Electronic mark anti-counterfeiting method, system and equipment and storage medium

Abstract

The invention relates to an electronic mark anti-counterfeiting method, system and device and a storage medium, and the method comprises the steps: making an electronic authentication mark for a product manufacturer by a mark generation device under the application of the product manufacturer, and issuing the electronic authentication mark to an authorized mark carrier tool in the form of a ciphertext; the product information is stored in a database of a verification background; the mark carrier tool meeting the starting control condition is started, and the product production equipment is allowed to safely call the electronic authentication mark stored in the product production equipment; the product production equipment applies the called electronic authentication mark to the internal security storage of the authentication product; during product verification, the verification terminal reads the electronic authentication mark information ciphertext from the product to obtain a product information ciphertext and sends the product information ciphertext to the verification background; and the verification background compares the decrypted product information with the product information in the database to complete authentication verification. A commercial password algorithm is adopted, the authenticity and integrity of the electronic authentication mark are guaranteed, and safe storage, management and verification of the electronic authentication mark are achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the fields of computer technology, information security, authentication product anti-counterfeiting, and the like, and in particular, relates to an electronic sign anti-counterfeiting method, system, device, and storage medium. BACKGROUND

[0002] With the rapid development of networking and informatization, network security problems have become increasingly prominent. As the cornerstone of network security, the demand for electronic sign anti-counterfeiting technology is also growing.

[0003] Current electronic sign anti-counterfeiting technologies mainly use the following methods: (1) RFID technology (Radio Frequency Identification), RFID technology identifies specific targets and reads and writes related data through radio waves without establishing mechanical or optical contact. It can ensure fast reading and writing of data and real-time updating, and realize product traceability and verification. However, the implementation and maintenance cost of RFID technology is relatively high, which may increase the production cost of products. In addition, RFID tags are easy to be tampered with or copied maliciously, thereby reducing the effectiveness of electronic sign anti-counterfeiting technology. (2) Two-dimensional code anti-counterfeiting technology, which can be used for anti-counterfeiting identification on product packaging. Consumers can verify the authenticity of the product by scanning the two-dimensional code or inputting the anti-counterfeit code. This technology is convenient and easy to popularize. However, the obvious disadvantage is that it is easy to be copied and counterfeited. If the two-dimensional code is tampered with or forged maliciously, consumers may not be able to accurately determine the authenticity of the product. (3) Digital watermarking technology. A specific digital watermark is embedded in the product-related image, document or data as a hidden electronic sign. This technology is not easy to detect and does not affect the normal use and visual effect of the original data. However, it may have a certain small impact on the quality of the original data in some cases, and the implementation and detection process may be relatively complex, requiring certain technical ability and resources. (4) Code anti-counterfeiting label, which is a digital code-based anti-counterfeiting technology. A unique digital code is usually printed on the product or packaging. Consumers can verify the authenticity of the product by calling the anti-counterfeiting phone or sending a message. However, the problem is that the anti-counterfeiting code of the code anti-counterfeiting label is easy to be copied and counterfeited. If counterfeiters use the same anti-counterfeiting code first, the system may not be able to accurately determine the authenticity of the product. In addition, the anti-counterfeiting effect of the code anti-counterfeiting label is affected by the willingness and method of verification by consumers. If consumers do not verify or the verification method is not convenient, the anti-counterfeiting effect will be greatly reduced.

[0004] The above-mentioned mode has potential risks of real reliability of electronic marks and leakage of related user information in actual application, and it is difficult to effectively protect and supervise the electronic marks in network space. Even if general encryption storage means is used, the safety and reliability of the information cannot be ensured, and the Internet application service provider cannot bear the legal risks caused by the forgery and tampering of the electronic authentication marks. In summary, the current high-security level electronic mark anti-counterfeiting technology cannot realize the supervision and high credibility of the electronic authentication marks in a real sense.

[0005] Therefore, an effective electronic mark anti-counterfeiting technology is urgently needed, which can effectively avoid a series of security problems such as untrustworthy electronic authentication marks, user information leakage, and illegal retention of manufacturer information by application parties, and actually enhance the credibility of the results in the generation process of the electronic authentication marks and effectively protect the safety of related information. SUMMARY

[0006] In view of the above analysis, the present application aims to disclose an electronic mark anti-counterfeiting method, system, device and storage medium; a commercial cryptographic algorithm is used to implement encryption and signature operation on the electronic authentication mark, so as to protect the authenticity and integrity of the electronic authentication mark, and then realize the safe storage, management and verification of the electronic authentication mark; both the supervision requirements for the electronic authentication mark and the safety and reliability of the manufacturer when using the electronic authentication mark can be ensured.

