Device, consumables and authentication method for anti-counterfeiting authentication of consumables based on NFC tags using PUF

Abstract

The embodiment of the present invention provides a device, consumables and authentication method for anti-counterfeiting authentication of consumables based on PUF NFC tags. The device includes: a challenge signal acquisition device, which can obtain digital signature data from a PUF NFC tag built into the consumable to be used, and obtain any challenge signal contained in the digital signature data; a challenge initiation device, which is used to send the challenge signal to the PUF NFC tag and initiate the challenge, and receive the verification response value generated by the PUF NFC tag; an anti-counterfeiting authentication device, which is used to obtain a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag; compare the verification response value with the standard response value, if the verification response value is consistent with the standard response value, then the consumable to be used is determined to be a genuine consumable, if the verification response value is inconsistent with the standard response value, then the consumable to be used is determined to be a counterfeit consumable. Because the PUF NFC tag is based on the uniqueness of the physical unclonable function PUF circuit, anti-counterfeiting of the consumable is achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of terminal security access, and in particular to a device, consumables and an authentication method for anti-counterfeiting authentication of consumables based on NFC tags using PUF. Background Art

[0002] With the development of the market economy and the expansion of the global supply chain, the quality and anti-counterfeiting traceability of consumable products have become increasingly important. As an important means to ensure product authenticity and prevent counterfeiting and shoddy products, anti-counterfeiting technology has been widely used and developed in the field of consumables.

[0003] Consumables authentication involves two aspects: encryption authentication technology and traceability management of consumables.

[0004] There are many types of anti-counterfeiting technologies for consumables, mainly including: physical anti-counterfeiting technology, chemical anti-counterfeiting technology, electronic anti-counterfeiting technology and biological anti-counterfeiting technology, among which electronic anti-counterfeiting technology is the main one.

[0005] In the process of implementing the present invention, the applicant discovered that there are at least the following problems in the prior art:

[0006] On the one hand, most of the current anti-counterfeiting authentication technologies for consumables use a single authentication algorithm based on symmetric encryption. Although this type of algorithm has a simple process and low requirements for hardware resources, it has hidden dangers in terms of security. Attackers can crack anti-counterfeiting authentication by brute force or by exploiting loopholes in the algorithm itself. On the other hand, although the use of asymmetric encryption authentication improves security, it is necessary to ensure that the private key of the object to be authenticated is not leaked. The key is the core of anti-counterfeiting authentication technology, but the key of consumables is stored in an unsafe place or can be obtained by technical means. Once the key is leaked, the anti-counterfeiting authentication technology is useless.

[0007] At the same time, high-value consumables are expensive and are crucial to the effectiveness of use. However, the lack of effective traceability and management means makes it difficult to trace the source and quality, and it is difficult to find the responsible party when problems occur during use.

[0008] Counterfeit products often bring huge economic benefits, which drives some criminals to crack anti-counterfeiting authentication technology at all costs. They may invest a lot of money and resources to research and crack anti-counterfeiting technology to produce counterfeit products. Summary of the invention

[0009] The embodiment of the present invention provides a device, consumables and authentication method for anti-counterfeiting authentication of consumables based on NFC tags of PUF, which can solve the consumables anti-counterfeiting problem in the prior art.

[0010] To achieve the above-mentioned purpose, in a first aspect, an embodiment of the present invention provides a device for anti-counterfeiting authentication of consumables using an NFC tag based on PUF, comprising:

[0011] A challenge signal acquisition device, which is used to obtain digital signature data from a PUF NFC tag built into the consumable to be used after the consumable to be used is connected to the device, wherein the digital signature data is in an encrypted form, and after decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained;

[0012] A challenge initiating device, used to send the challenge signal to the PUF NFC tag and initiate a challenge to the PUF NFC tag, and receive a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal;

[0013] The anti-counterfeiting authentication device is used to obtain a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair;

[0014] The verification response value is compared with the standard response value. If the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable. If the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable.

[0015] In a second aspect, an embodiment of the present invention provides a consumable for anti-counterfeiting authentication based on a PUF NFC tag, including a PUF NFC tag, wherein the PUF NFC tag is used to:

[0016] After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built into the consumable to be used, the digital signature data is sent to the device;

[0017] Receiving the challenge signal sent by the challenge initiating device of the device;

[0018] Receive the challenge of the challenge signal based on the physical unclonable function PUF circuit, generate a verification response value according to the challenge signal, and return the verification response value to the challenge initiating device;

[0019] When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, the standard response value refers to the response value obtained by challenging the physical unclonable function PUF circuit of the PUFNFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used to compare the verification response value with the verification response value, if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device, if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

[0020] In a third aspect, an embodiment of the present invention provides a consumable anti-counterfeiting authentication method based on a PUF NFC tag, which is applied to a device using consumables, including:

[0021] When the consumable to be used is connected to the device, the challenge signal acquisition device can obtain the digital signature data in the PUF NFC tag built into the consumable to be used, and the digital signature data is in an encrypted form. After decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained;

[0022] The challenge signal is sent to the PUF NFC tag through a challenge initiating device, and a challenge is initiated to the PUF NFC tag, and a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal is received;

[0023] Obtaining, by means of an anti-counterfeiting authentication device, a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair;

[0024] The verification response value is compared with the standard response value. If the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable. If the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable.

