NFC dynamic anti-counterfeiting system based on SM3 hash algorithm

Abstract

The present application relates to the field of NFC, and especially to a NFC dynamic anti-counterfeiting system based on SM3 hash algorithm. Based on the ISO / IEC14443-A protocol dynamic anti-counterfeiting label, the NFC label adopts SM3 cryptographic hash algorithm to one-way encrypt the relevant commodity information in the label, so as to realize the function of generating unpredictable authentication code each time the label is queried; the NFC label and the back-end server system adopt the same encryption algorithm to encrypt the same data, if the same encryption result is obtained, it indicates that the verification is passed; if the data returned by the back-end server and the data result given by the label are inconsistent, then it can be considered that the label chip has the possibility of counterfeiting.

Description

Technical Field

[0001] This invention relates to the field of NFC, and more particularly to an NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm. Background Technology

[0002] Against the backdrop of the continued rise of the global Internet of Things (IoT) industry and the sweeping wave of interconnected devices, various short-range wireless communication technologies have ushered in unprecedented development opportunities. As a key core technology in the IoT system, NFC (Near Field Communication) is experiencing a new round of rapid development and widespread adoption due to its unique technical characteristics and application advantages. In recent years, NFC technology, with its outstanding advantages such as low deployment cost, extremely low device power consumption, and high data interaction security, has been deeply integrated into people's production, daily life, and business scenarios, and is widely used in many fields such as mobile payment, public transportation, smart access control, product anti-counterfeiting and traceability, and identity verification. Among them, mobile e-wallet payment services represented by Apple Pay, and NFC anti-counterfeiting identification applications for various products, have become the most intuitive and widely used typical examples, fully demonstrating the dual value of NFC technology in terms of convenience and security.

[0003] At the same time, counterfeit and substandard goods persist despite repeated crackdowns in the current market economy, with infringement and counterfeiting activities constantly evolving. A large number of counterfeit and substandard products flood the market, severely damaging corporate brand reputation and consumers' legitimate rights, and causing significant disruption to market order and the industrial ecosystem. Faced with the increasingly severe counterfeiting situation, traditional anti-counterfeiting methods are no longer sufficient to meet the needs of modern product traceability and brand protection. Therefore, the entire anti-counterfeiting technology system is continuously iterating and upgrading, evolving towards higher security, stronger resistance to replication, and easier verification and use.

[0004] For a long time, the mainstream traditional anti-counterfeiting methods in the market have mainly relied on laser anti-counterfeiting labels, telephone code anti-counterfeiting, ordinary QR code anti-counterfeiting, and anti-counterfeiting ink printing. While these technologies have played a corresponding role in anti-counterfeiting for a certain period, their core shortcomings are significant: all authentication and identification information is statically fixed. The identification code, encrypted strings, and pattern information stored inside the anti-counterfeiting label are fixed once generated and cannot be dynamically updated based on factors such as the number of verifications, circulation nodes, and time nodes. Because the anti-counterfeiting information lacks a dynamic change mechanism, criminals can easily obtain complete anti-counterfeiting features through photographing, scanning, copying, and counterfeiting, and then mass-produce highly similar counterfeit labels. This results in traditional anti-counterfeiting methods being generally vulnerable to being cracked, copied, and having low verification reliability, making it difficult to effectively curb large-scale counterfeiting.

[0005] On February 25, 2025, a search was conducted in the China Patent Publication Database using "NFC and SM3 and hash algorithm and anti-counterfeiting and dynamic" as the abstract keywords and with the option to allow synonym expansion.

[0006] CN111628868A / B proposes a digital signature scheme that does not rely on secure random numbers. It replaces the random numbers required by the traditional SM2 algorithm by concatenating the signature private key with the message hash value and then hashing it again. This allows for the generation of a fixed and reproducible signature using the same private key and message. This technology is then applied to blockchain consensus, enabling nodes to generate consistent signatures using a shared private key to complete block verification. The technical flaw it addresses is that traditional Chinese cryptographic SM2 signatures rely excessively on high-quality random numbers. Insecure random numbers can directly lead to private key leakage and signature cracking. Furthermore, each signature result is different, failing to meet the requirements of repeatable verification and consortium blockchain consensus.