[0007] One aspect of the present application discloses an electronic mark anti-counterfeiting method based on a commercial cryptographic algorithm, comprising:

[0008] On the side of the certification authority, the mark generation device makes the electronic authentication mark encrypted by the commercial cryptographic algorithm for the product manufacturer under the application of the product manufacturer; the information including the electronic authentication mark is issued to the authorized mark carrier tool in ciphertext; and the product information corresponding to the electronic authentication mark is stored in the database of the verification background;

[0009] On the side of the product manufacturer, the mark carrier tool starts to allow the product production device to safely call the stored electronic authentication mark when the starting control condition is met; and the product production device applies the called electronic authentication mark to the internal safe storage of the certified product;

[0010] When the product is verified, the verification terminal on the product side reads the electronic authentication mark from the product; the product information ciphertext contained in the electronic authentication mark is sent to the verification background; the product information obtained by decryption is compared with the product information in the database to complete the authentication verification.

[0011] Another aspect of the present invention discloses an electronic mark anti-counterfeiting system that implements the electronic mark anti-counterfeiting method based on commercial cryptographic algorithms as described above, comprising: mark generation equipment, mark carrier tool, product manufacturing equipment, verification backend and verification terminal;

[0012] Logo generation equipment, logo carrier tools, and product manufacturing equipment; among which,

[0013] The mark generation device is located on the certification body side and is used to create electronic certification marks for product manufacturers upon their application.

[0014] The product manufacturing equipment is located on the product manufacturer's side and is used to produce products with internal electronic certification marks applied, and to securely apply the electronic certification marks to certified products.

[0015] The mark carrier tool is located on the certification authority side and connected to the mark generation device. After authorization by the mark generation device, it stores information, including electronic certification marks, issued in encrypted form. It is also located on the product manufacturer side and connected to the product manufacturing equipment. It is activated under startup control conditions, allowing the product manufacturing equipment to securely access the stored electronic certification marks.

[0016] The verification terminal is located on the product side and is used to read the electronic certification mark when verifying the product and send the encrypted product information contained in the electronic certification mark to the verification backend.

[0017] The verification backend is located on the certification body side and is used to store product information corresponding to the electronic certification mark. At the request of the verification terminal, the verification backend decrypts the product information sent by the verification terminal and compares it with the product information in the database to complete the verification of whether it is a certified product.

[0018] Another aspect of the present invention discloses an electronic device, including a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor executes the computer program to implement the electronic mark anti-counterfeiting method based on commercial cryptographic algorithms as described above.

[0019] Another aspect of the present invention discloses a computer-readable storage medium storing a computer program that, when executed by a processor, implements the electronic tag anti-counterfeiting method based on commercial cryptographic algorithms as described above.

[0020] This invention can achieve one of the following beneficial effects:

[0021] High security and strong confidentiality. Commercial cryptographic algorithms possess strong encryption capabilities, effectively preventing the identification information from being cracked and tampered with, greatly improving anti-counterfeiting security. It ensures that product-related information is not illegally obtained or leaked; only authorized verification personnel can obtain authentic information.

[0022] Difficult to counterfeit and accurately verifiable. Due to the complexity and uniqueness of the algorithm, counterfeiting electronic tags becomes extremely difficult; it can accurately verify the authenticity of products and reduce the possibility of misjudgment.

[0023] Effectively ensures the security supervision of electronic tags. Better enables traceability throughout the product lifecycle, facilitates management and supervision, strongly guarantees the secure operation of the electronic tag anti-counterfeiting system, and achieves secure storage and management of relevant information. Attached Figure Description

[0024] The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Throughout the drawings, the same reference numerals denote the same parts.

[0025] Figure 1 This is a flowchart of an electronic tag anti-counterfeiting method based on commercial cryptographic algorithms in an embodiment of the present invention;

[0026] Figure 2 This is a schematic diagram showing the components and connections of the electronic tag anti-counterfeiting system in an embodiment of the present invention. Detailed Implementation

[0027] Preferred embodiments of the present invention will now be described in detail with reference to the accompanying drawings, which form part of this application and, together with the embodiments of the present invention, serve to illustrate the principles of the present invention.

[0028] Example 1

[0029] One embodiment of the present invention discloses an anti-counterfeiting method for electronic tags based on commercial cryptographic algorithms, such as... Figure 1 As shown, it includes:

[0030] Step S1: On the certification body side, the mark generation device, upon application by the product manufacturer, produces an electronic certification mark encrypted using commercial cryptographic algorithms; the information, including the electronic certification mark, is sent in encrypted form to the authorized mark carrier tool; and the product information corresponding to the electronic certification mark is stored in the database of the verification backend.

