Micro-point two-dimensional code and commodity anti-counterfeiting system and method based on GS1 standard

Abstract

The invention relates to the technical field of commodity anti-counterfeiting and authentication, in particular to a micro-point two-dimensional code and commodity anti-counterfeiting system and method based on the GS1 standard. The system comprises a physical characteristic acquisition unit, a characteristic value stabilization unit, a digital identity generation unit, a dynamic encryption signature unit and a coupling identification coding unit. The system further comprises a multi-mode reading unit, a data decoupling unit, a real-time feature processing unit and an encryption signature verification judgment unit, the system is used for dynamically encrypting and signing a standard GS1 digital identity by acquiring a physical fingerprint (PUF) of a commodity and converting the PUF into a feature abstract and auxiliary data, and coupling and coding the PUF into a micro-point two-dimensional code; the core of the method is that during verification, a PUF abstract read in real time is utilized to decrypt and verify a signature, and a unique binding relationship between a GS1 identity and a physical entity is judged; according to the invention, the deep encryption binding of the digital identity and the physical entity is realized, and the high-fidelity physical clone attack can be effectively resisted.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of commodity anti-counterfeiting and authentication technology, in particular to a micro-point two-dimensional code based on GS1 standard and a commodity anti-counterfeiting system and method thereof. BACKGROUND

[0002] In the current field of commodity anti-counterfeiting and supply chain management, the widely used GS1 standard digital identity mainly solves the problem of circulation traceability, but it is easy to be copied and difficult to prevent high-fidelity physical cloning. The existing verification scheme generally relies on connecting a remote central database to check the validity of the digital identity. This architecture not only makes the database a single point of failure vulnerable to attack, but also makes the verification process strongly dependent on the network, which cannot achieve instant local authentication. At the same time, the physical fingerprint technology used for high-security anti-counterfeiting is based on the randomness of physical characteristics, which is fundamentally in conflict with the determinism and replicability required by the GS1 digital identity standard. Therefore, how to deeply encrypt and bind the standardized digital identity with the unclonable physical characteristics of the commodity, and establish a closed-loop verification logic that does not depend on the central database and can be executed locally on the terminal, to meet the standardization requirements and resist physical cloning attacks, is a technical problem that needs to be solved. SUMMARY

[0003] To solve the above technical problems, the present application provides a micro-point two-dimensional code based on GS1 standard and a commodity anti-counterfeiting system and method thereof. Specifically, the technical solution of the present application is as follows:

[0004] The micro-point two-dimensional code based on GS1 standard and the commodity anti-counterfeiting system comprises:

[0005] a physical characteristic acquisition unit for acquiring a physical fingerprint of a commodity and outputting an original analog signal and a characteristic value stabilization unit for converting the original analog signal into a digital PUF feature digest and auxiliary data; a digital identity generation unit for generating a standard GS1 digital identity, a dynamic encryption signature unit for encrypting and signing the standard GS1 identity with the PUF feature digest, and a coupling identification coding unit for encoding the standard GS1 identity, the signature, and the auxiliary data into a micro-point two-dimensional code;

[0006] It also comprises a multi-modal reading unit for simultaneously scanning the micro-point two-dimensional code and the surface of the commodity to obtain coupling data and real-time analog signals; a data decoupling unit for separating the standard GS1 identity and the signature from the coupling data; a real-time feature processing unit for converting the real-time analog signals into real-time PUF feature digests; and an encryption and signature verification determination unit;

[0007] The determination unit verifies the signature using the real-time PUF digest, determines whether the signature verification result matches the standard GS1 identity, and outputs a verification pass or fail signal.

[0008] Preferably, the physical feature acquisition unit is specifically configured to:

[0009] Scanning the microcosmic analog characteristics of the area on the commodity or its packaging corresponding to the position of the micro dot two-dimensional code using high-resolution optical or electrical sensors, the microcosmic analog characteristics including material surface texture or fiber distribution.

[0010] Preferably, the feature value stabilization unit is specifically configured to:

[0011] Performing a series of preset and fixed signal processing algorithms on the original analog signal, the signal processing algorithms including blur extraction, error correction code processing and hash calculation, to extract a determined and unique PUF feature digest from the original analog signal.

