CN106372950A - Anti-counterfeiting authentication method for e-commerce and online shopping goods - Google Patents

Abstract

The invention discloses an anti-counterfeit authentication method for e-commerce and online shopping commodities, including: S1, the supplier terminal confirms and authorizes the dealer terminal; S2, after the authorization is successful, the dealer terminal sends an encrypted purchase application and distribution The merchant’s identity information is sent to the supplier’s terminal for purchase operations; S3, after the supplier’s terminal decrypts the information, it verifies the dealer’s identity information; if the verification is successful, it feeds back the encrypted corresponding commodity code to the dealer’s terminal; S4, The dealer terminal decrypts the information to obtain the product code; S5, when the dealer terminal receives the buyer’s transaction request, it encrypts the product code and the dealer’s identity information and sends it to the buyer together with the product; S6, the buyer through the online shopping platform The goods purchased and the identity of the dealer are verified. The invention avoids the risk of data being intercepted or tampered with, so that the security of the anti-counterfeiting verification is higher, and the result of the anti-counterfeiting verification is also more objective and real.

Description

Anti-counterfeiting authentication method for e-commerce and online shopping products

technical field

The invention relates to an anti-counterfeiting authentication method for e-commerce and online shopping commodities, and belongs to the technical field of commodity anti-counterfeiting and store anti-counterfeiting.

Background technique

Nowadays, online shopping has become a fashion, but when people shop online, there is often a problem that has always troubled everyone, that is whether the product is authentic; in addition, the supply channel of the product is also a problem that many consumers care about. When purchasing products overseas, you often want to buy products that are directly mailed from a specific country, rather than products produced by a random factory. Therefore, it is also very necessary to carry out anti-counterfeiting verification on the supply channels of e-commerce (that is, dealers), which can play the role of double insurance.

The patent application with the application number 201110189920.9 discloses a "commodity anti-counterfeiting method based on the path mechanism", which effectively realizes the validity judgment of the identity of the commodity and the seller, thereby preventing the circulation of counterfeit and inferior commodities and recirculated commodities. But this technology still has the following disadvantages:

1. The security of the data transmission process cannot be guaranteed, and there is a risk of data being intercepted or tampered with, so the objectivity and authenticity of the final anti-counterfeiting verification results need to be studied;

2. Every step of the flow of goods must send information to the anti-counterfeiting certification center for confirmation, resulting in excessive service pressure on the anti-counterfeiting certification center;

3. Commodity identification codes and seller IDs are not properly protected and are exposed. Therefore, if others steal a seller’s ID, they can use the seller’s identity to send commodity flow information to the anti-counterfeiting certification center; if the If the counterfeiter sells counterfeit goods, the legitimate rights and interests of the seller of the stolen ID will be violated;

4. The generation process of the unique commodity identification code is not explained, and the randomness cannot be guaranteed, and if the generation principle of the commodity identification code is cracked, it will threaten the stability of the entire system.

Contents of the invention

The purpose of the present invention is to provide an anti-counterfeiting authentication method for e-commerce and online shopping commodities, which can effectively solve the problems existing in the prior art, especially the security in the process of data transmission cannot be guaranteed, and data is intercepted or tampered with. Therefore, the objectivity and authenticity of the final anti-counterfeiting verification results need to be investigated.

In order to solve the above technical problems, the present invention adopts the following technical solution: an anti-counterfeiting authentication method for e-commerce and online shopping commodities, comprising the following steps:

S1, the supplier terminal confirms and authorizes the dealer terminal;

S2, after the authorization is successful, the dealer terminal sends the encrypted purchase application and dealer identity information to the supplier terminal for purchase operation;

S3, after the supplier terminal decrypts the information, verify the dealer's identity information; if the verification is successful, then feed back the encrypted corresponding commodity code (with unique identification) to the dealer terminal (and feed back the corresponding commodity to the dealer );

S4, the dealer terminal decrypts the information to obtain the commodity code;

S5, when the dealer terminal receives the buyer's transaction request, it encrypts the product code and the dealer's identity information and sends it to the buyer together with the product;

S6, the buyer verifies the commodity he purchased and the identity of the dealer through the online shopping platform.

The online shopping platform has the function of CA.

