Appraisal certification system, program, and appraisal certification method

Abstract

This invention provides an authentication system, authentication method, and program for determining the authenticity of the correspondence between part ID display information and the target part or target packaging. [Solution] The authentication certification system 10 acquires part ID display information 22 and read evidence information 23 to generate normalized identification information, acquires object comparison information related to the target part, etc. and evidence comparison information 26 related to supply and distribution, etc., generates object correspondence relationship information and evidence correspondence relationship information respectively, showing the correspondence between the normalized identification information and each piece of comparison information, compares the combination of these with the read evidence information 23 to an anomaly judgment pattern associated with anomaly types (label substitution, part substitution, packaging inconsistency, etc.) to generate label authenticity anomaly information, and generates authentication certification result information 31 showing the correspondence authenticity between the part ID display information 22 and the target part 20, etc.

Description

[[Technical Field]]

[0001] The present invention relates to an appraisal certification system, a program, and an appraisal certification method.

[0002] More specifically, the present invention relates to an appraisal certification system for performing appraisal certification on target components that constitute or are used in apparatuses used for semiconductor manufacturing, measurement, assembly, inspection, maintenance or transportation, or target packaging corresponding to the target components, a program executed in the appraisal certification system, and an appraisal certification method executed by a computer.

[0003] More specifically, the present invention relates to the technical field of acquiring component ID display information that is attached to, displayed on, recorded in or associated with the target component or the target packaging, and reading trail information related to reading the component ID display information, generating normalized identification information from the component ID display information, generating target correspondence information indicating the correspondence between the normalized identification information and target comparison information, and trail correspondence information indicating the correspondence between the normalized identification information and trail comparison information, and determining the correspondence authenticity of the component ID display information to the target component or the target packaging based on the target correspondence information, the trail correspondence information and the reading trail information. [[Background Art]]

[0004] Apparatuses used for semiconductor manufacturing, measurement, assembly, inspection, maintenance or transportation are composed of a large number of target components, and these target components are handled through various stages such as manufacturing, shipment, receipt, storage, installation, replacement, repair, cleaning, reuse, return, invalidation or disposal. In addition, the target components may be accommodated in target packaging such as individual packaging, collective packaging, shipment packaging, storage packaging, clean environment-compatible packaging or in-process packaging, or distributed or stored in association with the target packaging. Therefore, it is necessary to perform identification management on the target components and the target packaging, and check whether the target components or the target packaging are consistent with registered information, information derived from the supplier, distribution information or information related to the state.

[0005] Conventionally, labels affixed to the target part, markings directly displayed on the target part, markings applied to the target part, or recording media attached to or incorporated into the target part may be used to identify the target part. Such labels, markings, markings, or recording media may contain part ID information for identifying the target part. Since the part ID information may include information regarding the type of target part, individual number, group or batch, supplier, quantity, marking version, or marking issue, it is important information for the identification and management of the target part.

[0006] Furthermore, labels affixed to the target packaging, markings directly displayed on the target packaging, markings applied to the target packaging, or recording media attached to or incorporated into the target packaging may be used to identify the target packaging. When a target component is housed in or handled in association with the target packaging, the component ID information affixed to the target packaging may be used for identification, distribution, storage, pre-installation verification, or replacement verification of the target component. However, the information displayed on the target packaging does not necessarily match the target component actually housed or associated with it.

[0007] The part ID display information may include at least one of human-readable data that can be visually confirmed by a person, and machine-readable data that can be read by a reading device. The human-readable data may include the part name, supplier name, supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information, etc. The machine-readable data may include data encoded from the above supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information, etc. Therefore, the human-readable data and machine-readable data are used as basic information for identifying the target part or target packaging.

[0008] Machine-readable data can include two-dimensional codes, one-dimensional codes, electronic tags, data on recording media, or similar readable data. In particular, two-dimensional codes are easily used for identification management of target parts or packaging because they can store multiple pieces of identification information in a limited display area and can be quickly read by a reader. However, the reading results of two-dimensional codes, etc., may not be sufficient to confirm when, where, by whom, with which reader, and in what environment the reading was performed. Therefore, in addition to the reading results, it is necessary to manage reading evidence information including reading images, reader identification information, reader identification information, reading time information, reading location information, reading environment information, or reading result hash values.

[0009] However, even if part ID information is attached to the target part or packaging, the part ID information does not necessarily match the actual target part or packaging. For example, a label attached to a target part may be transferred to another target part, the information displayed on the packaging may differ from the target part contained within, the identification information on the target part may not match the identification information on the packaging, or the registration history information or status trail information may not be consistent with the information read. In such cases, simply reading the part ID information is insufficient to determine the authenticity of the correspondence between the part ID information and the target part or packaging.

[0010] Furthermore, with respect to the target parts or packaging, problems such as label substitution, part substitution, packaging inconsistency, duplicate identifiers, reuse of identification information, use after invalidation, and inconsistency in read trails may occur. Label substitution is a problem where part ID display information is attached to a different target part or packaging than the one it should originally correspond to. Part substitution is a problem where the target packaging or trail appears to be consistent, but the actual target part is different. Packaging inconsistency is a problem where the correspondence between the target part and the target packaging is inconsistent. Duplicate identifiers, reuse of identification information, and use after invalidation are problems where the same or invalidated identification information is used inappropriately. Inconsistency in read trails is a problem where the reading time, reading location, reading entity, reading device, or reading result hash value, etc., are inconsistent with the registration history information, status trail information, or expected correspondence information.

[0011] Furthermore, in order to determine the authenticity of the target part or packaging, it is necessary to refer not only to the part ID display information and target object comparison information, but also to supplier evidence information, distribution evidence information, registration history information, status evidence information, issuance information, shipping information, receipt information, inspection information, storage information, installation information, replacement information, repair information, cleaning information, reuse information, return information, invalidation information, or disposal information. This evidence information can be recorded in a record infrastructure that utilizes distributed ledger technology, a record infrastructure that does not utilize distributed ledger technology, or a record infrastructure that combines these technologies. Therefore, it is necessary to acquire the evidence information concerning the target part or packaging in the authentication certification system and connect it with the normalized identification information generated from the part ID display information.

[0012] Furthermore, for authentication and certification of target parts or packaging, it is necessary to enable the acquisition of basic part ID display information, generation of normalized identification information, generation of target object correspondence information, generation of evidence correspondence information, matching with anomaly judgment patterns, generation of label authenticity anomaly information, and generation of authentication and certification result information. On the other hand, depending on the implementation, it may be desirable to use artificial intelligence (AI) processing, explainable AI (XAI) processing, PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or zero-knowledge proof (ZKP) processing to assist in anomaly judgment, explain the basis for judgment, protect the continuity of verification, link key distribution, or perform verification without disclosing at least part of the information. Therefore, there is a need for technology that allows the above advanced processing to be added when selected or requested as the target of execution, without narrowing the basic authentication and certification processing. [Prior art documents] [Patent Documents]

[0013] [Patent Document 1] Patent No. 6894033 [Patent Document 2] Patent No. 7367270 [Patent Document 3] Patent No. 7371301 [Patent Document 4] Patent No. 7477937 [Patent Document 5] International Publication No. 2024 / 232081 [Patent Document 6] International Publication No. 2024 / 232035 [Patent Document 7] International Publication No. 2024 / 232407 [Patent Document 8] U.S. Patent No. 11188926 [Patent Document 9] U.S. Patent No. 8336761 [Patent Document 10] U.S. Patent No. 12045811, Specification Patent Document 11 European Patent Application Publication No. 0996928, Specification Patent Document 12 Chinese Patent Application Publication No. 115860756, Specification Non-Patent Literature

[0014] Non-Patent Literature 1 SEMI T27-1125, SPECIFICATION FOR TRACEABILITY IDENTIFICATION LABEL OF COMPONENT PARTS Non-Patent Literature 2 SEMI T25-0424, SPECIFICATION FOR BLOCKCHAIN FOR SEMICONDUCTOR SUPPLY CHAIN TRACEABILITY Non-Patent Literature 3 SEMI T26-0925, SPECIFICATION FOR ELECTRONIC SUPPLY CHAIN TRACEABILITY USING DISTRIBUTED LEDGER TECHNOLOGY Non-Patent Literature 4 SEMI T23-0420, SPECIFICATION FOR SINGLE DEVICE TRACEABILITY FOR THE SUPPLY CHAIN Non-Patent Literature 5 ISO / PWI 26345, Blockchain and distributed ledger technologies - Verifiable provenance and traceability associated with token-based bundling and unbundling of assets, Outline Document Summary of the Invention Problems to be Solved by the Invention

[0015] For target components that constitute an apparatus used for semiconductor manufacturing, measurement, assembly, inspection, maintenance or transportation, or are used in said apparatus, or for target packaging corresponding to said target components, component ID display information may be attached, displayed, recorded, or associated by means of a label, direct marking, engraving, recording medium or the like. However, the mere existence of said component ID display information makes it difficult to determine whether said component ID display information authentically corresponds to an actual target component or target packaging. Therefore, there is a need for a technology capable of determining the authenticity of correspondence between said component ID display information and said target component or said target packaging.

[0016] In addition, in order to determine the authenticity of said correspondence, it is necessary to separately acquire object comparison information obtained from said target component or said target packaging, and trail comparison information related to the supplying entity, distribution, registration history or status. When object comparison information and trail comparison information are handled collectively without distinction, it becomes difficult to appropriately separate an abnormality resulting from a mismatch between component ID display information and a physical object from an abnormality resulting from a mismatch between component ID display information and a trail. Therefore, there is a need for a technology that separately acquires said object comparison information and said trail comparison information, and generates correspondence relationships with normalized identification information as object correspondence relationship information and trail correspondence relationship information, respectively.

[0017] Furthermore, when reading two-dimensional codes or other machine-readable data, simply acquiring a reading result does not allow sufficient confirmation of the authenticity or appropriateness of the reading. For example, there are cases where the reading time, reading position, reading entity, reading device, reading environment, or hash value of the reading result do not match registration history information, status trail information, or expected correspondence information. Therefore, there is a need for a technology that does not treat reading trail information as a mere reading log, but combines it with object correspondence relationship information and trail correspondence relationship information for use as a matching element against abnormality determination patterns.

[0018] Furthermore, simply treating a mismatch between part ID display information and the target part or target packaging as a single anomaly is insufficient. For example, label substitution, part substitution, packaging inconsistency, duplicate identifiers, reuse of identification information, use after invalidation, or inconsistency in read evidence each require different causes, different verification targets, and different countermeasures. Therefore, there is a need for a technology that can compare combinations of target object correspondence information, evidence correspondence information, and read evidence information with anomaly judgment patterns stored in an anomaly condition data structure, and classify and generate multiple label authenticity anomalies as anomaly types.

[0019] Furthermore, when part ID display information includes both human-readable and machine-readable data, the information extracted from the human-readable data may not match the information extracted from the machine-readable data. Such discrepancies may indicate display errors, encoding errors, label substitutions, inconsistencies during reissuance, or abnormalities in the reading process. Therefore, there is a need for a technology that can reflect the comparison results between human-readable and machine-readable data in at least one of the object correspondence relationship information, evidence correspondence relationship information, or reading evidence information, and utilize it for expert appraisal and certification processing.

[0020] Furthermore, the target parts may include parts that are managed individually and parts that are managed in groups or batches. For individually managed target parts, identification is required based on a combination of part type identification information, individual identification information, and supplier identification information. On the other hand, for target parts that are managed in groups or batches, identification is required based on a combination of part type identification information, group identification information, and supplier identification information. Therefore, technology is required to generate identification information for individual management and identification information for group management, depending on the management method of the target parts, and to use this information for authentication and certification processing of the target parts or target packaging.

[0021] Furthermore, in the authentication and certification of the target parts or packaging, it is necessary to refer to evidence related to each event such as issuance, shipment, receipt, inspection, storage, installation, replacement, repair, cleaning, use, return, invalidation, or disposal. These evidence can be recorded on a record infrastructure utilizing distributed ledger technology, a record infrastructure not utilizing distributed ledger technology, or a record infrastructure using hybrid technology combining both of the above. Therefore, a technology is required to obtain evidence comparison information from each of the above record infrastructures and associate normalized identification information, target object correspondence information, evidence correspondence information, read evidence information, label authenticity anomaly information, or authentication and certification result information with each event related to the target parts or packaging.

[0022] Furthermore, in appraisal and certification of target parts or packaging, it may be useful to use artificial intelligence (AI) processing or Explainable AI (XAI) processing to generate candidate anomaly judgment patterns, candidate anomaly types, anomaly occurrence probabilities, or anomaly priorities, or to explain the basis for the judgment. On the other hand, basic appraisal and certification processing without using AI or XAI processing can also be widely implemented. Therefore, there is a need for technology that allows for the addition of AI or XAI processing when auxiliary judgment explanation processing is selected or requested as the target of execution, without narrowing the scope of basic appraisal and certification processing.

[0023] Furthermore, in expert certification of target parts or packaging, it may be useful to achieve verification continuity, key distribution coordination, or non-disclosure verification by using PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or Zero-Knowledge Proof (ZKP) processing. On the other hand, basic expert certification processing that does not use the above protective verification processing can also be widely implemented. Therefore, there is a need for a technology that can add at least one of PQC processing, QKD linkage processing, or ZKP processing when protective verification processing is selected or requested as the target of execution, without narrowing the scope of basic expert certification processing. [Means for solving the problem]

[0024] To solve the above problems, an authentication certification system according to one aspect of the present invention is an authentication certification system that performs authentication certification for a target component that constitutes or is used in an apparatus used for semiconductor manufacturing, measurement, assembly, inspection, maintenance or transport, or for a target packaging corresponding to the target component, and comprises an abnormal condition data structure storage means, an acquisition means, a normalized identification information generation means, a correspondence relationship information generation means, an abnormality determination pattern matching means, an abnormality information generation means, and an authentication certification result generation means.

[0025] The above-mentioned abnormal condition data structure storage means stores an abnormal condition data structure for each abnormality determination pattern, which associates object correspondence conditions related to object correspondence relationship information, evidence correspondence conditions related to evidence correspondence relationship information, read evidence conditions related to read evidence information, and the type of abnormality corresponding to the above-mentioned abnormality determination pattern. As a result, the above-mentioned appraisal and certification system can maintain criteria for determining abnormalities related to label authenticity by combining correspondence with objects, correspondence with evidence, and evidence related to reading.

[0026] The acquisition means described above acquires part ID display information attached to, displayed on, recorded on, or associated with the target part or the target packaging, and read trail information relating to the reading of the part ID display information. The part ID display information is information for identifying the target part or the target packaging, and the read trail information is information indicating how the part ID display information was read.

[0027] The normalized identification information generation means generates normalized identification information from the part ID display information, including at least part type identification information, individual identification information or group identification information, and supplier identification information. As a result, the appraisal and certification system can handle part ID display information with different display formats, encoding formats, issuing bodies, or management methods as comparable information in the appraisal and certification process.

[0028] The acquisition means acquires object comparison information that includes at least one of the component-side identification information displayed, recorded, embedded, or associated with the target component, and the packaging-side identification information displayed, recorded, embedded, or associated with the target packaging. The object comparison information is information for confirming whether the normalized identification information corresponds to the actual target component or target packaging.

[0029] The acquisition means acquires evidence comparison information which includes at least one of the following: supplier evidence information corresponding to the supplier identification information, distribution evidence information relating to the target part or the target packaging, registration history information corresponding to the normalization identification information, or status evidence information relating to the target part or the target packaging. The evidence comparison information is information for confirming whether the part ID display information or the normalization identification information is consistent with evidence relating to supply, distribution, registration, status, or history.

[0030] The above correspondence relationship information generation means generates object correspondence relationship information showing the correspondence between the normalized identification information and the object comparison information, and evidence correspondence relationship information showing the correspondence between the normalized identification information and the evidence comparison information. As a result, the appraisal certification system can generate correspondence between information and physical objects, and correspondence between information and evidence, separately.

[0031] The above-described anomaly determination pattern matching means compares the combination of the above-described object correspondence information, the above-described evidence correspondence information, and the above-described read evidence information with the above-described anomaly determination pattern stored in the above-described anomaly condition data structure. As a result, the above-described appraisal certification system can make a determination by combining inconsistencies with the target part or target packaging, inconsistencies with the evidence, and inconsistencies with the read evidence.

[0032] The above-described anomaly information generation means generates label authenticity anomaly information that includes at least one of the following anomaly types corresponding to the above-described anomaly determination pattern: label substitution anomaly, part substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after invalidation anomaly, or read trace inconsistency anomaly. As a result, the above-described authentication certification system can generate information that classifies the type of inconsistency, not just indicate whether or not there is a discrepancy.

[0033] The above-described authentication certificate result generation means generates authentication certificate result information indicating the correspondence authenticity between the part ID display information and the target part or target packaging, based on at least one of the above-described object correspondence relationship information, the above-described evidence correspondence relationship information, the above-described read evidence information, and the above-described label authenticity anomaly information. As a result, the authentication certificate system can output authentication certificate results based on the consistency between the part ID display information and the physical object and evidence.

[0034] The above-mentioned parts, the above-mentioned packaging, or combinations of the above-mentioned parts and the above-mentioned packaging may be assets. In this specification, "asset" means a tangible asset, an intangible asset, or a composite asset. Furthermore, "composite asset" means an asset that includes or references two or more component assets, the above-mentioned component assets may be tangible assets, intangible assets, or other composite assets.

[0035] The above-mentioned part ID display information may be obtained from at least one of the following: a label affixed to the target part, a marking directly displayed on the target part, an engraving applied to the target part, a recording medium attached to or incorporated into the target part, a label affixed to the target packaging, a marking directly displayed on the target packaging, an engraving applied to the target packaging, or a recording medium attached to or incorporated into the target packaging. This allows the authentication certification system to accommodate various display methods on both the target part and the target packaging.

[0036] The above-mentioned part ID display information may include at least one of human-readable data and machine-readable data. If the above-mentioned human-readable data is included, it may include at least one of the following: part name, supplier name, supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information. If the above-mentioned machine-readable data is included, it may include data encoded from at least one of the above-mentioned supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information. If the above-mentioned part ID display information includes both the above-mentioned human-readable data and the above-mentioned machine-readable data, the above-mentioned correspondence relationship information generation means may compare the information extracted from the above-mentioned human-readable data with the information extracted from the above-mentioned machine-readable data and reflect the result of the above comparison in at least one of the above-mentioned object correspondence relationship information, the above-mentioned evidence correspondence relationship information, or the above-mentioned read evidence information.

[0037] The above machine-readable data may include data read from a two-dimensional code. The above reading trace information may include at least one of the reading result of the two-dimensional code, the reading image, the reading device identification information, the reading entity identification information, the reading time information, the reading location information, the reading environment information, or the reading result hash value. The above normalized identification information generation means may generate the above normalized identification information based on the above reading result, and the above abnormality determination pattern matching means may use the above reading trace information to match it with the above abnormality determination pattern.

[0038] The normalized identification information generation means may generate individual component label identification information based on a combination of the component type identification information, the individual identification information, and the supplier identification information when the target component is a component that is managed individually. Furthermore, the normalized identification information generation means may generate group component label identification information based on a combination of the component type identification information, the group identification information, and the supplier identification information when the target component is a component that is managed in groups or batches.

[0039] The above-mentioned object comparison information may include at least one of the following: the part-side identification information, the packaging-side identification information, the appearance image, shape information, dimensional information, material information, weight information, or surface condition information of the target part, the appearance image, packaging condition information, sealed condition information, opened condition information, or clean condition information of the target packaging, packaging condition information relating to clean environment-compatible packaging, shipping packaging, individual packaging, collective packaging, storage packaging, or in-process packaging covering the target part, or physical characteristic information obtained from the target part or the target packaging.

[0040] The above evidence comparison information may include at least one of the following: issuance information, delivery information, acceptance information, shipment information, receipt information, warranty information or invalidation information by the supplier; information regarding the shipment, receipt, storage, installation, replacement, repair, cleaning, reuse, return or disposal of the above-mentioned parts or packaging; registration time information for the above-mentioned normalized identification information; registration entity identification information; update time information; update entity identification information; expiration information or reissue information; expected correspondence information showing the expected correspondence relationship between the above-mentioned normalized identification information and the above-mentioned parts or packaging; or evidence information corresponding to the above-mentioned normalized identification information.

[0041] The above abnormal condition data structure may include at least one of the following: a first abnormality determination pattern in which the object correspondence information is consistent and the evidence correspondence information is inconsistent; a second abnormality determination pattern in which the object correspondence information is inconsistent and the evidence correspondence information is consistent; a third abnormality determination pattern in which both the object correspondence information and the evidence correspondence information are inconsistent; a fourth abnormality determination pattern in which the read evidence information is inconsistent with the registration history information or the status evidence information; or a fifth abnormality determination pattern in which the same normalized identification information is associated with multiple target parts or multiple target packaging.

[0042] The abnormal information generation means may generate label authenticity abnormal information, including the packaging inconsistency abnormality, when the object comparison information corresponding to the target part is consistent with the normalized identification information, and the object comparison information corresponding to the target packaging is inconsistent with the normalized identification information, according to the abnormality determination pattern. Furthermore, the abnormal information generation means may generate label authenticity abnormal information, including the part substitution abnormality, when the object comparison information corresponding to the target packaging is consistent with the normalized identification information, and the object comparison information corresponding to the target part is inconsistent with the normalized identification information, according to the abnormality determination pattern. In addition, the abnormal information generation means may generate label authenticity abnormal information, including the label substitution abnormality or the reading evidence inconsistency abnormality, when the part ID display information or the reading evidence information is inconsistent with the object comparison information or the evidence comparison information, according to the abnormality determination pattern.

[0043] The above-mentioned abnormality information generation means may generate the above-mentioned label authenticity abnormality information, including the above-mentioned duplicate identifier abnormality, the above-mentioned identification information reuse abnormality, or the above-mentioned use after invalidation abnormality, based on the above-mentioned abnormality condition data structure, when the same above-mentioned normalized identification information is associated with multiple target parts, when the same above-mentioned normalized identification information is associated with multiple target packages, when the same above-mentioned normalized identification information is associated with target parts and target packages that are inconsistent with each other, when the invalidated above-mentioned normalized identification information is read again, when the reissued above-mentioned normalized identification information is inconsistent with the above-mentioned registration history information, or when the above-mentioned individual identification information or the above-mentioned group identification information is reused under conditions different from the above-mentioned registration history information.

[0044] The acquisition means described above may acquire the evidence comparison information from at least one of the following: a record infrastructure utilizing distributed ledger technology, a record infrastructure not utilizing distributed ledger technology, or a record infrastructure using hybrid technology combining both of the above record infrastructures. Furthermore, the appraisal result generation means described above may associate at least one of the normalized identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the appraisal result information with at least one of the following events relating to the target part or the target packaging: issuance event, shipping event, receipt event, inspection event, storage event, installation event, replacement event, repair event, cleaning event, use event, return event, invalidation event, or disposal event.

[0045] The above appraisal certificate result information may include at least one of the following: the above object correspondence relationship information, the above evidence correspondence relationship information, the above reading evidence information, the type of the above label authenticity anomaly information, the identification information of the above anomaly judgment pattern that formed the basis of the above label authenticity anomaly information, the judgment category indicating the correspondence authenticity between the above part ID display information and the above target part or the above target packaging, the reacquisition request information requesting the reacquisition of the above part ID display information, or the additional acquisition request information requesting the additional acquisition of the above object comparison information or the above evidence comparison information.

[0046] The above appraisal and certification system may further include auxiliary judgment explanation processing means. The auxiliary judgment explanation processing means may be configured to perform at least one of artificial intelligence (AI) processing and Explainable AI (XAI) processing based on at least one of the above object correspondence relationship information, the above evidence correspondence relationship information, the above read evidence information, the above anomaly judgment pattern, the above label authenticity anomaly information, or the above appraisal and certification result information when auxiliary judgment explanation processing is selected or requested as an execution target. When the above AI processing is performed, the auxiliary judgment explanation processing means may generate AI judgment auxiliary information including at least one of a candidate anomaly judgment pattern, anomaly type candidate, anomaly occurrence probability, or anomaly priority. When the above XAI processing is performed, the auxiliary judgment explanation processing means may generate XAI explanation information indicating at least one of the input information, correspondence relationship information, read evidence information, anomaly conditions, features, or contributions that form the basis of the above candidate anomaly judgment pattern, the above anomaly type candidate, or the above label authenticity anomaly information. At least one of the AI ​​judgment auxiliary information and the XAI explanation information generated by the above-mentioned auxiliary judgment explanation processing means may be associated with the label authenticity anomaly information or the appraisal certificate result information.

