Trusted verification system for NFC anti-counterfeiting seal

Abstract

The embodiment of the invention relates to a credible verification system for an NFC (Near Field Communication) anti-counterfeiting seal. The system comprises the NFC anti-counterfeiting seal, a product labeling device, an encryption machine, a client and a verification server. The product labeling equipment is used for carrying out verification interface implantation and trusted key loading on the NFC anti-counterfeiting seal in combination with the encryption machine; the client is used for obtaining anti-counterfeiting verification data from the seal and the product where the seal is located and sending the anti-counterfeiting verification data and the identification of the product to be checked to the verification server, and displaying the anti-counterfeiting verification state sent back by the verification server; and the verification server is used for performing seal credibility verification on the anti-counterfeiting verification data through the encryption machine and performing product anti-counterfeiting verification based on a credibility verification result, the to-be-checked product identifier and the product binding database. According to the system, the anti-counterfeiting potential safety hazard caused by the lack of trusted protection of the seal can be solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, in particular to a trusted verification system of NFC anti-counterfeiting seal. BACKGROUND

[0002] With the application and development of Near Field Communication (NFC) tag technology, in recent years, there are many new types of NFC tags on the market. One of them is an NFC tag with an external detection line. This new type of NFC tag can identify the state (connected or disconnected) of the detection line. A typical application scenario of this new type of NFC tag is: it is used as a packaging seal and pasted on the opening of the product packaging. Before the product packaging is opened, the detection line is not torn, and the state of the detection line is connected. After the product packaging is opened, the detection line is torn, and the state of the detection line is disconnected. The application form of the above-mentioned new type of NFC tag in this specific scenario is called NFC anti-counterfeiting seal.

[0003] The conventional technical solution for the application of NFC anti-counterfeiting seal in product anti-counterfeiting scenarios is: 1) paste the NFC anti-counterfeiting seal on the product seal and ensure that the detection line can be torn when the product is opened; 2) before the product is shipped, bind and save the unique user identification (UID) on the NFC anti-counterfeiting seal with the product identification of the product it is in; 3) after the product is shipped, the customer reads the UID and the detection line state from the seal through an NFC tag reading device (such as an NFC reader, an NFC card reader, etc.), and reads the product identification from the product packaging through a product identification recognition device (such as a barcode / QR code recognizer), and transmits the UID+detection line state+product identification as verification data to a remote server for anti-counterfeiting verification; 4) the remote server takes the binding relationship between the UID and the product identification and the default detection line state (for example, connected) as the verification standard, and checks the verification data based on the verification standard. If the check is passed, it is considered that the anti-counterfeiting verification is passed, otherwise it is considered that the anti-counterfeiting verification fails.

[0004] In actual application, we found that this conventional anti-counterfeiting scheme has a security risk: lack of trusted protection of the seal. In this case, if the counterfeit product manufacturer copies a batch of fake seals with real UIDs, a batch of fake packaging with real product identification, and a batch of counterfeit products through fake packaging + fake seals, then the verification data obtained by the buyer of the counterfeit product on the client side can also pass the anti-counterfeiting verification of the remote server. To solve this problem, the corresponding trusted verification means need to be added to the NFC anti-counterfeiting seal, and how to perform trusted verification on the NFC anti-counterfeiting seal is also the technical problem to be solved by the present application. SUMMARY

[0005] The present application aims at the defects of the prior art, and provides a trusted verification system of an NFC anti-fake seal, which comprises an NFC anti-fake seal, a product sealing device, an encryption machine, a client and a verification server, wherein the NFC anti-fake seal comprises an NFC tag chip and a detection line. The product sealing device is used for product sealing of the NFC anti-fake seal, and performs verification interface implantation and trusted key loading processing on the NFC anti-fake seal in combination with the encryption machine when the sealing is successful, and updates a product binding database on the verification server based on a processing result. The client is used for obtaining anti-fake verification data and an anti-fake verification interface through the NFC anti-fake seal, obtaining a product identification to be checked through product packaging, and sending the anti-fake verification data and the product identification to be checked to an address corresponding to the anti-fake verification interface; and displaying an anti-fake verification state returned by a current address. The verification server is used for real-time monitoring of a URL address corresponding to each verification interface; and when a set of anti-fake verification data and a product identification to be checked are received at any address, performing seal trusted verification on the anti-fake verification data through the encryption machine, and performing product anti-fake verification based on a trusted verification result, the product identification to be checked and the product binding database. The system of the present application adds a trusted verification process for the NFC anti-fake seal in the process of anti-fake verification, and adds a corresponding key management process (key generation, key loading and key verification) for the trusted verification process. The system of the present application can solve the security risks caused by the lack of trusted protection of the seal in the conventional anti-fake scheme.

[0006] To achieve the above object, the embodiment of the present application provides a trusted verification system of an NFC anti-fake seal, which comprises an NFC anti-fake seal, a product sealing device, an encryption machine, a client and a verification server.

[0007] The NFC anti-fake seal is connected with the product sealing device and the client through an NFC communication mode; the product sealing device is connected with the encryption machine and the verification server; and the verification server is connected with the encryption machine and the client.

[0008] The NFC anti-fake seal comprises an NFC tag chip and a detection line.

[0009] The product sealing device is used for pasting one NFC anti-fake seal to a corresponding product, and ensures that the detection line of the NFC anti-fake seal is pasted at an opening position of the current product; and after the pasting is completed, the NFC anti-fake seal is subjected to verification interface implantation and trusted key loading processing in combination with the encryption machine, and a product binding database on the verification server is updated based on a processing result.

[0010] The client is used to obtain corresponding anti-counterfeiting verification data and an anti-counterfeiting verification interface through the NFC anti-counterfeiting seal of the product opening position; obtain corresponding to-be-verified product identification through product packaging; send the anti-counterfeiting verification data and the to-be-verified product identification to the URL address corresponding to the anti-counterfeiting verification interface; and display the anti-counterfeiting verification state returned by the current URL address; the anti-counterfeiting verification interface is an internet URL address; the anti-counterfeiting verification state includes verification success and seal intact, verification success but seal damaged, and verification failure.

[0011] The check server is used to store the product binding database; the product binding database includes a plurality of first binding records; the first binding record includes a first seal identification, a first product identification, and a first verification interface; the first binding record corresponds to the NFC anti-counterfeiting seal one by one; the first verification interface is an internet URL address.

