Anti-counterfeiting traceability method and system based on NFC and national secret signing algorithm

Abstract

The application discloses an anti-fake traceability method based on NFC and a national secret signing and encrypting algorithm, which allocates an NFC label (with a unique SN code) and a unique commodity code Gid for a commodity in a commodity packaging stage, and uses national secret algorithms SM2 and SM4 as underlying algorithms of a signing and encrypting scheme; the signing and encrypting scheme is used to simultaneously realize digital signature of the SN code of the NFC label and encryption of the commodity code Gid, so that a signing and encrypting D is obtained, a'signature first and then encryption' function is replaced, the confidentiality and unforgeability of information are ensured, and only low calculation and communication costs are consumed; NFC technology is used as a carrier of information transmission and a tool of traceability, the signing and encrypting D is stored in the NFC label, and information of each node is also stored in the NFC label; after receiving the commodity, a consumer can read the label through a mobile device with NFC function to realize traceability and anti-fake inspection.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to an anti-counterfeiting and traceability method and system based on NFC and national cryptographic signature algorithms. Background Technology

[0002] Near Field Communication (NFC) is a short-range radio communication technology that evolved from contactless Radio Frequency Identification (RFID) technology by combining it with interconnection technology. This technology transmits data via radio waves. Two NFC-enabled devices do not need to be connected by cables or other physical wires; they can transmit internal data and exchange services simply by touching each other. Moreover, the devices can communicate with each other without using the Internet, eliminating potential sources of interference.

[0003] NFC technology possesses key anti-counterfeiting characteristics: each NFC anti-counterfeiting tag has a unique serial number (SN) stored in memory during the manufacturing process, making it impossible to modify or counterfeit. As an extension of RFID technology, NFC offers advantages such as large capacity, low cost, and high security. Compared to QR codes, QR codes offer less robust anti-counterfeiting performance and are easily damaged, but they are low-cost and easy to operate, primarily used in low-end consumer scenarios. NFC, combining the advantages of both QR codes and RFID, can be applied to high-end consumer scenarios and is poised to become the mainstay of the future anti-counterfeiting market.

[0004] Domestic cryptographic algorithms (referred to as national cryptographic algorithms) refer to domestically developed commercial cryptographic algorithms recognized by the State Cryptography Administration. Currently, the domestic and international cybersecurity situation is severe, and cryptographic algorithms, as the "lifeline" of cybersecurity, are fundamental to safeguarding my country's strategic resources and security. Relevant national agencies, considering national security and long-term strategic considerations, have proposed promoting the application and implementation of national cryptographic algorithms, reducing excessive reliance on foreign technologies and products, and strengthening my country's cybersecurity environment. Currently, national cryptographic algorithms are comparable to international algorithms in terms of security performance and practicality.

[0005] Encryption algorithms ensure the confidentiality of information, while digital signatures guarantee its non-repudiation. To achieve both confidentiality and non-repudiation simultaneously, it is common practice to first digitally sign the message and then encrypt the signed information—a process known as "sign first, then encrypt." The signature-encryption scheme achieves all the functions of digital signing and encryption in a logically sound step, but its computational load and cost are far lower than those required by the "sign first, then encrypt" method. Summary of the Invention

[0006] Objective of the Invention: The first objective of this invention is to provide an anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithms, thereby improving the anti-counterfeiting verification capabilities of goods and solving the problem of anti-counterfeiting and traceability. Based on this method, the second objective of this invention is to provide an anti-counterfeiting and traceability system based on NFC and national cryptographic signature algorithms, realizing anti-counterfeiting and traceability of goods.