[0047] The above appraisal and certification system may further include protective verification processing means. The protective verification processing means may be configured to perform at least one of the following as protective verification processing for at least one of the following: part ID display information, normalization identification information, object correspondence relationship information, evidence correspondence relationship information, read evidence information, label authenticity anomaly information, or appraisal and certification result information: PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or zero-knowledge proof (ZKP) processing. When the above PQC processing is performed, the protective verification processing means may acquire or generate post-quantum cryptographic protection information including at least one of PQC signature information, PQC verification result information, PQC key exchange information, cryptographic scheme identification information, PQC transition state information, or PQC re-signature request state information. When the above QKD linkage processing is performed, the above protection verification processing means may acquire or generate quantum key distribution-related information including at least one of the following: QKD key distribution method identification information, QKD key distribution session identification information, QKD key material identification information, QKD key distribution status information, QKD applicability information, QKD transition status information, or key distribution management information corresponding to QKD. When the above ZKP processing is performed, the above protection verification processing means may generate ZKP information that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the above information, based on at least one of the above part ID display information, normalization identification information, object correspondence relationship information, evidence correspondence relationship information, read evidence conditions, or appraisal certification result information, or commitment information or hash information generated from these, or acquire ZKP verification result information corresponding to the above ZKP information. At least one of the above-mentioned quantum-resistant cryptographic protection information, quantum key distribution-related information, ZKP information, or ZKP verification result information generated or obtained by the above-mentioned protection verification processing means may be associated with the above-mentioned label authenticity anomaly information or the above-mentioned certification result information.

[0048] The above protection verification processing means may generate information indicating a PQC verification continuity anomaly if the above post-quantum computer cryptographic protection information does not match the PQC verification conditions corresponding to the above component ID display information, the above normalization identification information, the above object correspondence relationship information, the above evidence correspondence relationship information, the above read evidence information, the above label authenticity anomaly information, or the above appraisal certification result information. Furthermore, the above protection verification processing means may generate information indicating a QKD linkage continuity anomaly if the above quantum key distribution related information does not match the QKD linkage conditions corresponding to the above component ID display information, the above normalization identification information, the above object correspondence relationship information, the above evidence correspondence relationship information, the above read evidence information, the above label authenticity anomaly information, or the above appraisal certification result information. In addition, the above protection verification processing means may generate information indicating a ZKP verification inconsistency anomaly if the above ZKP information or the above ZKP verification result information does not match the above correspondence authenticity conditions, the above object correspondence conditions, the above evidence correspondence conditions, the above read evidence conditions, or the above anomaly determination conditions. The above protection verification processing means may reflect at least one of the above PQC verification continuity anomalies, the above QKD linkage continuity anomalies, or the above ZKP verification inconsistency anomalies in the above label authenticity anomaly information or the above expert certification result information.

[0049] The above abnormal condition data structure may be a data structure that maintains the correspondence between the above abnormality judgment pattern and the above abnormality type. The above data structure may consist of at least one of the following: table format, rule set format, condition expression set format, decision tree format, classification model format, policy data format, or format that can be referenced by the rule engine. The above data structure may be stored in the above abnormal condition data structure storage means as a single data structure or as a combination of multiple data structures. The above abnormality judgment pattern matching means may identify the above abnormality judgment pattern that corresponds to the combination of the above object correspondence information, the above evidence correspondence information, and the above read evidence information based on the above correspondence held in the above data structure. The above abnormality information generation means may generate the above label authenticity abnormality information based on the above abnormality type associated with the identified abnormality judgment pattern.

[0050] An authentication and certification method according to one aspect of the present invention is an authentication and certification method performed by a computer, comprising the steps of: acquiring part ID display information attached to, displayed, recorded, or associated with a target part that constitutes or is used in equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport, or with a target package corresponding to the target part, and read trail information relating to the reading of the part ID display information; generating normalized identification information from the part ID display information, including at least part type identification information, individual identification information or group identification information, and supplier identification information; acquiring target object comparison information including at least one of part-side identification information displayed, recorded, embedded, or associated with the target part, and packaging-side identification information displayed, recorded, embedded, or associated with the target package; and supplier trail information corresponding to the supplier identification information, distribution trail information relating to the target part or the target package, registration history information corresponding to the normalized identification information, or the target The process includes: acquiring evidence comparison information that includes at least one status evidence information relating to a part or the target packaging; generating object correspondence information that shows the correspondence between the normalized identification information and the object comparison information, and generating evidence correspondence information that shows the correspondence between the normalized identification information and the evidence comparison information; comparing the combination of the object correspondence information, the evidence correspondence information, and the read evidence information with an abnormality judgment pattern stored in an abnormality condition data structure; generating label authenticity abnormality information that includes at least one of the following abnormality types corresponding to the abnormality judgment pattern: label substitution abnormality, part substitution abnormality, packaging inconsistency abnormality, duplicate identifier abnormality, identification information reuse abnormality, use after invalidation abnormality, or read evidence inconsistency abnormality; and generating authentication certificate result information that shows the correspondence authenticity between the part ID display information and the target part or the target packaging based on at least one of the object correspondence information, the evidence correspondence information, the read evidence information, and the label authenticity abnormality information.

[0051] The above appraisal and certification method may further include a step of performing at least one of artificial intelligence (AI) processing and Explainable AI (XAI) processing based on at least one of the above object correspondence relationship information, the above evidence correspondence relationship information, the above read evidence information, the above anomaly determination pattern, the above label authenticity anomaly information, or the above appraisal and certification result information, when auxiliary judgment explanation processing is selected or requested as a target for execution. When the above AI processing is performed, AI judgment auxiliary information including at least one of candidate anomaly determination patterns or candidate anomaly types may be generated. When the above XAI processing is performed, XAI explanation information indicating at least one of the input information, correspondence relationship information, read evidence information, anomaly conditions, features, or contributions that form the basis of the above candidate anomaly determination pattern, the above anomaly type candidate, or the above label authenticity anomaly information may be generated. At least one of the above AI judgment auxiliary information and the above XAI explanation information may be associated with the above label authenticity anomaly information or the above appraisal and certification result information.

[0052] The above authentication and certification method may further include a step of performing at least one of the following as a protection and verification process for at least one of the following: the part ID display information, the normalized identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the authentication and certification result information, when a protection and verification process is selected or requested to be performed. If the above PQC process is performed, quantum-resistant cryptographic protection information may be obtained or generated. If the above QKD linkage process is performed, quantum key distribution related information may be obtained or generated. If the above ZKP process is performed, ZKP information may be generated that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the above information, or ZKP verification result information corresponding to the above ZKP information may be obtained. At least one of the above-mentioned quantum-resistant cryptographic protection information, the above-mentioned quantum key distribution-related information, the above-mentioned ZKP information, or the above-mentioned ZKP verification result information may be associated with the above-mentioned label authenticity anomaly information or the above-mentioned authentication certificate result information.

[0053] The above authentication and certification method may further include at least one of the following steps: generating information indicating a PQC verification continuity anomaly when the above-mentioned quantum-resistant cryptographic protection information is inconsistent with the PQC verification conditions; generating information indicating a QKD linkage continuity anomaly when the above-mentioned quantum key distribution-related information is inconsistent with the QKD linkage conditions; or generating information indicating a ZKP verification inconsistency anomaly when the above-mentioned ZKP information or the above-mentioned ZKP verification result information is inconsistent with the above-mentioned correspondence authenticity conditions, the above-mentioned object correspondence conditions, the above-mentioned evidence correspondence conditions, the above-mentioned read evidence conditions, or the above-mentioned anomaly determination conditions. At least one of the above-mentioned PQC verification continuity anomaly, the above-mentioned QKD linkage continuity anomaly, or the above-mentioned ZKP verification inconsistency anomaly may be reflected in the above-mentioned label authenticity anomaly information or the above-mentioned authentication and certification result information.

[0054] A program according to one aspect of the present invention provides a computer with means for acquiring part ID display information attached to, displayed, recorded, or associated with the target part or the target packaging, and read trail information relating to the reading of the part ID display information; normalized identification information generation means for generating normalized identification information from the part ID display information, which includes at least part type identification information, individual identification information or group identification information, and supplier identification information; object comparison information acquisition means for acquiring object comparison information which includes at least one of part-side identification information displayed, recorded, embedded, or associated with the target part, and packaging-side identification information displayed, recorded, embedded, or associated with the target packaging; and trail comparison information acquisition means for acquiring trail comparison information which includes at least one of supplier trail information corresponding to the supplier identification information, distribution trail information relating to the target part or the target packaging, registration history information corresponding to the normalized identification information, or status trail information relating to the target part or the target packaging. The program may function as a correspondence relationship information generation means for generating object correspondence relationship information showing the correspondence between the above-mentioned normalized identification information and the above-mentioned object comparison information, and evidence correspondence relationship information showing the correspondence between the above-mentioned normalized identification information and the above-mentioned evidence comparison information; anomaly determination pattern matching means for comparing a combination of the above-mentioned object correspondence relationship information, the above-mentioned evidence correspondence relationship information and the above-mentioned read evidence information with an anomaly determination pattern stored in an anomaly condition data structure; anomaly information generation means for generating label authenticity anomaly information, which includes at least one of the following as an anomaly type corresponding to the above-mentioned anomaly determination pattern: label substitution anomaly, part substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after invalidation anomaly, or read evidence inconsistency anomaly; and an appraisal certificate result generation means for generating appraisal certificate result information showing the correspondence authenticity between the above-mentioned part ID display information and the above-mentioned target part or the above-mentioned target packaging, based on at least one of the above-mentioned object correspondence relationship information, the above-mentioned evidence correspondence relationship information, the above-mentioned read evidence information and the above-mentioned label authenticity anomaly information.

[0055] The above program may further enable the above computer to function as an auxiliary determination and explanation processing means that, when an auxiliary determination and explanation processing is selected or requested as an execution target, executes at least one of artificial intelligence (AI) processing and Explainable AI (XAI) processing based on at least one of the above object correspondence relationship information, the above evidence correspondence relationship information, the above read evidence information, the above anomaly determination pattern, the above label authenticity anomaly information, or the above expert certification result information. The above auxiliary determination and explanation processing means may generate AI determination auxiliary information including at least one of candidate anomaly determination patterns or candidate anomaly types when the above AI processing is executed, and may generate XAI explanation information showing at least one of the input information, correspondence relationship information, read evidence information, anomaly conditions, features, or contributions that form the basis of the above candidate anomaly determination pattern, the above anomaly type candidate, or the above label authenticity anomaly information. At least one of the above AI determination auxiliary information and the above XAI explanation information may be associated with the above label authenticity anomaly information or the above expert certification result information.

[0056] The above program may further enable the above computer to function as a protective verification processing means, which, when a protective verification processing is selected or requested, performs at least one of the following as a protective verification processing: PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or Zero-Knowledge Proof (ZKP) processing, for at least one of the above-mentioned part ID display information, normalized identification information, object correspondence information, evidence correspondence information, read evidence information, label authenticity anomaly information, or expert certification result information. The above protection verification processing means may acquire or generate quantum-resistant cryptographic protection information when the above PQC processing is performed, acquire or generate quantum key distribution-related information when the above QKD linkage processing is performed, and when the above ZKP processing is performed, generate ZKP information that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the above information, or acquire ZKP verification result information corresponding to the above ZKP information. At least one of the above quantum-resistant cryptographic protection information, the above quantum key distribution-related information, the above ZKP information, or the above ZKP verification result information may be associated with the above label authenticity anomaly information or the above appraisal certificate result information.

[0057] The above program may, in the protection verification processing means, generate information indicating a PQC verification continuity anomaly if the post-quantum cryptographic protection information does not match the PQC verification conditions, generate information indicating a QKD linkage continuity anomaly if the quantum key distribution related information does not match the QKD linkage conditions, or generate information indicating a ZKP verification inconsistency anomaly if the ZKP information or the ZKP verification result information does not match the correspondence authenticity conditions, the object correspondence conditions, the evidence correspondence conditions, the read evidence conditions, or the anomaly determination conditions. At least one of the above PQC verification continuity anomaly, the above QKD linkage continuity anomaly, or the above ZKP verification inconsistency anomaly may be reflected in the above label authenticity anomaly information or the above appraisal certificate result information. [Effects of the Invention]

[0058] According to one aspect of the present invention, by acquiring part ID display information attached to, displayed, recorded, or associated with the target part or target packaging, and comparing normalized identification information generated from the part ID display information with information relating to the target part or target packaging, the authenticity of the correspondence between the part ID display information and the target part or target packaging can be determined. This allows for the output of not only the fact that the part ID display information was read, but also the authentication result information indicating whether the part ID display information genuinely corresponds to the actual target part or target packaging.

[0059] According to one aspect of the present invention, object correspondence information indicating the correspondence between the normalized identification information and object comparison information, evidence correspondence information indicating the correspondence between the normalized identification information and evidence comparison information, and reading evidence information relating to the reading of the part ID display information can be combined and compared with an abnormality determination pattern stored in the abnormality condition data structure. This makes it possible to determine inconsistencies with the physical object, inconsistencies with the evidence, and inconsistencies related to reading individually or in combination, enabling more multifaceted abnormality determination than simple identification information matching.

[0060] According to one aspect of the present invention, it is possible to generate label authenticity abnormality information that includes at least one of the following abnormality types corresponding to the above abnormality determination pattern: label substitution abnormality, part substitution abnormality, packaging inconsistency abnormality, duplicate identifier abnormality, identification information reuse abnormality, use after invalidation abnormality, or read trail inconsistency abnormality. This makes it possible not only to indicate that there is a mismatch, but also to distinguish and indicate the type of cause of the mismatch or abnormality, and to generate an authentication certificate result that is easy to use for subsequent processing such as reconfirmation, additional acquisition, invalidation, reissuance, distribution suspension, or maintenance check of the target part or target packaging.

[0061] According to one aspect of the present invention, when the target parts are individually managed parts, individual management part label identification information can be generated based on a combination of part type identification information, individual identification information, and supplier identification information. When the target parts are managed in groups or batches, group management part label identification information can be generated based on a combination of part type identification information, group identification information, and supplier identification information. This makes it possible to perform authentication and certification processing according to the management method for both target parts managed on an individual basis and target parts managed in groups or batches.

[0062] According to one aspect of the present invention, when the component ID display information includes both human-readable and machine-readable data, the information extracted from the human-readable data and the information extracted from the machine-readable data can be compared, and the comparison result can be reflected in at least one of the object correspondence relationship information, evidence correspondence relationship information, or read evidence information. This makes it possible to reflect inconsistencies between visually observable displays and machine-readable displays, encoding errors, display errors, label substitutions, or inconsistencies during reissuance in the appraisal and certification process.

[0063] According to one aspect of the present invention, evidence comparison information can be obtained from a recording infrastructure utilizing distributed ledger technology, a recording infrastructure not utilizing distributed ledger technology, or a recording infrastructure using hybrid technology combining both of the above recording infrastructures, and the normalized identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the appraisal certification result information can be associated with at least one of the following events related to the target part or target packaging: issuance event, shipping event, receipt event, inspection event, storage event, installation event, replacement event, repair event, cleaning event, use event, return event, invalidation event, or disposal event. This allows the evidence related to the target part or target packaging to be extended by connecting it with the appraisal certification process.

[0064] According to one aspect of the present invention, when an auxiliary judgment explanation process is selected or requested as the target of execution, at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing can be executed to generate AI judgment auxiliary information or XAI explanation information. This allows the basic appraisal and certification processing to not necessarily be limited to AI processing or XAI processing, but to additionally utilize candidate anomaly judgment patterns, candidate anomaly types, anomaly occurrence probabilities, anomaly priorities, judgment grounds, features, or contributions as needed.

[0065] According to one aspect of the present invention, when a protection verification process is selected or requested as the target of execution, at least one of PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or Zero-Knowledge Proof (ZKP) processing can be executed. This allows the basic authentication and proof processing to be added to the authentication and proof processing as needed, without narrowing the configuration to one that requires PQC processing, QKD linkage processing, or ZKP processing.

[0066] According to one aspect of the present invention, information indicating a PQC verification continuity anomaly can be generated when the post-quantum cryptographic protection information does not match the PQC verification conditions, information indicating a QKD linkage continuity anomaly can be generated when the quantum key distribution-related information does not match the QKD linkage conditions, or information indicating a ZKP verification inconsistency anomaly can be generated when the ZKP information or ZKP verification result information does not match the correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions. This makes it possible to reflect anomalies related to the protection verification process in label authenticity anomaly information or expert certification result information, and to clearly indicate the verification continuity and non-disclosure verification status in the expert certification result. [Brief explanation of the drawing]

[0067] [Figure 1] This diagram shows an example of the overall configuration of the appraisal and certification system. [Figure 2]This figure shows an example of the functional configuration of an appraisal and certification system. [Figure 3] This figure shows an example of a process for generating normalized identification information from part ID display information. [Figure 4] This figure shows an example of a process that generates object correspondence information and evidence correspondence information based on normalized identification information. [Figure 5] This figure shows an example of an abnormal condition data structure that associates abnormality detection patterns with abnormality types. [Figure 6] This figure shows an example of a process that generates label authenticity anomaly information based on object correspondence information, evidence correspondence information, and read evidence information. [Figure 7] This figure shows an example of a process that uses read trail information to compare it with an anomaly detection pattern. [Figure 8] This diagram shows an example configuration for connecting a recording infrastructure utilizing distributed ledger technology, a recording infrastructure not utilizing distributed ledger technology, or a recording infrastructure using hybrid technology, with events related to a target component or target packaging. [Figure 9] This figure shows an example of auxiliary judgment explanation processing when using artificial intelligence (AI) processing or explainable AI (XAI) processing. [Figure 10] This figure shows examples of protection verification processes when using PQC (Post-Quantum Cryptography), QKD (Quantum Key Distribution) integration, or Zero-Knowledge Proof (ZKP) processing. [Figure 11] This diagram shows an example of the information flow in an appraisal and certification method. [Figure 12] This figure shows an example configuration in which a computer functions as various means through a program. [Modes for carrying out the invention]

[0068] Embodiments of the present invention will be described below. However, the following embodiments are illustrative for explaining the present invention and do not limit the technical scope of the present invention to the following embodiments. In the following, identical or substantially identical configurations, processes, data, or functions will be described using the same name. Also, in the following description, "at least one" includes the case of only one, a combination of two or more, and the case of all of them.

[0069] The authentication and certification system according to this embodiment is a system for authenticating and certifying target parts that constitute or are used in equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport, or target packaging corresponding to the target parts. The authentication and certification system acquires part ID display information, read evidence information, target object comparison information, and evidence comparison information, generates normalized identification information from the part ID display information, generates target object correspondence relationship information showing the correspondence between the normalized identification information and the target object comparison information, and generates evidence correspondence relationship information showing the correspondence between the normalized identification information and the evidence comparison information. Furthermore, the authentication and certification system compares the combination of target object correspondence relationship information, evidence correspondence relationship information, and read evidence information with an anomaly judgment pattern stored in an anomaly condition data structure, and generates label authenticity anomaly information and authentication and certification result information.

[0070] The term "target components" refers to components that constitute or are used in equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport. Target components may include, for example, replacement parts, maintenance parts, consumable parts, measuring parts, transport parts, clean environment compatible parts, assembly parts, inspection parts, jigs, tools, modules, units, components, or similar parts that constitute the equipment. Target packaging refers to packaging corresponding to the above-mentioned target components, and may include packaging that houses, protects, stores, transports, or indicates or maintains the correspondence with the target components. Target packaging may include individual packaging, collective packaging, shipping packaging, storage packaging, clean environment compatible packaging, or in-process packaging.

[0071] In this specification, "asset" means a tangible asset, an intangible asset, or a composite asset. "Composite asset" means an asset that includes or references two or more component assets, the component assets may be tangible assets, intangible assets, or other composite assets. In this embodiment, a target part, a target package, or a combination of a target part and a target package may be treated as an asset. Furthermore, a combination of a target part and a target package, a combination of a target part and a recording medium, a combination of a target part and evidence information, or a component unit including multiple target parts may be treated as a composite asset.

[0072] Part ID information refers to information attached to, displayed, recorded, or associated with a target part or target packaging for identifying that part or packaging. Part ID information may be provided as a label, direct display, engraving, printing, etching, laser marking, recording medium, electronic tag, two-dimensional code, one-dimensional code, string of characters, number sequence, symbol sequence, image, data file, or a combination thereof. Part ID information may be provided on the target part, on the target packaging, or on both the target part and the target packaging.

[0073] Human-readable data refers to data included in part ID display information in a format that can be visually recognized by humans. Human-readable data may include part name, supplier name, supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, display issuance information, manufacturing date information, expiration date information, lot information, management number information, or similar information. Human-readable data may be represented by characters, numbers, symbols, figures, colors, arrangement, notation format, or a combination thereof.

[0074] Machine-readable data refers to data included in part ID display information in a format that can be read by a reader, sensor, camera, scanner, communication device, or computer. Machine-readable data may include data encoded with supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, display issuance information, or similar information. Machine-readable data may be composed of two-dimensional codes, one-dimensional codes, electronic tags, data within recording media, optically read data, magnetically read data, wirelessly read data, or a combination thereof.

[0075] A two-dimensional code is a form of machine-readable data in which information is represented as a two-dimensional image, figure, or pattern using a predetermined encoding scheme. A two-dimensional code may be displayed directly on the target part or packaging, on a label, or displayed by printing, engraving, laser marking, a display device, electronic paper, or a recording medium. The two-dimensional code may encode all or part of the part ID display information and may include information for generating normalized identification information, information for identifying the reading target, or reference information for linking to evidence reference information.

[0076] Read evidence information refers to information that shows evidence related to the reading of part ID display information. Read evidence information may include at least one of the following: reading result, reading image, reading device identification information, reading entity identification information, reading time information, reading location information, reading environment information, or reading result hash value. Read evidence information may include not only the fact that part ID display information was read, but also information indicating the circumstances of the reading, the entity that performed the reading, the location of the reading, the time of the reading, the reading device, the reading environment, or the identity of the reading result, and is therefore used as a matching element with the abnormality determination pattern.

[0077] Normalized identification information refers to information generated from part ID display information and used in the authentication certification system to identify or verify the target part or target packaging. Normalized identification information may include at least part type identification information, individual identification information or group identification information, and supplier identification information. Normalized identification information may be information converted into a verifiable format that absorbs variations in notation, encoding format, data format, number of digits, delimiters, character types, display order, or format differences between management entities contained in the part ID display information.

[0078] Part type identification information refers to information used to identify the type, item, model, specification, application, category, or component unit of a target part. Part type identification information may include the part name, part number, part code, specification code, category code, part classification code, or similar information. Part type identification information may be used in combination with individual identification information or group identification information to improve the accuracy of identifying the target part.

[0079] Individual identification information refers to information used to identify a target part on an individual basis when the target part is a part that is managed individually. Individual identification information may include a serial number, individual number, individual management number, individual label number, individual identifier, individual manufacturing number, or similar information. Individual identification information may be used in combination with part type identification information and supplier identification information to generate part label identification information for individual management.

[0080] Group identification information refers to information used to identify the group, batch, lot, manufacturing unit, shipping unit, packaging unit, or management unit to which a target part belongs, when the target part is managed by a group or batch. Group identification information may include a batch number, lot number, group management number, manufacturing unit number, shipping unit number, collective packaging number, or similar information. Group identification information may be used in combination with part type identification information and supplier identification information to generate part label identification information for group management.

[0081] Supplier identification information refers to information used to identify the supplier of the subject parts or packaging. The supplier may include manufacturers, distributors, sellers, distributors, maintenance providers, replacement providers, packaging providers, label issuers, inspection providers, or similar entities. Supplier identification information may include supplier codes, company identifiers, business establishment identifiers, issuer identifiers, organization identifiers, or similar information.

[0082] Object comparison information refers to information acquired to confirm the correspondence between normalized identification information and a physical object, such as a target part or target packaging. Object comparison information may include part-side identification information, packaging-side identification information, appearance image of the target part, shape information, dimensional information, material information, weight information, surface condition information, appearance image of the target packaging, packaging condition information, sealed condition information, opened condition information, cleanliness condition information, packaging condition information, or physical characteristic information. Object comparison information is used to confirm the physical consistency between the part ID display information and the actual target part or target packaging.

[0083] Component-side identification information refers to identification information displayed, recorded, embedded, attached to, or associated with the target component. Component-side identification information may include letters, numbers, symbols, markings, two-dimensional codes, one-dimensional codes, electronic tags, information within recording media, physical characteristic information, image characteristic information, or similar information directly displayed on the target component. Component-side identification information may be used to determine consistency with normalized identification information.

[0084] Packaging-side identification information refers to identification information displayed, recorded, embedded, attached to, or associated with the target packaging. Packaging-side identification information may include labels affixed to the target packaging, direct markings, engravings, two-dimensional codes, one-dimensional codes, electronic tags, information on recording media, packaging numbers, shipping numbers, collective packaging numbers, individual packaging numbers, or similar information. Packaging-side identification information may be used to determine the correspondence between the target packaging and the target component, and to determine consistency with normalized identification information.

[0085] Evidence-based comparison information refers to information obtained to verify the correspondence between normalized identification information and evidence related to supply, distribution, registration history, status, or events. Evidence-based comparison information may include supplier evidence information, distribution evidence information, registration history information, status evidence information, issuance information, delivery information, acceptance information, shipment information, receipt information, warranty information, invalidation information, expected response information, or evidence information. Evidence-based comparison information is used to verify whether part ID display information or normalized identification information is consistent with historical, distribution, or status information.

[0086] Supplier trail information refers to information that shows evidence of issuance, manufacture, supply, shipment, warranty, invalidation, reissue, renewal, or similar processing performed by the entity corresponding to the supplier identification information with respect to the subject parts or packaging. Supplier trail information may include supplier identification information, issuer identification information, issuance time, issuance location, issuance conditions, warranty conditions, invalidation status, reissue history, or similar information.