[0012] The check server is also used to monitor the URL address corresponding to each first verification interface in real time; and when a set of anti-counterfeiting verification data and to-be-verified product identification is received at any monitored URL address, perform seal trust verification on the anti-counterfeiting verification data through the encryption machine and perform product anti-counterfeiting verification based on the trust verification result, the to-be-verified product identification, and the product binding database to obtain the corresponding anti-counterfeiting verification state returned to the current URL address.

[0013] Preferably, the product sealing device is connected with the encryption machine and the check server through a wired communication mode or a wireless communication mode; the check server is connected with the encryption machine and the client through the wired communication mode or the wireless communication mode.

[0014] The wired communication mode is a communication mode for data transmission based on a USB data line, a coaxial cable line, a serial data line, a parallel data line, an optical fiber data line, or a network cable; the wireless communication mode includes a WiFi communication mode, a 2G / 3G / 4G / 5G / LTE communication mode.

[0015] Preferably, the local storage area of the NFC tag chip includes a UID storage area, a transmission key storage area, a random number storage area, a first key storage area, a second key storage area, a verification interface storage area, and a detection line storage area; the UID storage area is used to store a preset seal UID identifier; the transmission key storage area is used to store a preset seal transmission key; the random number storage area is used to store a corresponding four-byte random number; the first key storage area is used to store a corresponding first type of trusted key; the second key storage area is used to store a corresponding second type of trusted key; the verification interface storage area is used to store a corresponding anti-fake verification interface of a product where the seal is located; and the detection line state storage area is used to store a detection line state, which includes a connected state and a disconnected state.

[0016] The NFC tag chip is further configured to identify the connected / disconnected state of the detection line each time the chip is successfully reset after power-on, set the detection line state as the connected state if the detection line is in the connected state, set the detection line state as the disconnected state if the detection line is in the disconnected state, and generate a four-byte random number to reset the four-byte random number.

[0017] The NFC tag chip is further configured to return the seal UID identifier as instruction return data when receiving a UID reading instruction.

[0018] The NFC tag chip is further configured to extract a corresponding anti-fake verification interface from the interface writing instruction when receiving an interface writing instruction, write the anti-fake verification interface into the verification interface storage area, return the feedback state of the current writing operation as a corresponding current writing operation state, identify whether the current writing operation state is a success state, set the corresponding interface writing state as writing success if yes, set the corresponding interface writing state as writing failure if no, and return the interface writing state as instruction return data.

[0019] The NFC tag chip is further configured to extract a corresponding key ciphertext data from the trusted key loading instruction when receiving a trusted key loading instruction, decrypt the key ciphertext data by the seal transmission key according to a preset transmission key encryption / decryption algorithm, extract the first type of trusted key and the second type of trusted key from the decrypted plaintext, write the first type of trusted key and the second type of trusted key into the first key storage area and the second key storage area, return the feedback states of the two writing operations as corresponding two writing operation states, identify whether the two writing operation states are both success states, set the corresponding key loading state as loading success if yes, set the corresponding key loading state as loading failure if no, and return the key loading state as instruction return data; the transmission key encryption / decryption algorithm includes a national cryptographic SM1 algorithm, a national cryptographic SM4 algorithm, and an AES algorithm.

[0020] The NFC tag chip is also used to, when receiving a seal verification instruction, encrypt the four-byte random number using the second-type trusted key to obtain corresponding random ciphertext data according to a PRINTcipher encryption and decryption algorithm; and to form a corresponding anti-counterfeiting verification data by the anti-counterfeiting verification interface, the seal UID identifier, the first-type trusted key, the four-byte random number, the random ciphertext data and the detection line state; and to return the anti-counterfeiting verification data as instruction return data.

[0021] Preferably, the product sealing equipment is specifically used for, when the NFC anti-counterfeiting seal is verified by the encryption machine and the trusted key is loaded and processed, and the product binding database on the verification server is updated based on the processing result:

[0022] powering on and resetting the NFC tag chip of the NFC anti-counterfeiting seal through an NFC communication mode;

[0023] and after the NFC tag chip is powered on and reset successfully, sending a UID reading instruction to the NFC tag chip; receiving the seal UID identifier returned by the NFC tag chip; and reading a product identifier from the product packaging of the product where the current NFC anti-counterfeiting seal is located as a corresponding seal product identifier through an embedded product identifier recognition device;

[0024] and based on a preset URL address setting rule, setting a URL address according to the seal UID identifier and the seal product identifier and taking the obtained URL address as a corresponding anti-counterfeiting verification interface; sending an interface writing instruction carrying the anti-counterfeiting verification interface to the NFC tag chip; and receiving an interface writing state returned by the NFC tag chip;

[0025] and when the interface writing state is writing success, sending a trusted key generation instruction carrying the seal UID identifier to the encryption machine; receiving key ciphertext data returned by the encryption machine; sending a trusted key loading instruction carrying the key ciphertext data to the NFC tag chip; and receiving a key loading state returned by the NFC tag chip;

[0026] and when the key loading state is loading success, confirming whether a first binding record in which the first seal identifier matches the current seal UID identifier exists in the product binding database; and when it is confirmed that the record does not exist, adding a corresponding first binding record in which the first seal identifier, the first product identifier and the first verification interface are composed of the current seal UID identifier, the seal product identifier and the anti-counterfeiting verification interface to the product binding database.

[0027] Preferably, the encryption machine is configured to locally store a transmission key library and a trusted key library; the transmission key library comprises a plurality of first records; each of the first records comprises a first UID identifier and a first transmission key; the trusted key library comprises a plurality of second records; each of the second records comprises a second UID identifier, a first trusted key, and a second trusted key; before the product labeling device performs product pasting on any of the NFC anti-counterfeit seals, the transmission key library is not empty, the trusted key library is empty, and each of the first records of the transmission key library corresponds to one of the NFC anti-counterfeit seals, and the first UID identifier and the first transmission key of each of the first records are respectively the seal UID identifier and the seal transmission key of the corresponding NFC anti-counterfeit seal;

[0028] The encryption machine is further configured to, when receiving a trusted key generation instruction sent by the product labeling device, extract the corresponding seal UID identifier from the trusted key generation instruction as a current UID identifier; extract the first transmission key of the first record in the transmission key library corresponding to the current UID identifier as a current transmission key; and when the current transmission key is not empty, encrypt the current UID identifier by the current transmission key according to a preset first encryption and decryption algorithm, and take the encrypted ciphertext as the first trusted key; randomly generate a 10-byte second trusted key; when it is confirmed that the second record in the trusted key library corresponding to the current UID identifier does not exist, take the current UID identifier as a corresponding second UID identifier, and add a corresponding second record composed of the current second UID identifier, the first trusted key, and the second trusted key to the trusted key library; and when the current record is successfully added, take a corresponding to-be-encrypted plaintext composed of the current first trusted key and the second trusted key, encrypt the current to-be-encrypted plaintext according to a preset transmission key encryption and decryption algorithm by the current transmission key, and take the encrypted ciphertext as the key ciphertext data to send back to the product labeling device; the first encryption and decryption algorithm comprises a national standard SM1 algorithm, a national standard SM4 algorithm, and an AES algorithm.

