Passive encryption display label and protection method thereof
By designing a passive encrypted display tag and utilizing NFC energy harvesting and a secure main control chip to control the e-ink screen display, the high maintenance cost and insufficient security of existing electronic tags are solved, achieving efficient and secure information display and anti-counterfeiting functions.
Patent Information
- Application Number
- CN202511057651.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-30
- Publication Date
- 2025-11-14
AI Technical Summary
Existing electronic tags rely on battery power, resulting in high maintenance costs. Furthermore, passive tags have insufficient energy harvesting efficiency, making it difficult to support complex information processing and display refresh, and their security is insufficient, making it difficult to meet the application requirements of high-security scenarios.
It adopts a passive encrypted display tag, integrating an NFC energy harvesting module, an e-ink screen, and a secure main control chip. It obtains energy through NFC communication to achieve battery-free operation. The secure main control chip controls the e-ink screen to display preset information and switch anti-counterfeiting information via encrypted commands. Combined with an energy monitoring unit and a self-destruct execution unit, it ensures energy utilization efficiency and security.
It achieves battery-free operation, reduces maintenance costs, improves the convenience of information display and anti-counterfeiting security, ensures that the label can reliably perform decryption and display switching when the energy is sufficient, prevents unauthorized access, and permanently invalidates after a single verification, eliminating the risk of secondary counterfeiting.
Abstract
Description
Technical Field
[0001] This invention belongs to the field of anti-counterfeiting labels, specifically, it relates to a passive encrypted display label and its protection method. Background Technology
[0002] In numerous fields such as product anti-counterfeiting, logistics tracking, asset management, and document identification, electronic tags have become a key component of modern information management systems due to their core functions of information storage and visualization. With the rapid development of IoT technology, the market has placed higher demands on the energy efficiency, security, and dynamic interactivity of electronic tags.
[0003] Existing electronic tags still have certain limitations in practical applications: some tags rely on built-in batteries for power, which can ensure continuous operation, but increases size and cost and requires regular maintenance, which goes against the trend of lightweighting and environmental protection; passive tags, although they do not require batteries, often have insufficient energy harvesting efficiency, making it difficult to support complex information processing and display refresh.
[0004] For example, Chinese patent CN115662271A discloses an RFID e-ink screen tag, relating to the field of electronic tag technology. It solves the problems of tag failure due to poor battery contact and battery mounting plate detachment during use. The RFID e-ink screen tag includes a tag shell with a side groove on one side and a rear groove on the rear side. Its technical solution relies on battery power, which fails to address the issue of regular maintenance. Furthermore, traditional tags display static content, lacking a dynamic switching mechanism based on security verification, making information easily copied and counterfeited, thus requiring improved security. These problems are particularly prominent in high-security scenarios, hindering the in-depth application of electronic tags in anti-counterfeiting and traceability fields.
[0005] In view of the above, this application is hereby submitted. Summary of the Invention
[0006] The technical problem to be solved by this invention is to overcome the shortcomings of existing technologies and provide a passive encrypted display tag. This invention is achieved through the following technical solution:
[0007] A passive encrypted display tag includes a tag body, wherein the tag body is provided with:
[0008] An NFC energy harvesting module is used to harvest working energy during communication between the tag and an external NFC device;
[0009] E-ink screens are used to visually display information.
[0010] The security control chip is connected to the energy harvesting module and the e-ink screen;
[0011] The security main control chip is configured as follows:
[0012] Control the e-ink screen to display preset information when there is no NFC communication;
[0013] After receiving the encryption command via NFC communication, it performs the decryption operation and controls the e-ink screen to switch to display anti-counterfeiting information.
[0014] Preferably, the energy harvesting module includes:
[0015] Radio frequency energy conversion circuit is used to capture the electromagnetic field generated by NFC radio frequency and convert it into electrical energy;
[0016] Energy storage unit, used to store electrical energy converted by radio frequency energy conversion circuit;
[0017] The energy monitoring unit is used to activate the safety main control chip when the stored energy reaches a predetermined threshold.
