KR100903125B1 - Apparatus for forgery detection and circulation point verification of securities and method therefor - Google Patents

Abstract

Securities security system, securities forgery identification and distribution flow verification method using the same are disclosed. The RFID tag and barcode are embedded in the security, and the RFID tag records the security serial number, amount, count, and reader identifier information, and the barcode records the security serial number and the hash value of the amount. The reader reads the information of barcodes and RFID tags embedded in the securities to determine the forgery and also checks the distribution flow through the securities information stored and updated in the server.

Securities, RFID Tags, Barcodes

Description

Securities security system and securities forgery identification method and distribution flow verification method using the same {Apparatus for forgery detection and circulation point verification of securities and method therefor}

The present invention relates to a security device and a method thereof, and more particularly, to an apparatus and a method for identifying a forgery of a security by using an RFID tag and a bar code and to confirm the flow of the security of the security.

Conventionally, securities have proposed various security measures to prevent their own forgery like general currency. However, since the forgery of securities is also elaborated according to the development of computer, scanner, etc., it is difficult to identify the forgery.

The technical problem to be achieved by the present invention is to provide a security security device that can easily identify the forgery of the security securities using an RFID tag and a barcode.

Another technical problem to be achieved by the present invention is to provide a method for setting an initial value for preventing forgery and distribution flow of securities having an RFID tag and a barcode embedded therein.

Another technical problem to be achieved by the present invention is to provide a method for easily identifying a counterfeit forgery and a distribution flow by using an RFID tag and a barcode embedded in the security.

In order to achieve the above technical problem, one embodiment of the security security device according to the present invention, the security information including the serial number and amount of the security, the number of RFID readers reading the security information and the price An RFID tag that stores an identifier of a reader that last read securities information and is embedded in the securities; And a barcode that includes a hash value for the security information and is recorded in the security.

In order to achieve the above technical problem, an embodiment of an initialization method for security of a security according to the present invention is a method of initializing an RFID tag and a barcode embedded in a security, and the issuer leader is a series of the security Storing, in the RFID tag, security information including a number and an amount, a count initial value indicating the number of readers that have read the security information, and an identifier of a reader that communicates with the current RFID tag; And displaying, by the issuer leader, the barcode including the hash value for the security information on the security.

In order to achieve the above technical problem, one embodiment of the security forgery identification method according to the present invention, in the forgery identification method of the security tag embedded RFID tag and barcode, the value of the distribution point reader is recorded in the barcode Obtaining access to the RFID tag based on the method; Obtaining, by the distribution point leader, the security information including the serial number and the amount of the security from the RFID tag based on the access right; Comparing, by the distribution point reader, a value recorded in the barcode with a hash value for the security information; And identifying, by the distribution point leader, forgery and alteration of the security based on the comparison result.

In order to achieve the above technical problem, one embodiment of the securities distribution flow confirmation method according to the present invention, in the distribution flow confirmation method of the securities having the RFID tag and barcode embedded, the distribution point reader is recorded in the barcode Obtaining access to the RFID tag based on the read value; Obtaining, by the distribution point leader, the security information including the serial number and the amount of the security from the RFID tag based on the access right; Comparing, by the distribution point reader, a value recorded in the barcode with a hash value for the security information; And sending, by the distribution point leader, the security information to a server, and receiving distribution flow information including a count value and a leader identifier list corresponding to the security information from the server.

As a result, the forgery of the securities can be prevented and the flow of the securities can be confirmed.

According to the present invention, the forgery of the securities can be identified, and the owner of a legitimate leader can grasp the distribution flow of the securities. The effects are as follows.

First, the RFID tag included in the security according to the present invention provides information in the user memory area only to a reader having an access control password. Therefore, the illegal reader without the access control password cannot access important information in the user memory area, thereby preventing the forgery of the security by preventing the exposure of the information of the RFID tag.

Second, since the RFID tag information included in the security according to the present invention is not exposed to an illegal reader, the privacy of the owner is protected.

In addition, the present invention can provide a legitimate leader with the ability to identify the forgery of the function of securities distribution, thereby preventing the violation of the national distribution order due to negative transactions or illegal securities distribution.

Hereinafter, with reference to the accompanying drawings will be described in detail a security security device according to the present invention and a method for confirming the forgery and distribution flow of the security using the same.

1 is a diagram illustrating an embodiment of a system for preventing forgery and alteration of securities using an RFID tag.