[0007] CN118118178A proposes a blockchain resource management solution based on identity identification and digital certificates. It binds accounts with identity information and certificate validity periods, no longer relying solely on private keys to control assets. It supports resetting permissions with a new private key and a new certificate after the private key is lost, solving the problems of permanent asset locking when the private key of a traditional blockchain account is lost and the high risk and maintenance cost of multiple private key backup solutions.

[0008] CN119853948A proposes a cross-domain mutual trust identification and authentication platform for the power industry. It uses terminal identifiers, random salts, and block hashes to generate unique identities, and combines system keys, timestamps, and behavioral characteristics to complete triple authentication. It also integrates quantum encryption key management, machine learning risk assessment, and deep learning anomaly detection, which makes up for the shortcomings of traditional power terminal authentication, such as low security, lack of proactive risk defense, backward key management, and difficulty in achieving cross-domain mutual trust.

[0009] CN120257279A proposes a blockchain-based method for checking program tamper-proofing. It stores the program's hash value on the blockchain and uses the program name and version number as unique identifiers for hash comparison to determine whether the program has been tampered with. This solves the security vulnerabilities of traditional solutions that store the program and hash value on the same platform, making them susceptible to synchronous tampering and unable to effectively detect program integrity.

[0010] On February 25, 2025, an abstract search was conducted on CNKI (China National Knowledge Infrastructure) for the term "NFC and SM3 and hash algorithm and anti-counterfeiting and dynamics," but no relevant literature was found. Summary of the Invention

[0011] Purpose of the invention: To provide a more effective NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm. For specific purposes, please refer to the several substantial technical effects in the implementation section.

[0012] To achieve the above objectives, the present invention adopts the following technical solution:

[0013] The NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm is characterized by a dynamic anti-counterfeiting label based on the ISO / IEC 14443-A protocol. This NFC label uses the SM3 cryptographic hash algorithm to unidirectionally encrypt relevant product information within the label, thereby generating an unpredictable authentication code each time the label is queried. The NFC label and the backend server system use the same encryption algorithm to encrypt the same data; if the same encryption result is obtained, the verification is successful. If the data returned by the backend server is inconsistent with the data provided by the label, it can be considered that the label chip may be counterfeited.

[0014] A further aspect of this invention is that the anti-counterfeiting process specifically comprises the following steps:

[0015] (1) The server generates two 16-bit random numbers, message_rdm and message_var, and a 16-bit product information UID, and binds message_rdm and product information UID within the server;

[0016] (2) The server terminal writes the three 16-bit data generated into the memory of the NFC encryption tag that has not been used after leaving the factory through the NFC reader / writer;

[0017] (3) When the NFC mobile phone is close, the tag starts to power on and enters the data initialization stage. The dynamic authentication code hash_16 is obtained through two consecutive SM3 encryption operations.

[0018] The first step involves the tag sending message_var into the SM3 module for computation and extracting the high 16 bits of the output to update the old message_var in memory;

[0019] The second step is to read message_rdm and UID, merge these two data with the updated message_var and send them into the SM3 module for calculation, and similarly extract the high 16 bits of the output as the authentication code hash_16.

[0020] Because message_var is refreshed every time the tag is powered on, the calculated hash_16 is unpredictable each time.

[0021] (4) After the mobile phone establishes communication with the anti-counterfeiting label, it sends an NFC READ command to read data such as message_var, UID and hash_16 from the label's memory and returns it to the server terminal via wireless signal;

[0022] (5) Since the server and the tag use the same encryption algorithm, and the bound message_rdm is found through the UID, a 16-bit authentication code hash is obtained after encryption operation. The authenticity of the product is determined by comparing whether hash_16 and hash are equal, and the comparison result is returned to the mobile phone.

[0023] A further aspect of this invention is that,

[0024] The server generates a random number and a UID;

[0025] Write the UID and two random numbers into the NFC tag;

[0026] After the tag is powered on, a dynamic authentication code is generated and transmitted to the mobile terminal.

[0027] The authentication code and related data are returned to the server wirelessly.

[0028] The server uses the same algorithm to generate corresponding authentication codes for comparison.

