System and method for customer authentication of an item

• US 7,941,376 B2
• Filed: 10/05/2009
• Issued: 05/10/2011
• Est. Priority Date: 03/16/2005
• Status: Active Grant

• Current Assignee: Kloke LLC
• Original Assignee: DT Labs LLC
• Inventors: Peckover, Douglas
• Primary Examiner(s): Hewitt, II; Calvin L
• Assistant Examiner(s): Nigh; James D
• Application Number:
  US12/573,873
• Publication Number:
  US 20100106645A1
• Time in Patent Office: 582 Days
• Field of Search: 705 50- 52
• US Class Current: 705/50
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A system, apparatus and method is provided for authentication of an item or a label by storing unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label, generating a pointer to each stored unique random serial number/code and storing the generated pointer(s) in a client data storage. During or prior to a production run of the item(s) or label(s): the generated point(s) are sent from the client data storage to one or more media devices, the generated pointer(s) are obtained from the media device using a post-content manager, the unique random serial number(s)/code(s) are obtained from the server via the post-content manager using the generated pointer(s), the obtained unique random serial number(s)/code(s) are sent to the media device, and the received unique random serial number(s)/code(s) are imprinted on the item(s) or the label(s) using the media device.

Claims

1. A system for authentication of an item or a label comprising:

a server device communicably coupled to one or more client devices, the server device comprising a server processor and a server memory device, the server memory device storing server computer readable instructions that when executed by the server processor causes the server processor to perform the steps of;

storing one or more unique random serial numbers or codes in a secure storage that can be used to authenticate the item or the label,

generating a pointer for each of the stored unique random serial numbers or codes stored in the secure storage, and

sending at least one of the generated pointer(s) to a data storage of at least one of the client devices; and

each of the one or more client devices comprising a client processor, one or more media devices, and a client memory device storing client computer readable instructions that when executed by the client processor causes the client processor to perform during or prior to a production run of the item(s) or label(s) the steps of;

obtaining at least one of the generated pointer(s) from the client data storage by the one or more media devices,

obtaining at least one of the unique random serial number(s) or code(s) from the server device using at least one of the obtained generated pointer(s),

transmitting the obtained at least one of unique random serial number(s) or code(s) to the one or more media devices, and

imprinting, by the one or more media devices, the transmitted at least one of the unique random serial number(s) or code(s) on the item(s) or the label(s).

2. The system as recited in claim 1, wherein the unique random serial number(s) or code(s) are generated by the server device.

3. The system as recited in claim 1, wherein:

the one or more client devices are operated by a contract manufacturer and the server device is operated by an owner, a primary manufacturer or agent of the owner or the primary manufacturer;

the contract manufacturer does not have access to or control over the unique random serial number(s) or code(s); and

the labels are printed and attached to the items.

4. The system as recited in claim 3, wherein the unique random serial number(s) or code(s) are generated by the owner or the primary manufacturer and transmitted securely to the server device.

5. The system as recited in claim 1, wherein:

the pointer(s) are requested by the one or more client devices as part of a production run of the items or labels;

the one or more client devices comprise a computer, a laptop computer, a handheld computer, a desktop computer, a workstation, a data terminal, a manufacturing controller or a combination thereof;

the media devices comprise a printer, a plotter, a label maker, a copier, an inscribing device, a stamping machine, an etching machine or a combination thereof; and

the server device is communicably coupled to the one or more client devices via a computer network, a telecommunications network, a wireless communications link, a physical connection, a landline, a satellite communications link, an optical communications link, a cellular network or a combination thereof; and

the items comprise a manufactured product.

6. The system as recited in claim 1, wherein:

the unique random serial number(s) or code(s) are combined with a contact information or a security mechanism;

the contact information comprises a phone number, a web address, an instant messaging address, a communications address, or a combination thereof;

the contact information is used to certify the authenticity of the item or label, or determine whether an expiration date associated with the item or label has been exceeded;

an authenticity confirmation, an authenticity denial, the expiration date, one or more instructions, promotions or advertisements, or a combination thereof are provided whenever the contact information is used; and

the security mechanism comprises a scratch-off portion, a special ink, a special thread, a special code, a holographic symbol, or a combination thereof.