[0031] Step S2: On the product manufacturer's side, the mark carrier tool that meets the start control conditions is started, allowing the product manufacturing equipment to securely access the electronic certification mark stored therein; the product manufacturing equipment then applies the accessed electronic certification mark to the secure storage inside the certified product.

[0032] Step S3: During product verification, the verification terminal on the product side reads the electronic certification mark from the product; sends the encrypted product information contained in the electronic certification mark to the verification backend; the verification backend compares the decrypted product information with the product information in the database to complete the certification verification and determine whether the product is a certified product.

[0033] In this embodiment, the electronic mark (electronic certification mark) is an electronic certification mark, including mandatory certification marks and voluntary certification marks. Voluntary certification marks include nationally unified voluntary certification marks and certification marks developed by certification bodies themselves. Mandatory certification marks and nationally unified voluntary certification marks are nationally proprietary certification marks. This certification mark is used to confirm the authenticity, legality, and reliability of products, services, or information. Each compliant product corresponds to a unique certification mark. Through the certification mark, users can quickly identify certified products, enhancing trust and ensuring transaction security.

[0034] Specifically, in step S1, the process of the mark generation device creating an electronic authentication mark encrypted with commercial cryptographic algorithms for the product manufacturer upon application includes:

[0035] 1) The product manufacturer sends product information, including product ID, batch number, production date, the product manufacturer's unique manufacturer code, and the location where the product manufacturer uses the electronic certification mark to the mark generation device;

[0036] The mark generation equipment is a system used by certification authorities to issue electronic certification marks. The system produces electronic certification marks according to the application requirements of certified product manufacturers and the type of product applied for.

[0037] 2) The mark generation device uses commercial cryptographic algorithms to encrypt product information and uses set encoding rules or algorithms to convert the encrypted product information into a specific form of electronic certification mark, including strings or QR codes.

[0038] The commercial cryptographic algorithms include cryptographic algorithms such as SM2, SM3 and SM4; the encoding rules or algorithms may also adopt existing rules or algorithms according to user needs.

[0039] 3) A second key is issued to the product manufacturer via the cryptographic device for key negotiation with the token carrier tool.

[0040] Specifically, in step S1, information, including the electronic authentication mark, is transmitted in encrypted form to the authorized mark carrier tool; including:

[0041] 1) Authorization of logo carrier tools;

[0042] After the logo generation device connects with the authorized logo carrier tool, two-way authentication is performed; the logo generation device authorizes the logo carrier tool that has successfully completed two-way authentication.

[0043] The two-way authentication utilizes the first key issued to the token carrier tool by the cryptographic device when the token carrier tool leaves the factory, and negotiates the key with the token generation device to achieve two-way authentication between the token generation device and the token carrier tool, and then authorizes the token carrier tool.

[0044] 2) Encrypted message distribution;

[0045] After two-way identity authentication, the mark generation device will generate an electronic certification mark for the manufacturer, which will be used as a second key for verifying the consistency of the manufacturer code and key negotiation between the mark carrier tool and the product manufacturing equipment. Information such as the unique manufacturer code of the product manufacturer and the location where the product manufacturer uses the electronic certification mark will be sent to the mark carrier tool in encrypted form.

[0046] 3) Secure storage procedures;

[0047] The flag carrier tool decrypts the received ciphertext and then stores it securely.

[0048] In this step, the mark carrier tool uses the first key issued when the mark carrier tool leaves the factory to negotiate a key with the mark generation device to achieve two-way identity authentication; information including the electronic certification mark is obtained and stored securely using encryption, ensuring that the carrier for obtaining the electronic certification mark is an authorized carrier, and is transmitted in encrypted form to ensure the confidentiality of information transmission.

[0049] To achieve the above functions, the token carrier tool includes a key management module, an algorithm module, and a storage module; among them...

[0050] The key management module is used to manage keys, including the first key and the second key.

[0051] The first key is used for key negotiation between the token carrier tool and the token generation device, and is distributed to the token carrier tool through the cryptographic device when the token carrier tool leaves the factory;

[0052] The second key is used for vendor code consistency verification and key negotiation between the token carrier tool and the product manufacturing equipment. When the certification authority authorizes the token carrier tool, it is issued to the token carrier tool through a cryptographic device.

[0053] The algorithm module uses cryptographic algorithms including SM2, SM3 and SM4. When connected to a mark generation device or product manufacturing device, it uses the obtained first key or second key to perform key negotiation and complete two-way identity authentication.

