warranty data, through the communication direction indicated by S11, by another agent servo The device 700' is delivered to the user's communication device 100 for display. Since the cloud device 500 has transmitted the URL or URI, account number and password of the proxy server 700' to the user's communication device 100, when the cloud device 500 wants to transmit the production history or warranty data of the product to the user, the same Each of them can only connect and communicate with the proxy server 700' via the URL or URI, account number and password of the proxy server 700'; therefore, the cloud device 500 will record the production history or warranty data of the product to be queried by the user. During the whole process of transmitting the message to the user's smart phone, the cloud device 500 does not directly expose its own address, so the probability of the cloud device 500 being faulty or being hacked can be reduced, and the Internet of Things production history database can be effectively improved. Security.

Obviously, after the specific user identifier confirms that the client device 100 is one of the client devices 100 in the Internet of Things, the client device 100 will only query the product data to be queried only after the specific user identifier confirms that the client device 100 is one of the client devices 100 in the Internet of Things. The proxy server 700 can communicate with the proxy server 700' via the URL or URI and password of the proxy server 700, and the proxy server 700 directly communicates with the cloud device 500 to view the product data and products to be queried by the client device 100 in the cloud device 500. After the production history database is compared, the cloud device 500 and the message in the product production history database can communicate with the proxy server 700' via the URL or URI and password of the other proxy server 700' so that the proxy server 700 can be used. 'Transfer the message in the product production history database to the client device 100.

In a preferred embodiment of the present invention, a detailed content type record may be further established in the key record of the product history content as the product time, and the detailed content type may be used in FIG. 3A. The displayed text, or the text and picture as shown in FIG. 3B, or voice or video, is built in the production history database of the cloud device 500. In addition, a database formed by product warranty data may be created, wherein the product warranty data includes at least the product number of the product, The product's shelf date, product release date, origin, product manufacturer and manufacturer address, and product material are shown in Figure 3C.

Next, the connection method and process of establishing and querying the production history of the Internet of Things connection system of the present invention will be described in detail. Through the connection method and process of the Internet of Things connection system, the innovation of using the proxy servo device 700 of the present invention can be more clearly understood. point.

Please refer to FIG. 4 , which is a flowchart of a method for establishing a product production history and a product production history query method using the Internet of Things disclosed in the present invention. As shown in FIG. 4, the method for inspecting the production history of the product using the Internet of Things and the product production history query method includes:

Step 1: The client device 100 logs in to the cloud device 500. For example, the client device 100 logs in to the cloud device 500 through https to start the Internet of Things system.

Step 2: After the cloud device 500 receives the request from the client device 100, the cloud device 500 first verifies whether the hardware uuid (such as MAC Address) used by the client device 100 has been stored in the database of the cloud device 500.

Step 3: When the cloud device 500 confirms that the hardware uuid (such as MAC Address) used by the client device 100 is already stored in the database of the cloud device 500, it is determined that the data of the client device 100 is correct, which is the client device in the Internet of Things. 100, the cloud device 500 generates a client uuid, a key used by a pair of exclusive clients. In this embodiment, the key is a highly secure RSM asymmetric key (Asymmetric Key); therefore, a pair of client_pub_key and client_pri_key can be generated; and the generated uuid and key are returned. The client device 100, the message of the backhaul client device 100 includes: client_uuid, sever_pub_key (this sever_pub_key is client_pub_key. In addition, if the cloud device 500 receives the request from the client device 100, the cloud device 500 compares the client. When the hardware uuid (such as MAC Address) used by the end device 100 is not in the database of the cloud device 500, and determining that the hardware uuid (such as MAC Address) used by the client device 100 is not the client device 100 in the Internet of Things, This hardware uuid (such as MAC Address) message is stored in another database for subsequent comparison.

Step 4: The client device 100 determines whether the information such as the uuid and the key generated by the cloud device 500 has been correctly received; when the client device 100 confirms that the uuid and the key have been correctly received. After that, the client device 100 will request the client_share_key, the URL or URI of the MQTT_Broker of the proxy server 700, and the MQTT_Broker account and password (username) to the cloud device 500 through the https with the encoded client_uuid (ie, the client_uuid will be garbled according to the sever_pub_key). /password).

Step 5: When the cloud device 500 receives the garbled client_uuid, it will decode according to the sever_pri_key to confirm whether the client_uuid is correct. After the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 will client_share_key and the proxy server 700. The URL or URI of the MQTT_Broker and the MQTT_Broker account and password are encoded in the client_pub_key and transmitted back to the client device 100.

Step 6: After the client device 100 obtains relevant data from the cloud device 500, the client device 100 will use the client_pri_key to decode and confirm that the received message must be complete. The complete message includes: 1.Sever_pub_key; .Client_pri_key; 3.MQTT_Broker's URL or URI; 4.MQTT_Broker username/password;5.client_Share_key. When the client device 100 confirms receipt of the complete message, it will connect with the proxy server 700; if the client device 100 determines that the received message is incomplete, it will return to step 4 to re-request to the cloud device. 500 requests the client_share_key, the URL or URI of the MQTT_Broker of the proxy server 700, and the MQTT_Broker account and password (username/password).

Step 7: The client device 100 connects to the proxy server 700 using the URL or URI of the MQTT_Broker and the MQTT_Broker account and password. Meanwhile, the client_share_key is also used to transmit the client_uuid and the data content of the client device 100 to the cloud device 500 (for example: product The production history and the like are encoded and then uploaded to the proxy server 700.

Step 8: After receiving the encoded client_uuid and the message string (for example, the production history of the product, etc.) uploaded by the client device 100, the proxy server 700 immediately sends the message uploaded by the client device 100 directly (that is, does not Do any processing) to the cloud device 500.

Step 9: After receiving the data directly transmitted by the proxy server 700, the cloud device 500 decodes the client_share_key and verifies that the received client_uuid and the data string (for example, the production history of the product, etc.) are complete. correct.

