NFC label anti-counterfeiting authentication method applied to intelligent household electrical appliance

Abstract

The invention relates to the field of intelligent products, discloses an NFC label anti-counterfeiting authentication method applied to an intelligent household appliance, and solves the problems that an existing NFC label anti-counterfeiting authentication scheme is tedious in implementation process and high in development difficulty. According to the method, the non-repeated KEYs are generated at the cloud in batches and written into the PC end test software, the PC end test software packs the read UID of the NFC label and the selected KEYs into common data and writes the common data into the NFC label, in a user use scene, the mobile terminal supporting the NFC function touches the NFC label to read the UID and the packed data, and the user experience is improved. The method comprises the steps of reading a UID, performing preliminary verification based on the read UID and a UID analyzed from packet data, and uploading an analyzed key KEY to a cloud for re-verification after the preliminary verification is passed, so that the key generation and write-in process is simplified without an encryption algorithm, the UID cannot be duplicated, the cloud key management is utilized, and the encryption algorithm is not needed, and the key generation and write-in process is simplified, so that the key generation and write-in process is simplified, and the key generation and write-in process is simplified. Precise identification of the copy paste and the pirate paste of the NFC label is realized, and NFC label anti-counterfeiting authentication with low development difficulty and high anti-counterfeiting reliability is achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of intelligent products, in particular to an NFC tag anti-counterfeiting method applied to intelligent household appliances. BACKGROUND

[0002] With the rapid development of Internet of Things technology, NFC technology, with the characteristics of near-distance and non-inductive interaction, is deeply integrated with the field of intelligent household appliances, giving birth to convenient functions such as "one-key network configuration" and "one-touch control". Users can quickly complete the network configuration, function customization or device association of intelligent household appliances by touching the NFC tag attached to the household appliance with a mobile terminal (such as a smart phone) supporting NFC function, greatly simplifying the use threshold of intelligent household appliances and improving the smoothness of smart life experience.

[0003] Under this background, as the key medium for the interaction between intelligent household appliances and users, the demand for NFC tags is growing continuously. Not only will intelligent household appliance manufacturers provide NFC tags with their products, but more and more users will also purchase NFC tags for personalized binding with their own intelligent products supporting NFC technology.

[0004] However, the popularity of NFC tags also brings security risks of anti-counterfeiting: illegal businesses copy the storage data (such as unique identifier, configuration information, etc.) of legal NFC tags to make counterfeit tags. These illegal tags not only may cause users to be unable to normally use the functions of intelligent household appliances, but also may cause security risks such as user privacy leakage and device control authority tampering due to carrying malicious data or associating with illegal devices. Therefore, how to realize efficient and reliable anti-counterfeiting of NFC tags has become a core demand of intelligent household appliance manufacturers to be solved urgently.

[0005] To meet the above anti-counterfeiting demand, an NFC tag anti-counterfeiting scheme based on encryption algorithm has been proposed in the prior art, see Figure 1 The scheme relies on an NFC tag, a PC terminal test software, an anti-counterfeiting data cloud platform and a mobile terminal supporting NFC function to jointly constitute an anti-counterfeiting system, wherein the chip used in the NFC tag needs to be built-in with an SM7 encryption algorithm. In the production and detection stage of the NFC tag, the PC terminal test software needs to interact with the NFC tag through the NFC read-write tool connected by a serial port, first acquires the unique identifier (UID, Unique Identifier) of the NFC tag, then uses a preset original password to mix and operate with the UID through an irreversible encryption algorithm to generate a 128-bit exclusive key KEY; subsequently, the PC terminal test software needs to write the key into the fixed storage area of the NFC tag; finally, the PC terminal test software also needs to synchronize the UID of the NFC tag and its corresponding key to the anti-counterfeiting data cloud platform through the network to complete the cloud storage of anti-counterfeiting data.