[0029] The comparison results are returned to the mobile phone.

[0030] The present invention, which adopts the above technical solution, has the following beneficial effects compared with the prior art: The authentication idea of ​​this anti-counterfeiting system is that the NFC tag and the back-end server system use the same encryption algorithm to encrypt the same data. If the same encryption result is obtained, it indicates that the verification is successful; if the data returned by the back-end server is inconsistent with the data result given by the tag, it can be considered that the tag chip may be counterfeited. Attached Figure Description

[0031] To further illustrate the present invention, the following description is provided in conjunction with the accompanying drawings:

[0032] Figure 1 This is a diagram of the architecture of a dynamic anti-counterfeiting system. Detailed Implementation

[0033] The present invention will be further illustrated below with reference to the accompanying drawings and specific embodiments. It should be understood that the following specific embodiments are for illustrative purposes only and are not intended to limit the scope of the invention.

[0034] To address the shortcomings of static authentication codes, this paper designs a dynamic anti-counterfeiting label based on the ISO / IEC 14443-A protocol. This NFC label employs the SM3 cryptographic hash algorithm released by the State Cryptography Administration in 2010 to unidirectionally encrypt relevant product information within the label, thereby enabling the generation of an unpredictable authentication code each time the label is queried. Furthermore, the design incorporates various techniques to optimize chip power consumption and area parameters, ultimately achieving a highly efficient, accurate, and unique anti-counterfeiting label.

[0035] Dynamic anti-counterfeiting system design: such as Figure 1 The diagram shows the specific process of the entire anti-counterfeiting procedure. The authentication approach of this anti-counterfeiting system is that the NFC tag and the backend server system use the same encryption algorithm to encrypt the same data. If the same encryption result is obtained, it indicates that the verification is successful. If the data returned by the backend server is inconsistent with the data result given by the tag, it can be considered that the tag chip may be counterfeited.

[0036] Based on the above authentication approach, the anti-counterfeiting process can be specifically represented by the following steps:

[0037] (1) The server generates two 16-bit random numbers, message_rdm and message_var, and a 16-bit product information UID, and binds message_rdm and product information UID within the server.

[0038] (2) The server terminal writes the three 16-bit data generated into the memory of the NFC encryption tag that has not been used after leaving the factory through the NFC reader.

[0039] (3) When the NFC mobile phone is close, the tag starts to power on and enters the data initialization stage. The dynamic authentication code hash_16 is obtained through two consecutive SM3 encryption operations.

[0040] The first step involves the tag sending message_var into the SM3 module for computation and extracting the high 16 bits of the output to update the old message_var in memory.

[0041] The second step is to read message_rdm and UID, merge these two data with the updated message_var and send them into the SM3 module for calculation, and similarly extract the high 16 bits of the output as the authentication code hash_16.

[0042] Since message_var is refreshed every time the tag is powered on, the hash_16 calculated each time is unpredictable.

[0043] (4) After the mobile phone establishes communication with the anti-counterfeiting label, it sends the NFC READ command to read data such as message_var, UID and hash_16 from the label's memory and returns it to the server terminal via wireless signal.

[0044] (5) Since the server and the tag use the same encryption algorithm, and the bound message_rdm is found through the UID, a 16-bit authentication code hash is obtained after encryption operation. The authenticity of the product is determined by comparing whether hash_16 and hash are equal, and the comparison result is returned to the mobile phone.

[0045] Defect 1: Traditional anti-counterfeiting information is in a static, fixed form and cannot be dynamically updated.

[0046] Compared to the shortcomings of existing technologies, traditional anti-counterfeiting labels store identification codes, encrypted strings, and pattern information that remain fixed once generated, making dynamic updates impossible based on factors such as verification frequency, circulation nodes, and time points. This patent innovatively combines the SM3 cryptographic hash algorithm with NFC tags in a non-obvious way. When the tag is powered on for verification, two SM3 encryption operations are performed. The result of the first operation automatically refreshes the message_var variable within the tag, causing unpredictable changes to the basic computational data for each verification, thus achieving dynamic updates of anti-counterfeiting information from the root.

