WO2020073715A1

WO2020073715A1 - Two-dimensional code anti-counterfeiting method, device and system based on security application

Info

Publication number: WO2020073715A1
Application number: PCT/CN2019/097095
Authority: WO
Inventors: 孙曦; 落红卫
Original assignee: 阿里巴巴集团控股有限公司
Priority date: 2018-10-12
Filing date: 2019-07-22
Publication date: 2020-04-16
Also published as: TW202014931A; CN109615030A; TWI748209B

Abstract

Disclosed are a two-dimensional code anti-counterfeiting method, device and system based on a security application. The method comprises: a two-dimensional code security application receiving a request for generating two-dimensional code information data (S62); the two-dimensional code security application signing two-dimensional code service information according to a private key of the two-dimensional code security application (S63); and the two-dimensional code security application sending the two-dimensional information data (S64), wherein the two-dimensional code security application has asymmetrical secret keys composed of a public key of the two-dimensional code security application and the private key of the two-dimensional code security application, and the two-dimensional code information data includes the two-dimensional code service information and a signature of the two-dimensional code service information by the two-dimensional code security application.

Description

Two-dimensional code anti-counterfeiting method, equipment and system based on security application

Technical field

This application relates to the field of security, and in particular to a method, equipment and system for anti-counterfeiting of two-dimensional codes based on security applications.

Background technique

With the development of mobile Internet, QR codes have been widely used, such as scanning codes to open shared bicycles, scanning payments, etc. In order to improve the security of two-dimensional codes, some companies also provide dynamic two-dimensional codes. The data in the dynamic two-dimensional codes will be updated over time to show the changed two-dimensional codes. However, the current two-dimensional code verification solutions on the market, the two-dimensional code information itself does not have anti-counterfeiting capability, that is, after the two-dimensional code is parsed by the decoding device, the two-dimensional code data in clear text is directly obtained, Consistent, the barcode scanning device cannot verify the legality of the QR code information locally. In order to verify the legitimacy of the QR code information, the QR code information needs to be sent to the back-end server, relying on the risk control capabilities of the back-end server for security protection. However, in this process, it is possible that the legality of the information in the QR code cannot be recognized, resulting in access to a malicious website or execution of a malicious program, which in turn causes damage to the user.

Summary of the invention

The embodiments of the present application provide a security application-based two-dimensional code anti-counterfeiting method, device and system, which are used to solve the problem of low security of two-dimensional codes.

The embodiments of the present application adopt the following technical solutions:

An embodiment of the present application provides a security application-based two-dimensional code anti-counterfeiting method. The method includes:

The QR code security application receives a request to generate QR code information data;

The QR code security application signs the QR code business information according to the private key of the QR code security application;

QR code security application sends QR code information data;

The QR code security application has an asymmetric key composed of the public key of the QR code security application and the private key of the QR code security application; the QR code information data includes QR code service information and QR code security The application signs the service information of the two-dimensional code.

An embodiment of the present application provides a two-dimensional code reading method. The method includes:

Scanning the QR code to obtain the QR code business information and the signature of the QR code security application on the QR code business information;

Verify the signature of the QR code business information, and confirm the QR code business information.

This application provides a two-dimensional code anti-counterfeiting method based on security applications. The method includes:

The QR code display module sends a request to generate QR code information data;

QR code securely sends QR code information data to the QR code display module;

The two-dimensional code display module displays the two-dimensional code information data in the form of a two-dimensional code;

The QR code reading device scans the QR code to obtain the QR code service information and the signature of the QR code service application on the QR code service information;

The two-dimensional code reading device verifies the signature of the two-dimensional code business information, and confirms the two-dimensional code business information;

This application provides a two-dimensional code anti-counterfeiting device, which includes a two-dimensional code security module;

The QR code security module is also used to receive the request to generate QR code information data; sign the QR code business information according to the private key of the QR code security application; send the QR code information data;

An embodiment of the present application provides a two-dimensional code anti-counterfeiting device, which includes a security chip and a memory, and a two-dimensional code security program is stored on the memory;

The security chip is used to execute the two-dimensional code security program to implement the method according to claim 1.

An embodiment of the present application provides a two-dimensional code anti-counterfeiting device. The device includes a processor and a memory, and the memory stores a two-dimensional code security program;

The processor is configured to execute the two-dimensional code security program to implement the method.

An embodiment of the present application provides a two-dimensional code anti-counterfeiting device. The device includes:

Request receiving module, which is used to receive the request to generate QR code information data;

The QR code business information signature module is used to sign the QR code business information according to the private key of the QR code security application;

QR code information data sending module, used to send QR code information data;

An embodiment of the present application provides a two-dimensional code reading device. The two-dimensional code reading device includes:

A scanning module, configured to scan a two-dimensional code to obtain two-dimensional code business information and a signature of the two-dimensional code business information by a two-dimensional code security application;

A verification module is used to verify the signature of the QR code service information and confirm the QR code service information.

An embodiment of the present application provides a two-dimensional code reading device, characterized in that the device includes a processor and a memory, and a program is stored on the memory;

The processor is configured to execute the program to implement the method.

An embodiment of the present application provides a two-dimensional code anti-counterfeiting system. The system includes the device and the two-dimensional code reading device.

The above at least one technical solution adopted in the embodiments of the present application can achieve the following beneficial effects:

The embodiments of the present application sign the business data of the two-dimensional code through a security chip or a trusted execution environment, thereby improving the security of the two-dimensional code, and through the use of the certificate, the two-dimensional code reading device can locally perform two-dimensional code reading. Verification of the legality of the dimension code reduces the probability of risk occurrence.