[0025] In a fourth aspect, an embodiment of the present invention provides a consumable anti-counterfeiting authentication method of an NFC tag based on PUF, which is applied to the consumable end, including:

[0026] After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built into the consumable to be used, the digital signature data is sent to the device;

[0027] Receiving the challenge signal sent by the challenge initiating device of the device through the PUF NFC tag built into the consumable to be used;

[0028] Receive the challenge of the challenge signal based on the physical unclonable function PUF circuit through the PUF NFC tag, generate a verification response value according to the challenge signal, and return the verification response value to the challenge initiating device;

[0029] When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, the standard response value refers to the response value obtained by challenging the physical unclonable function PUF circuit of the PUFNFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used by the anti-counterfeiting authentication device to compare with the verification response value, if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device, and if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

[0030] The above technical solution has the following beneficial effects: because the PUF NFC tag is based on the physical unclonable function PUF circuit, it has uniqueness. The physical unclonable function refers to the physical structure of the tag chip with slight differences due to uncertain factors during the manufacturing process. The physical structure makes the tag chip have a unique standard response value that is different from other tag chips when facing the same challenge signal. Therefore, when there is no PUF NFC tag in the consumables, a challenge is initiated, and even if the verification response value obtained does not match the verification idea of ​​this method, the consumables can be anti-counterfeited. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0032] Figure 1It is a structural diagram of a device for anti-counterfeiting authentication of consumables based on NFC tags based on PUF according to an embodiment of the present invention;

[0033] Figure 2 It is a flow chart of a consumables anti-counterfeiting authentication method based on PUF NFC tag according to an embodiment of the present invention (applied to a device using consumables);

[0034] Figure 3 It is a flow chart of a consumables anti-counterfeiting authentication method (applied on the consumables end) based on a PUF-based NFC tag according to an embodiment of the present invention;

[0035] Figure 4 The embodiment of the present invention describes the anti-counterfeiting process of consumables through equipment, consumables and production system. DETAILED DESCRIPTION

[0036] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] like Figure 1 As shown, in combination with an embodiment of the present invention, a device for anti-counterfeiting authentication of consumables using an NFC tag based on PUF is provided, comprising:

[0038] The challenge signal acquisition device 11 is used to obtain digital signature data from the PUF NFC tag built into the consumable to be used after the consumable to be used is connected to the device, wherein the digital signature data is in an encrypted form, and after decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained;

[0039] A challenge initiating device 12 is used to send the challenge signal to the PUF NFC tag and initiate a challenge to the PUF NFC tag, and receive a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal;

[0040] The anti-counterfeiting authentication device 13 is used to obtain a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair;

[0041] The verification response value is compared with the standard response value. If the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable. If the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable.

[0042] Preferably, the device for anti-counterfeiting authentication of consumables based on PUF NFC tags further includes a first identity authentication device, wherein the first identity authentication device is used to:

[0043] After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built into the consumable to be used, a preliminary two-way identity legitimacy authentication is performed on the device and the consumable to be used based on a symmetric encryption algorithm;

[0044] The first identity authentication device is specifically used for:

[0045] Generate a first random number, and preliminarily verify the legitimacy of the identity of the consumable to be used based on the symmetric encryption algorithm according to the first random number. If the consumable to be used passes the identity verification, the consumable to be used is preliminarily determined to be a genuine consumable; otherwise, the consumable to be used is determined to be a counterfeit consumable, and the execution of subsequent programs of the consumable to be used on the device is stopped;

[0046] The device for anti-counterfeiting authentication of consumables based on PUF-based NFC tags also includes:

[0047] A secure memory is used to store the secret key of the symmetric encryption algorithm used in the first identity authentication device to perform preliminary two-way identity legitimacy authentication on the device and the consumables to be used, wherein the secret key is the same for the consumables to be used of the same specification and model of the same model of device, and the secret key is stored in the secure memory of the device through the consumables production system when the device is produced.

[0048] Preferably, the device for anti-counterfeiting authentication of consumables based on PUF-based NFC tags further includes:

[0049] A signature verification device, used for obtaining digital signature data and corresponding original data from a PUF NFC tag built into the consumable to be used after preliminarily determining that the consumable to be used is a genuine consumable and the device is a legitimate device, reading a public key generated based on an asymmetric encryption algorithm from the secure memory, and verifying the digital signature data based on the asymmetric encryption algorithm and the original data in combination with the public key; when it is determined that the digital signature data is correct, the signature verification of the consumable to be used is successful; when it is determined that the digital signature data is incorrect, the consumable to be used is determined to be a counterfeit consumable;

[0050] The digital signature data refers to: when producing the PUF NFC tag built into the consumable to be used, sending multiple third random numbers to the PUF NFC tag as a challenge signal according to the consumable production system, the PUF NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, using the generated response value as a standard response value, and constructing a set of challenge-response pairs with each challenge signal and the corresponding standard response value; using a summary algorithm to generate summary data based on all challenge-response pairs; generating a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, using the private key to encrypt all challenge-response pairs and summary data to generate digital signature data;

[0051] The secure memory is also used to store the public key required by the verification device, wherein, for consumables of the same specification and model for equipment of the same model, a pair of secret keys are generated based on an asymmetric encryption algorithm, in which the public key and the private key are the same, and the public key is stored in the secure memory of the device through the consumable production system.

[0052] Preferably, the challenge signal acquisition device is specifically used for:

[0053] After the signature verification of the consumables to be used is successful, the digital signature data is stored in the PUF NFC tag built into the consumables to be used.

[0054] Preferably, the physical unclonable function refers to a physical structure with slight differences formed in the tag chip due to uncertain factors during the manufacturing process, and the physical structure makes the tag chip have a unique standard response value different from other tag chips when facing the same challenge signal.

[0055] In combination with an embodiment of the present invention, a consumable for anti-counterfeiting authentication based on a PUF NFC tag is provided, including a PUF NFC tag, wherein the PUF NFC tag is used to:

[0056] After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built into the consumable to be used, the digital signature data is sent to the device;

[0057] Receiving the challenge signal sent by the challenge initiating device of the device;

[0058] Receive the challenge of the challenge signal based on the physical unclonable function PUF circuit, generate a verification response value according to the challenge signal, and return the verification response value to the challenge initiating device;

[0059] When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, the standard response value refers to the response value obtained by challenging the physical unclonable function PUF circuit of the PUFNFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used to compare the verification response value with the verification response value, if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device, if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

[0060] Preferably, the consumable material for anti-counterfeiting authentication based on the PUF-based NFC tag further includes a second identity authentication device, wherein the second identity authentication device is used to:

[0061] After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built into the consumable to be used, a preliminary two-way identity legitimacy authentication is performed on the device and the consumable to be used based on a symmetric encryption algorithm;

[0062] The second identity authentication device is specifically used for:

[0063] Generate a second random number, and preliminarily verify the legitimacy of the identity of the device based on the symmetric encryption algorithm according to the second random number. If the device passes the identity verification, the device is determined to be a legitimate device; otherwise, the device is determined to be a counterfeit device, and the execution of subsequent programs of the consumables to be used on the device is stopped;

[0064] Among them, for the same specification and model of the consumables to be used for the same model of equipment, the secret key of the symmetric encryption algorithm used for the preliminary two-way identity legitimacy authentication of the device and the consumables to be used is the same, and the secret key is not built into the PUF NFC tag.