Preferably, step S1 includes:

S11, the supplier terminal, the dealer terminal and the online shopping platform generate their own private keys, and at the same time generate corresponding public keys according to the private keys and store them locally;

S12, the supplier terminal sends the supplier's public key to the online shopping platform and obtains the online shopping platform public key; the dealer terminal sends the dealer's public key to the online shopping platform and obtains the online shopping platform public key;

S13, the online shopping platform sends the supplier's public key to the dealer's terminal, and at the same time sends the dealer's public key to the supplier's terminal;

S14, the supplier terminal confirms and authorizes the dealer terminal.

More preferably, step S14 includes: the supplier terminal generates the dealer's identity information, and sends it to the dealer terminal after encrypting it with the dealer's public key and the supplier's private key, and the dealer terminal uses the dealer's private key and the supplier's private key. The merchant's public key is decrypted to obtain the dealer's identity information. By generating the dealer ID (that is, dealer identity information) by the supplier, since there is no security risk at the source, the source security of the dealer ID can be guaranteed, and if other third-party platforms are used to generate the dealer ID, it is always On the one hand, the uniqueness and randomness of the dealer ID cannot be guaranteed, and the security of data storage on the third-party platform cannot be guaranteed. In addition, information security cannot be guaranteed during the dealer ID transmission process, and man-in-the-middle attacks are prone to occur; in addition, the present invention Use the supplier's private key to encrypt the dealer's ID to ensure that the dealer will not receive the dealer's ID from a fake supplier, use the dealer's public key to encrypt, only the dealer can use the private key to decrypt the information, ensuring information transmission security, reducing the risk of man-in-the-middle attacks.

Preferably, step S2 includes:

After the authorization is successful, the dealer terminal sends the purchase application and the dealer's identity information encrypted with the dealer's private key and the supplier's public key to the supplier's terminal for the purchase operation. In the present invention, the dealer's private key is used to encrypt information, because only the dealer holds the dealer's private key, so that the dealer's purchase information cannot be denied; the supplier's public key is used to encrypt the information, so that only the dealer who holds the dealer's private key Only the real supplier of the private key can decrypt the information, thus ensuring the security of information transmission and preventing the risk of man-in-the-middle attacks such as tampering.

In the aforementioned anti-counterfeiting authentication method for e-commerce and online shopping commodities, step S3 includes: after the supplier terminal decrypts the information, verify the identity information of the dealer; if the verification is successful, according to the purchase information and the identity information of the dealer, distribute Corresponding product code (the supplier will assign a product code for each product), and use the supplier's private key and the dealer's public key to encrypt the product code, and then feed it back to the dealer's terminal (and feed back the corresponding goods to distributors).

In the aforementioned anti-counterfeit authentication method for e-commerce and online shopping commodities, step S4 includes: the dealer terminal decrypts the information with the dealer's private key and the supplier's public key to obtain the commodity code.

Through the above method of data transmission, it is ensured that only a specific dealer can obtain the product code, preventing the product code from being intercepted and used by bad actors, thereby further ensuring data security.

Preferably, in step S5, the public key of the online shopping platform is used to encrypt the commodity code and the dealer's identity information, so that only a specific online shopping platform can obtain the commodity code and the dealer's identity information for commodity anti-counterfeiting verification , ensuring the security of the verification result source.

In the present invention, step S6 includes:

S61, the online shopping platform (using the online shopping platform private key) decrypts the information and obtains the product code and dealer identity information;

S62, the online shopping platform encrypts the commodity code (using the online shopping platform private key and the supplier public key) and sends it to the supplier terminal;

S63, the supplier terminal (using the public key of the online shopping platform and the supplier's private key) decrypts the received information to obtain the commodity code; and then matches the commodity code with the stored dealer identity information (commodity code and dealer identity information is a many-to-one relationship);

S64, if the commodity code exists and is successfully matched with the dealer's identity information, then send (using the public key of the online shopping platform) encrypted dealer's identity information to the online shopping platform;

S65. After the online shopping platform (using the private key of the online shopping platform) decrypts the information, obtain the feedback dealer identity information; then match it with the dealer identity information sent by the buyer. buyers.

In the above method, the supplier terminal can directly obtain the dealer's identity information by using the correspondence table between the dealer's identity information and the commodity code established when the commodity code is assigned.