[0018] Preferably, the energy storage unit is a capacitor with a capacity configured to support at least the energy storage required for a single e-ink screen refresh operation.
[0019] Preferably, the security master control chip is configured to: after a predetermined time interval following the loss of NFC communication, control the electronic ink screen to automatically resume displaying the preset false information.
[0020] Preferably, the security master control chip is configured to self-destruct after a single verification: after the NFC communication disappears, the display content of the e-ink screen is fixed, and the security master control chip is permanently disabled.
[0021] Preferably, the tag body is further provided with a self-destruct execution unit, which is used to perform a secure destruction operation in response to the self-destruct signal of the security master control chip.
[0022] Preferably, the secure destruction operation includes at least one of the following:
[0023] Erase the stored data in the security controller chip;
[0024] Control the e-ink screen to display preset destructive patterns;
[0025] Permanently disable the decryption function of the security controller chip.
[0026] Preferably, the permanent disable operation is achieved by blowing the physical fuse inside the security master control chip.
[0027] Preferably, the preset information includes at least one of the following: manufacturing date, whether anti-counterfeiting verification has been performed, number of verifications, and whether a certificate is stored.
[0028] And / or, the anti-counterfeiting information includes at least one of verification time, number of verifications, anti-counterfeiting verification mark, and certificate of authenticity mark.
[0029] The present invention also provides a protection method for a passive encrypted display tag, the protection method being applied to a passive encrypted display tag as described above, comprising:
[0030] Power is supplied to the tag via NFC communication;
[0031] Send encrypted display instructions to the tag;
[0032] After the tag completes decryption and verification, it switches to the content displayed on the e-ink screen.
[0033] After NFC communication is removed, the tag automatically returns to its original display state;
[0034] Alternatively, the tag can permanently display anti-counterfeiting information after NFC communication is removed.
[0035] Compared with the prior art, the beneficial effects of the present invention are:
[0036] 1. The passive encrypted display tag achieves battery-free operation through NFC energy harvesting, eliminating the need for additional power supply, reducing maintenance costs and improving environmental adaptability; through a secure main control chip, it achieves dynamic control by displaying preset information when there is no communication and switching to display anti-counterfeiting information after receiving an encrypted command. This ensures both the convenience of information display and prevents unauthorized access through an encrypted verification mechanism, significantly improving the tag's anti-counterfeiting security and information controllability.
[0037] 2. The radio frequency energy conversion circuit of the energy harvesting module can efficiently capture NFC electromagnetic field energy, the energy storage unit realizes energy storage, and the energy monitoring unit ensures that the security main control chip is activated only when the energy is sufficient, avoiding energy waste and improving energy utilization efficiency; at the same time, it ensures stable power supply to the tag during NFC communication, ensuring reliable execution of key operations such as decryption and display switching.
[0038] 3. The energy storage unit uses a capacitor with a capacity configuration that meets the refresh requirements of a single e-ink screen. This ensures that the label can reliably switch the displayed content after energy collection. Compared with other energy storage components (such as batteries), it has advantages such as small size, low cost, long life, and no environmental pollution, making it more suitable for the miniaturization and low-cost design of passive labels. Detailed Implementation
[0039] The present invention will be further described and illustrated below with reference to embodiments.
[0040] Example 1
[0041] This embodiment provides a passive encrypted display tag, including a tag body, on which an NFC energy harvesting module, an electronic ink screen, and a security master control chip are integrated.
[0042] The NFC energy harvesting module features an antenna with a 15mm x 20mm rectangular spiral structure etched onto a copper foil layer on the tag substrate. This antenna is used to harvest operating energy during communication between the tag and an external NFC device.
[0043] E-ink screen, at least 2 inches, with a resolution of at least 250×122 pixels, supporting black and white display, used for visual information display;
[0044] The security control chip connects the energy harvesting module and the e-ink screen. Specifically, it can use a chip architecture dedicated to NFC, such as the NT3H1201W0FTTJ chip.