[0065] Preferably, the PUF NFC tag is also used for:

[0066] The digital signature data and the corresponding original data are stored, and when the signature verification device of the device obtains the digital signature data and the corresponding original data from the PUF NFC tag built into the consumable to be used, the digital signature data and the corresponding original data are sent to the signature verification device, wherein the digital signature data refers to: when producing the PUF NFC tag built into the consumable to be used, a plurality of third random numbers are sent to the PUF NFC tag as a challenge signal according to the consumable production system to challenge, and the PUF The NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, takes the generated response value as the standard response value, and constructs a set of challenge-response pairs with each challenge signal and the standard response value of the response; a summary algorithm is used to produce summary data based on all challenge-response pairs; the consumables production system generates a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, and uses the private key to encrypt all challenge-response pairs and summary data to generate digital signature data; for consumables of the same specification and model of equipment of the same model, the public key and the private key in a pair of secret keys generated based on the asymmetric encryption algorithm are the same, and the private key is not built into the PUF NFC tag.

[0067] In combination with the embodiments of the present invention, a consumables anti-counterfeiting authentication method based on PUF NFC tags is also provided, which is applied to a device using consumables, including:

[0068] S101: When the consumable to be used is connected to the device, the challenge signal acquisition device can obtain digital signature data in the PUF NFC tag built into the consumable to be used, wherein the digital signature data is in an encrypted form, and after decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained;

[0069] S102: Sending the challenge signal to the PUF NFC tag and initiating a challenge to the PUF NFC tag through a challenge initiating device, and receiving a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal;

[0070] S103: obtaining, by means of an anti-counterfeiting authentication device, a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair;

[0071] S104: Compare the verification response value with the standard response value. If the verification response value is consistent with the standard response value, determine that the consumable to be used is a genuine consumable. If the verification response value is inconsistent with the standard response value, determine that the consumable to be used is a counterfeit consumable.

[0072] Preferably, the consumables anti-counterfeiting authentication method based on PUF NFC tag further includes:

[0073] S105: After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built in the consumable to be used, a first identity authentication device performs a preliminary two-way identity legitimacy authentication on the device and the consumable to be used based on a symmetric encryption algorithm;

[0074] The preliminary two-way identity legitimacy authentication of the device and the consumables to be used based on the symmetric encryption algorithm includes:

[0075] Generate a first random number, and preliminarily verify the legitimacy of the identity of the consumable to be used based on the symmetric encryption algorithm according to the first random number. If the consumable to be used passes the identity verification, the consumable to be used is preliminarily determined to be a genuine consumable; otherwise, the consumable to be used is determined to be a counterfeit consumable, and the execution of subsequent programs of the consumable to be used on the device is stopped;

[0076] Among them, for the same specification and model of consumables to be used for the same model of equipment, the secret key of the symmetric encryption algorithm used for the preliminary two-way identity legitimacy authentication of the equipment and the consumables to be used is the same. When the equipment is produced, the secret key is stored in the secure memory of the target device through the consumable production system.

[0077] Preferably, the consumables anti-counterfeiting authentication method based on PUF NFC tag further includes:

[0078] S106: After preliminarily determining that the consumable to be used is a genuine consumable and that the device is a legitimate device, obtaining digital signature data from the PUF NFC tag built into the consumable to be used through a signature verification device, reading a public key generated based on an asymmetric encryption algorithm from the secure memory, and verifying the digital signature data based on the asymmetric encryption algorithm and the public key. When it is determined that the digital signature data is correct, the signature verification of the consumable to be used is successful. When it is determined that the digital signature data is incorrect, the consumable to be used is determined to be a counterfeit consumable.

[0079] The digital signature data refers to: when producing the PUF NFC tag built into the consumable to be used, a plurality of third random numbers are sent to the PUF NFC tag as a challenge signal through the consumable production system for challenging, the PUF NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, takes the generated response value as the standard response value, and constructs a set of challenge-response pairs with each challenge signal and the corresponding standard response value; uses a summary algorithm to generate summary data based on all challenge-response pairs; generates a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, uses the private key to encrypt all challenge-response pairs and summary data, and generates digital signature data;

[0080] Among them, for consumables of the same specification and model of equipment of the same model, when the digital signature data is verified in combination with the public key, a pair of secret keys generated based on an asymmetric encryption algorithm, in which the public key and the private key are the same, are stored in the secure memory of the device through the consumable production system.

[0081] Preferably, S101: when the consumable to be used is connected to the device, the device can obtain digital signature data in the PUF NFC tag built into the consumable to be used through the challenge signal, including:

[0082] After the signature verification of the consumable to be used is successful, the digital signature data in the PUFNFC tag built into the consumable to be used is obtained by the challenge signal acquisition device.

[0083] Preferably, the physical unclonable function refers to a physical structure with slight differences formed in the tag chip due to uncertain factors during the manufacturing process, and the physical structure makes the tag chip have a unique standard response value different from other tag chips when facing the same challenge signal.

