CN105849739A

CN105849739A - A system and method for authentication

Info

Publication number: CN105849739A
Application number: CN201380080974.9A
Authority: CN
Inventors: 唐志鸿; 何毅俊
Original assignee: Hong Kong Logistics And Supply Chain Management Application Engineering Research And Development Centre
Current assignee: Hong Kong Logistics And Supply Chain Management Application Engineering Research And Development Centre
Priority date: 2013-09-17
Filing date: 2013-09-17
Publication date: 2016-08-10
Anticipated expiration: 2033-09-17
Also published as: CN105849739B; WO2015039279A1

Abstract

A system and method for authentication comprising the steps of receiving a verification request for verifying an identifier, an authentication code and an authentication password associated with an authentication subject; verifying the identifier, the authentication code and the authentication password by locating a record associated with the identifier in an authentication database; and whereupon the identifier, the authentication code and the authentication password has been verified, generate a replacement authentication code and a replacement check code for updating the record in the authentication database.

Description

Checking system and verification method

Technical field

The present invention relates to a kind of checking system and verification method, and particularly, but not exclusively, relate to one Plant the system and method that product or service are verified.

Background technology

In current economic activity, fake products, Counterfeit Item and unwarranted product or service are constantly made Becoming various problem, wherein fake products and Counterfeit Item occur in scope and relate to from luxury goods to infant formula In the commodity in vast field and service.The scope of the problem thus caused is then to hold from intellectual property owners The economic loss being subject to causes to (employ in its goods danger or harmful components) personation health-oriented products Health risk.

But, imitated person in product or the duplication of service, copy or aspect of playing tricks becomes more and more experienced, Be accomplished by consumer, retailer and law enforcement agency can more easily believable product or service and that Make a distinction between a little incredible products or service.Goods producer has been made some and attempts, i.e. By the unique district allowing consumer, retailer or law enforcement agency that the true and false of product is identified Other features protects its product from imitated.The example how realizing this identification includes, uses only one Without the packaging of two, the label of such as watermark or laser printing, need more complicated supporting set owing to it manufactures It is standby so that these labels obtain more is difficult to copy.

But, the technology involved by the manufacture of these labels, and be used to manufacture these only nothings The instrument of the label of two becomes more popular with popular so that fake producer or imitated person also are able to copy this A little unique packagings are as a part for fake products.Thus cause for enabling consumers to district For this one side of the true and false of other product or service, many unique labels become the most effective.

Summary of the invention

According to the first aspect of the invention, it is proposed that a kind of verification method, it includes step:

Receive checking request, for checking the identifier relevant to verifying main body and check code；

Check tag symbol and check code is come by positioning the record relevant to identifier in validation database； And

Replace check code at identifier and check code by generating after checking, verify data for updating Record in storehouse.

In the embodiment of first aspect, this verification method further comprises the steps of: use and replaces check code Update the record in validation database, so that the record relevant to identifier uses replaces check code Update.

In the embodiment of first aspect, the record relevant to identifier is updated to and replaces check code It is associated.

According to the second aspect of the invention, it is proposed that a kind of verification method, it further comprises the steps of:

Receive checking request, for checking identifier, identifying code and the checking password relevant to verifying main body；

By in validation database position the record relevant to identifier come check tag symbol, identifying code and Checking password；And

Generate after identifier, identifying code and checking password are by inspection and replace identifying code and replace verification Code, for updating the record in validation database.

In the embodiment of second aspect, this verification method further comprise the steps of: use replace identifying code and Replace check code and update the record in validation database, so that the record relevant to identifier makes Update with replacing check code with replacing identifying code.

In the embodiment of second aspect, the record relevant to identifier is updated to and replaces identifying code It is associated with replacing check code.

According to the third aspect of the invention we, it is proposed that a kind of verification method, it includes step:

Receive checking request, for checking the identifier relevant to verifying main body, again identifying code and again Checking password；

Carry out check tag symbol by positioning the record relevant to identifier in validation database, again verify Code and again verify password；And

Identifier, again identifying code and again checking password by inspection after generate replace again verify Code, replacement identifying code and replacement check code, for updating the record in validation database.

In the embodiment of the third aspect, this verification method further comprises the steps of: use replacement and again verifies Code, replace identifying code and replace check code update the record in validation database so that with mark The record use that knowledge symbol is relevant is replaced again identifying code, replacement identifying code and replacement check code and is updated.

In the embodiment of the third aspect, the record relevant to identifier is updated to again test with replacing Card code, replacement identifying code and replacement check code are associated.

In the embodiment of second and third aspect, checking password and/or again checking password are by user It is manually entered.

In the embodiment of second and third aspect, checking request receives from reading device module, should Reading device module be configured to come the identifier of autocorrelative checking main body, check code, identifying code and / or again identifying code communicate.

In the embodiment of second and third aspect, identifier, check code, identifying code and/or again Identifying code is stored on one or more labeling apparatus, these one or more labeling apparatus be configured to Checking main body labels.

In the embodiment of second and third aspect, this verification method further comprises the steps of: use and replaces school Test code, replace identifying code and/or replace again identifying code to update the check code of storage on labeling apparatus, to test Card code and/or again identifying code.

In the embodiment of second and third aspect, use replace check code, replace identifying code and/or Replace again identifying code to update on labeling apparatus the check code of storage, identifying code and/or identifying code again Step includes replacement check code, replaces identifying code and/or replace again identifying code transmission to reading device mould Block.

In the embodiment of second and third aspect, reading device module is configured with replacing verification Code, replace identifying code and/or replace again identifying code to update on labeling apparatus the check code of storage, checking Code and/or again identifying code.

In the embodiment of second and third aspect, the checking of storage on one or more labeling apparatus Code and again identifying code are configured to only when providing respective checking password or again in more new procedures It is only interchangeable during checking password.

In the embodiment of second and third aspect, checking password and/or again checking password are at one Or store on multiple labeling apparatus.

In the embodiment of second and third aspect, verify password and/or checking password can not again Read by reading device module.

In the embodiment of second and third aspect, this verification method further comprises the steps of: generation and replaces weight New checking password and/or replacement checking password, for updating the record in validation database.

In the embodiment of second and third aspect, this verification method further comprises the steps of: use and replaces weight New checking password and/or replace checking password and update the record in validation database so that with mark The record that symbol is relevant uses to replace again checking password and/or replace checking password and updates.

In the embodiment of second and third aspect, the record relevant to identifier is updated to and replaces Again checking password and/or replacement checking password are associated.

In the embodiment of second and third aspect, this verification method further comprises the steps of: use and replaces weight New checking password and/or replacement checking password update and store again on one or more labeling apparatus Checking password and/or checking password.

In the embodiment of first, second, and third aspect, generate replace check code, replace identifying code, Replace checking password, replace again identifying code and/or replace again checking password for updating and identifier phase The step of record closed include using protection code module to process check code, identifying code, checking password, Again identifying code and/or again checking password thus generate replacement check code, replace identifying code, replace checking Password, replace again identifying code and/or replace and again verify the step of password.

In the embodiment of first, second, and third aspect, this verification method further comprises the steps of: when mark When knowing symbol by inspection, the signal that transmission is examined.

In the embodiment of first, second, and third aspect, labeling apparatus includes near-field communication (NFC) Device.

In the embodiment of first, second, and third aspect, identifier, check code, identifying code, test Demonstrate,prove password, again identifying code, again verify that password, replacement check code, replacement identifying code, replacement are verified Password, replace again identifying code and/or replace again checking password encrypted.

In the embodiment of first, second, and third aspect, checking main body is product.

In the embodiment of first, second, and third aspect, identifier, check code, identifying code, test Card password, again identifying code and/or again checking password are alphanumeric character strings.

In the embodiment of first, second, and third aspect, alphanumeric character string is random-length.

In the embodiment of first, second, and third aspect, protection code module is configured with pre- Fixed algorithm of code generation generates replacement check code, replaces identifying code, replacement checking password, replacement weight Password is verified in new identifying code and/or replacement again.

In the embodiment of first, second, and third aspect, algorithm of code generation be configurable to generate with The alphanumeric character string of machine.

In the embodiment of first, second, and third aspect, reading device module is handheld device.

In the embodiment of first, second, and third aspect, handheld device is smart mobile phone, multimedia Equipment or panel computer.