In the above method, the online shopping platform only sends the commodity code instead of the commodity code and the dealer’s identity information to the supplier’s terminal for verification, so as to prevent the supplier from covering up the dealer, so that the authentication result obtained by the online shopping platform is more accurate. Convincing, more authentic and objective; and if the commodity code and the dealer's identity information are sent to the supplier's terminal for verification, if the verification fails, but the supplier's terminal hides it from the online shopping platform, the online shopping platform will not be able to know Authentic verification results. Therefore, the present invention only sends the commodity code to the supplier terminal for verification, which can make the verification process more transparent. If the verification fails, the supplier terminal will not be able to match the correct dealer identity information, and thus cannot return the correct In this way, the authentication results obtained by the online shopping platform will be more convincing, thereby reducing the authentication risk; in addition, through the above-mentioned method of the present invention, the service pressure of the online shopping platform can be effectively reduced, and work efficiency can be improved.

In the above method, the commodity code is to use the dealer's identity information and the time information of receiving the order and a large number of random numbers as a key (common commodity code) to carry out AES encryption (i.e. symmetric encryption), and then the encryption The result is obtained by performing MD5 (Message Digest Algorithm 5) operation again. The existing commodity codes are public and one type of commodity shares a common commodity code, which can only be used as the electronic label of the commodity, while the commodity code in the present invention is based on the existing commodity code, using the dealer's identity information It is obtained by performing AES encryption with the time information of receiving the order and a large-digit random number as the key, and then performing MD5 operation on the encrypted result, so that the product code of the same product will also be different (one product corresponds to one product) Code, that is to say, each product code generated is unique and irregular), and it is impossible to guess unknown product codes based on known product codes, which can prevent product codes from being maliciously generated by third parties, and further improve the security of anti-counterfeiting authentication.

Compared with the prior art, the present invention has the following beneficial effects:

1. Through the use of the online shopping platform to realize the communication between the supplier's terminal and the dealer's terminal, and to verify the identity of the purchased product and the dealer, and at the same time encrypt important information in the transmission process based on cryptography (such as product code and dealer's ID). Identity information), thus avoiding the risk of data being intercepted or tampered with, protecting the legitimate rights and interests of dealers, and at the same time making the security of anti-counterfeiting verification higher, and the results of anti-counterfeiting verification are more objective and real;

2. In the present invention, the supplier terminal encrypts the product code by using the supplier's private key and the dealer's public key and then feeds it back to the dealer terminal, thereby ensuring that only a specific dealer can obtain the product code, preventing Commodity codes are intercepted and used by bad actors, thus further ensuring data security;

3. Commodity code among the present invention is to use dealer's identity information and time information of receiving order and large-digit random number as key (to common commodity code) to carry out AES encryption, then carry out MD5 operation again to this encryption result and Obtained; the existing commodity code is public and a class of commodity shares a kind of commodity code, which can only be used as the electronic tag of the commodity, and the commodity code in the present invention is based on the existing commodity code, using the distribution The identity information of the merchant, the time information of receiving the order, and the large-digit random number are used as the key to perform AES encryption, and then the encrypted result is obtained by performing MD5 operation; thus, the commodity code of the same commodity will also be different (one commodity Corresponding to a product code), unique and irregular, it is impossible to guess the unknown product code based on the known product code, which can prevent the product code from being maliciously generated by a third party, further improving the security of anti-counterfeiting certification and the stability of the entire system;

4. In the present invention, the online shopping platform only sends the product code instead of the product code and the dealer’s identity information to the supplier’s terminal for verification, thereby preventing the supplier from covering up the dealer and making the authentication result obtained through the online shopping platform more accurate. Convincing, more real, objective (that is to say, commodity anti-counterfeiting certification in the present invention is interactive, and the supplier simply returns a result and cannot pass, only when the supplier returns correct dealer identity information, And on the online shopping platform, the dealer’s identity information can be matched with the dealer’s identity information sent by the buyer, and then the authentication is successful); at the same time, it can effectively reduce the service pressure of the online shopping platform and improve work efficiency;

5. The entire system architecture of the present invention is tightly conceived under the system of cryptography, and it is extremely difficult to find loopholes in it compared with other existing technologies;

6. The present invention authenticates the authenticity and credibility of the dealer while verifying the authenticity of the product, and the authentication result can be stored on the online shopping platform as the basis for the dealer's credit rating;

7. According to a large amount of data statistics, compared with the prior art, the accuracy rate can be increased by 30% and the efficiency can be increased by 20% by adopting the method of the present invention for anti-counterfeiting authentication.

Description of drawings

Fig. 1 is the structural representation of supplier terminal, dealer terminal and online shopping platform of the present invention;

Fig. 2 is a working flow diagram of an embodiment of the present invention.