[0007] Technical solution: A method for anti-counterfeiting and traceability based on NFC and national cryptographic signature algorithms, comprising the following processes:

[0008] (1) The server assigns an NFC tag with a unique SN code and a unique product code Gid to each product and stores them in the database;

[0009] (2) Using the national cryptographic algorithms SM2 and SM4 as the underlying algorithms for signature traceability, a key is negotiated using a key negotiation algorithm without sharing any secrets to obtain a key as the symmetric key for the SM4 encryption algorithm. Then, while using signature, the digital signature of the SN code of the NFC tag and the encryption of the product code Gid are realized to obtain signature D.

[0010] (3) NFC is used as the carrier for information transmission and the traceability tool. The signature D is stored in the NFC tag, and the update information of each node is also stored in the NFC tag.

[0011] (4) After receiving the goods, consumers can read the tag through a mobile device with NFC function to view the product information and process information. The back-end server decrypts the signature to verify the authenticity of the product. If the product code Gid matches the product code stored in the database, the product is genuine; otherwise, the product is fake.

[0012] Furthermore, the database storing NFC tags and product codes (Gid) also includes a count of the number of times a product has been inspected.

[0013] The initial value of the product inspection count is set to 0. When the product signature verification is successful, the inspection count is incremented by 1.

[0014] Furthermore, the key negotiation process in step (2) is as follows:

[0015] (2-1-1) The NFC tag and server are initialized, including setting the base point G(x). g ,y g and elliptic curve E;

[0016] (2-1-2) The NFC tag generates a random number t, calculates the exchange key T = t·G, and sends the exchange key T to the server.

[0017] (2-1-3) The server generates a random number s, calculates the exchange key S = s·G, and sends the exchange key S to the NFC tag.

[0018] (2-1-4) The server receives the exchange key T and calculates the negotiation key SK = s·T = s·t·G;

[0019] (2-1-5) The NFC tag receives the exchange key S and calculates the negotiation key SK = t·S = t·s·G.

[0020] Furthermore, step (2) involves digitally signing the unique SN code of the NFC tag and encrypting the unique product code Gid based on the national cryptographic signing algorithm to obtain the signature D. The steps are as follows:

[0021] (2-2-1) Initialize the base point G(x) g ,y g ), elliptic curve E, where a, b are the parameters of the elliptic curve equation E, H 256 ENTLA is a cryptographic hash function, and ENTLA is the product identifier ID. A The 2 bytes to be converted, ID A For user ID data, SM2 uses the default parameter value;

[0022] (2-2-2) Product code Gid, public / private key pair is (P A ,d A ), where (x A ,y A ) is P A The coordinates of P A =[d A ]·G;

[0023] (2-2-3) Calculate the hash value Z A =H 256 (ENTLA||ID A ||a||b||x g ||y g ||x A ||y A );

[0024] (2-2-4) Calculate M′=Z A ||M, where M is the SN code of the NFC tag;

[0025] (2-2-5) Calculate e = H v (M′), and convert the data type of e to an integer;

[0026] (2-2-6) n is the order of G. Generate a random number k in the range [1, n-1], calculate (x1, y1) = [k]·G, and convert the data type of x1 to an integer.

[0027] (2-2-7) Calculate r = (e + x1) mod n;

[0028] (2-2-8) Calculate s=(1+d A ) -1 ·(kr·d A ) mod n, and convert the data types of r and s to strings, and calculate the resulting signature;

[0029] (2-2-9) Encrypt the product code Gid using the negotiated key SK, m′=E(m), where m is the product code Gid;

[0030] (2-2-10) Generate signature D = (m′, (r, s)).

[0031] Furthermore, step (3) includes storing the signature D = (m′, (r, s)) in the NFC tag, and the update information of each node is also stored in the NFC tag. The tag content includes:

[0032] SN: The unique identifier of an NFC tag, written during the tag manufacturing process and cannot be modified;

[0033] D = (m′, (r, s)): Signature, where m′ is the ciphertext obtained by encrypting the commodity code using the national cryptographic algorithm SM4, and (r, s) is the signature of the SN code using the national cryptographic algorithm SM2;

[0034] Information: Basic product information, including brand, manufacturer, production date, and shelf life;

[0035] Sale1: The seller updates the product's inbound time, location, and responsible person's code;

[0036] Sale2: The seller updates the product's sale time, location, and responsible person code;

[0037] Trans: The carrier updates the start time, location, and responsible person code of the goods.