[0006] In the user use stage, when the NFC function supported mobile terminal (such as smart phone) reads the UID of NFC tag, the UID needs to be sent to the anti-counterfeiting data cloud platform for authentication; after receiving the authentication request, the cloud platform generates a 64-bit random number feedback to the mobile terminal, and at the same time, according to the received UID, the corresponding key stored in advance is called to operate the key and the random number through the SM7 encryption algorithm to obtain the encryption result Q1 (operation logic is Q1=F(KEY,R), wherein F is the SM7 encryption function, and R is the random number); the mobile terminal forwards the received 64-bit random number to the NFC tag, and the NFC tag performs the same operation on the key stored in itself and the random number through the built-in SM7 encryption algorithm to obtain the encryption result Q2 (operation logic is Q2=F(KEY,R)); the mobile terminal forwards the Q2 feedback by the NFC tag to the cloud platform, and the cloud platform judges whether the NFC tag is legal by comparing whether Q1 and Q2 are consistent, if consistent, the authentication is passed, if not consistent, it is judged as an illegal tag.

[0007] The above existing anti-counterfeiting scheme can realize high strength anti-counterfeiting effect based on the irreversibility of SM7 encryption algorithm (even if the attacker listens to the communication data, the key cannot be inversely deduced, and the copied chip cannot pass the authentication without the correct key), but there are still certain limitations in actual application: (1) PC terminal test software function burden is heavy: the existing scheme requires the PC terminal test software to not only realize the interaction with the NFC read-write tool, the acquisition of the tag UID, but also to independently complete the generation of the key KEY (through the encryption operation of the original password and the UID), which increases the development complexity and debugging difficulty of the PC terminal test software.

[0008] (2) NFC tag writing operation is strict: the key KEY needs to be written into the fixed storage area (page59~page62) of the NFC tag, and the auth bit must be opened through a specific command to activate the anti-counterfeiting function, the operation steps are complicated and have strict restrictions on the storage area, once the writing position or operation sequence is wrong, the anti-counterfeiting function of the tag will be invalid, which increases the fault tolerance cost of the production detection link.

[0009] (3) Cloud data synchronization cost is high: after the PC terminal test software completes the tag key writing, it needs to additionally synchronize the UID and the corresponding KEY to the cloud platform through the network, this synchronization process not only increases the steps of the production process, but also needs to solve the security problem of data transmission, which further improves the system deployment cost; (4) Strong dependence on hardware and platform algorithms: Existing solutions require that the chip built into the NFC tag and the anti-counterfeiting data cloud platform must support the SM7 encryption algorithm at the same time. The chip needs to integrate the hardware computing module of the SM7 algorithm, and the cloud platform needs to develop the software computing logic of the SM7 algorithm. The algorithm compatibility and consistency requirements of the two are extremely high, which increases the limitations of chip selection and the difficulty of cloud development.

[0010] Therefore, there is an urgent need for an NFC tag anti-counterfeiting authentication method that simplifies the implementation process, reduces development and production costs, and ensures anti-counterfeiting security, so as to promote the wider application of NFC technology in the field of smart home appliances. Summary of the Invention

[0011] The technical problem to be solved by this invention is to provide an NFC tag anti-counterfeiting authentication method for smart home appliances, which solves the problems of cumbersome implementation process and high development difficulty of existing NFC tag anti-counterfeiting authentication schemes.

[0012] The technical solution adopted by the present invention to solve the above-mentioned technical problems is as follows: An NFC tag anti-counterfeiting authentication method for smart home appliances includes the following steps: S1. The anti-counterfeiting data cloud platform generates unique keys in batches; S2. Import the generated key KEY into the PC-side testing software using a table; S3. The PC-side testing software connects to the NFC reader / writer via a serial port and sends serial port commands to the NFC reader / writer to obtain the UID of the NFC tag; S4. The PC-side testing software packages the UID and a key KEY to generate data D1, and simultaneously packages data D2 that is unrelated to the KEY. Based on the data D1 and D2, the packaged data is written to the NFC tag via serial port instructions. S5. A mobile terminal supporting NFC touches the NFC tag, reads the UID of the NFC tag, and obtains data D1 and data D2; S6. The mobile terminal parses the UID and key KEY from the data D1. It compares whether the parsed UID is consistent with the UID read in step S5. If they are consistent, it proceeds to step S7; otherwise, it determines that the NFC tag is an illegal tag. S7. The mobile terminal sends the parsed key KEY to the anti-counterfeiting data cloud platform. The anti-counterfeiting data cloud platform verifies whether the key KEY exists. If it does not exist, the NFC tag is determined to be an illegal tag; if it exists, the NFC tag is determined to be a legal tag.