BRIEF DESCRIPTION

The drawings described here are used to provide a further understanding of the present application and form a part of the present application. The schematic embodiments and descriptions of the present application are used to explain the present application and do not constitute an undue limitation on the present application. In the drawings:

1 is a flow chart of certificate distribution provided by the first embodiment of this application;

2 is a schematic diagram of a two-dimensional code anti-counterfeiting method according to a second embodiment of this application;

3 is a schematic diagram of a two-dimensional code anti-counterfeiting method according to a third embodiment of this application;

4 is a schematic diagram of a two-dimensional code display process according to a fourth embodiment of the application;

5 is a schematic diagram of a two-dimensional code reading process according to the fifth embodiment of the present application;

6 is a schematic diagram of a two-dimensional code anti-counterfeiting method according to a sixth embodiment of this application;

7 is a schematic diagram of a two-dimensional code anti-counterfeiting device according to a seventh embodiment of this application;

8 is a schematic diagram of a two-dimensional code anti-counterfeiting device according to an eighth embodiment of this application;

9 is a schematic diagram of a two-dimensional code anti-counterfeiting device according to a ninth embodiment of this application;

10 is a schematic diagram of a two-dimensional code anti-counterfeiting device according to a tenth embodiment of this application;

11 is a schematic diagram of a two-dimensional code anti-counterfeiting device according to an eleventh embodiment of this application;

12 is a schematic diagram of a two-dimensional code generation and display system according to a twelfth embodiment of this application;

13 is a schematic diagram of a two-dimensional code anti-counterfeiting system according to a thirteenth embodiment of the present application.

detailed description

In order to make the purpose, technical solutions and advantages of the present application more clear, the technical solutions of the present application will be described clearly and completely in conjunction with specific embodiments of the present application and corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in this application, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the scope of protection of this application.

The technical solutions provided by the embodiments of the present application will be described in detail below with reference to the drawings.

First embodiment

As shown in FIG. 1, the implementation of this application discloses a certificate distribution method for a two-dimensional code, which specifically includes:

Step S11, the QR code management server generates an asymmetric key, including the QR code management server public key Public_Key_Server and the QR code management server private key Private_Key_Server; in the actual application process, if the RSA algorithm is used to generate the key, its It is generally composed of a public key and a modulus value, and a private key and a modulus value. The modulus value generally selects 1024 bits or 2048 bits.

Step S12, the QR code management server distributes the QR code management server public key to several terminal devices, such as smart phones, tablets, computers, etc. The terminal device can use the received QR code management server public key Public_Key_Server to encrypt data or Verify the signature; the public key of the QR code management server Public_Key_Server can be transmitted without the establishment of the QR code management server and the terminal device secure channel, for example, the QR code management server directly manages the QR code according to the request of the terminal device The public key of the server, Public_Key_Server, is returned to the terminal device. You can also establish a secure channel before returning the QR code management server public key Public_Key_Server to the terminal device. For example, the Secure Sockets Layer (SSL) protocol is used to establish the secure channel, and then the second The public key Public_Key_Server of the dimension code management server is returned to the terminal device. For asymmetric keys, the public key is used to encrypt data and verify the signature, and the private key is used to decrypt and sign.

Step S13, the QR code security application in the terminal device generates an asymmetric key, including the QR code security application public key Public_Key_Client and the QR code security application private key Private_Key_Client; the QR code security application generated QR code security application The public key Public_Key_Client can be used for the QR code management server to generate a certificate, the QR code security application private key Private_Key_Client can be used to generate a signature; the certificate can be based on the X.509v3 certificate standard, and the information contained in the certificate generally includes: public key value, public Key owner's identifier information, validity period, certificate issuer's identifier information, certificate issuer's digital signature, etc.

Step S14, the QR code security application sends the public key Public_Key_Client of the QR code security application to the QR code management server; similarly, the public key Public_Key_Client of the QR code security application can be sent without establishing the terminal device and the QR code Transmit in the case of a secure channel between management servers, for example, the terminal device directly sends the public key of the QR code security application Public_Key_Client to the QR code management server, or can send the QR code security application to the QR code management server The public key of the Public_Key_Client is established before, for example, the SSL protocol is used to establish a secure channel, and then the public key of the QR code security application Public_Key_Client is sent to the QR code management server.

Step S15, the QR code management server uses the private key Private_Key_Server of the QR code management server to sign the security application public key Public_Key_Client of the QR code to generate a certificate; during the process of generating the certificate, the QR code security application public key can be directly applied Public_Key_Client sign to generate a certificate (public key certificate, PKC), you can also hash the QR code security application public key Public_Key_Client to calculate the hash value, and then use the QR code management server's private key Private_Key_Server to sign the hash value Generate a certificate PKC; as an example, the certificate includes: the security application public key (m, d) of the QR code, the security application ID 1001, the validity period is January 1, 2019, the QR code management server ID 0001, the QR code The signature of the secure application public key (m ', d'). (m, d) is obtained by the key algorithm, (m ', d') is obtained by computing the security application public key (m, d) of the QR code by the private key of the QR code management server, for example, ( m, d) After performing the hash operation, use the private key of the dimension code management server to perform power exponential operation and modular operation on it, and use the result of the modular operation as the signature.

Step S16, the QR code management server sends the certificate to the QR code security application; similarly, the QR code management server can transmit without establishing the QR code management server and the terminal device secure channel, such as the QR code The management server directly returns the certificate PKC to the terminal device, and can also establish a secure channel before returning the certificate PKC to the terminal device, for example, using a Secure Sockets Layer (SSL) protocol to establish a secure channel, and then return the certificate PKC to the terminal device.

