System and Method for Customer Authentication of an Item

• US 20100106645A1
• Filed: 10/05/2009
• Published: 04/29/2010
• Est. Priority Date: 03/16/2005
• Status: Active Grant

• Current Assignee: Kloke LLC
• Original Assignee: DT Labs LLC
• Inventors: Peckover, Douglas
• Granted Patent: US 7,941,376 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A system, apparatus and method is provided for authentication of an item or a label by storing unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label, generating a pointer to each stored unique random serial number/code and storing the generated pointer(s) in a client data storage. During or prior to a production run of the item(s) or label(s): the generated point(s) are sent from the client data storage to one or more media devices, the generated pointer(s) are obtained from the media device using a post-content manager, the unique random serial number(s)/code(s) are obtained from the server via the post-content manager using the generated pointer(s), the obtained unique random serial number(s)/code(s) are sent to the media device, and the received unique random serial number(s)/code(s) are imprinted on the item(s) or the label(s) using the media device.

Claims

1. A system for authentication of an item or a label comprising:

one or more clients, wherein each client has a data storage, a post-content manager and one or more media devices communicably coupled to the data storage and the post-content manager;

a server communicably coupled to the one or more clients, wherein the server stores one or more unique random serial numbers or codes in a secure storage that can be used to authenticate the item or the label, generates a pointer to each stored unique random serial number or code stored in the secure storage, and sends at least one of the generated pointer(s) to at least one of the clients; and

wherein during or prior to a production run of the item(s) or label(s);

(a) the post-content manager obtains the generated pointer(s) from the media device, obtains the unique random serial number(s) or code(s) from the server using the generated pointer(s), and transmits the obtained unique random serial number(s) or code(s) to the one or more media devices, and (b) the media device imprint the received unique random serial number(s) or code(s) on the item(s) or the label(s).

2. The system as recited in claim 1, wherein the unique random serial number(s) or code(s) are generated by the server.

3. The system as recited in claim 1, wherein:

the one or more clients are operated by a contract manufacturer and the server is operated by an owner, a primary manufacturer or agent of the owner or the primary manufacturer;

the contract manufacturer does not have access to or control over the unique random serial number(s) or code(s); and

the labels are printed and attached to the items.

4. The system as recited in claim 3, wherein the unique random serial number(s) or code(s) are generated by the owner or the primary manufacturer and transmitted securely to the server.

5. The system as recited in claim 1, wherein:

the pointer(s) are requested by the one or more clients as part of a production run of the items or labels;

the one or more clients comprise a computer, a laptop computer, a handheld computer, a desktop computer, a workstation, a data terminal, a manufacturing controller or a combination thereof;

the media devices comprise a printer, a plotter, a label maker, a copier, an inscribing device, a stamping machine, an etching machine or a combination thereof; and

the server is communicably coupled to the one or more clients via a computer network, a telecommunications network, a wireless communications link, a physical connection, a landline, a satellite communications link, an optical communications link, a cellular network or a combination thereof; and

the items comprise a manufactured product.

6. The system as recited in claim 1, wherein:

the unique random serial number(s) or code(s) are combined with a contact information or a security mechanism;

the contact information comprises a phone number, a web address, an instant messaging address, a communications address, or a combination thereof;

the contact information is used to certify the authenticity of the item or label, or determine whether an expiration date associated with the item or label has been exceeded;

an authenticity confirmation, an authenticity denial, the expiration date, one or more instructions, promotions or advertisements, or a combination thereof are provided whenever the contact information is used; and

the security mechanism comprises a scratch-off portion, a special ink, a special thread, a special code, a holographic symbol, or a combination thereof.

7. The system as recited in claim 1, wherein the server monitors the production run to detect illegal or unauthorized production of the item(s) or label(s), and detects any attempt to circumvent the system.

8. The system as recited in claim 1, further comprising:

a pre-content manager on each client communicably coupled to the data storage, the media device and the post-content manager, wherein the pre-content manager receives the pointer(s) indicating where the unique random serial number(s) or code(s) has been stored in the secure storage and stores the pointer(s) in the data storage; and

wherein the post-content manager obtains the unique random serial number(s) or code(s) from the pre-content manager using the pointer(s) instead of from the server.

9. The system as recited in claim 8, wherein the pre-content manager further receives a first request from one or more applications for data stored on the data storage, determines whether the requested data includes the unique random serial number(s) or code(s) or a non-sensitive data, provides the non-sensitive data to the post-content manager or to the one or more applications, and performs the following steps whenever the requested data includes the unique random serial number(s) or code(s):

sends a second request containing the pointer(s) to a server that authenticates the second request, denies the first request whenever the authentication fails, and receives and provides the unique random serial number(s) or code(s) to the post-content manager whenever the authentication succeeds.