[0054] The storage module is used to securely store the electronic certification mark produced by the manufacturer after decrypting the encrypted text sent by the mark generation device, the second key used for verifying the consistency of the manufacturer code and key negotiation between the mark carrier tool and the product manufacturing equipment, the unique manufacturer code of the product manufacturer, and the location information of the product manufacturer using the electronic certification mark.

[0055] Specifically, in step S2, on the product manufacturer's side, the startup process of the marker carrier tool that meets the startup control conditions includes:

[0056] 1) Geographical location verification;

[0057] The location of the marker carrier tool after connecting to the product manufacturing equipment is compared with the location of the electronic certification mark issued by the product manufacturer by the stored marker generation equipment to determine whether it is within the set distance range. If yes, the current location is within the set activation geographical location; geographical location verification is successful.

[0058] 2) Consistency verification;

[0059] After the tag carrier tool is connected to the product manufacturing equipment, the product manufacturing equipment sends the unique manufacturer code of the product manufacturer, which is encrypted with a second key, to the tag carrier tool. After the tag carrier tool decrypts the code, it performs a consistency verification with the stored unique manufacturer code information of the product manufacturer. If the consistency verification is successful, the currently connected product manufacturing equipment is the designated user.

[0060] 3) Once both the geographic location verification and the consistency verification are passed, the mark carrier tool is activated, allowing the use of the electronic certification mark; otherwise, the mark carrier tool is not activated, and the use of the electronic certification mark is rejected.

[0061] To achieve the above functions, the sign carrier tool is also equipped with a start control module and a positioning module;

[0062] Startup control module; used to determine the startup status after the marker carrier tool is connected to the product manufacturing equipment;

[0063] The positioning module is used for positioning the marker carrier tool; the positioning module includes modules with positioning functions, such as a 4G module.

[0064] Specifically, in step S2, after the marker carrier tool is started, it needs to perform two-way authentication with the product manufacturing equipment again; only after the two-way authentication is successful can the product manufacturing equipment securely access the electronic authentication marker stored therein.

[0065] Specifically, the two-way authentication process for the identification carrier tool and the product manufacturing equipment includes:

[0066] 1) The tag carrier tool generates a random number 1 and sends the random number 1 and the product ID to the product manufacturing equipment;

[0067] 2) The product manufacturing equipment generates random number 2, and encrypts random number 2, the received random number 1, and the product ID together using the second key, and then sends the ciphertext to the carrier tool.

[0068] 3) The carrier tool decrypts the received ciphertext and compares the decrypted random number 1 and product ID with the random number 1 and ID it sent; if they match, proceed to the next step.

[0069] 4) The carrier tool encrypts the random number 2 and the product ID using its own stored second key, and then sends the ciphertext to the product manufacturing equipment. The manufacturing system decrypts the ciphertext and compares whether the decrypted random number 2 and the product ID are consistent. If they are consistent, two-way authentication is completed.

[0070] In this step, a start-up control condition check is performed first. Only when the start-up control conditions are met can the mark carrier tool be activated. These conditions include both user consistency verification and geographic location determination. The mark carrier tool can only be activated by a designated user within the specified geographic location. After activation, two-way authentication is performed again before the product manufacturing equipment is allowed to securely access the electronic certification mark. This effectively prevents unauthorized areas or users from fraudulently applying the mark, ensuring the authenticity and reliability of the certification process and truly achieving information-based and digital certification of products. This approach meets the regulatory requirements of relevant departments for certified products while ensuring that products with applied electronic certification marks are controllable and trustworthy.

[0071] After two-way authentication, the product manufacturing equipment loads the electronic certification mark, which is then sent to the product and stored securely, thereby enabling the electronic certification mark to be applied to the product for security.

[0072] Specifically, the product verification process in step S3 includes:

[0073] 1) The product-side verification terminal reads the electronic certification mark information from the product and deciphers the product information;

[0074] The verification terminal is internally configured with cryptographic algorithms and decoding rules or algorithms to decode and decrypt the read electronic certification mark information to obtain the product information contained in the electronic certification mark.

[0075] 2) The verification terminal sends a verification request to the verification backend;

[0076] 3) The verification backend generates a string of random numbers and sends it to the verification terminal;

[0077] 4) The verification terminal uses the verification key to generate a value containing product information by encrypting the received random number and the deciphered product information using an encryption algorithm, and then returns it to the verification backend;

[0078] The verification key is distributed from the authentication authority's cryptographic device to the verification terminal and the verification backend;

[0079] 5) The verification backend decrypts the received value containing product information using the verification key to obtain the product information contained therein;

[0080] 6) Verify the decrypted product information in the background and compare it with the stored product information; if they match, the verification is successful and the product is confirmed as a certified product; otherwise, it fails and the product is disconnected from certification.