Through the above steps, the two-dimensional code management server can distribute the certificate to the terminal device that needs the certificate, thereby attaching the certificate when the secure two-dimensional code is generated for the terminal device to complete the preparation work. The terminal device can use the certificate as the carrier of the public key of the QR code security application Public_Key_Client. When the terminal device uses the QR code security application private key Private_Key_Client to sign the data, the QR code reading device can obtain the QR code security application by verifying the certificate Public key Public_Key_Client, so that you can further verify the signature made by using the QR code secure application private key Private_Key_Client. It should be noted that the QR code reading device stores the public key of the QR code management server distributed by the QR code management server.

For asymmetric keys, the private key can be used to decrypt or sign, and the public key can be used to encrypt or verify the signature. The asymmetric key algorithm may include any one of RSA, Elgamal, knapsack algorithm, Rabin, D-H, ECC. The following uses RSA algorithm as an example to explain the process of public key, private key, signature certificate and signature generation.

The process of the QR code management server generating the QR code management server public key Public_Key_Server and the QR code management server private key Private_Key_Server includes:

Step (1), let prime number p = 3, prime number q = 11, get n = p × q = 33, f (n) = (p-1) × (q-1) = 20;

Step (2), let e = 3, e and d are relatively prime;

Step (3), let e × d≡1mod f (n), that is 3 × d≡1mod20, select d by the following table:

Therefore, d = 7 can be selected to satisfy 3 × d≡1mod20.

Step (4), therefore, the public key Public_Key_Server of the QR code management server can be (3, 33), and the private key Private_Key_Server of the QR code management server can be (7, 33).

After obtaining the above-mentioned QR code management server public key Public_Key_Server and QR code management server private key Private_Key_Server, you can send the QR code management server public key Public_Key_Server to the terminal device, and the QR code management server retains the QR code management server private key Private_Key_Server.

The process of generating the QR code security application public key Public_Key_Client and QR code security application private key Private_Key_Client by the QR code security application includes:

Step (A), let prime number p = 13, prime number q = 7, get n = p × q = 91, f (n) = (p-1) × (q-1) = 72;

Step (B), let e = 7, e and d are relatively prime;

Step (C), let e × d≡1mod f (n), namely 7 × d≡1mod72, 7 × d can be 73,145,217, etc.

Therefore, in order to satisfy the above identities, d = 31 can be selected to satisfy 7 × d≡1mod72.

Step (D), therefore, the public key of the QR code security application Public_Key_Client can be (7,72), and the private key of the QR code security application Private_Key_Client can be (31,72).

After the QR code security application generates the QR code security application public key Public_Key_Client and the QR code security application private key Private_Key_Client, the QR code security application public key Public_Key_Client can be sent to the QR code management server, which is managed by the QR code The server generates the certificate PKC and sends it to the terminal device with the QR code security application installed.

The process of generating a certificate by the QR code management server can be as follows:

Step (I), the QR code security application sends the QR code security application public key Public_Key_Client to the QR code management server, for example, the QR code security application public key Public_Key_Client is (7,72);

In step (II), the QR code management server receives the QR code security application public key Public_Key_Client (7,72), and then uses the QR code management server's Private_Key_Server (7,33) to generate a certificate.

For example, by calculating 7 ^ 7mod 33 = 28 and 72 ^ 7mod 33 = 30, the content of the certificate contained in the certificate is (7,72,1001,20190101,0001,28,30). After receiving the certificate, the QR code reading device can confirm that the public key is (7,72), the ID of the QR code security application is 1001, and the validity period of the public key is January 1, 2019. QR code management The server's identity is 0001, and the public key's signature is (28,30).

Optionally, you can also hash the public key Public_Key_Client (7, 72) of the QR code security application, for example, combine 7 and 72 in the public key to 772, and then modulo 16, get 4. After that, you can use Private_Key_Server (7,33) of the QR code management server to calculate 4, 4 ^ 7mod33 = 16, and get the array (7,72,1001,20190101,0001,16) as the content of the certificate.

Step (III), the QR code management server sends the certificate containing the array to the security application of the terminal device, for example, the content of the certificate is the array (7,72,1001,20190101,0001,28,30) or (7,72, 1001,20190101,0001,16).

Optionally, in the case where the terminal device installed with the QR code security application stores the public key Public_Key_Server of the QR code management server, the QR code management server may further use the QR code management server private key Private_Key_Server to further sign the certificate, Send the certificate and the signature of the certificate to the security application. The security application can further use the QR code to manage the server's public key Public_Key_Server to verify the authenticity of the certificate.

Through the above steps, certificate distribution can be completed.

It should be noted that all terminal devices can receive and store the public key Public_Key_Server of the two-dimensional code management server. If the terminal device is installed with a QR code security application, it can be used to generate a QR code or read a QR code. If the terminal device is not installed with a QR code security application, it is used to read the QR code, but it cannot be used to generate the QR code according to the technical solution provided by the embodiments of the present application. When it needs to generate the QR code, It can generate and display two-dimensional codes in a traditional manner, for example, two-dimensional codes can be generated and displayed through a two-dimensional code generation and display module built in the application itself. It should be noted that the application built-in two-dimensional code generation and display module to generate and display two-dimensional codes is an existing technology, and will not be repeated here.

Second embodiment

In real life, two-dimensional codes can be applied to many scenarios, such as payment scenarios or instant messaging scenarios. The following uses a payment scenario as an example to describe the QR code generation process.

With the progress of society, more and more convenience stores have facilitated people's lives. The barcode scanner of the convenience store can settle the customer by scanning the barcode on the goods purchased by the customer. After the settlement, the QR code can be displayed, and the user can scan the QR code to pay.