[0029] The encryption machine is also used to extract the corresponding seal UID identifier, the first type of trusted key, the four-byte random number and the random ciphertext data from the trusted verification instruction as the corresponding current UID identifier, the current first type of key, the current random number and the current ciphertext data when receiving the trusted verification instruction sent by the verification server; and match the second record in the trusted key library with the second UID identifier and the current UID identifier as the corresponding current matching record; and identify whether the first type of trusted key of the current matching record matches the current first type of key, if matching, set the corresponding first key verification state as success, if not matching, set the corresponding first key verification state as failure; and decrypt the current ciphertext data by the second type of trusted key of the current matching record according to the PRINTcipher encryption and decryption algorithm to obtain the corresponding decrypted random number; and identify whether the decrypted random number matches the current random number, if matching, set the corresponding second key verification state as success, if not matching, set the corresponding second key verification state as failure; and identify whether the first key verification state and the second key verification state are both success, if yes, set the corresponding trusted verification result as verification success, if not, set the corresponding trusted verification result as verification failure; and send the trusted verification result to the verification server.

[0030] Preferably, the client is specifically used to obtain corresponding anti-fake verification data and an anti-fake verification interface of the NFC anti-fake seal through the product opening position, and specifically used to: power on and reset the NFC tag chip of the NFC anti-fake seal through an NFC communication mode; and after the NFC tag chip is successfully power on and reset, send a seal verification instruction to the NFC tag chip; and receive the anti-fake verification data returned by the NFC tag chip; and extract the corresponding anti-fake verification interface from the anti-fake verification data.

[0031] Preferably, the client is specifically used to obtain corresponding anti-fake verification data and an anti-fake verification interface of the NFC anti-fake seal through the product opening position, and specifically used to: power on and reset the NFC tag chip of the NFC anti-fake seal through an NFC communication mode; and after the NFC tag chip is successfully power on and reset, send a seal verification instruction to the NFC tag chip; and receive the anti-fake verification data returned by the NFC tag chip; and extract the corresponding anti-fake verification interface from the anti-fake verification data.

[0032] Preferably, the verification server is specifically used to, when the product anti-fake verification is performed based on the trusted verification result, the product identifier to be investigated and the product binding database after the anti-fake seal trusted verification of the anti-fake verification data is performed by the encryption machine, and the corresponding anti-fake verification state is sent to the current URL address:

[0033] extracting the corresponding anti-counterfeit verification interface, seal UID identification, a class of trusted keys, four-byte random number, random ciphertext data and detection line state from the anti-counterfeit verification data; and sending trusted verification instructions carrying the seal UID identification, the class of trusted keys, the four-byte random number and the random ciphertext data to the encryptor; and receiving the trusted verification result sent back by the encryptor;

[0034] and identifying the trusted verification result;

[0035] If the trusted verification result is verification failure, set the corresponding anti-counterfeit verification state to verification failure;

[0036] If the trusted verification result is verification success, match the first seal identification with the seal UID identification, the first product identification with the product to be checked identification, and the first verification interface with the anti-counterfeit verification interface in the product binding database, and take the first binding record as the corresponding current matching record. Identify whether the current matching record is empty. If the current matching record is empty, set the corresponding anti-counterfeit verification state to verification failure. If the current matching record is not empty, identify whether the detection line state is a connected state. If yes, set the corresponding anti-counterfeit verification state to verification success and seal intact. If not, set the corresponding anti-counterfeit verification state to verification success but seal damaged.

[0037] and send the obtained anti-counterfeit verification state back to the current URL address.

[0038] The embodiment of the present application provides a trusted verification system of an NFC anti-fake seal, which comprises an NFC anti-fake seal, a product sealing device, an encryption machine, a client and a verification server, wherein the NFC anti-fake seal comprises an NFC tag chip and a detection line. The product sealing device is used for product sealing of the NFC anti-fake seal, and when the sealing is successful, the NFC anti-fake seal is verified, an interface is implanted and a trusted key loading process is carried out in combination with the encryption machine, and a product binding database on the verification server is updated based on a processing result. The client is used for obtaining anti-fake verification data and an anti-fake verification interface through the NFC anti-fake seal, obtaining a product identification to be checked through product packaging, and sending the anti-fake verification data and the product identification to be checked to an address corresponding to the anti-fake verification interface; and displaying an anti-fake verification state returned by a current address. The verification server is used for real-time monitoring of a URL address corresponding to each verification interface; and when a set of anti-fake verification data and a product identification to be checked are received at any address, the anti-fake verification data are verified by the encryption machine, and product anti-fake verification is carried out based on a trusted verification result, the product identification to be checked and a product binding database. In the process of anti-fake verification, the embodiment of the present application increases a trusted verification process for the NFC anti-fake seal, and corresponding key management processes (key generation, key loading and key verification) are added to the trusted verification process. The embodiment of the present application solves the security hidden danger caused by the lack of trusted protection of the seal in the conventional anti-fake scheme. BRIEF DESCRIPTION OF DRAWINGS

[0039] Figure 1 A module schematic diagram of the trusted verification system of the NFC anti-fake seal provided by the embodiment of the present application is shown.

[0040] Figure 2 A schematic diagram of the NFC anti-fake seal provided by the embodiment of the present application is shown. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical scheme and advantages of the present application clearer, the present application will be further described in detail below with reference to the drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the protection scope of the present application.

