Secure paper-free bills in workflow applications

• US 10,332,099 B2
• Filed: 05/01/2018
• Issued: 06/25/2019
• Est. Priority Date: 06/09/2017
• Status: Active Grant

• Current Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Original Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Inventors: Jammikunta, Ravi Kumar, Polisetty, Balaji, Sharma, Nishant, Dabral, Akhil
• Primary Examiner(s): Hess, Daniel A
• Application Number:
  US15/968,377
• Publication Number:
  US 20180357632A1
• Time in Patent Office: 420 Days
• Field of Search: 235494
• CPC Class Codes: G06Q 20/0457 the tickets being sent electronically
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A system and method allows for paperless billing transaction document exchanges between two parties to a sales transaction, with inherent document verification. In an embodiment, the system and method first encrypts the transaction document data according to a password which itself depends on unique transaction data in a particular sales document. The system and method then employs the unique data values to create a first 2-D barcode which directly represents the document data; and to create a second 2-D barcode which represents the encrypted document data. The two matrix codes are overlapped on a cell-by-cell basis into a single visual representation, employing multiple colors for different combinations of overlapped cells. At a receiving end, the two original matrix codes can be separated by extracting the two black and white 2-D barcodes from the combined color code. The data integrity of the received data is confirmed by checking that the encrypted 2-D barcode is consistent with the plaintext 2-D barcode. Additional methods are employed to attach secure, merged biometric image signatures, such as merged fingerprint images, to the merged 2-D barcode form of the transaction document.

Claims

1. A system, comprising:

a biometric data collection module;

a wireless module;

a memory;

a processor communicatively coupled to the biometric data collection module, the wireless module and the memory, wherein the processor is configured to;

generate, based upon a unique data from an invoice for a transaction, a unique password for data encryption;

encrypt the unique data with the unique password to generate ciphertext data;

generate a first monochrome two-dimensional bar code (first 2-D barcode) representing the plaintext unique data;

generate a second monochrome two-dimensional barcode (second 2-D barcode) representing the ciphertext unique data; and

merge the first 2-D barcode and the second 2-D barcode into a merged multicolored 2-D barcode to obtain a final invoice image, wherein;

each color of the multicolored 2-D barcode represents a designated pairing of a first color or a second color of the first 2-D barcode with a third color or a fourth color of the second 2-D barcode.

2. The system according to claim 1, wherein the processor is further configured to validate said final invoice image, whereby the integrity of the encoded data is determined.

3. The system according to claim 2, wherein the processor is further configured to:

extract a plaintext data 2-D barcode and a ciphertext data 2-D barcode from the merged multicolored 2-D barcode of the final invoice image;

restore the plaintext data from the plaintext data 2-D barcode;

restore the ciphertext data from the ciphertext data 2-D barcode;

determine if the plaintext data restored from the plaintext data 2-D barcode matches the ciphertext data restored from the ciphertext data 2-D barcode;

upon determining that the plaintext data restored from the plaintext data 2-D barcode matches the ciphertext data restored from the ciphertext data 2-D barcode, determine that data integrity has been maintained; and

upon determining that the plaintext data restored from the plaintext data 2-D barcode does not match the ciphertext data restored from the ciphertext data 2-D barcode, determine that data integrity has been lost.

4. The system according to claim 3, wherein the processor is further configured to:

generate, via the data restored from the plaintext 2-D barcode, the unique password for data encryption; and

decrypt, via the unique password, the ciphertext data restored from the ciphertext data 2-D barcode to recover an unencrypted data.

5. The system according to claim 4, wherein the processor is further configured to:

extract a plaintext data 2-D barcode and a first ciphertext data 2-D barcode from the merged multicolored 2-D barcode of the final invoice image;

restore the plaintext data from the plaintext data 2-D barcode;

generate, via the plaintext data restored from the actual 2-D barcode, the unique password for data encryption;

construct a second ciphertext data 2-D barcode based on the plaintext data restored from the plaintext 2-D barcode and the unique password;

determine if the first ciphertext 2-D barcode and the second ciphertext 2-D barcode match;

upon determining that the first ciphertext 2-D barcode and the second ciphertext 2-D barcode match, determine that data integrity has been maintained; and

upon determining that the first ciphertext 2-D barcode and the second ciphertext 2-D barcode do not match, determine that data integrity has been lost.

6. The system according to claim 5, wherein the processor is further configured to generate the unique password for data encryption based upon the unique data by generating the unique password via a proprietary password generation algorithm.

7. The system according to claim 6, wherein the processor is further configured to:

generate a unique image shuffling sequence based upon the unique data;

obtain a first biometric image and a second biometric image of a respective first and second party to the invoiced transaction;

divide each of the first biometric image and the second biometric image into a respective plurality of first image parts and second image parts;

spatially shuffle each of the first plurality of image parts and the second plurality of image parts to generate a respective first shuffled biometric image and a second shuffled biometric image, wherein said spatial shuffling is in accordance with the unique image shuffling sequence;

merge the first shuffled biometric image and the second shuffled biometric image into a combined shuffled biometric image; and

concatenate the merged multicolored 2-D barcode and the combined shuffled biometric image to form the final invoice image.

8. The system according to claim 7, wherein the processor is further configured to generate the image shuffling sequence via a proprietary data shuffling algorithm.