[0084] In combination with the embodiments of the present invention, a consumable anti-counterfeiting authentication method based on PUF NFC tag is also provided, which is applied to the consumable end, including:

[0085] S201: After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built in the consumable to be used, the digital signature data is sent to the device;

[0086] S202: receiving the challenge signal sent by the challenge initiating device of the device through the PUF NFC tag built into the consumable to be used;

[0087] S203: receiving the challenge of the challenge signal based on the physical unclonable function PUF circuit through the PUF NFC tag, generating a verification response value according to the challenge signal, and returning the verification response value to the challenge initiating device;

[0088] S204: When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, wherein the standard response value refers to a response value obtained by challenging a physically unclonable function PUF circuit of the PUF NFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used by the anti-counterfeiting authentication device to compare with the verification response value; if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device; if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

[0089] Preferably, the consumables anti-counterfeiting authentication method based on PUF NFC tag further includes:

[0090] S205: After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built in the consumable to be used, a second identity authentication device performs preliminary two-way identity legitimacy authentication on the device and the consumable to be used based on a symmetric encryption algorithm;

[0091] The second identity authentication device performs preliminary two-way identity legitimacy authentication on the device and the consumables to be used based on a symmetric encryption algorithm, including:

[0092] Generate a second random number, and preliminarily verify the legitimacy of the identity of the device based on the symmetric encryption algorithm according to the second random number. If the device passes the identity verification, the device is determined to be a legitimate device; otherwise, the device is determined to be a counterfeit device, and the execution of subsequent programs of the consumables to be used on the device is stopped;

[0093] Among them, for the same specification and model of the consumables to be used for the same model of equipment, the secret key of the symmetric encryption algorithm used for the preliminary two-way identity legitimacy authentication of the device and the consumables to be used is the same, and the secret key is not built into the PUF NFC tag.

[0094] Preferably, the consumables anti-counterfeiting authentication method based on PUF NFC tag further includes:

[0095] The digital signature data is stored by the PUF NFC tag, and when the signature verification device of the device obtains the digital signature data from the PUF NFC tag built into the consumables to be used, the digital signature data is sent to the signature verification device, wherein the digital signature data refers to: when producing the PUF NFC tag built into the consumables to be used, multiple third random numbers are sent to the PUF NFC tag as a challenge signal according to the consumable production system, and the PUF NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, and the generated response value is used as a standard response value, and each challenge signal and the standard response value of the response are constructed to obtain a set of challenge-response pairs; a summary algorithm is used to produce summary data based on all challenge-response pairs; the consumable production system generates a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, and uses the private key to encrypt all challenge-response pairs and summary data to generate digital signature data; for the same specification and model of consumables of the same model of equipment, the public key and the private key in a pair of secret keys generated based on the asymmetric encryption algorithm are the same, and the private key is not built into the PUF Inside the NFC tag.

[0096] The above technical solution of the embodiment of the present invention is described in detail below in conjunction with specific application examples. For technical details not introduced during the implementation process, please refer to the relevant description in the previous text.

[0097] The embodiments of the present invention provide a device, consumables and corresponding methods for anti-counterfeiting authentication of consumables based on NFC tags using PUF, which can solve the problems existing in the existing consumables anti-counterfeiting technology and provide a reliable, efficient, safe and traceable consumable. It adopts chip physical non-cloning technology, symmetric encryption and asymmetric digital signature technology, and ensures multi-to-multi legal authentication, anti-counterfeiting and traceability between consumables and authentication devices through triple security technology. Figure 4 As shown, the process of equipment production, consumables production and anti-counterfeiting authentication of consumables is explained in combination with the production stage, equipment production and use stage.

[0098] 1. Production stage:

[0099] (I) Consumables production

[0100] 1. The consumables production system generates N random numbers for each PUF NFC tag as the challenge signal of the PUF NFC tag, uses the challenge signal to challenge the PUF NFC tag, and obtains the response information corresponding to the challenge in the PUF NFC tag. Each challenge signal and its corresponding response information constitute a set of PUF CRP information (challenge response pair). For a PUF NFC tag, a total of N sets of PUF CRP information are extracted, PUF (Physical Unclonable Functions), CRP (Challenge Response Pair). A PUF NFC tag is installed in each consumable, and the authenticity of the consumables where the PUF NFC tag is located is identified by authenticating the authenticity of the PUFNFC tag.

[0101] The process of using the random number as the PUR CRP challenge information and the process of obtaining the storage response value mentioned later are as follows:

[0102] (1) The consumables production system uses a random number generator to generate a random number Randx.

[0103] (2) The card reader of the production system sends the random number Randx as a challenge signal Cx to the tag of the consumables through the NFC protocol as a challenge signal.

[0104] (3) After the tag on the consumable receives the challenge signal Cx through the NFC protocol, it acts on the PUF circuit of the tag, and the PUF returns a response signal Rx corresponding to the challenge signal Cx.

[0105] (4) The tag on the consumables sends Rx to the card reader of the production system via the NFC protocol.

[0106] (5) After the consumables production system receives the response signal Rx, it combines it with the challenge signal Cx to form a CRP pair (Cx, Rx) and temporarily stores it in the buffer area.

[0107] (6) The consumables production system repeats steps (1)-(5) N times to obtain a complete CRP record {(Cx1, Rx1), (Cx2, Rx2), ..., (CxN, RxN)}.

[0108] (7) The consumables production system uses a summary algorithm to generate summary data H(CFx) for the CRP records {(Cx1, Rx1), (Cx2, Rx2), ..., (CxN, RxN)}.

[0109] (8) The consumables production system uses the private key to digitally sign the CRP record {(Cx1, Rx1), (Cx2, Rx2), ..., (CxN, RxN)} and the summary data H(CFx) to generate digitally signed data.

[0110] (9) The consumables production system stores the digitally signed data in the data storage area of ​​the consumables tag via the NFC protocol.