[0081] In another embodiment, step S3 uses an HMAC value generated by encrypting the electronic certification mark and a random number for product verification.

[0082] The process of using electronic certification marks for product verification includes:

[0083] 1) The product-side verification terminal reads the electronic certification mark information from the product;

[0084] 2) The verification terminal sends a verification request to the verification backend;

[0085] 3) The verification backend generates a string of random numbers and sends it to the verification terminal;

[0086] 4) The verification terminal uses the verification key to encrypt the received random number and electronic authentication mark information to generate an HMAC value and send it to the verification backend;

[0087] 5) The verification backend calculates an HMAC value based on the random number it sent and the information stored locally, and compares it with the received HMAC value. If the comparison is successful, the verification is completed.

[0088] In summary, the electronic tag anti-counterfeiting method based on commercial cryptographic algorithms in this embodiment utilizes cryptographic technology to protect product information, ensuring the security and integrity of the information. Through product verification, it effectively prevents the circulation of counterfeit products and has the following effects:

[0089] High security and strong confidentiality. Commercial cryptographic algorithms possess strong encryption capabilities, effectively preventing the identification information from being cracked and tampered with, greatly improving anti-counterfeiting security. It ensures that product-related information is not illegally obtained or leaked; only authorized verification personnel can obtain authentic information.

[0090] Difficult to counterfeit and accurately verifiable. Due to the complexity and uniqueness of the algorithm, counterfeiting electronic tags becomes extremely difficult; it can accurately verify the authenticity of products and reduce the possibility of misjudgment.

[0091] Effectively ensures the security supervision of electronic tags. Better enables traceability throughout the product lifecycle, facilitates management and supervision, strongly guarantees the secure operation of the electronic tag anti-counterfeiting system, and achieves secure storage and management of relevant information.

[0092] Example 2

[0093] One embodiment of the present invention discloses an electronic tag anti-counterfeiting system that implements the electronic tag anti-counterfeiting method based on commercial cryptographic algorithms as described in Embodiment 1, such as... Figure 2 As shown, it includes: logo generation equipment, logo carrier tools, product manufacturing equipment, verification backend, and verification terminal;

[0094] Logo generation equipment, logo carrier tools, and product manufacturing equipment; among which,

[0095] The mark generation device is located on the certification body side and is used to create electronic certification marks for product manufacturers upon their application.

[0096] The product manufacturing equipment is located on the product manufacturer's side and is used to produce products with internal electronic certification marks applied, and to securely apply the electronic certification marks to certified products.

[0097] The mark carrier tool is located on the certification authority side and connected to the mark generation device. After authorization by the mark generation device, it stores information, including electronic certification marks, issued in encrypted form. It is also located on the product manufacturer side and connected to the product manufacturing equipment. It is activated under startup control conditions, allowing the product manufacturing equipment to securely access the stored electronic certification marks.

[0098] The verification terminal is located on the product side and is used to read the electronic certification mark when verifying the product and send the encrypted product information contained in the electronic certification mark to the verification backend.

[0099] The verification backend is located on the certification body side and is used to store product information corresponding to the electronic certification mark. At the request of the verification terminal, the verification backend decrypts the product information sent by the verification terminal and compares it with the product information in the database to complete the verification of whether it is a certified product.

[0100] Specifically, the mark generation equipment located on the certification body side refers to the system used by the certification body to issue electronic certification marks; the system produces electronic certification marks according to the application requirements of the certified product manufacturers and the type of product applied for.

[0101] When a product manufacturer applies for an electronic certification mark, the product manufacturer sends product information including product ID, batch number, production date, the product manufacturer's unique manufacturer code, and the location where the product manufacturer will use the electronic certification mark to the mark generation device, and obtains a second key issued by the cryptographic device, which is used to negotiate the key with the mark carrier tool.

[0102] The mark generation device uses cryptographic algorithms to encrypt product information to ensure its confidentiality and integrity. Using predefined encoding rules or algorithms, the encrypted product information is converted into a specific form of electronic certification mark, including strings or QR codes.

[0103] Specifically, the product manufacturing equipment located on the product manufacturer's side refers to the system used by the manufacturer to produce the product when applying for product certification. This system can load the electronic certification mark by calling the mark carrier tool API interface, distribute the electronic certification mark to the product and store it securely, thereby realizing the secure application of the electronic certification mark to the product.