After the merchant confirms the settlement on the charging terminal device, the QR code display module in the terminal device will send a QR code information data generation request to the QR code security application, and the request will include relevant information about settlement, such as payment collection Party account number, amount and other information, the QR code security application can use the QR code security application private key Private_Key_Client to sign the information, and attach the convention certificate to the QR code display module for the QR code display module according to the two-dimensional The code display rules display the QR code containing the information sent by the QR code security application. Optionally, the settlement information may include date information, and the QR code security application may also add some dynamic information, such as random number information.

FIG. 2 shows a two-dimensional code generation process provided by an embodiment of the present application, which specifically includes:

Step S21, the QR code security application receives a request to generate QR code information data; the request may come from a QR code display module; the QR code display module may be a built-in module of the merchant billing system, or may The external module of the application of the dimensional code is mainly to obtain the information related to the settlement (such as the QR code business information), such as the order information, after the user confirms the settlement amount, and send it to the QR code security application; and Information related to settlement includes but is not limited to the amount, merchant account identification, etc., and may even include the details of the user's purchase of goods, the date of purchase, etc .;

Step S22, the QR code security application signs the order information according to the private key of the QR code security application; wherein the QR code security application has a public key of the QR code security application and a private key of the QR code security application Asymmetric key; after receiving the QR code information data generation request sent by the QR code display module, the QR code security application can use the QR code security application private key Private_Key_Client to sign the order information. The QR code service information and the signature certificate of the QR code security application may be collectively referred to as QR code information data. Optionally, the two-dimensional code information data may also contain a certificate. When the QR code security application uses the private key Private_Key_Client to sign the order information, the order information can be hashed, and then the result of the hash operation can be exponentiated and modulo, and the modulo result is used as the signature.

Step S23, the QR code security application sends QR code information data; the QR code information data includes QR code service information and the signature of the order information by the QR code security application; optionally, the QR code Certificates are also included in the information data. The certificate may be a certificate provided by the QR code management server, or a signature certificate of the public key sent by the QR code management server to the QR code security application.

For convenience of description, the embodiment of the present application simplifies the QR code service information sent by the QR code display module to include only amount data, for example, 2.

After the QR code security application receives the QR code service information, the QR code security application private key Private_Key_Client (31,72) needs to be used to sign the QR code service information, for example, by calculating 2 ^ 31mod72 = 56.

As mentioned above, the content of the certificate is that the array can be (7,72,1001,20190101,0001,28,30) or (7,72,1001,20190101,0001,16), so the security application can generate the following two-dimensional Code information data:

(2,56,7,72,1001,20190101,0001,28,30) or (2,56,7,72,1001,20190101,0001,16).

The QR code security application may send the above-mentioned QR code information data to the QR code display module. The QR code display module displays the QR code information data as a QR code, such as a QR code, according to the encoding rules.

The above process can realize the generation of a two-dimensional code in a payment scenario, where the two-dimensional code includes two-dimensional code business information, a secure application signature, and a certificate.

The two-dimensional code reading device can read the two-dimensional code to obtain the two-dimensional code information data, and can verify the signature to confirm whether the two-dimensional code business data is authentic.

Third embodiment

In real life, two-dimensional codes can be applied to many scenarios, such as payment scenarios or instant messaging scenarios. The following describes the QR code generation process by taking an instant communication scenario as an example.

With the development of the mobile Internet, instant messaging software based on wireless Internet technology is emerging, such as WeChat and Dingding. Instant messaging software generally provides the function of adding friends by scanning QR codes or joining groups by scanning QR codes.

In the prior art, when a two-dimensional code reading device scans a two-dimensional code to obtain relevant data, it does not verify its authenticity, and there are hidden safety risks.

In this application, when a user agrees to add another user as a friend by scanning their own QR code, the QR code display module in the terminal device used by the other user will send the QR code to the QR code security application Information data generation request. The request may be just a request to display a QR code, may not contain any information, or may include a user's logo; if the request is only a request to display a QR code, the QR code security application You can interact with the instant messaging software beforehand to obtain the user's identification. After receiving the request, the QR code security application can use the QR code security application private key Private_Key_Client to sign the user's identification; if the request contains The user's identification (may be called QR code service information). The QR code security application can use the QR code security application private key Private_Key_Client to sign the information; after the QR code security application signs, the QR code service Information, signatures and convention certificates are sent to the QR code display module for the QR code display module to follow the QR code The display shows regular two-dimensional code contains a two-dimensional code security applications to send information.

FIG. 3 shows a two-dimensional code generation process provided by an embodiment of the present application, which specifically includes:

Step S31, the QR code security application receives a request to generate QR code information data; the request may come from a QR code display module; the QR code display module may be a QR code display module in instant messaging software, such as two The QR code business card module is mainly to obtain the user's identity (for example, QR code service information) after the user clicks, and send it to the QR code security application; of course, you can also just send an empty request, the user's identity is in advance Stored in the QR code security application;

Step S32, the QR code security application signs the user identification according to the private key of the QR code security application; wherein the QR code security application has a public key of the QR code security application and a private key of the QR code security application Asymmetric key

Step S33, the QR code security application sends QR code information data; the QR code information data includes the QR code service information and the signature of the user identification by the QR code security application; optionally, the QR code Certificates are also included in the information data. The certificate may be a certificate provided by the QR code management server, or a signature certificate of the public key sent by the QR code management server to the QR code security application.

For ease of description, the embodiment of the present application sets the user's identifier to 2.

After the QR code security application receives the QR code information data generation request, it is necessary to use the QR code security application private key Private_Key_Client (31,72) to sign the QR code business information (that is, the user's logo), for example, by calculating 2 ^ 31mod 72 = 56.

(2,56,7,72,1001,20190101,0001,28,30) or (2,56,7,72,1001,20190101,0001,16).

The above process can realize the generation of a two-dimensional code in an instant communication scenario, where the two-dimensional code contains the user's logo.