[0111] 2. The consumables production system uses a summary algorithm to generate summary information of the PUF NFC tag for the extracted N groups of PUF CRP information. An asymmetric encryption algorithm is used to generate a pair of secret keys: a private key and a public key. The consumables production system retains the private key. The consumables production system uses the private key to encrypt the N groups of PUF CRP information and summary information to generate digital signature data, and stores the digital signature data in the chip of the consumables PUF NFC tag; that is, the PUF NFC tag includes a chip, which is part of the tag. An antenna is added to the chip to generate an inlay type tag. The inlay type tag is transformed into NFC PUF tags of different forms through different composite processes.

[0112] Digest is a technology to protect the integrity of information. It compresses the variable-length data to be verified into a fixed-length sequence through a one-way function compression algorithm. Because it is a one-way function, the original content cannot be deduced from the compression result. The characteristic is that if any 1-bit content changes, the difference in digest data will be very large. By comparing the stored digest with the digest value calculated based on the data to be verified using the same digest algorithm, it can be determined whether the information has been tampered with.

[0113] In the embodiment of the present invention, the extracted N groups of PUF CRP information are used to generate summary data. By judging the summary value, it is possible to judge whether the PUF CRP has been tampered with. If it has not been tampered with, the stored PUF CRP information can be used to verify whether the PUF on the label is the PUF shipped by the manufacturer. If it is, it is a genuine consumable. If the PUF verification fails, it is a counterfeit consumable.

[0114] A digital signature, also known as a public key digital signature, is a string of numbers that can only be generated by the sender of the information and cannot be forged by others. It is like an ordinary physical signature written on paper, but it is implemented using technology in the field of public key cryptography and is a method for authenticating digital information. In simple terms, a digital signature is some data attached to a data unit, or a cryptographic transformation of a data unit. This data or transformation allows the recipient of the data unit to confirm the source and integrity of the data unit, and protects the data from being forged by others (such as the recipient).

[0115] Digital signatures are based on asymmetric encryption technology, which mainly involves the use of public and private keys. Its working principle is as follows:

[0116] For the sender:

[0117] (1) Use a hash function (such as SHA) to encrypt the original text and generate a digital summary of a fixed length.

[0118] (2) Use your own private key to encrypt the digital summary and generate a digital signature.

[0119] (3) Send the original text and digital signature together to the recipient.

[0120] For the receiver:

[0121] (1) After receiving the original text and digital signature, use the sender's public key to decrypt the digital signature and obtain the digital summary.

[0122] (2) At the same time, the original text is encrypted using the same hash function to generate another digital summary.

[0123] (3) Compare the two digital summaries. If they are consistent, it means that the original text has not been tampered with during transmission and is indeed from the sender.

[0124] Digital signatures have the following notable features:

[0125] (1) Unforgeability: Since digital signatures are generated based on asymmetric encryption algorithms, only the signer's private key can generate a digital signature, so digital signatures cannot be forged.

[0126] (2) Integrity: A digital signature can ensure that the original text has not been tampered with during transmission, and therefore has integrity.

[0127] (3) Identity authentication: A digital signature can confirm that the original text was sent by the signer, thus achieving identity authentication.

[0128] (4) Non-repudiation: Digital signatures can be used as electronic evidence to prevent the sender or receiver from denying the transaction after it is completed.

[0129] 3. The consumables production system sets an authentication key based on a symmetric encryption algorithm for the chip of the PUF NFC tag. The authentication uses a symmetric encryption algorithm, and the encryption keys on both sides of the symmetric encryption algorithm session are the same.

[0130] 4. The consumables production system locks the contents of the memory of the chip (i.e., chip) of the PUF NFC tag: PUF NFC tag data, and it is forbidden to rewrite the PUF NFC tag data again. The PUF NFC tag data contains the original data generated by the consumables production system (N groups of PUF CRP information of PUF NFC, i.e., challenge-response pairs), and the data after asymmetrical encryption of N groups of PUF CRP information summary information, i.e., digital signature data. The PUF NFC tag includes a chip, and the contents of the memory are locked by configuring the control word in the chip. When the bit of the control word is written to 1, the data in the data area corresponding to the bit is locked and cannot be rewritten; and the bit of the control word can only be written from 0 to 1, and cannot be written back from 1 to 0, that is, it can only be configured from unlocked to locked, and it cannot be changed to unlocked after being locked.

[0131] 5. The production system sets an upper limit on the number of consecutive authentication failures for the chip of the PUF NFC tag. If the number of consecutive authentication failures exceeds this limit, the system will no longer respond to identity authentication messages.

[0132] (II) Equipment production

[0133] 1. The consumables production system pre-sets the public key generated by the asymmetric faceting algorithm to the security chip in the device (printer). The security chip is equipped with a secure memory, which is used to store important data to prevent data from being stolen. The device (printer) is a device that uses consumables and verifies the authenticity of consumables. The production system is the entire system of the production line of consumables produced by the consumables manufacturer (generally the consumables production department of the printer manufacturer, or the consumables company authorized by the printer brand).

[0134] 2. The consumables production system presets the identity authentication key of the symmetric encryption algorithm into the secure memory of the device (printer). Symmetric encryption is used for two-way identity authentication between the tag and the device.

[0135] 2. Use Phase

[0136] 1. The device uses a symmetric encryption algorithm to perform preliminary two-way identity authentication between the device and the consumables. If it passes, it will enter the next authentication process. If the identity authentication fails, the consumables are judged to be counterfeit. The consumables authentication device is not a legitimate device and will not output the stored data.

[0137] There are many ways to use symmetric encryption to achieve two-way identity authentication, such as SM4, AES, HMAC, 3DES, etc. The steps of each method are slightly different. The core is to use the key information that only the legitimate authentication parties know, and other parties do not know the key information. The following is a reference process:

[0138] (1) Verifier B first generates a random number and encrypts the random number using a shared symmetric encryption key, and sends the result to Prover A as a challenge message.

[0139] (2) A uses the shared symmetric encryption key to encrypt the received random number plaintext and generates the corresponding encrypted ciphertext. A compares the received encrypted ciphertext with the generated encrypted ciphertext. If they are equal, A is a legitimate authentication party; if they are not equal, A is not a legitimate authentication party.