Step 10: When the cloud device 500 determines that the received client_uuid and the data string are complete and correct, the decoded client data string (for example, the production history of the product, etc.) is stored in the memory module 530, waiting for the user to The received data string is used for a specific application, for example, the establishment of a production history database of the product is completed in the cloud device 500; if the received client_uuid and the data string are incomplete or incorrect, the recording is performed; In the embodiment, the incorrect message includes: (1) if the client_uuid corresponding to a certain website is incorrect, there may be a theft problem; (2) if a client_uuid has a data corresponding to the location (Geo Location), Verify by verifying the reasonableness of the GeoLocation (whether a client_uuid is in Asia, the next minute is in North America); when an incorrect message persists, it is determined that the proxy server 700 may be malfunctioning or being hacked. The cloud device 500 can choose to turn off the proxy server 700.

Obviously, in the connection method of the entire Internet of Things system, from step 1 to step 6, the connection is completed with the cloud device 500 before each client device 100 leaves the factory, that is, after each client device 100 is shipped from the factory, The complete message has been obtained from the cloud device 500: 1.Sever_pub_key; 2.Client_pri_key; 3.MQTT_Broker URL or URI; 4.MQTT_Broker username/password; 5.client_Share_key. After the Internet of Things system is started, the data string to be transmitted by each client device 100 to the cloud device 500 is transmitted to the proxy server 700 according to the URL or URI of the MQTT_Broker, and the client device 100 is directly used by the proxy server 700. The data string is transmitted to the cloud device 500. Therefore, during the message transfer process between step 7 and step 10 (that is, during the establishment of the product production history database), the cloud device 500 does not directly expose its own address, so that the cloud device 500 can be reduced or hacked. The chance. Since the proxy server 700 transmits the data uploaded by the client device 100 directly to the cloud device 500, the URL or URI of the MQTT_Broker of the proxy server 700 and the probability that the MQTT_Broker account and password are cracked can be reduced, and the Internet of Things communication can be further increased. Process security.

Then, when a consumer uses a smart phone to see a product on the network and wants to purchase the product, the consumer can view it by the product number (item number) or QR Code indicated on the network. The production history or warranty data of this product is described below.

First, the consumer can first establish a program for the identity recognition of the smart phone used by the user and the Internet of Things of the present invention; for example, downloading the APP software of the Internet of Things of the present invention, and letting the consumption through the process of steps 1 to 6 of FIG. 4 The smart phone used by the user has completed the identity recognition process in the Internet of Things of the present invention, that is, the hardware uuid (such as MAC Address) of the consumer using the smart phone has been stored in the database of the cloud device 500; then, when the consumer You can use the smart phone you are using, the product number (item number) or QR Code you want to query, and the data history of the product's production history or warranty data, which will be viewed through step 7, according to MQTT_Broker The URL or URI is transmitted to the proxy server 700, and then, via the step 8, the proxy server 700 directly transmits the data string that the consumer wants to query to the cloud device 500. Then, via the step 9, the cloud device 500 determines that the received client_uuid and the data string are complete and correct, and then, according to the decoded consumer data string, the comparison to the product production history database is performed in step 11. Whether the product number (item number) or QR Code has been established; if the product number (item number) or QR Code that the consumer wants to inquire is compared, the cloud device 500 further checks the production of the product that the consumer wants to query. Whether the profile of the resume or warranty data exists; if there is a production history or a warranty data type that matches the product that the consumer wants to query, since the consumer (ie, the client device 100) has stored the smart phone, The URL or URI, account number and password code required for the proxy server 700' to connect, the cloud device 500 will be connected to the proxy server 700' via step 12, and the production history of the product to be queried by the consumer or The type of the warranty data is transmitted to the proxy server 700', and the proxy servo 700' directly directs the production history of the product or the warranty data. Teleportation to the consumer smart phone, so that consumers can see the product you want to buy or warranty history through the display data on a smart phone.

Since the cloud device 500 can set the URL or URI, account number and password of the proxy server 700', when the cloud device 500 wants to transmit the production history or warranty data of the product to the user (ie, step 12), the same is true. All of them can only connect and communicate with the proxy server 700' through the URL or URI, account number and password of the proxy server 700'; therefore, the cloud device 500 transmits the production history or warranty data of the product to be queried by the user. In the whole process of the user's smart phone, the cloud device 500 does not directly expose its own address, so the probability of the cloud device 500 being faulty or being hacked can be reduced, and the cloud device 500 and the Internet of Things can be effectively improved. The security of the production history database. Obviously, the IoT connection system of the present invention also has a self-checking intelligent judgment function to increase system stability and security; for example, especially when the system fails due to unknown reasons or when a hacker is in the message transmission process When tampering, misappropriation or denial is performed, the security authentication of the present invention can be used to prevent password tampering or misappropriation; thus, the security of the Internet of Things system can be ensured.

Next, please refer to FIG. 5 , which is a flowchart of another embodiment of the present invention for establishing a product production history and a product production history query method using the Internet of Things. As shown in FIG. 5, the method for establishing a product production history and product production history query using the Internet of Things of the present invention includes:

Step 3: When the cloud device 500 confirms that the hardware uuid (such as MAC Address) used by the client device 100 is already stored in the database of the cloud device 500, it is determined that the data of the client device 100 is correct, which is the client device in the Internet of Things. 100, the cloud device 500 generates a client uuid, a key used by a pair of exclusive clients. In this embodiment, the key is a highly secure RSM asymmetric key (Asymmetric Key); therefore, a pair of client_pub_key and client_pri_key can be generated; and the generated uuid and key are returned. The client device 100, the messages of the backhaul client device 100 include: client_uuid, sever_pub_key (this sever_pub_key is client_pub_key). In addition, when the cloud device 500 receives the request from the client device 100, the cloud device 500 compares the hardware uuid (such as MAC Address) used by the client device 100 to the database of the cloud device 500, and determines this. If the hardware uuid (such as MAC Address) used by the client device 100 is not the client device 100 in the Internet of Things, the hardware uuid (such as MAC Address) message is stored in another database for subsequent comparison.