According to the fourth aspect of the invention, it is proposed that a kind of checking system, including:

Gateway, its be configured to receive checking request, for check the identifier relevant to verifying main body and Check code；

Inspection module, it is configured in validation database position the record relevant to identifier and comes Check tag symbol and check code；And

In the embodiment of fourth aspect, this checking system also includes: routine, and it is used for using Replace check code and update the record in validation database, so that the record relevant to identifier makes Update with replacement check code.

In the embodiment of fourth aspect, the record relevant to identifier is updated to and replaces check code It is associated.

According to the fifth aspect of the invention, it is proposed that a kind of checking system, including:

Gateway, it is configured to receive checking request, for check the identifier relevant to verifying main body, Identifying code and checking password；

Inspection module, it is configured in validation database position the record relevant to identifier and comes Check tag symbol, identifying code and checking password；And

In the embodiment of the 5th aspect, this checking system also includes: routine, and it is used for using Replace identifying code and replacement check code updates the record in validation database, so that and identifier Relevant record uses to replace identifying code and replace check code and updates.

In the embodiment of the 5th aspect, the record relevant to identifier is updated to and replaces identifying code It is associated with replacing check code.

According to the sixth aspect of the invention, it is proposed that a kind of checking system, including:

Gateway, it is configured to receive checking request, for check the identifier relevant to verifying main body, Again identifying code and again verify password；

Inspection module, it is configured in validation database position the record relevant to identifier and comes Check tag symbol, again identifying code and again verify password；And

In the embodiment of the 6th aspect, this checking system also includes: routine, and it is used for using Replace again identifying code, replace identifying code and replace the record that check code updates in validation database, Replace again identifying code, replacement identifying code so that the record relevant to identifier uses and replace verification Code updates.

In the embodiment of the 6th aspect, wherein relevant to identifier record is updated to and replaces weight New identifying code, replacement identifying code and replacement check code are associated.

In the embodiment of the 5th and the 6th aspect, checking password and/or again checking password are by user It is manually entered.

In the embodiment of the 5th and the 6th aspect, checking request receives from reading device module, should Reading device module be configured to come the identifier of autocorrelative checking main body, check code, identifying code and / or again identifying code communicate.

In the embodiment of the 5th and the 6th aspect, identifier, check code, identifying code and/or again Identifying code is stored on one or more labeling apparatus, these one or more labeling apparatus be configured to Checking main body labels.

In the embodiment of the 5th and the 6th aspect, checking system also includes: routine, and it is used for Use and replace check code, replace identifying code and/or replace again identifying code to update storage on labeling apparatus Check code, identifying code and/or identifying code again.

In the embodiment of the 5th and the 6th aspect, be used for using replacement check code, replace identifying code and / or replace again identifying code to update check code, the identifying code of storage on labeling apparatus and/or again to verify The routine of code includes replacement check code, replaces identifying code and/or replace again identifying code transmission to reading Take apparatus module.

In the embodiment of the 5th and the 6th aspect, reading device module is configured with replacing school Test code, replace identifying code and/or replace again identifying code to update the check code of storage on labeling apparatus, to test Card code and/or again identifying code.

In the embodiment of the 5th and the 6th aspect, the checking of storage on one or more labeling apparatus Code and again identifying code are configured to only when providing respective checking password or again in more new procedures It is only interchangeable during checking password.

In the embodiment of the 5th and the 6th aspect, checking password and/or again checking password are at one Or store on multiple labeling apparatus.

In the embodiment of the 5th and the 6th aspect, verify password and/or checking password can not again Read by reading device module.

In the embodiment of the 5th and the 6th aspect, checking system also includes: routine, and it generates Replace again checking password and/or replace checking password, for updating the record in validation database.

In the embodiment of the 5th and the 6th aspect, checking system also includes: routine, and it uses Replace again checking password and/or replacement checking password updates the record in validation database, so that The record relevant to identifier uses to replace again checking password and/or replace checking password and updates.

In the embodiment of the 5th and the 6th aspect, the record relevant to identifier is updated to and replaces Again checking password and/or replacement checking password are associated.

In the embodiment of the 5th and the 6th aspect, this checking system also includes: routine, and it is used Update at one or more labeling apparatus in using to replace again checking password and/or replace checking password Again the checking password of upper storage and/or checking password.

In the embodiment of the 5th and the 6th aspect, generate and replace check code, replace identifying code, replacement Checking password, replace again identifying code and/or replace again checking password for update relevant to identifier The routine of record, it includes using protection code module to process check code, identifying code, checking mouth Make, again identifying code and/or again checking password in case generate replace check code, replace identifying code, replacement Verify password, replace again identifying code and/or replace the routine again verifying password.

In the embodiment of the four, the 5th and the 6th aspect, this checking system also includes: routine, It is for when identifier is by inspection, transmitting the signal being examined.

In the embodiment of the four, the 5th and the 6th aspect, labeling apparatus includes near-field communication (NFC) Device.

In the embodiment of the four, the 5th and the 6th aspect, identifier, check code, identifying code, test Demonstrate,prove password, again identifying code, again verify that password, replacement check code, replacement identifying code, replacement are verified Password, replace again identifying code and/or replace again checking password encrypted.

In the embodiment of the four, the 5th and the 6th aspect, checking main body is product.

In the embodiment of the four, the 5th and the 6th aspect, identifier, check code, identifying code, test Card password, again identifying code and/or again checking password are alphanumeric character strings.

In the embodiment of the four, the 5th and the 6th aspect, alphanumeric character string is random-length.

In the embodiment of the four, the 5th and the 6th aspect, protection code module is configured with pre- Fixed algorithm of code generation generates replacement check code, replaces identifying code, replacement checking password, replacement weight Password is verified in new identifying code and/or replacement again.

In the embodiment of the four, the 5th and the 6th aspect, algorithm of code generation be configurable to generate with The alphanumeric character string of machine.

In the embodiment of the four, the 5th and the 6th aspect, reading device module is handheld device.

In the embodiment of the four, the 5th and the 6th aspect, handheld device is smart mobile phone, multimedia Equipment or panel computer.

According to the seventh aspect of the invention, it is proposed that a kind of label for verifying product, including:

Memory module, its be configured to store the identifier relevant to product, check code, identifying code and/ Or identifying code again, wherein when identifier, check code, identifying code and/or again identifying code connect by communication When mouth reads, use and replace check code, replace identifying code and/or replace again identifying code to update verification Code, identifying code and/or identifying code again.

In the embodiment of the 7th aspect, memory module is configured to receive from communication interface replace verification Code, replace identifying code and replace again identifying code thus update store in a storage module check code, test Card code and again identifying code.

In the embodiment of the 7th aspect, memory module is additionally configured to store the checking relevant to product Password and again verify password；And wherein identifying code and again identifying code be configured to only when update journey It is only interchangeable when sequence providing respective checking password or again verifies password.

In the embodiment of the 7th aspect, checking password and/or again checking password can not be by reading Take apparatus module to read.

According to the eighth aspect of the invention, it is proposed that a kind of method for verifying product, including step:

Add the label of the embodiment according to the 7th aspect；

Read label to obtain identifier, and obtain check code, identifying code or again in identifying code Any one；And

By identifier, and by check code, identifying code or again any one transmission in identifying code to root According to fourth aspect, the 5th aspect or the embodiment of the 6th aspect.

Accompanying drawing explanation

The mode illustrated with reference to accompanying drawing now so that embodiments of the present invention to be described, its In:

Fig. 1 is for operation such as the calculation server of the checking system according to an embodiment of the invention Schematic diagram；

Fig. 2 is the schematic diagram of the embodiment of the checking system according to an embodiment of the invention；

Fig. 3 is the block diagram of the embodiment of the authentication server of Fig. 1；

Fig. 4 is the block diagram for verifying the embodiment of the label of product as shown in Figure 2；

Fig. 5 is the flow chart of the operation example of checking system；

Fig. 6 be for the checking according to an embodiment of the invention, for verifying the label of product Block diagram；

Fig. 7 A is the flow chart of the operation example according to an embodiment of the invention；

Fig. 7 B is the block diagram for verifying the embodiment of the label of product as shown in Figure 6, its basis Shown in Fig. 7 A, the embodiment of operation operates；

Fig. 8 A is the flow chart of the operation example according to an embodiment of the invention；

Fig. 8 B is the block diagram for verifying the embodiment of the label of product as shown in Figure 6, its basis Shown in Fig. 7 A, the embodiment of operation operates；

Fig. 9 A is the flow chart of the operation example according to an embodiment of the invention；And

Fig. 9 B is the block diagram for verifying the embodiment of the label of product as shown in Figure 6, its basis Shown in Fig. 7 A, the embodiment of operation operates.