[0140] (3) Prover A also generates another random number and encrypts the random number with the shared symmetric encryption key and sends it to Verifier B as a challenge message.

[0141] (4) B checks whether the random number is consistent with the challenge information through decryption. If it is consistent, B accepts A's authentication; otherwise, it rejects it.

[0142] When the identity of the consumable is authenticated, the verifier B is the consumable and the presenter A is the device. When the identity of the device is authenticated, the verifier B is the device and the presenter A is the consumable.

[0143] 2. After identity authentication, the device (e.g., printer) reads the N groups of PUF CRP information in the digital signature data stored in the NFC tag (NFC TAG) of the consumables (e.g., ink cartridges) from the chip of the NFC tag of the consumables (e.g., ink cartridges), and verifies the PUFCRP information with the public key. If the verification is successful, it indicates that the PUF is a PUF produced by a legitimate consumables manufacturer, and then the next step of the authentication process is entered. If the verification fails, the consumables are judged to be counterfeit. The verification steps are as follows:

[0144] Verifying digital signatures is a common method in cryptography. The specific process is as follows:

[0145] The receiver (device) receives the original data (N groups of PUF CRP information) and digital signature data sent by the signer (consumables).

[0146] The recipient knows the signer's public key.

[0147] The receiver uses the signer's public key to decrypt the digital signature data and obtain the decrypted data summary. The receiver uses the same hash algorithm as the signer to process the received original data and generate a new data summary.

[0148] The receiver compares the decrypted data digest with the new data digest it generates.

[0149] If the two are exactly the same, the signature verification is successful, indicating that the digital tag data has not been tampered with during transmission and is indeed from the claimed sender; if the two are inconsistent, the signature verification fails, indicating that the digital tag data may have been tampered with or is from another unknown sender.

[0150] 3. After the signature verification is successful, N groups of PUF CRP information of the plaintext tag are obtained. One group of PUF CRP information is randomly extracted from the N groups of plaintext PUF CRP information to obtain a challenge signal. The device uses the challenge signal to challenge the PUF unit (PUF circuit) of the PUF NFC tag. The PUF NFC tag acts on the PUF unit in the tag according to the received challenge signal, and the PUF unit returns the corresponding response value to the device.

[0151] The device obtains the response value of the PUF NFC tag, verifies the stored response value (i.e. the decrypted PUF CRP value) and the response value (PUF CRP value) obtained by initiating a challenge, and if the two are consistent, the consumable is authentic, otherwise the consumable is judged to be a counterfeit.

[0152] Because the PUF NFC tag is based on the physical unclonable function PUF circuit, which is unique. The physical unclonable function refers to the physical structure of the tag chip with slight differences due to uncertain factors during the manufacturing process. The physical structure makes the tag chip have a unique standard response value that is different from other tag chips when facing the same challenge signal.

[0153] Therefore, when there is no PUF NFC tag in the consumables, a challenge is initiated, and even if the verification response value is obtained, it does not match the verification idea of ​​this method.

[0154] If it is a counterfeit consumable, even if there is a PUF NFC tag in the consumable, the private key and public key of the asymmetric encryption algorithm are different from those of this method. After the digital signature data is obtained based on the private key of the asymmetric encryption algorithm in the counterfeit consumable, the digital signature data cannot be verified using the public key in the device.

[0155] Assume that the private key of the symmetric encryption algorithm stored in the consumables production line is illegally obtained, and the challenge-response pair in the PUF NFC tag is tampered with to form the digital signature data. Then, the digital signature data cannot be verified using the public key in the device.

[0156] Assuming that the digital signature data of the counterfeit consumables matches and passes the signature verification stage, if there is no PUF NFC tag, when there is no PUF NFC tag in the consumables, a challenge is initiated, and even if the verification response value is obtained, it will fail the verification; or if there is a PUF NFC tag, whether there is a challenge-response pair in the PUF NFC tag, if there is no challenge-response pair, then the obtained challenge signal is also wrong, and further verification of the verification response value will also fail to match.

[0157] The beneficial technical effects achieved by the embodiments of the present invention are as follows:

[0158] The method of the embodiment of the present invention is a method for anti-counterfeiting authentication and product traceability that combines physical unclonable technology, storage technology, and computing technology to achieve multi-point to multi-point anti-counterfeiting authentication and product traceability of consumables and equipment, and prior knowledge of the uniqueness of equipment and consumables.

[0159] As a core node, the consumables production system securely stores the keys of symmetric encryption algorithms and public / private key pairs of asymmetric encryption. Because the decryptor cannot access the consumables production system, it is impossible to obtain the keys of symmetric encryption algorithms and private keys of asymmetric encryption from the consumables production system.

[0160] The device securely stores the keys of symmetric encryption algorithms and the public keys of asymmetric encryption algorithms. An attacker may obtain the keys of symmetric encryption using physical methods, and may also obtain the public keys of asymmetric encryption algorithms, but cannot obtain the private keys of asymmetric encryption. Therefore, the private keys cannot be used to effectively sign data for counterfeit consumables.

[0161] The device uses a symmetric algorithm to perform the first two-way verification on the consumable tag. Only after passing the two-way verification can the device obtain the signature data stored in the consumable tag. After obtaining the signature data stored in the tag, the asymmetric public key is used to perform a second verification on the signature information. Only after the verification is passed can the challenge response pair of the PUF circuit in the PUF NFC tag and the product production information be obtained. After obtaining the challenge response pair, the device selects a challenge signal from one of the N groups of challenge response pairs, and uses the selected challenge signal to challenge the PUF circuit in the PUF NFC tag of the consumable. The PUF circuit of the PUF NFC tag receives the challenge and obtains the corresponding verification response value. The device compares the verification response value with the standard response value in the challenge response pair. If they match, the consumable passes the authentication. And any failure in any of the three verifications will determine that the consumable is a counterfeit product. After the authentication is passed, the product information data obtained after the signature verification is used as traceability evidence. Among them, the PUF NFC tag is based on the uniqueness of the physical unclonable function PUF circuit, so the data has the function of anti-tampering and anti-repudiation.