Step 4: The client device 100 determines whether the uuid and the key generated by the cloud device 500 are correctly received; when the client device 100 confirms that the uuid and the key have been correctly received. After that, the client device 100 will request the client_share_key, share_key_expiry date time, the URL or URI of the MQTT_Broker of the proxy server 700, and the MQTT_Broker account to the cloud device 500 through the https with the encoded client_uuid (ie, the client_uuid will be garbled according to the sever_pub_key). And password (username/password).

In the preferred embodiment of the present invention, the key is an Asymmetric Key; therefore, a pair of client_pub_key and client_pri_key can be generated; wherein the RSM asymmetric key has a long decoding time, so High security. In addition, in another preferred embodiment, the cloud device 500 can also selectively generate a symmetric key (client) key client_share_key specific to the client device 100. Therefore, in the preferred embodiment of the present invention, the RSM asymmetric key and the symmetric key can be selectively used together; since the symmetric key has a short decoding time and relatively low security, Client_share_key needs to be changed at any time to ensure security. For this reason, the cloud device 500 further generates a share_key_expiry date time that changes at any time, and improves the security by changing the client_share_key from time to time; therefore, when the cloud device 500 detects that it changes at any time. After the client_share_key has exceeded the set change time, a new client_share_key is automatically generated to ensure security.

Step 5: After receiving the garbled client_uuid, the cloud device 500 decodes according to the sever_pri_key to confirm whether the client_uuid is correct. After the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 will client_share_key, share_key_expiry date time, and proxy. The URL or URI of the MQTT_Broker of the server 700 and the MQTT_Broker account and password are encoded in the client_pub_key and transmitted back to the client device 100.

Step 6: After the client device 100 obtains relevant data from the cloud device 500, the client device 100 will use the client_pri_key to decode and confirm that the received message must be complete. The complete message includes: 1.Sever_pub_key; .Client_pri_key;3.MQTT_Broker's URL or URI; 4.MQTT_Broker username/password;5.client_Share_key;6.share_key_expiry date time. When the client device 100 confirms receipt of the complete message, it will connect with the proxy server 700; if the client device 100 determines the received message If the information is incomplete, it will return to step 4 and request the acquisition to the cloud device 500 again.

Step 8: The client device 100 checks whether the aging of the Share_key_expiry date time has expired; if the check result has not expired, the encoded client_uuid and the data string (for example, the production history of the product, etc.) are uploaded to the proxy server 700. If the check result is an expired state, it will return to step 4 and request to request the cloud device 500 to obtain a new Share_key_expiry date time. For example, when the expiration date is 2015/0501; if the check result has expired by Share_key_expiry date time (for example, the result of the check date is 2015/0502), the client device 100 will re-encode the client_uuid (ie The client_uuid will be garbled according to the sever_pub_key. The new share_key_expiry date time is obtained through the https request. When the cloud device 500 receives the garbled client_uuid, it will decode according to the sever_pri_key to confirm whether the client_uuid is correct. After confirming that client_uuid is correct, the cloud device 500 encodes the new share_key_expiry date time with the client_pub_key and transmits it back to the client device 100. In addition, for increasing security, the time set by the share_key_expiry date time may be periodic or random, and may be determined by the cloud device 500.

Step 9: After receiving the encoded client_uuid and the message string (for example, the production history of the product, etc.) uploaded by the client device 100, the proxy server 700 immediately sends the message uploaded by the client device 100 directly (that is, does not Do any processing) to the cloud device 500.

Step 10: After receiving the data directly transmitted by the proxy server 700, the cloud device 500 decodes the client_share_key and verifies that the received client_uuid and the data string (for example, the production history of the product, etc.) are complete. correct.

Step 11: When the cloud device 500 determines that the received client_uuid and the data string (for example, the production history of the product, etc.) are complete and correct, the decoded client data string is stored in the memory module 530, waiting for the user to The received data string (for example, the production history of the product, etc.) is specified If the client_uuid and the data string are incomplete or incorrect, the error is recorded. There is a problem of misappropriation (2) If a client_uuid cooperates to upload the data of its location (Geo Location), it can be verified by verifying the reasonableness of GeoLocation (whether a client_uuid is in Asia, the next minute is in North America) . When the incorrect message continues to occur, it is determined that the proxy server 700 may be malfunctioning or hacked; then the cloud device 500 may choose to turn off the proxy server 700.

Obviously, in the connection method of the entire Internet of Things system, from step 1 to step 6, the connection is completed with the cloud device 500 before each client device 100 leaves the factory, that is, after each client device 100 is shipped from the factory, The complete message has been obtained from the cloud device 500 including: 1.Sever_pub_key; 2.Client_pri_key; 3.MQTT_Broker URL or URI; 4.MQTT_Broker username/password; 5.client_Share_key; 6.share_key_expiry date time. After the Internet of Things system is started, the data string to be transmitted by each client device 100 to the cloud device 500 is transmitted to the proxy server 700 according to the URL or URI of the MQTT_Broker, and the client device 100 is directly used by the proxy server 700. The data string is transmitted to the cloud device 500. Therefore, the cloud device 500 does not directly expose its own address during the message transmission process from step 7 to step 10, so that the probability of the cloud device 500 being faulty or being hacked can be reduced. Since the proxy server 700 transmits the data uploaded by the client device 100 directly to the cloud device 500, the URL or URI of the MQTT_Broker of the proxy server 700 and the probability that the MQTT_Broker account and password are cracked can be reduced, and the Internet of Things communication can be further increased. Process security. According to the above, it is obvious that the Internet of Things connection system of the present invention also has a self-checking intelligent judgment function to increase system stability and security; for example, especially when the system fails due to unknown reasons or when a hacker is in the message When the transfer process is falsified, stolen or denied, the security authentication of the present invention can be used to prevent the password from being tampered with or stolen; thus, the security of the Internet of Things system can be ensured.