Detailed description of the invention

According to Fig. 1, it is shown that embodiments of the present invention.This embodiment is configured to supply one and tests Card system, including:

Gateway, it is configured to receive checking asks, and this checking request is used for checking and verifying that main body is relevant Identifier；

Inspection module, it is configured in validation database position the record inspection relevant to identifier Test identifier, once identifier by inspection, use identification generator generate replacement identifier for Update the record in validation database.

Preferably, in one example, checking request is configured to receive from reading device module, institute State reading device module to be configured to the identifier of next autocorrelative checking main body is communicated, described mark Know symbol and there is the label being configurable for storing identifier, and described identifier is stored in and has worked as mark In the label being updated with replacement identifier when knowing the inspection of symbol.

In this embodiment, gateway, inspection module and identification generator connect by having suitable user The computer of mouth realizes, or operates on that computer.This computer can pass through any calculating support Structure realizes, and this computing architecture includes independent PC, user terminal/server framework, " mute " terminal/big Type frame structure or any suitable framework.Calculating equipment is properly programmed to realize the present invention.

According to Fig. 1, it is shown that computer or the schematic diagram of calculation server 100, in this embodiment This computer or calculation server 100 include for operating (completely or at least partially) operation according to this The server 100 of the checking system of one embodiment of invention.Server 100 includes receiving, storing Required for the computer instruction suitable with execution, suitable assembly.These assemblies can include processing unit 102, read only memory (ROM) 104, random access memory (RAM) 106 and input/ Outut device, such as disc driver 108, input equipment 110 (such as ethernet port, USB end Mouthful etc.), display 112 (such as liquid crystal display, active display or other display being suitable for any Device) and communication link 114.Server 100 include instruction, these instruction may be included in ROM 104, In RAM 106 or disc driver 108 and can be processed by processing unit 102.Multiple communication can be provided Link 114, it is connected respectively to one or more calculating equipment, such as server, personal computer, Terminal, wireless or handheld computing device.At least one Tong Guo telephone wire in multiple communication links or its The link of its type is connected to outside calculating network.

Server can include storage device, such as disc driver 108, and it can include that solid state hard disc drives Device, mechanical hard disk drive, CD-ROM drive or tape drive.Server 100 can use single disk drive Device or multiple disc driver.Server 100 also can have applicable operating system 116, and it resides in In the disc driver of server 100 or ROM.

This system has the data base 120 residing in disk or other storage device, and it is configured to storage At least one record 122.Data base 120 and the server 100 with interface communicate, and it passes through The computer software resided on server 100 realizes.Selectively, data base 120 also can realize For independent Database Systems, it calculates network or other type of communication link and server via outside 100 communicate.

According to Fig. 2, illustrated therein is the embodiment of checking system 200.In this embodiment, clothes Business device 100 be used as checking system 200 part, as authentication server 202, this authentication server 202 are configured to communicate with reading device module 204, and this reading device module 204 is configured to read And/or the label that write is relevant to checking main body 208 (ratio is if desired for the product verified or service).At this In example, authentication server 202 is configured to process the checking request of the identifier stored in the label. Server 202 is configured to communicate with reading device module 204, so that once reading device module 204 read the identifier of storage in outgoing label, then this identifier is transferred to server 202 for carrying out Inspection.

In this example, the form that reading device module 204 is possible is scanner, reading device, intelligence Mobile phone or by the self-service terminal machine 206 of user operation, its be configured to communicate with server 202 and from Checking main body 208 reading identifier, checking main body 208 can be commodity item or the checking of service with Card.Preferably, checking main body 208 (such as commodity item) can include relevant to checking main body 208 Labeling apparatus 210, it is configured to label to checking main body 208.Labeling apparatus 210 can lead to subsequently Cross the reading device module 204 for checking to read.Between reading device module 204 and server Communication link can be the Internet connect 212 or the computer network operated on the telephone line or its The communication network of its type.

Preferably, as skilled in the art will understand, (it is included in authentication server 202 and reads Take the communication link between apparatus module 204, between reading device module 204 and checking main body 208 Communication link 214 and the Internet connect 212) communication link use AES encryption technology or its Its encryption method (such as SSL or SSH) is encrypted.It is advantageous that, each equipment, Between module or gateway, the data of transmission are protected, thus avoid and crack checking system or reversely Engineering.

The identity of reading device module 204 (such as scanner or self-service terminal machine 206) also can be by one Individual or multiple safety approach further protections.In one example, it is possible to E token (E-token) is made For: the identity of self-service terminal machine, protected space during wherein E token can be used in self-service terminal machine 206 Self-service terminal machine individual's certificate of interior storage initializes, and wherein protected storage can be only chip The reference of upper unit；Platform public-key cryptography, it is by verifying that system provides；And, unique self-service Terminating machine identity (ID) character string, the alphanumeric character string of such as 32 bytes.Self-service terminal machine 206 May also require that user is able to access that authentication server 202 at it to log in before inquiry data, by This reduces the risk of unwarranted access.When self-service terminal machine 206 or reading device module 204 log in To authentication server 202, self-service terminal machine 206 or reading device module 204 by required E token letter Breath sends to authentication server 202.Once Successful login, authentication server 202 can generate and provide Key is to self-service terminal machine 206 for random (such as above-mentioned 32 bytes), and it can be used subsequent request With for the reading device module 204 of self-service terminal machine 206, scanner or other form and server 202 Between the data encryption of each communication.The example of these keys can include for encryption and identify specific The generation of the process key of communication process and use, and encryption key can be generated and in different groups Between part, any data of transmission are encrypted.

In this example, relevant to each checking main body 208 labeling apparatus 210 also can be by secure side The protection of case.In one example, label is being enabled so that from tag reader data and to label write Before data, it is necessary to correctly enter at least one password.Unwarranted self-service terminal machine or reading dress Put module also to be able to be shielded to prevent to read in the case of not accessing password, write, revise data, The identifier stored the most in the label.Additionally, some information in the label can provide with manufacturer , different password lockings.Preferably, authentication server 202 is configured to support the close of item-level Code controls.

Preferably, labeling apparatus 210 also includes tamper resistant device, and it is configured such that label can not From checking main body in the case of labeling apparatus 210 or relevant checking main body 208 be not by physical damnification Remove on 208.This tamper resistant device such as can be configured such that once to be distorted, and label will not Work again and can not be read and write by reading device module 204, but implementing at some In mode, label can have extra routine, and it allows the reading device module 204 through authorizing Indicating label enters " distorting " pattern, and permission label is removed or this by it from product or checking main body 208 Body departs from, and it is destroyed to be therefore prevented from label.This reuses with allowing tag security.

With reference to Fig. 3, which show the embodiment of the authentication server 202 being used as checking system Block diagram.In this embodiment, authentication server 202 includes gateway 302, inspection module 304, tests Card data base 306 and identification generator 308, its can by the computer systems or with this calculating Hardware or software that machine system is relevant are embodied as assembly that is independent or that share, thus serve as or provide conduct Function necessary to the server 100 of checking system work.

In this example, gateway 302 module is configured to communicate with reading device module 204 thus obtains The identifier relevant to checking main body 208 (such as product).Owing to checking main body 208 has relevant Labeling apparatus 210, then labeling apparatus 210 first passes through reading device module 204 and reads, thus again Obtain the identifier stored in the label.

Once go out identifier from tag reader, then reading device module 204 will by sending checking request Identifier transmits to authentication server 202.This checking request includes from tag reader identifier and sends out subsequently Deliver to the gateway 302 of authentication server 202.In nonrestrictive example, identifier can be random That formed, that formed with algorithm/mathematical way or formed in a combination thereof, predetermined length, through meter Calculate random-length alphanumeric character string, or this identifier can be bar code, QR code or other The computer readable code of form or identifier.Gateway 302, the most successfully reads identifier, then will connect The identifier received is transferred to inspection module 304 for testing.

Inspection module 304 can process subsequently, in order to by positioning in validation database 306 and marking Know the relevant record of symbol and carry out check tag symbol.Preferably, validation database 306 stores multiple and respective The record that identifier is relevant, it will specify that effective identifier.This validation database 306 can be subject to (it can be checked by trust for manufacturer, retailer, law enforcement agency or other authorized personnel or shareholder The true and false of checking main body 208) security control, and the available identifier representing effective product or service Record fill.Record in validation database 306 can include identifier, or in some examples In, relevant product or information on services such as brand, style, color, shipment record or other attribute or About the distribution information to authorized party, thus increase safety and the availability of proof procedure.