[0162] It should be understood that the specific order or hierarchy of steps in the disclosed process is an example of an exemplary method. Based on design preferences, it should be understood that the specific order or hierarchy of steps in the process can be rearranged without departing from the scope of protection of the present disclosure. The attached method claims present the elements of the various steps in an exemplary order and are not intended to be limited to the specific order or hierarchy described.

[0163] In the above detailed description, various features are grouped together in a single embodiment to simplify the disclosure. This method of disclosure should not be interpreted as reflecting an intention that the embodiments of the claimed subject matter require more features than are clearly stated in each claim. On the contrary, as reflected in the appended claims, the invention is in a state of having less than all the features of the disclosed individual embodiments. Therefore, the appended claims are hereby expressly incorporated into the detailed description, with each claim standing on its own as a separate preferred embodiment of the invention.

[0164] The disclosed embodiments are described above to enable any person skilled in the art to implement or use the present invention. Various modifications of these embodiments are obvious to those skilled in the art, and the general principles defined herein may also be applied to other embodiments without departing from the spirit and scope of the present disclosure. Therefore, the present disclosure is not limited to the embodiments given herein, but is consistent with the broadest scope of the principles and novel features disclosed in this application.

[0165] The above description includes examples of one or more embodiments. Of course, it is impossible to describe all possible combinations of components or methods for the purpose of describing the above embodiments, but it should be recognized by those skilled in the art that the various embodiments may be further combined and arranged. Therefore, the embodiments described herein are intended to cover all such changes, modifications and variations that fall within the scope of protection of the appended claims. In addition, with respect to the term "comprising" used in the specification or claims, the word is covered in a manner similar to the term "including", just as "including," is explained as a transitional word in the claims. In addition, any term "or" used in the specification of the claims is intended to mean "non-exclusive or".

[0166] Those skilled in the art may also understand that the various illustrative logical blocks, units, and steps listed in the embodiments of the present invention may be implemented by electronic hardware, computer software, or a combination of the two. In order to clearly demonstrate the interchangeability of hardware and software, the various illustrative components, units, and steps described above have generally described their functions. Whether such functions are implemented by hardware or software depends on the specific application and the design requirements of the entire system. Those skilled in the art may use various methods to implement the described functions for each specific application, but such implementation should not be understood as exceeding the scope of protection of the embodiments of the present invention.

[0167] The various illustrative logic blocks or units described in the embodiments of the present invention can be implemented or operated by a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field programmable gate array or other programmable logic device, a discrete gate or transistor logic, a discrete hardware component, or any combination of the above. The general-purpose processor can be a microprocessor, and optionally, the general-purpose processor can also be any conventional processor, controller, microcontroller or state machine. The processor can also be implemented by a combination of computing devices, such as a digital signal processor and a microprocessor, a plurality of microprocessors, one or more microprocessors combined with a digital signal processor core, or any other similar configuration.

[0168] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A device for anti-counterfeiting authentication of consumables based on NFC tags based on PUF, characterized in that: include: A challenge signal acquisition device, which is used to obtain digital signature data from a PUF NFC tag built into the consumable to be used after the consumable to be used is connected to the device, wherein the digital signature data is in an encrypted form, and after decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained; A challenge initiating device, used to send the challenge signal to the PUF NFC tag and initiate a challenge to the PUF NFC tag, and receive a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal; The anti-counterfeiting authentication device is used to obtain a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; The verification response value is compared with the standard response value. If the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable. If the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable.

2. The device for anti-counterfeiting authentication of consumables based on NFC tags based on PUF according to claim 1, characterized in that: The first identity authentication device is used to: After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built into the consumable to be used, a preliminary two-way identity legitimacy authentication is performed on the device and the consumable to be used based on a symmetric encryption algorithm; The first identity authentication device is specifically used for: Generate a first random number, and preliminarily verify the legitimacy of the identity of the consumable to be used based on the symmetric encryption algorithm according to the first random number. If the consumable to be used passes the identity verification, the consumable to be used is preliminarily determined to be a genuine consumable; otherwise, the consumable to be used is determined to be a counterfeit consumable, and the execution of subsequent programs of the consumable to be used on the device is stopped; The device for anti-counterfeiting authentication of consumables based on PUF-based NFC tags also includes: A secure memory is used to store the secret key of the symmetric encryption algorithm used in the first identity authentication device to perform preliminary two-way identity legitimacy authentication on the device and the consumables to be used, wherein the secret key is the same for the consumables to be used of the same specification and model of the same model of device, and the secret key is stored in the secure memory of the device through the consumables production system when the device is produced.

3. The device for anti-counterfeiting authentication of consumables based on PUF NFC tags according to claim 2, characterized in that: Also includes: A signature verification device, used for obtaining digital signature data and corresponding original data from a PUF NFC tag built into the consumable to be used after preliminarily determining that the consumable to be used is a genuine consumable and the device is a legitimate device, reading a public key generated based on an asymmetric encryption algorithm from the secure memory, and verifying the digital signature data based on the asymmetric encryption algorithm and the original data in combination with the public key; when it is determined that the digital signature data is correct, the signature verification of the consumable to be used is successful; when it is determined that the digital signature data is incorrect, the consumable to be used is determined to be a counterfeit consumable; The digital signature data refers to: when producing the PUF NFC tag built into the consumable to be used, a plurality of third random numbers are sent to the PUF NFC tag as a challenge signal through the consumable production system for challenging, the PUF NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, takes the generated response value as the standard response value, and constructs a set of challenge-response pairs with each challenge signal and the corresponding standard response value; uses a summary algorithm to generate summary data based on all challenge-response pairs; generates a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, uses the private key to encrypt all challenge-response pairs and summary data, and generates digital signature data; The secure memory is also used to store the public key required by the verification device, wherein, for consumables of the same specification and model for equipment of the same model, a pair of secret keys are generated based on an asymmetric encryption algorithm, in which the public key and the private key are the same, and the public key is stored in the secure memory of the device through the consumable production system.