[0012] Preferably, the dynamic encryption signature unit is specifically configured to:

[0013] Using the PUF feature digest as a private key or signature salt of an encryption process, performing asymmetric or symmetric encryption signature operation on the standard GS1 digital identity.

[0014] Preferably, the real-time feature processing unit is specifically configured to:

[0015] Processing the real-time analog signal using the same signal processing algorithms, hash algorithms and preset configuration parameters as the feature value stabilization unit, to generate the real-time PUF feature digest.

[0016] The micro dot two-dimensional code based on GS1 standard and the commodity anti-counterfeiting method, comprising:

[0017] The physical feature acquisition unit acquires the physical fingerprint of the commodity body and outputs an original analog signal;

[0018] The feature value stabilization unit receives the original analog signal and converts it into a digital PUF feature digest and auxiliary data;

[0019] The digital identity generation unit generates a standard GS1 digital identity;

[0020] The dynamic encryption signature unit encrypts and signs the standard GS1 digital identity using the PUF feature digest and outputs an encrypted signature;

[0021] The coupling identification coding unit merges and encodes the standard GS1 digital identity, the encrypted signature and the auxiliary data into a micro dot two-dimensional code.

[0022] Preferably, comprising:

[0023] The multi-modal reading unit scans the micro dot two-dimensional code at the same time and at the same position to obtain micro dot two-dimensional code data;

[0024] The multi-modal reading unit also scans the physical surface of the commodity at the same time, the same location to obtain a real-time analog signal;

[0025] The data decoupling unit separates the standard GS1 digital identity and the encrypted signature from the micro dot two-dimensional code data;

[0026] The real-time feature processing unit processes the real-time analog signal into a real-time PUF feature digest;

[0027] The encrypted signature verification determining unit uses the real-time PUF feature digest as a verification parameter to verify the encrypted signature to obtain a verification result, and determines whether the verification result matches the standard GS1 digital identity;

[0028] When the verification result matches the standard GS1 digital identity, an entity verification pass signal is output;

[0029] When the verification result does not match the standard GS1 digital identity, an entity verification fail signal is output.

[0030] Compared with the prior art, the present application has the following beneficial effects:

[0031] 1. The present application uses the unique, unclonable microscopic physical fingerprint of the commodity as the key parameter of the encryption process to dynamically encrypt the signature of the standard GS1 digital identity; this design deeply encrypts the binding of the digital identity and the physical entity, so that even if the two-dimensional code is perfectly copied, the verification will still fail because the physical carrier is counterfeit, thereby effectively resisting high-fidelity physical cloning attacks;

[0032] 2. The present application establishes a closed-loop local verification logic that does not depend on a remote central database; all data required for verification are encoded in the micro dot two-dimensional code, and the verification device decrypts and matches the signature using the real-time collected physical feature digest locally; this eliminates the dependence of the verification process on the network, avoids the single point failure risk of the database, and realizes instant, offline commodity entity verification;

[0033] 3. The present application solves the technical conflict between the random uncertainty of physical features and the determinacy required by digital encryption through the feature value stabilization unit and the real-time feature processing unit; using fuzzy extraction, error correction code and hash algorithm, the system can extract stable digital feature digest and auxiliary data from the original analog signal in the binding stage, and accurately regenerate the same digest from the real-time, noisy signal in the verification stage using the auxiliary data, ensuring the reliability of the verification logic;

[0034] 4. The present application adopts a multi-modal reading unit, which requires that the digital information of the micro-point two-dimensional code and the physical features of the product surface must be scanned synchronously at the same time and the same location; this reading constraint of space-time consistency ensures that the read digital identity and physical fingerprint are both derived from the same object from the physical layer, effectively preventing relay attack means of real code and fake goods, and significantly improving the security of the anti-counterfeiting system. BRIEF DESCRIPTION OF DRAWINGS

[0035] The present application will be further explained in conjunction with the accompanying drawings and examples:

[0036] Figure 1 is a structural diagram of the system of the present application;

[0037] Figure 2 is a flowchart of the binding method of the present application;

[0038] Figure 3 is a multi-modal anti-counterfeiting authentication flowchart based on PUF. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical scheme and advantages of the present application more clear and explicit, the present application will be further explained in conjunction with specific examples.

