Methods and systems for making, tracking and authentication of products
AssigneePhilip Morris USA Inc.
InventorsAlain Sager, Philippe Chatelain, Erwan Fradet
Life of this patent
Estimating the term…
Abstract
Manufactured goods are marked or labelled with a secure unique identifier. A central checking centre allows users to verify the authenticity of a particular good such as a cigarette pack or carton via any convenient interface such as the internet or a cell phone. A system of secret sharing allows secure authentication of each item and prevents code breaking or misuse.
Claims18
A method for authenticating an item via an authentication processing device at a checking center, the method comprising:
- storing, by the authentication processing device, production batch information corresponding to the item in a database of the checking center;
- receiving, by the authentication processing device over a network, a salt file identifier from a code generator computer system;
- retrieving, by the authentication processing device, a salt file from a first computer readable medium based on the salt file identifier;
- decrypting, by the authentication processing device, a secret key for the salt file with a private key;
- sending, by the authentication processing device, the secret key to the code generator computer system;
- receiving, by the authentication processing device, a digitally signed item identifier (SUPI) of the item from a remote device over the network;
- receiving, by the authentication processing device, a random salt index alpha of the item from the code generator computer system over the network;
- deobfuscating the SUPI by the authentication processing device;
- extracting, by the authentication processing device, an item identifier (UPI) and a first noise code from the deobfuscated SUPI;
- identifying, by the authentication processing device, production batch information for the extracted UPI in the database;
- generating, by the authentication processing device, a second noise code from (i) the identified production batch information, (ii) the salt file, and (iii) the random salt index alpha;
- determining, by the authentication processing device, that the first noise code matches the second noise code;
- generating, by the authentication processing device, an authentication result by verifying that the item is authentic based on the SUPI;
- and
- sending, by the authentication processing device, the authentication result to the remote device over the network.
A non-transitory computer-readable storage medium storing computer-readable instructions that, when executed by at least one processor at an authentication processing device at a checking center, cause the at least one processor to perform a method for authenticating an item, the method comprising:
- storing production batch information corresponding to the item in a database of the checking center;
- receiving over a network, a salt file identifier from a code generator computer system;
- retrieving a salt file from a first computer readable medium based on the salt file identifier;
- decrypting a secret key for the salt file with a private key;
- sending the secret key to the code generator computer system;
- receiving a digitally signed item identifier (SUPI) of the item from a remote device over the network;
- receiving a random salt index alpha of the item from the code generator computer system over the network;
- deobfuscating the SUPI;
- extracting an item identifier (UPI) and a first noise code from the deobfuscated SUPI;
- identifying production batch information for the extracted UPI in the database;
- generating a second noise code from (i) the identified production batch information, (ii) the salt file, and (iii) the random salt index alpha;
- determining that the first noise code matches the second noise code;
- generating an authentication result by verifying that the item is authentic based on the SUPI;
- and
- sending the authentication result to the remote device over the network.
An authentication processing device comprising:
- at least one processor;
- a memory storing computer executable instructions that, when executed by the at least one processor, cause the at least one processor to perform the operations of:
- storing production batch information corresponding to an item in a database of a checking center,
- receiving, over a network, a salt file identifier from a code generator computer system,
- retrieving a salt file from a first computer readable medium based on the salt file identifier,
- decrypting a secret key for the salt file with a private key,
- sending the secret key to the code generator computer system,
- receiving, from a remote device over the network, a digitally signed item identifier (SUPI) of the item;
- receiving a random salt index alpha of the item from the code generator computer system over the network,
- deobfuscating the SUPI,
- extracting an item identifier (UPI) and a first noise code from the deobfuscated SUPI,
- identifying production batch information for the extracted UPI in the database,
- generating a second noise code from (i) the identified production batch information, (ii) the salt file, and (iii) the random salt index alpha,
- determining that the first noise code matches the second noise code,
- generating an authentication result by verifying that the item is authentic based on the SUPI, and
- sending the authentication result to the remote device over the network.
Dependencies are inferred from the claim text.