4. The device for anti-counterfeiting authentication of consumables based on NFC tags based on PUF according to claim 3, characterized in that: The challenge signal acquisition device is specifically used for: After the signature verification of the consumables to be used is successful, the digital signature data is stored in the PUF NFC tag built into the consumables to be used.

5. The device for anti-counterfeiting authentication of consumables based on PUF NFC tags according to claim 1, characterized in that: The physical unclonable function refers to the physical structure of the tag chip with slight differences formed due to uncertain factors during the manufacturing process. The physical structure makes the tag chip have its own unique standard response value different from other tag chips when facing the same challenge signal.

6. A consumable for anti-counterfeiting authentication based on PUF NFC tag, characterized in that: The invention comprises a PUF NFC tag, wherein the PUF NFC tag is used for: After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built into the consumable to be used, the digital signature data is sent to the device; Receiving the challenge signal sent by the challenge initiating device of the device; Receive the challenge of the challenge signal based on the physical unclonable function PUF circuit, generate a verification response value according to the challenge signal, and return the verification response value to the challenge initiating device; When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, the standard response value refers to the response value obtained by challenging the physical unclonable function PUF circuit of the PUF NFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used to compare the verification response value with the verification response value, if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device, if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

7. The consumable material for anti-counterfeiting authentication based on PUF NFC tag according to claim 6, characterized in that: Also included is a second identity authentication device, the second identity authentication device being used for: After the consumable to be used is connected to the device and before the digital signature data can be obtained from the PUF NFC tag built into the consumable to be used, a preliminary two-way identity legitimacy authentication is performed on the device and the consumable to be used based on a symmetric encryption algorithm; The second identity authentication device is specifically used for: Generate a second random number, and preliminarily verify the legitimacy of the identity of the device based on the symmetric encryption algorithm according to the second random number. If the device passes the identity verification, the device is determined to be a legitimate device; otherwise, the device is determined to be a counterfeit device, and the execution of subsequent programs of the consumables to be used on the device is stopped; Among them, for the same specification and model of the consumables to be used for the same model of equipment, the secret key of the symmetric encryption algorithm used for the preliminary two-way identity legitimacy authentication of the device and the consumables to be used is the same, and the secret key is not built into the PUF NFC tag.

8. The consumable material for anti-counterfeiting authentication based on PUF NFC tag according to claim 7, characterized in that: The PUF NFC tag is also used for: The digital signature data and the corresponding original data are stored, and when the signature verification device of the device obtains the digital signature data and the corresponding original data from the PUF NFC tag built into the consumable to be used, the digital signature data and the corresponding original data are sent to the signature verification device, wherein the digital signature data refers to: when producing the PUF NFC tag built into the consumable to be used, a plurality of third random numbers are sent to the PUF NFC tag as a challenge signal according to the consumable production system to challenge, and the PUF The NFC tag generates a corresponding response value based on the physical unclonable function PUF circuit according to each challenge signal, takes the generated response value as the standard response value, and constructs a set of challenge-response pairs with each challenge signal and the standard response value of the response; a summary algorithm is used to produce summary data based on all challenge-response pairs; the consumables production system generates a pair of secret keys based on an asymmetric encryption algorithm: a private key and a public key, and uses the private key to encrypt all challenge-response pairs and summary data to generate digital signature data; for consumables of the same specification and model of equipment of the same model, the public key and the private key in a pair of secret keys generated based on the asymmetric encryption algorithm are the same, and the private key is not built into the PUF NFC tag.

9. A consumables anti-counterfeiting authentication method based on PUF NFC tags, applied to a device using consumables, characterized in that: include: When the consumable to be used is connected to the device, the challenge signal acquisition device can obtain the digital signature data in the PUFNFC tag built into the consumable to be used, and the digital signature data is in an encrypted form. After decrypting the digital signature data, any challenge signal contained in the digital signature data is obtained; The challenge signal is sent to the PUF NFC tag through a challenge initiating device, and a challenge is initiated to the PUF NFC tag, and a verification response value generated by the PUF NFC tag based on a physical unclonable function PUF circuit according to the challenge of the challenge signal is received; Obtaining, by means of an anti-counterfeiting authentication device, a standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, wherein the standard response value refers to a response value obtained by challenging a PUF circuit based on a physical unclonable function (PUF) of the PUF NFC tag according to the challenge signal when the consumables production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; The verification response value is compared with the standard response value. If the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable. If the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable.

10. A consumables anti-counterfeiting authentication method based on PUF NFC tag, applied to consumables, characterized in that: include: After the consumable to be used is connected to the device, when the challenge signal acquisition device of the device obtains digital signature data from the PUF NFC tag built into the consumable to be used, the digital signature data is sent to the device; Receiving the challenge signal sent by the challenge initiating device of the device through the PUF NFC tag built into the consumable to be used; Receive the challenge of the challenge signal based on the physical unclonable function PUF circuit through the PUF NFC tag, generate a verification response value according to the challenge signal, and return the verification response value to the challenge initiating device; When the anti-counterfeiting authentication device of the device obtains the standard response value corresponding to the challenge signal pre-stored in the PUF NFC tag, the standard response value corresponding to the challenge signal is sent to the anti-counterfeiting authentication device, the standard response value refers to the response value obtained by challenging the physical unclonable function PUF circuit of the PUF NFC tag according to the challenge signal when the consumable production system produces the PUF NFC tag, and the challenge signal and the corresponding standard response value are represented by a challenge-response pair; the standard response value is used by the anti-counterfeiting authentication device to compare with the verification response value, if the verification response value is consistent with the standard response value, the consumable to be used is determined to be a genuine consumable by the anti-counterfeiting authentication device, and if the verification response value is inconsistent with the standard response value, the consumable to be used is determined to be a counterfeit consumable by the anti-counterfeiting authentication device.

Images