[0042] The embodiment of the present application provides a trusted verification system of an NFC anti-fake seal, which comprises an NFC anti-fake seal, a product sealing device, an encryption machine, a client and a verification server, wherein the NFC anti-fake seal comprises an NFC tag chip and a detection line. The product sealing device is used for product sealing of the NFC anti-fake seal, and when the sealing is successful, the NFC anti-fake seal is verified, an interface is implanted and a trusted key loading process is carried out in combination with the encryption machine, and a product binding database on the verification server is updated based on a processing result. The client is used for obtaining anti-fake verification data and an anti-fake verification interface through the NFC anti-fake seal, obtaining a product identification to be checked through product packaging, and sending the anti-fake verification data and the product identification to be checked to an address corresponding to the anti-fake verification interface; and displaying an anti-fake verification state returned by a current address. The verification server is used for real-time monitoring of a URL address corresponding to each verification interface; and when a set of anti-fake verification data and a product identification to be checked are received at any address, the anti-fake verification data are verified by the encryption machine, and product anti-fake verification is carried out based on a trusted verification result, the product identification to be checked and a product binding database. In the process of anti-fake verification, the embodiment of the present application increases a trusted verification process for the NFC anti-fake seal, and corresponding key management processes (key generation, key loading and key verification) are added to the trusted verification process. The embodiment of the present application solves the security hidden danger caused by the lack of trusted protection of the seal in the conventional anti-fake scheme. Figure 1 A module schematic diagram of the trusted verification system of the NFC anti-fake seal provided by the embodiment of the present application is shown, which comprises an NFC anti-fake seal 1, a product sealing device 2, an encryption machine 3, a client 4 and a verification server 5.

[0043] The NFC anti-fake seal 1 is connected with the product sealing device 2 and the client 4 through NFC communication mode. The product sealing device 2 is connected with the encryption machine 3 and the verification server 5, specifically: connected with the encryption machine 3 and the verification server 5 through wired communication mode or wireless communication mode. The verification server 5 is connected with the encryption machine 3 and the client 4, specifically: connected with the encryption machine 3 and the client 4 through wired communication mode or wireless communication mode. The wired communication mode is a communication mode based on USB data line, coaxial cable line, serial data line, parallel data line, optical fiber data line or network cable for data transmission; the wireless communication mode includes WiFi communication mode, 2G / 3G / 4G / 5G / LTE communication mode and the like.

[0044] (I) NFC anti-fake seal 1:

[0045] The NFC anti-fake seal 1 of the embodiment of the application comprises an NFC tag chip 21 and a detection line 22; as shown in the schematic diagram of the NFC anti-fake seal provided by the embodiment of the application. Figure 2

[0046] The local storage area of the NFC tag chip 21 comprises a UID storage area, a transmission key storage area, a random number storage area, a first key storage area, a second key storage area, a verification interface storage area and a detection line 22 storage area. Among them:

[0047] 1) The UID storage area is used for storing a preset seal UID identifier;

[0048] 2) The transmission key storage area is used for storing a preset seal transmission key;

[0049] 3) The random number storage area is used for storing a corresponding four-byte random number;

[0050] 4) The first key storage area is used for storing a corresponding type of trusted key;

[0051] 5) The second key storage area is used for storing a corresponding type of trusted key;

[0052] 6) The verification interface storage area is used for storing the anti-fake verification interface corresponding to the product where the seal is located;

[0053] 7) The detection line state storage area is used for storing the detection line state; wherein the detection line state comprises a connected state and a disconnected state.

[0054] The NFC tag chip 21 is further used for identifying the connected / disconnected state of the detection line 22 when the chip is powered on and reset successfully each time, if the detection line 22 is in the connected state, the detection line state is set to the connected state, if the detection line 22 is in the disconnected state, the detection line state is set to the disconnected state; and a four-byte random number is generated to reset the four-byte random number.​

[0055] It should be noted that the NFC tag chip 21 will enter the instruction receiving waiting state after each power-on reset of the chip is successful and the setting of the detection line state and the four-byte random number is completed. The NFC tag chip 21 will enter a corresponding instruction processing period each time an instruction is received: receiving an instruction, executing an instruction processing flow, returning an instruction feedback, and not receiving any instructions in the current instruction processing period. After completing each instruction processing period, the NFC tag chip 21 will again enter the instruction receiving waiting state until the next instruction is received and the next instruction processing period is entered.

[0056] The NFC tag chip 21 is also used to return the seal UID identification as instruction return data when the UID reading instruction is received.

[0057] The NFC tag chip 21 is also used to extract the corresponding anti-fake verification interface write verification interface storage area from the interface write instruction when the interface write instruction is received, and set the feedback state of the current write operation as the corresponding current write operation state; and identify whether the current write operation state is a success state, if so, set the corresponding interface write state to write success, if not, set the corresponding interface write state to write failure; and return the interface write state as instruction return data.

[0058] The NFC tag chip 21 is also used to extract the corresponding key ciphertext data from the trusted key loading instruction when the trusted key loading instruction is received; and decrypt the key ciphertext data by the seal transmission key according to the preset transmission key encryption and decryption algorithm; and extract the corresponding first type of trusted key and second type of trusted key from the decrypted plaintext and write them into the corresponding first key storage area and second key storage area, and set the feedback state of the two write operations as the corresponding two write operation states; and identify whether the two write operation states are both success states, if so, set the corresponding key loading state to loading success, if not, set the corresponding key loading state to loading failure; and return the key loading state as instruction return data.

[0059] Here, the transmission key encryption and decryption algorithm of the embodiment of the application includes the national standard SM1 algorithm, the national standard SM4 algorithm, and the AES algorithm.

[0060] The NFC tag chip 21 is also used to, when the seal verification instruction is received, encrypt the four-byte random number according to the PRINTcipher encryption and decryption algorithm using the second type of trusted key to obtain corresponding random ciphertext data; and form a corresponding anti-fake verification data by using the anti-fake verification interface, the seal UID identification, the first type of trusted key, the four-byte random number, the random ciphertext data, and the detection line state; and return the anti-fake verification data as instruction return data.

[0061] Here, the PRINTcipher encryption and decryption algorithm is a modular encryption and decryption algorithm similar to AES, which can be understood by referring to the public technical document "PRINTcipher: A Block Cipher for IC-Printing", which will not be described further. It should be noted that the key length of the PRINTcipher encryption and decryption algorithm in the embodiments of the present application is 10 bytes by default.

[0062] (ii) Product labeling equipment 2:

[0063] The product labeling equipment 2 of the embodiments of the present application is used to paste an NFC anti-counterfeit seal 1 on a corresponding product, and to ensure that the detection line 22 of the NFC anti-counterfeit seal 1 is pasted at the opening position of the current product; and after the seal is pasted, the NFC anti-counterfeit seal 1 is verified, interface implanted and trusted key loaded in combination with the encryption machine 3, and the product binding database on the verification server 5 is updated based on the processing result.