[0087] Distribution trail information refers to information that provides evidence of the process by which the subject parts or subject packaging are distributed, moved, stored, received, inspected, installed, replaced, repaired, cleaned, reused, returned, deactivated, or disposed of. Distribution trail information may include distribution entity identification information, shipping entity identification information, receiving entity identification information, storage entity identification information, distribution time, distribution location, distribution status, transportation conditions, receiving conditions, storage conditions, or similar information.

[0088] Registration history information refers to information showing the history of registration, renewal, expiration, invalidation, reissue, or modification of normalized identification information, part ID display information, target parts, target packaging, target object correspondence information, evidence correspondence information, or appraisal certificate result information. Registration history information may include registration time information, registrant identification information, update time information, updater identification information, expiration information, reissue information, registration version information, or similar information.

[0089] Condition evidence information refers to information that shows evidence regarding the condition of the target part or target packaging. Condition evidence information may include information such as shipping condition, receiving condition, storage condition, installation condition, replacement condition, repair condition, cleaning condition, reuse condition, return condition, deactivation condition, disposal condition, opening condition, sealing condition, clean condition, damaged condition, alteration condition, or similar information. Condition evidence information may be used to verify the consistency of the condition of the target part or target packaging by comparing it with read evidence information or target object comparison information.

[0090] Object correspondence information refers to information that shows the correspondence between normalized identification information and object comparison information. Object correspondence information may include information indicating whether the normalized identification information is consistent with the target part, consistent with the target packaging, consistent with both the target part and the target packaging, inconsistent with either the target part or the target packaging, or whether additional information needs to be obtained to determine consistency. Object correspondence information may be used as information indicating information-object match or information-object mismatch.

[0091] Evidence-based correspondence information refers to information that shows the correspondence between normalized identification information and evidence-based correspondence information. Evidence-based correspondence information may include information indicating whether the normalized identification information is consistent, inconsistent, or requires additional acquisition with supplier evidence information, distribution evidence information, registration history information, status evidence information, or expected correspondence information. Evidence-based correspondence information may be used to determine consistency with evidence related to the history, distribution, registration, or status of the target part or target packaging.

[0092] An abnormal condition data structure refers to a data structure that maintains the correspondence between abnormality judgment patterns and abnormality types. The abnormal condition data structure may store, for each abnormality judgment pattern, the object correspondence conditions related to object correspondence information, the evidence correspondence conditions related to evidence correspondence information, the read evidence conditions related to read evidence information, and the abnormality type corresponding to the abnormality judgment pattern. The abnormal condition data structure may be in table format, rule set format, condition expression set format, decision tree format, classification model format, policy data format, format accessible by the rule engine, or a combination thereof.

[0093] An anomaly determination pattern refers to a set of conditions or conditions for determining an anomaly related to label authenticity based on a combination of object correspondence information, evidence correspondence information, and read evidence information. An anomaly determination pattern may include patterns in which object correspondence information is consistent but evidence correspondence information is inconsistent, patterns in which object correspondence information is inconsistent but evidence correspondence information is consistent, patterns in which both object correspondence information and evidence correspondence information are inconsistent, patterns in which read evidence information is inconsistent with registration history information or status evidence information, or patterns in which the same normalized identification information is associated with multiple target parts or multiple target packages.

[0094] An anomaly type refers to a classification of anomalies generated in response to an anomaly detection pattern. Anomaly types may include label substitution anomalies, component substitution anomalies, packaging mismatch anomalies, duplicate identifier anomalies, identification information reuse anomalies, use after invalidation anomalies, read trail mismatch anomalies, PQC verification continuity anomalies, QKD linkage continuity anomalies, ZKP verification mismatch anomalies, or similar anomalies. Anomaly types may represent a single anomaly or a combination of multiple anomalies.

[0095] Label authenticity anomaly information refers to information indicating an anomaly related to label authenticity, generated based on part ID display information, normalized identification information, object correspondence information, evidence correspondence information, read evidence information, or anomaly judgment pattern. Label authenticity anomaly information may include at least one of the following: label substitution anomaly, part substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after invalidation anomaly, or read evidence inconsistency anomaly. Label authenticity anomaly information may include the anomaly type, the basis for the anomaly, identification information of the anomaly judgment pattern, the location where the anomaly occurred, the time of the anomaly occurrence, or a request for additional verification.

[0096] Authentication certificate result information refers to information that indicates the authenticity of the correspondence between the part ID display information and the target part or target packaging. Authentication certificate result information may include object correspondence relationship information, evidence correspondence relationship information, reading evidence information, type of label authenticity anomaly information, identification information of the anomaly judgment pattern that formed the basis of the label authenticity anomaly information, judgment category indicating the authenticity of the correspondence between the part ID display information and the target part or target packaging, reacquisition request information, additional acquisition request information, AI judgment support information, XAI explanation information, quantum-resistant cryptography protection information, quantum key distribution related information, ZKP information, or ZKP verification result information.

[0097] Auxiliary judgment explanation processing refers to processing that is performed additionally when selected or requested as an execution target, without narrowing the scope of basic appraisal and certification processing, and includes at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing. Auxiliary judgment explanation processing may include processing that generates or presents candidate anomaly judgment patterns, candidate anomaly types, anomaly occurrence probabilities, anomaly priorities, judgment grounds, feature quantities, or contributions based on at least one of object correspondence relationship information, evidence correspondence relationship information, read evidence information, anomaly judgment patterns, label authenticity anomaly information, or appraisal and certification result information.

[0098] Artificial intelligence (AI) processing refers to the process of generating AI judgment support information based on object correspondence information, evidence correspondence information, read evidence information, anomaly judgment patterns, or information derived therefrom, using machine learning models, deep learning models, statistical models, classification models, anomaly detection models, time series models, rule-based models, or combinations thereof. The AI ​​judgment support information may include candidate anomaly judgment patterns, candidate anomaly types, anomaly occurrence probability, anomaly priority, candidate re-acquisition requests, or candidate additional acquisition requests. AI processing is not essential to the basic configuration of the appraisal and certification system and may be executed only when selected or requested as an execution target.

[0099] Explainable AI (XAI) processing refers to the process of generating XAI explanatory information that shows the input information, correspondence information, read evidence information, anomaly conditions, features, contributions, referenced anomaly judgment patterns, or referenced evidence information that form the basis of AI judgment support information, anomaly judgment patterns, label authenticity anomaly information, object correspondence information, evidence correspondence information, read evidence information, or expert certification result information. XAI processing is not limited to explaining the output of AI processing, but may also include processing that explains the basis of anomaly condition data structures, rule sets, conditional expression sets, or judgment results that involve manual verification.

[0100] Protective verification processing refers to processing that is performed additionally when selected or requested as a target for execution, without narrowing the scope of basic expert certification processing, and includes at least one of PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or Zero-Knowledge Proof (ZKP) processing. Protective verification processing may be used to assist in verification continuity, key distribution linkage, or non-disclosure verification with respect to at least one of the following: part ID display information, normalized identification information, object correspondence information, evidence correspondence information, read evidence information, label authenticity anomaly information, or expert certification result information.

[0101] PQC (Post-Quantum Cryptography) processing refers to performing signature, verification, key exchange, re-signing, cryptographic scheme identification, transition state management, or similar processing related to post-quantum cryptography in order to ensure verification continuity even in the event of an attack by a quantum computer. PQC processing may acquire or generate post-quantum cryptographic protection information that includes at least one of PQC signature information, PQC verification result information, PQC key exchange information, cryptographic scheme identification information, PQC transition state information, or PQC re-signature request state information.

[0102] QKD (Quantum Key Distribution) collaboration processing refers to processing that collaborates with quantum key distribution or key distribution management corresponding to quantum key distribution to acquire or generate information regarding key distribution methods, key distribution sessions, key materials, key distribution states, applicability, transition states, or key distribution management. QKD collaboration processing may acquire or generate quantum key distribution-related information including at least one of QKD key distribution method identification information, QKD key distribution session identification information, QKD key material identification information, QKD key distribution state information, QKD applicability information, QKD transition state information, or key distribution management information corresponding to QKD. QKD collaboration processing is not limited to cases where an actual quantum communication device is directly controlled, but may also include cases where key distribution management information corresponding to QKD is referenced or used.

[0103] Zero-Knowledge Proof (ZKP) processing refers to processing that makes it possible to verify that a predetermined condition is met without disclosing at least some of the information necessary to verify that condition. ZKP processing may include generating ZKP information that makes it possible to verify without disclosure that a correspondence authenticity condition, a correspondence condition, a correspondence condition, a reading evidence condition, or an anomaly determination condition is met, based on at least one of the following: part ID display information, normalized identification information, object correspondence relationship information, evidence correspondence relationship information, reading evidence information, label authenticity anomaly information, or appraisal certificate result information, or commitment information or hash information generated from these, or obtaining ZKP verification result information corresponding to the above ZKP information.

[0104] Commitment information refers to information generated while keeping certain information confidential, in order to enable verification of its correspondence with the information or conditions related to that information at a later date. Commitment information may be generated based on at least one of the following: part ID display information, normalization identification information, object correspondence information, evidence correspondence information, reading evidence information, label authenticity anomaly information, or expert certification result information. Hash information refers to a hash value, digest, summary value, or similar identity verification information for certain information. Hash information may be used for identity verification or tamper detection of reading results, reading images, evidence comparison information, expert certification result information, or ZKP information.

[0105] A PQC verification continuity anomaly refers to an anomaly indicating that the post-quantum computer cryptographic protection information is inconsistent with the PQC verification conditions corresponding to the component ID display information, normalized identification information, object correspondence information, evidence correspondence information, read evidence information, label authenticity anomaly information, or appraisal certification result information. A QKD linkage continuity anomaly refers to an anomaly indicating that the quantum key distribution related information is inconsistent with the QKD linkage conditions corresponding to each of the above types of information. A ZKP verification inconsistency anomaly refers to an anomaly indicating that the ZKP information or ZKP verification result information is inconsistent with the correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly judgment conditions. These anomalies may be reflected in the label authenticity anomaly information or appraisal certification result information.

[0106] (Embodiment 1: Basic System Configuration) As shown in Figure 1, the appraisal and certification system 10 may consist of a computer device comprising at least a processor, a memory unit, a communication unit, an input unit, and an output unit. The processor may function as an abnormal condition data structure storage means 11, an acquisition means 12, a normalization identification information generation means 13, a correspondence relationship information generation means 14, an abnormality determination pattern matching means 15, an abnormality information generation means 16, and an appraisal and certification result generation means 17 by executing a program stored in the memory unit. The memory unit may store part ID display information 22, read evidence information 23, normalization identification information 24, object comparison information 25, evidence comparison information 26, object correspondence relationship information 27, evidence correspondence relationship information 28, abnormal condition data structure 29, label authenticity abnormality information 30, and appraisal and certification result information 31. The above communication unit may communicate with a reading device, an imaging device, a terminal device, an external server, a recording base 40, a recording base 41 utilizing distributed ledger technology, a recording base 42 not utilizing distributed ledger technology, or a recording base 43 using hybrid technology. The above input unit may accept input from a user, a reading entity, or a management entity. The above output unit may output appraisal certificate result information 31, label authenticity anomaly information 30, reacquisition request information, or additional acquisition request information.

[0107] As shown in Figure 2, the authentication and certification system 10 may, as a software configuration, include at least an abnormal condition data structure storage means 11, acquisition means 12, normalization identification information generation means 13, correspondence relationship information generation means 14, abnormality judgment pattern matching means 15, abnormality information generation means 16, and authentication and certification result generation means 17. Each of these means may be implemented by a single computer device, or distributed across multiple servers, terminals, readers, cloud environments, edge devices, or recording infrastructures. Furthermore, each of these means may be executed by the same processor, or divided among multiple processors, virtual machines, containers, microservices, or application programs. The authentication and certification system 10 may execute the following processes sequentially or asynchronously: acquiring part ID display information 22, generating normalization identification information 24, generating object correspondence relationship information 27 and evidence correspondence relationship information 28, matching with abnormality judgment patterns, generating label authenticity abnormality information 30, and generating authentication and certification result information 31.

[0108] The abnormal condition data structure storage means 11 stores an abnormal condition data structure 29 for each abnormality determination pattern, which associates the object correspondence conditions related to the object correspondence relationship information 27, the evidence correspondence conditions related to the evidence correspondence relationship information 28, the read evidence conditions related to the read evidence information 23, and the abnormality type corresponding to the abnormality determination pattern. The abnormal condition data structure 29 may be stored in a table format, a rule set format, a set of conditional expressions format, a decision tree format, a classification model format, a policy data format, a format that can be referenced by the rule engine, or a combination thereof. The abnormal condition data structure storage means 11 may store the abnormal condition data structure 29 in the internal storage of the appraisal and certification system 10, or it may be stored in an external recording infrastructure, an external server, a recording infrastructure utilizing distributed ledger technology, a recording infrastructure that does not utilize distributed ledger technology, or a recording infrastructure using hybrid technology. The abnormal condition data structure storage means 11 may also store the version number, update time, update entity identification information, scope of application, or validity period of the abnormal condition data structure 29.

[0109] The acquisition means 12 acquires part ID display information 22 attached to, displayed, recorded, or associated with the target part 20 or target packaging 21, and read trail information 23 relating to the reading of the part ID display information 22. The acquisition means 12 also acquires target object comparison information 25 that includes at least one of the part-side identification information displayed, recorded, embedded, or associated with the target part 20, and the packaging-side identification information displayed, recorded, embedded, or associated with the target packaging 21. Furthermore, the acquisition means 12 acquires trail comparison information 26 that includes at least one of the following: supplier trail information corresponding to supplier identification information, distribution trail information relating to the target part 20 or target packaging 21, registration history information corresponding to normalization identification information 24, or status trail information relating to the target part 20 or target packaging 21. The acquisition means 12 may acquire this information from a reading device, imaging device, sensor, terminal device, external server, recording board 40, or user input.

[0110] The normalized identification information generation means 13 generates normalized identification information 24 from the part ID display information 22, which includes at least part type identification information, individual identification information or group identification information, and supplier identification information. The normalized identification information generation means 13 may extract part type identification information, individual identification information, group identification information, and supplier identification information from the string, number sequence, symbol sequence, reading result of a two-dimensional code, data in the recording medium, or data in the electronic tag contained in the part ID display information 22. The normalized identification information generation means 13 may correct for each extracted piece of information for character type, number of digits, delimiter, notation order, encoding method, version number, issuance format, or format differences for each managing entity, and convert it into a format that can be compared in the authentication certification system 10. If the target part 20 is a part that is managed individually, the normalized identification information generation means 13 may generate part label identification information for individual management based on a combination of part type identification information, individual identification information, and supplier identification information. Furthermore, if the target component 20 is a component managed by a group or batch, component label identification information for group management may be generated based on a combination of component type identification information, group identification information, and supplier identification information.

[0111] The correspondence relationship information generation means 14 generates object correspondence relationship information 27 that shows the correspondence between normalized identification information 24 and object comparison information 25. The correspondence relationship information generation means 14 also generates evidence correspondence relationship information 28 that shows the correspondence between normalized identification information 24 and evidence comparison information 26. The object correspondence relationship information 27 may include information indicating whether the part ID display information 22 or normalized identification information 24 is consistent with the actual object part 20, object packaging 21, part-side identification information, packaging-side identification information, appearance image, shape information, dimension information, material information, weight information, surface condition information, packaging condition information, sealing condition information, opening condition information, cleanliness condition information, or physical characteristic information. The evidence correspondence relationship information 28 may include information indicating whether the normalized identification information 24 is consistent with supplier evidence information, distribution evidence information, registration history information, status evidence information, expected correspondence information, or evidence information. The correspondence relationship information generation means 14 may include information indicating consistency, inconsistency, unconfirmed, additional acquisition required, reacquisition required, or inability to determine in the object correspondence relationship information 27 or evidence correspondence relationship information 28.

[0112] The abnormality determination pattern matching means 15 compares the combination of object correspondence information 27, evidence correspondence information 28, and read evidence information 23 with the abnormality determination patterns stored in the abnormality condition data structure 29. The abnormality determination pattern matching means 15 may identify the corresponding abnormality determination pattern when the object correspondence information 27 shows consistency and the evidence correspondence information 28 shows inconsistency, when the object correspondence information 27 shows inconsistency and the evidence correspondence information 28 shows consistency, when both the object correspondence information 27 and the evidence correspondence information 28 show inconsistency, when the read evidence information 23 shows inconsistency with the registration history information or status evidence information, or when the same normalized identification information 24 is associated with multiple target parts 20 or multiple target packaging 21. The abnormality determination pattern matching means 15 may identify a single abnormality determination pattern or identify multiple abnormality determination patterns simultaneously.

[0113] The abnormality information generation means 16 generates label authenticity abnormality information 30, which includes at least one of the following abnormality types corresponding to the abnormality judgment pattern identified by the abnormality judgment pattern matching means 15: label substitution abnormality, part substitution abnormality, packaging inconsistency abnormality, duplicate identifier abnormality, identification information reuse abnormality, use after invalidation abnormality, or read trail inconsistency abnormality. In addition to the abnormality type, the abnormality information generation means 16 may include identification information of the abnormality judgment pattern, the basis for the abnormality, the location where the abnormality occurred, the related target part 20, the related target packaging 21, the related read trail information 23, the related trail comparison information 26, the time the abnormality occurred, a reacquisition request, an additional acquisition request, or a verification priority in the label authenticity abnormality information 30. If no abnormality is confirmed, the abnormality information generation means 16 may generate information indicating no abnormality, no additional verification required, or consistency within predetermined conditions as label authenticity abnormality information 30.

[0114] The appraisal certificate result generation means 17 generates appraisal certificate result information 31 indicating the correspondence authenticity between the part ID display information 22 and the target part 20 or target packaging 21, based on at least one of the object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, and label authenticity anomaly information 30. The appraisal certificate result information 31 may include at least one of the object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, the type of label authenticity anomaly information 30, identification information of the anomaly judgment pattern that formed the basis of the label authenticity anomaly information 30, a judgment category indicating the correspondence authenticity between the part ID display information 22 and the target part 20 or target packaging 21, reacquisition request information requesting reacquisition of the part ID display information 22, or additional acquisition request information requesting additional acquisition of the target object comparison information 25 or evidence comparison information 26. The appraisal certificate result generation means 17 may output the appraisal certificate result information 31 to a display device, terminal device, external server, recording board 40, or administrator terminal.

[0115] (Embodiment 2: Method of acquiring part ID display information) The acquisition means 12 may acquire part ID display information 22 from a label affixed to the target part 20. The label may be affixed to the surface, exterior, housing, connection part, management tag, protective member, or auxiliary member attached to the target part 20. The label may include human-readable data, machine-readable data, two-dimensional code, one-dimensional code, part name, supplier name, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information. The acquisition means 12 may read the label using an imaging device, reading device, terminal device, or sensor and acquire the reading result and reading trail information 23.

[0116] The acquisition means 12 may acquire part ID display information 22 from a display directly shown on the target part 20. The direct display may be provided on the surface, housing, part body, connection part, mounting surface, side, back surface, or management display area of ​​the target part 20. The direct display may be formed by printing, printing, display device, electronic paper, coating, marking, surface treatment, or a similar method. The acquisition means 12 may capture an image of the direct display and acquire part ID display information 22 by character recognition, image recognition, code reading, or sensor reading. If the direct display includes both human-readable data and machine-readable data, the acquisition means 12 may acquire the reading results of both and provide them to the correspondence relationship information generation means 14.

[0117] The acquisition means 12 may acquire part ID display information 22 from markings applied to the target part 20. The markings may be formed by laser marking, stamping, engraving, etching, printing grooves, uneven patterns, fine patterns, or similar physical markings. The acquisition means 12 may read the markings using an imaging device, a three-dimensional sensor, a surface inspection device, an optical reader, or a similar reader to acquire part ID display information 22. Since the markings may be a form of display that is difficult to peel off or replace compared to labels, they may also be used as target object reference information 25.

[0118] The acquisition means 12 may acquire component ID display information 22 from a recording medium attached to or incorporated into the target component 20. The recording medium may be an electronic tag, IC tag, RFID tag, NFC tag, memory chip, secure element, magnetic medium, optical medium, portable recording medium, or a similar medium. The recording medium may record component ID display information 22, component-side identification information, information for generating normalized identification information 24, reference information for connecting to evidence comparison information 26, issuance information, invalidation information, or read control information. The acquisition means 12 may acquire component ID display information 22 from the recording medium by contact reading, non-contact reading, short-range communication, wireless communication, or terminal connection.

[0119] The acquisition means 12 may acquire part ID display information 22 from a label affixed to the target packaging 21. The target packaging 21 may be packaging that contains, protects, transports, stores, or displays the correspondence with the target part 20. The label may be affixed to individual packaging, collective packaging, shipping packaging, storage packaging, clean environment compatible packaging, or in-process packaging. The acquisition means 12 may acquire part ID display information 22 corresponding to the target part 20, packaging side identification information, quantity information, shipping unit information, storage condition information, or distribution reference information from the label affixed to the target packaging 21. The part ID display information 22 acquired from the target packaging 21 may be compared with information acquired from the target part 20.

[0120] The acquisition means 12 may acquire part ID display information 22 from a display directly shown on the target packaging 21. The direct display may be provided on packaging material, container, bag, box, case, tray, sealing member, packing material, clean environment compatible packaging material, or in-process holding member. The direct display may be formed by printing, printing, display device, electronic paper, marking, surface processing, or a similar method. The acquisition means 12 may acquire part ID display information 22 from the direct display using an imaging device, reading device, or terminal device and use it to confirm the correspondence between the target packaging 21 and the target part 20.

[0121] The acquisition means 12 may acquire part ID display information 22 from an engraving applied to the target packaging 21. The engraving may be formed on packaging material, container, sealing member, case, tray, metal member, resin member, or protective member. The engraving may include packaging-side identification information, packaging number, shipping number, collective packaging number, individual packaging number, supplier identification information, or information indicating correspondence with the target part 20. The acquisition means 12 may read the engraving using an imaging device, optical reading device, three-dimensional sensor, surface inspection device, or similar device and acquire it as part ID display information 22 or target object comparison information 25.

[0122] The acquisition means 12 may acquire component ID display information 22 from a recording medium attached to or incorporated into the target packaging 21. The recording medium may be an electronic tag, IC tag, RFID tag, NFC tag, memory chip, secure element, magnetic medium, optical medium, portable recording medium, or a similar medium. The recording medium may record component ID display information 22 corresponding to the target packaging 21, packaging side identification information, expected correspondence information with the target component 20, shipping information, receipt information, storage information, opening status information, sealing status information, cleaning status information, or invalidation information. The acquisition means 12 may provide the information acquired from the recording medium to the correspondence relationship information generation means 14 in order to compare it with target object comparison information 25 or evidence comparison information 26.

[0123] (Embodiment 3: Human-readable data and machine-readable data) Human-readable data is data included in the part ID display information 22 that is displayed in a format that can be visually confirmed by a person. Human-readable data may include, for example, part name, supplier name, supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, display issuance information, manufacturing date information, expiration date information, management number information, or similar information. Human-readable data may consist of characters, numbers, symbols, abbreviations, figures, colors, arrangements, display positions, or combinations thereof. Human-readable data is information for a person to confirm the target part 20 or target packaging 21, and may also be used as a comparison target with information extracted from machine-readable data.

[0124] Machine-readable data is data contained in the part ID display information 22 that is expressed in a format that can be read by a reader, imaging device, sensor, scanner, terminal device, or computer. Machine-readable data may consist of two-dimensional codes, one-dimensional codes, electronic tags, data within a recording medium, optically read data, magnetically read data, wirelessly read data, or similar data. Machine-readable data may include data encoded from supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, display issuance information, reference information for linking to evidence comparison information 26, reference information for linking to registration history information, or combinations thereof.

[0125] If the part ID display information 22 includes both human-readable data and machine-readable data, the acquisition means 12 may acquire information read from the human-readable data and information read from the machine-readable data. The normalized identification information generation means 13 may generate normalized identification information 24 based on at least one of the information extracted from the human-readable data and the information extracted from the machine-readable data. Furthermore, the correspondence relationship information generation means 14 may generate a correspondence relationship between the information extracted from the human-readable data and the information extracted from the machine-readable data, and reflect the comparison result in at least one of the object correspondence relationship information 27, evidence correspondence relationship information 28, or read evidence trail information 23.

[0126] The correspondence relationship information generation means 14 may compare the part type identification information, individual identification information or group identification information, supplier identification information, quantity information, display version information or display issuance information extracted from human-readable data with the part type identification information, individual identification information or group identification information, supplier identification information, quantity information, display version information or display issuance information extracted from machine-readable data. The above comparison may be performed by a complete match determination, a partial match determination, a match determination after format conversion, a match determination after digit number correction, a match determination after notation variation correction, a match determination after encoding scheme conversion, or a match determination based on conversion rules for each management entity. The results of the above comparison may be generated as information indicating a match, a mismatch, a partial match, inability to determine, need to be reacquired, or need to be additionally acquired.

