Method and system for authentication

• US 7,749,080 B2
• Filed: 02/11/2005
• Issued: 07/06/2010
• Est. Priority Date: 05/12/2003
• Status: Active Grant

• Current Assignee: IGT Global Solutions Corporation (International Game Technology)
• Original Assignee: GTECH Rhode Island Corporation (International Game Technology)
• Inventors: Szrek, Walter, Oram, Thomas K.
• Primary Examiner(s): Vo; Peter DungBa
• Assistant Examiner(s): Hall; Arthur O.
• Application Number:
  US11/056,857
• Publication Number:
  US 20060040726A1
• Time in Patent Office: 1,971 Days
• Field of Search: 463 17- 19, 463 21- 22, 463/33, 463/49, 463/16, 463/20, 463/23, 463 25- 32, 463 39- 43, 273/138.1, 273/139, 273/138.2, 273/317.1, 273/460, 273/461, 273/141.A, 273454-456, 713/1, 713/100, 713/150, 713/182, 713/187, 713/188, 713/189, 713/300, 713/375, 713/400, 713/500, 713/600, 713/155, 713/170, 713/176, 713183-184, 713/186, 709203-207, 709/FOR.113, 902 2- 3, 902/23, 902/38, 902/40, 705 56- 57, 705/64, 705/67, 705/72, 705 74- 75, 705 78- 79
• US Class Current: 463/29
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/329 Regular and instant lottery, e.g. electronic scratch cards
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Embodiments of the present invention provide a method and system for authentication. In one embodiment, a first identifier associated with an item to be authenticated may be received. A first decryption key associated with the item may also be received. The first identifier may be decrypted using the first decryption key to generate a second identifier. The contents of an authentication database may be searched to find a match for the second identifier. If a match for the second identifier is found in the authentication database, the item may be confirmed as authentic. In embodiments of the present invention, the item may be a lottery ticket, a document, a receipt, a ticket, a credit card, etc.

Claims

1. A method of authenticating a lottery ticket, comprising:

prior to issuance of a lottery ticket to a player, providing both a public identifier and a first public decryption key, to be included on a lottery ticket that is to be issued;

after the lottery ticket has been issued, as part of a request to authenticate the lottery ticket, receiving, with a lottery ticket authentication system, a the public identifier and the first public decryption key read from the lottery ticket;

decrypting, with the lottery ticket authentication system, the public identifier using the first public decryption key to generate a second identifier, wherein the second identifier is maintained separately in a lottery ticket authentication database of the lottery ticket authentication system to prevent an insider from determining the public identifier for the ticket;

searching the contents of a lottery ticket authentication database containing entries associated with authentic lottery tickets to find a match for the second identifier; and

responsive to finding a match for the second identifier in the lottery ticket authentication database, confirming, with the lottery ticket authentication system, that the lottery ticket is an authentic lottery ticket.

2. The method of claim 1, wherein the public identifier and the first public decryption key are printed on the lottery ticket.

3. The method of claim 2, further comprising:

encrypting a private lottery ticket identifier using a first encryption key to generate the public identifier, wherein the private lottery ticket identifier is associated with the lottery ticket;

storing the private lottery ticket identifier in the lottery ticket authentication database.

4. The method of claim 3, further comprising:

generating the first encryption key and the first public decryption key.

5. The method of claim 3, wherein the first encryption key and the first public decryption key are the same.

6. The method of claim 3, wherein the first encryption key and the first public decryption key are different.

7. The method of claim 3, further comprising:

encrypting the second identifier using a second encryption key to generate a third identifier.

8. The method of claim 7, further comprising:

generating a second decryption key.

9. The method of claim 8, further comprising:

decrypting the third identifier using the second decryption key to generate a first result.

