Product voucher generation and verification method

Abstract

The invention discloses a product voucher generation and verification method. The invention provides a method for generating a product voucher. The method comprises the following steps: an anti-counterfeiting center generates an anti-counterfeiting information code and a consumption information code of a product; each of the anti-counterfeiting information code and the consumption information code comprises a code identifier, a random number and a check code; the anti-counterfeiting center issues a digital signature certificate to a digital signature device of a product manufacturer; and the product manufacturer uses digital signature equipment to generate the product certificate based on the anti-counterfeiting information code and the consumption information code. The invention further provides a verification method of the product voucher. The verification method comprises the following steps: verifying the anti-counterfeiting information code of the product; in response to the fact that the anti-counterfeiting information code passes verification, the anti-counterfeiting center sends a product certificate corresponding to the anti-counterfeiting information code to a verification terminal; digital signature verification is carried out on the product certificate through the verification terminal, and comparison verification is further carried out on the hash value of the anti-fake information code after verification is passed; and obtaining a verification result.

Description

Technical Field

[0001] The present invention relates to a method for generating and verifying product vouchers, belonging to the technical field of information security. Background Art

[0003] Existing anti-counterfeiting technologies mainly include anti-counterfeiting technologies based on packaging labels and information anti-counterfeiting technologies. Packaging label anti-counterfeiting technologies such as holographic pattern anti-counterfeiting, optically variable ink, special version printing, etc., which rely on packaging processes for anti-counterfeiting methods, are easily counterfeited in the form of replacing the packaging, such as "true packaging with fake products"; information anti-counterfeiting technologies, such as RFID radio frequency technology, artificial DNA technology, etc., rely on special equipment for identification. The two-dimensional code that forms binary numbers using black and white set graphics based on computer "0" and "1" bits to represent data information is widely used as a carrier for various types of information due to its large information volume, wide coding range, and high recognition rate.

[0004] Existing digital signature technologies based on public key cryptography algorithms, based on cryptographic algorithms, can ensure the authenticity and non-repudiation of information sources, mainly focusing on achieving anti-counterfeiting effects using digital signature certificates. For the patent with the application publication number CN102004986 A and the name "Product Anti-counterfeiting Method and Verification Method Based on Digital Signature and Public Key System", the feature code is used as an anti-counterfeiting means in the solution, which cannot resist the repeated use of packaging, and at the same time, the information to be signed cannot be restored from the signature value; for the patent with the application publication number CN 116451730A and the name "An Anti-counterfeiting Method Based on Intelligent Terminals and Dual Information Codes", which requires product purchasers to participate in the issuance of anti-counterfeiting vouchers for product anti-counterfeiting, the technical solution that must record the communication methods of product purchasers is difficult to meet the needs of consumer privacy protection. At the same time, for a large number of fast-selling products, the method that requires the participation of sellers increases the cost of large-scale product promotion; there is an urgent need to design an anti-counterfeiting method that can resist the repeated use of packaging, can be widely used, and is safe and reliable to resist the troubles brought by counterfeit and shoddy products to the government, enterprises, and people. Summary of the Invention

[0005] In order to solve the above problems, the present invention designs a dual information code anti-counterfeiting method based on product vouchers.

[0006] The first aspect of the present invention provides a method for generating a product voucher, and its steps include:

[0007] The anti-counterfeiting center generates an anti-counterfeiting information code and a consumption information code for the product; both the anti-counterfeiting information code and the consumption information code include a code identifier, a random number, and a check code;

[0008] The anti-counterfeiting center issues a digital signature certificate to the digital signature device of the product manufacturer;

[0009] The product manufacturer uses a digital signature device to generate the product voucher based on the anti-counterfeiting information code and the consumption information code.

[0010] Furthermore, the product manufacturer uses a digital signature device with a digital signature certificate to scan the anti-counterfeiting information code and the consumption information code, calculate the hash value, complete the digital signature in combination with the product information, and generate the product voucher.

[0011] Furthermore, the product voucher includes the product information, the hash value of the anti-counterfeiting information code, the hash value of the consumption information code, and the digital signature of the product manufacturer for the above three parts of information.

[0012] Furthermore, both the anti-counterfeiting information code and the consumption information code contain verifiable check fields, and the product voucher is verified through digital signature technology.

[0013] Furthermore, the anti-counterfeiting information code is printed on the outer packaging of the product, the consumption information code is printed on the inner packaging of the product, and the product voucher is stored in the anti-counterfeiting center.