[0013] Furthermore, in step S1, the generated key KEY includes: manufacturer information, product material information, generation date, tag serial number, and check digit.

[0014] Furthermore, in step S1, the generated key KEY has an encoding length of 23 bits: the first bit is the manufacturer identifier, the second to eighth bits are the product material code, the ninth to eleventh bits are the product production date, the twelfth to eighteenth bits are the tag serial number, and the twelfth to twentieth bits are random check bits.

[0015] Furthermore, in step S2, the PC-side testing software supports hierarchical management of keys KEY by product material. In step S4, unused keys that match the current material code are automatically selected to participate in the generation of package data D1.

[0016] Furthermore, in step S4, the data D2 is the APP download link information of the product associated with the NFC tag.

[0017] Furthermore, in step S5, after acquiring data D2, the mobile terminal downloads the APP associated with the NFC tag through the APP download link. If the mobile terminal has already installed the APP, the download is skipped and the user directly enters the APP. In step S6, when the user enters the APP, if the mobile terminal touches the NFC tag again, the UID and key in data D1 will be automatically parsed out.

[0018] Furthermore, in step S4, after data D1 and D2 are grouped into packets, they are written to the NFC tag in the form of ordinary data packets via serial port commands.

[0019] Furthermore, in step S7, the anti-counterfeiting data cloud platform verifies the existence of the received key through a preset key management list. The key management list records the key generated by the anti-counterfeiting data cloud platform and its usage status.

[0020] The beneficial effects of this invention are: (1) Simplify the implementation process and reduce the difficulty of development and production: In this invention, the PC-side testing software does not need to generate keys itself, but only needs to import keys generated in batches in the cloud. There is no need to write the keys into the fixed storage area of ​​the NFC tag and enable the chip anti-counterfeiting authentication function. The keys are written in the form of ordinary data packets, and there is no need to synchronize the UID and the key to the cloud after the key is written. This significantly reduces the functional burden and development complexity of the PC-side testing software. At the same time, the NFC tag chip and the anti-counterfeiting data cloud platform do not need to support specific encryption algorithms such as SM7, reducing hardware selection restrictions and cloud development thresholds.

[0021] (2) Enhance anti-counterfeiting reliability and accurately identify illegal labels: The application realizes high security anti-counterfeiting through a double verification mechanism of a mobile terminal: the first verification compares the UID in the data with the directly obtained label UID, and if they are inconsistent, copying and pasting are eliminated; the second verification checks whether the parsed key exists in the cloud, thereby ensuring that the label data is written by the manufacturer, and pirate labels are eliminated, and double protection can effectively detect copied labels and pirate labels, avoiding the risk of function failure and privacy leakage faced by users due to the use of illegal labels.

[0022] (3) Optimize user experience and reduce the operation threshold: The user can trigger anti-counterfeiting authentication by touching the NFC label through the mobile terminal without additional complex operations; if the mobile terminal does not install the associated APP, the download link stored in the label can be directly obtained, realizing the quick connection of touching-verification-use, and adapting to the scene needs of user self-binding NFC labels and smart products.

[0023] (4) Reduce system deployment and maintenance costs: The cloud generates keys in batches and supports hierarchical management according to product materials, facilitating manufacturers to manage NFC labels in a large scale and classification; there is no need to handle the security transmission problem of synchronizing the key to the cloud, and there is no need to pay the development cost for adapting specific encryption algorithms for chips and the cloud, thereby reducing the overall system deployment and long-term maintenance costs. BRIEF DESCRIPTION OF DRAWINGS

[0024] Figure 1 It is a framework diagram of the NFC label anti-counterfeiting authentication scheme in the prior art.

[0025] Figure 2 It is a framework diagram of the NFC label anti-counterfeiting authentication scheme in the application.

[0026] Figure 3 It is a flowchart of the NFC label anti-counterfeiting authentication method in the embodiment of the application. DETAILED DESCRIPTION

[0027] The application aims to provide an NFC tag anti-counterfeiting authentication method applied to smart home appliances, and solve the problems of complicated implementation process and great development difficulty of existing NFC tag anti-counterfeiting authentication schemes. The core idea is: a batch of non-repeated keys KEY are generated on the cloud and written into PC test software, the PC test software writes the UID of the read NFC tag and the selected key KEY into the NFC tag as normal data, in the user scenario, the UID and the packaged data are read by the mobile terminal supporting NFC function, and the UID read is preliminarily checked based on the UID parsed from the packaged data, and after the preliminary check is passed, the parsed key KEY is uploaded to the cloud for rechecking, so that the NFC tag anti-counterfeiting authentication with low development difficulty and high anti-counterfeiting reliability is realized.