[0045] The operating logic of the security main control chip includes:
[0046] Control the e-ink screen to display preset information when there is no NFC communication;
[0047] After receiving the encryption command via NFC communication, it performs the decryption operation and controls the e-ink screen to switch to display anti-counterfeiting information.
[0048] This passive encrypted display tag achieves battery-free operation through NFC energy harvesting, eliminating the need for additional power supply, reducing maintenance costs and improving environmental adaptability. Through a secure main control chip, it dynamically controls the display of preset information when there is no communication and switches to display anti-counterfeiting information after receiving an encrypted command. This ensures both the convenience of information display and prevents unauthorized access through an encrypted verification mechanism, significantly improving the tag's anti-counterfeiting security and information controllability.
[0049] Example 2
[0050] Based on Embodiment 1, this embodiment focuses on optimizing the structure and performance of the NFC energy harvesting module, which is composed of the following units working together:
[0051] The radio frequency energy conversion circuit is used to capture the electromagnetic field generated by NFC radio frequency (its core is an LC resonant circuit composed of a 12-turn coil (0.08mm wire diameter) and a matching capacitor (10pF ceramic capacitor) and convert it into electrical energy.
[0052] The energy storage unit (which can be a MAXWELL 100mF / 5.5V supercapacitor) is used to store the electrical energy converted by the radio frequency energy conversion circuit.
[0053] An energy monitoring unit (which may specifically use a voltage comparator) is used to activate the safety control chip when the stored energy reaches a predetermined threshold.
[0054] The radio frequency energy conversion circuit of the energy harvesting module can efficiently capture NFC electromagnetic field energy, the energy storage unit realizes energy storage, and the energy monitoring unit ensures that the security main control chip is activated only when the energy is sufficient, avoiding energy waste and improving energy utilization efficiency; at the same time, it ensures stable power supply to the tag during NFC communication, ensuring reliable execution of key operations such as decryption and display switching.
[0055] Specifically, the energy harvesting module consists of an RF receiving unit, an energy conversion unit, an energy storage unit, and an energy monitoring unit. The RF receiving unit adopts a printed antenna design and operates in the 13.56MHz NFC standard frequency band. The antenna improves the capture efficiency of electromagnetic fields generated by external NFC devices through optimized coil turns and wire diameter parameters, ensuring stable energy reception within a communication distance of 3-10cm.
[0056] The energy conversion unit includes a rectifier circuit and a voltage regulator circuit. The rectifier circuit adopts a bridge rectifier structure to convert the alternating radio frequency signal received by the antenna into direct current. The voltage regulator circuit integrates a low dropout linear regulator to stabilize the rectified voltage at 3.3V, providing a stable power supply for subsequent modules.
[0057] Preferably, the energy storage unit is a capacitor with a capacity configured to support at least the energy storage required for a single e-ink screen refresh operation.
[0058] The energy storage unit uses a capacitor with a capacity configuration that meets the requirements of a single e-ink screen refresh. This ensures that the tag can reliably switch display content after energy harvesting, and compared to other energy storage components (such as batteries), it has advantages such as small size, low cost, long lifespan, and no environmental pollution. It is also more suitable for the miniaturization and low-cost design of passive tags. The capacity is configured according to the power consumption of the e-ink screen per refresh (usually 10-50mF). It can quickly store the electrical energy output by the energy conversion unit and release energy when the external NFC field is interrupted, ensuring that the security control chip can complete operations such as display switching.
[0059] The energy monitoring unit consists of a voltage comparator and a logic control circuit (the logic control circuit is connected to the INT pin of the safety main control chip). It monitors the energy storage voltage of the supercapacitor in real time. When the voltage reaches a preset threshold (e.g., 2.8V), a control signal is triggered to activate the safety main control chip, ensuring that it starts working with sufficient energy and avoiding operational failure due to insufficient energy. Simultaneously, the unit cuts off the output when the energy storage voltage falls below the threshold to prevent over-discharge from affecting the lifespan of the energy storage unit.