In this example, if inspection module 304 located the record of coupling in validation database 306, Then identifier is successfully checked, and once main body relevant, that pass through checking is considered as genuine, and tests Card message or alarm can be sent to user, and described checking message or alarm are used for notifying that user verifies main body The true and false of 208.After successfully inspection, authentication server 202 uses identification generator 308 next life Becoming to replace identifier, it can be different from the alphanumeric character of the identifier being examined String.Identification generator 308 can will be replaced by updating the record in validation database 306 subsequently Identifier write verification data base 306, so that replace identifier to be stored in validation database 306 In to replace the identifier that has been examined.As the result of This move, the most read The identifier taken and check can not be tested in future, this is because the next one of checking main body 208 Testing procedure ask that and reads the replacement mark just having generated and being stored in validation database 306 Symbol, but in order to record the purpose keeping and logging in, the old identifier being replaced can be at another embodiment Middle continuation is stored in the record on validation database 306, but as old record its can by with Follow-up checking is cannot be used in logging in purpose.In these other embodiment, the rule of checking Then can old identifier remains to a number of follow-up replacement identifier by suitable being adjusted so that Enough it is considered checking to be effective.This communication link intermittent or unreliable time, product is tested Have superiority for card.

Once replacing identifier to be stored in validation database 306, this replacement identifier is also routed to Gateway 302, so that it can be transferred to reading device module 204, is used for updating and verifies main body 208 Relevant label.This allows label to use replacement identifier to be updated, and once allows relevant to this label Product in the future the most verified, will read this is because read label by reading device module 204 Taking replacement identifier, it is now stored in validation database 306 for specific checking main body 208.

In this example, identification generator 308 can include protecting code module 310, and it is configured to Generate and replace identifier.When identification generator 308 is for replacing identifier to protection code module 310 Sending request, this protection code module 310 generates to be replaced identifier and replacement identifier returns to mark Symbol maker 308.In nonrestrictive example, protection code module 310 is configured to produce into can The security code of (such as 4 bytes to 20 bytes or other size any) of elongated degree, is generated Code can be random alphanumeric character string, and be disposable and unique (because It to be different from any code checked before).As those skilled in the art it can be appreciated that It is the replacement identifier generating algorithm of other form can be utilized to generate at protection code module 310 and replace mark Know symbol.

In some embodiments, authentication server 202 may also include error module 312, and it is configured For the unsuccessful inspection handled by place's reason inspection module 304.In one example, error module 312 The record in more new database can be carried out, that specify handled by the reading device module 204 being determined by The quantity of unsuccessful inspection.Doing so provides certain advantage, because error module also can be to gateway 302 Error message is provided, its self-service terminal machine 206, reading device that can be further transmitted to be correlated with, sweeps Retouch instrument or other is for showing the reading device module 204 of error message.

About Fig. 4, it illustrates the block diagram of label for verifying product, including memory module, This memory module is configured to store the identifier relevant to product, wherein passes through communication interface when identifier When conducting interviews, this identifier uses replacement identifier to update.

In this embodiment, labeling apparatus 210 includes memory module 402, and it can include for storing The rewritable nonvolatile memory of identifier.Labeling apparatus 210 may also include other storage device, Other storage device described includes one-time programmable memory and volatile memory, and it is used for storing Identifier and the information in addition to identifier.

When labeling apparatus 210 is read by reading device module 204, can set up at labeling apparatus 210 And the communication link 214 between reading device module 204.Communication interface 404 retrieves at storage mould The identifier of storage in block 402.In a nonrestrictive example, identifier is alphanumeric character String.Communication interface 404 transmits the identification to reading device module 204 subsequently, and it is tested further The inspection of card server 202.Once succeed inspection, then authentication server 202 will replace identifier Transmission is to reading device module 204, and reading device module 204 will replace identifier transmission to communication Interface 404.Replace identifier to be updated in the memory module 402 of labeling apparatus 210 subsequently.

In alternate embodiments, labeling apparatus 210 may also include protection code module 406, its It is configured to the most successfully check and is generated as replacing identifier.This replacement identifier is subsequently at labeling apparatus The memory module 402 of 210 is updated, and also can be transferred to authentication server 202 for Update the relative recording in validation database 306.In this selectable embodiment, because label Equipment 210 has the protection code module 406 of itself, and this replacement identifier can be by label 210 Generate and send back server 100 for being updated, or selectively, server 100 and mark Sign 210 both of which and can generate replacement identifier, but the two protection code module must use phase Same generation method or algorithm carry out work, so that the replacement identifier generated by label 210 is with logical The identifier of replacing crossing server 100 generation must be consistent.These selectable embodiments excellent Gesture is, replaces identifier and need not transmit to reading device module 204 or self-service end from server 100 Terminal 206, once reduces replacement identifier during the transmission and is intercepted or unwarranted access Or adulterated risk.

In one example, labeling apparatus 210 uses passive RFID device to realize, this passive RFID Device is configured to communicate with rfid reader device.In this example, include can for RFID label tag The nonvolatile memory rewritten, it is for storing the alphanumeric character string as identifier.RFID Label cocoa is embedded in checking main body 208 during manufacturing checking main body 208.Selectable RFID Can embed in the material block of such as plastics or epoxy resin, thus prevent from this label being cracked or reverse work Journey.Additionally, label can be configured in the feelings that label or checking main body 208 do not carry out physical damage It is non-removable under condition, thus ensure that unique mark in all one's life for each checking main body 208, Wherein destroyed label is configured to show as to be read by any reading device.

The advantage of these illustrative embodiments is, product can be verified and guarantee for testing simultaneously The identifier of card can not be copied by fake producer.Because identifier is configured in each read operation send out Raw changing, even if then it is captured by fake producer or some other unauthorized party, identifier can not be by For verifying imitated product or service falsely.To retail situation, such as, babies ' formula milk powder tank or Other products can be with the labeling apparatus 210 of anti-damage, and it can be checked by retailer or consumer. Once identifier is read out, then this identifier can be examined and be used for verifying, and simultaneously Retailer and consumer are able to ensure that this identifier being read can not be copy because its By through the change that authorizes, therefore allowing to ensure the true and false of product during each read operation, this be because of It is a continuous print process for the checking of product and is not the checking of the single-point can copied by fake producer.

Below the program summarized according to Fig. 5 is described the example of the operation of checking system.

First, the identifier of labeling apparatus 210 is associated with product to be verified, described product to be verified Product e.g. luxury goods, food or any other product, or filled by the reading of user operation Put the service that module 204 (such as scanner, reading device or self-service terminal machine 206) reads.One In embodiment, identifier can be the code of variable-length, or can include and labeling apparatus 210 phase Other features closed.In one preferred embodiment, labeling apparatus 210 can be anti-tamper RFID label tag.At some in other embodiment, labeling apparatus 210 is configured to by through authorizing Reading device module 204 read, this reading device module 204 can according to hand-held scanner rifle, PDA, embedded in the smart phone of near-field communication (NFC) technology or there is rfid reader device Self-service terminal machine 206 or the form of other reading device any.

From the beginning of step 502, read identifier upon reading device module 204, then identifier Be sent to the gateway 302 of checking system from reading device, described checking system includes for performing checking Authentication server 202.In some embodiments, authentication server 202 can be information processing system, Such as computer, PDA, mobile device etc..Therefore, identifier being transferred to checking system, this can By wired or wireless communication link, this communication link includes but not limited to the Internet or self-aided terminal Machine.In one embodiment, checking system and reading device can be single unit.

In step 504, once receive identifier in checking system, then authentication server 202 passes through In the validation database 306 of authentication server 202, position the record relevant to identifier carry out check tag Symbol.In one embodiment, the identifier entered is entered by authentication server 202 with the data in data base Row mates thus performs checking.At some in other embodiment, authentication server 202 will be with entrance The relevant information and date storehouse of identifier in data carry out mating thus perform checking.In some examples In, validation database 306 can be a part (the most same unit) for authentication server 202.One A bit in other example, validation database 306 can be beyond authentication server 202.