[0028] In the specific implementation, the NFC tag anti-counterfeiting authentication scheme provided by the application is as shown in Figure 2 As shown in the figure, in terms of system architecture, it includes an NFC tag, PC test software, an anti-counterfeiting data cloud platform and a mobile terminal device supporting NFC function. The NFC tag adopts a general NFC chip without built-in SM7 encryption algorithm module; the PC test software can be deployed on an industrial PC and supports serial communication and Excel table import function; the anti-counterfeiting data cloud platform can be built based on an Ali cloud server and has the functions of key batch generation, hierarchical management and verification; and the mobile terminal supporting NFC function can be a smart phone with Android or iOS system, and a smart home appliance associated APP can be pre-installed or downloaded.

[0029] In the present application, the implementation process of NFC tag anti-counterfeiting authentication can be described as follows: the cloud platform generates key codes in batches (in principle, these keys cannot be repeated), the generated keys are imported into PC terminal test software, after the PC terminal test software obtains the UID of the NFC tag, KEY+UID (wherein KEY value is one card one secret code, and UID is the UID of the tag) is written into the NFC tag in the form of a normal data packet. When the NFC tag is in user mode, the mobile phone first obtains the UID of the tag, and then reads and parses KEY+UID data. If the parsed UID is consistent with the UID obtained by the mobile phone itself, it means that the tag is legal (because the UID of the NFC tag is its unique identifier and cannot be copied), otherwise it is determined to be an illegal tag (because the illegal tag can copy the UID+KEY data, but the UID of the tag itself cannot be changed). Further, the mobile phone sends the KEY value to the anti-counterfeiting data cloud platform through the network, and compares whether the KEY value exists in the platform. If the comparison is passed, it means that the data of the tag is written by the manufacturer and has not been modified arbitrarily, so it is determined that the tag content is the original version, otherwise it is determined to be a pirate.

[0030] Embodiment: The present embodiment provides an NFC tag anti-counterfeiting authentication method applied to smart home appliances, referring to Figure 3 , which comprises the following implementation steps: S1. The anti-counterfeiting data cloud platform generates a series of non-repeating keys KEY in batches: In this step, the anti-counterfeiting data cloud platform generates a series of non-repeating keys KEY in batches according to the demand. In an exemplary embodiment, the length of the key KEY is 23 bits, which contains information such as manufacturer, material production date, serial number, and random check digit. For example: M80046292210000001XXXXX: wherein the first bit "M" represents the production manufacturer of the tag; the second to eighth bits "8004629" represent the product material to which the NFC tag is applied, such as a smart air conditioner; the ninth to eleventh bits "221" represent the production year and month; the twelfth to eighteenth bits "0000001" represent the tag serial number; and the nineteenth to twenty-third bits "XXXXX" are random check digits. For the structure of this key KEY, it covers the production information and serial number information of the tag, which not only facilitates the cloud to manage the keys by product type and production batch (the PC terminal can subsequently filter the keys by material), but also enables quick tracing of the source of the tag during subsequent verification. The random check digit is added to avoid counterfeit keys by imitating the coding structure of illegal merchants.

[0031] In this embodiment, the keys are generated in batches by the cloud rather than by the PC, which aims to replace the complex logic of generating keys by PC using "original password + UID encryption operation" in the prior art. The cloud has stronger computing and storage capabilities, can generate thousands of keys at a time, and can ensure global uniqueness of the keys (avoid the risk of key duplication caused by decentralized generation by PC), while reducing the development difficulty of PC test software (no need to develop encryption operation modules).

[0032] S2. Key KEY import PC test software: In this step, the keys KEY generated in batches on the cloud platform are exported as an Excel table, which contains key number, KEY value, material code, generation time, and use status fields. The initial "use status" is "unused". The table is imported into the PC test software through the USB interface. The PC test software automatically reads the table data, stores the keys according to the "material code" (such as storing the keys of "8004629" material in the "smart air conditioner tag" folder), and marks the key use status (unused / used) in real time.