[0060] Example 3
[0061] Based on Embodiment 1 or Embodiment 2, the security main control chip is configured to: after NFC communication disappears, control the e-ink screen to automatically resume displaying the preset fake information after a predetermined time interval. For example: after the mobile phone touches the tag with NFC, the e-ink screen temporarily displays anti-counterfeiting information (lasting 3 seconds), and automatically switches back to the preset state of "Unverified | Factory Date: 2024-06-01" after the mobile phone is removed.
[0062] After the NFC communication field disappears, the e-ink screen automatically resumes displaying the preset information, which can prevent anti-counterfeiting information from being exposed for a long time without authorization and reduce the risk of information leakage. At the same time, the state can be reset without manual intervention, which improves the convenience and security of tag use, and is especially suitable for scenarios such as counter displays that require temporary display of sensitive information.
[0063] More preferably, the security control chip is configured to self-destruct after a single verification: after NFC communication disappears, the content displayed on the e-ink screen remains fixed, and the security control chip permanently fails. For example, after completing one verification, the e-ink screen locks and displays "Verified 1 time | Time: 2024-06-10 15:30", and can no longer respond to any NFC commands.
[0064] The self-destruct design after a single verification means that the label becomes permanently invalid and the displayed content is fixed after a valid verification is completed. This effectively prevents the label from being reused or illegally copied, eliminating the risk of secondary counterfeiting from a physical perspective. It is particularly suitable for anti-counterfeiting scenarios with high security requirements (such as luxury goods and pharmaceuticals), ensuring the uniqueness and authority of the verification results.
[0065] Example 4
[0066] Based on Embodiment 3, the tag body is also provided with a self-destruct execution unit, which is used to perform a secure destruction operation in response to the self-destruct signal of the security master control chip.
[0067] The self-destruct execution unit enables the self-destruct command of the security master control chip to be executed reliably, avoiding the risk of self-destruct failure due to hardware defects, enhancing the stability and effectiveness of the self-destruct mechanism, and further ensuring the irreversibility of the tag after a single verification.
[0068] Preferably, the secure destruction operation includes at least one of the following:
[0069] Erase the stored data in the security controller chip;
[0070] Control the e-ink screen to display preset destructive patterns;
[0071] Permanently disable the decryption function of the security controller chip.
[0072] Multi-dimensional security destruction operations (erasing data, displaying destructive patterns, and disabling decryption functions) comprehensively destroy the effectiveness of the label from the data layer, display layer, and functional layer, ensuring that even if the label is physically disassembled, sensitive information cannot be recovered or functions can be reused, thus maximizing the thoroughness of anti-counterfeiting.
[0073] Example 5
[0074] Based on Embodiment 3 or Embodiment 4, the permanent disable operation is achieved by blowing the physical fuse inside the security controller chip. The permanent disable operation is achieved by changing the physical state of the conductive structure inside the security controller chip, including but not limited to:
[0075] A fusible conductor is installed in the power supply path, which will cause a permanent open circuit or short circuit when a current exceeding the rated value is applied.
[0076] Polysilicon fuses manufactured using semiconductor processes cannot restore chip functionality once they have melted.
[0077] The energy required for the circuit breaker operation is provided by the energy storage unit, and the trigger signal is generated by the safety logic unit.
[0078] Permanently disabling the device by blowing a physical fuse is more irreversible and resistant to cracking than software-based disabling methods. It cannot be repaired or bypassed by technical means, ensuring the permanent failure of the security control chip from a hardware physical level and further enhancing the reliability of the self-destruct mechanism.