In step 506, the most successfully verifying identifier, authentication server 202 checks and identifier phase Operation that close, that not yet complete.In one embodiment, the described operation not yet completed may be included in figure Any one in proving program shown in 5.When located the behaviour that not yet completes relevant with identifier When making, these operations will restart in step 508.

But, if the inspection of identifier is unsuccessful, then in step 516, checking system will record specific Identifier and proof procedure will terminate.

In step 510, once it is determined that identifier effectively and not exists the operation not yet completed, then testing Identification generator 308 in card server 202 generates replaces identifier.In one embodiment, mark Know the part (the most same unit) that symbol maker 308 can be authentication server 202.At some its In its example, identification generator 308 can be beyond authentication server 202.In one example, Replace identifier and can be different from code original identifier, variable-length.Preferably, replace Identifier is not associated with any previous labeling apparatus 210.It is further preferred that raw by identifier Grow up to be a useful person before 308 generations, replace identifier and be not positioned in validation database 306.In step 516, In the case of generating and replacing and mistake or fault occur during identifier, checking this situation of system record and Terminate proving program.

In step 512, be once successfully generated replacement identifier, then replacement is marked by authentication server 202 Know symbol transmission and be written to labeling apparatus 210.In one embodiment, checking system can have gateway 302, It performs the transmission replacing identifier to labeling apparatus 210.In another embodiment, authentication server 202 available outside transmission systems transmit replacement identifier.In some embodiments, will replace Identifier is transferred to labeling apparatus 210, and this can pass through wired or wireless communication link, such as but does not limits In the Internet or self-service terminal machine.Once receive replacement identifier at labeling apparatus 210, then label sets Standby 210 override original identifier to replace identifier.In the embodiment some described, replace Identifier can be the code including different length, or can include that other is relevant to labeling apparatus 210 Feature.Replacing the transmission of identifier and address period makes a mistake or in the case of fault, the service for checking credentials Device 202 records this situation and terminates proving program.

In step 514, once it is successfully completed and replacement identifier is written to labeling apparatus 210, checking clothes Business device 202 updates the record of validation database 306, in order to will replace identifier and labeling apparatus 210 phase Association.In some embodiments, original identifier is removed from validation database 306.In step 516, the reproducting periods at validation database 306 makes a mistake or in the case of fault, authentication server 202 record this situation and terminate proving program.

Once be successfully updated validation database 306, then proving program completes and terminates.

According to Fig. 6, it is shown that for verifying the label 600 of product, it includes memory module 602, and this is deposited Storage module 602 be configured to store the identifier relevant to product, check code 604, identifying code 606 and/ Or identifying code 610 again, wherein when identifier, check code 604, identifying code 606 and/or again verify When code 610 is read by communication interface, check code 604, identifying code 606 and/or identifying code 610 again Use to replace check code 614, replacement identifying code and/or replace identifying code again and update.

Preferably, memory module 602 is configured to receive from communication interface replace check code 614, replacement Identifying code and replace again identifying code so as to update in memory module 602 storage check code 604, test Card code 606 and again identifying code 610.

Preferably, memory module 602 is additionally configured to store the checking password 608 relevant to product and weight New checking password 612；And wherein identifying code 606 and again identifying code 610 be configured to only work as renewal It is only interchangeable when program providing each checking password 608 or again verifies password 612.In other words, Identifying code 606 and again identifying code 610 are by checking password 608 and again to verify password 612 respectively Carry out write-protected.Selectively, checking password 608 and/or again identifying code 612 be stored in and be different from In the memory module of memory module 602.

Preferably, verify password and/or again verify that password can not be read out by reading device module. Selectively, password can be read by a reading device module, and this reading device module is different from and is configured Reading device mould for reading identifier, check code 604, identifying code 606 and/or identifying code 610 again Block.

Preferably, label 600 is configured to authorized or unwarranted reading device module 204 read, this reading device module 204 can according to hand-held scanner rifle, PDA, embedded near Communication (NFC) technology smart phone or have rfid reader device or any other read The form of device.

The examples of three operations of checking system and label 600 will according to Fig. 7 A, 7B, 8A, 8B, Program outlined in 9A and 9B describes.

First, the identifier of labeling apparatus 600 is associated with product to be verified, described product to be verified Product e.g. luxury goods, food or any other product, or filled by the reading of user operation Put the service that module 204 (such as scanner, reading device or self-service terminal machine 206) reads.

According to Fig. 7 A and 7B, illustrated therein is a checking system, including:

Gateway, it is configured to what the identifier relevant to checking main body and check code were tested by reception Checking request；

Replace check code at identifier and check code by generating after checking, be used for updating validation database In record.

About Fig. 7 A, in the checking system worked with quick checking mode 700, upon reading Apparatus module 204 reads the identifier stored in labeling apparatus 600 and check code 604 then starts step Rapid 702, in step 704, this identifier and check code 604 are sent to checking system from reading device The gateway 302 of system, this gateway 302 includes the authentication server 202 for performing checking.Real at some Executing in mode, authentication server 202 can be information processing system, such as computer, PDA, movement Equipment etc..It addition, identifier and check code 604 are transferred to checking system, this can by wired or Wireless communication link 214, this communication link 214 includes but not limited to the Internet.

Once receive identifier and check code in checking system, then authentication server 202 is by testing Card server 202 validation database 306 in position the record relevant to identifier come check tag accord with and Check code 604.In one embodiment, authentication server 202 is by the identifier entered and check code 604 Carry out mating to perform checking with the data in data base.At some in other embodiment, checking clothes Data in the information and date storehouse relevant to the identifier entered and check code 604 are carried out by business device 202 Coupling is to perform checking.In some instances, validation database 306 can be authentication server 202 A part (the most same unit).At some in other example, validation database 306 can be in checking Beyond server 202.

If the inspection of identifier and/or check code 604 is unsuccessful, then checking system is by specific for record Identifier and proving program will terminate.Selectively, error message will be transferred to reading device, with Indicate that inspection is unsuccessful.

In step 706, once it is determined that identifier and check code 604 are effectively, authentication server 202 is raw Become to replace check code 614.In one example, replace check code 614 and can be different from original verification Code, the code of variable-length.Preferably, replace check code 614 not with any previous labeling apparatus 600 are associated.It is further preferred that be not in validation database 306 before replacing check code 614. Authentication server 202 updates the record of validation database 306, in order to will replace check code 614 and label Equipment 600 is associated.In some embodiments, by original check code 604 from validation database 306 Remove.

Once being successfully generated replacement check code 614, replacement check code 614 is transmitted by authentication server 202 To reading device module 204.Alternatively, in step 710, authentication server 202 transmits and to verify The relevant product information of product, and this product information is via the equipment including reading device module 214 It is shown to user.In one embodiment, checking system can have gateway 302, and this gateway 302 performs Replace the check code 614 transmission to labeling apparatus 600.In another embodiment, authentication server 202 Available outside transmission system transmits replacement check code 614.In some embodiments, school is replaced Testing code 614 can be described logical by wired or wireless communication link 214 to the transmission of labeling apparatus 600 Letter link 214 is such as but not limited to the Internet.

According to Fig. 7 B, in reading device module 204, once receive replacement check code 614, this reading Apparatus module 204 overrides original check code 604 with replacing check code 614.In the enforcement some described In mode, replace check code 614 can be the code including different length, or can include other with The relevant feature of labeling apparatus 600.In some embodiments, reading device module is configured to replace Change code transfer to labeling apparatus 600, and labeling apparatus is configured to override with replacing check code 614 Original check code 604.

According to Fig. 8 A and 8B, it is shown that checking system, including:

About Fig. 8 A, in the checking system worked with Product Validation pattern 800, upon reading Apparatus module 204 reads the identifier being stored in labeling apparatus 600 and identifying code 606 then starts step Rapid 802, and require that user provides checking password 618 to checking system 800.Preferably, verify close Code is manually entered reading device module 204.In an exemplary embodiment, once through authorizing Shop in be successfully completed transaction, then password can be printed upon on sales check.An optional enforcement In mode, before being successfully completed transaction, password can be shown to consumer.In step 804, mark Symbol, identifying code 606 and checking password 618 send the gateway 302 to checking system from reading device, should Checking system includes that authentication server 202 is to perform checking.In some embodiments, authentication server 202 can be information processing system, such as computer, PDA, mobile device etc..It addition, will mark Knowing symbol and check code 604 is transferred to checking system, this can pass through wired or wireless communication link 214, This communication link 214 includes but not limited to the Internet.