[0040] Example 1:

[0041] Please refer to Figure 1 , the micro-point two-dimensional code and product anti-counterfeiting system based on GS1 standard, including:

[0042] a physical feature acquisition unit for acquiring a product physical fingerprint and outputting an original analog signal, a feature value stabilization unit for converting the original analog signal into a digital PUF feature digest and auxiliary data; a digital identity generation unit for generating a standard GS1 digital identity, a dynamic encryption signature unit for encrypting and signing the standard GS1 identity with the PUF feature digest, and a coupling identification coding unit for encoding the standard GS1 identity, the signature and the auxiliary data into a micro-point two-dimensional code;

[0043] It also includes a multi-modal reading unit for simultaneously scanning the micro-point two-dimensional code and the product surface to obtain coupling data and real-time analog signals; a data decoupling unit for separating the standard GS1 identity and the signature from the coupling data, a real-time feature processing unit for converting the real-time analog signals into real-time PUF feature digests, and an encryption verification and judgment unit;

[0044] The judgment unit verifies the signature with the real-time PUF digest, determines whether the verification result matches the standard GS1 identity, and outputs a verification pass or fail signal.

[0045] In specific embodiments of the present application, the above system is described in detail; this system ingeniously solves the fundamental technical conflict between the elimination of randomness and the dependence of physical anti-counterfeiting on randomness required by GS1 and other standards; one of the core ideas of the present application is that the trust basis for verification is no longer a remote database, but a local encryption logical loop between the physical ontology of the commodity and the digital signature; the workflow of the system is logically divided into two stages of authorization binding and terminal verification;

[0046] The authorization binding stage corresponds to the production link, and each unit cooperates to generate a coupled identifier:

[0047] The physical feature acquisition unit is established to obtain the physical fingerprint PUF of the commodity ontology, which cannot be cloned; the input of this unit is the physical surface of the commodity or its packaging; its processing logic is to use a high-resolution sensor to scan the microcosmic simulation characteristics of the area corresponding to the position of the micro-point two-dimensional code; its output is a high-dimensional, noise-containing raw analog signal;

[0048] The purpose of establishing the feature value stabilization unit is to convert the above dirty analog signal into a stable and repeatable digital fingerprint; the input of this unit is the raw analog signal; its processing logic is to perform a series of preset and fixed signal processing algorithms, such as a fuzzy extractor based on error correction codes such as BCH codes and hash calculation; in the binding stage, this unit will extract a feature vector from the raw signal and calculate an auxiliary data; the auxiliary data does not contain any secret information and is only used to assist subsequent error correction decoding, and it can be publicly stored in the micro-point two-dimensional code together with the encrypted signature; the output of this unit is a determined, digitized PUF feature digest;

[0049] The purpose of establishing the digital identity generation unit is to generate a digital identity conforming to the GS1 standard; the input of this unit is commodity information such as batch and serial number; its processing logic is to format and encode according to the GS1 standard; its output is a standard GS1 digital identity;

[0050] The purpose of establishing the dynamic encryption signature unit is to realize the encryption feature binding of the digital identity and the physical fingerprint, which is one of the core innovations of the present application; the input of this unit is the PUF feature digest and the standard GS1 digital identity; its processing logic is to use the PUF feature digest as the key parameter of the encryption process to perform an encryption signature operation on the standard GS1 digital identity; for example, in a symmetric configuration, the PUF feature digest can be used as a key to perform a hash-based message authentication code-secure hash algorithm 256 operation on the standard GS1 digital identity; its output is an encrypted signature, which cryptographically contains the features of the digital identity and the physical fingerprint at the same time;

[0051] The establishment of the coupling identification coding unit aims to generate the final anti-counterfeiting identification; the input of the unit is the standard GS1 digital identity, the encryption signature, and the aforementioned auxiliary data; the processing logic thereof is to merge and code these parts of data into a standard micro dot two-dimensional code; and the output thereof is a micro dot two-dimensional code which is applied to the commodity;

[0052] The terminal verification stage corresponds to the market circulation link, and the system performs real-time local authentication:

[0053] The multimodal reading unit aims to simultaneously obtain the digital identity and the real-time features of the physical entity; the input of the unit is the micro dot two-dimensional code on the commodity and the physical surface thereof; the processing logic thereof is strictly limited to scanning at the same time and the same location; the reading requirement of the space-time consistency ensures that the read digital data and physical features are derived from the same object from the physical layer, effectively preventing relay attacks; and the output thereof is the micro dot two-dimensional code data and the real-time analog signal;

