Method for customising a secure document
AssigneeIdemia France
InventorsCédric Barreau, Alban Feraud
Life of this patent
Estimating the term…
Abstract
A method of personalizing a security document, which includes a processing method performed by a processing device in order to prepare personalization of a security document. The method includes obtaining personalization data, encrypting the personalization data by using diversification data associated with the security document so as to produce encrypted data, and transmitting the encrypted data to a personalization device. The encrypted data enables the device to personalize the security document by using the encrypted data and the diversification data. Also described is a method of personalizing a security document by means of such a personalization device, as well as devices that employ the methods.
Claims16
A method of personalizing, performed by a system comprising a processing device and a personalization device, for personalizing a security document, said method comprising:
- obtaining, by the processing device, personalization data for personalizing the security document;
- encrypting, by the processing device, the personalization data using diversification data associated with the security document, to produce encrypted data, wherein, during the encrypting, the personalization data is encrypted using an encryption master key in combination with the diversification data;
- and
- transmitting, by the processing device, the encrypted data to the personalization device in order to enable the personalization device to personalize the security document from the encrypted data and the diversification data,
- receiving, by the personalization device, the encrypted data;
- analyzing, by the personalization device, the security document to recover diversification data associated with said security document;
- decrypting, by the personalization device, the encrypted data using the diversification data in combination with a decryption master key in order to obtain the personalization data, wherein the decrypting comprises:
- determining a derived key from the decryption master key and from the diversification data recovered by the personalization device during said analyzing;
- and
- using the derived key to decrypt the encrypted data received by the personalization device to obtain said personalization data;
- and
- personalizing, by the personalization device, the security document based on the personalization data.
A non-transitory computer-readable media including instructions that, when executed by a computer of a system comprising a processing device and a personalization device, perform operations for personalizing a security document, the operations comprising:
- obtaining, by the processing device, personalization data for personalizing the security document;
- encrypting, by the processing device, the personalization data using diversification data associated with the security document or with a person, to produce encrypted data, wherein, during the encrypting, the personalization data is encrypted using an encryption master key in combination with the diversification data;
- transmitting, by the processing device, the encrypted data to a personalization device in order to enable the personalization device to personalize the security document from the encrypted data and the diversification data-receiving, by the personalization device, the encrypted data;
- analyzing, by the personalization device, the security document to recover diversification data associated with said security document;
- decrypting, by the personalization device, the encrypted data using the diversification data in combination with a decryption master key in order to obtain the personalization data, wherein the decrypting comprises:
- determining a derived key from the decryption master key and from the diversification data recovered by the personalization device during said analyzing;
- and
- using the derived key to decrypt the encrypted data received by the personalization device to obtain said personalization data;
- and
- personalizing, by the personalization device, the security document based on the personalization data.
A system comprising a processing device and a personalization device for personalizing a security document, the processing device comprising:
- an obtaining module suitable for obtaining personalization data for personalizing the security document;
- an encryption module suitable for encrypting the personalization data using diversification data associated with the security document, to produce encrypted data, wherein the encryption module is configured to encrypt the personalization data from an encryption master key in combination with the diversification data;
- and
- a transmission module suitable for transmitting the encrypted data to a personalization device in order to enable the personalization device to personalize the security document from the encrypted data and the diversification data;
- the personalization processing device comprising:
- a receive module suitable for receiving encrypted data;
- an analysis module suitable for analyzing the security document so as to recover diversification data associated with said security document;
- a decryption module suitable for decrypting the encrypted data using the diversification data in combination with a decryption master key in order to obtain the personalization data, wherein the decryption module is configured to:
- determine a derived key from the decryption master key and from the diversification data recovered by the personalization device during said analyzing;
- and
- use the derived key to decrypt the encrypted data received by the personalization device to obtain said personalization data;
- and
- a personalization module suitable for personalizing the security document from the personalization data.
Dependencies are inferred from the claim text.