Referring to FIG. 1, a security forgery and alteration prevention system using an RFID tag includes a security 110 attached to an RFID tag 100, an RFID reader 120, and a server 130. The RFID reader 120 reads the serial number stored in the RFID tag 100 and transmits the serial number to the server 130, and the server 130 responds to the RFID reader 120 with information related to the serial number. When the RFID tag 100 is attached to the securities 110, illegal forgery and crime of the securities using various copying equipment such as a color copying machine and a computer scanner can be prevented. However, the information stored in the RFID tag attached to the security is a fixed value, and there is a possibility that the RFID tag is illegally forged if there is no access control function for the information of the RFID tag.

2 is a diagram illustrating an embodiment of a security forgery and alteration prevention system using a barcode.

Referring to FIG. 2, a security forgery and alteration prevention system using a barcode includes a security 210, a barcode recognizer 220, and a server 230 in which a barcode 200 is recorded. The barcode recognizer 220 reads a barcode recorded on the security and transmits the barcode to the server 230 and receives information related to the barcode from the server 230. However, there is a possibility that the barcode is illegally forged.

3 is a view showing the configuration of an embodiment of a security forgery and alteration prevention system according to the present invention.

Referring to FIG. 3, the security security device 300 according to the present invention includes an RFID tag 302 and a barcode 304 embedded in the security. Information included in the RFID tag 302 and the barcode 304 of the security is described in detail with reference to FIGS. 4A and 4B.

The reader 310 includes an RFID reader 312 and a barcode reader 314 for reading the RFID tag 302 and the barcode 304 present in the security security device 300. The reader 310 uses wired / wireless communication networks (for example, wired Ethernet communication, wireless LAN, mobile communication network, WiBro, etc.) to read predetermined information read from the RFID tag 302 and the barcode 304 of the security security device 300. By transmitting to the server 320 through the forgery of the security is verified.

4A illustrates an embodiment of information included in an RFID tag of a security security device according to the present invention, and FIG. 4B illustrates an embodiment of information included in a barcode of the security security device according to the present invention. Figure is shown.

Referring to FIG. 4A, the memory area 400 of the RFID tag 302 of the security security device 300 is divided into a tag identifier area 410 and a user memory area 420. The tag identifier area 410 includes a read-only tag identifier assigned to identify the RFID tag, and the user memory area 420 records various information that can be read / written by a reader having access rights. As an area to be included, information such as a security serial number, an amount of money, a reader ID, a count, and a CRC is included.

Referring to FIG. 4B, the barcode 304 of the security protection device 300 stores a hashed value of the security serial number and the amount stored in the user memory area 420 of the RFID tag 302. Preferably, the upper 32-bit value of the hashed value is stored.

The type and type of information stored in FIGS. 4A and 4B may be variously changed according to an exemplary embodiment of the present invention, and the size of each region in which the information is stored may also be used.

5 is a diagram illustrating an embodiment of information stored in a database of a server according to the present invention.

Referring to FIG. 5, information about any one of the securities stored in the database 500 of the server 320 may include a securities serial number 510, an amount 520, a count 530, and a leader identifier list 540. It consists of. Count 530 represents the number of leader identifiers in leader identifier list 540. Each time the server 320 receives the reader identifier from the reader 310, the server 320 increments the count 530 by 1 and adds the reader identifier to the leader identifier list 540.

The server 320 sorts and maintains the information stored in the database 500 according to the securities serial number, and counts 530 and the list of leader identifiers 540 when requested by the authorized reader 310. Provided to leader 310.

6 is a diagram illustrating an embodiment of an initial value setting method of a security system for security of a security according to the present invention.

Referring to FIG. 6, the issuer generates a security 600 in which an RFID tag is embedded. An identifier of the RFID tag is stored in the read-only area of the RFID tag.

The issuer leader 610 may include the security serial number, the amount, the leader identifier of the issuer leader 610, the count initial value ('1'), and the above information (ie, the security serial number, amount, leader identifier). , The CRC for the count) is stored in the user memory area of the RFID tag 602 embedded in the security (S650). When the initial initial value setting is completed through the reader of the issuing authority, the user memory area of the RFID tag 602 is locked so that only the reader with the access control password can read or write the user memory area.

The reader 610 of the issuing organization hashes the securities serial number and the amount used in the initial value setting of the RFID tag 602 after completing the initial value setting for the RFID tag 602, and then stores the hash value as a barcode ( Expressed as securities 600 and recorded in the securities 600 (S655). The reader 610 of the issuing authority preferably converts the upper 32 bits of the hash value into a decimal number, and records the decimal value as a barcode 604.