Next, in the step 4 of FIG. 5, the process of obtaining the URL or URI, MQTT_Broker account, and MQTT_Broker password of the MQTT_Broker of the proxy server 700 from the client device 100 to the cloud device 500 may be performed in two steps; For example: the first time is the client installation Set 100 to encode the client_uuid (that is, client_uuid will be garbled according to sever_pub_key). Obtain the URL or URI of client_share_key and MQTT_Broker through https. When the cloud device 500 receives the client_uuid that is garbled, it will decode according to sever_pri_key. To confirm that the client_uuid is correct; after the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the URL or URI of the client_share_key and the MQTT_Broker with the client_pub_key and transmits it back to the client device 100; the second time is that the client device 100 The encoded client_uuid (that is, client_uuid will be garbled according to sever_pub_key), obtain the MQTT_Broker account and password through https request; and when the cloud device 500 receives the hacked client_uuid, it will decode according to sever_pri_key to confirm whether client_uuid is Correctly; after the cloud device 500 confirms that the client_uuid is correct, the cloud device 500 encodes the MQTT_Broker account and password and the like with the client_pub_key and transmits the result back to the client device 100. In particular, the first and second time to obtain the content, only the MQTT_Broker URL or URI, account number and password are required to be obtained twice, the other is not limited.

Then, when multiple consumers use their smart phones to see a certain product on the network and want to buy the product, the consumer can use the product number (item number) or QR Code indicated on the network. Wait, check the production history or warranty data of this product. The query process is as follows.

First of all, each consumer can first establish the program of the smart phone used by the user and the Internet of Things of the present invention to complete the identity recognition; for example, each consumer has downloaded the APP software of the invention of the invention, via FIG. 4 The process of steps 1 to 6 allows each consumer to use the smart phone to complete the identity recognition process in the Internet of Things of the present invention, that is, the hardware uuid (such as MAC) of each consumer using the smart phone. Addresses are already stored in the database of the cloud device 500; then, when each consumer uses the smart phone they use, the product number (item number) or QR Code that they want to query, and to view this The production history of the product or the data string of the warranty data will be transmitted to the proxy server 700 according to the URL or URI of the MQTT_Broker matched by each consumer via steps 7 to 8, and then, by step 9, the proxy servo The device 700 directly transmits the data string that the consumer wants to query to the cloud device 500. Then, via step 10, cloud loading When it is determined that the received client_uuid and the data string are complete and correct, the product number to be queried is compared to the product production history database according to the decoded data string of each consumer via step 12. ) or whether the QR Code has been established; if the product number (item number) or QR Code that each consumer wants to query is compared, the cloud device 500 further checks the production history of the product that the consumer wants to query or Whether the type of the warranty data exists; if there is a production history or a warranty data type conforming to the product that the consumer wants to inquire, since the consumer (ie, the client device 100) has stored the agent in the smart phone The URL or URI, account number and password code required for the connection of the server 700' are connected, so the cloud device 500 is connected to the proxy server 700' via step 13 and the production history of the product to be queried by each consumer or The type of warranty data is transferred to another proxy server 700', and the proxy servo 700' directly directs the production history or warranty data of the product. The type is transmitted to each consumer's smart phone, so that each consumer can see the product production history or warranty data of the product to be purchased through the display on the smart phone. It will be apparent that the cloud device 500 can also communicate with a plurality of proxy servers 700', and each proxy server 700' can form a pair with a plurality of consumers.

Since the cloud device 500 can set the URL or URI, account number and password of the proxy server 700', when the cloud device 500 wants to transmit the production history or warranty data of the product to the user, the same can only be done through the proxy. The URL or URI, account number and password of the server device 700' are connected and communicated with the proxy server 700'; therefore, the cloud device 500 transmits a message such as a production history or warranty data of the product to be queried by the user to the user's smart phone. In the whole process, the cloud device 500 does not directly expose its own address, so the probability of the cloud device 500 being faulty or being hacked can be reduced, and the security of the cloud device 500 and the Internet of Things production history database can be effectively improved. According to the above, it is obvious that the Internet of Things connection system of the present invention also has a self-checking intelligent judgment function to increase system stability and security; for example, especially when the system fails due to unknown reasons or when there is a hacker When the message transmission process is falsified, stolen or denied, the security authentication of the present invention can be used to prevent password tampering or misappropriation; thus, the security of the Internet of Things system can be ensured.

Next, please refer to FIG. 6 , which is a schematic diagram of a system architecture of the anti-counterfeiting function of the Internet of Things system of the present invention. As shown in FIG. 6, when the Internet of Things system of the present invention performs the function of product anti-counterfeiting, There is a need for at least one product 10 and an electronic tag (Tag) 12 disposed on each product and representing a unique identifier (Uniformally Unique Identifier; abbreviated as uuid), and a reading device 100 and a cloud device 500 The electronic label 12 of the uuid disposed on each product 10 may be Bar Code, QR Code, RFID (Radio Frequency Identification), NFC (Near Field Communications), BLE (Bluetooth Low Energy), iBeacon, ZigBee or Zwave or a chip that simply records this uuid, the present invention does not limit other forms of uuid. The purpose of configuring uuid for each product 10 is to ensure that the uuid of a product 10 and the electronic volume label 12 is an absolute one-to-one correspondence for data tracking, recording, and analysis of the product 10 status.

In addition, when the Internet of Things system of the present invention is in the embodiment of performing the product anti-counterfeiting function, the client is one or more reading devices 100 disposed on the sales base, and the user must have direct or indirect wireless communication or The function of network communication, therefore, has the ability to communicate or connect with the cloud device 500 through wireless communication or network; for example, the reading device 100 of the present invention is itself configured with a wireless module (eg, WiFi) or a wired network module. For example, the system can be connected or communicated with the cloud device 500 by means of communication such as 3G/4G/5G. Meanwhile, the reading device 100 also has a wireless/wired system capable of bridging the cloud device 500 such as BLE, ZigBee or Zwave.

