Apparatus for Customer Authentication of an Item

• US 20110153512A1
• Filed: 03/01/2011
• Published: 06/23/2011
• Est. Priority Date: 03/16/2005
• Status: Active Grant

• Current Assignee: Kloke LLC
• Original Assignee: DT Labs LLC
• Inventors: Peckover, Douglas
• Granted Patent: US 8,359,271 B2
• Time in Patent Office: Days
• US Class Current: 705/318
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

An apparatus is provided for authentication of an item or a label by storing unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label, generating a pointer to each stored unique random serial number/code and storing the generated pointer(s) in a client data storage. During or prior to a production run of the item(s) or label(s): the generated point(s) are sent from the client data storage to one or more media devices, the generated pointer(s) are obtained from the media device using a post-content manager, the unique random serial number(s)/code(s) are obtained from the server via the post-content manager using the generated pointer(s), the obtained unique random serial number(s)/code(s) are sent to the media device, and the received unique random serial number(s)/code(s) are imprinted on the item(s) or the label(s) using the media device.

Claims

1. A device for authentication of an item or a label comprising:

a processor;

a memory device;

one or more media devices;

a post-content manager comprising computer readable instructions in the memory device when executed by the processor causes the processor during or prior to a production run of the item(s) or label(s) to perform the steps of obtaining a pointer to each of one or more unique random serial numbers or codes that can be used to authenticate the item or label from the one or more media devices, obtaining the unique random serial number(s) or code(s) from a server device via a communications interface using the pointer(s), and transmitting the obtained unique random serial number(s) or code(s) to the one or more media devices; and

wherein the media device(s) imprint the received unique random serial number(s) or code(s) on the item(s) or the label(s).

2. The device as recited in claim 1, further comprising:

a pre-content manager communicably coupled to a data storage, the media device and the post-content manager, wherein the pre-content manager receives the pointer(s) indicating where the unique random serial number(s) or code(s) has been stored in the secure storage and stores the pointer(s) in the data storage; and

wherein the post-content manager obtains the unique random serial number(s) or code(s) from the pre-content manager using the pointer(s) instead of from the server device

3. The device as recited in claim 1, wherein the unique random serial number(s) or code(s) are generated by the server device.

4. The device as recited in claim 1, wherein:

the device is operated by a contract manufacturer and the server device is operated by an owner, a primary manufacturer or agent of the owner or the primary manufacturer;

the contract manufacturer does not have access to or control over the unique random serial number(s) or code(s); and

the labels are printed and attached to the items.

5. The device as recited in claim 4, wherein the unique random serial number(s) or code(s) are generated by the owner or the primary manufacturer and transmitted securely to the server.

6. The device as recited in claim 1, wherein:

the pointer(s) are requested by the one or more clients as part of a production run of the items or labels;

the one or more clients comprise a computer, a laptop computer, a handheld computer, a desktop computer, a workstation, a data terminal, a manufacturing controller or a combination thereof;

the media devices comprise a printer, a plotter, a label maker, a copier, an inscribing device, a stamping machine, an etching machine or a combination thereof; and

the server is communicably coupled to the one or more clients via a computer network, a telecommunications network, a wireless communications link, a physical connection, a landline, a satellite communications link, an optical communications link, a cellular network or a combination thereof; and

the items comprise a manufactured product.

7. The device as recited in claim 1, wherein:

the unique random serial number(s) or code(s) are combined with a contact information or a security mechanism;

the contact information comprises a phone number, a web address, an instant messaging address, a communications address, or a combination thereof;

the contact information is used to certify the authenticity of the item or label, or determine whether an expiration date associated with the item or label has been exceeded;

an authenticity confirmation, an authenticity denial, the expiration date, one or more instructions, promotions or advertisements, or a combination thereof are provided whenever the contact information is used; and

the security mechanism comprises a scratch-off portion, a special ink, a special thread, a special code, a holographic symbol, or a combination thereof.

8. The device as recited in claim 1, wherein the server monitors the production run to detect illegal or unauthorized production of the item(s) or label(s), and detects any attempt to circumvent the system.

9. The device as recited in claim 1, further comprising:

a pre-content manager on each client communicably coupled to the data storage, the media device and the post-content manager, wherein the pre-content manager receives the pointer(s) indicating where the unique random serial number(s) or code(s) has been stored in the secure storage and stores the pointer(s) in the data storage; and

wherein the post-content manager obtains the unique random serial number(s) or code(s) from the pre-content manager using the pointer(s) instead of from the server.

10. The device as recited in claim 9, wherein the pre-content manager further receives a first request from one or more applications for data stored on the data storage, determines whether the requested data includes the unique random serial number(s) or code(s) or a non-sensitive data, provides the non-sensitive data to the post-content manager or to the one or more applications, and performs the following steps whenever the requested data includes the unique random serial number(s) or code(s):

sends a second request containing the pointer(s) to a server that authenticates the second request, denies the first request whenever the authentication fails, and receives and provides the unique random serial number(s) or code(s) to the post-content manager whenever the authentication succeeds.

11. The device as recited in claim 9, wherein the post-content manager further performs the following steps whenever the post-content manager receives the unique random serial number(s) or code(s) from the server or the pre-content manager:

sends one or more authentication codes to the pre-content manager or the server, accepts the unique random serial number(s) or code(s) whenever the one or more authentication codes is accepted by the server or the pre-content manager, and rejects the unique random serial number(s) or code(s) whenever the one or more authentication codes is rejected by the pre-content manger or the server.

12. The device as recited in claim 9, wherein the pre-content manager performs one or more corrective or destructive actions whenever the authentication fails and the client is determined to be compromised, lost or stolen.

13. The device as recited in claim 1, wherein the communications between the server and the client are encrypted.

14. The device as recited in claim 1, wherein the server further comprises:

an application program interface layer;

an authentication layer coupled to the application program layer;

a plug-in layer coupled to the authentication layer;

a data layer coupled to the plug-in layer; and

an events layer coupled to the data layer, the plug-in layer and the authentication layer.

15. The device as recited in claim 1, wherein the pointer(s) is subsequently used to access the unique random serial number(s) or code(s) after proper authentication.

16. The device as recited in claim 1, wherein access to and storage of the unique random serial number(s) or code(s) is governed by one or more rules.