[0038] In step (4), after receiving the goods, the consumer uses an NFC-enabled mobile device to read the tag and view the product information and process information. The backend server decrypts the tag to verify the authenticity of the goods, and the calculation and processing include:

[0039] (41)Judgment If the requirements are not met, the signature verification will fail.

[0040] (42) Calculate M′=Z A ||M, where M is the SN code of the NFC tag;

[0041] (43) Calculate e = Hv(M′) and convert the data type of e to an integer;

[0042] (44) Convert r and s data types to integers, calculate t = (r + s) mod n, and if t = 0, the verification fails;

[0043] (45) Calculate the elliptic curve point (x1, y1) = [s]·G + [t]·P A ;

[0044] (46) Calculate R = (e + x1) mod n;

[0045] (47) Determine whether R and r are equal. If R ≠ r, the verification fails. If R = r, then accept message m′.

[0046] (48) Decrypt the ciphertext m′ using the negotiated key SK. If the decrypted information If the product code Gid matches the product code stored in the database, the product is verified as genuine; otherwise, the product is fake. If the product is genuine, the product verification count stored in the database is incremented by 1.

[0047] By implementing the above methods, an anti-counterfeiting and traceability system based on NFC and national cryptographic signature algorithms can be constructed. The system includes a manufacturer module, a retailer module, a transporter module, a consumer module, and a database module.

[0048] The manufacturer module is used to assign NFC tags and unique product codes (Gid) to products, and upload the tag's SN code and product code (Gid) to the database; it is used to perform a signature operation on the product's SN code and product code (Gid), store the operation result in the NFC tag, and upload the SM2 algorithm public key and the negotiated SM4 algorithm symmetric key to the database; it is used to affix the NFC tag containing the product's basic information (Info) and the signature to the product's outer packaging, and transmit this information to the seller module.

[0049] The seller module is used to update the product's inbound time, location, and responsible person code information, including updating the product's outbound time, location, and responsible person code after a consumer purchases the product.

[0050] The transporter module is used to update the transport time, routes, and responsible person codes of goods after they are sold.

[0051] The consumer module is used by consumers to view the basic information and traceability information of the goods by reading the NFC tag after receiving the goods, and to verify the authenticity of the goods by decrypting the tag.

[0052] The database is connected to the manufacturer module, retailer module, transporter module, and consumer module for data storage.

[0053] Beneficial Effects: Compared with existing technologies, this invention's NFC combines the advantages of QR codes and RFID anti-counterfeiting technologies. It is low-cost, fast, durable, and does not require specialized verification equipment, allowing consumers to complete product traceability and verification themselves. The signature-based encryption scheme, based on national cryptographic algorithms, simultaneously implements SM2 digital signatures and SM4 encryption functions. The computational load and cost are far lower than those required for "signing first and then encrypting," resulting in high efficiency. By combining the signature-based encryption scheme with NFC technology, the unique SN code of the NFC tag is digitally signed, and the unique product code Gid is encrypted to obtain the signature D. Only after both the NFC tag's SN code and the product code Gid are successfully verified can the authenticity of the product be guaranteed. Since both the NFC tag's SN code and the product code Gid are unique, counterfeiting is difficult and costly. Attached Figure Description

[0054] Figure 1 This is a schematic diagram illustrating the steps of the anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm described in this invention.

[0055] Figure 2 This is a schematic diagram of the process of negotiating the symmetric key for SM4 using the key negotiation algorithm in this invention;

[0056] Figure 3 This is a schematic diagram of the signature process in this invention;

[0057] Figure 4 This is a schematic diagram of the information within the NFC tag in this invention;

[0058] Figure 5 This is a schematic diagram of the product traceability process in this invention;

[0059] Figure 6 This is a schematic diagram illustrating the decryption and product inspection processes in this invention.

