Security system using keys encoded in holograms

• US 9,779,227 B1
• Filed: 10/24/2014
• Issued: 10/03/2017
• Est. Priority Date: 10/24/2014
• Status: Expired due to Fees

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Ramos Carneiro, Steven
• Primary Examiner(s): Kim, Tae
• Application Number:
  US14/523,664
• Time in Patent Office: 1,075 Days
• CPC Class Codes: G03H 1/0011 for security or authentication holograms on information-bearing cards B42D25/328; testing papers with holograms G07D7/0032
• CPC Class Codes: G03H 1/0244 Surface relief holograms replicating hologram without interference recording G03H1/0276
• CPC Class Codes: G03H 1/26 Processes or apparatus specially adapted to produce multiple sub- holograms or to obtain images from them, e.g. multicolour technique
• CPC Class Codes: G03H 1/28 superimposed holograms only
• CPC Class Codes: G03H 2001/0022 Deciphering being performed with numerical or optical key, e.g. with the optical scrambler used during recording
• CPC Class Codes: G03H 2001/303 Interleaved sub-holograms, e.g. three RGB sub-holograms having interleaved pixels for reconstructing coloured holobject
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 7/764 Masking
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes

Abstract

A system for controlling access to secured resources using a security token having a hologram embossed thereon is provided. A key is split into a user key and a complimentary key based on a mask, wherein key values in the user key correspond to idle state values in the complimentary key and vice versa. The user key is used to generate a user key array, that is used to generate a three-dimensional virtual image that is holographically embossed onto a security token. The hologram is merged with a corresponding hologram for the complimentary key and the combination compared to an image of an ensemble of the key. The combination can be mergers of images or extractions of holograms. If a match is found, within a tolerance, an access grant signal is sent to the secure resources, thereby securing the resources based on presence of the security token.

Claims

1. A method of controlling access to secured resources using a security token having a hologram thereon, the method comprising:

1) under control of one or more computer systems configured with executable instructions,

a) generating a full key comprising a sequence of bits, wherein a sequence is such that each element in the sequence has a position in the sequence, and wherein each bit of the full key has a value that is in the set {“

0”

, “

1”

};

b) generating a mask comprising a sequence of masking values, wherein each of the masking values has a position in the mask and a value that is in a set comprising a masked value of “

1” and

an unmasked value of “

0”

;

c) generating a user key, comprising a first sequence of digital values, from the full key and the mask, such that, at each position of the sequence of the user key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the unmasked value of “

0” and

the digital value is an idle state value of “

?”

if the value at the corresponding position in the mask is the masked value of “

1”

; and

d) generating a complimentary key, comprising a second sequence of digital values, from the full key and the mask, such that, at each position of the sequence of the complimentary key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the masked value of “

1” and

the digital value is the idle state value of “

?”

if the value at the corresponding position in the mask is the unmasked value of “

0”

;

2) illuminating a first substrate by a first selected wavelength of light;

3) forming a first hologram on the first substrate such that a first readable image encoded in the first hologram corresponds to the user key;

4) attaching the first substrate to the security token so that the first hologram is readable from the first substrate by an access card reader when the security token is inserted into the access card reader;

5) illuminating a second substrate by a second selected wavelength of light; and

6) forming a second hologram on the second substrate such that a second readable image encoded in the second hologram corresponds to the complimentary key.

2. The method of claim 1, further comprising:

under the control of the one or more computer systems configured with the executable instructions,

e) obtaining the first readable image from the first substrate attached to the security token, using the access card reader;

f) obtaining the second readable image from the second substrate, wherein the second substrate is available at a verification system;

g) merging the first readable image with the second readable image to form a recombined image such that an idle state valued image component in the first readable image is overlaid with an image component from the second readable image;

h) converting the recombined image into a recombined key comprising a recombined sequence of digital values each of which are in the set {“

0”

, “

1”

, “

?”

} according to the image components of the recombined image;

i) comparing the recombined sequence of digital values to the full key to determine whether they match, wherein a match occurs if each of the “

0” and

“

1”

values in the recombined sequence of digital values corresponds to “

0” and

“

1”

bits in corresponding positions in the full key; and

j) sending an access control signal indicating that access to the secured resources should be granted upon confirmation of a match.