[0033] Among them, the keys are managed by material code layering to adapt to the needs of multiple product lines of manufacturers: if the same workshop produces NFC tags for air conditioners, refrigerators, and washing machines at the same time, the operator only needs to select the corresponding material code (such as "8004629") on the PC, and the software can automatically filter out the unused keys corresponding to the material without the need for manual searching, improving production efficiency.

[0034] Real-time marking of "use status" is to prevent key reuse: if a key has been written to a NFC tag, the software will immediately change its status to "used" to avoid subsequent miswriting to other tags, thereby ensuring "one card one secret".

[0035] S3. PC test software obtains the UID of the NFC tag: In this step, the PC test software connects the NFC read-write device through the serial port. The device communicates with the PC test software through the serial communication interface, and the NFC tag is placed on the NFC read-write device. After the NFC read-write device and the PC test software complete the serial port connection and establish communication, the PC sends a serial port command to obtain the UID of the NFC tag, and the NFC read-write device sends the read NFC tag UID back to the PC test software.

[0036] S4. PC test software data packet based on UID and write to NFC tag: In this step, the PC software automatically filters out the "unused" keys that match the current material code, packages the UID+KEY together to generate the data to be written, D1, and then packages the data to be written, D2. In this embodiment, D2 is the download link of the smart home appliance (such as a smart air conditioner) APP, and the format is a UTF-8 encoded string.

[0037] Then, the PC-side testing software merges the data into a complete data packet in the order of D1 data first and D2 data last, and sends a serial port command to the NFC reader / writer. After receiving the command, the NFC reader / writer writes the complete data packet into pages 4 to 23 of the NFC tag in ordinary data form (pages 4 to 62 of the 2K bit chip are user readable and writable areas, so there is no need to write to pages 59 to 62, nor is there a need to set the auth bit). After writing is completed, a "write successful" command is sent back.

[0038] S5. Mobile terminal reads data from NFC tag: In this step, in the usage scenario, the user touches the NFC tag with a smartphone (with NFC function enabled). The phone system reads the tag's UID and the D1 and D2 data stored in pages 4 to 23 through the NFC module, and triggers the associated operation: if the phone does not have the smart air conditioner APP installed, the system automatically jumps to the download link in D2, automatically downloads and completes the APP installation; if the APP is already installed, the APP is launched directly and the read tag data is imported.

[0039] S6. The mobile terminal parses the tag data and performs preliminary verification based on UID comparison: In this step, with the APP running, touching the smartphone with the NFC tag again will trigger the parsing of the D1 data. By parsing the D1 data, the UID and key KEY are obtained. The APP automatically compares the parsed UID with the tag UID read directly by the phone: if the two do not match, the APP will immediately pop up a message saying "The tag is a copy and paste and cannot be used", terminating the authentication process; if the two match, it will proceed to the next verification step.

[0040] The core principle of the preliminary verification in this step is to utilize the "physical uniqueness" of the NFC tag's UID: the UID of the NFC chip is burned by the chip manufacturer during production and cannot be modified or copied by software (even if an illegal merchant copies the D1 and D2 data of the tag, the tag's own UID will still be inconsistent with the UID in the copied data); this verification can quickly intercept "copycat stickers that copy data but cannot copy the UID", and can be completed without an internet connection, thus improving verification efficiency.

[0041] S7. The mobile terminal uploads the parsed KEY to the cloud platform for re-verification: In this step, the APP sends the parsed KEY to the anti-counterfeit data cloud platform through the network. The cloud platform queries whether the KEY exists and the "use state" is "used" in the key management list after receiving it. If the KEY exists and the state matches, it means that the KEY is generated by the cloud and has been legally written into the label. The cloud platform feeds back the verification result ("legal" or "illegal") to the APP. If the feedback is "legal", the APP displays "label authentication passed, can normally bind the smart air conditioner". If the feedback is "illegal" (such as KEY does not exist or the state is "unused", which means that the KEY is counterfeit), the APP prompts "the label is a pirated sticker and cannot be used".