[0060] Figure 7 This is a schematic diagram of the overall process of the anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm described in this invention;

[0061] Figure 8 This is a diagram of the information structure stored in the database of this invention;

[0062] Figure 9 This is a diagram showing the experimental results of the signature-then-encryption scheme;

[0063] Figure 10 This is a schematic diagram of the experimental results of the signature scheme of the present invention. Detailed Implementation

[0064] To illustrate the technical solution disclosed in this invention in detail, the technical solution of this invention will be further described below with reference to the accompanying drawings.

[0065] See Figure 1 The anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm described in this invention mainly includes the following steps:

[0066] Step 1: The server assigns an NFC tag (with a unique SN code) and a unique product code Gid to each product and stores them in the database;

[0067] Step 2: Use the national cryptographic algorithms SM2 and SM4 as the underlying algorithms of the signature scheme, and use the key negotiation algorithm to negotiate a key as the symmetric key of the SM4 encryption algorithm without sharing any secrets; use the signature scheme to simultaneously realize the digital signature of the SN code of the NFC tag and the encryption of the product code Gid, to obtain the signature D;

[0068] Step 3: Using NFC technology as the carrier of information transmission and the tool for traceability, the signature code D is stored in the NFC tag, and the update information of each node is also stored in the NFC tag. After receiving the goods, consumers can read the tag through NFC-enabled mobile devices to view the product information and process information. The back-end server decrypts the signature code to verify the authenticity of the product. If the product code Gid matches the product code stored in the database, the product is genuine; otherwise, the product is fake.

[0069] See Figure 2 , Figure 2 The diagram illustrates the key negotiation algorithm used in this invention. The NFC tag and the server negotiate a symmetric key SK, which is used for encryption and decryption in subsequent steps. In specific implementation, the key negotiation algorithm proceeds as follows: First, the NFC tag and the server initialize, with the base point G(x... g ,y g The NFC tag generates a random number t and calculates the exchange key T = t·G, then sends the exchange key T to the server. Simultaneously, the server generates a random number s and calculates the exchange key S = s·G, then sends the exchange key S to the NFC tag. Finally, the server receives the exchange key T and calculates the negotiation key SK = s·T = s·t·G, while the NFC tag receives the exchange key S and calculates the negotiation key SK = t·S = t·s·G.

[0070] refer to Figure 3 This is a flowchart illustrating how the present invention replaces the underlying algorithm of the signature encryption scheme with national cryptographic algorithms SM2 and SM4, and simultaneously implements digital signature of the SN code of the NFC tag and encryption of the product code Gid to obtain signature D. In specific implementation, the steps for replacing the underlying algorithm of the signature encryption scheme and obtaining signature D are as follows: First, initialize the base point G(x) g ,y g ), elliptic curve E, where a, b are the parameters of the elliptic curve equation E, H 256ENTLA is a cryptographic hash function, and ENTLA is the product identifier ID. A The 2 bytes (ID) to be converted A For user ID data, SM2 uses the default parameter value; for product code Gid, the public / private key pair is (P A ,d A ), where (x A ,y A ) is P A The coordinates of P A =[d A ]·G; then calculate the hash value Z. A =H 256 (ENTLA||ID A ||a||b||x g ||y g ||x A ||y A ); Calculate M′=Z A ||M, where M is the SN code of the NFC tag; calculate e = Hv(M′), and convert the data type of e to an integer; generate a random number k in [1, n-1], where n is the order of G, and calculate (x1, y1) = [k]·G, converting the data type of x1 to an integer; calculate r = (e + x1) mod n; calculate s = (1 + d A ) -1 ·(kr·d A )modn, and convert the data types of r and s to strings; finally, use the negotiation key SK to encrypt the product code Gid, m′=E(m), where m is the product code Gid; generate the signature D=(m′,(r,s)).

