METHOD OF AUTHENTICATING SECURITY DOCUMENTS

• US 20080237359A1
• Filed: 01/25/2005
• Published: 10/02/2008
• Est. Priority Date: 05/18/2004
• Status: Active Grant

• Current Assignee: Silverbrook Research Pty Limited
• Original Assignee: Silverbrook Research Pty Limited
• Inventors: Silverbrook, Kia, Lapstun, Paul
• Granted Patent: US 7,441,712 B2
• Time in Patent Office: Days
• US Class Current: 235/494
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G07D 7/004 using digital security elements, e.g. information coded on a magnetic thread or strip
• CPC Class Codes: H04L 2209/20 Manipulating the length of blocks of bits, e.g. padding or block truncation
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: Y02A 90/10 Information and communication technologies [ICT] supporting adaptation to climate change, e.g. for weather forecasting or climate simulation

Abstract

A method for authenticating a security document having coded data thereon. The method includes, using a sensing device to sense at least one coded data portion, which is then used to generate indicating data. The indicating data is transferred to a computer system, which is responsive to determine, a received identity and a received signature part, from the indicating data. These are then used to authenticate the security document.

Claims

1. A method for authenticating a security document for a security transaction, the security document having disposed thereon or therein coded data including a plurality of coded data portions each encoding an identity of the security document and a respective part of a digital signature of at least part of the identity retained by a computer system, the method including, in a sensing device:

sensing at least one coded data portion;

generating, using the sensed coded data portion, indicating data at least partially indicative of;

the identity of the security document; and

the signature part

encoded by the sensed coded data portion; and

,

transferring the indicating data to a computer system, the computer system being responsive to the indicating data to;

determine, from the indicating data, a received identity, and a received signature part;

authenticate the security document by verifying that the received signature part is part of the digital signature of the received identity and thereby allowing use of the security document in the security transaction.

2. A method according to claim 1, wherein the method includes, in the computer system:

determining, using the determined identity, a key;

generating, using the determined identity and the key, a generated signature; and

,

comparing the at least one determined signature part and the generated signature to thereby authenticate the security document.

3. A method according to claim 1, wherein the entire signature is encoded within a plurality of coded data portions, the sensing device being responsive to sensing a plurality of coded data portions to generate indicating data indicative of the entire signature, and wherein the method includes, in the computer system:

determining, using the indicating data, a determined signature;

determining, using the determined identity, a key;

generate, using the determined signature and the key, a generated identity; and

,

compare the determined identity and the generated identity to thereby authenticate the security document.

4. A method according to claim 1, wherein the method includes, in the computer system:

determining, using the determined identity, tracking data at least partially indicative of the location of the security document; and

,

determining, using the tracking data, if the security document is a possible duplicate.

5. A method according to claim 1, wherein the method includes, in the computer system, and in response to a successful authentication:

authorising a transaction; and

,

updating tracking data relating to the security document, the tracking data being at least partially indicative of the location of the security document.

6. A method according to claim 1, wherein the method includes, in the computer system, and in response to a successful authentication, determining, using the received identity, a value associated with the security document.

7. A method according to claim 1, wherein the sensing device includes an indicator, where the method includes causing the indicator to provide at least one of:

an indication of the success of sensing the at least one coded data portion;

an indication of an authenticity of the security document;

a count indicative of the number of sensed security documents;

the value of the sensed security document;

an incremental value of the sensed security documents; and

,

if the entire signature is encoded in a plurality of data portions, an indication of whether the entire signature can be determined from a number of sensed coded data portions.

8. A method according to claim 1, wherein the signature is a digital signature of at least part of the identity and at least part of predetermined padding, the padding being at least one of:

a predetermined number; and

,

a random number.

9. A method according to claim 6, wherein the coded data includes a plurality of layouts, each layout defining the position of a plurality of first symbols encoding the identity, and a plurality of second symbols defining at least part of the signature.

10. A method according to claim 1, wherein the coded data is at least one of:

substantially invisible to an unaided human.

printed on the surface using at least one of;

an invisible ink; and

,

an infrared-absorptive ink;

provided substantially coincident with visible human-readable information.

12. A method according to claim 1, wherein the entire signature is formed from a plurality of signature parts, and wherein each coded data portion encodes a respective signature part.

13. A method according to claim 1, wherein at least some of the coded data portions encode at least one of:

a location of the respective coded data portion;

a position of the respective coded data portion on the surface;

a size of the coded data portions;

a size of a signature;

an identity of a signature part; and

,

units of indicated locations.

14. A method according to claim 1, wherein the coded data includes at least one of:

redundant data;

data allowing error correction;

Reed-Solomon data; and

,

Cyclic Redundancy Check (CRC) data.

15. A method according to claim 6, wherein the digital signature includes at least one of:

a random number associated with the identity;

a keyed hash of at least the identity;

a keyed hash of at least the identity produced using a private key, and verifiable using a corresponding public key;

cipher-text produced by encrypting at least the identity;

cipher-text produced by encrypting at least the identity and a random number;

cipher-text produced using a private key, and verifiable using a corresponding public key; and

,

cipher-text produced using RSA encryption.

16. A method according to claim 1, wherein the security document is at least one of:

a security note;

a check;

a credit or debit card;

a redeemable ticket, voucher, or coupon;

a lottery ticket or instant win ticket; and

,

an identity card or document, such as a driver'"'"'s license or passport.

17. A method according to claim 1, wherein the identity is indicative of at least one of:

a security note attribute including at least one of;

security;

issue country;

denomination;

note side;

printing works; and

serial number;

a check attribute including at least one of;

security;

issuing institution;

account number;

serial number;

expiry date;

check value; and

limit;

a card attribute including at least one of;

card type;

issuing institution;

account number;

issue date;

expiry date; and

limit.

18. A method according to claim 1, wherein the coded data is arranged in accordance with at least one layout having n-fold rotational symmetry, where n is at least two, the layout including n identical sub-layouts rotated 1/n revolutions apart about a centre of rotation, at least one sub-layout including rotation-indicating data that distinguishes that sub-layout from each other sub-layout.

19. A method according to claim 1, wherein the coded data is arranged in accordance with at least one layout having n-fold rotational symmetry, where n is at least two, the layout encoding orientation-indicating data comprising a sequence of an integer multiple m of n symbols, where m is one or more, each encoded symbol being distributed at n locations about a centre of rotational symmetry of the layout such that decoding the symbols at each of the n orientations of the layout produces n representations of the orientation-indicating data, each representation comprising a different cyclic shift of the orientation-indicating data and being indicative of the degree of rotation of the layout.

11. (canceled)

20. (canceled)