In addition, the reading device 100 disposed at the sales site itself must have the sensing and recording capability of time and position (including latitude/longitude); for example, a positioning device (Global Positioning System, GPS) is disposed on the reading device 100; After the reading device 100 disposed at the sales location reads the uuid on the product 10, the reading device 100 transmits the information such as the time at which the product 10 is read and the latitude and longitude of the location thereof to the cloud device 500. The cloud device 500 records the uuid of each product 10 and the time and location of reading the one product 10 into a record, and then stores it in the memory module of the cloud device 500 to establish a product authenticity identification database. It will be apparent that a communicable system must be established between the product 10 and the reading device 100; for example, the following table:

产品product	读取装置Reading device
Bar codeBar code	Bar code readerBar code reader
QR codeQR code	QR code readerQR code reader

RFIDRFID	RFID readerRFID reader
NFCNFC	NFC readerNFC reader
ZigbeeZigbee	Zigbee ReceiverZigbee Receiver
ZwaveZwave	Zwave ReceiverZwave Receiver
BLEBLE	BLE ReceiverBLE Receiver
iBeaconiBeacon	iBeacon ReceiveriBeacon Receiver

Furthermore, in the reading apparatus 100 of the present invention disposed in the sales base, it is also necessary to have a function of calculation and storage. For example, in one embodiment of the present invention, the processor (CPU) may be configured in the reading apparatus 100. Or a memory module or the like; enabling the reading device 100 to have a function of performing an editing annotation; for example, in the memory of the reading device 100, the product 10 previously stored in the memory 530 of the cloud device 500 by the manufacturer has been obtained. The path of the production history database is generated. Therefore, when the reading device 100 disposed at the sales site reads the uuid of the product 10, the time and location of the reading device 100 and the content of the production process of the editing annotation are read. The package is collected to form a complete product 10 production content, the complete product 10 production content can be in the cloud device 500 and the product authenticity identification data module is established; wherein the process of establishing the production history data module is already in the foregoing FIG. The details of the embodiments are not described herein.

In particular, the reading device 100 of the present invention reads the uuid time of the product 10, and after the wireless communication method is transmitted to the cloud device 500 and is stored in the memory module 530, the time message is set to be unchangeable. .

The process of establishing the product authenticity identification data module during the operation of the above-mentioned product 10 and the reading device 100 disposed at the sales base is as follows.

1. One RFID is configured on each product 10;

2. The reading device 100 disposed at the sales site has acquired the path of the production history database of the product 10 stored in advance in the memory 530 of the cloud device 500 by the manufacturer;

3. The RFID on the product 10 is sensed by a reading device 100 disposed at the point of sale, which is an electromagnetic wave emitted by the reading device 100 to activate the RFID such that the RFID on the product 10 transmits its own uuid to the reading device 100. ;

4. When the reading device 100 configured at the sales site receives the uuid on the product 10, it will read Taking information such as the time read by the device 100 itself and its location is encapsulated and stored in the memory module;

5. The processor of the reading device 100 disposed at the sales site aggregates the information of the path and time of the production history database acquired in advance and the location thereof into an unencoded complete product production content;

6. The processor configured in the reading device 100 of the sales base encodes the complete product production content, and then completes the encoded complete with a pre-acquired proxy server (MQTT) URL or URI, account number and password. The product production content is transferred to the cloud device 500 via a proxy server (MQTT);

7. Establishing a product authenticity identification database in the memory module of the cloud device 500; wherein the production history data in the product authenticity identification database content may be selected from the following items, including text, graphic files or video files, The content is shown in Figures 3A-3C.

It should be noted that, in the above process, the reading device 100 disposed at the sales base communicates with the cloud device 500 as a gateway, and the communication method is dynamic communication of the http hybrid agent servo device 700 (MQTT). The mode cloud device 500 is connected; in this way, the opportunity for the system to be disabled due to the failure of the cloud device 500 or the success of the hacker attack is reduced, thereby ensuring communication security, stability, privacy, and speed.

Next, the cloud device 500 of the present invention can be divided into a plurality of functional platform systems, which can parallelly process user data input and confirmation of the Internet of Things system, product history record and query, and product anti-counterfeiting processing and product warehousing, sales, and parity data. Processing and so on.

In the first embodiment of the cloud device 500 of the present invention, the cloud device 500 has established uuid of all clients in the memory module 530, and receives the client at the processor (for example, wireless communication through the App program on the mobile phone) When the web server is requested and confirmed as a client in the Internet of Things, the cloud device 500 provides the URL or URI of the proxy server 700, the account number and the password to at least one client device in the Internet of Things, and forms a pair. Each client device can only communicate with the paired proxy server 700, and then the proxy server 700 communicates with the cloud device 500 to transmit the request message on each client device (at least including identity identification, product authenticity). Identification, product production history inquiry, product location inquiry or product sales status inquiry, etc.) to the cloud device.

In the second embodiment of the cloud device 500 of the present invention, the cloud device 500 confirms the requesting client (for example, a reading device 100 configured at a product manufacturing factory uploads by the app through wireless communication or web through the network) After being the client in the Internet of Things, since the reading device 100 itself has the sensing and recording capability of time and location (including latitude and longitude), when the reading device 100 reads the uuid of the product, it will read The time and location of the reading device 100 are combined with the content of the production history path of the editing annotation to form a complete product production content, and the complete product production content can be used as a subsequent production history or comparison and verification. The data of the product production program is then encoded, and then sent to the proxy server 700 (MQTT), and then directly transferred to the cloud device 500 by the proxy server 700 (MQTT). When the cloud device 500 is received from the proxy server 700 (MQTT), the product production content to be received is decoded, and then stored in the memory module 530 of the cloud device 500.