[0104] Products that have been marked with an electronic certification mark are certified products.

[0105] Specifically, the token carrier tool includes a key management module, an algorithm module, a storage module, a startup control module, and a positioning module; wherein,

[0106] The key management module is used to manage keys, including the first key and the second key.

[0107] The first key is used for key negotiation between the token carrier tool and the token generation device, and is distributed to the token carrier tool through the cryptographic device when the token carrier tool leaves the factory;

[0108] The second key is used for vendor code consistency verification and key negotiation between the token carrier tool and the product manufacturing equipment. When the certification authority authorizes the token carrier tool, it is issued to the token carrier tool through a cryptographic device.

[0109] The algorithm module uses cryptographic algorithms including SM2, SM3 and SM4. When connected to a mark generation device or product manufacturing device, it uses the obtained first key or second key to perform key negotiation and complete two-way identity authentication.

[0110] The storage module is used to securely store the electronic certification mark produced by the manufacturer after decrypting the encrypted text sent by the mark generation device, the second key used for verifying the consistency of the manufacturer code and key negotiation between the mark carrier tool and the product manufacturing equipment, the unique manufacturer code of the product manufacturer, and the location information of the product manufacturer using the electronic certification mark.

[0111] On the certification authority side, after the mark carrier tool connects to the mark generation device, the mark carrier tool uses the first key to complete two-way identity authentication through key negotiation with the mark generation device, thereby authorizing the mark carrier tool. After authorization, the mark generation device will send the electronic certification mark produced for the manufacturer, the second key used for verifying the consistency of the manufacturer code between the mark carrier tool and the product manufacturing equipment and for key negotiation, the unique manufacturer code of the product manufacturer, and the location where the product manufacturer uses the electronic certification mark, etc., encrypted with the first key, to the mark carrier tool in ciphertext. The mark carrier tool decrypts the information using the first key stored in itself and stores the decrypted information securely.

[0112] The marker carrier tool also includes a startup control module for determining startup after the marker carrier tool is connected to the product manufacturing equipment.

[0113] The startup control module compares the location of the marker carrier tool after it is connected to the product manufacturing equipment with the location of the electronic certification mark issued by the product manufacturer by the stored marker generation equipment. If the location is within the set distance range, it determines that the current location is within the set startup geographical location.

[0114] After connecting to the product manufacturing equipment, the startup control module obtains the unique manufacturer code of the product manufacturer sent by the product manufacturing equipment using a second key encryption. After decryption, it performs a consistency verification with the stored unique manufacturer code information of the product manufacturer. If the consistency verification is successful, it determines that the currently connected product manufacturing equipment is the designated user.

[0115] The startup control module starts the flag carrier tool when it determines that the flag carrier tool is started by a designated user within the set startup geographical location.

[0116] The distance range set is generally within 100 meters to ensure that the carrier tool loaded with the electronic certification mark can be used within a controllable range.

[0117] The positioning module is used for positioning the marker carrier tool; the positioning module includes modules with positioning functions, such as a 4G module.

[0118] In the electronic authentication mark application system of this embodiment, the mark carrier tool uses the first key issued when the mark carrier tool leaves the factory to negotiate the key with the mark generation device to achieve two-way identity authentication; the information, including the electronic authentication mark, is obtained and stored securely using encryption, ensuring that the carrier for obtaining the electronic authentication mark is an authorized carrier, and the information is transmitted in encrypted form to ensure the confidentiality of information transmission.

[0119] After the mark carrier tool reaches the product manufacturer, it connects to the product manufacturing equipment. An activation control condition check is performed first; the mark carrier tool can only be activated if the activation control conditions are met. These conditions include both user consistency verification and activation geographical location determination. The mark carrier tool can only be activated by a designated user within the specified geographical location. After activation, two-way authentication is performed again before the product manufacturing equipment is allowed to securely access the electronic certification mark. This effectively prevents unauthorized areas or users from fraudulently applying the mark, ensuring the authenticity and reliability of the certification process and truly achieving information-based and digital certification of products. This approach meets the regulatory requirements of relevant departments for certified products while ensuring that products with applied electronic certification marks are controllable and trustworthy.

[0120] In a product verification scheme that uses HMAC values ​​generated by encryption of electronic certification marks and random numbers,

[0121] The product-side verification terminal reads the electronic certification mark information from the product;

[0122] The verification terminal sends a verification request to the verification backend;

[0123] The verification backend generates a random number and sends it to the verification terminal;

[0124] The verification terminal uses the verification key to encrypt the received random number and electronic certification mark information to generate an HMAC value and send it to the verification backend;

[0125] The verification backend calculates an HMAC value based on the random number it sends and the information stored locally, and compares it with the received HMAC value. If the comparison is successful, the verification is completed.