[0127] The correspondence relationship information generation means 14 may reflect the comparison result between the information extracted from human-readable data and the information extracted from machine-readable data in the object correspondence relationship information 27. For example, if the individual identification information included in the human-readable data is inconsistent with the individual identification information included in the machine-readable data, and is also inconsistent with the part-side identification information displayed or recorded on the target part 20, the correspondence relationship information generation means 14 may include information in the object correspondence relationship information 27 indicating the inconsistency between the target part 20 and the part ID display information 22. Furthermore, if the above comparison result indicates an inconsistency with the packaging-side identification information displayed or recorded on the target packaging 21, the correspondence relationship information generation means 14 may include information in the object correspondence relationship information 27 indicating the inconsistency between the target packaging 21 and the part ID display information 22.

[0128] The correspondence relationship information generation means 14 may reflect the comparison result between the information extracted from human-readable data and the information extracted from machine-readable data in the evidence trail correspondence relationship information 28. For example, if the supplier identification information, part type identification information, individual identification information, or group identification information extracted from human-readable data or machine-readable data does not match the supplier evidence trail information, distribution evidence trail information, registration history information, status evidence trail information, or expected correspondence information, the correspondence relationship information generation means 14 may include information indicating the inconsistency with the evidence trail in the evidence trail correspondence relationship information 28. Also, if the comparison result between human-readable data and machine-readable data indicates a mismatch between the displayed version information or displayed issuance information, the correspondence relationship information generation means 14 may include information in the evidence trail correspondence relationship information 28 that requests a comparison with reissue information, expiration information, or update history information.

[0129] The correspondence relationship information generation means 14 or acquisition means 12 may reflect the comparison result between the information extracted from human-readable data and the information extracted from machine-readable data in the reading evidence information 23. For example, if the reading result of machine-readable data does not match that of human-readable data, the reading evidence information 23 may include the reading image, reading device identification information, reading subject identification information, reading time information, reading location information, reading environment information, reading result hash value, re-reading request information, or reading inconsistency information. As a result, the abnormality determination pattern matching means 15 can use the inconsistency between human-readable data and machine-readable data as a matching element for determining a reading evidence inconsistency abnormality, a label substitution abnormality, a parts substitution abnormality, or a packaging inconsistency abnormality.

[0130] (Embodiment 4: Two-dimensional code and reading evidence information) The data read from the two-dimensional code is a form of machine-readable data and may include all or part of the part ID display information 22 relating to the target part 20 or target packaging 21. The data read from the two-dimensional code may include supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, display issuance information, reference information for connecting to registration history information, reference information for connecting to evidence comparison information 26, reference information for connecting to the recording base 40, or a combination thereof. The data read from the two-dimensional code may include encrypted, signed, compressed, split, encoded, or hashed information.

[0131] The reading result is information obtained by the acquisition means 12 reading a two-dimensional code or other machine-readable data. The reading result may include a string of characters, a sequence of numbers, a sequence of symbols, structured data, an identifier, reference information, encoded data, decoded data, reading success information, reading failure information, reading error information, or a combination thereof. The reading result may be provided to the normalized identification information generation means 13 and used to generate normalized identification information 24. The reading result may also be provided to the correspondence relationship information generation means 14 and used to generate object correspondence relationship information 27 or evidence correspondence relationship information 28.

[0132] The read image is an image of a two-dimensional code, a one-dimensional code, a label, a display, an engraving, a recording medium display, the appearance of the target part 20, the appearance of the target packaging 21, or the surrounding areas thereof. The read image may be used as a basis image for the reading result, an image for re-reading, an image for checking for abnormalities, an image for checking for label substitution, an image for checking for packaging inconsistencies, or an image for checking the reading trail. The read image may include an image file, image features, an image hash value, imaging condition information, resolution information, focus information, illumination condition information, or imaging device information. The read image may be stored as part of the reading trail information 23.

[0133] The reader identification information is information used to identify the reader used to read the part ID display information 22. The reader identification information may include the reader number, terminal identifier, scanner identifier, camera identifier, sensor identifier, device certificate identification information, application identification information, software version information, firmware version information, or similar information. The reader identification information may be used to confirm whether the device is registered, authorized, compatible with a specified inspection environment, or consistent with past reading history.

[0134] The reading entity identification information is information for identifying the entity that read the part ID display information 22. The reading entity identification information may include worker identification information, inspector identification information, maintenance personnel identification information, supplier identification information, distribution entity identification information, receiving entity identification information, management entity identification information, organization identification information, terminal user identification information, authenticated user identification information, or similar information. The reading entity identification information may be used to determine whether the reading was performed by an authorized entity, by an entity consistent with the registration history information or status trail information, or by an entity included in the expected correspondence information.

[0135] The reading time information indicates the time when the part ID display information 22 was read. The reading time information may include year, month, day, hour, minute, second, time zone, system time, reading device time, registration time to the recording board, server reception time, time synchronization information, or similar information. The reading time information may be compared with the time of events related to the issuance, shipment, receipt, inspection, storage, installation, replacement, repair, cleaning, use, return, deactivation, or disposal of the target part 20 or target packaging 21. If the reading time information does not match the registration history information, status evidence information, or expected correspondence information, it may be a factor in determining a reading evidence inconsistency abnormality.

[0136] The reading location information is information indicating the location where the part ID display information 22 was read. The reading location information may include geographical location information, facility identification information, factory identification information, warehouse identification information, process identification information, equipment identification information, storage location identification information, shipping location information, receiving location information, installation location information, or similar information. The reading location information may be compared with the location where the target part 20 or target packaging 21 should be located, the distribution route, storage location, installation location, or place of use. If the reading location information does not match the expected correspondence information, distribution evidence information, or status evidence information, it may be a factor in determining a reading evidence inconsistency abnormality, a part substitution abnormality, or a packaging inconsistency abnormality.

[0137] The reading environment information is information indicating the environment in which the part ID display information 22 was read. The reading environment information may include temperature, humidity, illuminance, cleanliness, vibration, pressure, atmosphere, reading distance, reading angle, reading speed, imaging conditions, communication status, operating status of the reading application, or similar information. The reading environment information may be used to determine whether the target part 20 or target packaging 21 is consistent with the environmental conditions under which it should be read. If the reading environment information does not match the predetermined reading trail conditions, it may be a factor in determining a decrease in the reliability of the reading result, a request for reacquisition, a request for additional acquisition, or an abnormal reading trail inconsistency.

[0138] The read result hash value is a hash value, digest, summary value, or identity verification information generated based on the read result, read image, read device identification information, read subject identification information, read time information, read location information, read environment information, or a combination thereof. The read result hash value may be used for detecting tampering with the read result or read evidence information 23, verifying identity, comparing during re-reading, registering to the recording base 40, or verifying consistency with evidence comparison information 26. If the read result hash value does not match the registration history information, status evidence information, or values ​​recorded in the recording base 40, it may be a factor in determining an abnormal read evidence inconsistency.

[0139] The normalized identification information generation means 13 may generate normalized identification information 24 based on the reading results obtained from the two-dimensional code. The normalized identification information generation means 13 may extract supplier identification information, part type identification information, individual identification information, or group identification information included in the reading results, and correct the notation format, encoding format, number of digits, delimiter, character type, display order, format differences or version differences for each issuing entity. If the information included in the reading results is insufficient, the normalized identification information generation means 13 may request the acquisition means 12 to acquire additional human-readable data, object comparison information 25, or evidence comparison information 26. The generated normalized identification information 24 is used as reference information for generating object correspondence relationship information 27 and evidence correspondence relationship information 28.

[0140] The abnormality determination pattern matching means 15 may combine the read trail information 23 with the object correspondence relationship information 27 and the trail correspondence relationship information 28 and compare it with the abnormality determination pattern stored in the abnormality condition data structure 29. For example, even if the object correspondence relationship information 27 and the trail correspondence relationship information 28 show consistency, if the reader identification information, reader subject identification information, reading time information, reading location information, reading environment information, or reading result hash value does not match the registration history information, status trail information, or expected correspondence information, the abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to the read trail inconsistency abnormality. Furthermore, if the read trail information 23 is combined with conditions indicating label substitution, part substitution, packaging inconsistency, duplicate identifier, reuse of identification information, or use after invalidation, the abnormality information generation means 16 may generate the corresponding label authenticity abnormality information 30.

[0141] (Embodiment 5: Generation of normalized identification information) If the target part 20 is a part that is managed individually, the normalized identification information generation means 13 may extract at least part type identification information, individual identification information, and supplier identification information from the part ID display information 22 and generate normalized identification information 24 that includes these. The part type identification information is information for identifying the type or specifications of the target part 20, the individual identification information is information for identifying the target part 20 on an individual basis, and the supplier identification information is information for identifying the supplier relating to the target part 20 or the target packaging 21. The normalized identification information generation means 13 may correct for variations in notation, differences in the number of digits, delimiters, character types, encoding formats, display order, or format differences for each issuing entity contained in the part ID display information 22 and generate normalized identification information 24 in a comparable format used for generating object correspondence relationship information 27 and evidence correspondence relationship information 28.

[0142] If the target part 20 is a part managed by a group or batch, the normalized identification information generation means 13 may extract at least part type identification information, group identification information, and supplier identification information from the part ID display information 22 and generate normalized identification information 24 including these. The group identification information is information for identifying the group, batch, lot, manufacturing unit, shipping unit, packaging unit, or management unit to which the target part 20 belongs. In addition to the group identification information, the normalized identification information generation means 13 may refer to quantity information, expiration period information, correspondence information with the target packaging 21, delivery destination information, distribution destination information, usage destination information, or invalidation status information and generate normalized identification information 24 corresponding to the target part 20 managed by a group or batch.

[0143] If the target part 20 is a part that is managed individually, the normalized identification information generation means 13 may generate individual part label identification information based on a combination of the part type identification information, the individual identification information, and the supplier identification information. The individual part label identification information is information for uniquely referencing the target part 20 on an individual basis and may be used for matching with object correspondence information 27, evidence correspondence information 28, read evidence information 23, registration history information, or status evidence information. The normalized identification information generation means 13 may provide the individual part label identification information to the abnormality determination pattern matching means 15 in order to confirm whether the individual part label identification information is associated with other target parts 20 or other target packaging 21 in the registration history information.

[0144] If the target part 20 is a part managed by a group or batch, the normalized identification information generation means 13 may generate part label identification information for group management based on a combination of the part type identification information, the group identification information, and the supplier identification information. The part label identification information for group management is information for identifying the group or batch to which the target part 20 belongs, and may be used to confirm consistency with the validity period, quantity range, delivery destination, distribution destination, end of use, target packaging 21, invalidation status, or reissue status. The normalized identification information generation means 13 may provide the part label identification information for group management to the correspondence relationship information generation means 14 or the abnormality determination pattern matching means 15 in order to confirm whether the part label identification information for group management is consistent with the registration history information, status evidence information, or expected correspondence information.

[0145] The normalized identification information generation means 13 may determine whether the target part 20 is a part managed individually or a part managed by a group or batch, based on the part ID display information 22, human-readable data, machine-readable data, target object comparison information 25, evidence comparison information 26, or registration history information. For example, if the part ID display information 22 includes individual identification information, the normalized identification information generation means 13 may generate part label identification information for individual management. On the other hand, if the part ID display information 22 includes group identification information but does not include individual identification information, the normalized identification information generation means 13 may generate part label identification information for group management. Furthermore, if both individual identification information and group identification information are included, the normalized identification information generation means 13 may generate at least one of the part label identification information for individual management and part label identification information for group management, based on the registration history information, status evidence information, correspondence with the target packaging 21, quantity information, or the setting of the management entity.

[0146] (Embodiment 6: Object Comparison Information) The component-side identification information is identification information displayed, recorded, embedded, attached to, or associated with the target component 20. The component-side identification information may include labels affixed to the target component 20, markings directly displayed on the target component 20, markings applied to the target component 20, recording media attached to or incorporated into the target component 20, electronic tags, two-dimensional codes, one-dimensional codes, strings of characters, sequences of numbers, sequences of symbols, image feature information, or physical feature information. The acquisition means 12 acquires the component-side identification information as object comparison information 25, and the correspondence relationship information generation means 14 may generate object correspondence relationship information 27 showing the correspondence between the component-side identification information and the normalized identification information 24.

[0147] Packaging-side identification information is identification information displayed, recorded, embedded, attached, or associated with the target packaging 21. Packaging-side identification information may include labels affixed to the target packaging 21, markings directly displayed on the target packaging 21, markings applied to the target packaging 21, recording media attached to or incorporated into the target packaging 21, packaging number, shipping number, collective packaging number, individual packaging number, two-dimensional code, one-dimensional code, electronic tag, or expected correspondence information with the target component 20. Acquisition means 12 acquires the packaging-side identification information as target object correspondence information 25, and correspondence relationship information generation means 14 may generate target object correspondence relationship information 27 showing the correspondence relationship between the packaging-side identification information and normalized identification information 24, or the correspondence relationship between the packaging-side identification information and component-side identification information.

[0148] The object comparison information 25 may include an external image, shape information, dimensional information, material information, weight information, or surface condition information of the target part 20. The external image is an image of the whole or a part of the target part 20 and may include labels, markings, engravings, part shape, part surface, connections, damage, contamination, deformation, or other identifiable features. The shape information may be information indicating the outer shape, contour, three-dimensional shape, or connection shape of the target part 20. The dimensional information may be information indicating the length, width, height, thickness, diameter, or spacing. The material information, weight information, or surface condition information is information indicating the physical characteristics of the target part 20 and may be used to confirm whether it is the target part 20 corresponding to the normalized identification information 24.

[0149] The object reference information 25 may include an external image of the target packaging 21, packaging status information, sealing status information, open status information, or cleanliness status information. The external image may be an image of the outer surface, label, markings, seal, open area, contamination, damage, deformation, or management display area of ​​the target packaging 21. The packaging status information may indicate whether the target packaging 21 properly contains or holds the target component 20. The sealing status information may indicate whether the sealing of the target packaging 21 is maintained. The open status information may indicate whether the target packaging 21 has been opened, is unopened, or has been resealed. The cleanliness status information may indicate whether the target packaging 21 meets predetermined cleanliness conditions.

[0150] The object reference information 25 may include packaging condition information relating to clean environment-compatible packaging, shipping packaging, individual packaging, group packaging, storage packaging, or in-process packaging covering the target part 20. The packaging condition information relating to the clean environment-compatible packaging may indicate the degree of cleanliness, sealing, opening, contamination, packaging material, internal packaging environment, or handling condition in a clean area. The packaging condition information relating to the shipping packaging may indicate the shipping unit, transport conditions, delivery condition, or outer packaging condition. The packaging condition information relating to the individual packaging or group packaging may indicate whether the target part 20 is contained individually or in multiples. The packaging condition information relating to the storage packaging or in-process packaging may indicate the state in which the product is temporarily held during storage or within the process.

[0151] The object comparison information 25 may include physical characteristic information obtained from the target part 20 or target packaging 21. The physical characteristic information may be information indicating appearance features, surface patterns, fine scratches, unevenness, material properties, weight, dimensions, color, reflection properties, optical properties, magnetic properties, electrical properties, thermal properties, vibration properties, acoustic properties, image features, or similar features. The acquisition means 12 may acquire the physical characteristic information using an imaging device, a three-dimensional sensor, a weighing scale, a surface inspection device, an optical sensor, a magnetic sensor, an electrical measuring device, or a similar device. The correspondence relationship information generation means 14 may determine the correspondence between the above physical characteristic information and the normalized identification information 24 or registration history information, and generate object correspondence relationship information 27.

[0152] (Embodiment 7: Evidence Comparison Information) The evidence comparison information 26 may include issuance information, delivery information, inspection information, shipment information, receipt information, warranty information, or invalidation information by the supplier. The issuance information may be information indicating that part ID display information 22, a label, normalization identification information 24, part label identification information for individual management, or part label identification information for group management has been issued. The delivery information, inspection information, shipment information, or receipt information may be information indicating that the subject part 20 or subject packaging 21 has been handled by the supplier, distributor, recipient, or user. The warranty information may be information indicating the warranty conditions, warranty entity, or warranty period for the subject part 20 or subject packaging 21. The invalidation information may be information regarding the discontinuation of use, expiration, destruction, replacement, or reissuance of part ID display information 22, normalization identification information 24, or subject part 20.

[0153] The evidence comparison information 26 may include information regarding the shipment, receipt, storage, installation, replacement, repair, cleaning, reuse, return, or disposal of the subject part 20 or subject packaging 21. The information regarding shipment, receipt, or storage may indicate which entity the subject part 20 or subject packaging 21 moved from to which entity and where it was stored. The information regarding installation or replacement may indicate which device, process, location, or control area the subject part 20 was installed in or replaced in. The information regarding repair, cleaning, or reuse may indicate changes in the condition of the subject part 20 or reuse conditions. The information regarding return or disposal may indicate how the subject part 20 or subject packaging 21 was handled after its use.

[0154] The evidence comparison information 26 may include registration time information, registration entity identification information, update time information, update entity identification information, expiration information, or reissue information for the normalized identification information 24. The registration time information and registration entity identification information may be information indicating the time and entity when the normalized identification information 24 or the corresponding part ID display information 22 was registered. The update time information and update entity identification information may be information indicating the time and entity when the normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, or appraisal certification result information 31 was updated. The expiration information or reissue information may be information indicating the invalidation, reissue, replacement, version change, or update history of the identification information.

[0155] Expected correspondence information is information that shows the expected correspondence between normalized identification information 24 and the target part 20, target packaging 21, part-side identification information, packaging-side identification information, supplier evidence information, distribution evidence information, registration history information, or status evidence information. The expected correspondence information may indicate which target packaging 21 the target part 20 should be housed in, by which supplier it should be issued or guaranteed, which distribution route it should follow, which installation or storage location it should reside in, and which validity period or quantity range it should belong to. The correspondence relationship information generation means 14 may compare the expected correspondence information with the target object comparison information 25 or evidence comparison information 26 acquired by the acquisition means 12 to generate evidence correspondence relationship information 28 or target object correspondence relationship information 27.

[0156] The evidence comparison information 26 may include evidence information corresponding to the normalized identification information 24. The evidence information may include issuance certificate information, delivery certificate information, acceptance certificate information, shipment certificate information, receipt certificate information, warranty certificate information, invalidation certificate information, repair certificate information, cleaning certificate information, disposal certificate information, image evidence, electronic signature information, timestamp information, recorded information on the recording infrastructure, certificate information obtained from an external system, or similar information. The evidence information may be used to generate the evidence correspondence relationship information 28 and may be used as the basis information when the anomaly determination pattern matching means 15 generates the label authenticity anomaly information 30.

[0157] (Embodiment 8: Object correspondence information and evidence correspondence information) The correspondence relationship information generation means 14 may generate a correspondence relationship between the normalized identification information 24 and the target object comparison information 25. The above correspondence relationship indicates whether the target part 20 or target packaging 21 indicated by the normalized identification information 24 matches the target part 20 or target packaging 21 specified by the target object comparison information 25. For example, the part type identification information, individual identification information or group identification information, and supplier identification information included in the normalized identification information 24 may be compared with part-side identification information, packaging-side identification information, appearance image, shape information, dimensional information, material information, weight information, surface condition information, packaging condition information, sealed condition information, opened condition information, cleanliness condition information, or physical characteristic information. As a result, the appraisal certification system 10 can generate basic information for determining the physical match between the normalized identification information 24 generated from the part ID display information 22 and the actual target part 20 or target packaging 21.

[0158] The correspondence relationship information generation means 14 may generate object correspondence relationship information 27 that shows the correspondence between normalized identification information 24 and object comparison information 25. The object correspondence relationship information 27 may include information indicating the consistency, inconsistency, partial consistency, inability to determine, need for reacquisition, or need for additional acquisition between the target part 20 and the normalized identification information 24. The object correspondence relationship information 27 may also include information indicating the consistency, inconsistency, partial consistency, inability to determine, need for reacquisition, or need for additional acquisition between the target packaging 21 and the normalized identification information 24. Furthermore, the object correspondence relationship information 27 may include information indicating whether the correspondence between the target part 20 and the target packaging 21 is consistent. The correspondence relationship information generation means 14 may associate the object correspondence relationship information 27 with the part-side identification information, packaging-side identification information, read image, appearance image, physical characteristic information, or comparison result that formed the basis of the correspondence relationship.

[0159] The correspondence relationship information generation means 14 may generate a correspondence relationship between the normalized identification information 24 and the evidence comparison information 26. The above correspondence relationship indicates whether the normalized identification information 24 is consistent with supplier evidence information, distribution evidence information, registration history information, status evidence information, expected correspondence information, or evidence information. For example, the supplier identification information included in the normalized identification information 24 may be compared with issuance information, guarantee information, invalidation information, or reissue information by the supplier. In addition, the individual identification information or group identification information included in the normalized identification information 24 may be compared with registration time information, registration entity identification information, update time information, update entity identification information, expiration information, reissue information, distribution evidence information, or status evidence information.

[0160] The correspondence relationship information generation means 14 may generate evidence correspondence relationship information 28 that shows the correspondence between the normalized identification information 24 and the evidence comparison information 26. The evidence correspondence relationship information 28 may include information indicating whether the normalized identification information 24 is consistent with, inconsistent with, partially consistent with, undeterminable, requires reacquisition, or requires additional acquisition of the evidence comparison information 26. The evidence correspondence relationship information 28 may individually indicate consistency with supplier evidence information, consistency with distribution evidence information, consistency with registration history information, consistency with status evidence information, consistency with expected correspondence information, or consistency with evidence information. The correspondence relationship information generation means 14 may associate the above evidence correspondence relationship information 28 with the identification information, matching time, matching entity, matching result, basis information, or evidence acquisition source information of the evidence comparison information 26 that was matched.

[0161] The authentication and certification system 10 may differentiate the types of causes of inconsistencies regarding the target part 20 or target packaging 21 by combining the object correspondence information 27 and the evidence correspondence information 28. For example, if the object correspondence information 27 shows consistency and the evidence correspondence information 28 shows inconsistency, the authentication and certification system 10 may determine that the target part 20 or target packaging 21 itself is consistent with the normalized identification information 24, but the evidence regarding supply, distribution, registration, or status is inconsistent. On the other hand, if the object correspondence information 27 shows inconsistency and the evidence correspondence information 28 shows consistency, the authentication and certification system 10 may determine that the evidence is consistent, but the actual target part 20 or target packaging 21 may have been replaced. Furthermore, if both the object correspondence information 27 and the evidence correspondence information 28 show inconsistencies, the appraisal certification system 10 may provide the above correspondence information to the anomaly determination pattern matching means 15 as information for determining a complex anomaly such as label substitution, parts substitution, packaging inconsistency, duplicate identifiers, reuse of identification information or use after invalidation.

[0162] (Embodiment 9: Abnormal Condition Data Structure) The abnormal condition data structure 29 is a data structure used to generate label authenticity abnormal information 30 based on a combination of object correspondence information 27, evidence correspondence information 28, and read evidence information 23. The abnormal condition data structure 29 may associate object correspondence conditions, evidence correspondence conditions, read evidence conditions, and abnormality types for each abnormality determination pattern. The abnormal condition data structure 29 may be stored in the memory of the appraisal certification system 10, or it may be stored in an external server, a recording infrastructure 40, a recording infrastructure 41 utilizing distributed ledger technology, a recording infrastructure 42 not utilizing distributed ledger technology, or a recording infrastructure 43 using hybrid technology. The abnormal condition data structure 29 may include the version number of the abnormality determination pattern, validity period, applicable target, update entity identification information, or update time information.

[0163] The object correspondence conditions are conditions determined based on the object correspondence relationship information 27. The object correspondence conditions may include whether the normalized identification information 24 and the target part 20 are consistent, whether the normalized identification information 24 and the target part 20 are inconsistent, whether the normalized identification information 24 and the target packaging 21 are consistent, whether the normalized identification information 24 and the target packaging 21 are inconsistent, whether the correspondence relationship between the target part 20 and the target packaging 21 is consistent, or whether the correspondence relationship between the target part 20 and the target packaging 21 is inconsistent. In addition, the object correspondence conditions may include conditions indicating whether at least one of the part-side identification information, packaging-side identification information, appearance image, packaging state information, or physical characteristic information is consistent with the normalized identification information 24 or the expected correspondence information.

[0164] The evidence trail matching conditions are conditions determined based on the evidence trail matching related information 28. The evidence trail matching conditions may include whether the normalized identification information 24 is consistent with the supplier evidence trail information, whether the normalized identification information 24 is inconsistent with the supplier evidence trail information, whether the normalized identification information 24 is consistent with the distribution evidence trail information, whether the normalized identification information 24 is inconsistent with the distribution evidence trail information, whether the normalized identification information 24 is consistent with the registration history information, whether the normalized identification information 24 is inconsistent with the registration history information, whether the normalized identification information 24 is consistent with the status evidence trail information, or whether the normalized identification information 24 is inconsistent with the status evidence trail information. In addition, the evidence trail matching conditions may include conditions indicating whether or not it is consistent with the expiration information, reissue information, invalidation information, validity period, quantity range, delivery destination, distribution destination, or end of use.

[0165] The read trail conditions are conditions determined based on the read trail information 23. The read trail conditions may include conditions indicating whether the read result, read image, read device identification information, read entity identification information, read time information, read location information, read environment information, or read result hash value is consistent with the registration history information, status trail information, expected correspondence information, or information recorded in the recording base 40. The read trail conditions may include whether the read device is an authorized device, whether the read entity is an authorized entity, whether the read time is within the valid period, whether the read location is consistent with the expected location, whether the read environment satisfies predetermined conditions, or whether the read result hash value matches a recorded hash value.

