ON-LINE GENERATION AND AUTHENTICATION OF ITEMS

• US 20090283589A1
• Filed: 12/02/2005
• Published: 11/19/2009
• Est. Priority Date: 12/03/2004
• Status: Abandoned Application

• Current Assignee: First Ondemand Limited
• Original Assignee: First Ondemand Limited
• Inventors: Fox, Francis Kirkman, Moore, Stephen James, Smith, Neil Richard Bradley, Lawson, Marcus Maxwell
• Application Number:
  US11/720,755
• Publication Number:
  US 20090283589A1
• Time in Patent Office: Days
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Items that require authentication, such as coupons or tickets are printed with a data carrier such as a data matrix or an RFID device. Encoded on the data carrier is a value based token, which comprises a header, a payload and a security portion. The header identifies the token type and also includes a unique identification of the token. A PIN flag may also be included. The payload may be encrypted and contain data which gives an authorised party access to a portion of a databases that stores information corresponding to the token identifier. The security portion may comprise a hash or a digital signature.

Claims

1. A system for generating tokens for authenticating items, comprising:

a VBT generator for generating a value based token having a header, and a security section, the header including a first data set including a token identifier, and the VBT including data providing access to a further data set stored at a remote location, and

an encoder for encoding the value based token onto a data carrier.

2. A system according to claim 1, wherein the data carrier is an RFID device.

3. A system according to claim 1, wherein the data carrier is a 2-dimensional bar code.

4. A system according to claim 3, wherein the 2-dimensional bar code is a data matrix.

5. A system according to claim 1, comprising a store of said further data sets, wherein the access providing data comprises an authority to access a location in the store corresponding to the token identifier in the first data set.

6. A system according to claim 5, wherein the data providing access is a token identification number (TIN) comprising at least part of the first data set.

7. A system according to claim 1, wherein the VBT includes a payload having at least a second data set.

8. A system according to claim 1, wherein the data providing access to a further data set is contained in the second data set in the payload.

9. A system according to claim 7, wherein the payload of the value based token is encrypted.

10. A system according to claim 1, wherein the header of the value based token includes a token type indicator.

11. A system according to claim 1, wherein the header of the value based token is unencrypted.

12. A system according to claim 1 wherein the header of the value based token includes a PIN flag indicating whether a PIN is required to validate the token.

13. A system according to claim 1 comprising an item generator for generating an item including the data carrier having the value based token for printing.

14. A system according to claim 1, wherein the payload of the value based token comprises at least one data set protected by a PIN, and the header includes a flag indicating that a PIN is required to validate the token.

15. A system according to claim 1, comprising an authenticator for comparing a token identifier read from a data carrier with a stored token identifier to validate the token if the comparison indicates a match.

16. A system according to claim 1, wherein the security section of the value based token comprises a hash.

17. A system according to claim 1 wherein the security section of the value based token comprises a digital signature.

24. A system according to claim 1, wherein the VBT includes a payload having at least a second data set.

25. An item according to claim 24, wherein the data providing access to a further data set is contained in a second data set in the payload

33. An item according to claim 1 wherein the header includes an indication that the value based token is a coupon.

34. An item according to claim 1, wherein the header includes an indication that the value based token is a ticket.

18. An item carrying an a machine readable authentication indicium, the indicium comprising a data carrier having encoded thereon a value based token having a header, and a security section, the header including a first data set including a token identifier, and data providing access to a further data set stored at a remote location.

19. An item according to claim 18, wherein the data carrier is an RFID device.

20. An item according to claim 18, wherein the data carrier is a 2-dimensional bar code.

21. An item according to claim 20, wherein the 2-dimensional bar code is a data matrix.

22. An item according to claim 18, wherein the data providing access to a further data set comprises an authority to access a location in a store corresponding to the token identifier in the first data set.

23. An item according to claim 18, wherein the data providing access is a token identification number (TIN) comprising at least part of the first data set.

26. An item according to claim 18, wherein the payload of the value based token is encrypted.

27. An item according to claim 18 wherein the header of the value based token includes a token type indicator.

28. An item according to claim 18, wherein the header of the value based token is unencrypted.

29. An item according to claim 18, wherein the header of the value based token includes a PIN flag indicating whether a PIN is required to validate the token.

30. An item according to claim 18, wherein the payload of the value based token comprises at least one data set protected by a PIN, and the header includes a flag indicating that a PIN is required to validate the token

31. An item according to claim 18, wherein the security section of the value based token comprises a hash.

32. An item according to claim 18, wherein the security section of the value based token comprises a digital signature.

35. An item according to claim 18, wherein the data carrier on which the value based token is encoded carries a plurality of value-based tokens.