3. The method of claim 1, further comprising:

under the control of the one or more computer systems configured with the executable instructions,

e) generating a geometric model of the user key, wherein the geometric model of the user key comprises cubes arranged in three dimensions in a first virtual space in an ensemble corresponding to the user key with co-ordinates in the first virtual space of each cube corresponding to a position of the user key and having a cube color corresponding to the digital value at that position of the user key;

f) generating a geometric model of the complimentary key, wherein the geometric model of the complimentary key comprises cubes arranged in three dimensions in a second virtual space in an ensemble corresponding to the complimentary key with co-ordinates of each cube corresponding to a position of the complimentary key and having a cube color corresponding to the digital value at that position of the complimentary key;

g) generating a geometric model of the full key, wherein the geometric model of the full key comprises cubes arranged in three dimensions in a third virtual space in an ensemble corresponding to the full key with co-ordinates of each cube corresponding to a position of the full key and having a cube color corresponding to the digital value at that position of the full key;

h) using the geometric model of the user key in forming the first hologram; and

i) using the geometric model of the complimentary key in forming the second hologram.

4. A system for controlling access to secured resources using a security token having a hologram thereon, the system comprising:

at least one computing device configured to implement one or more services, wherein the one or more services are configured to;

a) generate a full key comprising a sequence of digital values, wherein a sequence comprises a plurality of elements each having a position within the sequence;

b) generate a mask comprising a sequence of masking values, wherein each of the masking values has a position in the mask and is a masked value or an unmasked value; and

c) partition the full key into two split keys, a user key and a complimentary key, using the mask, such that the user key comprises a sequence of digital values each having a position in the user key and at each position of the sequence of the user key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the unmasked value and the digital value is an idle state value if the value at the corresponding position in the mask is the masked value and the complimentary key comprises a sequence of digital values each having a position in the complimentary key and at each position of the sequence of the complimentary key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the masked value and the digital value is the idle state value if the value at the corresponding position in the mask is the unmasked value; and

a hologram generator capable of;

a) forming a first hologram on a first substrate attached to the security token such that a first readable image encoded in the first hologram corresponds to the user key and wherein the first hologram is formed using illumination of the first substrate by a first selected wavelength of light and is readable by an access card reader; and

b) forming a second hologram on a second substrate such that a second readable image encoded in the second hologram corresponds to the complimentary key and wherein the second hologram is formed using illumination of the second substrate by a second selected wavelength of light.

5. The system of claim 4, further comprising the access card reader, wherein the access card reader is configured for:

obtaining the first readable image from the security token using a tunable laser; and

obtaining the second readable image from the second substrate, wherein the second substrate is available at a verification system and is read using the tunable laser.

6. The system of claim 5, wherein the one or more services are further configured to:

merge the first readable image with the second readable image, at the verification system, to form a recombined image such that idle state valued image components in the first or second readable image are overlaid with other valued image components from the first or second readable image;

convert the recombined image into a recombined key;

compare the recombined key with the full key according to matching criteria to determine whether there is a match; and

send an access control signal indicating that access to the secured resources should be granted upon confirmation of a match.

7. The system of claim 4, wherein the one or more services are further configured to:

generate a geometric model of the user key in three dimensions in a first virtual space, wherein the geometric model of the user key comprises image components arranged in an ensemble corresponding to the user key with co-ordinates of each image component corresponding to a position of the user key and that image component having a feature corresponding to the digital value at that position of the user key;

generate a geometric model of the complimentary key in three dimensions in a second virtual space, wherein the geometric model of the complimentary key comprises image components arranged in an ensemble corresponding to the complimentary key with co-ordinates of each image component corresponding to a position of the complimentary key and that image component having a feature corresponding to the digital value at that position of the complimentary key;

generate a geometric model of the full key in three dimensions in a third virtual space, wherein the geometric model of the full key comprises image components arranged in an ensemble corresponding to the full key with co-ordinates of each image component corresponding to a position of the full key and that image component having a feature corresponding to the digital value at that position of the full key;

use the geometric model of the user key in forming the first hologram;

use the geometric model of the complimentary key in forming the second hologram; and

use the geometric model of the full key for comparing against a geometric model of a recombined key formed by combining, at a verification system, the geometric model of the user key obtained from the first hologram, read from the first substrate attached to the security token, and the geometric model of the complimentary key obtained from the second hologram.

8. The system of claim 7, wherein the first virtual space, the second virtual space, and the third virtual space are logically and/or functionally indistinct.