[0064] Here, the product labeling effect of the NFC anti-counterfeit seal 1 of the embodiments of the present application can be understood by referring to Figure 2 .

[0065] In a specific implementation of the embodiments of the present application, the product labeling equipment 2 is specifically used when the NFC anti-counterfeit seal 1 is verified, interface implanted and trusted key loaded in combination with the encryption machine 3, and the product binding database on the verification server 5 is updated based on the processing result:

[0066] Step A1, power-on reset NFC tag chip 21 of NFC anti-counterfeit seal 1 through NFC communication mode;

[0067] Step A2, after the power-on reset of the NFC tag chip 21 is successful, send a UID reading instruction to the NFC tag chip 21; receive the seal UID identification returned by the NFC tag chip 21; and read the product identification from the product packaging of the product where the current NFC anti-counterfeit seal 1 is located as the corresponding seal product identification through the built-in product identification recognition device;

[0068] Here, the product identification recognition device of the embodiments of the present application is, for example: a processing device capable of image shooting of the packaging and capable of recognizing the product identification in the form of text based on the image, a processing device capable of image shooting of the packaging and capable of recognizing the product identification in the form of bar code based on the image, a processing device capable of image shooting of the packaging and capable of recognizing the product identification in the form of two-dimensional code based on the image, etc.

[0069] Step A3, and based on the preset URL address setting rule, the URL address is set according to the seal UID identifier and the seal product identifier, and the obtained URL address is taken as a corresponding anti-counterfeiting verification interface; and the interface write instruction carrying the anti-counterfeiting verification interface is sent to the NFC tag chip 21; and the interface write state returned by the NFC tag chip 21 is received;

[0070] Here, the URL address setting rule of the embodiment of the application is a pre-set URL address definition rule, which can define a unique URL address for a group of seal UID identifiers + seal product identifiers; the embodiment of the application does not specifically limit the URL address setting rule, and the user can dynamically set it according to the application implementation requirements;

[0071] Step A4, and when the interface write state is write success, the trusted key generation instruction carrying the seal UID identifier is sent to the encryptor 3; the key ciphertext data returned by the encryptor 3 is received; the trusted key loading instruction carrying the key ciphertext data is sent to the NFC tag chip 21; and the key loading state returned by the NFC tag chip 21 is received.

[0072] Step A5, and when the key loading state is load success, it is confirmed whether a first binding record in which a first seal identifier matches the current seal UID identifier exists in the product binding database; and when it is confirmed that the record does not exist, the current seal UID identifier, the seal product identifier and the anti-counterfeiting verification interface are taken as a corresponding first seal identifier, a first product identifier and a first verification interface to form a corresponding first binding record, which is added to the product binding database.

[0073] (Three) encryptor 3:

[0074] The encryptor 3 of the embodiment of the application is a data cipher machine for data password calculation, which can be a general data cipher machine, a higher security level financial data cipher machine, or any type of user-defined data cipher device, server, system or platform.

[0075] The encryptor 3 is used for locally storing a transmission key library and a trusted key library.

[0076] Here, the transmission key library of the embodiment of the application comprises a plurality of first records; each first record comprises a first UID identifier and a first transmission key. The trusted key library of the embodiment of the application comprises a plurality of second records; each second record comprises a second UID identifier, a first trusted key and a second trusted key. It should be noted that before the product pasting device 2 does not paste any NFC anti-fake seal 1, the transmission key library is not empty, the trusted key library is empty, and the first record of the transmission key library corresponds to the NFC anti-fake seal 1 one by one, and the first UID identifier and the first transmission key of each first record are the seal UID identifier and the seal transmission key of the corresponding NFC anti-fake seal 1, respectively.

[0077] The encryption machine 3 is also used to, when receiving the trusted key generation instruction sent by the product pasting device 2:

[0078] Step B1, extract the corresponding seal UID identifier from the trusted key generation instruction as the current UID identifier;

[0079] Step B2, and the first transmission key of the first record in the transmission key library whose first UID identifier matches the current UID identifier is taken as the corresponding current transmission key;

[0080] Step B3, and when the current transmission key is not empty, the current UID identifier is encrypted by the current transmission key according to a preset first encryption and decryption algorithm, and the encrypted ciphertext is taken as the corresponding first trusted key;

[0081] Among them, the first encryption and decryption algorithm includes the national secret SM1 algorithm, the national secret SM4 algorithm and the AES algorithm;

[0082] Step B4, and a 10-byte second trusted key is randomly generated;

[0083] Here, the second trusted key of the embodiment of the application is the applicable key of the PRINTcipher encryption and decryption algorithm, and its length is 10 bytes long; the embodiment of the application does not specifically limit the random generation method of the second trusted key, and the user can dynamically set it according to the application implementation requirements, one of which is: a string with a length of 10 and containing numbers and English capital and small letters is randomly generated, and the hexadecimal encoding sequence of the string is taken as the second trusted key;

[0084] Step B5, and when it is confirmed that the second record in the trusted key library whose second UID identifier matches the current UID identifier does not exist, the current UID identifier is taken as a corresponding second UID identifier, and a corresponding second record composed of the current second UID identifier, the first trusted key and the second trusted key is added to the trusted key library;

[0085] Step B6, and when adding the success of this record, a corresponding to-be-encrypted plaintext is composed of the current class of trusted key and the second class of trusted key, and the current to-be-encrypted plaintext is encrypted by the current transmission key according to the transmission key encryption and decryption algorithm, and the encrypted ciphertext is sent back to the product labeling device 2 as the corresponding key ciphertext data.

[0086] The encryption machine 3 is also used to, when receiving the trusted verification instruction sent by the verification server 5:

[0087] Step C1, the corresponding seal UID identifier, the first class of trusted key, the four-byte random number and the random ciphertext data are extracted from the trusted verification instruction as the corresponding current UID identifier, the current first class of key, the current random number and the current ciphertext data.

[0088] Step C2, and the second record in the trusted key library that matches the second UID identifier with the current UID identifier is taken as the corresponding current matching record.

[0089] Step C3, and whether the first class of trusted key of the current matching record matches the current first class of key is identified, if matched, the corresponding first key verification state is set to success, if not matched, the corresponding first key verification state is set to failure.