After the initialization of the securities is completed, the leader of the issuer 610 transmits the securities serial number, the amount, the leader identifier of the issuer leader, and the count initial value ('1') to the server 620, and the server 620. ) To build the database 602 (S660).

If, due to a technical problem, the user memory area of the RFID tag is to be disclosed to all readers without access control, the reader 610 of the issuing agency does not store the security serial number and amount in the plain text of the RFID tag in the user memory area. In this case, it is desirable to store the value obtained by XOR of the securities serial number, amount, and access control password.

7 is a view showing an embodiment of the forgery identification method of the security according to the present invention. In the present invention, forgery and forgery identification refers to confirming that the serial number and amount of the security recorded on the RFID tag and barcode of the security have not been changed at the distribution point having the rightful leader in the security distribution process. .

Referring to FIG. 7, the distribution point reader 710 on the distribution path of the security securities reads the value recorded in the barcode 702 of the security securities through a barcode recognizer in order to identify the forgery and alteration of the security securities (S750). For example, if the barcode information recorded on the security is in the form of FIG. 4B, the reader of the distribution point reads the decimal value recorded on the barcode to secure 32-bit information.

Next, the RFID reader of the distribution point reader 710 generates an access control password based on the information read from the barcode to read the information in the user memory area of the RFID tag 704 of the security (S755). An example of information stored in the user memory area of the RFID tag is shown in FIG. 4A. By verifying the CRC of the user memory area, communication errors regarding securities serial numbers, amounts, counts, and reader identifiers stored in the user memory area can be identified. Accordingly, the distribution point reader 710 first performs CRC verification to confirm that there is no communication error.

If the barcode reader of the distribution point reader is broken or the distribution point reader does not include the barcode reader, the user may directly input the information of the barcode into the distribution point reader 710 (S752). For example, if a mobile phone equipped with RFID reader function only acts as a distribution point reader, the mobile phone receives a decimal value recorded in the bar code of the security from the user through the keypad of the mobile phone and then inputs the value inside the mobile phone. Converts to 32-bit information and uses the value to generate the access control password for the RFID tag.

The distribution point reader 710 accesses the user memory area of the RFID tag 704 on the basis of the information of the barcode 702 and generates a hashed value for the securities serial number and amount read, and generates the hash value and the generated hash value. The value read from the barcode is compared (S760). In other words, authentication is performed by comparing the values recorded in the barcode 702 with the upper 32 bits of the hashed value of the security serial number and the amount read from the RFID tag 704. As a result of the comparison, if the two values are the same, the distribution point leader 710 determines that the securities serial number and the amount information have not been forged, and if not the same, determines that there is an abnormal change.

The distribution point reader 710 sends an update request message including a serial number read in the user memory area of the RFID tag 704, an amount, a reader identifier of the current distribution point reader 710, and a count value read in the user memory area. In step S765, the server 722 sends a request for updating the database 722 of the server.

When the server 720 receives the renewal request message from the distribution point leader 710, compares the security serial number and amount stored in the database 722 with the security serial number and amount included in the renewal request message, Check that the latest count value stored in the database 722 is equal to the count value included in the update request message.

If all of the above conditions are satisfied, the server 720 determines that the update request is normal, adds the reader identifier of the branch leader included in the update request message to the list of leader identifiers in the database, and increments the count value of the database by one. . If it is determined that the comparison is not a legitimate renewal request, the server 720 reports to the distribution point leader 710 that the security is illegally forged.

When it is confirmed from the server 720 that the security is not forged, the distribution point reader 710 sets the value and the reader identifier to 1 in the user memory area of the RFID tag of the security and the reader identifier of the current distribution point reader 710. After updating to the reader identifier, a new CRC value is generated and stored (S770).

8 is a view showing an embodiment of a distribution flow confirmation method of securities according to the present invention. In the present invention, the securities distribution flow confirmation refers to a function of determining whether a distribution point owning a legitimate leader in the securities distribution process has come from the server to the current distribution point.

Referring to FIG. 8, the reader 810 of the distribution point on the distribution path of the security reads the value recorded in the barcode 802 of the security through a barcode recognizer to confirm the distribution flow of the security (S850). . For example, if the barcode information recorded on the security is in the form of FIG. 4B, the reader of the distribution point reads the decimal value recorded on the barcode to secure 32-bit information.

Next, the RFID reader of the distribution point reader generates an access control password based on the information read from the barcode to read information in the user memory area of the RFID tag of the security (S855). An example of information stored in the user memory area of the RFID tag is shown in FIG. 4A. By verifying the CRC of the user memory area, communication errors regarding securities serial numbers, amounts, counts, and reader identifiers stored in the user memory area can be identified. Therefore, the distribution point leader performs CRC verification to confirm that there is no communication.