[0054] The data decoupling unit aims to parse the data components required for verification; the input of the unit is the micro dot two-dimensional code data; the processing logic thereof is to separate the data according to the preset rule; and the output thereof is the standard GS1 digital identity, the encryption signature, and the auxiliary data;

[0055] The real-time feature processing unit aims to convert the real-time PUF signal collected on the verification site into a digital digest which can be used for comparison; the input of the unit is the real-time analog signal; the processing logic thereof is configured to correspond to the binding process of the feature value stabilization unit: it uses the same algorithm and utilizes the auxiliary data read from the micro dot two-dimensional code to perform error correction decoding on the real-time analog signal; as long as the physical features are real, i.e. within the error correction tolerance, the unit can accurately reproduce the PUF feature digest which is completely consistent with that at the time of binding;

[0056] The encryption signature judgment unit aims to perform the core entity authentication logic; one of the non-obviousnesses of the present application is that the verification is performed locally, and it does not depend on connecting a remote, vulnerable central database; the input of the unit is the standard GS1 digital identity and the encryption signature from the data decoupling unit, and the real-time PUF feature digest from the real-time feature processing unit;

[0057] The core processing logic thereof is: using the real-time PUF feature digest as a verification parameter, and then using the parameter to perform the same encryption calculation on the standard GS1 digital identity, and determining whether the calculation result is completely matched with the encryption signature read from the micro dot two-dimensional code at the bit level;

[0058] The output logic is: if matched, scenario one: genuine product, output ontology verification pass signal; if not matched, scenario two: high-fidelity clone, micro-point two-dimensional code is correct but physical PUF is wrong, output ontology verification failure signal;

[0059] Through this physical challenge-digital response closed-loop verification mechanism, the trust anchor is upgraded from authenticating digital copies to authenticating physical ontology, so that it can effectively resist high-fidelity physical clone attacks.

[0060] Embodiment 2:

[0061] The physical feature acquisition unit is specifically configured to:

[0062] Using a high-resolution optical or electrical sensor, the micro-analog characteristics of the area corresponding to the micro-point two-dimensional code on the commodity or its packaging are scanned, and the micro-analog characteristics include material surface texture or fiber distribution.

[0063] To further illustrate the physical feature acquisition unit, in the specific configuration of this embodiment, the purpose is to capture the micro-random, non-reproducible topological or texture features of the material surface; the unit can use a high-power industrial camera, a confocal microscope or a capacitive sensor; the selection standard is that its acquisition accuracy must be higher than the reproduction accuracy available to counterfeiters, for example, to the micron or nanometer level, to capture the micro-topology of the material naturally formed in the manufacturing process, which is statistically unique; The working logic of the unit is not simply to read the digital pattern of the micro-point two-dimensional code, but to go deep into the material level, scan and capture its physical fingerprint PUF; for example, on paper packaging, it can scan the random distribution of paper fibers in the area corresponding to the micro-point two-dimensional code; on other materials, it can scan their natural surface micro-texture; such micro-analog characteristics are randomly formed and have physical unclonability PUF, thereby providing a trust root for subsequent cryptographic signatures.

[0064] Embodiment 3:

[0065] The feature value stabilization unit is specifically configured to:

[0066] A series of preset and fixed signal processing algorithms are performed on the original analog signal, including fuzzy extraction, error correction code processing and hash calculation, to extract a determined and unique PUF feature digest from the original analog signal.

[0067] To further illustrate the feature value stabilization unit, the core purpose is to convert the original analog signal obtained by the physical acquisition unit, which is full of noise and may have slight differences in different measurements, into a digital digest that remains absolutely consistent during encryption and decryption.