[0071] In step three, the signature D = (m′, (r, s)) generated in step two is stored in the NFC tag, and the update information of each node is also stored in the NFC tag; after receiving the goods, consumers can use NFC-enabled mobile devices to read the tag for traceability and anti-counterfeiting verification.

[0072] refer to Figure 4 The content contained in the NFC tag in this invention includes: the unique identifier SN code of the NFC tag; the signature generated in step S2 D=(m′,(r,s)); basic product information, such as brand, manufacturer, production date, shelf life, etc. Infor; the seller's updated product entry time, location and responsible person code Sale1; the seller's updated product sale time, location and responsible person code Sale2; and the transporter's updated product start time, location and responsible person code Trans.

[0073] refer to Figure 5This is the product traceability process proposed in this invention, and it is also an anti-counterfeiting traceability system based on NFC and national cryptographic signature algorithms. The specific process for implementing the system is as follows:

[0074] The manufacturer affixes an NFC tag containing basic product information (Info) and a unique identifier (D) to the product packaging. The product is then stored at the retailer's warehouse. The retailer writes the product's storage time, location, and responsible person's code into the tag using an NFC writer. The product remains stored at the retailer until it is sold, at which point the retailer updates the product's shipping time, location, and responsible person's code. Upon receiving the product, the transporter updates the shipping start time, location, and responsible person's code. After receiving the product, the consumer uses an NFC-enabled mobile device to read the NFC tag, view the product's basic information and traceability process, and can then contact the responsible person at the relevant stage to resolve any issues that arise.

[0075] refer to Figure 6 This is a flowchart illustrating the decryption and product verification process of this invention. In specific implementation, the decryption and verification steps are as follows: First, determine if r > 1, r < n-1, s > 1, and s < n-1. If these inequalities are not met, the decryption verification fails. Second, calculate M′ = Z. A ||M, where M is the SN code of the NFC tag; calculate e = Hv(M′), and convert the data type of e to an integer; then convert the data types of r and s to integers, calculate t = (r + s) mod n, if t = 0, the verification fails; then calculate the elliptic curve point (x1, y1) = [s]·G + [t]·P A ; Calculate R = (e + x1) mod n; Determine if R and r are equal. If R ≠ r, the verification fails; if R = r, accept message m′; Finally, use the negotiated key SK to decrypt the ciphertext m′. If the decrypted information If the product ID matches the product code Gid stored in the database, the product is considered genuine; otherwise, it is considered fake. If the product is genuine, the product verification count stored in the database is incremented by 1.

[0076] refer to Figure 7 This invention presents a schematic diagram of the overall process of an anti-counterfeiting and traceability scheme based on NFC technology and national cryptographic signature algorithms. In its implementation, the overall anti-counterfeiting and traceability scheme mainly consists of six steps: allocation of NFC tags and product codes (Gid); key negotiation to obtain the symmetric key SK; replacement of the underlying algorithm of the signature scheme with SM2 and SM4; signature calculation of the NFC tag SN code and product code (Gid); NFC as the information carrier and traceability tool; and consumer designing and verifying the product.

[0077] Finally, the construction and product anti-counterfeiting and traceability system based on NFC and national cryptographic signature algorithms described in this invention are further described. The system is divided into 5 modules: manufacturer module, retailer module, transporter module, consumer module, and database module. The tasks of each module are as follows:

[0078] 1) Manufacturer Module: The main tasks of the manufacturer module are divided into three parts. The first part is to assign an NFC tag and a unique product code (Gid) to the product, and upload the tag's serial number (SN) and the product code (Gid) to the database. The second part is to perform a signature operation on the product's SN and product code (Gid), store the result in the NFC tag, and upload the SM2 algorithm public key and the negotiated SM4 algorithm symmetric key to the database. The third part is to affix the NFC tag containing the product's basic information (Info) and the signature to the product's outer packaging, and then deliver the product to the retailer.