[0126] The more specific technical details and corresponding technical effects in this embodiment are the same as those described in Embodiment 1. Please refer to them for details, and they will not be repeated here.

[0127] Example 3

[0128] One embodiment of the present invention discloses an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor.

[0129] In one example, the processor may include a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits that can be configured to implement the embodiments of this application.

[0130] The memory may include read-only memory (ROM), random access memory (RAM), disk storage media devices, optical storage media devices, flash memory devices, and electrical, optical, or other physical / tangible memory storage devices. Therefore, typically, memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform non-intrusive load identification according to the non-intrusive load identification method of Embodiment 1.

[0131] The processor runs a computer program corresponding to the executable program code by reading the executable program code stored in the memory, in order to implement the electronic tag anti-counterfeiting method based on commercial cryptographic algorithms in Embodiment 1.

[0132] In one example, a communication interface and a bus may also be included.

[0133] The memory, processor, and communication interface are connected via a bus and communicate with each other.

[0134] The communication interface is mainly used to enable communication between modules, devices, units, and / or equipment in the embodiments of this application. Input devices and / or output devices can also be connected through the communication interface.

[0135] A bus can be hardware, software, or both, where components of an electronic device are coupled together. For example, and not limitingly, a bus can include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a MicroChannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-E) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local Bus (VLB) bus, or other suitable buses, or a combination of two or more of these. Where appropriate, a bus can include one or more buses. Although specific buses are described and illustrated in the embodiments of this application, this application considers any suitable bus or interconnection.

[0136] Example 4

[0137] One embodiment of the present invention discloses a computer-readable storage medium storing computer program instructions. When executed by a processor, these computer program instructions can implement the electronic tag anti-counterfeiting method based on commercial cryptographic algorithms described in Embodiment 1, achieving the same technical effect. To avoid repetition, further details are omitted here. The aforementioned computer-readable storage medium may include non-transitory computer-readable storage media, such as read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks, etc., and is not limited thereto.

[0138] The above description is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention should be included within the scope of protection of the present invention.

Claims

1. An electronic sign forgery prevention method based on a commercial cipher algorithm, characterized by, Comprise: On the side of the certification agency, the sign generation device makes electronic authentication signs encrypted by commercial cryptographic algorithms for product manufacturers under their application; sends information including the electronic authentication signs to authorized sign carrier tools in ciphertext; and stores product information corresponding to the electronic authentication signs into the database of the verification background after verification; On the side of the product manufacturer, the sign carrier tool starts when the starting control condition is met, allowing the product production device to securely call the electronic authentication signs stored by it; and the product production device applies the called electronic authentication signs to the internal secure storage of the certified product; When the product is verified, the verification terminal on the product side reads the electronic authentication signs from the product; sends the product information in ciphertext contained in the electronic authentication signs to the verification background; and the verification background compares the product information obtained after decryption with the product information in the database to complete the authentication verification.

2. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to claim 1, characterized in that On the side of the certification agency, the process of the sign generation device making electronic authentication signs encrypted by commercial cryptographic algorithms for product manufacturers under their application comprises: 1) The product manufacturer sends product information including product ID, batch, production date, the unique manufacturer code of the product manufacturer, and the location of the product manufacturer using the electronic authentication signs to the sign generation device; 2) The sign generation device encrypts the product information using commercial cryptographic algorithms, and converts the encrypted product information into electronic authentication signs in a specific form including strings or two-dimensional codes using a set of encoding rules or algorithms; 3) The cryptographic machine device sends a second key for key negotiation with the sign carrier tool to the product manufacturer.

3. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to claim 2, characterized in that Sending information including the electronic authentication signs to authorized sign carrier tools in ciphertext comprises: 1) Sign carrier tool authorization; After the sign generation device is connected with the authorized sign carrier tool, bidirectional identity authentication is performed; the sign generation device authorizes the sign carrier tool that successfully passes the bidirectional identity authentication; The bidirectional identity authentication uses the first key sent to the sign carrier tool by the cryptographic machine device when the sign carrier tool is manufactured for key negotiation; 2) Ciphertext sending; After bidirectional identity authentication, the sign generation device sends the electronic authentication signs made for the product manufacturer, the second key for manufacturer code consistency verification and key negotiation between the sign carrier tool and the product production device, the unique manufacturer code of the product manufacturer, and the location of the product manufacturer using the electronic authentication signs to the sign carrier tool in ciphertext; 3) Secure storage; The sign carrier tool decrypts the received ciphertext and performs secure storage.

4. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to claim 3, characterized in that On the side of the product manufacturer, the process of the sign carrier tool starting when the starting control condition is met comprises: 1) Geographical location verification; According to the positioning position of the sign carrier tool after being connected with the product production equipment and the stored position of the product manufacturer using the electronic authentication sign issued by the sign generation equipment, it is judged whether it is within the set distance range. If yes, the current position is within the set starting geographic position; the geographic position verification passes; 2) consistency verification; After the sign carrier tool is connected with the product production equipment, the product production equipment sends the unique manufacturer code of the product manufacturer encrypted by the second key to the sign carrier tool. The sign carrier tool decrypts and performs consistency verification with the stored unique manufacturer code information of the product manufacturer. After the consistency verification passes, the currently connected product production equipment is the set user; 3) After the geographic position verification and consistency verification pass, the sign carrier tool is started, and the electronic authentication sign is allowed to be called; otherwise, the sign carrier tool is not started, and the electronic authentication sign is refused to be called.

5. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to claim 4, characterized in that, After the sign carrier tool is started, it needs to be connected with the product production equipment again for bidirectional identity authentication. After the bidirectional identity authentication succeeds, the product production equipment is allowed to safely call the electronic authentication sign stored therein.

6. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to claim 5, characterized in that, The bidirectional identity authentication process includes: 1) The sign carrier tool generates a random number 1 and sends the random number 1 and the product ID to the product production equipment; 2) The product production equipment generates a random number 2, encrypts the random number 2 together with the received random number 1 and product ID by using the second key, and sends the ciphertext to the carrier tool; 3) The carrier tool decrypts the received ciphertext, compares the decrypted random number 1 and product ID with the random number 1 and ID sent by itself, and if they are consistent, the next step is entered; 3) The carrier tool encrypts the random number 2 and product ID by using the second key stored therein, sends the ciphertext to the product production equipment, and the product system decrypts the ciphertext and compares the decrypted random number 2 and product ID. If they are consistent, the bidirectional identity authentication is completed.

7. The electronic sign anti-counterfeiting method based on commercial cryptographic algorithms according to any one of claims 1-6, characterized in that, The product verification process includes: 1) The verification terminal on the product side reads the electronic authentication sign information from the product and decrypts the product information; 2) The verification terminal initiates a verification request to the verification background; 3) The verification background generates a string of random numbers and sends them to the verification terminal; 4) The verification terminal uses the verification key to generate a value containing the product information by using an encryption algorithm on the received random numbers and the decrypted product information, and returns the value to the verification background; 5) The verification background decrypts the received value containing the product information by using the verification key, and obtains the product information included therein; 6) The verification background compares the decrypted product information with the stored product information. If they are consistent, the verification passes; otherwise, it does not pass.

8. An electronic sign forgery prevention system for performing the electronic sign forgery prevention method based on a commercial cipher algorithm according to any one of claims 1 to 7, characterized by It includes: The sign generation equipment, the sign carrier tool, the product production equipment, the verification background, and the verification terminal; The sign generation equipment, the sign carrier tool, and the product production equipment; wherein, The mark generating device is located at the certification authority side, and is used for making the electronic certification mark for the product manufacturer under the application of the product manufacturer; The product production device is located at the product manufacturer side, and is used for producing the product with the internally applied electronic certification mark, and performing the safe application of the electronic certification mark to the certified product; The mark carrier tool is located at the certification authority side and is connected with the mark generating device, and stores the information including the electronic certification mark in cipher text after being authorized by the mark generating device; The product production device is located at the product manufacturer side and is connected with the product production device, and is started to allow the product production device to safely call the electronic certification mark stored therein under the satisfaction of the starting control condition; The verification terminal is located at the product side, and is used for reading the electronic certification mark when verifying the product, and sending the product information in cipher text contained in the electronic certification mark to the verification background; The verification background is located at the certification authority side, and is used for storing the product information corresponding to the electronic certification mark, and comparing the product information sent by the verification terminal with the product information in the database to complete the verification of whether the product is the certified product under the request of the verification terminal.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that, The computer program is executed by the processor to implement the electronic mark anti-counterfeiting method based on the commercial cryptographic algorithm as claimed in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, the computer-readable storage medium comprising: The computer program is executed by the processor to implement the electronic mark anti-counterfeiting method based on the commercial cryptographic algorithm as claimed in any one of claims 1 to 7.

Images