A security policy put forward, which was based on the uniqueness and uniformity of RFID chips code and EPC, and carried out identification in the INTERNET, GSM, or other possible environments. The basic process: the data in RFID chips-products database-verification. The principle is that reader reads encrypted data in RFID chips some kind of products corresponding and uploads the data to public networks; the electronic product code database on line returns user verification after data processing.