[0166] The abnormal condition data structure 29 may maintain a correspondence between abnormality judgment patterns and abnormality types. An abnormality judgment pattern may consist of at least one combination of object correspondence conditions, evidence correspondence conditions, and read evidence conditions. An abnormality type may include at least one of the following: label substitution abnormality, part substitution abnormality, packaging inconsistency abnormality, duplicate identifier abnormality, identification information reuse abnormality, use after invalidation abnormality, or read evidence inconsistency abnormality. The abnormal condition data structure 29 may associate one abnormality type with one abnormality judgment pattern, or it may associate multiple abnormality types with one abnormality judgment pattern. Furthermore, multiple abnormality judgment patterns may be associated with the same abnormality type.

[0167] The first abnormality determination pattern may be an abnormality determination pattern in which the object correspondence relationship information 27 shows consistency and the evidence correspondence relationship information 28 shows inconsistency. For example, if the normalized identification information 24 is consistent with the target part 20 or target packaging 21, but is inconsistent with the supplier evidence trail information, distribution evidence trail information, registration history information, status evidence trail information, or expected correspondence information, the first abnormality determination pattern may be identified. The abnormality types corresponding to the first abnormality determination pattern may include identification information reuse abnormality, use after invalidation abnormality, registration history inconsistency, distribution evidence trail inconsistency, or read evidence trail inconsistency abnormality.

[0168] The second anomaly determination pattern may be an anomaly determination pattern in which the object correspondence relationship information 27 shows inconsistency and the evidence correspondence relationship information 28 shows consistency. For example, if the normalized identification information 24 and the target part 20 or target packaging 21 are consistent in the registration history information or distribution evidence information, but the actually acquired part-side identification information, packaging-side identification information, appearance image, packaging condition information, or physical characteristic information is inconsistent with the normalized identification information 24, the second anomaly determination pattern may be identified. The anomaly types corresponding to the second anomaly determination pattern may include part substitution anomalies, packaging inconsistency anomalies, or label substitution anomalies.

[0169] The third anomaly determination pattern may be an anomaly determination pattern in which both the object correspondence information 27 and the evidence correspondence information 28 show inconsistencies. For example, if the normalized identification information 24 does not match the target part 20 or target packaging 21, and further does not match the supplier evidence information, distribution evidence information, registration history information, or status evidence information, the third anomaly determination pattern may be identified. The anomaly types corresponding to the third anomaly determination pattern may include label substitution anomalies, part substitution anomalies, packaging inconsistencies anomalies, duplicate identifier anomalies, identification information reuse anomalies, or invalidation-after-use anomalies. The third anomaly determination pattern may be used as a pattern indicating a complex anomaly in which multiple inconsistencies occur simultaneously.

[0170] The fourth abnormality determination pattern may be an abnormality determination pattern in which the read trail information 23 is inconsistent with the registration history information or status trail information. For example, the fourth abnormality determination pattern may be identified if the reader identification information does not match an authorized reader, if the reader entity identification information does not match a registered or authorized entity, if the read time information does not match the validity period or status trail information, if the read position information does not match the expected correspondence information or circulation trail information, if the read environment information does not match the predetermined read conditions, or if the read result hash value does not match a registered hash value. The abnormality type corresponding to the fourth abnormality determination pattern may include read trail inconsistency abnormalities.

[0171] The fifth abnormality determination pattern may be an abnormality determination pattern in which the same normalized identification information 24 is associated with multiple target parts 20 or multiple target packaging 21. For example, the fifth abnormality determination pattern may be identified when the same individual management part label identification information is associated with multiple target parts 20, when the same group management part label identification information is used in a manner inconsistent with the validity period, quantity range, delivery destination, distribution destination, or end of use, or when the same normalized identification information 24 is associated with target parts 20 and target packaging 21 that are inconsistent with each other. The abnormality types corresponding to the fifth abnormality determination pattern may include duplicate identifier abnormality, identification information reuse abnormality, or use after invalidation abnormality.

[0172] The abnormal condition data structure 29 may be configured in a table format. The table-format abnormal condition data structure 29 may include columns for abnormality determination pattern identification information, object correspondence conditions, evidence correspondence conditions, read evidence conditions, abnormality type, priority, applicable target, application period, basis information, or output information. The abnormality determination pattern matching means 15 may compare the object correspondence relationship information 27, evidence correspondence relationship information 28, and read evidence information 23 with each condition in the table above, and obtain the corresponding abnormality determination pattern identification information and abnormality type.

[0173] The abnormal condition data structure 29 may be configured in a rule set format. The abnormal condition data structure 29 in rule set format may include a plurality of rules, each having a condition section and a conclusion section. The condition section may include at least one of the following: object correspondence conditions, evidence correspondence conditions, or read evidence conditions. The conclusion section may include the abnormality type, information to be included in the label authenticity abnormality information 30, a judgment category to be reflected in the expert certification result information 31, reacquisition request information, or additional acquisition request information. The abnormality judgment pattern matching means 15 may evaluate the plurality of conditions sequentially or in parallel based on the rule set.

[0174] The abnormal condition data structure 29 may be composed in the form of a set of conditional expressions. The abnormal condition data structure 29 in the form of a set of conditional expressions may include logical expressions, comparison expressions, range conditions, time series conditions, position conditions, quantity conditions, state conditions, hash matching conditions, subject matching conditions, or combinations thereof. For example, the conditional expression may represent that the read time information is outside the validity period and the normalized identification information 24 is in an invalid state. Alternatively, the conditional expression may represent that the same normalized identification information 24 is associated with multiple target parts 20. The abnormal determination pattern matching means 15 may identify an abnormal determination pattern by evaluating the above set of conditional expressions.

[0175] The abnormal condition data structure 29 may be constructed in decision tree form. The decision tree form of the abnormal condition data structure 29 may include each element contained in the object correspondence relationship information 27, the evidence trail correspondence relationship information 28, and the read evidence trail information 23 as branching conditions. For example, the first branch may determine whether the object correspondence relationship information 27 is consistent or inconsistent, the second branch may determine whether the evidence trail correspondence relationship information 28 is consistent or inconsistent, and the third branch may determine whether the read evidence trail information 23 is consistent or inconsistent. The leaf nodes of the decision tree may be associated with label substitution abnormalities, part substitution abnormalities, packaging inconsistency abnormalities, duplicate identifier abnormalities, identification information reuse abnormalities, invalidation-after use abnormalities, or read evidence trail inconsistency abnormalities.

[0176] The anomaly condition data structure 29 may be constructed in the form of a classification model. The anomaly condition data structure 29 in the form of a classification model may include a classification model that takes object correspondence information 27, evidence correspondence information 28, read evidence information 23, object comparison information 25, evidence comparison information 26, or features generated from these as input, and outputs anomaly type, anomaly occurrence probability, anomaly priority, or candidate anomaly judgment pattern. The above classification model may be supervised learning, unsupervised learning, semi-supervised learning, anomaly detection model, statistical model, decision tree model, ensemble model, neural network model, or a combination thereof. However, the classification model form is just an example, and the anomaly condition data structure 29 is not limited to the classification model form.

[0177] The abnormal condition data structure 29 may be configured in policy data format. The abnormal condition data structure 29 in policy data format may include the managing entity, supplying entity, distribution entity, maintenance entity, user entity, or operational policy in the recording infrastructure 40 for the target part 20 or target packaging 21. The policy data may include the readable entity, readable location, readable period, authorized reading device, validity period of the target part 20 or target packaging 21, invalidation conditions, reissue conditions, quantity range, distribution route, or storage conditions. The abnormal determination pattern matching means 15 may match the policy data with the target object correspondence relationship information 27, the evidence correspondence relationship information 28, and the read evidence information 23.

[0178] The abnormal condition data structure 29 may be configured in a format that can be referenced by the rule engine. The format that can be referenced by the rule engine may include declarative rules, conditional expressions, policy descriptions, scripts, workflow definitions, judgment templates, or similar formats. The rule engine may accept object correspondence information 27, evidence correspondence information 28, and read evidence information 23 as input, determine whether an abnormal judgment pattern is established, and output information to be reflected in the abnormality type, label authenticity abnormality information 30, reacquisition request information, additional acquisition request information, or expert certification result information 31.

[0179] The abnormal condition data structure 29 may be configured as a single data structure or as a combination of multiple data structures. For example, basic abnormality detection patterns may be stored in a table format, read trail conditions in a set of conditional expressions format, operational conditions for each management entity in a policy data format, and advanced abnormality candidate estimation in a classification model format. Furthermore, multiple abnormal condition data structures 29 may be stored for each type of target component 20, type of target packaging 21, supplier, distribution route, recording infrastructure 40, management entity, or usage environment. The abnormality detection pattern matching means 15 may refer to a combination of these multiple data structures to identify an abnormality detection pattern corresponding to a combination of target object correspondence information 27, trail correspondence information 28, and read trail information 23.

[0180] (Embodiment 10: Label authenticity anomaly information) Label authenticity anomaly information 30 is information indicating an anomaly in the correspondence authenticity between the part ID display information 22 and the target part 20 or target packaging 21. Label authenticity anomaly information 30 may be generated based on the target object correspondence relationship information 27, the evidence correspondence relationship information 28, the read evidence information 23, the anomaly condition data structure 29, or the anomaly judgment pattern. Label authenticity anomaly information 30 may include the anomaly type, identification information of the anomaly judgment pattern, the basis for the anomaly, the location of the anomaly, the time of the anomaly, the related target part 20, the related target packaging 21, the related part ID display information 22, the related read evidence information 23, the reacquisition request information, the additional acquisition request information, or the verification priority. Label authenticity anomaly information 30 may be included in the appraisal certificate result information 31, or it may be associated with the appraisal certificate result information 31.

[0181] A label substitution anomaly indicates that the part ID display information 22 is attached to, displayed, recorded, or associated with an object other than the target part 20 or target packaging 21 that it should originally correspond to. For example, if the normalized identification information 24 generated from the part ID display information 22 does not match the target object comparison information 25, the evidence comparison information 26, or the read evidence information 23, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including a label substitution anomaly. A label substitution anomaly may also be generated if a mismatch between human-readable data and machine-readable data, a mismatch between the label image and the registered label image, a mismatch in the read result hash value, or a mismatch in the label display version information or display issuance information is detected.

[0182] A part substitution anomaly indicates that while the part ID display information 22, the target packaging 21, or the information on the evidence appear to be consistent, the actual target part 20 does not match the target part 20 corresponding to the normalized identification information 24. For example, if the target object comparison information 25 or evidence correspondence relationship information 28 corresponding to the target packaging 21 is consistent with the normalized identification information 24, but the part-side identification information, appearance image, shape information, dimension information, material information, weight information, surface condition information, or physical characteristic information corresponding to the target part 20 is not consistent with the normalized identification information 24, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including a part substitution anomaly.

[0183] A packaging mismatch anomaly indicates that the correspondence between the target part 20 and the target packaging 21 is inconsistent. For example, if the target object reference information 25 corresponding to the target part 20 is consistent with the normalized identification information 24, but the packaging side identification information, packaging state information, appearance image, packing state information, sealing state information, opening state information, clean state information, or expected correspondence information corresponding to the target packaging 21 is inconsistent with the normalized identification information 24, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including a packaging mismatch anomaly. Furthermore, if the target packaging 21 is a collective packaging containing multiple target parts 20, a packaging mismatch anomaly may also be generated if the quantity information, group identification information, combination of target parts 20, or packaging unit information is inconsistent with the registration history information or status evidence information.

[0184] A duplicate identifier anomaly indicates that the same normalized identification information 24, individual component label identification information, or group component label identification information is associated with multiple target components 20, multiple target packaging 21, or target components 20 and target packaging 21 that are inconsistent with each other. For example, if the same individual identification information is registered for multiple target components 20 in the registration history information, if the same component ID display information 22 is read from multiple target packaging 21, or if the same normalized identification information 24 exists simultaneously in different distribution routes or different installation locations, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including the duplicate identifier anomaly.

[0185] An identification information reuse anomaly indicates that previously used normalized identification information 24, individual identification information, group identification information, or part label identification information is being reused in a manner inconsistent with the registration history information, status evidence information, validity period, quantity range, delivery destination, distribution destination, usage destination, or reissue conditions. For example, if identification information corresponding to a target part 20 that has already been shipped, installed, replaced, returned, or discarded is being used for another target part 20 or target packaging 21, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including an identification information reuse anomaly. An identification information reuse anomaly may also be generated if group or batch-level identification information is used beyond the quantity range or validity period.

[0186] An abnormality in use after invalidation is an abnormality indicating that the normalized identification information 24, part ID display information 22, part label identification information for individual management, or part label identification information for group management that was subject to invalidation, expiration, disposal, return, exchange, reissue, or suspension of use has been read again, used, distributed, stored, installed, or associated with the target part 20 or target packaging 21. For example, if normalized identification information 24 indicating an invalidated state in registration history information or status trail information is read again in read trail information 23, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including an abnormality in use after invalidation.

[0187] A read trail inconsistency anomaly indicates that the read trail information 23 is inconsistent with the registration history information, status trail information, expected correspondence information, or information recorded in the recording base 40. For example, if the reader identification information is inconsistent with the authorized reader, if the reader entity identification information is inconsistent with the registered entity or expected entity, if the read time information is inconsistent with the validity period or status trail information, if the read location information is inconsistent with the circulation trail information or expected correspondence information, if the read environment information is inconsistent with the predetermined read environment conditions, or if the read result hash value is inconsistent with the registered hash value, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including the read trail inconsistency anomaly.

[0188] The anomaly information generation means 16 may generate multiple anomaly types simultaneously in a single matching process. For example, if the same normalized identification information 24 is associated with multiple target parts 20 and the reading position information does not match the expected matching information, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including duplicate identifier anomalies and reading trail mismatch anomalies. Also, if the target packaging 21 does not match the normalized identification information 24 and the normalized identification information 24 has been invalidated in the registration history information, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including packaging mismatch anomalies and post-invalidation use anomalies. When multiple anomaly types are generated, the anomaly information generation means 16 may associate each anomaly type with priority, justification information, related anomaly judgment patterns, or recommended subsequent processing.

[0189] (Embodiment 11: Determination of label substitution, parts substitution, and packaging inconsistency) The abnormal information generation means 16 may generate a packaging mismatch abnormality when the target part 20 is consistent but the target packaging 21 is mismatched. For example, if the part-side identification information, appearance image, shape information, dimension information, material information, weight information, surface condition information, or physical characteristic information corresponding to the target part 20 is consistent with the normalized identification information 24, and the packaging-side identification information, packaging condition information, appearance image, packing condition information, sealing condition information, opening condition information, or clean condition information corresponding to the target packaging 21 is not consistent with the normalized identification information 24, the abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to the packaging mismatch abnormality. In this case, the abnormal information generation means 16 may generate label authenticity abnormality information 30 indicating that the target part 20 itself is consistent with the identification information, but there is a problem with the correspondence with the target packaging 21.

[0190] The abnormal information generation means 16 may generate a part substitution abnormality when the target packaging 21 is consistent but the target part 20 is not. For example, if the part ID display information 22, packaging side identification information, or expected correspondence information attached to the target packaging 21 is consistent with the normalized identification information 24, and the part side identification information, appearance image, shape information, dimension information, material information, weight information, surface condition information, or physical characteristic information of the target part 20 is not consistent with the normalized identification information 24, the abnormal determination pattern matching means 15 may identify an abnormal determination pattern corresponding to the part substitution abnormality. In this case, the abnormal information generation means 16 may generate label authenticity abnormality information 30 indicating that the information on the target packaging 21 or evidence is consistent, but the actual target part 20 may be different.

[0191] The abnormal information generation means 16 may generate a label substitution abnormality if the part ID display information 22 or the read evidence information 23 does not match the target object comparison information 25 or the evidence comparison information 26. For example, if the normalized identification information 24 generated from the part ID display information 22 does not match the part-side identification information or the packaging-side identification information, and also does not match the supplier evidence information, distribution evidence information, registration history information, or status evidence information, a label substitution abnormality may be generated. In addition, a label substitution abnormality may be generated if the display content of the label shown in the read image does not match the reading result of machine-readable data or the extraction result of human-readable data, or if the reading result hash value does not match a registered value.

[0192] When the abnormal information generation means 16 generates a label substitution abnormality, a component substitution abnormality, or a packaging inconsistency abnormality, it may also generate a read evidence inconsistency abnormality. For example, if an inconsistency is detected regarding the target component 20 or the target packaging 21, and the reader identification information, reader subject identification information, reading time information, reading location information, reading environment information, or reading result hash value does not match the registration history information, status evidence information, or expected correspondence information, the abnormal information generation means 16 may generate label authenticity abnormality information 30 that includes a read evidence inconsistency abnormality in addition to the label substitution abnormality, etc. In this case, the authentication certificate result generation means 17 may include reacquisition request information or additional acquisition request information in the authentication certificate result information 31.

[0193] (Embodiment 12: Determination of duplication, reuse, and use after deactivation) The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to a duplicate identifier abnormality when the same normalized identification information 24 is associated with multiple target parts 20. For example, if normalized identification information 24 containing the same individual identification information is associated with multiple part-side identification information, multiple appearance images, multiple physical feature information, or multiple state evidence information, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including a duplicate identifier abnormality. Furthermore, a duplicate identifier abnormality may also be generated when the same normalized identification information 24 is read at the same time by different reading position information or different reading subject identification information.

[0194] The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to a duplicate identifier abnormality or a packaging inconsistency abnormality when the same normalized identification information 24 is associated with multiple target packaging 21. For example, when the same normalized identification information 24 is associated with multiple packaging-side identification information, multiple shipping packaging, multiple individual packaging, multiple bundled packaging, multiple storage packaging, or multiple in-process packaging, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including a duplicate identifier abnormality. Furthermore, when the same normalized identification information 24 is associated with multiple target packaging 21 having different quantity information, different delivery destination information, different distribution destination information, or different storage location information, a duplicate identifier abnormality or a packaging inconsistency abnormality may also be generated.

[0195] The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to a part substitution abnormality, a packaging mismatch abnormality, or a duplicate identifier abnormality when the same normalized identification information 24 is associated with a target part 20 and a target packaging 21 that do not match each other. For example, if the target part 20 indicated by the normalized identification information 24 does not match the target part 20 indicated by the expected correspondence information recorded on the target packaging 21, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including a packaging mismatch abnormality. Also, if the evidence correspondence relationship information 28 of the target packaging 21 shows consistency, while the object correspondence relationship information 27 of the target part 20 shows mismatch, a part substitution abnormality may be generated.

[0196] The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to a post-invalidation usage abnormality when the invalidated normalization identification information 24 is read again. For example, if the acquisition means 12 acquires the part ID display information 22 corresponding to the normalization identification information 24 again, even though the normalization identification information 24 is in an invalidated, expired, returned, replaced, discarded, or out of use state in the registration history information or status trail information, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including a post-invalidation usage abnormality. In this case, reading time information, reading position information, or reading subject identification information may be included in the label authenticity abnormality information 30 as supporting information indicating the usage status after invalidation.

[0197] The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to an abnormality in the reuse of identification information, an abnormality in use after invalidation, or an abnormality in the read evidence inconsistency when the reissued normalized identification information 24 does not match the registration history information. For example, if the normalized identification information 24 has been reissued, but the reissue information, reissue entity identification information, reissue time information, display version information, or display issue information does not match the registration history information, the abnormality information generation means 16 may generate label authenticity abnormality information 30 that includes the inconsistency related to the reissue. Also, if the old version of the part ID display information 22 is read as a valid display, the abnormality information generation means 16 may generate an abnormality in use after invalidation or an abnormality in the reuse of identification information.

[0198] The abnormality determination pattern matching means 15 may identify an abnormality determination pattern corresponding to an identification information reuse abnormality when individual identification information or group identification information is reused under conditions different from those of the registration history information. For example, if individual identification information is used again on a different target part 20 despite having been associated with a different target part 20 in the past, the abnormality information generation means 16 may generate an identification information reuse abnormality. Also, if group identification information is used under conditions different from the validity period, quantity range, delivery destination, distribution destination, usage destination, target packaging 21, or invalidation status recorded in the registration history information, the abnormality information generation means 16 may generate label authenticity abnormality information 30 including an identification information reuse abnormality.

[0199] (Embodiment 13: Recording infrastructure and event connection) The recording infrastructure 40 may include a recording infrastructure 41 that utilizes distributed ledger technology. The recording infrastructure 41 that utilizes distributed ledger technology may be a base that records, in a manner that makes it difficult to tamper with, or maintains in a state that is accessible to multiple entities, at least one of the following: evidence comparison information 26, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, or appraisal certification result information 31 relating to the target part 20 or target packaging 21. The recording infrastructure 41 that utilizes distributed ledger technology may record event information relating to issuance, shipment, receipt, inspection, storage, installation, replacement, repair, cleaning, use, return, invalidation, or disposal relating to the target part 20 or target packaging 21. The acquisition means 12 may acquire evidence comparison information 26 corresponding to each of the above events from the recording infrastructure 41 that utilizes distributed ledger technology.

[0200] The recording infrastructure 40 may include a recording infrastructure 42 that does not utilize distributed ledger technology. The recording infrastructure 42 that does not utilize distributed ledger technology may be configured as a database, file server, business system, manufacturing management system, inventory management system, logistics management system, maintenance management system, quality management system, label issuance management system, terminal storage unit, or cloud storage. The recording infrastructure 42 that does not utilize distributed ledger technology may record evidence comparison information 26 related to the target parts 20 or target packaging 21 for each management entity, supply entity, distribution entity, maintenance entity, user entity, or inspection entity. The acquisition means 12 may acquire registration history information, status evidence information, supply entity evidence information, or distribution evidence information from the recording infrastructure 42 that does not utilize distributed ledger technology.

[0201] The recording infrastructure 40 may include a hybrid recording infrastructure 43 that combines a recording infrastructure 41 that utilizes distributed ledger technology and a recording infrastructure 42 that does not utilize distributed ledger technology. The hybrid recording infrastructure 43 is not limited to a configuration in which all of the evidence comparison information 26 is recorded on one of the recording infrastructures, but may be configured in which the main body of the evidence comparison information 26 is recorded on the recording infrastructure 42 that does not utilize distributed ledger technology, and hash information, reference information, signature information, time information, or verification result information corresponding to the main body is recorded on the recording infrastructure 41 that utilizes distributed ledger technology. Furthermore, the appraisal and certification system 10 may generate object correspondence relationship information 27, evidence correspondence relationship information 28, label authenticity anomaly information 30, or appraisal and certification result information 31 based on the information obtained from the hybrid recording infrastructure 43.

[0202] Acquisition means 12 may acquire evidence comparison information 26 relating to the target part 20 or target packaging 21 from the recording base 40. The evidence comparison information 26 may include normalized identification information 24, part ID display information 22, target part 20, target packaging 21, supplier, distributor, maintenance, user, reader, registrant, event, status, location, time, or information related to evidence. Acquisition means 12 may use the normalized identification information 24 or part ID display information 22 as a search key or reference information to acquire the corresponding evidence comparison information 26 from the recording base 40. Acquisition means 12 may associate the acquisition source information, acquisition time information, acquisition entity information, or acquisition result information of the acquired evidence comparison information 26 with read evidence information 23 or evidence correspondence relationship information 28.

[0203] The authentication certificate result generation means 17 may associate at least one of the following with an issuance event relating to the target part 20 or target packaging 21: normalization identification information 24, target object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The issuance event may be an event indicating that part ID display information 22, a label, normalization identification information 24, part label identification information for individual management, part label identification information for group management, or packaging-side identification information relating to the target packaging 21 has been issued. The issuance event may include issuer identification information, issuance time information, issuance location information, display version information, display issuance information, or issuance condition information.

[0204] The authentication certificate result generation means 17 may associate at least one of the following with a shipping event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The shipping event may be an event indicating that the target part 20 or target packaging 21 was shipped from a supplier, manufacturer, packaging entity, logistics entity, or storage entity. The shipping event may include shipping entity identification information, shipping time information, shipping location information, shipping destination information, shipping quantity information, packaging status information of the target packaging 21, sealing status information, or read evidence information at the time of shipping.

[0205] The authentication certificate result generation means 17 may associate at least one of the following with a receipt event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The receipt event may be an event indicating that the target part 20 or target packaging 21 was received by a receiving entity, distribution entity, user entity, maintenance entity, inspection entity, or storage entity. The receipt event may include receiving entity identification information, receipt time information, receipt location information, receipt quantity information, read evidence information at the time of receipt, and information on the opened or sealed state of the target packaging 21.

[0206] The appraisal certificate result generation means 17 may associate at least one of the following with an acceptance event relating to the target part 20 or target packaging 21: normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or appraisal certificate result information 31. The acceptance event may be an event indicating that the target part 20 or target packaging 21 was confirmed after receipt based on the part ID display information 22, object comparison information 25, evidence comparison information 26, or status evidence trail information. The acceptance event may include acceptance subject identification information, acceptance time information, acceptance location information, acceptance result information, acceptance time read evidence trail information, reacquisition request information, or additional acquisition request information.

