Method and apparatus for digital authentication of valuable goods

• US 8,954,742 B2
• Filed: 07/28/2008
• Issued: 02/10/2015
• Est. Priority Date: 07/28/2008
• Status: Active Grant

• Current Assignee: WISeKey S.A.
• Original Assignee: WISeKey S.A.
• Inventors: Moreira, Juan Carlos Creus, Darbellay, Jrme, Blackman, Kevin, Moreno, Carlos
• Primary Examiner(s): To, Baotran N
• Application Number:
  US13/056,087
• Publication Number:
  US 20110191590A1
• Time in Patent Office: 2,388 Days
• Field of Search: 713/155, 713/156, 713/168, 713/175, 705/75, 705/76, 726/2
• US Class Current: 713/175
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A method for digital certification of authenticity of a physical object, and corresponding computer program and storage device, as well as to the use of the method for digital certification of authenticity of a physical object of value. The method includes the steps of issuing a storage device including a digital certificate of authenticity including encrypted information reflecting at least one characteristic unique to the physical object, checking, whenever required, the validity of the digital certificate of authenticity by use of a network computer, the network computer cooperating with the storage device and a validating or a certifying authority so as to output sensibly in real time the status of validity of the digital certificate of authenticity, and modifying the status of validity of the digital certificate of authenticity, whenever required.

Claims

1. A method for digital certification of authenticity of a physical object, the method comprising:

issuing a storage device comprising a digital certificate of authenticity including digitally signed information reflecting at least one characteristic unique to the physical object, the physical object being an article of manufacture, and the digital certificate of authenticity comprising the at least one characteristic unique to the physical object;

checking, whenever required, validity of the digital certificate of authenticity by use of a network computer, the network computer cooperating with said storage device and a validating authority or a certifying authority; and

modifying a status of validity of said digital certificate of authenticity, whenever required, by updating a certificate revocation list hosted at the validating authority or certifying authority,

wherein, the step of issuing a storage device comprises generating an asymmetric encryption key pair comprising a public and a private key on said storage device, said private key being stored in non-exportable manner on said storage device, and the step of checking the validity of the digital certificate of authenticity comprises use of mutual authentication functionality in a form of the Transport Layer Security (TLS) or Secure Socket Layer (SSL) protocols, enabling an output sensibly in real time of the status of validity of said digital certificate of authenticity.

2. The method according to claim 1, wherein issuing said storage device includes:

formulating a request for issuance of said digital certificate of authenticity to be created on said storage device, the request including information reflecting said at least one unique characteristic;

sending said request to the certifying authority for approval;

verifying and, if positively verified, digitally signing said request by said certifying authority;

sending the signed request to the storage device; and

completing creation of the digital certificate of authenticity on said storage device by interaction with said signed request comprising approval of the certifying authority.

3. The method according to claim 1, wherein generating the asymmetric encryption key pair on said storage device is done by using public key cryptographic algorithms.

4. The method according to claim 1, wherein checking the validity of the digital certificate of authenticity comprises:

connecting the storage device comprising the digital certificate of authenticity via the network computer to the validating authority or the certifying authority;

interaction of the network computer with the storage device and the validating authority or the certifying authority allow enabling access by said validating authority or certifying authority to the digital certificate of authenticity or to the information reflecting at least one characteristic unique to the physical object;

outputting sensibly in real time the status of validity of said digital certificate of authenticity via the network computer.

5. The method according to claim 1, wherein modifying the status of validity of said digital certificate of authenticity on the storage device comprises:

receiving information on the status of the physical object by the certifying authority; and

creating an entry corresponding to the status information of the physical object in a database, the entry being adapted to be read by the validating authority whenever checking of the validity of the digital certificate of authenticity on the storage device occurs.

6. The method according to claim 1, wherein the method further comprises:

receiving supplementary information reflecting one or more other characteristics of the physical object or any other information related to that object or to the owner or the producer of that object by the certifying authority; and

outputting, on demand, any part of said supplementary information via the network computer.

7. The method according to claim 1 for digital certification of authenticity of a physical object of value.

8. The method according to claim 7, wherein the physical object of value consists of luxury goods, in particular precious watches, jewelry.

9. The method according to claim 1, wherein checking the validity of the digital certificate of authenticity comprises accessing the private key for the mutual authentication functionality without entering any identification information.

10. A non-transitory computer readable medium storing a computer program to cause a computer to implement a method for digital certification of authenticity of a physical object, the method comprising:

issuing a storage device comprising a digital certificate of authenticity including digitally signed information reflecting at least one characteristic unique to the physical object, the physical object being an article of manufacture, and the digital certificate of authenticity comprising the at least one characteristic unique to the physical object;

checking, whenever required, validity of the digital certificate of authenticity by use of a network computer, the network computer cooperating with said storage device and a validating authority or a certifying authority; and

modifying a status of validity of said digital certificate of authenticity, whenever required, by updating a certificate revocation list hosted at the validating authority or certifying authority,

wherein, the step of issuing a storage device comprises generating an asymmetric encryption key pair comprising a public and a private key on said storage device, said private key being stored in non-exportable manner on said storage device, and the step of checking the validity of the digital certificate of authenticity comprises use of mutual authentication functionality in a form of the Transport Layer Security (TLS) or Secure Socket Layer (SSL) protocols, enabling an output sensibly in real time of the status of validity of said digital certificate of authenticity.