[0079] Specifically, in terms of physical structure, the security master control chip integrates a set of physical fuses made of metal, typically made of copper, aluminum, tin, or bismuth alloys, forming a thin filament structure with a diameter on the micrometer level. These fuses are connected in series with key modules such as the key storage unit and decryption circuit within the chip. When the security master control chip triggers a permanent disable command, its internal fuse drive circuit outputs a preset high-current pulse (typically tens of milliwatts, lasting tens of microseconds). When this current flows through the physical fuse, the Joule heating effect causes the fuse temperature to rise sharply above its melting point, resulting in the fuse melting and creating a physical circuit break.
[0080] Furthermore, the essence of physical fusing is to concentrate energy to bring the fuse material to its melting point and cause it to break. Its key parameter is the "fusing energy" (unit: joule, J), calculated using the following formula:
[0081] Fusher energy Q = power P × time t;
[0082] Or, using Joule's law: Q = I 2 Rt (where I is the current, R is the fuse resistance, and t is the energizing time).
[0083] The NFC transmit power of active devices is typically 10-50 milliwatts (mW) (1mW = 0.001W).
[0084] Passive devices (such as tags) obtain energy through electromagnetic coupling. The actual usable power depends on the distance (coupling efficiency is highest when the near field is <10cm), and is usually 5-30mW (sufficient to drive small circuits).
[0085] NFC communication typically takes milliseconds for a single interaction, such as approximately 10-1000ms for a single data transfer (the energy transfer time can also be extended to achieve circuit breaking).
[0086] The specific material can utilize extremely fine metal wires with a localized necking design to reduce the heat dissipation area (preventing heat dissipation) while increasing resistance (increased R, facilitating energy concentration). A capacitor can also be added for energy storage, storing enough charge for a single physical fuse failure.
[0087] Here is a reference example derived from an experiment, using typical parameters for estimation:
[0088] Assuming the fuse is a 0.1mm diameter solder wire (1mm length):
[0089] Resistance R≈0.1Ω (the resistance of a fine wire can be adjusted by the material and size);
[0090] According to the experiment, the energy Q required for the improved tin wire to melt is about 4-8 mJ (the specific energy is obtained by calculating the extreme value based on the current and voltage applied to the test bench, and is specifically calculated by specific heat capacity, mass and melting point. The specific value of melting can be lower with design optimization).
[0091] Power provided by NFC:
[0092] If a power supply of 30mW (0.03W) is used for a duration of 240ms (0.24 seconds), the energy Q = 0.03W × 0.24s = 0.0072J = 7.2mJ, which exceeds the energy required by the fuse (with the power remaining constant, increasing the time can easily meet the energy requirements of the fuse).
[0093] After the fuse blows, critical modules connected in series with the fuse (such as the key reading circuit and the decryption algorithm execution unit) become permanently disabled due to the loss of power or interruption of the signal transmission path. This process is irreversible, ensuring from a hardware perspective that the security main control chip can no longer perform core functions such as decryption, thus achieving a complete and permanent disablement. (Physical circuit fuse blowing is an existing technology (such as the early mobile phone ROOT fuse blowing mechanism, etc.), which will not be elaborated on here.)
[0094] Example 6
[0095] Based on Embodiment 1, the preset information includes at least one of the following: manufacturing time, whether anti-counterfeiting verification has been performed, number of verifications, and whether a certificate is stored.
[0096] And / or, the anti-counterfeiting information includes at least one of verification time, number of verifications, anti-counterfeiting verification mark, and certificate of authenticity mark.
[0097] The preset information and anti-counterfeiting information include specific details such as manufacturing time, verification status, and number of verifications, allowing users to intuitively understand the label's lifecycle and verification history, thus improving information transparency and traceability. At the same time, clear status indicators (such as "verified" and "certificate stored") make it easy for users to quickly determine the authenticity and usage status of the label, enhancing the practicality of anti-counterfeiting measures.
[0098] Furthermore, the evidence storage operation can involve a mobile terminal uploading the hash value of the verification data to a blockchain evidence storage platform to generate a unique identifier for users to query historical records.