If the barcode reader of the distribution point reader is fixed or the distribution point reader does not include the barcode reader, the user may directly input barcode information into the distribution point reader (S852). For example, if a mobile phone equipped with RFID reader function only acts as a distribution point reader, the mobile phone receives a decimal value recorded in the bar code of the security from the user through the keypad of the mobile phone and then inputs the value inside the mobile phone. Converts to 32-bit information and uses the value to generate the access control password for the RFID tag.

The distribution point reader 810 accesses the user memory area of the RFID tag based on the information of the barcode 802 to generate a hashed value for the securities serial number and amount read, and reads from the generated hash value and the barcode. Compare the values.

As a result of the comparison, if the two values are the same, the distribution point leader 810 determines that the securities serial number and the amount information have not been forged, and if not the same, determines that there is an abnormal change.

The distribution point reader 810 transmits an information request message including a serial number read in the user memory area of the RFID tag 804, a reader identifier of the current distribution point reader, and a count value read from the user memory area to the server. Request to return the corresponding count information and the list of reader identifiers stored in the database 822.

When the server 820 receives the information request message from the distribution point leader 810, compares the security serial number and amount included in the information request message with the security serial number and amount stored in the database and matches the database 822. Check that the latest count value stored in) is the same as the count value included in the update request.

If it is determined that the request for information is normal, the server 820 returns the list of the securities serial numbers, amounts, counts, and identifiers stored in the database 822 to the distribution point leader 810, and the distribution point included in the information request message. Adds the reader's leader identifier to the list of reader identifiers in the database, and increments the count value by one. If it is determined that the comparison is not a legitimate renewal request, the server 820 reports to the distribution point leader 810 that the security is illegally forged.

The distribution point leader 810 receiving the count and the leader identifier list from the server 820 can determine how many distribution point readers have passed through the counter value from the count value, and also analyze the leader identifier list to analyze the corresponding securities. You can figure out where you've been.

The branch point reader 810 increases the count value of the user memory area of the RFID tag 804 of the security by 1, updates the reader identifier with the reader identifier of the current branch point reader 810, and generates and stores a new CRC value. do.

If the memory area of the RFID tag 804 is large, a list of reader identifiers managed in the database 822 of the server may be added to the user memory area of the RFID tag. That is, the memory area of the RFID tag may be implemented in a form in which a reader identifier may be continuously added in a concatenated form. At this time, the count value of the user memory area of the RFID tag indicates the number of reader identifiers included in the reader identifier list, so that the distribution point reader 810 flows only the information of the RFID tag 804 without accessing the database 822 of the server. Can be identified.

If distribution point leader 810 reads the information on the security and performs a forgery identification, but does not want to leave his leader identifier on the security's RFID tag (e.g., it is necessary to Confirmation by the leader of the authority, etc.), the process of updating the database 822 of the server and updating the securities by the distributor authority 810 can be omitted. This is a necessary feature in terms of privacy protection, since it does not leave any records on the server and the securities and thus hides the fact that the securities have been accessed.

Therefore, it is desirable to determine and utilize whether the distribution point leader 810 implements the entire procedure for verifying the distribution flow or omits the database and the security update process for privacy protection.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and also in the form of a display by a carrier wave (for example, transmission over the Internet). It includes what is implemented. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

1 is a diagram illustrating an embodiment of a system for preventing forgery and alteration of securities using an RFID tag;

2 is a diagram illustrating an embodiment of a security forgery and alteration prevention system using a barcode;

3 is a view showing the configuration of an embodiment of a security forgery and alteration prevention system using an RFID tag and a barcode according to the present invention;

4A is a diagram illustrating an embodiment of information included in an RFID tag of a security security device according to the present invention;

Figure 4b is a view showing an embodiment of the information contained in the bar code of the security security device according to the present invention,

5 is a diagram illustrating an embodiment of information stored in a database of a server according to the present invention;

6 is a view showing an embodiment of a method for setting an initial value of a security system for security according to the present invention;

7 is a view showing an embodiment of a forgery and identification method of securities according to the present invention, and

8 is a view showing an embodiment of a distribution flow confirmation method of securities according to the present invention.