7. The system as recited in claim 1, wherein the server device monitors the production run to detect illegal or unauthorized production of the item(s) or label(s), and detects any attempt to circumvent the system.

8. The system as recited in claim 1, further comprising:

a pre-content manager on each client device communicably coupled to a data storage, the media device and the post-content manager, wherein the pre-content manager receives the pointer(s) indicating where the unique random serial number(s) or code(s) has been stored in the secure storage and stores the pointer(s) in the data storage; and

wherein the post-content manager obtains the unique random serial number(s) or code(s) from the pre-content manager using the pointer(s) instead of from the server device.

9. The system as recited in claim 8, wherein the pre-content manager further receives a first request from one or more applications for data stored on the data storage, determines whether the requested data includes the unique random serial number(s) or code(s) or a non-sensitive data, provides the non-sensitive data to the post-content manager or to the one or more applications, and performs the following steps whenever the requested data includes the unique random serial number(s) or code(s):

sends a second request containing the pointer(s) to a server device that authenticates the second request, denies the first request whenever the authentication fails, and receives and provides the unique random serial number(s) or code(s) to the post-content manager whenever the authentication succeeds.

10. The system as recited in claim 8, wherein the post-content manager further performs the following steps whenever the post-content manager receives the unique random serial number(s) or code(s) from the server device or the pre-content manager:

sends one or more authentication codes to the pre-content manager or the server device, accepts the unique random serial number(s) or code(s) whenever the one or more authentication codes is accepted by the server device or the pre-content manager, and rejects the unique random serial number(s) or code(s) whenever the one or more authentication codes is rejected by the pre-content manger or the server device.

11. The system as recited in claim 8, wherein the pre-content manager performs one or more corrective or destructive actions whenever the authentication fails and the client device is determined to be compromised, lost or stolen.

12. The system as recited in claim 1, wherein the communications between the server device and the client device are encrypted.

13. The system as recited in claim 1, wherein the server device further comprises:

an application program interface layer;

an authentication layer coupled to the application program layer;

a plug-in layer coupled to the authentication layer;

a data layer coupled to the plug-in layer; and

an events layer coupled to the data layer, the plug-in layer and the authentication layer.

14. The system as recited in claim 1, wherein the pointer(s) is subsequently used to access the unique random serial number(s) or code(s) after proper authentication.

15. The system as recited in claim 1, wherein access to and storage of the unique random serial number(s) or code(s) is governed by one or more rules.

16. A method for authentication of an item or a label comprising the steps of:

storing one or more unique random serial numbers or codes in a remote secure storage by a server device, wherein the one or more unique random serial number or codes can be used to authenticate the item or the label;

generating a pointer for each of the stored unique random serial number or code by the server device;

storing the generated pointer(s) in a data storage of a client device by the client device;

performing a production run of the item(s) or label(s); and

during or prior to a production run of the item(s) or label(s);

(a) sending at least one of the generated pointer(s) from the data storage of the client device to one or more media devices,

(b) obtaining the at least one of the generated pointer(s) from the media device using a post-content manager,

(c) obtaining one or more of the unique random serial number(s) or code(s) from the server device via the post-content manager using the at least one of the generated pointer(s),

(d) sending the obtained one or more unique random serial number(s) or code(s) from the post-content manager to the one or more media devices, and

(e) imprinting the sent one or more unique random serial number(s) or code(s) on the item(s) or the label(s) using the one or more media devices.

17. The method as recited in claim 16, further comprising the following steps performed by a pre-content manager:

receiving a first request for data stored on the data storage;

determining whether the requested data includes the unique random serial number(s) or code(s);

providing the requested data whenever the requested data includes a non-sensitive data; and

performing the following steps whenever the requested data includes the unique random serial number(s) or code(s);

sending a second request containing the pointer(s) to the server device, authenticating the second request, denying the second request whenever the authentication fails, retrieving the unique random serial number(s) or code(s) using the pointer(s) and sending the unique random serial number(s) or code(s) to one or more media devices whenever the authentication succeeds.

18. The method as recited in claim 17, further comprising the following steps performed by the post-content manager:

sending one or more authentication codes to the pre-content manager or server device; and

transmitting the unique random serial number(s) or code(s) to one or more media device whenever the one or more authentication codes is accepted by the pre-content manager or server device.