In checking system, once receive identifier, identifying code 606 and checking password 618, then verify Server 202 is relevant to identifier by positioning in the validation database 306 of authentication server 202 Record comes check tag symbol, identifying code 606 and checking password 618.In one embodiment, checking clothes The business device 202 identifier, identifying code 606 and checking password 618 to entering enters with the data in data base Row mates thus performs checking.At some in other embodiment, authentication server 202 will be with entrance The relevant information and date storehouse of identifier, identifying code 606 and checking password 618 in data carry out Join thus perform checking.In some instances, validation database 306 can be authentication server 202 A part (the most same unit).At some in other example, validation database 306 can be in checking Beyond server 202.

If the inspection of identifier, identifying code 606 and/or checking password 618 is unsuccessful, then verify system Record unique identifier and proof procedure will be terminated by system.Selectively, error message will be transmitted To specifying the unsuccessful reading device of inspection.

Once it is determined that go out identifier, identifying code 606 and checking password 618 effectively, then in step 806, Authentication server 202 regains checking password 608 from validation database 306, and generates replacement school Test code 614, replace identifying code 616 and replace checking password.In one example, replace check code 614, Replacing identifying code 616 and replace the code that checking password can be variable-length, it is different from original school Test code 604, original identifying code 606 and original checking password 608.Preferably, check code is replaced 614, replace identifying code 616 and replacement checking password is uncorrelated with any existing labeling apparatus 600.More Add preferably, be not on before replacing check code 614, replacement identifying code 616 and replacing checking password In validation database 306.Authentication server 202 updates the record in validation database 306, thus will Replace check code 614, replacement identifying code 616 and replacement checking password to be associated with labeling apparatus 600. In some embodiments, original check code 604, original identifying code 606 and original checking mouth 608 are made to remove from validation database 306.

Once it is successfully generated replacement check code 614, replaces identifying code 616 and replace checking password, checking Server 202 is by original checking password 608, replacement check code 614, replacement identifying code 616 and replaces Change checking password transmission to reading device module 204.Alternatively, in step 810, authentication server 202 Transmit the product information relevant to product to be verified, and this product information is via including reading device mould The equipment of block 204 is shown to user.In one embodiment, checking system can have gateway 302, should Gateway 302 performs original checking password 608, replacement check code 614, replacement identifying code 616 and replaces Change the transmission to labeling apparatus 600 of the checking password.In another embodiment, authentication server 202 can Transmission system outside Li Yonging is transmitted original checking password 608, is replaced check code 614, replaces and test Card code 616 and replacement checking password.In some embodiments, original checking password 608, replace Check code 614, replacement identifying code 616 and replacement checking password can pass through to the transmission of labeling apparatus 600 Wired or wireless communication link 214, described communication link 214 is such as but not limited to the Internet.

According to Fig. 8 B, in reading device module 204, once receive original checking password 608, replace Changing check code 614, replace identifying code 616 and replace checking password, reading device module 204 gives label Equipment 600 provides original checking password 608, so that original identifying code 608 is configured to After 3DES checking between labeling apparatus 600 and reading device module 204, original testing can be used Card password 608 is replaced.Reading device module uses and replaces check code 614, replaces identifying code 616 and Replace checking password and override original check code 604, original identifying code 606 and original checking mouth Make 608.In the embodiment some described, replace check code 614, replace identifying code 616 and replace Changing checking password can be the code including different length, or can include other and labeling apparatus 600 phase The feature closed.In some embodiments, reading device module is configured to original checking password 608, replacement check code 614, replacement identifying code 616 and replacement checking password transmission are to labeling apparatus 600, And labeling apparatus is configured with replacing check code 614, replacing identifying code 616 and replace checking mouth Order overrides original check code 604, original identifying code 606 and original checking password 608.

According to Fig. 9 A and 9B, illustrated therein is checking system, including:

Gateway, it is configured to receive for checking the identifier relevant to verifying main body, again identifying code Again the checking request of password is verified；

About Fig. 9 A, in the checking system worked with the overall situation again Validation Mode 900, upon Reading device module 204 reads the identifier being stored in labeling apparatus 600 and identifying code 610 again Then start step 902, and password 622 is supplied to checking system 900 to require user again to verify. Preferably, checking password is manually entered reading device module 204 again.At exemplary embodiment In, once in the shop through authorizing, it is successfully completed transaction, then password can be printed upon on sales check. In step 904, identifier, again identifying code 610 and again checking password 622 send from reading device To the gateway 302 of the system of checking, described checking system includes that authentication server 202 is to perform checking.? In some embodiments, authentication server 202 can be information processing system, such as computer, PDA, Mobile device etc..It addition, by identifier, again identifying code 610 and again checking password 622 transmit To checking system, this can be included by wired or wireless communication link 214, this communication link 214 but It is not limited to the Internet.

In checking system, once receive identifier, again identifying code 610 and again verify password 622, Then authentication server 202 is by location and identifier in the validation database 306 of authentication server 202 Relevant record comes check tag symbol, again identifying code 610 and again verifies password 622.Implement one In mode, authentication server 202 is by the identifier of entrance, again identifying code 610 and again verifies password 622 carry out mating to perform checking with the data in data base.At some in other embodiment, test Card server 202 by enter identifier, again identifying code 610 and again checking password 622 relevant Information and date storehouse in data carry out mating to perform checking.In some instances, validation database 306 can be a part (the most same unit) for authentication server 202.At some in other example, Validation database 306 can be beyond authentication server 202.

If the inspection of identifier, again identifying code 610 and/or again checking password 622 is unsuccessful, Then checking system will record specific identifier and proof procedure will terminate.Selectively, error message Reading device will be transferred to, unsuccessful to indicate inspection.

In step 906, once it is determined that identifier, again identifying code 610 and again checking password 622 Effectively, authentication server 202 regains checking password 612 again from validation database 306, and Generate and replace check code 614, replacement identifying code 616, replacement checking password, replace identifying code 620 again Again password is verified with replacing.In one example, replace check code 614, replacement identifying code 616, replace Change checking password, replace again identifying code 620 and replace the generation that checking password again can be variable-length Code, its be different from original check code 604, original identifying code 606, original checking password 608, Original identifying code again 610 and the original password of checking again 612.Preferably, replace check code 614, Replace identifying code 616, password is verified in replacement, replace again identifying code 620 and password is verified in replacement again Uncorrelated with any existing labeling apparatus 600.

It is further preferred that replace check code 614, replace identifying code 616, replacement checking password, replacement Again it is not in validation database 306 before identifying code 620 and replacement checking password again.Checking Server 202 updates the record in validation database 306, thus replacement check code 614, replacement is tested Card code 616, replacement are verified password, are replaced again identifying code 620 and replace checking password and label again Equipment 600 is associated.In some embodiments, by original check code 604, original identifying code 606, original checking password 608, original identifying code again 610 and original checking password again 612 remove from validation database 306.

Once it is successfully generated replacement check code 614, replaces identifying code 616, replacement checking password, replacement Again password is verified in identifying code 620 and replacement again, and authentication server 202 is by original checking mouth again Make 612, replace check code 614, replace identifying code 616, replace checking password, replace identifying code again With replacing, 620 verify that password transmission is to reading device module 204 again.Alternatively, in step 910, test The product information that card server 202 transmission is relevant to product to be verified, and this product information is via bag The equipment including reading device module 204 is shown to user.

In one embodiment, checking system can have gateway 302, and it performs original checking mouth again Make 612, replace check code 614, replace identifying code 616, replace checking password, replace identifying code again 620 verify the password transmission to labeling apparatus 600 again with replacing.

In another embodiment, the available outside transmission system of authentication server 202 is transmitted original The password of checking again 612, replace check code 614, replace identifying code 616, replace checking password, replace Change again identifying code 620 and password is verified in replacement again.In some embodiments, original again test Card password 612, replacement check code 614, replacement identifying code 616, replacement are verified password, are replaced and again test Demonstrate,prove code 620 and replacement verifies that password can be led to by wired or wireless to the transmission of labeling apparatus 600 again Letter link 214, described communication link 214 is such as but not limited to the Internet.

According to Fig. 9 B, once receive in reading device module 204 the original password of checking again 612, Replace check code 614, replacement identifying code 616, replacement checking password, replace again identifying code 620 and Replacing and again verify password, reading device module 204 provides original checking again to labeling apparatus 600 Password 612, so that original identifying code again 612 is configured at labeling apparatus 600 and reads After 3DES checking between apparatus module 204, the original password of checking again 612 can be used to replace Change.Reading device module use replace check code 614, replace identifying code 616, replace checking password, Replace again identifying code 620 and replace again checking password to override original check code 604, original Identifying code 606, original checking password 608, original identifying code again 610 and original again testing Card password 612.