Claims (22)

An RFID tag that stores securities information including a serial number of a securities, a number of RFID readers reading the securities information, and an identifier of a reader that reads the securities information last, and is embedded in the securities; And And a bar code including a hash value for the security information and recorded in the security. The method of claim 1, The security information security device, characterized in that it comprises the serial number and amount information of the security. The method according to claim 1 or 2, And the RFID tag is kept locked using an access control password generated based on a hash value of the security information. The method according to claim 1 or 2, The RFID tag stores an access control password generated based on a hash value of the security information and a value obtained by XORing the security information. The method of claim 1, The barcode is a security security device, characterized in that for displaying the value converted to the decimal number of the upper 32 bits of the hash value. In the initialization method of the RFID tag and barcode embedded in the security, Storing, by the issuer leader, securities information including the serial number of the securities, an initial value of a count indicating the number of readers who read the securities information, and an identifier of the issuer leader in the RFID tag; And And displaying, by the issuer leader, the barcode including the hash value for the security information on the security. The method of claim 6, The security information is initialization method for security of a security, characterized in that it comprises the serial number and amount information of the security. The method according to claim 6 or 7, The issuer leader transmitting the securities information, the initial value of the count, and an identifier of the issuer leader to a server; And And storing the received information by the server in a database. The method according to claim 6 or 7, The issuer leader further comprises the step of maintaining the RFID tag in a locked state using an access control password generated based on the hash value for the security information. . The method according to claim 6 or 7, And, by the issuer leader, XORing the security information by using an access control password generated based on the hash value of the security information, and storing the value in the RFID tag. Initialization method for security of securities. The method of claim 6, wherein displaying the barcode comprises: And displaying a value obtained by converting the upper 32 bits of the hash value into a decimal number using the bar code. In the forgery identification method of securities embedded with RFID tag and barcode, Obtaining, by the distribution point reader, access to the RFID tag based on the value recorded in the barcode; Obtaining, by the distribution point leader, security information including the serial number of the security from the RFID tag based on the access right; Comparing, by the distribution point reader, a value recorded in the barcode with a hash value for the security information; And And identifying, by the distribution point leader, the forgery of the securities based on the comparison result. The method of claim 12, wherein the obtaining of the securities information comprises: And obtaining serial number and amount information of the securities from the RFID tag. The method of claim 12, wherein obtaining the access right, And reading the decimal value recorded in the barcode into 32-bit information, and generating an access control password for the RFID tag based on the converted 32-bit information. . The method of claim 12, The obtaining of the security information includes obtaining a count value indicating the number of readers reading the security information from the RFID tag, And requesting an update of the database of the server by transmitting the securities information and the count value of the distribution point reader to a server by the distribution point leader. The method of claim 15, When the server receives a database update request from the distribution point reader, the server checks whether information corresponding to the security information is in the database, and count values stored in the database corresponding to the security information are received from the distribution point reader. Determining whether it matches the count value; And If the values match, the server further increases the count value of the database corresponding to the security information by one, and adds the identifier of the distribution point leader to the list of leader identifiers of the database. Securities forgery identification method. The method of claim 12, And increasing the count value stored in the RFID tag by one and storing the identifier of the distribution point reader in the RFID tag. In the method of checking the flow of securities embedded with RFID tag and barcode, Obtaining, by the distribution point reader, access to the RFID tag based on the value recorded in the barcode; Obtaining, by the distribution point leader, security information including the serial number of the security from the RFID tag based on the access right; Comparing, by the distribution point reader, a value recorded in the barcode with a hash value for the security information; And And transmitting, by the distribution point leader, the security information to a server, and receiving, from the server, distribution flow information including a count value and a leader identifier list corresponding to the security information. How to check securities distribution flow. The method of claim 18, wherein the obtaining of the security information, And obtaining the serial number and the amount information of the security from the RFID tag. The method of claim 18, wherein obtaining the access rights, Reading the decimal value recorded in the barcode and converting it into 32-bit information, and generating an access control password for the RFID tag based on the converted 32-bit information. Way. The method of claim 18, The obtaining of the security information includes obtaining a count value indicating the number of readers who have read the security information from the RFID tag. The distribution flow information receiving step, Requesting and receiving the flow information by transmitting the securities information and the count value of the distribution point leader to a server; Checking, by the server, whether information corresponding to the security information is in a database, and checking whether a count value stored in the database corresponding to the security information matches a count value received from the distribution point reader; And And if the values match, the server increases the count value of the database corresponding to the security information by 1 and adds the identifier of the distribution point leader to the leader identifier list of the database. How to check securities distribution flow. The method of claim 18, The distribution point reader further increases the count value stored in the RFID tag by one, and storing the identifier of the distribution point reader in the RFID tag.

Images