Fourth embodiment

Compared with bar codes, two-dimensional codes can contain more information. With the popularity of smart phones, two-dimensional codes have been widely used.

The more commonly used QR code is quick response (QR). Two-dimensional codes generally include: code positioning patterns, functional data, data codes and error correction codes.

The function of the code positioning pattern is mainly used to correct the position of the two-dimensional code. When using a smart phone to scan a QR code, the user may not be able to align it. The QR positioning pattern can be used to correct the QR code, which facilitates the analysis of each pixel in the QR code.

The functional data mainly includes some formatted data and the information of the QR code version.

Data codes are mainly used to store QR code information data.

The error correction code is mainly used to store the forward error correction code for the two-dimensional code information data.

FIG. 4 shows a two-dimensional code display process provided by an embodiment of the present application, which specifically includes:

Step S41, the QR code display module sends a QR code information data generation request to the security application;

The two-dimensional code display module may be a two-dimensional code display module in instant messaging software, such as a two-dimensional code business card module, which mainly obtains the user's identity (for example, may be called two-dimensional code business information) after the user clicks and sends Go to the QR code security application; of course, you can also just send an empty request, and the user's logo is pre-stored in the QR code security application; or

The QR code display module can be a built-in module of the merchant billing system or an external module for QR code application, mainly after the user confirms the settlement amount, to obtain information related to settlement (for example, it can be called QR code business information), and sent to the QR code security application; information related to settlement includes but not limited to the amount, merchant account identification, etc., and may even include the details of the user's purchase of goods, the date of purchase, etc .;

Step S42: The two-dimensional code display module receives the two-dimensional code information data sent by the two-dimensional code security application, and displays the two-dimensional code corresponding to the two-dimensional code information data according to the two-dimensional code encoding rules.

After receiving the request sent by the QR code display module, the QR code security application can use the QR code security application private key Private_Key_Client to sign the QR code business information, attach the certificate and send it to the QR code display module. The QR code business information, the signature of the QR code security application and the certificate can be collectively called QR code information data.

For ease of description, the embodiment of the present application sets the QR code service information to 2.

After the QR code security application receives the QR code information data generation request, it is necessary to use the QR code security application private key Private_Key_Client (31,72) to sign the QR code business information (user's logo or merchant's settlement information) , For example, by calculating 2 ^ 31mod 72 = 56.

(2,56,7,72,1001,20190101,0001,28,30) or (2,56,7,72,1001,20190101,0001,16).

Fifth embodiment

After the terminal device displays the QR code, the QR code reading device needs to scan the QR code and verify whether the QR code service information in the QR code is true.

FIG. 5 shows a two-dimensional code reading process provided by an embodiment of the present application, which specifically includes:

Step S51, the QR code reading device scans the QR code to obtain the QR code information data. Specifically, the QR code reading device can analyze the QR code to analyze the QR code information data contained in the QR code, for example (2,56,7,72,1001,20190101,0001, 28,30) or (2,56,7,72,1001,20190101,0001,16).

Step S52, the QR code reading device uses its stored QR code management server public key Public_Key_Server (3, 33) to verify the certificate, for example, by calculating 28 ^ 3mod33 = 7, 30 ^ 3mod33 = 72, thereby verifying the second The public key of the QR code security application Public_Key_Client can be (7,72), which is the same as the public key of the QR code security application Public_Key_Client in the certificate, so that the public key of the QR code security application is (7,72); or by calculation 16 ^ 3mod33 = 4, 772mod16 = 4, so that the public key for verifying the security application of the QR code is (7,72).

Further, the QR code reading device uses the QR code security application public key Public_Key_Client to verify the signature, for example, by calculating 2 ^ 7mod 72 = 56, thereby verifying the authenticity of the QR code service information 2.

Step S53, after the verification of the QR code business information is passed, the subsequent business process can be completed according to the QR code business information.

For example, in a payment scenario, you can initiate a deduction request to the accounting system, notify the user after the accounting system deducts the money, and charge the deducted money to the merchant's account;

For another example, in an instant communication scenario, a friend addition request may be sent to the instant communication server, and the instant communication server sends the friend addition request to the user. After the user agrees to the request, both parties become friends.

Sixth embodiment

The anti-counterfeiting method of the QR code based on the security application provided in this application is shown in FIG. 6 and specifically includes:

Step S61, the two-dimensional code display module sends a request to generate two-dimensional code information data; the request may include two-dimensional code business information, such as order information, or an empty request, for example, the two-dimensional code may be pre-stored with, for example QR code business information such as user identification;

Step S62, the QR code security application receives a request to generate QR code information data;

Step S63, the QR code security application signs the QR code service information according to the private key of the QR code security application;

Step S64, the QR code securely sends QR code information data to the QR code display module;

Step S65, the two-dimensional code display module displays the two-dimensional code information data in the form of a two-dimensional code;

Step S66: The QR code reading device scans the QR code to obtain the QR code service information and the signature of the QR code service application by the QR code security application;

Step S67, the QR code reading device verifies the signature of the QR code service information, and confirms the QR code service information;

It should be noted that the security application may also store a certificate sent by the QR code management server, which is a signature certificate generated by the QR code management server for the public key of the security application. When the security application sends the QR code information data, the certificate can be sent to the QR code display module together. Correspondingly, the QR code reading device can pre-store the public key sent by the QR code management server, which can be used to verify the authenticity of the certificate; after the QR code reading device verifies the authenticity of the QR code, the certificate can be used The public key of the QR code security application in is used to verify the authenticity of the QR code business information signature. After double verification, the QR code business information can be processed and the subsequent process can be performed. Optionally, the public key of the security application can also be sent to the QR code reading device in other ways for the authenticity of the QR code service information signature.