[0047] Defect 2: Traditional anti-counterfeiting information is easily photographed, scanned, copied, and counterfeited.

[0048] Compared to existing technologies, which lack a dynamic change mechanism for anti-counterfeiting information, making it easy for criminals to obtain complete anti-counterfeiting features through methods such as taking photos, scanning, copying, and counterfeiting, this patent innovatively combines a true random number generator with a dual random number mechanism. The server pre-generates unpredictable 16-bit random numbers message_rdm and message_var, which are then bound to the product UID and written to the label. Each time the label is verified, message_var is refreshed and a new dynamic authentication code hash_16 is generated. Counterfeiters cannot obtain fixed anti-counterfeiting features through scanning or copying, thus completely blocking the path of mass counterfeiting.

[0049] Defect 3: Traditional anti-counterfeiting methods are easily cracked and have low verification reliability.

[0050] Compared to the shortcomings of existing technologies, static anti-counterfeiting information can be easily copied and forged to pass verification, making anti-counterfeiting measures easy to crack, verification reliability low, and difficult to curb large-scale counterfeiting. This patent innovatively combines the SM3 encryption operation on the label with the same source encryption comparison on the server. The hash_16 output by the label must be strictly consistent with the hash obtained by the server using the same algorithm and the same data to be judged as true. The data of a single verification is immediately invalidated, and the copied static data cannot pass the second verification, which greatly improves the difficulty of cracking and the reliability of verification.

[0051] Defect 4: Traditional anti-counterfeiting methods cannot meet the low power consumption and high security requirements of the Internet of Things.

[0052] Compared to the shortcomings of existing technologies, traditional anti-counterfeiting methods do not incorporate low-power wireless communication technology, making it difficult to meet the needs of convenient verification and high security protection in IoT scenarios. This patent innovatively combines a passive NFC tag based on the ISO / IEC 14443-A protocol with a hardware SM3 encryption module. The tag is powered by field power and has a standby power consumption of <1μA. At the same time, it relies on the national cryptographic SM3 algorithm to ensure the security of data interaction, perfectly matching the low-cost, low-power, and high-security verification requirements of IoT scenarios.

[0053] Defect 1: Traditional anti-counterfeiting information is in a static, fixed form and cannot be dynamically updated.

[0054] Compared to the shortcomings of existing technologies, traditional anti-counterfeiting labels store identification codes, encrypted strings, and pattern information that remain fixed once generated, making dynamic updates impossible based on factors such as verification frequency, circulation nodes, and time points. This patent innovatively combines the SM3 cryptographic hash algorithm with NFC tags in a non-obvious way. When the tag is powered on for verification, two SM3 encryption operations are performed. The result of the first operation automatically refreshes the message_var variable within the tag, causing unpredictable changes to the basic computational data for each verification, thus achieving dynamic updates of anti-counterfeiting information from the root.

[0055] Defect 2: Traditional anti-counterfeiting information is easily photographed, scanned, copied, and counterfeited.

[0056] Compared to existing technologies, which lack a dynamic change mechanism for anti-counterfeiting information, criminals can easily obtain complete anti-counterfeiting features through methods such as taking photos, scanning, copying, and counterfeiting, and then mass-produce counterfeit labels with extremely high similarity. This patent innovatively combines a true random number generator with a dual random number mechanism. The server pre-generates unpredictable 16-bit random numbers message_rdm and message_var, which are bound to the product UID and written into the label. Each time the label is verified, message_var is refreshed and a new dynamic authentication code hash_16 is generated. Counterfeiters cannot obtain fixed anti-counterfeiting features by scanning or copying, thus completely blocking the path of mass counterfeiting.

[0057] Defect 3: Traditional anti-counterfeiting methods are easily cracked and have low verification reliability.

[0058] Compared to the shortcomings of existing technologies, static anti-counterfeiting information can be easily copied and forged to pass verification, resulting in traditional anti-counterfeiting methods being generally vulnerable to cracking and having low verification reliability, making it difficult to effectively curb large-scale counterfeiting. This patent innovatively combines the SM3 encryption operation on the label with the same source encryption comparison on the server side. The hash_16 output by the label must be strictly consistent with the hash obtained by the server using the same algorithm and the same data to be considered true. The data is immediately invalidated after a single verification, and the copied static data cannot pass the second verification, greatly improving the difficulty of cracking and the reliability of verification.