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

detailed description

Embodiments of the present invention: a method for anti-counterfeiting authentication of electricity suppliers and online shopping commodities, as shown in Figure 1 and Figure 2, comprising the following steps:

S1, the supplier terminal confirms and authorizes the dealer terminal;

S2, after the authorization is successful, the dealer terminal sends the encrypted purchase application and dealer identity information to the supplier terminal for purchase operation;

S3, after the supplier terminal decrypts the information, verify the dealer's identity information; if the verification is successful, then feed back the encrypted corresponding commodity code (with unique identification) to the dealer terminal (and send the corresponding commodity to the dealer );

S4, the dealer terminal decrypts the information to obtain the commodity code;

S5, when the dealer terminal receives the buyer's transaction request, it encrypts the product code and the dealer's identity information and sends it to the buyer together with the product;

S6, the buyer verifies the commodity he purchased and the identity of the dealer through the online shopping platform.

Said step S1 comprises:

S11, the supplier terminal, the dealer terminal and the online shopping platform generate their own private keys, and at the same time generate corresponding public keys according to the private keys and store them locally;

S12, the supplier terminal sends the supplier's public key to the online shopping platform and obtains the online shopping platform public key; the dealer terminal sends the dealer's public key to the online shopping platform and obtains the online shopping platform public key;

S13, the online shopping platform sends the supplier's public key to the dealer's terminal, and at the same time sends the dealer's public key to the supplier's terminal;

S14, the supplier terminal confirms and authorizes the dealer terminal.

In order to ensure the security of the dealer's identity information source, step S14 includes: the supplier terminal generates the dealer's identity information, and sends it to the dealer's terminal after encrypting it with the dealer's public key and the supplier's private key, and the dealer's terminal The dealer's identity information is obtained after decryption with the dealer's private key and the supplier's public key.

Described step S2 comprises:

After the authorization is successful, the dealer terminal sends the purchase application and the dealer's identity information encrypted with the dealer's private key and the supplier's public key to the supplier's terminal for the purchase operation.

Step S3 includes: after the supplier terminal decrypts the information, verify the identity information of the dealer; if the verification is successful, assign a corresponding commodity code according to the purchase information and the identity information of the dealer (the supplier will assign a code for each commodity) assign commodity code), and use the supplier's private key and the dealer's public key to encrypt the commodity code, and then feed it back to the dealer's terminal (and feed back the corresponding commodity to the dealer).

Step S4 includes: the dealer terminal obtains the commodity code after decrypting the information with the dealer's private key and the supplier's public key.

In the above method, in step S5, the public key of the online shopping platform is used to encrypt the commodity code and dealer identity information.

In order to further improve the authenticity and objectivity of the anti-counterfeiting certification, step S6 includes:

S61, the online shopping platform (using the online shopping platform private key) decrypts the information and obtains the product code and dealer identity information;

S62, the online shopping platform encrypts the commodity code (using the online shopping platform private key and the supplier public key) and sends it to the supplier terminal;

S63, the supplier terminal (using the public key of the online shopping platform and the supplier's private key) decrypts the received information to obtain the commodity code; and then matches the commodity code with the stored dealer identity information;

S64, if the commodity code exists and is successfully matched with the dealer's identity information, then send (using the public key of the online shopping platform) encrypted dealer's identity information to the online shopping platform;

S65. After the online shopping platform (using the private key of the online shopping platform) decrypts the information, obtain the feedback dealer identity information; then match it with the dealer identity information sent by the buyer. buyers.

In the above method, the commodity code is to use the dealer's identity information and the time information of receiving the order and a large-digit random number as a key (common commodity code) to carry out AES encryption, and then perform MD5 operation on the encrypted result again and obtained.

In the above method, the random number can be generated using a software random algorithm, such as python language: random.randint(100000,200000) (the range of the random number can be limited by using the algorithm, although the generated result is a pseudo-random number, it has met the method requirements , so it is still represented by "random number"). In the present invention, the corresponding product number of the generated random number can be stored in the supplier database, and a binary search tree is created for all random numbers; every time a random number is newly generated, it is inserted into the binary search tree, if If the same random number is found, the current value is discarded and regenerated (the purpose of using a binary search tree is to prevent the time-consuming traversal of checking the uniqueness when the number of random numbers is too large. If the number of random numbers is small, it can be directly stored in the database Traversing random numbers in to check for uniqueness). Due to the different random numbers, each product code generated is also different; in addition, because the MD5 operation is used in the process of generating the product code, according to the characteristics of MD5, "even a small change in the input variable will be reflected in the output. ", so that there is a big gap between each generated product code, making it impossible for a third party to guess an unknown product code based on a known product code, which can prevent the product code from being maliciously generated by a third party, further improving the security of anti-counterfeiting authentication and The stability of the whole system.