In the embodiment some described, replace check code 614, replacement identifying code 616, replace and test Card password, replace again identifying code 620 and replace again checking password can be the generation including different length Code, or other feature relevant to labeling apparatus 600 can be included.

At some in other embodiment, reading device module is configured to original checking mouth again Make 612, replace check code 614, replace identifying code 616, replace checking password, replace identifying code again 620 and replace again that checking password transmission is to labeling apparatus 600, and labeling apparatus is configured with Replace check code 614, replacement identifying code 616, replacement checking password, replace again identifying code 620 and Replace checking password again and override original check code 604, original identifying code 606, original testing Card password 608, original identifying code again 610 and the original password of checking again 612.

Advantageously, this checking system is applicable to not trusted reading device module, and it potentially includes use Rogue program or software program in reversely compiling.In this checking system, reading device module may be only It is only used as communication equipment and carrys out work, be once read, for reading, the code or password that will change. Reading device module can be with NFC reading device included in smart mobile phone or any handheld device The most universal to the checking carried out by the product being equipped with label in any position (at this Position need not costliness labeling apparatus or the self-service terminal machine of trust) anyone for be all can Can.

Advantageously, label is likely used by authentication server and is merely provided to the product being equipped with label The possessory password of checking effectively the most again carry out re-synchronization.The code stored in the label is subject to In the case of rogue program or the amendment of fake products manufacturer, then the identifying code stored in this label may not With the record matching stored in validation database, the owner can re-synchronization label to reset code, its Mate with validation database so that product can be verified again.

Although optional, the embodiment described with reference to the accompanying drawings can be implemented as application programming Interface (API) or as a series of function libraries used by developer or another can be included in Individual software application (operating system of such as terminal or personal computer or the behaviour of portable computing device Make system) in.As a rule, because program module include assist perform specific function routine, Program, object, assembly and data file, those of skill in the art will be understood that software application Function be likely distributed on substantial amounts of routine, object or assembly, in order to realize the most desired Identical function.

Will also be appreciated that, the method and system of the present invention is realized by calculating system entirety or passes through Calculating components of system as directed realizes, and the framework of any suitable calculating system all can use.It will include solely Vertical computer, network computer and special hardware device.It is used herein term " calculating system " " calculating equipment ", these terms are intended to cover the computer hardware being capable of described function Any suitable layout.

It will be appreciated by those of skill in the art that, term " data base " can include any type of having Tissue or amorphous data storage device, data base be capable of described function software, Hardware or combination of the two realize.

Skilled artisans will appreciate that, can be to as by the present invention shown in particular implementation Make substantial amounts of change and/or revise without departing from the spirit or scope of the present invention being broadly described.Cause This, embodiments of the present invention are considered as illustrative and not restrictive in all respects.

Unless stated otherwise, any reference to prior art contained herein be not considered as right This information recognizing as common knowledge.

Claims

1. a verification method, including step:

Described identifier is checked by positioning the record relevant to described identifier in validation database With described check code；And

Check code is replaced by generating after checking, for updating at described identifier and described check code Described record in described validation database.

2. verification method as claimed in claim 1, further comprises the steps of: the described replacement check code of use Update the described record in described validation database, so that described in relevant to described identifier Record uses described replacement check code to update.

3. verification method as claimed in claim 2, wherein relevant to described identifier described record It is updated to be associated with described replacement check code.

4. a verification method, including step:

By in validation database position the record relevant to described identifier check described identifier, Described identifying code and described checking password；And

Generate after described identifier, described identifying code and described checking password are by inspection and replace checking Code and replacement check code, for updating the described record in described validation database.

5. verification method as claimed in claim 4, further comprises the steps of: the described replacement identifying code of use The described record updated in described validation database with described replacement check code, so that with described The described record that identifier is relevant uses described replacement identifying code and described replacement check code to update.

6. verification method as claimed in claim 5, wherein relevant to described identifier described record It is updated to be associated with described replacement identifying code and described replacement check code.

7. a verification method, including step:

By in validation database position the record relevant to described identifier check described identifier, Described identifying code again and described again verify password；And

Generate after described identifier, described identifying code again and the described password of checking again are by inspection Replace again identifying code, replace identifying code and replace check code, for updating in described validation database Described record.

8. verification method as claimed in claim 7, further comprises the steps of: the described replacement of use and again tests Card code, described replacement identifying code and described replacement check code update described in described validation database Record, so that the described record relevant to described identifier uses described replacement identifying code again, institute State replacement identifying code and described replacement check code updates.

9. verification method as claimed in claim 8, wherein relevant to described identifier described record It is updated to relevant to described replacement again identifying code, described replacement identifying code and described replacement check code Connection.

10. the verification method as according to any one of claim 4 to 9, wherein said checking password and / or described again checking password be manually entered by user.

11. such as verification method in any one of the preceding claims wherein, wherein said checking is asked from reading Taking apparatus module to receive, described reading device module is configured to from described relevant checking main body Described identifier, described check code, described identifying code and/or described identifying code again communicate.

12. verification methods as claimed in claim 11, wherein said identifier, described check code, Described identifying code and/or described identifying code again are stored on one or more labeling apparatus, one Or multiple labeling apparatus is configured to label to described checking main body.

13. verification methods as described in claim 11 or 12, further comprise the steps of: the described replacement of use Check code, described replacement identifying code and/or described replacement identifying code again update to be deposited on described labeling apparatus Described check code, described identifying code and/or the described identifying code again of storage.

14. verification methods as claimed in claim 13, wherein use described replacement check code, described Replace identifying code and/or described replacement identifying code again updates the described school of storage on described labeling apparatus Test the step of code, described identifying code and/or described identifying code again to include described replacement check code, described Replace identifying code and/or the transmission of described replacement identifying code again to described reading device module.

15. verification methods as claimed in claim 14, wherein said reading device module is configured to Described replacement check code, described replacement identifying code and/or described replacement identifying code again is used to update in institute State described check code, described identifying code and/or the described identifying code again of storage on labeling apparatus.

16. verification methods as according to any one of claim 12 to 15, wherein in one or On multiple labeling apparatus, described identifying code and the described identifying code again of storage are configured to only when described It is only interchangeable when more new procedures providing respective checking password or again verifies password.

17. verification methods as claimed in claim 16, wherein said checking password and/or described again Checking password stores on the one or more labeling apparatus.

18. verification methods as according to any one of claim 16 to 17, wherein said checking password And/or described again checking password can not be read by described reading device module.

19. verification methods as according to any one of claim 16 to 18, further comprise the steps of: generation Replace again checking password and/or replace checking password, for updating described in described validation database Record.

20. verification methods as claimed in claim 19, further comprise the steps of: the described replacement of use again Checking password and/or described replacement checking password update the described record in described validation database, thus Relevant to described identifier described record is made to use described replacement again verify password and/or described replace Change checking password to update.

21. verification methods as claimed in claim 20, wherein relevant to described identifier described note Record is updated to again verify that with described replacement password and/or described replacement checking password are associated.

22. verification methods as according to any one of claim 19 to 21, further comprise the steps of: use Described replacement verifies that password and/or described replacement checking password update and mark at the one or more again Described checking password and/or the described checking password again of storage on label apparatus.

23. such as verification method in any one of the preceding claims wherein, wherein generate described replacement and verify Code, described replacement identifying code, described replacement checking password, described replacement identifying code again and/or described replace Change again checking password to include using guarantor for the step updating the described record relevant to described identifier Protect code module to process described check code, described identifying code, described checking password, described again to verify Code and/or described checking password again thus generate described replacement check code, described replacement identifying code, described Replace checking password, described replacement identifying code again and/or described replacement and again verify the step of password.

24. such as verification method in any one of the preceding claims wherein, further comprise the steps of: when described mark When knowing symbol by inspection, the signal that transmission is examined.

25. verification methods as according to any one of claim 12 to 24, wherein said labeling apparatus Including near-field communication (NFC) device.

26. verification methods as according to any one of claim 12 to 25, wherein said identifier, Described check code, described identifying code, described checking password, described identifying code again, described again verify Password, described replacement check code, described replacement identifying code, described replacement checking password, described replacement weight New identifying code and/or described replacement verify that password is encrypted again.