In the third embodiment of the cloud device 500 of the present invention, similarly, after the cloud device 500 confirms that the requesting client (for example, uploading by the app through wireless communication or web through the network) is the client in the Internet of Things The processor and the memory module 530 establish various data modules in the cloud device 500 for the entire data information of various products from manufacturing, shipping, warehousing, sales and inventory to serve as a basis for big data analysis, so that the cloud Device 500 can provide data for decision maker decisions. The establishment of various data modules in the cloud device 500 includes at least: a production history data module, a product authenticity identification data module, a sales and parity data module, and a user evaluation data module.

According to the foregoing, when the processor on the reading device 100 of the present invention aggregates the pre-acquired product production history path and the reading time and the location thereof into a complete product production content, the message is sent via the proxy servo. The device 700 (MQTT) is transmitted to the cloud device 500, and a time series-based product authenticity identification data module is established in the cloud device 500; the content in the product authenticity identification data module includes the time when the product is delivered to the store. And location and production history data of these products. After that, when the cloud device 500 requests the authenticity identification of a product by the client (for example, the client uses the app on the mobile phone used by the client to upload the uuid of the product to the cloud device via the proxy server device. The cloud device 500 will make an evaluation of the authenticity of the product according to the time and location information transmitted by the client and the timing and location established in the product authenticity identification data module, via another proxy server 700' (MQTT) ) to the customer The evaluation result of the authenticity of the product is displayed at the end; in addition, the cloud device 500 also establishes the new time and location in the product authenticity identification data module, and the information is not allowed to be modified.

Next, please refer to FIG. 7 , which is a first authenticity identification process of the product with real-time reply product anti-counterfeiting function. As shown in FIG. 7, according to the above, the first authenticity identification process of the product with the real-time reply product anti-counterfeiting function of the present invention is as follows:

1. The intelligent handheld device 100 of the client (in the process of performing the anti-counterfeiting function, the client is an intelligent handheld device as an example), after obtaining the uuid of the product 10, the encoded query packet is sent to the cloud device 500. (This packet includes: the uuid of the product 10, the time the query was issued, and the location where the query was issued, etc.); of course, the packets required by these queries are transmitted to the cloud device 500 via the proxy server 700 (MQTT).

2. After the cloud device 500 receives the encoded query packet and decodes it, the cloud device 500 compares whether the uuid of the product 10 to be queried has been established in the product authenticity identification data module.

3. When it is confirmed that the uuid of the product 10 to be queried is not established in the product authenticity identification data module, the cloud device 500 determines that the product 10 is a fake product and gives a judgment score of a fake product, for example: 90 points; It is transmitted to the client by another proxy server 700' (MQTT) and displays the evaluation result of the authenticity of the product after decoding. It should be noted that the reason for not giving 100 points may be due to the poor quality of the reciprocating or communication transmission process.

4. When it is confirmed that the uuid of the product 10 to be queried has been established in the product authenticity identification data module, the processor of the cloud device 500 compares the location (ie, the current location) of the time required to check the authenticity of the product; the cloud device The 500 processor will have a reasonable relationship between the current position of the product 10 and the product location already established in the product identification data module (eg air transport at 550 km / h, ground transport at 100 km / h, sea transport at 60) Km/h). For example, when the location information corresponding to the time when the uuid of a product 10 is queried is the same as the position of the product established in the product authenticity identification data module or within a certain reasonable error range (for example, 100 to 500 meters) (The rationality is provided by the cloud system.) The processor of the cloud device 500 determines that the product is genuine and gives a judgment score of a genuine product, for example: 80 points; after that, by another proxy server 700' (MQTT) The smart handheld device 100 is transmitted to the client and displays the evaluation result of the authenticity of the product after decoding. Or

5. When querying the current location information of the uuid of the product 10 and establishing the authenticity identification data module of the product If the product location in the product is out of the error range, the processor of the cloud device 500 further determines whether there is a reasonable relationship between the time difference and the distance difference between the two; for example, when querying the current location information of the product uuid and establishing the product When the position of the product in the pseudo identification data module exceeds the error range by more than 1 km (this rationality is provided by the cloud system), the processor of the cloud device 500 determines that the product 10 is a fake and gives a judgment score of a fake product. For example: 70 points; after that, the other agent servo device 700' (MQTT) transmits to the smart handheld device 100 of the client and displays the evaluation result of the authenticity of the product after decoding.

6. In a preferred embodiment, when the processor of the cloud device 500 determines that the position of the product 10 exceeds the error range by more than 1 km (the actual distance is provided by the system according to the real situation), the cloud device 500 may be selected to query the product 10 Whether a record of the movement has occurred; if the movement record has occurred, indicating that the storage position of the product 10 has been replaced, when the product 10 is re-stocked, a time series, that is, a position record, is generated again; then the processor of the cloud device 500 There is a reasonable relationship between the current position of the product 10 and the position of the product 10 re-established in the product identification data module. For example, when the current location of the uuid product of the query product 10 is the same as the position re-established in the product authenticity identification data module or within an error range (for example, 100 to 500 meters), the processing of the cloud device 500 is performed. The device will judge that the product 10 is genuine and give a judgment score of a genuine product, for example: 80 points. If the location of the uuid product of the query product 10 and the location re-established in the product authenticity identification data module are outside the error range (for example, more than 1 km), the processor of the cloud device 500 determines that the product is Counterfeit and give a judgment score for a fake, for example: 70 points. Thereafter, the authentication result of the authenticity of the product is transmitted to the smart handheld device 100 of the client by another proxy server 700' (MQTT) for decoding and display.

Next, please refer to FIG. 8 , which is a second authenticity identification process of a product with real-time reply product anti-counterfeiting function according to the present invention. As shown in Fig. 8, the difference between the authenticity identification process and the first product is to further determine whether other time series records have been established in the time series of the product authenticity identification data module, so as to be more accurate. The authenticity of the product 10, the authenticity identification process is as follows:

1. After the smart handheld device 100 of the client obtains the uuid of the product 10, the encoded query packet is sent to the cloud device 500 (this packet includes: the uuid of the product 10, the time when the query is issued, and the location where the query is issued, etc. Requirements; of course, the packets requested by these queries are through proxy servos. The device 700 (MQTT) is transmitted to the cloud device 500.