[0079] 2) Retailer Module: The main tasks of the retailer module are also divided into two parts. The first part is that when the retailer receives goods from the manufacturer, it updates the goods' entry time, location, and responsible person code. The second part is that after a consumer purchases a product, the retailer updates the goods' exit time, location, and responsible person code.

[0080] 3) Transporter Module: After a product is sold, the transporter needs to safely deliver the product to the consumer and needs to update the time, location and responsible person code of the product's start of transportation.

[0081] 4) Consumer module: After receiving the goods, consumers use NFC-enabled mobile devices to read the NFC tag, view the basic information and traceability information of the goods, and verify the authenticity of the goods by decrypting the tag.

[0082] 5) Information stored in the database, such as Figure 8 As shown. The product's corresponding NFC tag SN code, product code Gid, SM2 algorithm public key, negotiated SM4 algorithm symmetric key, consumer verification count, and verification history record. The initial value of the consumer verification count is 0. When the consumer successfully verifies, the verification count is incremented by 1, and the consumer's verification time and location are stored in the database history record.

[0083] Regarding the cost calculation for implementing the method according to the present invention, experiments were conducted on the signature-before-encryption scheme and the signature-decryption scheme of the national cryptographic algorithms SM2 and SM4 under the same environment. The experimental steps were: distributing public and private keys, key negotiation, and signing before encryption or signature-decryption. In this embodiment, the code was looped 10 times, and the results are as follows. Figure 9 , 10As shown, the first array stores the negotiation key, and the second array stores the runtime.

[0084] Experimental results of the first-sign-then-encryption scheme are as follows: Figure 9 As shown in the second array, the execution time of the signature-then-encryption scheme is concentrated between 0.15 and 0.16 seconds. The experimental results of the signature-encryption scheme are as follows... Figure 10 As shown, from Figure 10 As shown in the second array, the execution time of the signature-encryption scheme is concentrated between 0.13 and 0.14 seconds. This is faster and more efficient than the scheme that requires signing before encryption.

Claims

1. A method for anti-counterfeiting and traceability based on NFC and national cryptographic signature algorithms, characterized in that, The process includes the following: (1) The server assigns an NFC tag with a unique SN code and a unique product code Gid to each product and stores them in the database; (2) Using the national cryptographic algorithms SM2 and SM4 as the underlying algorithms for signature tracing, a key is negotiated using a key negotiation algorithm without sharing any secrets to obtain a key as the symmetric key for the SM4 encryption algorithm. Then, while using signature tracing, the digital signature of the NFC tag's SN code and the encryption of the product code Gid are realized to obtain the signature. ; The key negotiation process in this step is as follows: (2-1-1) The NFC tag and server are initialized, including setting the base point. and elliptic curves ; (2-1-2) NFC tag generates random numbers Calculate the exchange key The key will be exchanged. Send to the server; (2-1-3) Server-side generation of random numbers Calculate the exchange key , will exchange keys Send to the NFC tag; (2-1-4) The server receives the exchange key. Calculate the negotiation key ; (2-1-5) NFC tag receives exchange key Calculate the negotiation key ; This step involves digitally signing the unique SN code of the NFC tag and encrypting the product's unique code Gid using a national cryptographic signing algorithm to obtain the signature. The steps are as follows: (2-2-1) Initialize the base point Elliptic curves ,in Equation of elliptic curve Parameters For cryptographic hash functions, For product identification The two bytes to be converted For users The data used by SM2 is the default parameter value. (2-2-2) Product code Gid, public / private key pair is ,in for coordinates ; (2-2-3) Calculate the hash value ; (2-2-4) Calculate ,in For the SN code of the NFC tag; (2-2-5) Calculation and will Convert the data type to an integer; (2-2-6) for The steps, in Generate random numbers ,calculate and will Data type converted to integer; (2-2-7) Calculate ; (2-2-8) Calculate and will The data type is converted to a string, and the signature is calculated. (2-2-9) Using the negotiated key Encrypt the product code Gid. , The product code is Gid; (2-2-10) Generate signature ; (3) Using NFC as the carrier for information transmission and the traceability tool, the signature is encrypted. The information is stored in the NFC tag, and the update information of each node is also stored in the NFC tag; (4) After receiving the goods, consumers can read the tag through a mobile device with NFC function to view the product information and process information. The back-end server decrypts the signature to verify the authenticity of the goods. If the product code Gid matches the product code stored in the database, the product is genuine; otherwise, the product is fake.

