System, method and process for product authentication and verification
A system, method and process for product authentication and verification using Near Field Communication (NFC) technology, blockchain technology (Hyperledger), and cryptography. A unique product identifier is generated for a unique individual product, incorporated into a data structure for that product, and the data structure is recorded to a blockchain initiating an immutable record for the unique product identifier. An NFC tag is encoded with a tap-unique URL that comprises the unique product identifier and a cryptographic output and the tag is affixed to its corresponding unique individual product. Each time the tag is tapped by an NFC proximity coupling device, a web client operating on the proximity coupling device reads and opens the URL whereupon the tag is verified using a cryptographic verification process and generating a verification result. The verification result is transmitted to and recorded on the blockchain ledger for the unique product identifier, thereby creating an immutable record of each tap interaction result of the tag affixed to the product. In embodiments, a verification certificate comprising the verification result is transmitted to the web client operating on the proximity coupling device for viewing by a user.
1. A method for authenticating a product, comprising:
generating a unique product identifier for the product,
generating a data structure for the product, wherein the data structure comprises the unique product identifier,
sending a request to a blockchain to record the data structure for the product,
whereupon receiving the request, the blockchain records the data structure for the product on the blockchain in a transaction, generates a blockchain transaction identifier for the transaction, and transmits the blockchain transaction identifier for the transaction in response to the request,
receiving the blockchain transaction identifier for the transaction,
adding the blockchain transaction identifier for the blockchain transaction to the data structure for the product, thereby associating the blockchain transaction identifier with the unique product identifier,
encoding a near field communication tag with an initial tap-unique URL wherein the initial tap-unique URL comprises the unique product identifier,
affixing the encoded near field communication tag to the product,
whereupon, when the encoded tag affixed to the product engages in a tap interaction with a proximity coupling device,
the encoded tag generates a subsequent tap-unique URL on the tag, wherein the subsequent tap-unique URL comprises the unique product identifier, and
a web client operating on the proximity coupling device reads and opens the subsequent tap-unique URL,
receiving from the web client the unique product identifier and a one or more tap interaction data generated from the tap interaction, and
verifying an authenticity of the product.
2. The method of claim 1 , wherein the subsequent tap-unique URL further comprises a web host portion, a tag data, and an initial cryptographic output data.
3. The method of claim 2 , wherein the tag data is encrypted.
4. The method of claim 3 , wherein the initial cryptographic output data comprises one of the following: a one-time password, a digital signature, or a message authentication code.
5. The method of claim 4 , wherein the step of verifying the authenticity of the product comprises:
reading the initial cryptographic output data from the subsequent tap-unique URL,
decrypting the encrypted tag data of the subsequent tap-unique URL using an encryption key associated with the product to generate a decrypted tag data,
generating a subsequent cryptographic output data using the decrypted tag data, a cryptographic algorithm, and the encryption key,
validating the subsequent cryptographic output data by comparing it against the initial cryptographic output data,
determining a verification result, wherein if the subsequent cryptographic output data is validated, the verification result is that the product is authentic, and
transmitting the verification result to the proximity coupling device to be viewed by a user.
6. The method of claim 2 , wherein the tag data comprises a one or more of the following: a unique tag identifier, an interaction counter data and a tag tamper detection data.
7. The method of claim 1 , wherein the data structure further comprises a one or more of the following: a one or more product code, an encoding date of the tag, a name of the product, and a name of a tenant of the product.