27. such as verification method in any one of the preceding claims wherein, wherein said checking main body is to produce Product.

28. such as verification method in any one of the preceding claims wherein, wherein said identifier, described Check code, described identifying code, described checking password, described identifying code again and/or described again verify mouth Order is alphanumeric character string.

29. verification methods as claimed in claim 28, wherein said alphanumeric character string is random Length.

30. verification methods as according to any one of claim 23 to 29, wherein said protection code Module be configured with predetermined algorithm of code generation to generate described replacement check code, described replacement is tested Password is verified in card code, described replacement checking password, described replacement identifying code again and/or described replacement again.

31. verification methods as claimed in claim 30, wherein said algorithm of code generation is configured to Generate random alphanumeric character string.

32. verification methods as according to any one of claim 12 to 31, wherein said reading device Module is handheld device.

33. verification methods as claimed in claim 32, wherein said handheld device be smart mobile phone, Multimedia equipment or panel computer.

34. 1 kinds of checking systems, including:

Inspection module, it is configured in validation database position the note relevant to described identifier Described identifier and described check code are checked in record；And

35. verify system as claimed in claim 34, also include: routine, and it is used for using Described replacement check code updates the described record in described validation database so that with described mark The described record knowing symbol relevant uses described replacement check code to update.

36. verify system, wherein relevant to described identifier described note as claimed in claim 35 Record is updated to be associated with described replacement check code.

37. 1 kinds of checking systems, including:

Inspection module, it is configured in validation database position the note relevant to described identifier Described identifier, described identifying code and described checking password are checked in record；And

38. verify system as claimed in claim 37, also include: routine, and it is used for using Described replacement identifying code and described replacement check code update the described record in described validation database, So that the described record relevant to described identifier uses described replacement identifying code and described replacement school Test code to update.

39. verify system, wherein relevant to described identifier described note as claimed in claim 38 Record is updated to be associated with described replacement identifying code and described replacement check code.

40. 1 kinds of checking systems, including:

Inspection module, it is configured in validation database position the note relevant to described identifier Record is checked described identifier, described identifying code again and described again verifies password；And

41. verify system as claimed in claim 40, also include: routine, and it is used for using Described replacement identifying code again, described replacement identifying code and described replacement check code update in described checking Described record in data base, so that the described record relevant to described identifier uses described replacement Again identifying code, described replacement identifying code and described replacement check code update.

42. verify system, wherein relevant to described identifier described note as claimed in claim 41 Record is updated to relevant to described replacement again identifying code, described replacement identifying code and described replacement check code Connection.

The 43. checking systems as according to any one of claim 37 to 42, wherein said checking password And/or described again checking password be manually entered by user.

The 44. checking systems as according to any one of claim 34 to 43, wherein said checking is asked Receiving from reading device module, described reading device module is configured to from described relevant checking The described identifier of main body, described check code, described identifying code and/or described identifying code again communicate.

45. verify system as claimed in claim 44, wherein said identifier, described check code, Described identifying code and/or described identifying code again are stored on one or more labeling apparatus, one Or multiple labeling apparatus is configured to label to described checking main body.

The 46. checking systems as according to any one of claim 44 or 45, also include: routine, It is used for using described replacement check code, described replacement identifying code and/or described replacement identifying code again to come more Described check code, described identifying code and/or the described identifying code again of storage on new described labeling apparatus.

47. verify system as claimed in claim 46, wherein be used for using described replacement check code, Described replacement identifying code and/or described replacement identifying code again update the institute of storage on described labeling apparatus State in the described routine of check code, described identifying code and/or described identifying code again, including by described Replace check code, described replacement identifying code and/or the transmission of described replacement identifying code again to described reading device Module.

48. verify that system, wherein said reading device module are configured to as claimed in claim 47 Described replacement check code, described replacement identifying code and/or described replacement identifying code again is used to update described Described check code, described identifying code and/or the described identifying code again of storage on labeling apparatus.

The 49. checking systems as according to any one of claim 45 to 48, wherein in one or On multiple labeling apparatus, described identifying code and the described identifying code again of storage are configured to only when described It is only interchangeable when more new procedures providing respective checking password or again verifies password.

50. verify system as claimed in claim 49, wherein said checking password and/or described again Checking password stores on the one or more labeling apparatus.

The 51. checking systems as according to any one of claim 49 or 50, wherein said checking password And/or described again checking password can not be read by described reading device module.

The 52. checking systems as according to any one of claim 49 to 51, also include: routine, It generates replaces again checking password and/or replaces checking password, for updating in described validation database Record.

53. verify system as claimed in claim 52, also include: routine, and it uses described Replace again checking password and/or that described replacement checking password updates in described validation database is described Record so that relevant to described identifier described record use described replacement again verify password and / or described replace checking password update.

54. verify system, wherein relevant to described identifier described note as claimed in claim 53 Record is updated to again verify that with described replacement password and/or described replacement checking password are associated.

The 55. checking systems as according to any one of claim 52 to 54, also include: routine, It is used for using described replacement again to verify, and password and/or described replacement checking password update described one Described checking password and/or the described checking password again of storage on individual or multiple labeling apparatus.

The 56. checking systems as according to any one of claim 34 to 55, wherein generate described replacement Check code, described replacement identifying code, described replacement checking password, described replacement identifying code again and/or institute State the described customary journey replacing again checking password for updating the described record relevant to described identifier Sequence, it includes using protection code module to process described check code, described identifying code, described checking mouth Make, described identifying code again and/or described checking password again be to generate described replacement check code, described Replace identifying code, described replacement checking password, described replacement identifying code again and/or described replacement again to test The routine of card password.

The 57. checking systems as according to any one of claim 34 to 56, also include: routine, It is for when described identifier is by inspection, transmitting the signal being examined.

The 58. checking systems as according to any one of claim 45 to 57, wherein said labeling apparatus Including near-field communication (NFC) device.

The 59. checking systems as according to any one of claim 45 to 58, wherein said identifier, Described check code, described identifying code, described checking password, described identifying code again, described again verify Password, described replacement check code, described replacement identifying code, described replacement checking password, described replacement weight New identifying code and/or described replacement verify that password is encrypted again.

The 60. checking systems as according to any one of claim 34 to 59, wherein said checking main body It it is product.

The 61. checking systems as according to any one of claim 34 to 60, wherein said identifier, Described check code, described identifying code, described checking password, described identifying code again and/or described again test Card password is alphanumeric character string.

62. verify that system, wherein said alphanumeric character string are random as claimed in claim 61 Length.

The 63. checking systems as described in claim 56 to 62, wherein said protection code module is joined It is set to use predetermined algorithm of code generation to generate described replacement check code, described replacement identifying code, institute State replacement checking password, described replacement identifying code again and/or described replacement and again verify password.

The 64. checking systems as described in claim 63, wherein said algorithm of code generation is configured to For generating random alphanumeric character string.

The 65. checking systems as according to any one of claim 45 to 64, wherein said reading device Module is handheld device.

The 66. checking systems as described in claim 65, wherein said handheld device be smart mobile phone, Multimedia equipment or panel computer.

67. 1 kinds of labels being used for verifying product, including:

Memory module, it is configured to the storage identifier relevant to described product, check code, identifying code And/or identifying code again, wherein when described identifier, described check code, described identifying code and/or described Again, when identifying code is read by communication interface, use and replace check code, replace identifying code and/or replacement Again identifying code updates described check code, described identifying code and/or described identifying code again.

68. labels as described in claim 67, wherein said memory module is configured to from described logical Replace described in letter interface check code, described replacement identifying code and described replacement identifying code again thus more New described check code, described identifying code and the described identifying code again of storage in described memory module.

69. labels as according to any one of claim 67 or 68, wherein said memory module also by It is configured to store the checking password relevant to described product and again verify password；And wherein said checking Code and described identifying code again are configured to only when providing respective checking mouth in described more new procedures It is only interchangeable when order or again checking password.

70. labels as described in claim 69, wherein said checking password and/or described again verify Password can not be read by reading device module.

71. 1 kinds are used for the method verifying product, including step:

Product as described in label according to any one of claim 67 to 70 is joined；

Read described label to obtain identifier, and obtain check code, identifying code or identifying code again In any one；And

By described identifier, and by described check code, described identifying code or described identifying code again Any one transmission to checking system as according to any one of claim 34 to 66 is used for examining Test.