2. The anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm according to claim 1, characterized in that, The database storing NFC tags and product codes (GIDs) also includes a count of the number of times a product has been inspected. The initial value of the product inspection count is set to 0. When the product signature verification is successful, the inspection count is incremented by 1.

3. The anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm according to claim 1, characterized in that, Step (3) includes signing the secret. The information is stored in the NFC tag, and the update information of each node is also stored in the NFC tag. The tag content includes: SN: The unique identifier of an NFC tag, written during the tag manufacturing process and cannot be modified; Signature The ciphertext obtained by encrypting the product code using the national cryptographic algorithm SM4. For signing the SN code using the national cryptographic algorithm SM2; Info: Basic product information, including brand, manufacturer, production date, and shelf life; Sale1: The seller updates the product's inbound time, location, and responsible person's code; Sale2: The seller updates the product's sale time, location, and responsible person code; Trans: The carrier updates the start time, location, and responsible person code of the goods.

4. The anti-counterfeiting and traceability method based on NFC and national cryptographic signature algorithm according to claim 1, characterized in that, In step (4), after receiving the goods, the consumer uses an NFC-enabled mobile device to read the tag and view the product information and process information. The backend server decrypts the tag to verify the authenticity of the goods, and the calculation and processing include: (41) Determine if 1 < r < n-1 and 1 < s < n-1. If not satisfied, the signature verification will fail. (42) Calculate ,in For the SN code of the NFC tag; (43) Calculate and will Convert the data type to an integer; (44) will Convert data type to integer, calculate ,like The verification will fail. (45) Calculate the points on the elliptic curve ; (46) Calculate ; (47) Judgment and Are they equal? If the verification fails, then the verification will fail. Then receive the message. ; (48) Use the negotiated key Decrypting ciphertext information , If the decrypted information If the product code Gid matches the product code stored in the database, the product is verified as genuine; otherwise, the product is fake. If the product is genuine, the product verification count stored in the database is incremented by 1.

5. A counterfeit-proof and traceability system based on NFC and national cryptographic signature algorithms, characterized in that: The anti-counterfeiting and traceability system is used to execute the anti-counterfeiting and traceability method as described in any one of claims 1-4; The system includes a manufacturer module, a retailer module, a transporter module, a consumer module, and a database module; The manufacturer module is used to assign NFC tags and unique product codes (Gid) to products, and upload the tag's SN code and product code (Gid) to the database; it is used to perform a signature operation on the product's SN code and product code (Gid), store the operation result in the NFC tag, and upload the SM2 algorithm public key and the negotiated SM4 algorithm symmetric key to the database; it is used to affix the NFC tag containing the product's basic information (Info) and the signature to the product's outer packaging, and transmit this information to the seller module. The seller module is used to update the product's inbound time, location, and responsible person code information, including updating the product's outbound time, location, and responsible person code after a consumer purchases the product. The transporter module is used to update the transport time, routes, and responsible person codes of goods after they are sold. The consumer module is used by consumers to view the basic information and traceability information of the goods by reading the NFC tag after receiving the goods, and to verify the authenticity of the goods by decrypting the tag. The database is connected to the manufacturer module, retailer module, transporter module, and consumer module for data storage.

Images