High-value document authentication system and method

• US 9,716,711 B2
• Filed: 07/15/2011
• Issued: 07/25/2017
• Est. Priority Date: 07/15/2011
• Status: Active Grant

• Current Assignee: Pagemark Technology, Inc.
• Original Assignee: Pagemark Technology, Inc.
• Inventors: Porter, RanDair, Gotanda, Takahiro
• Primary Examiner(s): Walsh, Daniel
• Application Number:
  US13/184,284
• Publication Number:
  US 20130015236A1
• Time in Patent Office: 2,202 Days
• Field of Search: 235375, 235494, 235487, 23546201, 235382, 2353825, 235454, 713176, 283113, 358 328
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Provided herein are systems and methods for providing document certification and authentication using 2D barcodes.

Claims

1. A computer-implemented method for generating and certifying a certified version of a document, the method comprising:

receiving a request to publish a certified document;

receiving, by a document generator, document data from a remote device, the document data comprising document identification data and encrypted document authentication data;

generating, by said document generator, a two dimensional barcode with the encrypted document authentication data embedded as errors within document identification data by;

generating a first barcode portion having first data elements, the first data elements formatted to include the encrypted document identification data and error correction data, and

inserting errors in non-contiguous subsections of the first data elements to encode a covert data layer within the first barcode portion, the covert data layer forming a second barcode portion having second data elements embedded as errors in the first data elements of the first barcode portion, the second data elements based on the encrypted document authentication data,

wherein the document identification data is readable by a first barcode reader using the error correction data to restore the first data elements of the first barcode portion, and

wherein the encrypted document authentication data is readable by a second barcode reader configured to identify and combine the errors in the non-contiguous subsections of the first data elements to form the encrypted document authentication data; and

affixing the two dimensional barcode with the document to form a certified document, the second barcode portion providing document authentication data to configured barcode readers to verify authenticity of the certified document, and wherein said document has data separate from the document identification data and encrypted document authentication data;

storing, by an authentication server, a decryption key for the encrypted document authentication data as associated with the certified document

receiving a document authentication request from a remote device for the certified document;

identifying the decryption key associated with the certified document;

transmitting the decryption key or decrypted document authentication data to the remote device.

2. The method of claim 1, wherein the generating further comprises incorporating the second barcode portion into redundant space associated with said overtly readable barcode portion.

3. The method of claim 1, wherein the barcode is a 2D barcode.

4. The method of claim 3, wherein the 2D barcode is selected from the group consisting of QR code, DataMatrix code, Aztec code, MaxiCode, Semacode tag, Cauzin Softstrip code, EZcode, HCCB, CyberCode, MMCC, Dot codes, PDF417 symbols, ShotCode, SPARQCode, WaterCode, and TPK.

5. The method of claim 1, wherein the incorporating to form the certified document certifying includes printing the document with the generated barcode.

6. The method of claim 1, wherein the affixing to form the certified document certifying includes publishing the document with the generated barcode affixed.

7. A non-transient computer-readable medium having tangibly stored thereon instructions that, when executed by a processor, perform the method of claim 1.

8. A computing apparatus comprising a processor and a memory having stored thereon instructions that, when executed by the processor, perform the method of claim 1.

9. A computer-implemented method for generating a certified version of a document, the method comprising:

obtaining, by a document generator, a document certification request having document data from a remote device, wherein said obtained document data comprises document identification data and document authentication data;

generating, by said document generator, a barcode with encrypted document authentication data embedded as errors within the document identification data by;

generating first data elements based on the document identification data, and

embedding second data elements based on the encrypted document authentication data into redundant space of the first data elements as errors to form a covert data set,

wherein second data elements are unreadable to a first barcode reader using an error-correcting code and the first data elements of the barcode are readable to the first barcode reader, and wherein said redundant space associated with the first data elements of the barcode are reserved by the error-correcting code configured to detect and to correct encoding symbolic errors in the first data elements of the barcode,

wherein the second data elements are readable by a second barcode reader configured to identify and combine the errors in redundant space to form the document authentication data; and

incorporating said generated barcode, having second data elements embedded in the first data elements with the document to form a certified document, the second data elements providing document authentication data to configured barcode readers to verify authenticity of the certified document, and wherein said document has data separate from the document identification data and document authentication data;

storing, by an authentication server, a decryption key for the encrypted document authentication data as associated with the certified document;

receiving a document authentication request from a remote device for the certified document;

identifying the decryption key associated with the certified document;

transmitting the decryption key or decrypted document authentication data to the remote device.

10. The method of claim 9, wherein said error-correcting code is a Reed-Solomon code.

11. A computer-implemented method for authenticating a certified version of a document, the method comprising:

requesting, by a barcode reader, to scan the certified document having a barcode, the barcode including first data elements with error correction data based on first data and second data elements based on second data embedded as errors within the first data elements, wherein the second data is different than the first, wherein the first data elements are readable by a first barcode reader using the error correction data to restore the first data elements of the barcode, and wherein the second data elements of the barcode are readable to a second barcode reader configured to identify and combine the errors in the first data elements to form the second data elements;

obtaining, by said barcode reader from an authentication server, a scan key associated with the certified document;

scanning, by said barcode reader using said scan key, said second data elements of the barcode in the certified document;

identifying said second data in said scanned second data elements of the barcode; and

authenticating the certified document based at least in part on said second data and the scan key, and wherein said document has data separate from said second data and said first data.

12. The method of claim 11, wherein said scanning comprises capturing a barcode image.

13. The method of claim 12, wherein said captured image is decoded and decrypted into the first data and the second data by a remote device.

14. The method of claim 11, wherein the second data elements are inserted in the first data elements in at least one error burst and correcting the second data elements by the first barcode reader using redundant data.

15. The method of claim 14, wherein the second data elements appears as an error burst within the first data elements to said barcode reader and are discarded.

16. The method of claim 14, wherein the second data elements are extracted from the first data elements and decrypted using said covert scan key.

17. The method of claim 11, wherein said authenticating further includes

issuing, by said barcode reader, a local challenge query;

obtaining, by said barcode reader, a local query response; and

verifying, by said barcode reader, a match of said local challenge query and said local query response.

18. The method of claim 11, wherein said authenticating further includes

issuing, by said authentication server, a remote challenge query;

obtaining, by said barcode reader, a remote query response; and

verifying, by said authentication server, a match of said remote challenge query and said remote query response.

19. A computer-implemented method for tracking a certified version of a document, the method comprising:

obtaining, by an authentication server, a document authentication request from a remote scanning device for the certified document, wherein the certified document includes encrypted document data encoded into a barcode, said barcode having first data elements based on document identification data and encrypted second data elements embedded in the first data elements as errors, the second data elements based on encrypted document authentication data, wherein the document identification data is readable by a first barcode reader using the error correction data, and wherein the encrypted document authentication data is readable by a second barcode reader configured to identify and combine the errors in the first data elements to form the encrypted document authentication data;

identifying, by said authentication server, an decryption key associated with the encrypted second data elements of said barcode and responsive to said document authentication request, transmitting said identified decryption key to said remote scanning device;

obtaining, by said authentication server from said remote scanning device, said barcode with document data;

identifying, by said authentication server, the certified document based on said obtained document data;

recording said document authentication request by said remote scanning device in a tracking record associated with the certified document electronically stored at the authentication server, and wherein said document has data separate from said second data and said first data.

20. The method of claim 19, wherein said identifying includes associating said barcode with the certified document.

21. The method of claim 19, wherein identifying further includes determining whether said tracking record associated with the certified document includes a document alert.