3. When it is confirmed that the uuid of the product 10 to be queried is not established in the product authenticity identification data module, the cloud device 500 determines that the product 10 is a fake product and gives a judgment score of a fake product, for example: 90 points; The smart handheld device 100 is transmitted to the client by another proxy server 700' (MQTT) and displays the evaluation result of the authenticity of the product after decoding.

4. When it is confirmed that the uuid of the product 10 to be queried has been established in the product authenticity identification data module, then first query the time sequence of the product authenticity identification data module to determine whether other time series records have been established; When there is no other time series record, the processor of the cloud device 500 compares the location (ie, the current location) of the time required to query the authenticity of the product with the product location that has been established in the product identification data module. Is there a reasonable relationship? For example, when the current location information of the uuid of the query product 10 is the same as the product location established in the product authenticity identification data module or within an error range (for example, 100 to 500 meters), the processor of the cloud device 500 It will judge that the product 10 is genuine and give a judgment score of a genuine product, for example: 80 points. When the current location information of the uuid of the query product 10 and the product location established in the product authenticity identification data module exceed the error range by more than 1 km, the processor of the cloud device 500 determines that the product 10 is a fake and gives a The judgment score of the fake product, for example: 70 points. Thereafter, the evaluation result of the authenticity of the product is transmitted to the smart handheld device 100 of the client by another proxy server 700' (MQTT) for decoding and display.

5. If there are other time series records in the time series (for example, there are already other users requesting the authenticity of the product, since the time series can not be modified once recorded, it can be used as long as the user has queried, The time series of the product 10 must be recorded.) The processor of the cloud device 500 compares the current location with the location of the product that has been established in the product identification data module. When the processor of the cloud device 500 does not have a reasonable relationship between the current location and the product location that has been established in the product authenticity identification data module, for example, when querying the current location information of the uuid of the product 10 and establishing the authenticity of the product When the location of the other product in the identification data module exceeds the error range by more than 1 km, the processor of the cloud device 500 determines that the product 10 is a fake and gives a judgment score of a fake, for example: 80 points; this means that the same Product 10 appears in different locations on different time series, so the probability of counterfeiting is higher. After that, by another agent The service device 700' (MQTT) transmits the evaluation result of the authenticity of the product to the smart handheld device 100 of the client for decoding and display.

6. If the processor of the cloud device 500 has a reasonable relationship between the current location and the location of the product already established in the product authenticity identification data module. When the current location information of the uuid of the query product 10 is the same as the other product location established in the product authenticity identification data module or within a certain reasonable error range (reasonable or not by the system according to the product type, historical displacement mode, the location of the plant The condition and the like are calculated, and when the distance is the main factor related to determining the authenticity of the product, for example, 100 to 500 meters, the processor of the cloud device 500 queries the modules that have been established in the product authenticity identification data module. The authenticity evaluation record of the product location is used to make the authenticity judgment of the product, for example, when the authenticity evaluation records that the product 10 is genuine, the judgment score of a genuine product is given; and when the authenticity evaluation records the product 10 as a pseudo At the time of the product, a judgment score of a fake is given. Thereafter, the authentication result of the authenticity of the product 10 is transmitted to the smart handheld device 100 of the client for decoding and display by another proxy server 700' (MQTT).

7. In a preferred embodiment, as shown in FIG. 9, when the processor of the cloud device 500 determines that the product location exceeds the error range by more than 1 km, the cloud device 500 may be selected to query whether the product 10 has moved. Recording; if a mobile recording has occurred, indicating that the storage location of the product 10 has been replaced, when the product 10 is re-stocked, a time series, that is, a position record, is generated again; then the processor of the cloud device 500 re-aligns the product. 10 Is there a reasonable relationship between the current position and the product location re-established in the product identification data module? For example, when the product 10 of the uuid of the query product 10 is located at the same position as the re-establishment in the product authenticity identification data module or within a certain reasonable error range (reasonable or not by the system depending on the product type, historical displacement mode, or It is calculated by factors such as the location of the factory, and when the distance is the main factor for judging the authenticity of the product, for example, 100 to 500 meters, the processor of the cloud device 500 determines that the product 10 is genuine and gives a The judgment score of the authenticity, for example: 80 points. If the location of the uuid product of the query product 10 and the location re-established in the product authenticity identification data module have exceeded the error range (for example, more than 1 km), the processor of the cloud device 500 determines the product 10 It is a fake and gives a judgment score of a fake, for example: 70 points.

According to the above description, the identification process of the anti-counterfeiting function of the real-time reply product of the present invention has been According to the electronic tag (Tag) 12 message of the product 10 transmitted by the client 100, the score of the authenticity of the product can be replied in real time; wherein the higher the score, the credibility of the judgment of the authenticity of the product by the Internet of Things system of the present invention. The higher the degree is; for example, when it is confirmed that the uuid of the product 10 to be queried is not established in the product authenticity identification data module, the uuid representing the product 10 does not exist at all, and the cloud device 500 determines that the product 10 must be a fake ( The judgment score of the fake product: 90 points), but the reason for not giving 100% is that it may be caused by factors such as poor signal transmission or decoding error during the message transmission; if the user has doubts about the judgment result received If the query result of the uuid of the same product 10 is still not established in the product authenticity identification data module, the processor of the cloud device 500 will further confirm that the product 10 is Counterfeit, and re-submit a judgment score of a fake, for example: 95 points. If it is confirmed that the uuid of the product 10 to be queried is already established in the product authenticity identification data module, but in the time series of the electronic tag (Tag) message transmitted by the client, the current location and product of the client are located. When the location in the authenticity identification data module is different, since the product can only exist in one place, the processor of the cloud device 500 further confirms that the product 10 is a fake and gives a judgment score of the fake product, for example, :80 points. Other different judgment principles and judgment scores may be changed according to the designer of the Internet of Things system. The present invention does not limit the level of judgment scores, and the purpose is to respond to the client's query in real time and immediately give a judgment result as a client. Whether to buy 10 references.