[0068] To clarify the mechanism: the error correction code processing is the core of the stabilization; in a preferred embodiment, the unit employs a fuzzy extractor based on BCH code; in the binding i.e. registration phase, the unit extracts a high-dimensional feature vector from the original analog signal; the system generates a target key i.e. PUF feature digest, and through error correction code encoding algorithm, calculates the difference between the original feature vector and the target key encoding, this difference is defined as the helper data; this helper data itself does not contain secret information, it is publicly encoded into the micro dot two-dimensional code together with the signature; in the verification phase, the real-time feature processing unit will obtain the real-time feature vector, which may have a small difference with the original vector due to noise, and read the helper data from the micro dot two-dimensional code; the unit uses the helper data and the real-time feature vector to perform BCH decoding operation; due to the error correction tolerance of BCH code, as long as the real-time physical feature is similar enough to the original feature i.e. within the tolerance, the decoding operation can deterministically and perfectly recover the PUF feature digest used in the registration; if the physical feature does not match, e.g. a counterfeit, the decoding will fail; hash calculation such as SHA-256 can be applied to the recovered key to ensure the cryptographic security properties of the output digest;

[0069] To provide a specific implementation parameter, in a preferred configuration of the embodiment, the original feature vector extracted by the physical feature acquisition unit is 2048 bits; the feature value stabilization unit employs BCH code (n=255, k=131, t=18) to generate a 128-bit target key and the corresponding helper data; this BCH code configuration ensures that the system can tolerate up to 18 bits of error in a 255-bit code block, i.e. about 7% bit flip rate;

[0070] To ensure the practicability of the system throughout the life cycle of the commodity, when setting the error correction tolerance of the BCH code, not only the environmental noise in the verification reading is considered, but also sufficient margin is reserved to accommodate the expected physical feature drift due to material wear, aging or environmental changes during normal storage, transportation and use of the commodity; in this way, the system not only resists high-fidelity cloning, but also avoids false judgment of genuine products with slight feature changes due to normal aging.

[0071] Embodiment 4:

[0072] The dynamic encryption signature unit is specifically used for:

[0073] Using the PUF feature digest as the private key or signature salt of the encryption process, performing asymmetric or symmetric encryption signature operation on the standard GS1 digital identity.

[0074] To further illustrate the dynamic encryption signature unit, its purpose is to achieve the deep dynamic coupling of digital identity and physical fingerprint; unlike the prior art of simply storing PUF features and ID association, the processing logic of the application is to actively use PUF feature digest as the key input of the encryption algorithm;

[0075] To further illustrate the configuration: in a symmetric configuration, the unit uses PUF feature digest as a key to perform a hash-based message authentication code HMAC operation, such as HMAC-SHA256, on the standard GS1 digital identity; the output of the encryption signature is the HMAC value; when verifying, the encryption signature verification unit uses the real-time PUF feature digest as the same key to perform the same HMAC calculation on the standard GS1 digital identity in the micro-point two-dimensional code, and compares whether the calculation results are completely consistent with the encryption signature stored in the micro-point two-dimensional code;

[0076] In an asymmetric configuration, the PUF feature digest can be used as a deterministic seed to input into a key derivation function KDF to generate a temporary public / private key pair, such as based on elliptic curve; the unit uses the derived private key to sign the standard GS1 digital identity, such as elliptic curve digital signature algorithm signature; the encryption signature is the digital signature; the verification unit uses the derived public key to verify the signature.

[0077] Embodiment 5:

[0078] The real-time feature processing unit is specifically used for:

[0079] The real-time feature processing unit is specifically used for:

[0080] To further illustrate the real-time feature processing unit, the only purpose of its establishment is to reproduce the output of the feature value stabilization unit in the verification field; the operation of the unit is the inverse process or corresponding process of the feature value stabilization unit; its configuration is completely the same, not only the algorithm such as BCH decoding, SHA-256, but more importantly, it includes the auxiliary data generated in the binding stage and stored in the micro-point two-dimensional code; it is precisely by using this disclosed auxiliary data that the unit can accurately reconstruct the original, unique PUF feature digest from the noisy real-time analog signal through error correction decoding, provided that the real-time signal comes from the real physical entity.

[0081] Embodiment 6:

[0082] Please refer to Figure 2 , the micro-point two-dimensional code based on the GS1 standard and the commodity anti-counterfeiting method, comprising:

[0083] The physical feature acquisition unit acquires the physical fingerprint of the commodity body and outputs an original analog signal;

[0084] The feature value stabilization unit receives the original analog signal and converts it into a digital PUF feature digest and auxiliary data;

[0085] The digital identity generation unit generates a standard GS1 digital identity;

[0086] The dynamic encryption signature unit encrypts and signs the standard GS1 digital identity using the PUF feature digest and outputs an encrypted signature;

[0087] The coupling identifier encoding unit merges and encodes the standard GS1 digital identity, the encrypted signature, and the auxiliary data into a micro dot two-dimensional code.