[0014] The second aspect of the present invention provides a method for verifying a product voucher, including:

[0015] Verifying the anti-counterfeiting information code of the product;

[0016] In response to the anti-counterfeiting information code passing the verification, the anti-counterfeiting center sends the product voucher corresponding to the anti-counterfeiting information code to the verification terminal;

[0017] Perform digital signature verification on the product voucher through the verification terminal. After the verification is correct, further compare and verify the hash value of the anti-counterfeiting information code to obtain the verification result.

[0018] Furthermore, after the anti-counterfeiting information code passes the verification, the anti-counterfeiting center sends the inspection times of the anti-counterfeiting information code to the verification terminal.

[0019] Furthermore, when the anti-counterfeiting center verifies the anti-counterfeiting information code, it checks whether the consumer terminal ID of the corresponding product is empty; if it is empty, it sends the product voucher to the consumer terminal and records the access times; if it is not empty, it needs to determine whether the verification terminal ID is consistent with the verification terminal ID stored in the database. If they are consistent, it sends the product voucher to the consumer terminal. If they are not consistent, it feedbacks "the product has been consumed by others".

[0020] Furthermore, further verify the consumption information code corresponding to the anti-counterfeiting information code;

[0021] In response to the consumption information code passing the verification, the anti-counterfeiting center sends the product voucher corresponding to the consumption information code to the verification terminal;

[0022] The verification terminal performs digital signature verification on the product voucher. After the verification is correct, the hash value of the consumption information code is further compared and verified, thus completing the product verification.

[0023] Furthermore, when the verification terminal verifies the consumption information code, it will send the consumer terminal ID to the anti-counterfeiting center, and the anti-counterfeiting center stores the terminal ID in the product voucher data entry corresponding to this consumption information code.

[0024] Furthermore, when the anti-counterfeiting center verifies the consumption information code, it checks whether the consumer terminal ID of the corresponding product is empty. If it is empty, the product voucher is sent to the consumer terminal and the terminal ID is recorded; if it is not empty, it is necessary to determine whether the verification terminal ID is consistent with the verification terminal ID stored in the database. If they are consistent, the product voucher is sent to the consumer terminal. If they are not consistent, "the product has been consumed by others" is feedback.

[0025] Furthermore, the digital signature and verification algorithms adopted by the anti-counterfeiting center, the digital signature device of the product manufacturer, and the consumer terminal are the SM2 algorithm; the hash algorithm is the SM3 algorithm; the manifestation form of the information code is a two-dimensional code; the verification module of the verification terminal is an App software, a mini-program or an SDK of a smart phone.

[0026] Furthermore, the digital signature and verification algorithms adopted by the anti-counterfeiting center, the digital signature device of the product manufacturer, and the verification terminal are the Dilithium algorithm.

[0027] The beneficial effects of the present invention are as follows:

[0028] 1. Concise, safe and reliable: The product voucher generation and verification method designed by the present invention issues product vouchers by the manufacturer's device with the signature of the anti-counterfeiting center, relying on public key cryptography algorithms to ensure the reliability of the solution; the product voucher that uniquely identifies the product designed by the present invention does not contain the public key in the digital certificate, simplifies the structure of the product voucher while ensuring the security of the voucher, simplifies the certificate chain, can improve the verification efficiency, and is convenient for large-scale promotion and use.

[0029] 2. Ensure the authenticity of the source: The present invention generates the information code by the anti-counterfeiting center. The product manufacturer binds the product and the information code through the product manufacturer's signature machine, and generates the product voucher after signature, which can ensure the authenticity of the product source; after the product is consumed, the anti-counterfeiting center marks the product as consumed, so that no one can use the anti-counterfeiting information code and consumption information code of the product packaging again. The consumed product will be marked as "consumed", effectively avoiding "true packaging with fake products".

[0030] 3. Easy to use widely: In the method of the present invention, consumers do not need special equipment, and a terminal with a scanning function can be used for verification, which is convenient for wide use. Brief Description of the Drawings

[0031] Figure 1 It is a flowchart of the specific embodiment of the present invention. Specific Embodiment

[0032] The present invention will be further described in detail below with reference to the accompanying drawings. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.

[0033] The specific embodiment of the present invention provides a method for generating a product certificate and a method for verifying a product containing the product certificate. The dual information codes designed in the present invention include an anti-counterfeiting information code and a consumption information code. The "anti-counterfeiting center" and the "product manufacturer" involved in the method are roles, which can be implemented by the same entity or different entities. The specific process is as Figure 1 shown.

[0034] The first embodiment of the present invention provides a method for generating a product certificate.