9. The system of claim 7, wherein the feature is color and each of the digital values in the user key or complimentary key correspond to white cubes or black cubes and idle state values correspond to transparent cubes in an ensemble of cubes.

10. The system of claim 4, wherein not all security tokens use the same imaging/shape parameters.

11. The system of claim 4, wherein not all security tokens use the same first selected wavelength.

12. The system of claim 4, wherein the first selected wavelength of light is a different wavelength than the second selected wavelength of light.

13. The system of claim 4, wherein the first selected wavelength is not determinable, with less than a threshold amount of effort, from the second hologram.

14. A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:

a) generate a full key comprising a sequence of digital values, wherein a sequence comprises a plurality of elements each having a position within the sequence;

b) generate a mask comprising a sequence of masking values, wherein each of the masking values has a position in the mask and is a masked value or an unmasked value; and

c) partition the full key into two split keys, a user key and a complimentary key, using the mask, such that the user key comprises a sequence of digital values each having a position in the user key and at each position of the sequence of the user key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the unmasked value and the digital value is an idle state value if the value at the corresponding position in the mask is the masked value and the complimentary key comprises a sequence of digital values each having a position in the complimentary key and at each position of the sequence of the complimentary key, the digital value is the value at a corresponding position in the full key if the value at a corresponding position in the mask is the masked value and the digital value is the idle state value if the value at the corresponding position in the mask is the unmasked value;

d) send instructions to a hologram generator to form a first hologram on a first substrate of an access card used to control access to secured resources such that a first readable image encoded in the first hologram corresponds to the user key and wherein the first hologram is formed using illumination of the first substrate by a first selected wavelength of light; and

e) send instructions to the hologram generator to form a second hologram on a second substrate such that a second readable image encoded in the second hologram corresponds to the complimentary key and wherein the second hologram is formed using illumination of the second substrate by a second selected wavelength of light.

15. The non-transitory computer-readable storage medium of claim 14, having stored thereon further executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:

obtain the first readable image from the first substrate on the access card;

obtain the second readable image from the second substrate, wherein the second substrate is available at a verification system;

merge the first readable image with the second readable image, at the verification system, to form a recombined image such that idle state valued image components in the first or second readable image are overlaid with other valued image components from the first or second readable image;

convert the recombined image into a recombined key;

compare the recombined key with the full key according to matching criteria to determine whether there is a match; and

send an access control signal indicating that the access to the secured resources should be granted upon confirmation of a match.

16. The non-transitory computer-readable storage medium of claim 14, having stored thereon further executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:

generate a geometric model of the user key in three dimensions in a first virtual space, wherein the geometric model of the user key comprises image components arranged in an ensemble corresponding to the user key with co-ordinates of each image component corresponding to a position of the user key and that image component having a feature corresponding to the digital value at that position of the user key;

generate a geometric model of the complimentary key in three dimensions in a second virtual space, wherein the geometric model of the complimentary key comprises image components arranged in an ensemble corresponding to the complimentary key with co-ordinates of each image component corresponding to a position of the complimentary key and that image component having a feature corresponding to the digital value at that position of the complimentary key;

generate a geometric model of the full key in three dimensions in a third virtual space, wherein the geometric model of the full key comprises image components arranged in an ensemble corresponding to the full key with co-ordinates of each image component corresponding to a position of the full key and that image component having a feature corresponding to the digital value at that position of the full key;

use the geometric model of the user key in forming the first hologram;

use the geometric model of the complimentary key in forming the second hologram; and

use the geometric model of the full key for comparing against a geometric model of a recombined key formed by combining, at a verification system, the geometric model of the user key obtained from the first hologram, read from the first substrate attached to the security token, and the geometric model of the complimentary key obtained from the second hologram.

17. The non-transitory computer-readable storage medium of claim 16, wherein the executable instructions are such that the first virtual space, the second virtual space, and the third virtual space are logically and/or functionally indistinct.

18. The non-transitory computer-readable storage medium of claim 16, wherein the executable instructions are such that the feature is color and each of the digital values in the user key or complimentary key correspond to white cubes or black cubes and idle state values correspond to transparent cubes in an ensemble of cubes, not all security tokens use the same imaging/shape parameters, and not all security tokens use the same first selected wavelength.

19. The non-transitory computer-readable storage medium of claim 14, wherein the executable instructions are such that the first selected wavelength of light is a different wavelength than the second selected wavelength of light.