Method of authenticating an object

• US 20070022294A1
• Filed: 07/18/2006
• Published: 01/25/2007
• Est. Priority Date: 07/25/2005
• Status: Active Grant

• Current Assignee: Silverbrook Research Pty Limited
• Original Assignee: Silverbrook Research Pty Limited
• Inventors: Silverbrook, Kia, Lapstun, Paul
• Granted Patent: US 7,856,554 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 16/9554 by using bar codes
• CPC Class Codes: G06F 3/03545 Pens or stylus
• CPC Class Codes: G06K 19/04 characterised by the shape
• CPC Class Codes: G06K 19/06009 with optically detectable marking G06K19/063, G06K19/08 take precedence
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06K 19/06046 Constructional details
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 40/03 Credit; Loans; Processing thereof
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method of authenticating an object comprising an identifier is provided. The method comprises the steps of: (i) reading the identifier using a data reader to generate identity data; (ii) sending an authentication request from the data reader to a computer system, the request comprising the identity data; (iii) receiving, in the data reader, an authentication message from the computer system, the authentication message comprising an indication of authenticity, a description of an object associated with the identity data and a digital signature of the authentication message; (iv) verifying the digital signature; and (v) conveying the description of the object to a user if the signature is valid.

Claims

1. A method of authenticating an object comprising an identifier, said method comprising the steps of:

reading the identifier using a data reader to generate identity data;

sending an authentication request from the data reader to a computer system, said request comprising the identity data;

receiving, in the data reader, an authentication message from the computer system, said authentication message comprising an indication of authenticity, a description of an object associated with the identity data and a digital signature of the authentication message;

verifying the digital signature; and

conveying the description of the object to a user if the signature is valid.

2. The method of claim 1, wherein the identifier comprises or is contained in any one of:

coded data disposed in or on a surface of the object;

an RFID tag;

a linear barcode;

a 2D barcode.

3. The method of claim 1, wherein the identifier comprises one of a plurality of tags disposed on or in a surface of the object, each tag containing coded data identifying the object identity.

4. The method of claim 3, wherein each tag identifies its own location on the surface.

5. The method of claim 1, wherein the digital signature is a public-key signature.

6. The method of claim 5, wherein the public-key signature was generated using a private key associated with the manufacturer of the object.

7. The method of claim 4, wherein the signature is verified using a public key associated with the private key.

8. The method of claim 7, wherein the data reader obtains the public key from a certificate.

9. The method of claim 7, wherein the certificate is associated with the manufacturer or a certificate authority.

10. The method of claim 1, wherein the authentication message identifies the manufacturer.

11. The method of claim 8, wherein the data reader verifies the certificate.

12. The method of claim 8, wherein the certificate includes a description of the manufacturer.

13. The method of claim 12, wherein the data reader conveys the description of the manufacturer to the user.

14. The method of claim 1, wherein the description of the object comprises at least one of:

an identity of the object;

a name or description of a manufacturer of the object;

a manufacturing date/time of the object;

a selling date/time of the object;

a sold status of the object;

a purchased status of the object; and

a pedigree of the object.

15. The method of claim 1, wherein the description of the object is conveyed to the user visually on a display or audibly.

16. The method of claim 1, wherein the authentication request comprises a nonce generated by the data reader and the authentication message comprises the nonce.

17. A method of authenticating an object comprising an identifier, said method comprising the steps of:

receiving, in a computer system, an authentication request from a data reader, said request comprising identity data generated by reading the identifier;

sending, to the data reader, an authentication message from the computer system, said authentication message comprising an indication of authenticity, a description of an object associated with the identity data and a digital signature of the authentication message,

thereby allowing the data reader to verify the digital signature and convey the description of the object to a user if the signature is valid.

18. A data reader for authenticating an object comprising an identifier, said data reader being configured for:

reading the identifier to generate identity data;

sending an authentication request from the data reader to a computer system, said request comprising the identity data;

receiving an authentication message from the computer system, said authentication message comprising an indication of authenticity, a description of an object associated with the identity data and a digital signature of the authentication message;

verifying the digital signature; and

conveying the description of the object to a user if the signature is valid.

19. The data reader of claim 19, which is a mobile phone.

20. A system for authenticating an object comprising an identifier, said system comprising a computer system configured for:

receiving an authentication request from a data reader, said request comprising identity data generated by reading the identifier;

sending, to the data reader, an authentication message, said authentication message comprising an indication of authenticity, a description of an object associated with the identity data and a digital signature of the authentication message,

thereby allowing the data reader to verify the digital signature and convey the description of the object to a user if the signature is valid.