Seventh embodiment

An embodiment of the present application provides a two-dimensional code information data generation device. As shown in FIG. 7, it may be an independent entity, such as a two-dimensional code security module located in a security chip, or may be capable of generating two-dimensional code information data Chip. Preferably, it also includes a two-dimensional code display module.

The QR code security module can be implemented using the QR code security application located in the security chip. The QR code security application can generate the security QR code security application public key Public_Key_Client and the QR code security application private key Private_Key_Client. I will not repeat them here.

After receiving the QR code information data generation request sent by the QR code display module, the QR code security application can use the QR code security application Private_Key_Client to sign the QR code business information, preferably, it can be attached with a certificate to send To the QR code display module. The QR code service information and the signature of the QR code security application can be collectively referred to as QR code information data. The QR code information data may also include certificates. The QR code security application can send the QR code information data to the QR code display module.

Eighth embodiment

An embodiment of the present application provides a two-dimensional code information data generation device. As shown in FIG. 8, it may be an independent entity, such as a two-dimensional code security module. Preferably, it also includes a two-dimensional code display module.

The QR code security module can be implemented using a QR code security application located in a trusted execution environment. The QR code security application can generate a secure QR code security application public key Public_Key_Client and a QR code security application private key Private_Key_Client, specifically generated The process will not be repeated here.

After receiving the QR code service information sent by the QR code display module, the QR code security application can use the QR code security application private key Private_Key_Client for signature. Preferably, a certificate can be attached and sent to the QR code display module. The QR code service information and the signature of the QR code security application can be collectively referred to as QR code information data. The QR code information data may also include certificates. The QR code security application can send the QR code information data to the QR code display module.

The two-dimensional code display module can be implemented by a two-dimensional code display application, for example, it can be a module in an accounting system or instant messaging software, or a module independent of an accounting system or instant messaging software.

Ninth embodiment

The information data generating device provided by the embodiment of the present application, as shown in FIG. 9, the device includes: a request receiving module, a QR code service information signature module, and a QR code information data sending module. Preferably, the device may further include a public key sending module and a certificate receiving module; preferably, it may also include a two-dimensional code display module. Request receiving module, used to receive the request to generate QR code information data; QR code business information signature module, used to sign QR code business information according to the private key of the QR code security application; QR code information data transmission A module for sending QR code information data; wherein the QR code security application has an asymmetric key composed of the QR code security application public key and the QR code security application private key; the QR code information data It includes the QR code service information and the signature of the QR code security application on the QR code service information. The public key sending module is used to send the public key of the QR code security application to the QR code management server; the certificate receiving module is used to receive the certificate of the QR code security application; wherein the QR code information data also includes Certificate of the QR code security application. A two-dimensional code information data sending module, used to send the two-dimensional code information data to the two-dimensional code display module; the two-dimensional code display module, used to display the two-dimensional code in the form of a two-dimensional code Information data.

Tenth embodiment

The two-dimensional code information data generation device disclosed in this application may be an independent physical entity. As shown in FIG. 10, the device includes a processor and a memory. The memory may be divided into two parts, such as a first memory and a second memory. Preferably, a two-dimensional code security program is stored on the first memory, such as a two-dimensional code security application, and the second memory stores a two-dimensional code display application program.

The processor may execute the two-dimensional code security program on the first memory to implement the two-dimensional code anti-counterfeiting method based on the security application provided by the embodiments of the present application.

Eleventh embodiment

The two-dimensional code information data generation device disclosed in this application may be an independent physical entity. As shown in FIG. 11, the device includes a security chip and a first memory, and the first memory stores a two-dimensional code security program, such as two Dimension code security application; preferably, the device further includes a processor and a second memory, and a two-dimensional code display program is stored on the second memory.

The security chip may execute a two-dimensional code security program on the first memory to implement the security application-based two-dimensional code anti-counterfeiting method provided by the embodiments of the present application.

Twelfth embodiment

A schematic diagram of a two-dimensional code reading device provided by an embodiment of the present application, as shown in FIG. 12, the device includes: a scanning module and a verification module. The scanning module is used to scan the QR code to obtain the QR code business information and the QR code security application's signature on the QR code business information; the verification module is used to verify the signature of the QR code business information and confirm The QR code business information.

Preferably, the embodiment of the present application also provides another schematic diagram of a two-dimensional code reading device, as shown in FIG. 10, which includes a processor and a memory, and the memory stores a program, such as a two-dimensional code reading application program; The processor is configured to execute a two-dimensional code reading application program to implement the two-dimensional code reading method provided by the embodiment of the present application.

Preferably, the above two-dimensional code reading device is a mobile intelligent terminal or a computer.

Thirteenth embodiment

As shown in FIG. 13, the two-dimensional code system provided by the embodiment of the present application includes a two-dimensional code anti-counterfeiting device and a two-dimensional code reading device; preferably, the system further includes a two-dimensional code management server; The anti-counterfeiting device may be any two-dimensional code anti-counterfeiting device provided by the embodiments of the present application, and the two-dimensional reading device may be any two-dimensional code reading device provided by the examples of the present application.

In the embodiment of the present application, the public key of the QR code management server can be distributed through the QR code management server, and the private key of the QR code management server can be used to sign the public key of the QR code security application, and the security chip or trusted execution environment can be used. The scheme for protecting the private key of the QR code security application allows the QR code reading device to effectively verify the legality of the QR code security application locally, reducing the probability of risk occurrence.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.

The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flowchart and / or block diagram and a combination of the flow and / or block in the flowchart and / or block diagram may be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, special-purpose computer, embedded processing machine, or other programmable data processing device to produce a machine that enables the generation of instructions executed by the processor of the computer or other programmable data processing device A device for realizing the functions specified in one block or multiple blocks of one flow or multiple blocks of a flowchart.