[0059] Defect 4: Traditional anti-counterfeiting methods cannot meet the low power consumption and high security requirements of the Internet of Things.

[0060] Compared to the shortcomings of existing technologies, traditional anti-counterfeiting methods do not incorporate low-power wireless communication technology, making it difficult to meet the needs of convenient verification and high security protection in IoT scenarios. This patent innovatively combines a passive NFC tag based on the ISO / IEC 14443-A protocol with a hardware SM3 encryption module. The tag is powered by field power and has a standby power consumption of <1μA. At the same time, it relies on the national cryptographic SM3 algorithm to ensure the security of data interaction, perfectly matching the low-cost, low-power, and high-security verification requirements of IoT scenarios.

[0061] I. NFC Dynamic Encryption Tag Chip (Core)

[0062] 1. Preferred domestically produced integrated cryptographic technology

[0063] Model: Huada Semiconductor HC32L136J8TA-NFC (integrated NFC + national cryptographic security core)

[0064] Manufacturer: Huada Semiconductor Co., Ltd.

[0065] Protocol: ISO / IEC 14443-A

[0066] Security: Hardware SM3, True Random Number Generator (TRNG)

[0067] Storage: 8KB Flash + 2KB RAM, supports UID + dual 16-bit random number storage

[0068] Power consumption: Passive field-driven, standby <1μA

[0069] Matching: Supports automatic update of message_var upon power-on and generation of hash_16 via two SM3 operations.

[0070] 2. Pure Chinese cryptographic security core + NFC front-end combination (high security)

[0071] Safety core: Wuhan Ruinajie RJMU402FBO

[0072] Manufacturer: Wuhan Ruinajie Semiconductor Co., Ltd.

[0073] Algorithm: Hardware SM3 / SM2 / SM4, National Cryptographic Level 2 / EAL5+

[0074] Core: ARM-SC100, 128KB Flash, 10KB RAM

[0075] Interfaces: I²C / SPI / UART, compatible with NFC front-end

[0076] NFC front end: Fudan Microelectronics FM11RF08

[0077] Manufacturer: Shanghai Fudan Microelectronics Group Co., Ltd.

[0078] Protocol: ISO / IEC 14443-A, 13.56MHz

[0079] Storage: 8Kbit EEPROM, compatible with M1

[0080] Features: 7-byte unique UID, passive low power consumption

[0081] II. NFC Reader / Writer Chip (Server-side Writing)

[0082] Model: NXP CLRC66303HN

[0083] Manufacturer: NXP Semiconductors

[0084] Protocol: Fully compatible with ISO / IEC 14443A / B and ISO 15693

[0085] Features: Supports writing tags to UID, message_rdm, and message_var

[0086] Interfaces: SPI / I²C / parallel, compatible with industrial control / embedded servers

[0087] Advantages: Multi-tag anti-collision, stable and reliable writing.

[0088] Domestic alternative: Jiadexing GDS663 (Pin-to-Pin direct replacement for CLRC663)

[0089] Manufacturer: Shenzhen Jiadexing Electronics Co., Ltd.

[0090] III. SM3 Hardware Acceleration Module (Tag-side Hash Calculation)

[0091] Option A: On-chip integration (Recommended)

[0092] The HC32L136J8TA-NFC or RJMU402FBO built-in hardware SM3 can be directly selected, without the need for external components, and the area / power consumption is optimal.

[0093] Option B: Standalone IP / ASIC (Custom Chipsetup)

[0094] IP Core: SM3 National Cryptographic Standard Hardware Accelerator IP (CoreShine / Tsinghua Unigroup)

[0095] Manufacturer: Unisplendour Microelectronics Co., Ltd.

[0096] Features: Pipeline optimized, low footprint, supports 16-bit truncated output

[0097] Compatible with: 13.56MHz field frequency synchronization, passive tag friendly

[0098] IV. True Random Number Generator (TRNG)

[0099] Model: RJMU402FBO Built-in TRNG

[0100] Manufacturer: Wuhan Ruinajie Semiconductor Co., Ltd.