[0042] The core principle of re-verification in this step is to intercept counterfeit KEYs: if an illegal merchant imitates the key structure to counterfeit a KEY, it can pass the initial UID verification, but the cloud has no record of the KEY, so it will still be judged as illegal. At the same time, the cloud verifies that the "KEY use state" is "used", which can avoid the risk of "cloud-generated unused KEYs being illegally used", such as a certain unused KEY being leaked and illegally written into a label. The cloud will still judge it as illegal because the state of the KEY is "unused".

[0043] In this embodiment, the initial verification can quickly filter out copied stickers, and the re-verification can accurately intercept pirated stickers. The combination of the two ensures both the authentication speed and the reliability of anti-counterfeiting.

[0044] Although embodiments of the present application have been described, it can be understood by those skilled in the art that various changes, modifications, replacements and variations can be made to these embodiments without departing from the principles and spirits of the present application, and all of them are within the protection scope of the present application.

Claims

1. A NFC tag anti-counterfeiting authentication method applied to a smart home appliance, characterized in that, The method comprises the following steps: S1. The anti-counterfeiting data cloud platform generates a non-repetitive key KEY in batches; S2. The generated key KEY is imported into the PC terminal test software through a table; S3. The PC terminal test software is connected to the NFC read-write device through a serial port, and sends a serial port instruction to the NFC read-write device to obtain the UID of the NFC tag; S4. The PC terminal test software packages the UID and a key KEY to generate data D1, and simultaneously packages data D2 unrelated to the KEY, and writes the packaged data D1 and D2 into the NFC tag through a serial port instruction; S5. The mobile terminal supporting NFC function touches the NFC tag, reads the UID of the NFC tag, and obtains data D1 and data D2; S6. The mobile terminal parses the UID and the key KEY in data D1, and compares whether the parsed UID is consistent with the UID read in step S5, if yes, step S7 is entered, otherwise, it is determined that the NFC tag is an illegal tag; S7. The mobile terminal sends the parsed key KEY to the anti-counterfeiting data cloud platform, and the anti-counterfeiting data cloud platform verifies whether the key KEY exists, if not, it is determined that the NFC tag is an illegal tag; if yes, it is determined that the NFC tag is a legal tag.

2. The NFC tag anti-counterfeiting authentication method applied to the intelligent household appliance according to claim 1, wherein in step S1, the generated key KEY comprises: manufacturer information, product material information, generation date, tag serial number and check digit.

3. The NFC tag anti-counterfeiting authentication method applied to the intelligent household appliance according to claim 2, wherein in step S1, the coding length of the generated key KEY is 23 bits: the first bit is the manufacturer identification, the second to eighth bits are the product material code, the ninth to eleventh bits are the product production date, the twelfth to eighteenth bits are the tag serial number, and the nineteenth to twenty-third bits are the random check digit.

4. The NFC tag anti-counterfeiting authentication method applied to the intelligent household appliance according to claim 1, wherein in step S2, the PC terminal test software supports hierarchical management of the key KEY according to the product material, and in step S4, automatically selects the unused key matching the current material code to participate in the package to generate data D1.

5. The NFC tag anti-counterfeiting authentication method applied to the intelligent household appliance according to claim 1, wherein in step S4, the data D2 is the APP download link information of the product associated with the NFC tag.

6. The NFC tag anti-counterfeiting authentication method applied to the intelligent household appliance according to claim 5, wherein in step S5, after obtaining the data D2, the mobile terminal downloads the APP of the product associated with the NFC tag through the APP download link, and if the mobile terminal has installed the APP, it skips the download and directly enters the APP; in step S6, under the condition of entering the APP, the mobile terminal touches the NFC tag again, and automatically parses the UID and the key KEY in data D1. ​ ​ ​ ​ ​ ​ 7. The NFC tag anti-counterfeiting authentication method applied to the smart home appliance according to claim 1, characterized in that, In step S4, the data D1 and D2 are packaged and written into the NFC tag in the form of a normal data packet through a serial port instruction.

8. The NFC tag anti-counterfeiting authentication method for smart home appliances according to any one of claims 1-7, characterized in that, In step S7, the anti-counterfeiting data cloud platform checks whether the received KEY exists through a preset KEY management list, and the KEY management list records the KEY generated by the anti-counterfeiting data cloud platform and the use state.

Images