19. The method as recited in claim 17, further comprising the following steps performed by the pre-content manager:

receiving one or more authentication codes from the post-content manager;

validating the one or more authentication codes; and

transmitting the unique random serial number(s) or code(s) whenever the one or more authentication codes are valid.

35. The method as recited in claim 16, wherein the unique random serial number(s) or code(s) are generated by the server device.

36. The method as recited in claim 16, wherein:

the one or more client devices are operated by a contract manufacturer and the server device is operated by an owner, a primary manufacturer or agent of the owner or the primary manufacturer;

the contract manufacturer does not have access to or control over the unique random serial number(s) or code(s); and

the labels are printed and attached to the items.

37. The method as recited in claim 36, wherein the unique random serial number(s) or code(s) are generated by the owner or the primary manufacturer and transmitted securely to the server device.

38. The method as recited in claim 16, wherein:

the pointer(s) are requested by the one or more client devices as part of a production run of the items or labels;

the one or more client devices comprise a computer, a laptop computer, a handheld computer, a desktop computer, a workstation, a data terminal, a manufacturing controller or a combination thereof;

the media devices comprise a printer, a plotter, a label maker, a copier, an inscribing device, a stamping machine, an etching machine or a combination thereof; and

the server device is communicably coupled to the one or more client devices via a computer network, a telecommunications network, a wireless communications link, a physical connection, a landline, a satellite communications link, an optical communications link, a cellular network or a combination thereof; and

the items comprise a manufactured product.

39. The method as recited in claim 16, wherein:

the unique random serial number(s) or code(s) are combined with a contact information or a security mechanism;

the contact information comprises a phone number, a web address, an instant messaging address, a communications address, or a combination thereof;

the contact information is used to certify the authenticity of the item or label, or determine whether an expiration date associated with the item or label has been exceeded;

an authenticity confirmation, an authenticity denial, the expiration date, one or more instructions, promotions or advertisements, or a combination thereof are provided whenever the contact information is used; and

the security mechanism comprises a scratch-off portion, a special ink, a special thread, a special code, a holographic symbol, or a combination thereof.

40. The method as recited in claim 16, wherein the server device monitors the production run to detect illegal or unauthorized production of the item(s) or label(s), and detects any attempt to circumvent the system.

41. The method as recited in claim 40, wherein the pre-content manager performs one or more corrective or destructive actions whenever the authentication fails and the client device is determined to be compromised, lost or stolen.

42. The method as recited in claim 16, wherein the communications between the server device and the client device are encrypted.

43. The method as recited in claim 16, wherein the server device further comprises:

an application program interface layer;

an authentication layer coupled to the application program layer;

a plug-in layer coupled to the authentication layer;

a data layer coupled to the plug-in layer; and

an events layer coupled to the data layer, the plug-in layer and the authentication layer.

44. The method as recited in claim 16, wherein the pointer(s) is subsequently used to access the unique random serial number(s) or code(s) after proper authentication.

45. The method as recited in claim 16, wherein access to and storage of the unique random serial number(s) or code(s) is governed by one or more rules.

20. A computer readable storage medium for authentication of an item or a label comprising:

a first computer readable storage medium comprising program instructions when executed by a server computer causes the server computer to perform the steps of;

storing one or more unique random serial numbers or codes in a remote secure storage that can be used to authenticate the item or the label, and

generating a pointer for each of the stored unique random serial numbers or codes;

a second computer readable storage medium comprising program instructions when executed by a client computer causes the client computer to perform the steps of;

storing the generated pointer(s) in a data storage of a client device, and

during or prior to a production run of the item(s) or label(s);

(a) sending at least one of the generated pointers(s) from the data storage of the client device to one or more media devices,

(b) obtaining at least one of the generated pointer(s) from the media device using a post-content manager,

(c) obtaining one or more of the unique random serial number(s) or code(s) from the server computer via the post-content manager using at least one of the generated pointer(s),

(d) sending the obtained one or more unique random serial number(s) or code(s) to the one or more media devices, and

(e) imprinting the sent one or more unique random serial number(s) or code(s) on the item(s) or the label(s) using the one or more media devices.