[0207] The authentication certificate result generation means 17 may associate at least one of the following with a storage event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The storage event may be an event indicating that the target part 20 or target packaging 21 was stored in a warehouse, storage location, in-process storage area, clean environment-compatible storage area, or temporary storage area near the equipment. The storage event may include storage entity identification information, storage start time information, storage end time information, storage location information, storage environment information, cleanliness status information, sealing status information, or read evidence information during storage.

[0208] The authentication certificate result generation means 17 may associate at least one of the following with an installation event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The installation event may be an event indicating that the target part 20 has been installed in, connected to, or incorporated as a component of equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport. The installation event may include installation entity identification information, installation time information, installation location information, equipment identification information, installation position information, pre-installation read evidence information, or post-installation state evidence information.

[0209] The authentication certificate result generation means 17 may associate at least one of the following with an exchange event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. An exchange event may be an event indicating that an existing target part 20 has been removed and replaced with another target part 20. An exchange event may include exchange entity identification information, exchange time information, replacement target part identification information, replacement part identification information, exchange reason information, pre-exchange state evidence information, post-exchange state evidence information, or exchange time read evidence information. The authentication certificate system 10 may determine an anomaly in use after invalidation or an anomaly in reuse of identification information by comparing the normalized identification information 24 before and after the exchange.

[0210] The appraisal certificate result generation means 17 may associate at least one of the following with a repair event relating to the target part 20 or target packaging 21: normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, or appraisal certificate result information 31. A repair event may be an event indicating that the target part 20 has been repaired, adjusted, modified, reworked, inspected, or restored. A repair event may include repair subject identification information, repair time information, repair location information, repair details information, pre-repair state evidence information, post-repair state evidence information, repair certificate information, or repair time read evidence information. The repair event may be associated with the state evidence information of the target part 20 and used to confirm whether the target part 20 is reusable or its warranty conditions.

[0211] The authentication certificate result generation means 17 may associate at least one of the following with a cleaning event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The cleaning event may be an event indicating that the target part 20 or target packaging 21 has undergone cleaning, purifying, decontamination, drying, repackaging, or clean environment compatible processing. The cleaning event may include cleaning subject identification information, cleaning time information, cleaning location information, cleaning method information, pre-cleaning clean state information, post-cleaning clean state information, repackaging information, or cleaning time read evidence information.

[0212] The authentication certificate result generation means 17 may associate at least one of the following with a usage event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The usage event may be an event indicating that the target part 20 was used in the device, or that the target packaging 21 was opened or removed in connection with the use of the target part 20. The usage event may include user identification information, usage start time information, usage end time information, usage location information, device identification information, usage condition information, usage state evidence information, or usage read evidence information. The usage event may be referenced to determine an anomaly in use after invalidation, an anomaly in reuse of identification information, or a reading evidence inconsistency anomaly.

[0213] The authentication certificate result generation means 17 may associate at least one of the following with a return event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence information 27, evidence correspondence information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The return event may be an event indicating that the target part 20 or target packaging 21 has been returned to the user, maintenance, distribution, supply, or management entity. The return event may include return entity identification information, return destination identification information, return time information, return location information, return reason information, return status evidence information, return read evidence information, or post-return processing schedule information.

[0214] The authentication certificate result generation means 17 may associate at least one of the following with an invalidation event relating to the target part 20 or target packaging 21: normalization identification information 24, target object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or authentication certificate result information 31. An invalidation event may be an event indicating that the part ID display information 22, normalization identification information 24, part label identification information for individual management, part label identification information for group management, or an event indicating that the target part 20 or target packaging 21 has been set to expired, deactivated, replaced, returned, scheduled for disposal, reissued, or invalidated. An invalidation event may include invalidation subject identification information, invalidation time information, invalidation reason information, invalidation target identification information, or post-invalidation read control information.

[0215] The authentication certificate result generation means 17 may associate at least one of the following with a disposal event relating to the target part 20 or target packaging 21: normalized identification information 24, target object correspondence relationship information 27, evidence correspondence relationship information 28, reading evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. A disposal event may be an event indicating that the target part 20 or target packaging 21 has been disposed of, destroyed, disassembled, recycled, rendered unreturnable, rendered unusable, or removed from management. A disposal event may include disposal entity identification information, disposal time information, disposal location information, disposal method information, disposal certificate information, pre-disposal reading evidence information, or post-disposal invalidation information. If the same normalized identification information 24 is read again after a disposal event, the anomaly information generation means 16 may generate label authenticity anomaly information 30 including post-invalidation use anomaly or identification information reuse anomaly.

[0216] (Embodiment 14: Appraisal Certificate Result Information) The authentication certificate result information 31 is information indicating the authenticity of the correspondence between the part ID display information 22 and the target part 20 or target packaging 21. The authentication certificate result information 31 may include at least one of the following: object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, anomaly judgment pattern identification information, judgment category, reacquisition request information, additional acquisition request information, AI judgment support information 32, XAI explanation information 33, quantum-resistant cryptography protection information 34, quantum key distribution related information 35, ZKP information 36, or ZKP verification result information 37. The authentication certificate result information 31 may be output as a display, report, data file, API response, recording to the recording base 40, or notification to an external system.

[0217] The appraisal certificate result information 31 may include object correspondence relationship information 27. The object correspondence relationship information 27 is information that shows the correspondence relationship between normalized identification information 24 and object comparison information 25, and may include the consistency between the target part 20 and the normalized identification information 24, the consistency between the target packaging 21 and the normalized identification information 24, the correspondence relationship between the target part 20 and the target packaging 21, or the result of determining whether the information matches the object based on the object comparison information 25. By including the object correspondence relationship information 27, the appraisal certificate result information 31 can show whether the part ID display information 22 corresponds to the actual target part 20 or target packaging 21.

[0218] The appraisal result information 31 may include evidence correspondence information 28. The evidence correspondence information 28 is information showing the correspondence between normalized identification information 24 and evidence comparison information 26, and may include consistency with supplier evidence information, distribution evidence information, registration history information, status evidence information, expected correspondence information, or evidence information. By including the evidence correspondence information 28, the appraisal result information 31 can show whether the evidence regarding supply, distribution, registration, status, or events related to the target part 20 or target packaging 21 is consistent with the part ID display information 22 or normalized identification information 24.

[0219] The appraisal result information 31 may include reading evidence information 23. The reading evidence information 23 may include at least one of the following: reading result, reading image, reading device identification information, reading subject identification information, reading time information, reading location information, reading environment information, or reading result hash value. By including the reading evidence information 23, the appraisal result information 31 can indicate under what conditions the part ID display information 22 was read, and whether the reading is consistent with the registration history information, status evidence information, or expected correspondence information.

[0220] The appraisal certificate result information 31 may include the types of label authenticity anomaly information 30. The above types may include label substitution anomalies, component substitution anomalies, packaging inconsistencies anomalies, duplicate identifier anomalies, identification information reuse anomalies, use after invalidation anomalies, read trace inconsistencies anomalies, PQC verification continuity anomalies, QKD linkage continuity anomalies, ZKP verification inconsistencies anomalies, or similar anomalies. By including the types of label authenticity anomaly information 30, the appraisal certificate result information 31 can distinguish and indicate not only the presence or absence of discrepancies or anomalies, but also the types of causes of the anomalies.

[0221] The expert certification result information 31 may include identification information of the anomaly determination pattern that formed the basis of the label authenticity anomaly information 30. The identification information of the anomaly determination pattern may be information for identifying the anomaly determination pattern stored in the anomaly condition data structure 29. In addition to the identification information of the anomaly determination pattern, the expert certification result information 31 may include object correspondence conditions, evidence correspondence conditions, read evidence conditions, the version of the applied anomaly condition data structure 29, verification time information, or verification subject information. This makes it possible to track which conditions the anomaly was determined based on.

[0222] The appraisal certificate result information 31 may include a determination category indicating the authenticity of the correspondence between the part ID display information 22 and the target part 20 or target packaging 21. The determination category may include categories such as authentic, high authenticity, medium authenticity, low authenticity, abnormal, additional verification required, reacquisition required, determination impossible, invalid, expired, reissue verification required, or similar categories. The determination category may be generated based on at least one of the object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, and label authenticity abnormality information 30. The appraisal certificate result information 31 may change subsequent processing, display method, notification destination, or recorded content to the recording base 40 depending on the determination category.

[0223] The appraisal certificate result information 31 may include reacquisition request information requesting the reacquisition of the part ID display information 22. Reacquisition request information may be generated when the reading result of the part ID display information 22 is unclear, when the reading image does not meet predetermined conditions, when the reading result hash value does not match, when the human-readable data and machine-readable data do not match, or when the reading device identification information, reading entity identification information, reading time information, reading location information, or reading environment information does not match the reading evidence conditions. Reacquisition request information may include the item to be reacquired, the reason for reacquisition, the reacquisition deadline, the reacquisition entity, the reacquisition location, or the reacquisition method.

[0224] The appraisal result information 31 may include additional acquisition request information requesting the acquisition of additional object comparison information 25 or evidence comparison information 26. Additional acquisition request information may be generated when object correspondence relationship information 27 or evidence correspondence relationship information 28 indicates that determination is impossible, partially consistent, inconsistent, or requires additional verification. Additional acquisition request information may include information that identifies the component side identification information, packaging side identification information, appearance image, packaging condition information, physical characteristic information, supplier evidence information, distribution evidence information, registration history information, condition evidence information, expected correspondence information, or evidence information to be acquired. The appraisal result generation means 17 may enable a re-evaluation of the authenticity determination regarding the target component 20 or target packaging 21 by including the additional acquisition request information in the appraisal result information 31.

[0225] (Embodiment 15: Auxiliary judgment and explanation processing using artificial intelligence or explainable AI) The appraisal and certification system 10 may include an auxiliary judgment explanation processing means 18. The auxiliary judgment explanation processing means 18 executes at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing when auxiliary judgment explanation processing is selected or requested as an execution target. The auxiliary judgment explanation processing does not necessarily replace the basic appraisal and certification processing by the appraisal and certification system 10, namely, the acquisition of part ID display information 22, the generation of normalized identification information 24, the generation of object correspondence relationship information 27 and evidence correspondence relationship information 28, the matching with an anomaly judgment pattern, the generation of label authenticity anomaly information 30, and the generation of appraisal and certification result information 31. The auxiliary judgment explanation processing may be used to additionally generate candidate anomaly judgment patterns, anomaly type candidates, anomaly occurrence probability, anomaly priority, or judgment basis while maintaining the above basic appraisal and certification processing.

[0226] The input information for AI processing may include at least one of the following: object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, anomaly judgment pattern, label authenticity anomaly information 30, or appraisal certification result information 31. The input information for AI processing may further include part ID display information 22, normalization identification information 24, object comparison information 25, evidence comparison information 26, comparison results between human-readable data and machine-readable data, read image, read result hash value, registration history information, status evidence information, expected correspondence information, issuance event information, shipping event information, receipt event information, inspection event information, storage event information, installation event information, replacement event information, repair event information, cleaning event information, usage event information, return event information, invalidation event information, or disposal event information. AI processing may use these input information individually, or multiple input information may be used in combination as features, time series data, relational data, image data, categorical data, or score data.

[0227] AI judgment support information 32 is information generated by AI processing to assist in anomaly detection. AI judgment support information 32 may include candidate anomaly detection patterns, candidate anomaly types, anomaly occurrence probability, anomaly priority, candidate reacquisition requests, candidate additional acquisition requests, candidate corrections for object correspondence information 27, candidate corrections for evidence correspondence information 28, reliability of read evidence information 23, or judgment support information to be reflected in the appraisal result information 31. AI judgment support information 32 may be provided to the anomaly information generation means 16 or the appraisal result generation means 17. However, the anomaly information generation means 16 and the appraisal result generation means 17 are not limited to using AI judgment support information 32 as essential information, and if AI processing is not used, label authenticity anomaly information 30 or appraisal result information 31 may be generated based on the matching results of the anomaly condition data structure 29.

[0228] Candidate anomaly determination patterns are information generated by AI processing as possible anomaly determination patterns for combinations of object correspondence information 27, evidence correspondence information 28, and read evidence information 23. Candidate anomaly determination patterns may be identified from among the anomaly determination patterns stored in the anomaly condition data structure 29 as satisfying predetermined conditions in terms of similarity, consistency, inconsistency, anomaly occurrence probability, or priority with respect to the input information. Candidate anomaly determination patterns may include a first anomaly determination pattern, a second anomaly determination pattern, a third anomaly determination pattern, a fourth anomaly determination pattern, a fifth anomaly determination pattern, or an anomaly determination pattern equivalent thereto. Candidate anomaly determination patterns may be used to assist the matching results by the anomaly determination pattern matching means 15.

[0229] Candidate anomaly types are information generated by AI processing as anomaly types that may be included in label authenticity anomaly information 30. Candidate anomaly types may include at least one of the following: label substitution anomaly, component substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after invalidation anomaly, or read trail inconsistency anomaly. Candidate anomaly types may include the name of the anomaly type, anomaly type identification information, a candidate anomaly judgment pattern corresponding to the anomaly type, a probability for each anomaly type, a priority for each anomaly type, justification information for each anomaly type, or additional verification targets for each anomaly type. The anomaly information generation means 16 may generate label authenticity anomaly information 30 using the matching results based on the anomaly condition data structure 29 while referring to the candidate anomaly types.

[0230] Anomaly occurrence probability is information that, through AI processing, indicates the likelihood of an anomaly occurring for a candidate anomaly judgment pattern or candidate anomaly type as a numerical value, category, or rank. Anomaly occurrence probability may be expressed as a probability value from 0 to 1, a percentage, a score, a confidence level, a risk category, or a tiered classification such as high, medium, or low. Anomaly occurrence probability may be generated based on the degree of inconsistency of the object correspondence relationship information 27, the degree of inconsistency of the evidence correspondence relationship information 28, the degree of inconsistency of the read evidence information 23, the deviation from the registration history information, the deviation from the status evidence information, the deviation from the expected correspondence information, past anomaly judgment results, or the distance to similar cases. Anomaly occurrence probability may be included in the label authenticity anomaly information 30 or the appraisal certification result information 31.

[0231] Anomaly priority is information that, through AI processing, indicates the order in which confirmation, reacquisition, additional acquisition, notification, or subsequent processing should be prioritized among multiple candidate anomaly judgment patterns or multiple candidate anomaly types. Anomaly priority may be generated based on the probability of anomaly occurrence, the importance of the target part 20, the state of the target packaging 21, the installation location of the target part 20, the distribution stage, the deactivation status, the degree of inconsistency in the read evidence, the combination of inconsistencies between the object correspondence relationship information 27 and the evidence correspondence relationship information 28, or past anomaly history. Anomaly priority may be assigned to each of the following: label substitution anomaly, part substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after deactivation anomaly, or read evidence inconsistency anomaly. The appraisal certificate result generation means 17 may determine the content of the reacquisition request information or additional acquisition request information based on the anomaly priority.

[0232] The input information for the XAI processing may include at least one of the following: AI judgment support information 32, candidate anomaly judgment pattern, candidate anomaly type, anomaly occurrence probability, anomaly priority, anomaly judgment pattern, object correspondence relationship information 27, evidence correspondence relationship information 28, reading evidence information 23, label authenticity anomaly information 30, or expert certification result information 31. The XAI processing may be performed to explain the output information generated by the AI ​​processing, or to explain the anomaly condition data structure 29, rule set, set of conditional expressions, decision tree, policy data, or judgment results generated by manual verification. The XAI processing may be used to output the basis for judgment in the expert certification system 10 in a format understandable to the reading entity, management entity, supply entity, distribution entity, maintenance entity, or user entity.

[0233] XAI explanatory information 33 is information generated by XAI processing to explain the basis for the AI ​​judgment support information 32, candidate anomaly judgment patterns, candidate anomaly types, label authenticity anomaly information 30, or appraisal certification result information 31. XAI explanatory information 33 may include the underlying input information, underlying correspondence information, underlying reading evidence information, underlying anomaly conditions, features, contribution, matched anomaly judgment patterns, referenced evidence comparison information 26, referenced object comparison information 25, or the ranking of information that influenced the judgment. XAI explanatory information 33 may be generated as text, tables, scores, rankings, graphs, highlighted images, rule displays, conditional expression displays, or judgment path displays.

[0234] The underlying input information is information that indicates the input information that contributed to the generation of the AI ​​judgment support information 32 or the XAI explanation information 33. The underlying input information may include part ID display information 22, normalization identification information 24, object comparison information 25, evidence comparison information 26, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, registration history information, status evidence information, expected correspondence information, issuance event information, shipping event information, receipt event information, inspection event information, storage event information, installation event information, replacement event information, repair event information, cleaning event information, usage event information, return event information, deactivation event information, or disposal event information. The XAI explanation information 33 may identify the information from this input information that influenced the judgment.

[0235] The underlying correspondence information refers to the information from the object correspondence information 27 or the evidence trail correspondence information 28 that contributed to the generation of the candidate anomaly judgment pattern, the candidate anomaly type, the label authenticity anomaly information 30, or the appraisal certification result information 31. For example, in the object correspondence information 27, the fact that the normalized identification information 24 and the target part 20 are consistent, while the normalized identification information 24 and the target packaging 21 are inconsistent, may be shown as the basis for a packaging inconsistency anomaly. Also, in the evidence trail correspondence information 28, the fact that the normalized identification information 24 is inconsistent with the registration history information or the status evidence trail information may be shown as the basis for an identification information reuse anomaly or an invalidation-post-use anomaly.

[0236] The underlying read trail information refers to the information from the read trail information 23 that contributed to the generation of the candidate anomaly determination pattern, candidate anomaly type, read trail inconsistency anomaly, or expert certification result information 31. The underlying read trail information may include the reading result, reading image, reading device identification information, reading entity identification information, reading time information, reading location information, reading environment information, or reading result hash value. For example, the fact that the reading time information is outside the validity period, the reading location information does not match the expected corresponding information, the reading device identification information does not match the authorized reading device, or the reading result hash value does not match the registered value may be indicated as the basis for a read trail inconsistency anomaly.

[0237] The underlying anomaly conditions refer to the conditions used to generate the candidate anomaly judgment pattern, anomaly type candidate, label authenticity anomaly information 30, or expert certification result information 31 from among the object correspondence conditions, evidence correspondence conditions, or read evidence trail conditions held in the anomaly condition data structure 29. The underlying anomaly conditions may include identification information of the anomaly judgment pattern, the content of the object correspondence conditions, the content of the evidence correspondence conditions, the content of the read evidence trail conditions, whether the condition is met or not, the time the condition is met, the priority of the condition, or the version number of the condition. The XAI explanation information 33 may indicate which anomaly condition was met, which led to the generation of which anomaly type candidate or label authenticity anomaly information 30.

[0238] Feature quantities or contributions are information that indicates the characteristics or influence of information that influenced the anomaly determination in AI processing or XAI processing. Feature quantities may include the consistency of object correspondence information 27, consistency of evidence correspondence information 28, reliability of read evidence information 23, deviation of read time, deviation of read position, whether the read result hash value matches, whether it matches with registration history information, whether it matches with status evidence information, the degree of correspondence between target part 20 and target packaging 21, or the similarity with past anomaly history. Contributions may indicate the degree of influence each feature quantity had on candidate anomaly determination patterns, candidate anomaly types, anomaly occurrence probability, or anomaly priority. XAI explanation information 33 may output feature quantities or contributions as numerical values, ranks, categories, text, or visual displays.

[0239] The appraisal and certification system 10 can perform basic appraisal and certification processing even without using AI processing. Specifically, the acquisition means 12 acquires part ID display information 22, read evidence information 23, object comparison information 25, and evidence comparison information 26; the normalization identification information generation means 13 generates normalization identification information 24; the correspondence relationship information generation means 14 generates object correspondence relationship information 27 and evidence correspondence relationship information 28; the abnormality judgment pattern matching means 15 matches with the abnormality judgment pattern based on the abnormality condition data structure 29; the abnormality information generation means 16 generates label authenticity abnormality information 30; and the appraisal and certification result generation means 17 generates appraisal and certification result information 31. In this case, AI judgment support information 32 does not need to be generated.

[0240] The appraisal and certification system 10 can perform basic appraisal and certification processing or AI processing even when XAI processing is not used. For example, even if AI processing is performed and AI judgment auxiliary information 32 is generated, if XAI processing is not selected or requested as the target of execution, XAI explanation information 33 does not need to be generated. Furthermore, even if neither AI processing nor XAI processing is used, the appraisal and certification system 10 may generate label authenticity anomaly information 30 and appraisal and certification result information 31 based on the anomaly condition data structure 29, object correspondence relationship information 27, evidence correspondence relationship information 28, and read evidence information 23. In this way, the auxiliary judgment explanation processing may be performed as advanced processing that is added only when necessary, without narrowing the scope of basic appraisal and certification processing.

[0241] (Embodiment 16: Protection verification process using PQC, QKD integration, or zero-knowledge proof) The authentication certification system 10 may include protective verification processing means 19. When protective verification processing is selected or requested as the target of execution, the protective verification processing means 19 may perform at least one of the following on at least one of the following: part ID display information 22, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or authentication certification result information 31: PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or Zero-Knowledge Proof (ZKP) processing. Protective verification processing is not necessarily a replacement for the basic authentication certification processing of the authentication certification system 10, and may be additional processing to assist in verification continuity, key distribution linkage, or non-disclosure verification while maintaining the basic authentication certification processing.

[0242] PQC processing may be performed to ensure the continuity of verification of component ID display information 22, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, or appraisal certification result information 31, even in environments where attacks by quantum computers are anticipated. PQC processing may include PQC signing, PQC signature verification, PQC key exchange, cryptographic scheme identification, PQC transition state management, PQC re-signature request, or similar processing. PQC processing does not exclude signing or verification using existing cryptographic schemes, and may be used in conjunction with existing cryptographic schemes, or may be performed as a step-by-step transition process.

[0243] PQC signature information is signature information generated by or referenced in PQC processing. PQC signature information may be generated for part ID display information 22, normalization identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, appraisal certification result information 31, or hash information generated from these. PQC signature information may include signature value, signature target information, signatory identification information, signature time information, cryptographic scheme identification information, key identification information, signature version information, or auxiliary information necessary for signature verification.

[0244] PQC verification result information is information indicating the result of verifying PQC signature information, PQC key exchange information, cryptographic scheme identification information, or post-quantum cryptographic protection information 34. PQC verification result information may include information indicating verification success, verification failure, verification impossible, key mismatch, signature target mismatch, signature time mismatch, cryptographic scheme mismatch, re-signing required, additional verification required, or migration confirmation required. PQC verification result information may be associated with label authenticity anomaly information 30 or authentication certificate result information 31. If the PQC verification result information does not match the PQC verification conditions, the protection verification processing means 19 may generate information indicating a PQC verification continuity anomaly.

[0245] PQC key exchange information may be information relating to key exchange used in PQC processing for secure communication or verification processing between the authentication and verification system 10, a reader, a terminal device, an external server, a recording infrastructure 40, a recording infrastructure 41 utilizing distributed ledger technology, a recording infrastructure 42 not utilizing distributed ledger technology, or a recording infrastructure 43 using hybrid technology. PQC key exchange information may include key exchange method identification information, key exchange session identification information, public key information, key encapsulation information, shared key derivation information, key validity period information, key renewal information, or key revocation information. PQC key exchange information may be used for sending and receiving, verifying, or registering protected information such as part ID display information 22 to the recording infrastructure 40.

[0246] Cryptographic scheme identification information is information for identifying the cryptographic scheme, signature scheme, key exchange scheme, hash scheme, commitment scheme, or verification scheme used in the protection verification process. The cryptographic scheme identification information may indicate a scheme used in the PQC process, an existing cryptographic scheme other than the PQC process, or a hybrid scheme that uses multiple schemes in combination. The cryptographic scheme identification information may include a scheme name, scheme identifier, version number, parameter information, key length information, applicable information, applicable period information, transition status information, or compatibility information. The protection verification processing means 19 may determine the consistency with the PQC verification conditions based on the cryptographic scheme identification information.

[0247] PQC transition status information is information that indicates the state of transitioning from an existing encryption method to an encryption method including PQC processing during the protection verification process, or the state of using an encryption method including PQC processing and an existing encryption method in combination. PQC transition status information may include information indicating not yet transitioned, transitioning, transition completed, using in combination, re-signing required, re-verification required, old method valid, old method expired, or not subject to transition. PQC transition status information may be managed for each component ID display information 22, normalization identification information 24, read trail information 23, trail comparison information 26, or appraisal certification result information 31. The protection verification processing means 19 may refer to the PQC transition status information and determine whether to perform PQC processing on the information to be protected, allow verification using the existing encryption method, or request re-signing.

[0248] PQC resignature request status information is information indicating whether resigning is required for protected information in PQC processing or PQC transition status management. PQC resignature request status information may include information indicating no resigning required, resigning required, resigned, resigning failed, resigning deadline exceeded, not subject to resigning, or additional verification required. PQC resignature request status information may be associated with part ID display information 22, normalization identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, or authentication certificate result information 31. The protection verification processing means 19 may generate resignature request information based on the PQC resignature request status information and include it in the authentication certificate result information 31.