10. The system as recited in claim 8, wherein the post-content manager further performs the following steps whenever the post-content manager receives the unique random serial number(s) or code(s) from the server or the pre-content manager:

sends one or more authentication codes to the pre-content manager or the server, accepts the unique random serial number(s) or code(s) whenever the one or more authentication codes is accepted by the server or the pre-content manager, and rejects the unique random serial number(s) or code(s) whenever the one or more authentication codes is rejected by the pre-content manger or the server.

11. The system as recited in claim 8, wherein the pre-content manager performs one or more corrective or destructive actions whenever the authentication fails and the client is determined to be compromised, lost or stolen.

12. The system as recited in claim 1, wherein the communications between the server and the client are encrypted.

13. The system as recited in claim 1, wherein the server further comprises:

an application program interface layer;

an authentication layer coupled to the application program layer;

a plug-in layer coupled to the authentication layer;

a data layer coupled to the plug-in layer; and

an events layer coupled to the data layer, the plug-in layer and the authentication layer.

14. The system as recited in claim 1, wherein the pointer(s) is subsequently used to access the unique random serial number(s) or code(s) after proper authentication.

15. The system as recited in claim 1, wherein access to and storage of the unique random serial number(s) or code(s) is governed by one or more rules.

16. An apparatus for authentication of an item or a label comprising:

a communications interface to a remote server having a secure storage, wherein the remote server stores one or more unique random serial numbers or codes in the secure storage that can be used to authenticate the item or the label and generates a pointer to each stored unique random serial number or code;

a data storage that stores the generated pointer(s);

one or more media devices communicably coupled to the data storage;

a post-content manager communicably coupled with the server via the communications interface and the media device; and

wherein during or prior to a production run of the item(s) or label(s);

(a) the post-content manager obtains the generated pointer(s) from the media device, obtains the unique random serial number(s) or code(s) from the server using the generated pointer(s), and transmits the obtained unique random serial number(s) or code(s) to the one or more media devices, and (b) the media device imprint the received unique random serial number(s) or code(s) on the item(s) or the label(s).

17. The apparatus as recited in claim 16, further comprising:

a pre-content manager communicably coupled to the data storage, the media device and the post-content manager, wherein the pre-content manager receives the pointer(s) indicating where the unique random serial number(s) or code(s) has been stored in the secure storage and stores the pointer(s) in the data storage; and

wherein the post-content manager obtains the unique random serial number(s) or code(s) from the pre-content manager using the pointer(s) instead of from the server.

18. A method for authentication of an item or a label comprising the steps of:

storing one or more unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label;

generating a pointer to each stored unique random serial number or code;

storing the generated pointer(s) in a data storage of a client; and

during or prior to a production run of the item(s) or label(s);

(a) sending the generated point(s) from the data storage of the client to one or more media devices, (b) obtaining the generated pointer(s) from the media device using a post-content manager, (c) obtaining the unique random serial number(s) or code(s) from the server via the post-content manager using the generated pointer(s), (d) sending the obtained unique random serial number(s) or code(s) to the media device, and (e) imprinting the received unique random serial number(s) or code(s) on the item(s) or the label(s) using the media device.

19. The method as recited in claim 18, further comprising the following steps performed by a pre-content manager:

receiving a first request for data stored on the data storage;

determining whether the requested data includes the unique random serial number(s) or code(s);

providing the requested data whenever the requested data includes a non-sensitive data; and

performing the following steps whenever the requested data includes the unique random serial number(s) or code(s);

sending a second request containing the pointer(s) to the server, authenticating the second request, denying the second request whenever the authentication fails, retrieving the unique random serial number(s) or code(s) using the pointer(s) and sending the unique random serial number(s) or code(s) to one or more media devices whenever the authentication succeeds.

20. The method as recited in claim 19, further comprising the following steps performed by the post-content manager:

sending one or more authentication codes to the pre-content manager or server; and

transmitting the unique random serial number(s) or code(s) to one or more media device whenever the one or more authentication codes is accepted by the pre-content manager or server.

21. The method as recited in claim 19, further comprising the following steps performed by the pre-content manager:

receiving one or more authentication codes from the post-content manager;

validating the one or more authentication codes; and

transmitting the unique random serial number(s) or code(s) whenever the one or more authentication codes are valid.

22. A computer program embodied on a computer readable medium for authentication of an item or a label comprising:

a code segment for storing one or more unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label;

a code segment for generating a pointer to each stored unique random serial number or code;

a code segment for storing the generated pointer(s) in a data storage of a client; and

during or prior to a production run of the item(s) or label(s);

(a) a code segment for sending the generated point(s) from the data storage of the client to one or more media devices, (b) a code segment for obtaining the generated pointer(s) from the media device using a post-content manager, (c) a code segment for obtaining the unique random serial number(s) or code(s) from the server via the post-content manager using the generated pointer(s), (d) a code segment for sending the obtained unique random serial number(s) or code(s) to the media device, and (e) a code segment for imprinting the received unique random serial number(s) or code(s) on the item(s) or the label(s) using the media device.