The above embodiments have described the method flow of the present invention in detail, are only preferred embodiments of the present invention, and cannot limit the scope of the present invention, and all changes or modifications made according to the concept of the present invention are equivalent embodiments of equivalent changes , and still within the spirit covered by the instructions and illustrations, all should be within the protection scope of the present invention.

Claims (9)

1. An anti-counterfeiting authentication method for electricity suppliers and online shopping commodities, characterized in that, comprising the following steps: S1, the supplier terminal confirms and authorizes the dealer terminal; S2, after the authorization is successful, the dealer terminal sends the encrypted purchase application and dealer identity information to the supplier terminal for purchase operation; S3, after the supplier terminal decrypts the information, verify the dealer's identity information; if the verification is successful, feed back the encrypted corresponding commodity code to the dealer terminal; S4, the dealer terminal decrypts the information to obtain the commodity code; S5, when the dealer terminal receives the buyer's transaction request, it encrypts the product code and the dealer's identity information and sends it to the buyer together with the product; S6, the buyer verifies the commodity he purchased and the identity of the dealer through the online shopping platform. 2. The anti-counterfeiting authentication method of electric business and online shopping commodities according to claim 1, characterized in that, step S1 comprises: S11, the supplier terminal, the dealer terminal and the online shopping platform generate their own private keys, and at the same time generate corresponding public keys according to the private keys and store them locally; S12, the supplier terminal sends the supplier's public key to the online shopping platform and obtains the online shopping platform public key; the dealer terminal sends the dealer's public key to the online shopping platform and obtains the online shopping platform public key; S13, the online shopping platform sends the supplier's public key to the dealer's terminal, and at the same time sends the dealer's public key to the supplier's terminal; S14, the supplier terminal confirms and authorizes the dealer terminal. 3. The anti-counterfeiting authentication method for electricity suppliers and online shopping commodities according to claim 2, wherein step S14 comprises: the supplier terminal generates dealer identity information, and uses the dealer's public key and the supplier's private key encrypted and sent to the dealer terminal, and the dealer terminal uses the dealer private key and the supplier public key to decrypt and obtain the dealer identity information. 4. The anti-counterfeiting authentication method for e-commerce and online shopping commodities according to claim 1, characterized in that step S2 includes: after the authorization is successful, the dealer terminal sends the purchased goods encrypted using the dealer's private key and the supplier's public key. The application and the dealer's identity information are sent to the supplier's terminal for the purchase operation. 5. The anti-counterfeiting authentication method for e-commerce and online shopping commodities according to claim 1, wherein step S3 includes: after the supplier terminal decrypts the information, verify the identity information of the dealer; if the verification is successful, then according to the The purchase information and the dealer's identity information are assigned to the corresponding product code, and the product code is encrypted using the supplier's private key and the dealer's public key, and then fed back to the dealer's terminal. 6. The anti-counterfeit authentication method for e-commerce and online shopping products according to claim 5, wherein step S4 comprises: the dealer terminal decrypts the information with the dealer's private key and the supplier's public key to obtain the product code. 7. The anti-counterfeit authentication method for e-commerce and online shopping commodities according to claim 1, wherein in step S5, the commodity code and dealer identity information are encrypted with the public key of the online shopping platform. 8. The anti-counterfeiting authentication method for e-commerce and online shopping commodities according to claim 1, wherein step S6 comprises: S61, the online shopping platform decrypts the information and obtains the product code and dealer identity information; S62. The online shopping platform encrypts the commodity code and sends it to the supplier terminal; S63, the supplier terminal decrypts the received information to obtain a commodity code; then matches the commodity code with the stored dealer identity information; S64, if the commodity code exists and is successfully matched with the dealer's identity information, then send the encrypted dealer's identity information to the online shopping platform; S65. After the online shopping platform decrypts the information, it obtains the dealer's identity information fed back; and then matches it with the dealer's identity information sent by the buyer. If they are consistent, the authentication is successful and is fed back to the buyer. 9. According to claim 1, 5, 6, 7 or 8 described e-commerce and the anti-counterfeiting authentication method of online shopping commodity, it is characterized in that, described commodity code is to use dealer's identity information and received order time information and The large-digit random number is used as the key to perform AES encryption, and then the encrypted result is obtained by performing MD5 operation again.