[0249] QKD linkage processing is a process that acquires or generates key distribution-related information used for communication, recording, verification, or referencing protected information, in conjunction with quantum key distribution or key distribution management corresponding to quantum key distribution. QKD linkage processing is not limited to cases where the authentication and certification system 10 directly controls the quantum communication device, but may also include cases where key distribution management information corresponding to QKD is acquired from an external key distribution management infrastructure, key management server, communication infrastructure, recording infrastructure 40, or security management infrastructure. QKD linkage processing may be performed in connection with the transmission, encryption, decryption, verification, or recording of part ID display information 22, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or authentication and certification result information 31.

[0250] QKD key distribution method identification information is information for identifying the key distribution method, key distribution management method, or key distribution linkage method used in QKD linkage processing. QKD key distribution method identification information may include method name, method identifier, key distribution network identification information, key management method identification information, communication method identification information, applicable information, version information, parameter information, or compatibility information. The protection verification processing means 19 may determine whether the quantum key distribution related information 35 is consistent with the QKD linkage conditions based on the QKD key distribution method identification information.

[0251] QKD key delivery session identification information is information used to identify a session related to key delivery or key delivery management in QKD linkage processing. QKD key delivery session identification information may include a session number, session start time, session end time, session subject identification information, communication partner identification information, key management server identification information, communication channel identification information, or session status information. QKD key delivery session identification information may be used to track key delivery sessions used for acquiring evidence comparison information 26 related to the target component 20 or target packaging 21, registering it in the recording base 40, outputting appraisal certification result information 31, or transmitting it to an external system.

[0252] QKD key material identification information is information for identifying key materials that are generated, distributed, managed, or referenced in the QKD linkage process. QKD key material identification information may include key material number, key material generation time, key material validity period, key material use, key material status, key material reference information, key material management entity identification information, or key material expiration information. QKD key material identification information may be used to identify key materials used for encryption, decryption, signature assistance, verification assistance, communication protection, or secure registration to the recording infrastructure 40 of protected information. QKD key material identification information may be included in the appraisal result information 31, or may be associated with the appraisal result information 31.

[0253] QKD key delivery status information is information indicating the status of key delivery or key delivery management in the QKD linkage process. The QKD key delivery status information may include information indicating key delivery success, key delivery failure, key delivery in progress, key delivery impossible, insufficient key material, communication channel abnormality, key expired, key update required, key application pending, key applied, or additional verification required. Based on the QKD key delivery status information, the protection verification processing means 19 may determine whether the QKD linkage process can be continued for the information to be protected, whether a different key delivery process should be used, or whether a QKD linkage continuity abnormality should be generated.

[0254] QKD applicability information is information indicating whether QKD linkage processing can be applied to the protected information or the processing target. QKD applicability information may include information indicating applicability, inapplicability, conditionally applicable, no application required, application pending, alternative key delivery required, communication channel confirmation required, or key management confirmation required. QKD applicability information may be generated based on events related to the target component 20 or target packaging 21, the type of recording base 40, the communication partner, the managing entity, the type of protected information, security requirements, the availability of the key delivery network, or operational policies. The protection verification processing means 19 may associate the QKD applicability information with the appraisal certificate result information 31.

[0255] QKD transition status information is information that indicates the state in the protection verification process of transitioning from an existing key distribution method to a key distribution method that includes QKD linkage processing, or the state of using QKD linkage processing and the existing key distribution method in combination. QKD transition status information may include information indicating not yet transitioned, transitioning, transition completed, using in combination, alternative key distribution in progress, QKD not applicable, awaiting QKD application, or not subject to transition. Based on the QKD transition status information, the protection verification processing means 19 may decide which key distribution method to use to protect or verify the evidence comparison information 26, read evidence information 23, or appraisal certificate result information 31 relating to the target part 20 or target packaging 21.

[0256] The key distribution management information corresponding to QKD is information for managing key distribution, key management, key usage, key renewal, key expiration, key application target, or key distribution session in relation to QKD linkage processing. The above key distribution management information may include QKD key distribution method identification information, QKD key distribution session identification information, QKD key material identification information, QKD key distribution status information, QKD applicability information, QKD transition status information, key management entity identification information, key usage history information, or key expiration information. The protection verification processing means 19 may acquire or generate the above key distribution management information and associate it with label authenticity anomaly information 30 or appraisal certificate result information 31.

[0257] ZKP processing is a process that enables verification that predetermined conditions are met without disclosing at least a portion of the above information, based on at least one of the following: part ID display information 22, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or appraisal certification result information 31, or commitment information or hash information generated from these. ZKP processing may be performed to prove or verify that correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence trail conditions, or anomaly determination conditions are met. ZKP processing may be used to perform necessary verification without disclosing confidential information relating to the target part 20 or target packaging 21, information relating to the supplier, information relating to the distribution route, information relating to the reader, or a portion of the evidence comparison information 26.

[0258] The correspondence authenticity condition is a condition relating to the correspondence authenticity between the part ID display information 22 and the target part 20 or target packaging 21. The correspondence authenticity condition may include the normalization identification information 24 being consistent with the target part 20, the normalization identification information 24 being consistent with the target packaging 21, the correspondence relationship between the target part 20 and the target packaging 21 being consistent, or the part ID display information 22 being a genuine correspondence to the target part 20 or target packaging 21. In the ZKP processing, ZKP information 36 may be generated that allows verification that the correspondence authenticity condition is met without disclosing detailed information of the target part 20 or target packaging 21.

[0259] The object correspondence conditions are conditions relating to the correspondence between normalized identification information 24 and object comparison information 25. The object correspondence conditions may include that the part-side identification information, packaging-side identification information, appearance image, shape information, dimensional information, material information, weight information, surface condition information, packaging condition information, or physical characteristic information are consistent with the normalized identification information 24 or expected correspondence information. In ZKP processing, ZKP information 36 indicating that the object correspondence conditions are met may be generated without disclosing all or part of the object comparison information 25. This makes it possible to verify the correspondence with the object while maintaining the confidentiality of the target part 20 or target packaging 21.

[0260] The trail correspondence conditions are conditions relating to the correspondence between normalized identification information 24 and trail comparison information 26. The trail correspondence conditions may include the fact that supplier trail information, distribution trail information, registration history information, status trail information, expected correspondence information, or evidence information are consistent with the normalized identification information 24. In ZKP processing, ZKP information 36 indicating that the trail correspondence conditions are met may be generated without disclosing all or part of the supplier, distribution route, storage location, installation location, transaction terms, warranty conditions, or status trail information. This allows for verification of the correspondence with the trail while protecting confidential information.

[0261] The read trail conditions are conditions relating to the read trail information 23. The read trail conditions may include that the read result, read image, read device identification information, read subject identification information, read time information, read location information, read environment information, or read result hash value are consistent with the registration history information, status trail information, expected correspondence information, or information recorded in the recording base 40. In the ZKP processing, ZKP information 36 indicating that the read trail conditions are met may be generated without disclosing all or part of the read subject, read location, read environment, or read image. This makes it possible to verify the integrity of the read trail while protecting confidential information related to the read.

[0262] Anomaly determination conditions are conditions relating to anomaly determination patterns stored in the anomaly condition data structure 29. Anomaly determination conditions may include whether the combination of object correspondence information 27, evidence correspondence information 28, and read evidence information 23 corresponds to a specific anomaly determination pattern, or whether it does not correspond to a specific anomaly determination pattern. In ZKP processing, ZKP information 36 indicating whether the anomaly determination conditions are met or not may be generated without disclosing all or part of the object correspondence information 25, evidence correspondence information 26, or read evidence information 23. This makes it possible to verify whether an anomaly determination is made or not while concealing the information on the basis of the anomaly determination.

[0263] ZKP information 36 is information generated by ZKP processing, and is information that makes it possible to verify that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a portion of the information necessary to verify the above conditions. ZKP information 36 may include certification data, verification data, public input information, commitment information, hash information, condition identification information, certification target information identification information, certification generation time information, certifying entity identification information, or verification condition information. ZKP information 36 may be included in the appraisal certificate result information 31, or may be associated with the appraisal certificate result information 31.

[0264] The ZKP verification result information 37 is information indicating the result of verifying the ZKP information 36. The ZKP verification result information 37 may include information indicating verification success, verification failure, verification impossible, certificate expiration, certificate object mismatch, condition mismatch, commitment mismatch, hash mismatch, re-certification required, or additional verification required. The ZKP verification result information 37 may be associated with the label authenticity anomaly information 30 or the expert certification result information 31. If the ZKP verification result information 37 does not match the corresponding authenticity condition, object correspondence condition, evidence correspondence condition, read evidence condition, or anomaly determination condition, the protection verification processing means 19 may generate information indicating a ZKP verification inconsistency anomaly.

[0265] The authentication and certification system 10 can perform basic authentication and certification processing and other protection verification processing even when PQC processing is not used. For example, even if protection verification processing is selected or requested as the target of execution, if PQC processing is not selected as the target of execution, the protection verification processing means 19 does not need to generate PQC signature information, PQC verification result information, PQC key exchange information, PQC transition status information, or PQC re-signature request status information. Even in this case, the authentication and certification system 10 may acquire part ID display information 22, generate normalized identification information 24, generate object correspondence relationship information 27 and evidence correspondence relationship information 28, compare with anomaly judgment patterns, generate label authenticity anomaly information 30, and generate authentication and certification result information 31.

[0266] The appraisal and certification system 10 can perform basic appraisal and certification processing and other protection verification processing even when QKD linkage processing is not used. For example, even if protection verification processing is selected or requested as an execution target, if QKD linkage processing is not selected as an execution target, the protection verification processing means 19 does not need to generate QKD key distribution method identification information, QKD key distribution session identification information, QKD key material identification information, QKD key distribution status information, QKD applicability information, QKD migration status information, or key distribution management information corresponding to QKD. Even in this case, the appraisal and certification system 10 may connect to the recording base 40, acquire evidence comparison information 26, generate object correspondence relationship information 27 and evidence correspondence relationship information 28, and generate appraisal and certification result information 31.

[0267] The appraisal certification system 10 can execute basic appraisal certification processing and other protection verification processing even when ZKP processing is not used. For example, even if the protection verification processing is selected or requested as an execution target, if ZKP processing is not selected as an execution target, the protection verification processing means 19 does not need to generate ZKP information 36 or ZKP verification result information 37. Even in this case, the appraisal certification system 10 may perform matching against an abnormality determination pattern based on object correspondence information 27, trail correspondence information 28 and read trail information 23, and generate label authenticity abnormality information 30 and appraisal certification result information 31. Thereby, ZKP processing may be implemented as advanced processing that is added only when necessary without narrowing down the basic appraisal certification processing.

[0268] (Embodiment 17: Abnormality Reflection of Protection Verification Processing) The PQC verification condition is a condition for determining whether post-quantum computer cryptography protection information 34 generated or acquired in PQC processing matches the protection target information. The PQC verification condition may include that the PQC signature information matches the signature target information, that the PQC verification result information indicates successful verification, that the PQC key exchange information indicates valid key exchange, that the encryption method identification information indicates an authorized method, that the PQC migration status information indicates a predetermined migration status, or that the PQC re-signature request status information indicates a predetermined re-signature status. The PQC verification condition may be set for each piece of part ID display information 22, normalized identification information 24, object correspondence information 27, trail correspondence information 28, read trail information 23, label authenticity abnormality information 30, or appraisal certification result information 31.

[0269] The protection verification processing means 19 may generate information indicating a PQC verification continuity abnormality when the post-quantum cryptography protected information 34 does not match the PQC verification condition. For example, when the PQC signature information does not match the signature target information, when the PQC verification result information indicates verification failure, when the PQC key exchange information indicates expiration or key inconsistency, when the encryption method identification information does not match the permitted method, or when the PQC migration status information does not indicate completion of migration within the migration deadline, the protection verification processing means 19 may generate information indicating a PQC verification continuity abnormality. The information indicating a PQC verification continuity abnormality may include an abnormality type, an abnormality basis, target protected information, verification time information, verification subject identification information, or re-signature request information.

[0270] The QKD cooperation condition is a condition for determining whether quantum key distribution related information 35 generated or acquired in QKD cooperation processing matches the conditions of key distribution or key distribution management related to protected information. The QKD cooperation condition may include that the QKD key distribution method identification information indicates a permitted method, that the QKD key distribution session identification information indicates a valid session, that the QKD key material identification information indicates valid key material, that the QKD key distribution status information indicates successful key distribution or applied key, that the QKD application availability information indicates applicable or conditionally applicable, that the QKD migration status information indicates a predetermined migration status, or that the key distribution management information corresponding to QKD matches the key management conditions.

[0271] The protection verification processing means 19 may generate information indicating a QKD cooperation continuity abnormality when the quantum key distribution related information 35 does not match the QKD cooperation condition. For example, when the QKD key distribution status information indicates key distribution failure, insufficient key material, communication path abnormality or key update requirement, when the QKD key distribution session identification information does not match the target communication or recording process, when the QKD key material identification information has been revoked or is outside the valid period, or when QKD cooperation processing is requested for the protected information despite the QKD application availability information indicating inapplicability, the protection verification processing means 19 may generate information indicating a QKD cooperation continuity abnormality. The information indicating a QKD cooperation continuity abnormality may include an abnormality type, an abnormality basis, a key distribution session, key material, a key distribution status, verification time information, or additional confirmation request information.

[0272] The protection verification processing means 19 may generate information indicating a ZKP verification inconsistency anomaly if the ZKP information 36 or ZKP verification result information 37 does not match the corresponding authenticity condition, object correspondence condition, evidence correspondence condition, read evidence condition, or anomaly determination condition. For example, if the ZKP verification result information 37 indicates verification failure or inability to verify, if the certified information of the ZKP information 36 does not match the appraisal certification result information 31 or label authenticity anomaly information 30, if the commitment information or hash information does not match the protected information, or if the condition identification information indicated by the ZKP information 36 does not match the requested condition, the protection verification processing means 19 may generate information indicating a ZKP verification inconsistency anomaly. The information indicating a ZKP verification inconsistency anomaly may include anomaly type, anomaly basis, certified information identification information, condition identification information, verification time information, or recertification request information.

[0273] The protection verification processing means 19 may reflect at least one of the following inconsistencies in the label authenticity anomaly information 30: PQC verification continuity anomaly, QKD linkage continuity anomaly, or ZKP verification inconsistency anomaly. For example, if an inconsistency is detected in the PQC verification conditions, QKD linkage conditions, or ZKP verification conditions with respect to the part ID display information 22, normalization identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, or appraisal certification result information 31, the protection verification processing means 19 may reflect the above inconsistency as the anomaly type, anomaly basis, anomaly judgment pattern identification information, protection verification anomaly information, re-signature request information, key delivery additional confirmation request information, or re-certification request information in the label authenticity anomaly information 30. As a result, the label authenticity anomaly information 30 may be generated as information that includes not only inconsistencies in the object or evidence but also inconsistencies related to the protection verification process.

[0274] The authentication result generation means 17 may reflect at least one of the following in the authentication result information 31: PQC verification continuity anomaly, QKD linkage continuity anomaly, or ZKP verification inconsistency anomaly. The authentication result information 31 may include, in addition to the object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, and label authenticity anomaly information 30, post-quantum cryptography protection information 34, quantum key distribution related information 35, ZKP information 36, ZKP verification result information 37, information indicating a PQC verification continuity anomaly, information indicating a QKD linkage continuity anomaly, or information indicating a ZKP verification inconsistency anomaly. If an anomaly related to the protection verification process exists, the authentication result generation means 17 may include a judgment category in the authentication result information 31 indicating a protection verification anomaly, additional verification required, re-signing required, key distribution confirmation required, re-certification required, or judgment pending.

[0275] (Embodiment 18: Method of Authentication and Certification) The authentication and certification method is a method performed by computer for performing authentication and certification of a target component 20 that constitutes or is used in equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport, or a target packaging 21 corresponding to the target component 20. The authentication and certification method may include the steps of acquiring component ID display information 22 and read evidence information 23, generating normalized identification information 24, acquiring target object comparison information 25, acquiring evidence comparison information 26, generating target object correspondence relationship information 27 and evidence correspondence relationship information 28, comparing with an anomaly judgment pattern, generating label authenticity anomaly information 30, and generating authentication and certification result information 31. Each step may be performed by the same computer, or it may be performed in a distributed manner by multiple servers, terminals, readers, recording infrastructure 40, or external systems.

[0276] In the process of acquiring part ID display information 22 and read trail information 23, the computer may acquire part ID display information 22 that is attached to, displayed, recorded, or associated with the target part 20 or target packaging 21. The computer may also acquire read trail information 23 related to the reading of the part ID display information 22. The part ID display information 22 may be acquired from a label attached to the target part 20, a display directly shown on the target part 20, an engraving made on the target part 20, a recording medium attached to or incorporated into the target part 20, a label attached to the target packaging 21, a display directly shown on the target packaging 21, an engraving made on the target packaging 21, or a recording medium attached to or incorporated into the target packaging 21. The read trail information 23 may include the reading result, a reading image, reading device identification information, reading entity identification information, reading time information, reading position information, reading environment information, or a reading result hash value.

[0277] In the process of generating normalized identification information 24, the computer may generate normalized identification information 24 from the part ID display information 22, which includes at least part type identification information, individual identification information or group identification information, and supplier identification information. The computer may extract each of the above identification information from human-readable data, machine-readable data, two-dimensional codes, one-dimensional codes, data within electronic tags, data within recording media, or combinations thereof contained in the part ID display information 22. The computer may correct the extracted information for character type, number of digits, delimiters, notation order, encoding format, display version, display issuance information, or format differences for each supplier, and generate normalized identification information 24 in a comparable format. If the target part 20 is a part that is managed individually, the computer may generate part label identification information for individual management. If the target part 20 is a part that is managed by group or batch, the computer may generate part label identification information for group management.

[0278] In the process of acquiring object comparison information 25, the computer may acquire object comparison information 25 that includes at least one of the part-side identification information displayed, recorded, embedded, or associated with the target part 20, and the packaging-side identification information displayed, recorded, embedded, or associated with the target packaging 21. The object comparison information 25 may include an appearance image, shape information, dimensional information, material information, weight information, surface condition information of the target part 20, an appearance image of the target packaging 21, packaging condition information, sealed condition information, opened condition information, cleanliness information, packaging condition information, or physical characteristic information. The object comparison information 25 may be acquired from a reader, imaging device, three-dimensional sensor, weighing scale, surface inspection device, terminal device, external system, or user input.

[0279] In the process of acquiring evidence comparison information 26, the computer may acquire evidence comparison information 26 that includes at least one of the following: supplier evidence information corresponding to supplier identification information, distribution evidence information relating to the target part 20 or target packaging 21, registration history information corresponding to normalization identification information 24, or status evidence information relating to the target part 20 or target packaging 21. The evidence comparison information 26 may include issuance information by the supplier, delivery information, inspection information, shipment information, receipt information, warranty information, invalidation information, information relating to the shipment, receipt, storage, installation, replacement, repair, cleaning, reuse, return or disposal of the target part 20 or target packaging 21, registration time information, registration entity identification information, update time information, update entity identification information, expiration information, reissue information, expected correspondence information, or evidence information. The computer may acquire evidence comparison information 26 from a record infrastructure 41 utilizing distributed ledger technology, a record infrastructure 42 not utilizing distributed ledger technology, or a record infrastructure 43 using hybrid technology.

[0280] In the process of generating object correspondence information 27 and evidence correspondence information 28, the computer may generate object correspondence information 27 showing the correspondence between normalized identification information 24 and object comparison information 25. The computer may also generate evidence correspondence information 28 showing the correspondence between normalized identification information 24 and evidence comparison information 26. The object correspondence information 27 may include information indicating whether the normalized identification information 24 is consistent with, inconsistent with, partially consistent with, undeterminable with, requires reacquisition of, or requires additional acquisition of, the target part 20 or target packaging 21. The evidence correspondence information 28 may include information indicating whether the normalized identification information 24 is consistent with supplier evidence information, distribution evidence information, registration history information, status evidence information, expected correspondence information, or evidence information.

[0281] In the step of matching with an anomaly determination pattern, the computer may match the combination of object correspondence information 27, evidence correspondence information 28, and read evidence information 23 with an anomaly determination pattern stored in the anomaly condition data structure 29. The anomaly condition data structure 29 may be a data structure that associates, for each anomaly determination pattern, with object correspondence conditions related to object correspondence information 27, evidence correspondence conditions related to evidence correspondence information 28, read evidence conditions related to read evidence information 23, and an anomaly type corresponding to the anomaly determination pattern. The computer may identify patterns in which object correspondence information 27 is consistent and evidence correspondence information 28 is inconsistent, patterns in which object correspondence information 27 is inconsistent and evidence correspondence information 28 is consistent, patterns in which both object correspondence information 27 and evidence correspondence information 28 are inconsistent, patterns in which read evidence trail information 23 is inconsistent with registration history information or status evidence trail information, or patterns in which the same normalized identification information 24 is associated with multiple target parts 20 or multiple target packaging 21.

[0282] In the process of generating label authenticity anomaly information 30, the computer may generate label authenticity anomaly information 30 that includes at least one of the following anomaly types corresponding to the anomaly judgment pattern: label substitution anomaly, part substitution anomaly, packaging inconsistency anomaly, duplicate identifier anomaly, identification information reuse anomaly, use after invalidation anomaly, or read trail inconsistency anomaly. The label authenticity anomaly information 30 may include the anomaly type, identification information of the anomaly judgment pattern, the basis for the anomaly, the location where the anomaly occurred, the related target part 20, the related target packaging 21, the related read trail information 23, reacquisition request information, additional acquisition request information, or verification priority. If multiple anomaly judgment patterns are met, the computer may generate label authenticity anomaly information 30 that includes multiple anomaly types.

[0283] In the process of generating the appraisal certificate result information 31, the computer may generate appraisal certificate result information 31 indicating the correspondence authenticity between the part ID display information 22 and the target part 20 or target packaging 21, based on at least one of the object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, and label authenticity anomaly information 30. The appraisal certificate result information 31 may include the type of object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, label authenticity anomaly information 30, identification information of the anomaly judgment pattern that formed the basis of the label authenticity anomaly information 30, judgment category indicating correspondence authenticity, reacquisition request information, or additional acquisition request information. The appraisal certificate result information 31 may be output to a display device, terminal device, external server, recording board 40, or administrator terminal.

[0284] The appraisal and certification method may further include a step of performing at least one of artificial intelligence (AI) processing and Explainable AI (XAI) processing when an auxiliary judgment and explanation processing is selected or requested as the target of execution. In the above step, the computer may generate AI judgment auxiliary information 32 or XAI explanation information 33 based on at least one of object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence information 23, anomaly judgment pattern, label authenticity anomaly information 30, or appraisal and certification result information 31. The AI ​​judgment auxiliary information 32 may include candidate anomaly judgment patterns, candidate anomaly types, anomaly occurrence probability, or anomaly priority. The XAI explanation information 33 may show the input information, correspondence relationship information, read evidence information 23, anomaly conditions, features, or contributions that form the basis of the candidate anomaly judgment pattern, candidate anomaly type, or label authenticity anomaly information 30. The above auxiliary judgment and explanation processing does not necessarily narrow the basic appraisal and certification method and may be additional processing when selected or requested.

[0285] The authentication and certification method may further include, when a protection verification process is selected or requested as the target of execution, a step of performing at least one of the following processes on at least one of the following: part ID display information 22, normalized identification information 24, object correspondence relationship information 27, evidence correspondence relationship information 28, read evidence trail information 23, label authenticity anomaly information 30, or authentication and certification result information 31, a step of performing at least one of the following processes: PQC (Post-Quantum Cryptography) processing, QKD (Quantum Key Distribution) linkage processing, or zero-knowledge proof (ZKP) processing. If PQC processing is performed, the computer may acquire or generate post-quantum cryptographic protection information 34. If QKD linkage processing is performed, the computer may acquire or generate quantum key distribution related information 35. When ZKP processing is performed, the computer may generate ZKP information 36 that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a portion of the information, or may obtain ZKP verification result information 37.

[0286] The authentication method may include the reflection of anomalies in the protection verification process. In the above process, the computer may generate information indicating a PQC verification continuity anomaly if the quantum-resistant cryptographic protection information 34 does not match the PQC verification conditions. The computer may also generate information indicating a QKD linkage continuity anomaly if the quantum key distribution related information 35 does not match the QKD linkage conditions. Furthermore, the computer may generate information indicating a ZKP verification inconsistency anomaly if the ZKP information 36 or ZKP verification result information 37 does not match the correspondence authenticity condition, object correspondence condition, evidence correspondence condition, read evidence condition, or anomaly determination condition. The computer may reflect at least one of the PQC verification continuity anomaly, QKD linkage continuity anomaly, or ZKP verification inconsistency anomaly in the label authenticity anomaly information 30 or the authentication result information 31.

[0287] (Embodiment 19: Program) The program may be a program that causes a computer to function as each of the means in the authentication and certification system 10. The program may cause the computer to function as an acquisition means 12, a normalized identification information generation means 13, a correspondence relationship information generation means 14, an anomaly determination pattern matching means 15, an anomaly information generation means 16, and an authentication and certification result generation means 17. The program may also, if necessary, cause the computer to function as an auxiliary determination explanation processing means 18 or a protection verification processing means 19. The program may be stored and executed on a single computer, or it may be stored or executed in a distributed manner across multiple servers, terminals, readers, cloud environments, edge devices, or recording infrastructure 40.