21. The computer readable storage medium as recited in claim 20, wherein the second computer readable storage medium further comprises program instructions when executed by the client computer causes the client computer to perform the following steps using a pre-content manager:

receiving a first request for data stored on the data storage;

determining whether the requested data includes the unique random serial number(s) or code(s);

providing the requested data whenever the requested data includes a non-sensitive data; and

performing the following steps whenever the requested data includes the unique random serial number(s) or code(s);

sending a second request containing the pointer(s) to the server computer, authenticating the second request, denying the second request whenever the authentication fails, retrieving the unique random serial number(s) or code(s) using the pointer(s) and sending the unique random serial number(s) or code(s) to one or more media devices whenever the authentication succeeds.

22. The computer readable storage medium as recited in claim 21, wherein the second computer readable storage medium further comprises program instructions when executed by the client computer causes the client computer to perform the following steps using the post-content manager:

sending one or more authentication codes to the pre-content manager or server computer; and

transmitting the unique random serial number(s) or code(s) to one or more media device whenever the one or more authentication codes is accepted by the pre-content manager or server computer.

23. The computer readable storage medium as recited in claim 20, wherein the second computer readable storage medium further comprises program instructions when executed by the client computer causes the client computer to perform the following steps using the pre-content manager:

receiving one or more authentication codes from the post-content manager;

validating the one or more authentication codes; and

transmitting the unique random serial number(s) or code(s) whenever the one or more authentication codes are valid.

24. The computer readable storage medium as recited in claim 20, wherein the unique random serial number(s) or code(s) are generated by the server computer.

25. The computer readable storage medium as recited in claim 20, wherein:

the one or more client devices are operated by a contract manufacturer and the server computer is operated by an owner, a primary manufacturer or agent of the owner or the primary manufacturer;

the contract manufacturer does not have access to or control over the unique random serial number(s) or code(s); and

the labels are printed and attached to the items.

26. The computer readable storage medium as recited in claim 25, wherein the unique random serial number(s) or code(s) are generated by the owner or the primary manufacturer and transmitted securely to the server computer.

27. The computer readable storage medium as recited in claim 20, wherein:

the pointer(s) are requested by the one or more client devices as part of a production run of the items or labels;

the one or more client devices comprise a computer, a laptop computer, a handheld computer, a desktop computer, a workstation, a data terminal, a manufacturing controller or a combination thereof;

the media devices comprise a printer, a plotter, a label maker, a copier, an inscribing device, a stamping machine, an etching machine or a combination thereof; and

the server computer is communicably coupled to the one or more client devices via a computer network, a telecommunications network, a wireless communications link, a physical connection, a landline, a satellite communications link, an optical communications link, a cellular network or a combination thereof; and

the items comprise a manufactured product.

28. The computer readable storage medium as recited in claim 20, wherein:

the unique random serial number(s) or code(s) are combined with a contact information or a security mechanism;

the contact information comprises a phone number, a web address, an instant messaging address, a communications address, or a combination thereof;

the contact information is used to certify the authenticity of the item or label, or determine whether an expiration date associated with the item or label has been exceeded;

an authenticity confirmation, an authenticity denial, the expiration date, one or more instructions, promotions or advertisements, or a combination thereof are provided whenever the contact information is used; and

the security mechanism comprises a scratch-off portion, a special ink, a special thread, a special code, a holographic symbol, or a combination thereof.

29. The computer readable storage medium as recited in claim 20, wherein the server computer monitors the production run to detect illegal or unauthorized production of the item(s) or label(s), and detects any attempt to circumvent the system.

30. The computer readable storage medium as recited in claim 21, wherein the pre-content manager performs one or more corrective or destructive actions whenever the authentication fails and the client device is determined to be compromised, lost or stolen.

31. The computer readable storage medium as recited in claim 20, wherein the communications between the server computer and the client device are encrypted.

32. The computer readable storage medium as recited in claim 20, wherein the server computer further comprises:

an application program interface layer;

an authentication layer coupled to the application program layer;

a plug-in layer coupled to the authentication layer;

a data layer coupled to the plug-in layer; and

an events layer coupled to the data layer, the plug-in layer and the authentication layer.

33. The computer readable storage medium as recited in claim 20, wherein the pointer(s) is subsequently used to access the unique random serial number(s) or code(s) after proper authentication.

34. The computer readable storage medium as recited in claim 20, wherein access to and storage of the unique random serial number(s) or code(s) is governed by one or more rules.