10. The method of claim 3, wherein the first encryption key is associated with a plurality of lottery tickets.

11. The method of claim 3, wherein the first encryption key is uniquely associated with a single lottery ticket.

12. The method of claim 2, wherein the first public decryption key is associated with a plurality of lottery tickets.

13. The method of claim 2, wherein the first public decryption key is uniquely associated with a single lottery ticket.

14. The method of claim 1, further comprising:

responsive to finding there is no match for the second identifier in the lottery ticket authentication database, indicating that the lottery ticket is not authentic.

15. A method of authenticating tickets, comprising:

prior to distribution of a ticket, providing both a public identifier and a first public decryption key, to be included on the ticket that is to be distributed;

after the ticket has been distributed, as part of a request to authenticate the ticket, receiving, with an authentication system, the public identifier and the first public decryption key read from the ticket;

decrypting, with the authentication system, the public identifier using the first public decryption key to generate a second identifier, wherein the second identifier is maintained separately in an authentication database of the authentication system to prevent an insider from determining the public identifier for the ticket;

searching the contents of the authentication database to find a match for the second identifier; and

responsive to finding a match for the second identifier in the authentication database, confirming, with the authentication system, that the ticket is authentic.

16. The method of claim 15, wherein the ticket is a lottery ticket.

17. The method of claim 15, wherein the ticket is a document.

18. The method of claim 15, wherein the public identifier and the first public decryption key are printed on the ticket.

19. The method of claim 18, further comprising:

encrypting a private ticket identifier using a first encryption key to generate the public identifier, wherein the private ticket identifier is associated with the ticket.

20. The method of claim 19, further comprising:

generating the first encryption key and the first public decryption key.

21. The method of claim 19, wherein the first encryption key and the first public decryption key are the same.

22. The method of claim 19, wherein the first encryption key and the first public decryption key are different.

23. The method of claim 18, wherein the ticket is an event ticket.

24. The method of claim 18, wherein the ticket is a coupon.

25. The method of claim 18, further comprising:

responsive to finding there is no match for the second identifier in the authentication database, indicating that the ticket is not authentic.

26. A method of authenticating tickets, comprising:

prior to distribution of a ticket, encrypting a private item identifier using a first encryption key to generate a public identifier, wherein the private item identifier is associated with the ticket;

after distribution of the ticket, as part of a request to authenticate the ticket, receiving, with an authentication system, the public identifier associated with the ticket to be authenticated, wherein the public identifier is printed on the ticket prior to issuance of the ticket;

receiving, with the authentication system, a first public decryption key associated with the ticket, wherein the first public decryption key is printed on the ticket prior to issuance of the ticket;

responsive to receiving the public identifier and the first public decryption key, decrypting, with the authentication system, the public identifier using the first public decryption key to generate a second identifier, wherein the second identifier is maintained separately in an authentication database of the authentication system to prevent an insider from determining the public identifier for the ticket;

responsive to the decrypting, searching the contents of the authentication database to find a match for the second identifier; and

responsive to a match for the second identifier being found in the authentication database, confirming, with the authentication system, that the ticket is authentic.

27. A method of generating authentication information for a lottery ticket, comprising:

receiving a private identifier, wherein the private identifier is associated with the lottery ticket;

encrypting the private identifier using a first encryption key to generate a public identifier;

generating a first public decryption key to decrypt the public identifier;

outputting the public identifier and the first public decryption key;

maintaining the private identifier separately in a lottery ticket authentication database of a lottery ticket authentication system to prevent an insider from determining the public identifier for the ticket; and

prior to the lottery ticket being provided to a player, providing the public identifier and the first public decryption key on the lottery ticket so that the public identifier and the first public decryption key are readable from the lottery ticket.

28. The method of claim 27, wherein the first encryption key and the first public decryption key are the same.

29. The method of claim 27, further comprising:

printing the public identifier and the first public decryption key on the lottery ticket.

30. The method of claim 27, further comprising:

storing the private identifier in a lottery ticket authentication database.