Then, if the seller of the product is willing to use the electronic tag (Tag) with higher reliability or security level as the uuid of the product 10, of course, the IoT system can give extra points or electronic tags that recognize different security levels. The result of the judgment of the subtraction; for example, when the Internet of Things system recognizes that the electronic tag of the product is RFID or NFC, the judgment result obtained according to the foregoing embodiment is added 5 points; for example: when the Internet of Things When the system recognizes that the electronic tag of the product is Bar Code or QR Code, the judgment result obtained according to the foregoing embodiment is reduced by 5 points; the above is only the embodiment of the present invention, and for other different electronic The number of points added or subtracted by the tag is not limited.

Then, after confirming that the Internet of Things system recognizes that the product 10 is a genuine product, the client can further query the product production history that is desired to be purchased, that is, request the query again, for example, a product that requires further inquiry of the authenticity of the product. Production process (ie production history); this process is also The request is sent by the smart device 100 of the client, and the request is transmitted to the cloud device 500 via the proxy server 700 (MQTT). The cloud device 500 encodes the product production history stored in the production history data module and transmits the code through another The proxy server 700' (MQTT) is transmitted back to the client, and after being decoded by the client, the user can see the production history data of the genuine product to be purchased through the display on the smart device 100, and the content includes at least the figure. 3A - Fig. 3C; in addition, for example, knowing the country or region of manufacture of the genuine product, the materials used, etc. through the production history data; if the authentic product is a high-priced product, the designer of the product can also be known through the production history data. Or design company, etc.; these messages can be shared by the client and the sales side through the IoT system, in addition to effectively combating the chances of copying or counterfeiting, increasing the brand or original sales. Profit.

Since the Internet of Things system of the present invention can be in the process of querying the authenticity of the product, the cloud device 500 can effectively know the location of the queried product 10; therefore, when the product 10 to be queried by the client passes through the Internet of Things system After identifying that the product 10 is a fake product, the location of the fake product can be known by the Internet of Things system of the present invention, for example, the coordinates of the fake product can be known, or the area in which the fake product appears is the most. Therefore, it is possible to find out the location of selling counterfeit goods in real time, so as to stop the sale of counterfeit goods. Similarly, in addition to effectively attacking the probability of counterfeit goods or counterfeit goods, the profit of brand manufacturers or original manufacturers can be increased.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. The above description should be understood and implemented by those skilled in the relevant art, so that the other embodiments are not disclosed. Equivalent changes or modifications made under the spirit shall be included in the scope of the patent application.

Claims

An Internet of Things system with a product authenticity identification data module, characterized in that:

a product on which a product identifier is configured;

a reading device, which is a device having a wireless communication function, and having a specific user identifier and coordinate positioning device for reading a product identifier of the product;

a cloud device having a function of communicating with the reading device, wherein the reading device is confirmed to be a device in the Internet of Things by the specific user identifier;

a proxy server having a URL or a URI and a password, and capable of communicating with the reading device and the cloud device for using the identifier, reading time, and reading of the product read by the reading device The location is directly transmitted to the cloud device;

After the confirmation that the specific user identifier of the reading device is the reading device in the Internet of Things, the reading device reads the product identifier, the reading time, and The read location message can only communicate with the proxy server via the URL or URI and the password, and then the proxy server communicates with the cloud device, and in the cloud device, according to the location The product identifier establishes a product authenticity identification data module in which the read time corresponds to the read position relationship.
The Internet of Things system according to claim 1, wherein the identifier of the product is selected from the group consisting of: Bar Code, QR Code, RFID (Radio Frequency Identification), and NFC (Near Field Communications). BLE (Bluetooth Low Energy), iBeacon, ZigBee, Zwave, and a chip that simply records this uuid.
The Internet of Things system according to claim 1, wherein said proxy server transmits data for a MQTT (Message Queuing Telemetry Transport) communication standard.
The Internet of Things system of claim 1 wherein the coordinate positioning device is a GPS.
The Internet of Things system according to claim 1, wherein said reading device is disposed at a sales base.
An Internet of Things system with a product authenticity identification data module, characterized in that:

a product on which a product identifier is configured;

Cloud device, which is a device with wireless communication function and has established and stored the production of the product Resume data module;

a reading device, which is a device having a wireless communication function, having a specific user identifier and a coordinate positioning device for reading a product identifier of the product and communicating with the cloud device, and having acquired the storage in the cloud The path of the product production history data module in the device;

a proxy server having a URL or a URI and a password, and capable of communicating with the reading device and the cloud device for reading the product identifier, reading time, and reading position read by the reading device And the path of the product production history data module is directly transmitted to the cloud device;

After the confirmation that the specific user identifier of the read device is the reading device in the Internet of Things, the reading device reads the product identifier, the reading time, and the The path information of the read location and the product production history data module can only communicate with the proxy server via the URL or URI and the password, and then the proxy server communicates with the cloud device. And in the cloud device, a product authenticity identification data module corresponding to the read position and the product production history data relationship is established according to the product identifier.
The Internet of Things system according to claim 6, wherein the identifier of the product is selected from the group consisting of: Bar Code, QR Code, RFID (Radio Frequency Identification), and NFC (Near Field Communications). BLE (Bluetooth Low Energy), iBeacon, ZigBee, Zwave, and a chip that simply records this uuid.
The Internet of Things system according to claim 6, wherein said proxy server transmits data in accordance with a MQTT (Message Queuing Telemetry Transport) communication standard.
The Internet of Things system of claim 6 wherein said coordinate positioning device is a GPS.
The Internet of Things system according to claim 6, wherein said reading means is disposed at a sales base.