8. The method of claim 1 , wherein the blockchain is fee-less.
9. The method of claim 1 , wherein the tag is a dual NFC/RFID tag.
10. A system for authenticating a product, comprising:
a computer processor, and
an API module executing on the computer processor and configured to enable the computer processor to:
generate a unique product identifier for the product,
generate a data structure for the product, wherein the data structure comprises the unique product identifier,
send a request to a blockchain module to record the data structure for the product,
whereupon receiving the request from the API module, the blockchain module records the data structure for the product in a transaction, generates a blockchain transaction identifier for the transaction, and transmits to the API module the blockchain transaction identifier for the transaction in response to the request,
receive from the blockchain module the blockchain transaction identifier for the transaction,
add the blockchain transaction identifier for the transaction to the data structure for the product, thereby associating the blockchain transaction identifier with the unique product identifier,
encode a near field communication tag to be affixed to the product with an initial tap-unique URL wherein the initial tap-unique URL comprises the unique product identifier,
whereupon, when the tag affixed to the product engages in a tap interaction with a proximity coupling device,
the tag generates a subsequent tap-unique URL on the tag, wherein the subsequent tap-unique URL comprises the unique product identifier, and
a web client operating on the proximity coupling device reads and opens the subsequent tap-unique URL,
receive from the web client the unique product identifier and a one or more tap interaction data generated from the tap interaction, and
verify an authenticity of the product.
11. The system of claim 10 , wherein the subsequent tap-unique URL further comprises a web host portion, a tag data, and an initial cryptographic output data.
12. The system of claim 11 , wherein the tag data is encrypted.
13. The system of claim 11 , wherein the initial cryptographic output data comprises a one-time password, a digital signature, or a message authentication code.
14. The system of claim 13 , wherein to verify the authenticity of the product, the API module is further configured to enable the computer processor to:
read the initial cryptographic output data from the subsequent tap-unique URL,
decrypt the encrypted tag data of the subsequent tap-unique URL using an encryption key associated with the product to generate a decrypted tag data,
generate a subsequent cryptographic output data using the decrypted tag data, a cryptographic algorithm, and the encryption key,
validate the subsequent cryptographic output data by comparing it against the initial cryptographic output data,
determine a verification result, wherein, if the subsequent cryptographic output data is validated, the verification result is that the product is authentic, and
transmit the verification result to the proximity coupling device to be viewed by a user.
15. The system of claim 14 , wherein the subsequent cryptographic output data comprises a one-time password, a digital signature, or a message authentication code.
16. The system of claim 11 , wherein the tag data comprises a one or more of the following: a unique tag identifier, an interaction counter data and a tag tamper detection data.
17. The system of claim 10 , wherein the API module is further configured to enable the computer processor to:
generate a downloadable verification certificate, and
transmit the downloadable verification certificate to the proximity coupling device.
18. The system of claim 10 , wherein the blockchain module is fee-less.
19. The system of claim 10 , wherein the tag is a dual NFC/RFID tag.
20. A method for creating an immutable tap interaction record for a product, comprising:
generating a unique product identifier for the product,
sending a request to a blockchain to record the unique product identifier,
whereupon receiving the request, the blockchain records the unique product identifier on the blockchain in a transaction, generates an initial blockchain transaction identifier for the transaction, and transmits the initial blockchain transaction identifier for the transaction in response to the request,
receiving the initial blockchain transaction identifier for the transaction,
encoding a near field communication tag with an initial tap-unique URL wherein the initial tap-unique URL comprises the unique product identifier,
affixing the encoded near field communication tag to the product,
whereupon, when the encoded tag affixed to the product engages in a tap interaction with a proximity coupling device,
the encoded tag generates a subsequent tap-unique URL on the tag, wherein the subsequent tap-unique URL comprises the unique product identifier, and
a web client operating on the proximity coupling device reads and opens the subsequent tap-unique URL,
receiving from the web client the unique product identifier and a one or more tap interaction data generated from the tap interaction,
identifying the initial blockchain transaction identifier for the unique product identifier received from the web client,
whereupon, based on the initial blockchain transaction identifier, sending a subsequent request to the blockchain to record the one or more tap interaction data generated from the tap interaction, and
whereupon receiving the subsequent request, the blockchain records the one or more tap interaction data on the blockchain in a subsequent transaction, generates a subsequent blockchain transaction identifier for the subsequent transaction, and transmits the subsequent blockchain transaction identifier for the subsequent transaction in response to the request, and
receiving the subsequent blockchain transaction identifier for the subsequent transaction.
21. The method of claim 20 , wherein the steps commencing with the tap interaction are repeated one or more times, resulting in one or more subsequent transactions on the blockchain and one or more subsequent blockchain transaction identifiers, and wherein the initial blockchain transaction identifier as recited therein comprises a previous most recent subsequent blockchain transaction identifier.