31. The method of claim 30, further comprises:

receiving an authentication request from a client, wherein the authentication request includes the public lottery ticket identifier and the corresponding lottery ticket public decryption key;

responsive to receiving the authentication request, decrypting the public lottery ticket identifier using the corresponding lottery ticket public decryption key to generate a third identifier;

responsive to decrypting the public lottery ticket identifier, searching the contents of the lottery ticket authentication database to find a match for the third identifier; and

responsive to finding a match for the third identifier in the lottery ticket authentication database, validating the lottery ticket as authentic.

32. The method of claim 27, further comprising:

printing the public identifier on the lottery ticket.

33. The method of claim 32, further comprising:

retrieving the first public decryption key based on the public identifier from a key database.

34. The method of claim 27, further comprising:

encrypting the public identifier using a second encryption key to generate a third identifier.

35. The method of claim 34, further comprising:

generating a second decryption key to decrypt the third identifier.

36. The method of claim 35, further comprising:

decrypting the third identifier using the second decryption key to generate the public identifier.

37. A method of generating authentication information for tickets, comprising:

receiving a private identifier, wherein the private identifier is associated with a ticket;

encrypting the private identifier using a first encryption key to generate a public identifier;

generating a first public decryption key to decrypt the private identifier;

outputting the public identifier and the first public decryption key;

maintaining the private identifier separately in a ticket authentication database of a ticket authentication system to prevent an insider from determining the public identifier for the ticket; and

prior to the ticket being provided to a consumer, providing the public identifier and the first public decryption key on the ticket so that the public identifier and the first public decryption key are readable from the ticket.

38. The method of claim 37, wherein the first encryption key and the first public decryption key are the same.

39. The method of claim 37, further comprising:

printing the public identifier and the first public decryption key on the item.

40. The method of claim 37, wherein the ticket is a lottery ticket.

41. The method of claim 37, wherein the ticket is a document.

42. The method of claim 37, wherein the ticket is an event ticket.

43. The method of claim 37, further comprising:

storing the private identifier in an authentication database.

44. The method of claim 43, further comprises:

receiving an authentication request from a client, wherein the authentication request includes a ticket identifier and a corresponding ticket public decryption key;

responsive to receiving the authentication request, decrypting the ticket identifier using the corresponding ticket public decryption key to generate a third identifier;

responsive to decrypting the ticket, searching the contents of the authentication database to find a match for the third identifier; and

responsive to finding a match for the third identifier in the authentication database, validating the ticket as authentic.

45. The method of claim 37, further comprising:

printing the public identifier on the ticket.

46. An apparatus comprising:

an interface to receive a public identifier and a first public decryption key both readable from a ticket and provided on the ticket prior to the distribution of the ticket;

a decryption device to decrypt the public identifier using the first public decryption key to generate a second identifier, wherein the second identifier is maintained separately in an authentication database of an authentication system to prevent an insider from determining the public identifier for the ticket;

a comparator to search the contents of the authentication database to find a match for the second identifier, wherein the interface is configured to confirm that the ticket is authentic, responsive to finding a match for the second identifier in the authentication database.

47. The apparatus of claim 46, wherein the ticket is a lottery ticket.

48. The apparatus of claim 46, further comprising:

an encryption device to encrypt a private item identifier using a first encryption key to generate the public identifier, wherein the private item identifier is associated with the ticket.

49. The apparatus of claim 46, further comprises:

a client device to transmit the public identifier and the first public decryption key included with the ticket to the interface.

50. The apparatus of claim 46, further comprising:

a scanner to read the public identifier and the first public decryption key included with the ticket.

51. The apparatus of claim 46, wherein the public identifier and the first public decryption key are printed on the ticket.

