Off-line verifiable secure two-dimensional code structure verification method and device

Abstract

Embodiments of the present invention provide a verification construction method and device capable of offline verification of a safety information tag, comprising: input information to be encoded and type information, perform a digital signature operation and an encryption operation on input information according to an information release type to construct combined information, and encode according to an information tag encoding rule to generate an offline-verifiable safety information tag; input safety information tag information and identify the combined information and type information comprised therein, analyze and decrypt the combined information according to information tag type information to obtain independent sub-information, and verify digital certificate validity information, a digital signature of the input information and valid time limit of the input information; if the verification succeeds, the safety information tag is correct in offline verification, the encoding information source of the safety information tag is credible, otherwise the information release source thereof is incredible. The safety information tag of the present invention is tamper-resistant, unforgeable and undeniable, can release public or private information, and can verify information integrity of the information tag and whether the source thereof is real or not offline without network connection.

Description

technical field [0001] The invention relates to the fields of information technology and security verification, in particular to a method and device for offline verification of a secure two-dimensional code structure verification. Background technique [0002] A two-dimensional code is a specific geometric figure that uses several symbols corresponding to the binary system to distribute on a two-dimensional plane according to certain rules to record data information. Two-dimensional codes use graphic symbols to represent textual and numerical information. Various code systems have been developed in terms of symbolic representation technology, such as QR Code, Data Matrix, Maxi Code, PDF417 and so on. Two-dimensional codes are identified by image input equipment or photoelectric scanning equipment, which can deal with common problems such as symbol size and ratio changes, graphic rotation, and partial defacement, and realize automatic identification of encoded information. It...

AI Technical Summary

Problems solved by technology

QR codes are coded in clear codes. Although they have information error-tolerant redundancy checks, the information is easy to be modified and forged, and it is difficult to verify the source of the release.

The current verification methods include two types: one is to use an application system similar to the scan code guard, scan and identify the QR code information, connect to the dedicated server of the application system through the network, and retrieve the QR code URL information and the database records in the server Comparison: If a matching record can be retrieved in the system database, it can be given whether the source of the QR code is safe according to the attributes of the record; if there is no matching record, the security cannot be judged

The other is to encrypt the two-dimensional code information, connect to a dedicated server through the network, read the authentication information, and compare it with the encrypted information in the two-dimensional code for verification; this type of application is a closed system, and the encrypted password The key information is stored in a dedicated server, and the QR code information can only be input and decrypted by the internal dedicated system, and cannot be read and verified by the public users themselves.

[0004] The existing two-dimensional code security verification method has the following main problems: it needs to be verified through a network connection server, and it cannot be verified in an environment where there is no network connection or inconvenient network connection; the verification method based on URL search and comparison can only verify the Scan the verified QR code information, the newly generated QR code information needs to be added to the database before it can be verified

[0005] In order to solve the existing two-dimensional code security verification problem, the present invention proposes a secure two-dimensional code structure verification method and device that can be verified offline, which can verify the release source of the two-dimensional code offline without network connection, and can be applied safely and securely QR code information

Images