[0035] 1. The anti-counterfeiting center generates two information codes, an anti-counterfeiting information code and a consumption information code, for each product that needs to be anti-counterfeited. The anti-counterfeiting information code is used to identify the authenticity of the product, and the consumption information code is used to identify the consumption status of the product, and sends the two information codes to the product manufacturer of the product.

[0036] In the first embodiment of the present invention, both the anti-counterfeiting information code and the consumption information code include a code identifier, a random number, and a password verification code. Among them, the code identifier is used to display the anti-counterfeiting center URL and distinguish the anti-counterfeiting information code and the consumption information code; the random number is the unique identifier of the information code, which is a 256-bit random number; the password verification code is generated by the anti-counterfeiting center and is a password redundancy error-checking code for correctness check, which is the hash value calculated by the anti-counterfeiting center according to the random number through the hash algorithm.

[0037] HASH = HMAC k (random)

[0038] 2. The product manufacturers respectively scan the consumption information code and the anti-counterfeiting information code, and at the same time collect the product information. In the first embodiment of the present invention, the product information includes product name, model, batch or serial number, production date, expiration date, etc. Subsequently, the product manufacturers use a digital signature device to sign the hash value of the information code and the product information using the Dilithium algorithm to obtain a signature value. Furthermore, the product information, the hash value of the anti-counterfeiting information code, the hash value of the consumption information code, the signature value, and the issuer information are formed into a product voucher. Through this step, the product manufacturers form the unique product voucher of the product in the manner of a standard digital certificate.

[0039] The product voucher can be encoded using ASN.1, and the specific format is as follows:

[0040]

[0041] 3. The product manufacturers send the formed product voucher to the anti-counterfeiting center, and the anti-counterfeiting center verifies the product voucher and checks the correctness of the information code and the product voucher.

[0042] Use the password verification code to verify the correctness of the information code, that is, check whether the hash value in the information code is correct. Scan the information code and send the scanned information code to the anti-counterfeiting center. The anti-counterfeiting center verifies the hash value of the information code. If it exists, the verification is successful; if it does not exist, an error is returned.

[0043] Use the method of digital signature verification to verify the correctness of the product voucher. First, verify the compliance of the certificate. According to the issuer information in the product voucher, find the digital certificate of the digital signature device, use the root certificate to verify the digital certificate of the digital signature device, and further use the digital certificate of the digital signature device to verify the product voucher. Secondly, verify the correctness of the signature value in the product voucher and use the digital certificate verification technology to verify the signature.

[0044] If the above correctness passes the verification, the product voucher is stored in the database of the anti-counterfeiting center; if it is incorrect, an error is returned.

[0045] In the first embodiment of the present invention, after the above correctness verification, when the product manufacturers package the product, they set the anti-counterfeiting information code on the outer packaging of the product and set the consumption information code inside the product packaging, and package the product to ensure that the consumption information code is not visible before the product packaging is opened.

[0046] The second embodiment of the present invention provides a product verification method containing a product voucher. In this method, the consumer will use a verification terminal, and the verification terminal can be one of an App, a small program, and an SDK. The verification terminal can transmit information with the anti-counterfeiting center, and the digital signature and verification algorithm used is the Dilithium algorithm for product verification.

[0047] 1. The consumer scans the anti-counterfeiting information code on the product outer package. The anti-counterfeiting center receives the anti-counterfeiting information code and verifies whether it is correct. If it is correct, the product voucher corresponding to the information code and the query times of the information code are sent to the consumer terminal. If it is incorrect, an error is returned.

[0048] 2. The consumer scans the anti-counterfeiting information code and uses the digital certificate of the manufacturer's signature machine to verify whether the signature of the product voucher is correct. If it is correct, calculate the hash value of the anti-counterfeiting information code and compare it with the hash value of the anti-counterfeiting information code in the product voucher. If the values are equal, the anti-counterfeiting center sends the product voucher corresponding to the anti-counterfeiting information code to the verification terminal; display the product information and prompt the consumer to scan the consumption information code for further verification. If it is incorrect, an error is returned.

[0049] 3. The consumer opens the product package, scans the product consumption information code, and sends the consumption information code and the consumer ID to the anti-counterfeiting center. The anti-counterfeiting center checks the consumer ID corresponding to the consumption information code in the database. If it is empty or equal to the received consumer ID, the consumer ID is recorded in the database, and the corresponding product voucher is sent to the consumer again; if it is not equal, an error is returned.