[0090] Step C4, and the second class of trusted key of the current matching record is used to decrypt the current ciphertext data according to the PRINTcipher encryption and decryption algorithm to obtain the corresponding decrypted random number; and whether the decrypted random number matches the current random number is identified, if matched, the corresponding second key verification state is set to success, if not matched, the corresponding second key verification state is set to failure.

[0091] Step C5, and whether the first key verification state and the second key verification state are both successful is identified, if yes, the corresponding trusted verification result is set to verification success, if not, the corresponding trusted verification result is set to verification failure; and the trusted verification result is sent back to the verification server 5.

[0092] (IV) Client 4:

[0093] The client 4 of the embodiment of the application can be any one of a terminal browser application, an APP application or a small program of a first class of client-side terminal, and can also be a client anti-fake interaction application of any kind of client-side terminal. The client-side terminal mentioned here is, for example, a desktop computer, a notebook computer, a mobile terminal, a mobile phone, a PAD, a tablet computer and the like.

[0094] The client 4 is used to obtain corresponding anti-counterfeit verification data and an anti-counterfeit verification interface through the NFC anti-counterfeit seal 1 at the product opening position, obtain corresponding product identification to be checked through the product packaging, send the anti-counterfeit verification data and the product identification to be checked to the URL address corresponding to the anti-counterfeit verification interface, and display the anti-counterfeit verification state returned by the current URL address.

[0095] Here, the anti-counterfeit verification interface of the embodiment of the application is a URL address of the Internet, and the anti-counterfeit verification state of the embodiment of the application includes verification success and intact seal, verification success but damaged seal, and verification failure.

[0096] In another specific implementation manner of the embodiment of the application, the client 4 is specifically used to, when obtaining corresponding anti-counterfeit verification data and an anti-counterfeit verification interface through the NFC anti-counterfeit seal 1 at the product opening position: power-on reset the NFC tag chip 21 of the NFC anti-counterfeit seal 1 through the NFC communication mode; send a seal verification instruction to the NFC tag chip 21 after the power-on reset of the NFC tag chip 21 succeeds; receive the anti-counterfeit verification data returned by the NFC tag chip 21; and extract the corresponding anti-counterfeit verification interface from the anti-counterfeit verification data.

[0097] In another specific implementation manner of the embodiment of the application, the client 4 is specifically used to, when obtaining corresponding product identification to be checked through the product packaging: read the product identification from the product packaging as the corresponding product identification to be checked through the built-in product identification recognition device.

[0098] (Five) The verification server 5:

[0099] The verification server 5 of the embodiment of the application is used to store a product binding database.

[0100] The product binding database includes a plurality of first binding records; the first binding record includes a first seal identification, a first product identification, and a first verification interface; the first binding record corresponds to the NFC anti-counterfeit seal 1 one by one; the first seal identification is the seal UID identification of the corresponding NFC anti-counterfeit seal 1; the first product identification is the unique product identification of the product where the corresponding NFC anti-counterfeit seal 1 is located, that is, the unique product identification of the product to which the current seal is bound; and the first verification interface is a URL address of the Internet.

[0101] The verification server 5 is also used to monitor the URL addresses corresponding to the respective first verification interfaces in real time, and when a set of anti-counterfeit verification data and product identification to be checked is received at any monitored URL address, perform seal trust verification on the anti-counterfeit verification data through the encryption machine 3 and perform product anti-counterfeit verification based on the trust verification result, the product identification to be checked, and the product binding database to obtain the corresponding anti-counterfeit verification state and return to the current URL address.

[0102] In another specific implementation manner of the embodiment of the present application, the verification server 5 is specifically used for returning the corresponding anti-counterfeit verification state to the current URL address when the trusted verification of the sealing of the anti-counterfeit verification data by the encryptor 3 is passed and the product anti-counterfeit verification is performed based on the trusted verification result, the product identification to be checked and the product binding database:

[0103] Step D1, the corresponding anti-counterfeit verification interface, the sealing UID identification, the first trusted key, the four-byte random number, the random ciphertext data and the detection line state are extracted from the anti-counterfeit verification data; the trusted verification instruction carrying the sealing UID identification, the first trusted key, the four-byte random number and the random ciphertext data is sent to the encryptor 3; and the trusted verification result returned by the encryptor 3 is received;

[0104] Step D2, and the trusted verification result is identified;

[0105] Step D3, if the trusted verification result is verification failure, the corresponding anti-counterfeit verification state is set as verification failure;

[0106] Step D4, if the trusted verification result is verification success, the first binding record in which the first sealing identification and the sealing UID identification in the product binding database are matched and the first product identification and the product identification to be checked are matched and the first verification interface and the anti-counterfeit verification interface are matched is taken as the corresponding current matching record; whether the current matching record is empty is identified; if the current matching record is empty, the corresponding anti-counterfeit verification state is set as verification failure; if the current matching record is not empty, whether the detection line state is the connected state is identified, if yes, the corresponding anti-counterfeit verification state is set as verification success and the sealing is intact, if not, the corresponding anti-counterfeit verification state is set as verification success but the sealing is damaged;

[0107] Step D5, and the obtained anti-counterfeit verification state is returned to the current URL address.

[0108] The embodiment of the present application provides a trusted verification system of an NFC anti-counterfeiting seal, which comprises an NFC anti-counterfeiting seal, a product sealing device, an encryption machine, a client and a verification server, wherein the NFC anti-counterfeiting seal comprises an NFC tag chip and a detection line. The product sealing device is used for product sealing of the NFC anti-counterfeiting seal, and when the sealing is successful, the NFC anti-counterfeiting seal is verified, an interface is implanted and a trusted key loading process is carried out in combination with the encryption machine, and a product binding database on the verification server is updated based on a processing result. The client is used for obtaining anti-counterfeiting verification data and an anti-counterfeiting verification interface through the NFC anti-counterfeiting seal, obtaining a product identification to be checked through product packaging, and sending the anti-counterfeiting verification data and the product identification to be checked to an address corresponding to the anti-counterfeiting verification interface; and displaying an anti-counterfeiting verification state returned by a current address. The verification server is used for real-time monitoring of a URL address corresponding to each verification interface; and when a set of anti-counterfeiting verification data and a product identification to be checked are received at any address, the anti-counterfeiting verification data are verified by the encryption machine, and product anti-counterfeiting verification is carried out based on a trusted verification result, the product identification to be checked and a product binding database. In the process of anti-counterfeiting verification, the embodiment of the present application increases a trusted verification process for the NFC anti-counterfeiting seal, and corresponding key management processes (key generation, key loading and key verification) are added to the trusted verification process. The embodiment of the present application solves the security risks caused by the lack of trusted protection of the seal in the conventional anti-counterfeiting scheme.