[0088] In this embodiment, the generation method of such a digital-physical coupling identifier is described in detail, which is executed in an authorized binding center;

[0089] The flow of the method starts from the production link: the physical feature acquisition unit scans the microscopic analog characteristic PUF of the commodity body to acquire an original analog signal;

[0090] After acquiring the signal, the feature value stabilization unit executes a preset fixed algorithm such as BCH code and hash on the original signal to convert it into a stable and digital PUF feature digest, and generates auxiliary data in the process;

[0091] In parallel, the digital identity generation unit generates a unique standard GS1 digital identity for the commodity;

[0092] The key step of the present application is dynamic encryption signature: the dynamic encryption signature unit executes an encryption signature operation on the standard GS1 digital identity using the just-generated PUF feature digest as a key parameter such as an HMAC key of the encryption process, to generate an encrypted signature that is strongly bound to the physical fingerprint;

[0093] As the end point of the binding stage, the coupling identifier encoding unit merges and encodes the standard GS1 digital identity, the encrypted signature, and the auxiliary data into a micro dot two-dimensional code, which is assigned to the commodity, completing the dynamic binding of the digital identity and the physical entity.

[0094] Embodiment 7:

[0095] Please refer to Figure 3 , the micro dot two-dimensional code based on the GS1 standard and the commodity anti-counterfeiting method further include: a multi-modal reading unit scans the micro dot two-dimensional code at the same time and at the same location to acquire micro dot two-dimensional code data;

[0096] The multi-modal reading unit also scans the physical surface of the product at the same time, at the same location to obtain real-time analog signals;

[0097] The data decoupling unit separates the standard GS1 digital identity and the encrypted signature from the micro-dot QR code data;

[0098] The real-time feature processing unit processes the real-time analog signals into real-time PUF feature digests;

[0099] The encrypted signature verification determining unit uses the real-time PUF feature digests as verification parameters to verify the encrypted signature to obtain a verification result, and determines whether the verification result matches the standard GS1 digital identity;

[0100] When the verification result matches the standard GS1 digital identity, an entity verification pass signal is outputted;

[0101] When the verification result does not match the standard GS1 digital identity, an entity verification fail signal is outputted.

[0102] In this embodiment, the entity verification method for products is described in detail, which is executed on a terminal verification device;

[0103] The flow of the method starts with a verification request in the market circulation link: the multi-modal reading unit must perform dual reading at the same time, at the same location: scanning the micro-dot QR code to obtain micro-dot QR code data; scanning the physical surface of the product below the micro-dot QR code to obtain real-time analog signals;

[0104] After reading, the data decoupling unit immediately parses and separates the standard GS1 digital identity, the encrypted signature, and the auxiliary data from the micro-dot QR code data;

[0105] Synchronously, the real-time feature processing unit uses the same algorithm and parameters as in the production link, and uses the read auxiliary data to process the real-time analog signals into real-time PUF feature digests;

[0106] Then, the system enters the core encrypted signature verification determining step: the encrypted signature verification determining unit performs a local encrypted challenge, which uses the just-generated real-time PUF feature digest as a decryption key or verification parameter to verify the encrypted signature, for example, recalculates the HMAC, and determines whether the calculation result matches the standard GS1 digital identity and the encrypted signature in the encrypted logic;

[0107] Based on the determination result, the system outputs an explicit verification signal: if the encrypted logic matches, i.e., the real-time physical features match the features in the signature, it is determined to be an authentic product, and an entity verification pass signal is outputted; if the encrypted logic does not match, for example, a counterfeiter pastes a real micro-dot QR code on a fake product, resulting in an incorrect real-time PUF feature, it is determined to be a fake product, and an entity verification fail signal is outputted.

[0108] It should be noted that the above examples are only used to illustrate the technical solutions of the present application but not to limit the present application. Although the present application has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present application can be modified or equivalent replaced without departing from the spirit and scope of the technical solutions of the present application.

