Authenticating and managing item ownership and authenticity

• US 10,387,695 B2
• Filed: 01/05/2016
• Issued: 08/20/2019
• Est. Priority Date: 11/08/2013
• Status: Active Grant

• Current Assignee: Vattaca, Llc
• Original Assignee: Vattaca, Llc
• Inventors: Engels, Daniel W., Smith, Eric M., Mandel, Ross
• Primary Examiner(s): Fleischer, Mark A
• Application Number:
  US14/987,977
• Publication Number:
  US 20160132704A1
• Time in Patent Office: 1,323 Days
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 7/10366 the interrogation device being adapted for miscellaneous applications
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for creating an authentication tag includes receiving, at an authentication server, tagging device data and item data from a tagging device, authenticating, by the authentication server, the tagging device using the tagging device data, generating an authentication tag, and sending, by the authentication server, the authentication tag to the electronic device. The tagging device is affixed to an item, and the authentication tag comprises a digital signature provided by the authentication server.

Claims

1. A method implemented by a reading device, the method comprising:

communicating with a tagging device affixed to an item;

receiving tagging device data and item data from the tagging device, wherein the tagging device data comprise a first digital signature and a first time stamp;

sending the tagging device data and the item data to an authentication server;

receiving an authentication of the tagging device from the authentication server;

requesting an authentication tag in response to receiving the authentication; and

receiving the authentication tag,

wherein the authentication tag comprises a second digital signature and a second time stamp, and

wherein the authentication tag verifies authenticity of the item at a time identified by the second time stamp.

2. The method of claim 1, wherein the tagging device comprises a linear bar code, a Quick Response (QR) code, a radio-frequency identification (RFID) device, a near-field communication (NFC)-enabled device, or a Bluetooth-enabled device.

3. The method of claim 1, wherein the authentication tag comprises a linear bar code or a Quick Response (QR) code.

4. The method of claim 1, wherein the first digital signature comprises at least one of a public key cipher, a hash function, or a keyed hash function.

5. The method of claim 1, further comprising further sending the tagging device data and the item data as distinct data.

6. The method of claim 1, wherein at least one of the first digital signature or the second digital signature is generated by a signing authority.

7. The method of claim 1, wherein the first time stamp is associated with a generation time of the first digital signature.

8. The method of claim 1, wherein the authentication based on the first digital signature and the first time stamp.

9. The method of claim 8, wherein the authentication is further based on the item data.

10. The method of claim 1, wherein the second digital signature includes the tagging device data.

11. The method of claim 1, wherein the second digital signature comprises a cipher, a hash function, or a keyed hash function.

12. The method of claim 1, further comprising receiving a certificate of authenticity comprising the authentication tag.

13. The method of claim 12, wherein the certificate of authenticity further comprises at least one of a product identifier (ID), a vendor ID, ownership data, the second time stamp, or a tagging device ID associated with the item.

14. The method of claim 12, further comprising:

sending the certificate of authenticity to a remote device; and

using the certificate of authenticity to authenticate the tagging device with a third party.

15. A method implemented by an authentication server, the method comprising:

receiving tagging device data and item data originating from a tagging device affixed to an item;

authenticating the tagging device using the tagging device data;

sending an authentication of the tagging device to a reading device;

receiving a request for an authentication tag in response to sending the authentication;

generating the authentication tag, wherein the authentication tag comprises a second digital signature and a second time stamp, and wherein the authentication tag verifies authenticity of the item at a time identified by the second time stamp; and

sending the authentication tag to the reading device.

16. The method of claim 15, wherein the tagging device data comprise a first digital signature and a first time stamp.

17. The method of claim 15, further comprising:

verifying a user associated with the reading device and the item; and

further sending the authentication tag to the reading device in response to verifying the user.

18. The method of claim 15, further comprising publishing the authentication tag.

19. The method of claim 15, wherein the authentication tag comprises a Quick Response (QR) code.

20. The method of claim 15, wherein the second digital signature includes the tagging device data.

21. A method implemented by a reading device, the method comprising:

receiving user credentials;

sending the user credentials to an authentication server;

receiving user verification based on the user credentials;

communicating with a tagging device affixed to an item;

receiving tagging device data and item data from the tagging device, wherein the tagging device data comprise a first digital signature and a first time stamp;

sending the tagging device data and the item data to the authentication server;

receiving an authentication of the tagging device from the authentication server;

requesting an authentication tag in response to receiving the authentication; and

receiving the authentication tag,

wherein the authentication tag comprises a second digital signature and a second time stamp, and

wherein the authentication tag verifies authenticity of the item at a time identified by the second time stamp.

22. The method of claim 21, wherein the user credentials are for an owner of the item.

23. The method of claim 22, wherein the user credentials are associated with a first registered user of the authentication server, and wherein the method further comprises:

sending an ownership change request to the authentication server, wherein the ownership change request comprises data associated with a second registered user of the authentication server; and

receiving a message indicating an ownership status has changed from the first registered user to the second registered user.

24. The method of claim 21, further comprising further communicating with the tagging device in response to receiving the user verification and further comprising further sending the tagging device data and the item data as distinct data.