[0288] The program may cause a computer to function as acquisition means 12 that acquires part ID display information 22 and reading trail information 23. The acquisition means 12 may acquire part ID display information 22 that is attached, displayed, recorded or associated with a target part 20 or a target package 21, and reading trail information 23 related to the reading of the part ID display information 22. The acquisition means 12 may acquire the part ID display information 22 and the reading trail information 23 from a reading device, an imaging device, a sensor, a terminal device, an external server, a recording infrastructure 40, or a user input. The program may include an instruction for acquiring a reading result, a read image, reading device identification information, reading subject identification information, reading time information, reading position information, reading environment information, or a hash value of a reading result.

[0289] The program may cause a computer to function as normalized identification information generation means 13. The normalized identification information generation means 13 may generate normalized identification information 24 including at least part type identification information, individual identification information or group identification information, and supplier identification information from the part ID display information 22. The program may include an instruction for extracting each of the above items of identification information from human-readable data, machine-readable data, a reading result of a two-dimensional code, data in a recording medium, or data in an electronic tag. The program may also include an instruction for correcting notation variations, digit number differences, delimiters, character types, encoding formats, or display orders, and generating normalized identification information 24 in a comparable format.

[0290] The program may cause a computer to function as object comparison information acquisition means. The object comparison information acquisition means may acquire object comparison information 25 including at least one of part-side identification information displayed, recorded, embedded, or associated with the target part 20 and package-side identification information displayed, recorded, embedded, or associated with the target package 21. The program may include an instruction for acquiring an appearance image, shape information, dimension information, material information, weight information, and surface state information of the target part 20, and an appearance image, packing state information, sealing state information, unsealing state information, cleanliness state information, packaging state information, or physical feature information of the target package 21.

[0291] The program may cause a computer to function as a means for acquiring evidence comparison information. The evidence comparison information acquisition means may acquire evidence comparison information 26 that includes at least one of supplier evidence information, distribution evidence information, registration history information, status evidence information, expected response information, or evidence information. The program may include commands to acquire evidence comparison information 26 from a record infrastructure 41 th...

Claims

1. An authentication and certification system for performing authentication and certification of equipment used in semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport, or of target components used in said equipment, or of target packaging corresponding to said target components, comprising: an abnormal condition data structure storage means; acquisition means; normalization identification information generation means; correspondence relationship information generation means; abnormal determination pattern matching means; abnormal information generation means; and authentication and certification result generation means, wherein the abnormal condition data structure storage means stores, for each abnormal determination pattern, target correspondence conditions related to target correspondence relationship information, evidence correspondence conditions related to evidence correspondence information, and read evidence. The acquisition means stores an abnormal condition data structure that associates reading trail conditions related to information with abnormality types corresponding to the abnormality determination pattern, and acquires information for identifying the target part or the target packaging, which includes part ID display information attached to, displayed, recorded, or associated with the target part or the target packaging, and reading trail information that includes information relating to the reading of the part ID display information, which includes the fact that the part ID display information was read or information relating to the subject, time, location, device, environment, or identity of the reading result, and the normalized identification information generation means The acquisition means generates normalized identification information from the part ID display information, which includes at least part type identification information, individual identification information or group identification information, and supplier identification information. The acquisition means obtains object comparison information which is a comparison target with the normalized identification information and includes at least one of part-side identification information displayed, recorded, embedded, or associated with the target part, and packaging-side identification information displayed, recorded, embedded, or associated with the target packaging. The acquisition means also obtains object comparison information which includes actions taken by the entity corresponding to the supplier identification information with respect to the target part or the target packaging. The method acquires evidence comparison information which includes at least one of the following: supplier evidence information showing evidence of processing, distribution evidence information showing evidence of the distribution process of the target part or the target packaging, registration history information showing the history of registration or modification of the normalization identification information, or status evidence information showing evidence of the state of the target part or the target packaging. The correspondence relationship information generation means then compares the normalization identification information with the target object comparison information to generate target object correspondence relationship information which shows the consistency between the normalization identification information and the target part or the target packaging, and then compares the normalization identification information with the evidence comparison information.An authentication system comprising: generating evidence correspondence relationship information indicating the consistency between the normalized identification information and the evidence included in the evidence comparison information; the abnormality determination pattern matching means matching the combination of the object correspondence relationship information, the evidence correspondence relationship information, and the read evidence information with the abnormality determination pattern stored in the abnormality condition data structure to identify the abnormality determination pattern corresponding to the combination; the abnormality information generation means generating label authenticity abnormality information including at least one of the abnormality types associated with the identified abnormality determination pattern, such as label substitution abnormality, part substitution abnormality, packaging inconsistency abnormality, duplicate identifier abnormality, identification information reuse abnormality, use after invalidation abnormality, or read evidence inconsistency abnormality; and the authentication certificate result generation means generating authentication certificate result information indicating the correspondence authenticity between the part ID display information and the target part or the target packaging, based on at least one of the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, and the label authenticity abnormality information.

2. The appraisal and certification system according to claim 1, wherein the subject part, the subject packaging, or a combination of the subject part and the subject packaging is an asset, and "asset" means a tangible asset, an intangible asset, or a composite asset, and "composite asset" means an asset that includes or references two or more component assets, and the component assets are a tangible asset, an intangible asset, or another composite asset.

3. The authentication and certification system according to claim 1, wherein the part ID display information is obtained from at least one of the following: a label affixed to the target part, a display directly shown on the target part, an engraving applied to the target part, a recording medium attached to or incorporated into the target part, a label affixed to the target packaging, a display directly shown on the target packaging, an engraving applied to the target packaging, or a recording medium attached to or incorporated into the target packaging.

4. The part ID display information includes at least one of human-readable data and machine-readable data, the human-readable data, if included, includes at least one of part name, supplier name, supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information, the machine-readable data, if included, includes data encoded from at least one of the supplier identification information, part type identification information, individual identification information, group identification information, quantity information, display version information, or display issuance information, and if the part ID display information includes both human-readable data and machine-readable data, the correspondence relationship information generation means compares information extracted from the human-readable data with information extracted from the machine-readable data, and reflects the result of the comparison in at least one of the object correspondence relationship information, the evidence correspondence relationship information, or the read evidence information, as described in claim 1.

5. The authentication and certification system according to claim 4, wherein the machine-readable data includes data read from a two-dimensional code, the reading evidence information includes at least one of the reading result of the two-dimensional code, a read image, reading device identification information, reading entity identification information, reading time information, reading location information, reading environment information, or a reading result hash value, the normalization identification information generation means generates the normalization identification information based on the reading result, and the anomaly determination pattern matching means uses the reading evidence information to match it with the anomaly determination pattern.

6. The normalized identification information generation means generates individualized part label identification information based on a combination of the part type identification information, the individual identification information, and the supplier identification information when the target part is a part that is managed individually, and generates group-managed part label identification information based on a combination of the part type identification information, the group identification information, and the supplier identification information when the target part is a part that is managed in a group or batch, and the individualized part label identification information or the group-managed part label identification information is used for at least one of generating the target object correspondence relationship information, generating the evidence correspondence relationship information, or matching with the abnormality determination pattern, as described in claim 1.

7. The appraisal and certification system according to claim 1, wherein the object comparison information includes at least one of the part-side identification information and the packaging-side identification information, an appearance image, shape information, dimension information, material information, weight information or surface condition information of the target part, an appearance image, packaging condition information, sealing condition information, opening condition information or clean condition information of the target packaging, packaging condition information relating to clean environment-compatible packaging, shipping packaging, individual packaging, collective packaging, storage packaging or in-process packaging covering the target part, or at least one of the physical characteristic information obtained from the target part or the target packaging.

8. The expert certification system according to claim 1, wherein the evidence comparison information includes at least one of the following: issuance information by the supplier, delivery information, inspection information, shipment information, receipt information, warranty information or invalidation information; information regarding the shipment, receipt, storage, installation, replacement, repair, cleaning, reuse, return or disposal of the target parts or the target packaging; registration time information for the normalized identification information, registration entity identification information, update time information, update entity identification information, expiration information or reissue information; expected correspondence information showing the expected correspondence relationship between the normalized identification information and the target parts or the target packaging; or evidence information corresponding to the normalized identification information.

9. The appraisal and certification system according to claim 1, wherein the abnormal condition data structure includes at least one of the following: a first abnormality determination pattern in which the object correspondence information is consistent and the evidence correspondence information is inconsistent; a second abnormality determination pattern in which the object correspondence information is inconsistent and the evidence correspondence information is consistent; a third abnormality determination pattern in which both the object correspondence information and the evidence correspondence information are inconsistent; a fourth abnormality determination pattern in which the read evidence information is inconsistent with the registration history information or the status evidence information; or a fifth abnormality determination pattern in which the same normalized identification information is associated with multiple target parts or multiple target packaging.

10. The authentication and certification system according to claim 1, wherein the abnormality information generation means generates label authenticity abnormality information including the packaging inconsistency abnormality when the object comparison information corresponding to the target part is matched with the normalized identification information and the object comparison information corresponding to the target packaging is not matched with the normalized identification information; generates label authenticity abnormality information including the part substitution abnormality when the object comparison information corresponding to the target packaging is matched with the normalized identification information and the object comparison information corresponding to the target part is not matched with the normalized identification information; and generates label authenticity abnormality information including the label substitution abnormality or the reading evidence inconsistency abnormality when the part ID display information or the reading evidence information is matched with the abnormality determination pattern indicating that it is not matched with the object comparison information or the evidence comparison information.

11. The authentication certification system according to claim 1, wherein the abnormality information generation means generates label authenticity abnormality information, including the duplicate identifier abnormality, the identification information reuse abnormality, or the invalidated use abnormality, based on the abnormality condition data structure, when the same normalized identification information is associated with multiple target parts, when the same normalized identification information is associated with multiple target packaging, when the same normalized identification information is associated with target parts and target packaging that are inconsistent with each other, when the invalidated normalized identification information is read again, when the reissued normalized identification information is inconsistent with the registration history information, or when the individual identification information or the group identification information is reused under conditions different from the registration history information.

12. The authentication system according to claim 1, wherein the acquisition means acquires the evidence comparison information from at least one of a recording infrastructure utilizing distributed ledger technology, a recording infrastructure not utilizing distributed ledger technology, or a recording infrastructure using hybrid technology combining both recording infrastructures, and the authentication result generation means associates at least one of the normalized identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the authentication result information with at least one of the issuance event, shipping event, receipt event, inspection event, storage event, installation event, replacement event, repair event, cleaning event, use event, return event, invalidation event, or disposal event relating to the target part or the target packaging.

13. The appraisal and certification system according to claim 1, wherein the appraisal and certification result information includes at least one of the following: the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the type of the label authenticity anomaly information, the identification information of the anomaly determination pattern that formed the basis of the label authenticity anomaly information, the determination category indicating the correspondence authenticity between the part ID display information and the target part or the target packaging, the reacquisition request information requesting the reacquisition of the part ID display information, or the additional acquisition request information requesting the additional acquisition of the object comparison information or the evidence comparison information.

14. The appraisal and certification system further comprises an auxiliary judgment and explanation processing means, which is configured to perform at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing based on at least one of the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the anomaly determination pattern, the label authenticity anomaly information, or the appraisal and certification result information when the auxiliary judgment and explanation processing is selected or requested as an execution target, and when the AI ​​processing is performed, the auxiliary judgment and explanation processing means provides a candidate anomaly determination pattern, anomaly type candidate, The appraisal and certification system according to claim 1, comprising: generating AI judgment auxiliary information including at least one of anomaly occurrence probability or anomaly priority; when the XAI processing is performed, the auxiliary judgment explanation processing means generates XAI explanation information indicating at least one of the candidate anomaly judgment pattern, the candidate anomaly type or the label authenticity anomaly information, corresponding relationship information, reading evidence information, anomaly conditions, feature quantities or contributions; and associating at least one of the AI ​​judgment auxiliary information and the XAI explanation information generated by the auxiliary judgment explanation processing means with the label authenticity anomaly information or the appraisal and certification result information.

15. The appraisal and certification system further comprises a protection and verification processing means, which, when a protection and verification processing is selected or requested as the target of execution, protects at least one of the following as protected information: the part ID display information, the normalized identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the appraisal and certification result information, and performs PQC (Post-Quantum Cryptography) processing and QKD (Quantum KeyD) processing on the protected information. The protection verification process is configured to perform a protection verification process that includes at least one of the following: (Istruction) cooperation process or Zero-KnowledgeProof (ZKP) process, and when the PQC process is performed, the protection verification process means obtains or generates quantum-resistant cryptographic protection information that includes at least one of the following: PQC signature information, PQC verification result information, PQC key exchange information, cryptographic scheme identification information, PQC transition state information, or PQC resignature request state information, and when the QKD cooperation process is performed, The protection verification processing means acquires or generates quantum key distribution-related information including at least one of QKD key distribution method identification information, QKD key distribution session identification information, QKD key material identification information, QKD key distribution status information, QKD applicability information, QKD transition status information, or key distribution management information corresponding to QKD, and when the ZKP processing is performed, the protection verification processing means generates ZKP information that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the protection target information, based on the protected target information or commitment information or hash information generated from the protected target information, or acquires ZKP verification result information corresponding to the ZKP information, and associates at least one of the post-quantum cryptographic protection information, the quantum key distribution-related information, the ZKP information, or the ZKP verification result information generated or acquired by the protection verification processing means with the label authenticity anomaly information or the appraisal certificate result information.

16. The protection verification processing means generates information indicating a PQC verification continuity anomaly when the post-quantum computer cryptographic protection information does not match the PQC verification conditions corresponding to the part ID display information, the normalization identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the appraisal certificate result information, and the quantum key distribution related information matches the part ID display information, the normalization identification information, the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the label authenticity anomaly information, or the appraisal certificate result information The appraisal and certification system according to claim 15, wherein if the QKD linkage conditions are not consistent with the corresponding QKD linkage conditions, information indicating a QKD linkage continuity anomaly is generated, and if the ZKP information or the ZKP verification result information is not consistent with the corresponding authenticity conditions, the object correspondence conditions, the evidence correspondence conditions, the read evidence conditions, or the anomaly determination conditions, information indicating a ZKP verification inconsistency anomaly is generated, and at least one of the PQC verification continuity anomaly, the QKD linkage continuity anomaly, or the ZKP verification inconsistency anomaly is reflected in the label authenticity anomaly information or the appraisal and certification result information.

17. The authentication and certification system according to claim 1, wherein the abnormal condition data structure is a data structure that holds a correspondence between the abnormal determination pattern and the abnormality type, the data structure is composed of at least one of a table format, a rule set format, a set of conditional expressions format, a decision tree format, a classification model format, a policy data format, or a format that can be referenced by a rule engine, the data structure is stored in the abnormal condition data structure storage means as a single data structure or a combination of multiple data structures, the abnormal determination pattern matching means identifies the abnormal determination pattern corresponding to a combination of the object correspondence information, the evidence correspondence information and the read evidence information based on the correspondence held in the data structure, and the abnormality information generation means generates the label authenticity abnormality information based on the abnormality type associated with the identified abnormal determination pattern.

18. A computer-based authentication method, comprising the steps of: acquiring information for identifying a target component or target packaging corresponding to a target component, which constitutes or is used in equipment used for semiconductor manufacturing, measurement, assembly, inspection, maintenance, or transport, and which includes: component ID display information attached to, displayed, recorded, or associated with the target component or target packaging; and reading trail information relating to the reading of the component ID display information, which includes information relating to the fact that the component ID display information was read or information relating to the identity of the subject, time, location, equipment, environment, or reading result of the reading; generating normalized identification information from the component ID display information, which includes at least component type identification information, individual identification information or group identification information, and supplier identification information; acquiring object comparison information which is a comparison target with the normalized identification information and includes at least one of component-side identification information displayed, recorded, embedded, or associated with the target component and packaging-side identification information displayed, recorded, embedded, or associated with the target packaging; and determining that the entity corresponding to the supplier identification information is the target Steps to acquire evidence comparison information including at least one of supplier evidence information showing evidence of processing performed on the parts or the target packaging, distribution evidence information showing evidence of the distribution process of the target parts or the target packaging, registration history information showing the history of registration or modification of the normalization identification information, or status evidence information showing evidence of the state of the target parts or the target packaging, and comparing the normalization identification information with the target object comparison information to generate object correspondence relationship information showing the consistency between the normalization identification information and the target parts or the target packaging, and the normalization identification information Steps include: comparing the report with the evidence comparison information to generate evidence correspondence relationship information that shows the consistency between the normalized identification information and the evidence included in the evidence comparison information; comparing the combination of the object correspondence relationship information, the evidence correspondence relationship information and the read evidence information with an anomaly judgment pattern stored in the anomaly condition data structure to identify the anomaly judgment pattern corresponding to the combination; and determining, based on the anomaly type associated with the identified anomaly judgment pattern, label substitution anomaly, part substitution anomaly, packaging mismatch anomaly, duplicate identifier anomaly, identification information reuse anomaly,A method for authenticating and verifying label authenticity, comprising: a step of generating label authenticity anomaly information including at least one of a post-invalidation usage anomaly or a read evidence inconsistency anomaly; and a step of generating authentication certificate result information indicating the correspondence authenticity between the part ID display information and the target part or the target packaging, based on at least one of the target object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, and the label authenticity anomaly information.

19. The appraisal and certification method according to claim 18, further comprising the step of performing at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing based on at least one of the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the anomaly determination pattern, the label authenticity anomaly information, or the appraisal and certification result information when an auxiliary determination and explanation processing is selected or requested as an object to be executed, wherein when the AI ​​processing is performed, AI determination auxiliary information including at least one of candidate anomaly determination patterns or candidate anomaly types is generated, and when the XAI processing is performed, XAI explanation information indicating at least one of the input information, correspondence relationship information, read evidence information, anomaly conditions, feature quantities, or contributions that form the basis of the candidate anomaly determination pattern, the candidate anomaly type, or the label authenticity anomaly information is generated, and associating at least one of the AI ​​determination auxiliary information and the XAI explanation information with the label authenticity anomaly information or the appraisal and certification result information.

20. The aforementioned appraisal and certification method further includes a step of performing an appraisal and certification process on the aforementioned appraisal and certification method when an appraisal and certification process is selected or requested as the target of the appraisal and certification process, with respect to the aforementioned appraisal and certification method, the applicator includes a step of performing an appraisal and certification process on the aforementioned appraisal and certification method, which includes at least one of the following: Post-Quantum Cryptography (PQC) processing, Quantum Key Distribution (QKD) linkage processing, or Zero-KnowledgeProof (ZKP) processing, and when the PQC processing is performed, The authentication method according to claim 18, comprising: acquiring or generating quantum computer cryptographic protection information; if the QKD linkage processing is performed, acquiring or generating quantum key distribution related information; if the ZKP processing is performed, generating ZKP information that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the protected information; or acquiring ZKP verification result information corresponding to the ZKP information; and associating at least one of the post-quantum computer cryptographic protection information, the quantum key distribution related information, the ZKP information, or the ZKP verification result information with the label authenticity anomaly information or the authentication certificate result information.

21. The authentication method according to claim 20, further comprising at least one of the following steps: generating information indicating a PQC verification continuity anomaly when the post-quantum cryptographic protection information is inconsistent with the PQC verification conditions; generating information indicating a QKD linkage continuity anomaly when the quantum key distribution related information is inconsistent with the QKD linkage conditions; or generating information indicating a ZKP verification mismatch anomaly when the ZKP information or the ZKP verification result information is inconsistent with the corresponding authenticity conditions, the object correspondence conditions, the evidence correspondence conditions, the read evidence conditions, or the anomaly determination conditions, wherein at least one of the PQC verification continuity anomaly, the QKD linkage continuity anomaly, or the ZKP verification mismatch anomaly is reflected in the label authenticity anomaly information or the authentication result information.

22. A computer acquisition means for acquiring information for identifying a target component used in or in the manufacture, measurement, assembly, inspection, maintenance, or transport of semiconductors, or a target component used in such a device, or a target package corresponding to the target component, comprising: component ID display information attached to, displayed, recorded, or associated with the target component or the target package; and reading trail information relating to the reading of the component ID display information, comprising information relating to the fact that the component ID display information was read or information relating to the identity of the subject, time, location, device, environment, or reading result of the reading; a normalized identification information generation means for generating normalized identification information from the component ID display information, comprising at least component type identification information, individual identification information or group identification information, and supplier identification information; an object comparison information acquisition means for acquiring object comparison information that is a comparison target with the normalized identification information and comprises at least one of component-side identification information displayed, recorded, embedded, or associated with the target component and packaging-side identification information displayed, recorded, embedded, or associated with the target package; and an object corresponding to the supplier identification information relating to the target component or the target package. A means for acquiring evidence comparison information that includes at least one of the following: supplier evidence information showing evidence of processing performed; distribution evidence information showing evidence of the distribution process of the target part or the target packaging; registration history information showing the history of registration or modification of the normalization identification information; or status evidence information showing evidence of the state of the target part or the target packaging; a means for acquiring evidence comparison information that includes at least one of the following: supplier evidence information showing evidence of processing performed; distribution evidence information showing evidence of the distribution process of the target part or the target packaging; a means for comparing the normalization identification information with the target object comparison information to generate target object correspondence relationship information showing the consistency between the normalization identification information and the target part or the target packaging; and a means for comparing the normalization identification information with the evidence comparison information. Correspondence relationship information generation means that compares the normalized identification information and the evidence included in the evidence comparison information to generate evidence trail correspondence relationship information; abnormality determination pattern matching means that compares the combination of the object correspondence relationship information, the evidence trail correspondence relationship information and the read evidence trail information with an abnormality determination pattern stored in the abnormality condition data structure to identify the abnormality determination pattern corresponding to the combination; and based on the abnormality type associated with the identified abnormality determination pattern, label substitution abnormality, part substitution abnormality, packaging mismatch abnormality, duplicate identifier abnormality, identification information reuse abnormality,A program for functioning as an abnormality information generation means that generates label authenticity abnormality information including at least one of a usage abnormality after invalidation or a reading evidence inconsistency abnormality, and an authentication certificate result generation means that generates authentication certificate result information indicating the correspondence authenticity between the part ID display information and the target part or the target packaging, based on at least one of the target object correspondence relationship information, the evidence correspondence relationship information, the reading evidence information, and the label authenticity abnormality information.

23. The program according to claim 22, wherein the computer is further configured as an auxiliary determination explanation processing means that, when an auxiliary determination explanation processing is selected or requested as an execution target, performs at least one of artificial intelligence (AI) processing and explainable AI (XAI) processing based on at least one of the object correspondence relationship information, the evidence correspondence relationship information, the read evidence information, the anomaly determination pattern, the label authenticity anomaly information, or the appraisal certificate result information, wherein the auxiliary determination explanation processing means generates AI determination auxiliary information including at least one of candidate anomaly determination patterns or candidate anomaly types when the AI ​​processing is performed, generates XAI explanation information indicating at least one of the input information, correspondence relationship information, read evidence information, anomaly conditions, feature quantities, or contributions that form the basis of the candidate anomaly determination pattern, the candidate anomaly type, or the label authenticity anomaly information, and associates at least one of the AI ​​determination auxiliary information and the XAI explanation information with the label authenticity anomaly information or the appraisal certificate result information.

24. The computer is further configured to function as a protection verification processing means that, when a protection verification process is selected or requested to be executed, performs at least one of the following as protection target information: Post-Quantum Cryptography (PQC) processing, Quantum Key Distribution (QKD) linkage processing, or Zero-Knowledge Proof (ZKP) processing, with at least one of the following as protection target information: part ID display information, normalized identification information, object correspondence information, evidence correspondence information, read evidence information, label authenticity anomaly information, or appraisal certification result information; and the protection verification processing means is configured to perform the PQC processing when the PQC processing is executed. The program according to claim 22, wherein, when such a condition is met, it acquires or generates quantum-resistant cryptographic protection information; when the QKD linkage process is executed, it acquires or generates quantum key distribution-related information; when the ZKP process is executed, it generates ZKP information that allows verification that predetermined correspondence authenticity conditions, object correspondence conditions, evidence correspondence conditions, read evidence conditions, or anomaly determination conditions are met without disclosing at least a part of the protected information; or it acquires ZKP verification result information corresponding to the ZKP information; and it associates at least one of the quantum-resistant cryptographic protection information, the quantum key distribution-related information, the ZKP information, or the ZKP verification result information with the label authenticity anomaly information or the appraisal certificate result information.

25. The protection verification processing means generates information indicating a PQC verification continuity anomaly when the post-quantum computer cryptographic protection information is inconsistent with the PQC verification conditions, generates information indicating a QKD linkage continuity anomaly when the quantum key distribution related information is inconsistent with the QKD linkage conditions, or generates information indicating a ZKP verification mismatch anomaly when the ZKP information or the ZKP verification result information is inconsistent with the corresponding authenticity condition, the object correspondence condition, the evidence correspondence condition, the read evidence condition, or the anomaly determination condition, and reflects at least one of the PQC verification continuity anomaly, the QKD linkage continuity anomaly, or the ZKP verification mismatch anomaly in the label authenticity anomaly information or the appraisal certificate result information.

Images