[0099] Example 7
[0100] Based on the above embodiments, this embodiment also provides a protection method for a passive encrypted display tag. The protection method is applied to a passive encrypted display tag as described in Embodiment 1, and includes:
[0101] Power is supplied to the tag via NFC communication;
[0102] Send encrypted display instructions to the tag;
[0103] After the tag completes decryption and verification, it switches to the content displayed on the e-ink screen.
[0104] After NFC communication is removed, the tag automatically returns to its original display state;
[0105] Alternatively, the tag can permanently display anti-counterfeiting information after NFC communication is removed.
[0106] The protection method ensures the security of information interaction through a process of NFC power supply, encrypted command transmission, decryption verification, and display switching; it also provides two modes: "automatic restoration to original state" and "permanent display of anti-counterfeiting information".
[0107] It can be flexibly adapted to different application scenarios (such as temporary verification and one-time verification), taking into account both ease of use and diverse security requirements.
[0108] Furthermore, after NFC communication is removed, a physical fuse is performed to ensure irreversibility. The screen can also display the words "Fuse-out" to remind the user of the tag's uniqueness.
Claims
1. A passive encrypted display tag, characterized in that, Includes a label body, on which are provided: An NFC energy harvesting module is used to harvest working energy during communication between the tag and an external NFC device; E-ink screens are used to visually display information. The security control chip is connected to the energy harvesting module and the e-ink screen; The security main control chip is configured as follows: Control the e-ink screen to display preset information when there is no NFC communication; After receiving the encryption command via NFC communication, it performs the decryption operation and controls the e-ink screen to switch to display anti-counterfeiting information.
2. The passive encrypted display tag according to claim 1, characterized in that, The energy harvesting module includes: Radio frequency energy conversion circuit is used to capture the electromagnetic field generated by NFC radio frequency and convert it into electrical energy; Energy storage unit, used to store electrical energy converted by radio frequency energy conversion circuit; The energy monitoring unit is used to activate the safety main control chip when the stored energy reaches a predetermined threshold.
3. The passive encrypted display tag according to claim 2, characterized in that, The energy storage unit is a capacitor, and its capacity is configured to support the energy storage required for at least one e-ink screen refresh operation.
4. The passive encrypted display tag according to claim 1, characterized in that, The security control chip is configured to automatically restore the display of the preset false information on the e-ink screen after a predetermined time interval following the disappearance of NFC communication.
5. A passive encrypted display tag according to claim 1, characterized in that, The security control chip is configured to self-destruct after a single verification: after the NFC communication disappears, the content displayed on the e-ink screen is fixed, and the security control chip is permanently disabled.
6. A passive encrypted display tag according to claim 5, characterized in that, The tag body is also equipped with a self-destruct execution unit, which is used to perform a secure destruction operation in response to the self-destruct signal of the security main control chip.
7. A passive encrypted display tag according to claim 6, characterized in that, The secure destruction operation includes at least one of the following: Erase the stored data in the security controller chip; Control the e-ink screen to display preset destructive patterns; Permanently disable the decryption function of the security controller chip.
8. A passive encrypted display tag according to any one of claims 5-7, characterized in that, The permanent disable operation is achieved by blowing the physical fuse inside the security master control chip.
9. A passive encrypted display tag according to claim 1, characterized in that, The preset information includes at least one of the following: manufacturing time, whether anti-counterfeiting verification has been performed, number of verifications, and whether a certificate is stored. And / or, the anti-counterfeiting information includes at least one of verification time, number of verifications, anti-counterfeiting verification mark, and certificate of authenticity mark.
10. A method for protecting a passive encrypted display tag, characterized in that, The protection method, applied in a passive encrypted display tag as described in any one of claims 1-9, includes: Power is supplied to the tag via NFC communication; Send encrypted display instructions to the tag; After the tag completes decryption and verification, it switches to the content displayed on the e-ink screen. After NFC communication is removed, the tag automatically returns to its original display state; Alternatively, the tag can permanently display anti-counterfeiting information after NFC communication is removed.
Citation Information
Patent Citations
RFID electronic ink screen label
CN115662271A