9. The system according to claim 8, wherein the processor is further configured to:

validate said final invoice image, whereby the integrity of the encoded shuffled biometric data is determined.

10. The system according to claim 9, wherein the processor is further configured to:

separate the final invoice image into two separate images to recover a retrieved merged multicolored 2-D barcode and a retrieved combined shuffled biometric image;

extract a plaintext data 2-D barcode from the retrieved merged multicolored 2-D barcode;

restore the unique plaintext data from the plaintext data 2-D barcode;

generate, based upon the unique data restored from the plaintext 2-D barcode, the unique fingerprint shuffling sequence;

recover from the combined shuffled biometric image the first shuffled biometric image and the second shuffled biometric image; and

deshuffle, based on the image shuffling sequence, at least one of the first biometric image and the second biometric image.

11. A method, comprising:

generating a unique password for data encryption;

encrypting unique data with the unique password to generate ciphertext data;

generating a first monochrome two-dimensional bar code (first 2-D barcode) representing the plaintext unique data;

generating a second monochrome two-dimensional barcode (second 2-D barcode) representing the ciphertext unique data; and

merging the first 2-D barcode and the second 2-D barcode into a merged multicolored 2-D barcode to obtain a final image, comprising;

overlapping corresponding cells of the first 2-D barcode and the second 2-D barcode.

12. The method of claim 11, wherein each color of the multicolored 2-D barcode represents a designated pairing of a first color or a second color of the first 2-D barcode with a third color or a fourth color of the second 2-D barcode.

13. The method of claim 12, wherein said validating comprises:

extracting a plaintext data 2-D barcode and a first ciphertext data 2-D barcode from the merged multicolored 2-D barcode of the final image;

restoring the plaintext data from the plaintext data 2-D barcode;

generating, via the plaintext data restored from the actual 2-D barcode, the unique password for data encryption;

constructing a second ciphertext data 2-D barcode based on the plaintext data restored from the plaintext 2-D barcode and the unique password;

determining if the first ciphertext 2-D barcode and the second ciphertext 2-D barcode match;

upon determining that the first ciphertext 2-D barcode and the second ciphertext 2-D barcode match, determining that data integrity has been maintained; and

upon determining that the first ciphertext 2-D barcode and the second ciphertext 2-D barcode do not match, determining that data integrity has been lost.

14. The method of claim 11, wherein said validating comprises:

validating said final image, whereby the integrity of the encoded data is determined, wherein said validating comprises;

extracting a plaintext data 2-D barcode and a ciphertext data 2-D barcode from the merged multicolored 2-D barcode of the final image;

restoring the plaintext data from the plaintext data 2-D barcode;

restoring the ciphertext data from the ciphertext data 2-D barcode;

determining if the plaintext data restored from the plaintext data 2-D barcode matches the ciphertext data restored from the ciphertext data 2-D barcode;

upon determining that the plaintext data restored from the plaintext data 2-D barcode matches the ciphertext data restored from the ciphertext data 2-D barcode, determining that data integrity has been maintained; and

upon determining that the plaintext data restored from the plaintext data 2-D barcode does not match the ciphertext data restored from the ciphertext data 2-D barcode, determining that data integrity has been lost.

15. The method of claim 14, wherein determining if the plaintext data restored from the plaintext data 2-D barcode matches the ciphertext data restored from the ciphertext data 2-D barcode comprises:

generating, via the data restored from the plaintext 2-D barcode, the unique password for data encryption; and

decrypting, via the unique password, the ciphertext data restored from the ciphertext data 2-D barcode to recover an unencrypted data.

16. The method of claim 11, wherein generating the unique password for data encryption based upon the unique data comprises generating the unique password via a proprietary password generation algorithm.

17. The method of claim 11, further comprising:

generating a unique image shuffling sequence based upon the unique data;

obtaining a first biometric image and a second biometric image of a respective first and second party to the invoiced transaction;

dividing each of the first biometric image and the second biometric image into a respective plurality of first image parts and second image parts;

spatially shuffling each of the first plurality of image parts and the second plurality of image parts to generate a respective first shuffled biometric image and a second shuffled biometric image, wherein said spatial shuffling is in accordance with the unique image shuffling sequence;

merging the first shuffled biometric image and the second shuffled biometric image into a combined shuffled biometric image; and

concatenating the merged multicolored 2-D barcode and the combined shuffled biometric image to form the final image.

18. The method of claim 17, wherein generating the unique image shuffling sequence based upon the unique data comprises generating the image shuffling sequence via a proprietary data shuffling algorithm.

19. The method of claim 17, further comprising:

validating said final image, whereby the integrity of the encoded shuffled biometric data is determined.

20. The method of claim 19, wherein said validating comprises:

separating the final image into two separate images to recover a retrieved merged multicolored 2-D barcode and a retrieved combined shuffled biometric image;

extracting a plaintext data 2-D barcode from the retrieved merged multicolored 2-D barcode;

restoring the unique plaintext data from the plaintext data 2-D barcode;

generating, based upon the unique data restored from the plaintext 2-D barcode, the unique fingerprint shuffling sequence;

recovering from the combined shuffled biometric image the first shuffled biometric image and the second shuffled biometric image; and

deshuffling, based on the image shuffling sequence, at least one of the first biometric image and the second biometric image.