[0101] Output: High-speed true random sequence, satisfying message_rdm / message_var generation.

[0102] Certification: Level 2 National Cryptography, unpredictable, copy-proof.

[0103] V. Non-volatile storage (tag end)

[0104] Model: Fudan Microelectronics FM24CL04B (4Kbit I²C EEPROM)

[0105] Manufacturer: Shanghai Fudan Microelectronics Group Co., Ltd.

[0106] Features: 100,000 erase / write cycles, data retention for 10 years

[0107] Purpose: To store UID, message_rdm, and updated message_var.

[0108] VI. Summary Table of Selection Matching Degree

[0109] NFC encrypted tags HC32L136J8TA-NFC Huada Semiconductor 14443-A, Hardware SM3, Passive, Low Power Consumption National Cryptographic Security Core RJMU402FBO Renaga SM3 hardware, National Cryptography Level 2, TRNG, small size NFC front end FM11RF08 Fudan Micro 14443-A, Unique UID, Logical Encryption Reader CLRC66303HN NXP Tag writing, multiple protocols, industrial stability storage FM24CL04B Fudan Micro Power loss protection, high durability

[0110] VII. Selection Instructions

[0111] Priority integrated chip: HC32L136J8TA-NFC. A single chip completes NFC + SM3 + storage + random number, with the simplest BOM, lowest power consumption, and smallest area.

[0112] High-security combination: RJMU402FBO+FM11RF08, meeting financial / government level anti-counterfeiting standards and possessing complete national cryptographic qualifications.

[0113] Full alignment process: Supports server writing of UID + double random number, tag power-on update of message_var, two SM3 generation of dynamic hash_16, and background same-origin comparison.

[0114] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claims.

Claims

1. An NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm, characterized in that, This dynamic anti-counterfeiting label, based on the ISO / IEC 14443-A protocol, uses the SM3 cryptographic hash algorithm to unidirectionally encrypt relevant product information within the label, thereby generating an unpredictable authentication code each time the label is queried. The NFC label and the backend server system use the same encryption algorithm to encrypt the same data; if the same encryption result is obtained, the verification is successful. If the data returned by the backend server is inconsistent with the data provided by the label, it can be considered that the label chip may be counterfeited.

2. The NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm as described in claim 1, characterized in that, The anti-counterfeiting process consists of the following steps: (1) The server generates two 16-bit random numbers, message_rdm and message_var, and a 16-bit product information UID, and binds message_rdm and product information UID within the server; (2) The server terminal writes the three 16-bit data generated into the memory of the NFC encryption tag that has not been used after leaving the factory through the NFC reader / writer; (3) When the NFC mobile phone is close, the tag starts to power on and enters the data initialization stage. The dynamic authentication code hash_16 is obtained through two consecutive SM3 encryption operations. The first step involves the tag sending message_var into the SM3 module for computation and extracting the high 16 bits of the output to update the old message_var in memory; The second step is to read message_rdm and UID, merge these two data with the updated message_var and send them into the SM3 module for calculation, and similarly extract the high 16 bits of the output as the authentication code hash_16. Because message_var is refreshed every time the tag is powered on, the calculated hash_16 is unpredictable each time. (4) After the mobile phone establishes communication with the anti-counterfeiting label, it sends an NFC READ command to read data such as message_var, UID and hash_16 from the label's memory and returns it to the server terminal via wireless signal; (5) Since the server and the tag use the same encryption algorithm, and the bound message_rdm is found through the UID, a 16-bit authentication code hash is obtained after encryption operation. The authenticity of the product is determined by comparing whether hash_16 and hash are equal, and the comparison result is returned to the mobile phone.

3. The NFC dynamic anti-counterfeiting system based on the SM3 hash algorithm as described in claim 2, characterized in that, The server generates a random number and a UID; Write the UID and two random numbers into the NFC tag; After the tag is powered on, a dynamic authentication code is generated and transmitted to the mobile terminal. The authentication code and related data are returned to the server wirelessly. The server uses the same algorithm to generate corresponding authentication codes for comparison. The comparison results are returned to the mobile phone.

Images