[0109] Those skilled in the art will further appreciate that the units and algorithm steps of each example described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, various aspects of each example have been described generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends on the particular application and design constraints imposed on the overall architecture. Skilled persons can implement the described functionality in varying ways for each particular application, but such implementation should not be interpreted as a departure from the scope of the present application.

[0110] The steps of the method or algorithm described in connection with the embodiments disclosed herein can be embodied in hardware, in a software module executed by a processor, or in a combination of both. The software module can be stored in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0111] The above detailed description of the specific embodiments of the present application has been given to understand the purpose, technical solutions and beneficial effects of the present application. It should be understood that the above description is only a specific embodiment of the present application and is not used to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A trusted verification system of NFC anti-counterfeit seal, characterized in that, The system comprises an NFC anti-fake seal, a product labeling device, an encryption machine, a client and a verification server; The NFC anti-fake seal is connected with the product labeling device and the client through NFC communication mode; the product labeling device is connected with the encryption machine and the verification server; the verification server is connected with the encryption machine and the client; The NFC anti-fake seal comprises an NFC tag chip and a detection line; The product labeling device is used for pasting one NFC anti-fake seal on a corresponding product and ensuring that the detection line of the NFC anti-fake seal is pasted on the opening position of the current product; and after the pasting is completed, the NFC anti-fake seal is verified, the interface is implanted and the trusted key is loaded by the encryption machine, and the product binding database on the verification server is updated based on the processing result; The client is used for obtaining the corresponding anti-fake verification data and anti-fake verification interface through the NFC anti-fake seal at the opening position of the product, obtaining the corresponding product identification through the product packaging, sending the anti-fake verification data and the product identification to the URL address corresponding to the anti-fake verification interface, and displaying the anti-fake verification state returned by the current URL address; the anti-fake verification interface is an Internet URL address; the anti-fake verification state includes verification success and seal intact, verification success but seal damaged, and verification failure; The verification server is used for storing the product binding database; the product binding database comprises a plurality of first binding records; the first binding record comprises a first seal identification, a first product identification and a first verification interface; the first binding record corresponds to the NFC anti-fake seal one by one; the first verification interface is an Internet URL address; The verification server is also used for monitoring the URL address corresponding to each first verification interface in real time, and when a set of anti-fake verification data and product identification is received by any monitored URL address, performing seal trusted verification on the anti-fake verification data by the encryption machine and performing product anti-fake verification based on the trusted verification result, the product identification and the product binding database to obtain the corresponding anti-fake verification state and return it to the current URL address.

2. The trusted verification system of the NFC anti-fake seal according to claim 1, wherein The product labeling device is connected with the encryption machine and the verification server through wired communication mode or wireless communication mode; the verification server is connected with the encryption machine and the client through the wired communication mode or the wireless communication mode; The wired communication mode is a communication mode for data transmission based on USB data line, coaxial cable, serial data line, parallel data line, optical fiber data line or network cable; the wireless communication mode includes WiFi communication mode, 2G / 3G / 4G / 5G / LTE communication mode.

3. The trusted verification system of the NFC anti-fake seal according to claim 1, wherein The local storage area of the NFC tag chip includes a UID storage area, a transmission key storage area, a random number storage area, a first key storage area, a second key storage area, a verification interface storage area, and a detection line storage area; the UID storage area is used to store a preset seal UID identifier; The transmission key storage area is used to store a preset seal transmission key; the random number storage area is used to store a corresponding four-byte random number; The first key storage area is used to store a corresponding first type of trusted key; the second key storage area is used to store a corresponding second type of trusted key; the verification interface storage area is used to store a corresponding anti-fake verification interface of a product where the seal is located; and the detection line state storage area is used to store a detection line state, which includes a connected state and a disconnected state; The NFC tag chip is further configured to identify the connected / disconnected state of the detection line each time the chip is successfully reset after power-on, set the detection line state as the connected state if the detection line is in the connected state, set the detection line state as the disconnected state if the detection line is in the disconnected state, and generate a four-byte random number to reset the four-byte random number; The NFC tag chip is further configured to return the seal UID identifier as instruction return data when receiving a UID reading instruction; The NFC tag chip is further configured to extract a corresponding anti-fake verification interface from the interface writing instruction, write the anti-fake verification interface into the verification interface storage area, return the feedback state of the current writing operation as a corresponding current writing operation state, identify whether the current writing operation state is a successful state, set the corresponding interface writing state as writing success if yes, set the corresponding interface writing state as writing failure if no, and return the interface writing state as instruction return data; The NFC tag chip is further configured to extract a corresponding key ciphertext data from the trusted key loading instruction, decrypt the key ciphertext data according to a preset transmission key encryption / decryption algorithm by using the seal transmission key, extract the first type of trusted key and the second type of trusted key from the decrypted plaintext, write the first type of trusted key and the second type of trusted key into the first key storage area and the second key storage area, return the feedback states of the two writing operations as corresponding two writing operation states, identify whether the two writing operation states are both successful states, set the corresponding key loading state as loading success if yes, set the corresponding key loading state as loading failure if no, and return the key loading state as instruction return data; and the transmission key encryption / decryption algorithm includes a national standard SM1 algorithm, a national standard SM4 algorithm, and an AES algorithm. ​ The NFC tag chip is further configured to, when receiving a seal verification instruction, encrypt the four-byte random number using the second type of trusted key according to a PRINTcipher encryption and decryption algorithm to obtain corresponding random ciphertext data; and form a corresponding anti-fake verification data by the anti-fake verification interface, the seal UID identifier, the first type of trusted key, the four-byte random number, the random ciphertext data and the detection line state; and return the anti-fake verification data as instruction return data.