Claims

1. A micro dot two-dimensional code based on GS1 standard and a product anti-counterfeiting system, characterized in that, The system comprises: a physical feature acquisition unit that acquires a physical fingerprint of a commodity and outputs an original analog signal; a feature value stabilization unit that converts the original analog signal into a digital PUF feature digest and auxiliary data; a digital identity generation unit that generates a standard GS1 digital identity; 2. The GS1 standard-based micro dot two-dimensional code and product anti-fake system according to claim 1, characterized in that, a dynamic encryption signature unit that encrypts and signs the standard GS1 digital identity using the PUF feature digest, and outputs an encrypted signature; a coupling identification encoding unit that encodes the standard GS1 digital identity, the encrypted signature, and the auxiliary data into a micro dot two-dimensional code.

3. The GS1 standard-based micro dot two-dimensional code and product anti-fake system according to claim 1, characterized in that, The system further comprises: a multi-modal reading unit that simultaneously scans the micro dot two-dimensional code and the surface of the commodity to obtain coupled data and real-time analog signals; 4. The GS1 standard-based micro dot two-dimensional code and product anti-fake system according to claim 1, characterized in that, a data decoupling unit that separates the standard GS1 digital identity and the encrypted signature from the coupled data; a real-time feature processing unit that processes the real-time analog signals into real-time PUF feature digests; and 5. The GS1 standard-based micro dot two-dimensional code and product anti-fake system according to claim 1, characterized in that, an encryption verification and judgment unit that verifies the signature using the real-time PUF digests, determines whether the verification result matches the standard GS1 digital identity, and outputs a verification pass or fail signal. The physical feature acquisition unit is specifically configured to:

6. A method for preventing counterfeiting of goods based on a micro dot two-dimensional code according to the GS1 standard, characterized in that, use a high-resolution optical or electrical sensor to scan the microcosmic analog characteristics of the area on the commodity or its packaging corresponding to the position of the micro dot two-dimensional code, wherein the microcosmic analog characteristics include material surface texture or fiber distribution. The feature value stabilization unit is specifically configured to: perform a series of preset and fixed signal processing algorithms on the original analog signal, wherein the signal processing algorithms include blur extraction, error correction code processing, and hash calculation, to extract a determined and unique PUF feature digest from the original analog signal. The dynamic encryption signature unit is specifically configured to: use the PUF feature digest as a private key or signature salt for the encryption process to perform asymmetric or symmetric encryption signature operations on the standard GS1 digital identity. The real-time feature processing unit is specifically configured to:

7. The GS1 standard-based micro dot two-dimensional code and product anti-counterfeiting method according to claim 6, characterized in that, use the same signal processing algorithms, hash algorithms, and preset configuration parameters as the feature value stabilization unit to process the real-time analog signals to generate the real-time PUF feature digests. The method is applied to the system of any one of claims 1 to 5, and comprises: a physical feature acquisition unit that acquires a physical fingerprint of a commodity and outputs an original analog signal; a feature value stabilization unit that converts the original analog signal into a digital PUF feature digest and auxiliary data; a digital identity generation unit that generates a standard GS1 digital identity; a dynamic encryption signature unit that encrypts and signs the standard GS1 digital identity using the PUF feature digest, and outputs an encrypted signature; a coupling identification encoding unit that encodes the standard GS1 digital identity, the encrypted signature, and the auxiliary data into a micro dot two-dimensional code. The method further comprises: a multi-modal reading unit that simultaneously scans the micro dot two-dimensional code at the same time and at the same location to obtain micro dot two-dimensional code data; the multi-modal reading unit also scans the physical surface of the commodity at the same time and at the same location to obtain real-time analog signals; a data decoupling unit that separates the standard GS1 digital identity and the encrypted signature from the micro dot two-dimensional code data; a real-time feature processing unit that processes the real-time analog signals into real-time PUF feature digests; and an encryption verification and judgment unit that verifies the signature using the real-time PUF digests, determines whether the verification result matches the standard GS1 digital identity, and outputs a verification pass or fail signal. The encryption signature verification determining unit verifies the encryption signature by using the real-time PUF feature digest as a verification parameter to obtain a verification result, and determines whether the verification result matches the standard GS1 digital identity; When the verification result matches the standard GS1 digital identity, an entity verification pass signal is outputted; When the verification result does not match the standard GS1 digital identity, an entity verification fail signal is outputted.

Images