52. A machine-readable medium having stored thereon a plurality of executable instructions to be executed by a processor to implement a method of authenticating a lottery ticket, the method comprising:

receiving a public identifier read from the lottery ticket to be authenticated;

receiving a first public decryption key read from the lottery ticket, where both the public identifier and the first public decryption key are provided on the lottery ticket prior to the issuance of the ticket to a player;

decrypting the public identifier using the first public decryption key to generate a second identifier, wherein the second identifier is maintained separately in a lottery ticket authentication database of a lottery ticket authentication system to prevent an insider from determining the public identifier for the ticket;

searching the contents of the lottery ticket authentication database containing entries associated with authentic lottery tickets to find a match for the second identifier; and

responsive to finding a match for the second identifier in the lottery ticket authentication database, confirming that the lottery ticket is an authentic lottery ticket.

53. The machine-readable medium of claim 52, the method further comprising:

encrypting a private lottery ticket identifier using a first encryption key to generate the public identifier, wherein the private lottery ticket identifier is associated with the lottery ticket;

storing the private lottery ticket identifier in the lottery ticket authentication database.

54. The machine-readable medium of claim 53, the method further comprising:

generating the first encryption key and the first public decryption key.

55. The machine-readable medium of claim 53, the method further comprising:

encrypting the second identifier using a second encryption key to generate a third identifier.

56. The machine-readable medium of claim 55, the method further comprising:

generating a second decryption key.

57. The machine-readable medium of claim 56, the method further comprising:

decrypting the third identifier using the second decryption key to generate a first result.

58. The machine-readable medium of claim 52, wherein the public identifier and the first public decryption key are printed on the ticket.

59. A lottery ticket, comprising:

a public encrypted ticket identifier readable from the lottery ticket; and

a public decryption key readable from the lottery ticket, the public decryption key configured to decrypt the encrypted ticket identifier;

wherein both the public encrypted ticket identifier and the public decryption key are provided on the lottery ticket prior to the lottery ticket being distributed to a player and

the public decryption key is configured to decrypt the encrypted ticket identifier to generate an authentication identifier and the authentication identifier is maintained separately in a lottery ticket authentication database of a lottery ticket authentication system to prevent an insider from determining the public identifier for the ticket.

60. The lottery ticket of claim 59, wherein the encrypted ticket identifier is printed on the ticket.

61. The lottery ticket of claim 59, wherein the public decryption key is printed on the ticket.

62. The lottery ticket of claim 59, further comprising:

a removable layer disposed to conceal the public decryption key.

63. The lottery ticket of claim 59, further comprising:

a removable layer disposed to conceal the encrypted ticket identifier.

64. The lottery ticket of claim 59, wherein the lottery ticket is embodied in a smart card, the smart card storing the encrypted ticket identifier and the public decryption key.

65. The lottery ticket of claim 59, wherein the public decryption key is embodied in a machine-readable medium.

66. The lottery ticket of claim 59, wherein the public decryption key is embodied in a bar-code.

67. A method of generating lottery tickets, comprising:

encrypting a private identifier using a first encrypting key to generate an intermediate identifier;

encrypting the intermediate identifier using a second encrypting key to generate a public identifier;

generating a first decrypting key configured to decrypt the intermediate identifier and a second decrypting key configured to decrypt the public identifier to generate a first result; and

prior to providing a lottery ticket to a player, printing on the lottery ticket the public identifier, the first decrypting key and the second decrypting key, wherein the first result is maintained separately in a database of a system to prevent an insider from determining the public identifier for the ticket.

68. The method of claim 67, further comprising:

storing the private identifier and the intermediate identifier in a database.

69. The method of claim 68, further comprising:

decrypting the public identifier using the second decrypting key to generate a first result.

70. The method of claim 69, further comprising:

responsive to finding the first result in the database, authenticating the lottery ticket.

71. The method of claim 70, further comprising:

responsive to finding the first result is not in the database, indicating that the lottery ticket is not authenticated.

72. The method of claim 69, further comprising:

responsive to finding the first result in the database, decrypting the first result using the first decrypting key to generate a second result.

73. The method of claim 72, further comprising:

responsive to finding the second result in the database, authenticating the lottery ticket.

74. The method of claim 73, further comprising:

responsive to finding the second result is not in the database, indicating that the lottery ticket is not authenticated.