[0050] 4. The consumer terminal receives any product voucher and uses the digital certificate of the manufacturer's signature machine to verify whether the signature of the product voucher is correct. If it is correct, further calculate the hash value of the consumption information code and compare it with the hash value of the consumption information code in the product voucher. If the values are equal, display the product information and indicate that the product is genuine to the user, and prompt the user to press the consumption button; if the values are not equal, an error is returned.

[0051] 5. The consumer clicks the consumption button on the product voucher, and the terminal sends the consumption information code to the anti-counterfeiting center. The anti-counterfeiting center marks the product as consumed, and no one can use the anti-counterfeiting information code and the consumption information code of the product again.

Claims

1. A method for generating a product voucher, comprising: The anti-counterfeiting center generates an anti-counterfeiting information code and a consumption information code for the product; both the anti-counterfeiting information code and the consumption information code include a code identifier, a random number, and a check code; The anti-counterfeiting center issues a digital signature certificate to the digital signature device of the product manufacturer; The product manufacturer uses the digital signature device to generate the product voucher based on the anti-counterfeiting information code and the consumption information code.

2. The method according to claim 1, characterized in that, The product manufacturer uses the digital signature device containing the digital signature certificate to scan the anti-counterfeiting information code and the consumption information code, calculate the hash value, complete the digital signature in combination with the product information, and generate the product voucher.

3. The method according to claim 2, wherein The product voucher includes the product information, the hash value of the anti-counterfeiting information code, the hash value of the consumption information code, and the digital signature of the product manufacturer for the above three parts of information.

4. The method according to claim 1, wherein Both the anti-counterfeiting information code and the consumption information code contain verifiable check fields, and the product voucher is verified through digital signature technology.

5. The method according to claim 1, wherein The anti-counterfeiting information code is printed on the outer packaging of the product, the consumption information code is printed on the inner packaging of the product, and the product voucher is stored in the anti-counterfeiting center.

6. A verification method for the product voucher described in claims 1-5, comprising: Verify the anti-counterfeiting information code of the product; In response to the anti-counterfeiting information code passing the verification, the anti-counterfeiting center sends the product voucher corresponding to the anti-counterfeiting information code to the verification terminal; Perform digital signature verification on the product voucher through the verification terminal. After the verification passes, further compare and verify the hash value of the anti-counterfeiting information code to obtain the verification result.

7. The method according to claim 6, characterized in that, After the anti-counterfeiting information code passes the verification, the anti-counterfeiting center sends the inspection times of the anti-counterfeiting information code to the verification terminal.

8. The method according to claim 6, wherein When the anti-counterfeiting center verifies the anti-counterfeiting information code, it checks whether the consumer terminal ID of the corresponding product is empty; if it is empty, it sends the product voucher to the consumer terminal and records the access times; If it is not empty, it is necessary to determine whether the verification terminal ID is consistent with the verification terminal ID stored in the database. If they are consistent, the product voucher is sent to the consumer terminal. If they are not consistent, it feedbacks "The product has been consumed by others".

9. The method according to claim 6, characterized in that, Further verify the consumption information code corresponding to the anti-counterfeiting information code; In response to the consumption information code passing the verification, the anti-counterfeiting center sends the product voucher corresponding to the consumption information code to the verification terminal; Perform digital signature verification on the product voucher through the verification terminal. After the verification is correct, further compare and verify the hash value of the consumption information code to complete the product verification.

10. The method according to claim 9, characterized in that When the verification terminal verifies the consumption information code, it sends the consumer terminal ID to the anti-counterfeiting center, and the anti-counterfeiting center stores the terminal ID in the product voucher data entry corresponding to this consumption information code.

11. The method according to claim 10, wherein When the anti-counterfeiting center verifies the consumption information code, it checks whether the consumer terminal ID of the corresponding product is empty. If it is empty, it sends the product voucher to the consumer terminal and records the terminal ID; If it is not empty, it is necessary to determine whether the verification terminal ID is consistent with the verification terminal ID stored in the database. If they are consistent, the product voucher is sent to the consumer terminal. If they are not consistent, it feedbacks "The product has been consumed by others".

12. The method according to claim 1, wherein The digital signature and verification algorithms used by the anti-counterfeiting center, the digital signature device of the product manufacturer, and the verification terminal are the SM2 algorithm; the hash algorithm is the SM3 algorithm; the information code is in the form of a QR code; the consumer terminal verification module is an App software, a mini-program or an SDK of a smart phone.

13. The method according to claim 1, wherein The digital signature and verification algorithms used by the anti-counterfeiting center, the digital signature device of the product manufacturer, and the verification terminal are the Dilithium algorithm.

Images