4. The trusted verification system of the NFC anti-fake seal according to claim 1, characterized in that, The product seal equipment is specifically configured to, when the product seal equipment implants the NFC anti-fake seal verification interface and loads the trusted key according to the encryption machine and updates the product binding database on the verification server based on the processing result: power on and reset the NFC tag chip of the NFC anti-fake seal through an NFC communication mode; after the NFC tag chip is successfully powered on and reset, send a UID reading instruction to the NFC tag chip; receive the seal UID identifier returned by the NFC tag chip; and read a product identifier from the product packaging of the product where the current NFC anti-fake seal is located as a corresponding seal product identifier through an internal product identifier recognition device; based on a preset URL address setting rule, set a URL address according to the seal UID identifier and the seal product identifier and take the obtained URL address as a corresponding anti-fake verification interface; send an interface writing instruction carrying the anti-fake verification interface to the NFC tag chip; and receive the interface writing state returned by the NFC tag chip; when the interface writing state is writing success, send a trusted key generation instruction carrying the seal UID identifier to the encryption machine; receive the key ciphertext data returned by the encryption machine; send a trusted key loading instruction carrying the key ciphertext data to the NFC tag chip; and receive the key loading state returned by the NFC tag chip; when the key loading state is loading success, confirm whether there is a first binding record in the product binding database, where the first seal identifier matches the current seal UID identifier; and when it is confirmed that the record does not exist, add a corresponding first binding record to the product binding database by taking the current seal UID identifier, the seal product identifier and the anti-fake verification interface as a group of corresponding first seal identifier, first product identifier and first verification interface.

5. The trusted verification system of the NFC anti-fake seal according to claim 1, characterized in that, The encryption machine is used for storing a transmission key library and a trusted key library locally; the transmission key library includes a plurality of first records; the first record includes a first UID identifier and a first transmission key; the trusted key library includes a plurality of second records; the second record includes a second UID identifier, a first trusted key and a second trusted key; before the product labeling device does not perform product pasting on any NFC anti-counterfeit seal, the transmission key library is not empty, the trusted key library is empty, and the first record of the transmission key library corresponds to the NFC anti-counterfeit seal one by one, and the first UID identifier and the first transmission key of each first record are respectively the seal UID identifier and the seal transmission key of the corresponding NFC anti-counterfeit seal; The encryption machine is also used for extracting the corresponding seal UID identifier as a current UID identifier from the trusted key generation instruction when receiving the trusted key generation instruction sent by the product labeling device; And the first transmission key of the first record in the transmission key library matched with the current UID identifier is taken as a corresponding current transmission key; and when the current transmission key is not empty, the current UID identifier is encrypted by the current transmission key according to a preset first encryption and decryption algorithm, and the encrypted ciphertext is taken as a corresponding first trusted key; and a 10-byte second trusted key is randomly generated; And when it is confirmed that the second record matched with the current UID identifier in the trusted key library does not exist, the current UID identifier is taken as a corresponding second UID identifier, and the current second UID identifier, the first trusted key and the second trusted key are used to form a corresponding second record to add to the trusted key library; and when the current record addition is successful, a corresponding to-be-encrypted plaintext is formed by the current first trusted key and the second trusted key, and the current to-be-encrypted plaintext is encrypted by the current transmission key according to a preset transmission key encryption and decryption algorithm, and the encrypted ciphertext is taken as corresponding key ciphertext data and sent back to the product labeling device; the first encryption and decryption algorithm includes a national secret SM1 algorithm, a national secret SM4 algorithm and an AES algorithm. The encryption machine is further configured to extract the corresponding seal UID identifier, the first type of trusted key, the four-byte random number, and the random ciphertext data from the trusted verification instruction as the corresponding current UID identifier, the current first type of key, the current random number, and the current ciphertext data when receiving the trusted verification instruction sent by the verification server; match the second record in the trusted key library in which the second UID identifier matches the current UID identifier as the corresponding current matching record; identify whether the first type of trusted key of the current matching record matches the current first type of key, set the corresponding first key verification state to success if the first type of trusted key matches the current first type of key, and set the corresponding first key verification state to failure if the first type of trusted key does not match the current first type of key; decrypt the current ciphertext data by the PRINTcipher decryption algorithm using the second type of trusted key of the current matching record to obtain the corresponding decrypted random number; identify whether the decrypted random number matches the current random number, set the corresponding second key verification state to success if the decrypted random number matches the current random number, and set the corresponding second key verification state to failure if the decrypted random number does not match the current random number; identify whether the first key verification state and the second key verification state are both success, set the corresponding trusted verification result to verification success if the first key verification state and the second key verification state are both success, and set the corresponding trusted verification result to verification failure if the first key verification state and the second key verification state are not both success; and send the trusted verification result to the verification server.

6. The trusted verification system of the NFC anti-fake seal according to claim 1, wherein The client is specifically configured to: when the corresponding anti-fake verification data and anti-fake verification interface of the NFC anti-fake seal passing through the product opening position are obtained, perform power-on reset on the NFC tag chip of the NFC anti-fake seal through an NFC communication mode; after the power-on reset of the NFC tag chip is successful, send a seal verification instruction to the NFC tag chip; receive the anti-fake verification data returned by the NFC tag chip; and extract the corresponding anti-fake verification interface from the anti-fake verification data.

7. The trusted verification system of the NFC anti-fake seal according to claim 1, wherein The client is specifically configured to: when the corresponding to-be-verified product identifier is obtained by passing through the product packaging, read the product identifier from the product packaging as the corresponding to-be-verified product identifier through a built-in product identifier recognition device.

8. The trusted verification system of the NFC anti-fake seal according to claim 1, wherein The verification server is specifically configured to: when the corresponding anti-fake verification state is returned to the current URL address based on the anti-fake verification data, the to-be-verified product identifier, and the product binding database after the seal trusted verification of the anti-fake verification data by the encryption machine and the product anti-fake verification based on the trusted verification result, the to-be-verified product identifier, and the product binding database are performed, Extracting the corresponding anti-fake verification interface, seal UID identification, a class of trusted key, four-byte random number, random ciphertext data and detection line state from the anti-fake verification data; and sending trusted verification instructions carrying the seal UID identification, the class of trusted key, the four-byte random number and the random ciphertext data to the encryptor; and receiving the trusted verification result sent back by the encryptor; And identify the trusted verification result; If the trusted verification result is verification failure, set the corresponding anti-fake verification state to verification failure; If the trusted verification result is verification success, match the first seal identification with the seal UID identification, the first product identification with the product to be checked identification, and the first verification interface with the anti-fake verification interface in the product binding database, and take the first binding record as the corresponding current matching record; and identify whether the current matching record is empty; If the current matching record is empty, set the corresponding anti-fake verification state to verification failure; if the current matching record is not empty, identify whether the detection line state is a connected state, if yes, set the corresponding anti-fake verification state to verification success and seal intact, if not, set the corresponding anti-fake verification state to verification success but seal damaged; And send the obtained anti-fake verification state back to the current URL address.

Images