These computer program instructions may also be stored in a computer readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, the instructions The device implements the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operating steps are performed on the computer or other programmable device to produce computer-implemented processing, which is executed on the computer or other programmable device The instructions provide steps for implementing the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.

In a typical configuration, the computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

The memory may include non-permanent memory, random access memory (RAM) and / or non-volatile memory in computer-readable media, such as read only memory (ROM) or flash memory (flash RAM). Memory is an example of computer-readable media.

Computer-readable media, including permanent and non-permanent, removable and non-removable media, can store information by any method or technology. The information may be computer readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, read-only compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, Magnetic tape cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device that includes a series of elements not only includes those elements, but also includes Other elements not explicitly listed, or include elements inherent to such processes, methods, goods, or equipment. Without more restrictions, the element defined by the sentence "include one ..." does not exclude that there are other identical elements in the process, method, commodity, or equipment that includes the element.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Moreover, the present application may take the form of a computer program product implemented on one or more computer usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.

The above is only an embodiment of the present application, and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the scope of the claims of this application.

Claims

A security application-based two-dimensional code anti-counterfeiting method, characterized in that the method includes:

The QR code security application receives a request to generate QR code information data;

The QR code security application signs the QR code business information according to the private key of the QR code security application;

QR code security application sends QR code information data;

The QR code security application has an asymmetric key composed of the public key of the QR code security application and the private key of the QR code security application; the QR code information data includes QR code service information and QR code security The application signs the service information of the two-dimensional code.
The method according to claim 1, wherein the method further comprises:

The QR code security application sends the public key of the QR code security application to the QR code management server;

The QR code security application receives the certificate of the QR code security application;

Wherein, the QR code information data also includes the certificate of the QR code security application.
The method according to claim 1, wherein the request for generating two-dimensional code information data includes the two-dimensional code service information; or in the two-dimensional code security application with the two-dimensional code service information In this case, the request to generate two-dimensional code information data is an empty request.
The method according to any one of claims 1 to 3, wherein the sending the QR code information data includes:

Sending the QR code information data to the QR code display module;

The method also includes:

The two-dimensional code display module displays the two-dimensional code information data in the form of a two-dimensional code.
The method of claim 2, wherein the method further comprises:

The QR code management server generates an asymmetric key used by the QR code management server, including the public key of the QR code management server and the private key of the QR code management server; and / or

The two-dimensional code management server generates a symmetric key used by the two-dimensional code management server.
The method of claim 5, wherein the method further comprises:

The QR code management server distributes the public key of the QR code management server to the QR code reading device and / or the QR code security application.
The method according to claim 1, wherein the QR code security application signs the QR code service information according to the private key of the QR code security application, including:

The QR code security application combines updated dynamic information and the business information to obtain updated business information;

The QR code security application signs the updated QR code service information according to the private key of the QR code security application.
A two-dimensional code reading method, characterized in that the method includes:

Scanning the QR code to obtain the QR code service information and the QR code security application's signature on the QR code service information;

Verify the signature of the QR code business information, and confirm the QR code business information.
The method according to claim 8, wherein the signature for verifying the service information of the two-dimensional code comprises:

Use the public key of the QR code security application to verify the signature of the QR code service information.
The method of claim 8, wherein the method further comprises:

Scan the QR code to obtain the certificate of the QR code security application;

Verify the certificate with the key generated by the QR code management server, and confirm the public key of the QR code security application contained in the certificate;

The verifying the signature and confirming the QR code service information includes:

Use the public key of the QR code security application contained in the certificate to verify the signature of the QR code service information, and confirm the QR code service information.
The method of claim 8, wherein the method further comprises:

The two-dimensional security application sends the public key of the two-dimensional security application to the QR code reading device; or

The QR code management server sends the public key of the two-dimensional security application to the QR code reading device; or the QR code management server sends the key generated by the QR code management server to the QR code reading device, where the two-dimensional code The key generated by the code management server is an asymmetric key or a symmetric key.
A security application-based two-dimensional code anti-counterfeiting method, characterized in that the method includes:

The QR code display module sends a request to generate QR code information data;

The QR code security application receives a request to generate QR code information data;

The QR code security application signs the QR code business information according to the private key of the QR code security application;

QR code securely sends QR code information data to the QR code display module;

The two-dimensional code display module displays the two-dimensional code information data in the form of a two-dimensional code;

The QR code reading device scans the QR code to obtain the QR code service information and the signature of the QR code service application on the QR code service information;

The two-dimensional code reading device verifies the signature of the two-dimensional code business information, and confirms the two-dimensional code business information;

The QR code security application has an asymmetric key composed of the public key of the QR code security application and the private key of the QR code security application; the QR code information data includes QR code service information and QR code security The application signs the service information of the two-dimensional code.
The method of claim 12, wherein the method further comprises:

The QR code security application sends the public key of the QR code security application to the QR code management server;

The QR code security application receives the certificate of the QR code security application;

Wherein, the QR code information data also includes the certificate of the QR code security application.
The method according to claim 12, wherein the request for generating two-dimensional code information data includes the two-dimensional code business information; or the two-dimensional code security application has the two-dimensional code business information In this case, the request to generate two-dimensional code information data is an empty request.
The method of claim 12, wherein the method further comprises:

The QR code management server generates an asymmetric key used by the QR code management server, including the public key of the QR code management server and the private key of the QR code management server; and / or

The two-dimensional code management server generates a symmetric key used by the two-dimensional code management server.
The method of claim 15, wherein the method further comprises:

The QR code management server distributes the public key of the QR code management server to the QR code reading device and / or the QR code security application.
The method according to claim 12, wherein the two-dimensional code security application signs the two-dimensional code service information according to the private key of the two-dimensional code security application comprises:

The QR code security application combines updated dynamic information and the business information to obtain updated business information;

The QR code security application signs the updated QR code service information according to the private key of the QR code security application.
The method according to claim 12 or 13, wherein the verification of the signature of the QR code service information by the QR code reading device includes:

The two-dimensional code reading device uses the public key of the two-dimensional code security application to verify the signature of the two-dimensional code service information.
The method of claim 18, further comprising:

Scan the QR code to obtain the certificate of the QR code security application;

Use the key generated by the QR code management server to verify the certificate and confirm the public key of the QR code security application contained in the certificate.
The method of claim 12, wherein the method further comprises:

The two-dimensional security application sends the public key of the two-dimensional security application to the QR code reading device; or

The QR code management server sends the public key of the two-dimensional security application to the QR code reading device; or the QR code management server sends the key generated by the QR code management server to the QR code reading device, where the two-dimensional code The key generated by the code management server is an asymmetric key or a symmetric key.
A two-dimensional code anti-counterfeiting device, characterized in that the device includes a two-dimensional code security module;

The QR code security module is also used to receive the request to generate QR code information data; sign the QR code business information according to the private key of the QR code security application; send the QR code information data;

The QR code security application has an asymmetric key composed of the public key of the QR code security application and the private key of the QR code security application; the QR code information data includes QR code service information and QR code security The application signs the service information of the two-dimensional code.
The device according to claim 21, wherein the QR code security module is further used to send the public key of the QR code security module to the QR code management server; receive the certificate of the QR code security module;

Wherein, the QR code information data also includes the certificate of the QR code security module.
The device according to claim 21, wherein the request for generating two-dimensional code information data includes the two-dimensional code service information; or the two-dimensional code security application has the two-dimensional code service information In this case, the request to generate two-dimensional code information data is an empty request.
The device according to any one of claims 21 to 23, wherein the two-dimensional code security module is further used to send the two-dimensional code information data to the two-dimensional code display module; Display the two-dimensional code information data in a manner.
The device according to claim 22, wherein the two-dimensional code management server is used to generate an asymmetric key used by the two-dimensional code management server, including the public key and the two-dimensional code management of the two-dimensional code management server The server's private key; and / or

The two-dimensional code management server is used to generate a symmetric key used by the two-dimensional code management server.
The device according to claim 25, wherein the two-dimensional code management server is further used to distribute the public key of the two-dimensional code management server to the two-dimensional code reading device and / or the two-dimensional code security module.
The device according to claim 21, wherein the two-dimensional code security module is further used to obtain updated business information by combining dynamic information and the business information; the signature key is signed according to the private key of the two-dimensional code security module The updated QR code business information.
A two-dimensional code anti-counterfeiting device, characterized in that the device includes a security chip and a memory, and a two-dimensional code security program is stored on the memory;

The security chip is used to execute the two-dimensional code security program to implement the method according to claim 1.
A two-dimensional code anti-counterfeiting device, characterized in that the device includes a processor and a memory, and the memory stores a two-dimensional code security program;

The processor is configured to execute the two-dimensional code security program to implement the method according to claim 1.
A two-dimensional code anti-counterfeiting device, characterized in that the device includes:

Request receiving module, which is used to receive the request to generate QR code information data;

The QR code business information signature module is used to sign the QR code business information according to the private key of the QR code security application;

QR code information data sending module, used to send QR code information data;

The QR code security application has an asymmetric key composed of the public key of the QR code security application and the private key of the QR code security application; the QR code information data includes QR code service information and QR code security The application signs the service information of the two-dimensional code.
The device of claim 30, wherein the device further comprises:

Public key sending module, used to send the public key of the QR code security application to the QR code management server;

Certificate receiving module, used to receive the certificate of QR code security application;

Wherein, the QR code information data also includes the certificate of the QR code security application.
The device according to claim 30, wherein the request for generating two-dimensional code information data includes the two-dimensional code service information; or the two-dimensional code security application has the two-dimensional code service information In this case, the request to generate two-dimensional code information data is an empty request.
The device according to any one of claims 30 to 32, wherein the device further comprises a two-dimensional code display module;

The two-dimensional code information data response sending module is used to send the two-dimensional code information data to the two-dimensional code display module;

The two-dimensional code display module is used to display the two-dimensional code information data in the form of a two-dimensional code.
The device according to claim 31, wherein the QR code management server generates an asymmetric key used by the QR code management server, including the public key of the QR code management server and the private key of the QR code management server Key; and / or

The two-dimensional code management server generates a symmetric key used by the two-dimensional code management server.
The device according to claim 34, wherein the QR code management server distributes the public key of the QR code management server to the QR code reading device and / or the QR code security application.
The device according to claim 30, wherein the two-dimensional code business information signature module is further used to combine the dynamic information and the business information to obtain updated business information; and sign the office according to the private key of the two-dimensional code security application The updated QR code business information.
A two-dimensional code reading device, characterized in that the two-dimensional code reading device includes:

A scanning module, configured to scan a two-dimensional code to obtain two-dimensional code business information and a signature of the two-dimensional code business information by a two-dimensional code security application;

A verification module is used to verify the signature of the QR code service information and confirm the QR code service information.
A two-dimensional code reading device, characterized in that the device includes a processor and a memory, and a program is stored on the memory;

The processor is configured to execute the program to implement the method according to claim 8.
A two-dimensional code anti-counterfeiting system, characterized in that the system includes the device according to any one of claims 21-36 and the two-dimensional code reading device according to claim 37 or 38.
The system according to claim 39, characterized in that the system further comprises a two-dimensional code management server;

The two-dimensional code management server is configured to send a key and / or generate a certificate to a two-dimensional code reading device and send the certificate to the device according to any one of claims 21-36.