Method and systems using identifier tags and authenticity certificates for detecting counterfeited or stolen brand objects

A method for ascertaining an object status of an object associated to an authenticity certificate, said authenticity certificate stored on a media, said method comprising:

• receiving a media identifier and a media key block, wherein the media comprises the media identifier and the media key block, wherein an object identifier of said object to be authenticated identifies the object and is unique to the object, wherein the media identifier identifies the media and is unique to the media, wherein the media key block is a data block of the media providing access to a media key used to unlock a title key stored on the media, and wherein the title key is configured to encrypt data stored on the media;
• receiving the object identifier of said object to be authenticated;
• receiving a first encrypted step certificate of said authenticity certificate, said first encrypted step certificate having been requested by a first entity;
• receiving a first encrypted random key associated to said first encrypted step certificate;
• decrypting said first encrypted random key using the media identifier and the media key block;
• decrypting said first encrypted step certificate using said decrypted first encrypted random key;
• extracting a first hashing result of an object identifier encoded within said decrypted first encrypted step certificate;
• hashing the identifier of said object to be authenticated to generate a second hashing result;
• determining that the first hashing result is equal to the second hashing result;
• receiving a second encrypted step certificate of said authenticity certificate, said second encrypted step certificate having been requested by a second entity;
• receiving a second encrypted random key associated to said second encrypted step certificate;
• decrypting said second encrypted random key using the media identifier and the media key block;
• decrypting said second encrypted step certificate using said decrypted second encrypted random key;
• extracting a third hashing result of an object identifier encoded within said decrypted second encrypted step certificate;
• hashing the identifier of said object to be authenticated to generate a fourth hashing result;
• determining that the third hashing result is equal to the fourth hashing result;
• after said determining that the first hashing result is equal to the second hashing result and that the third hashing result is equal to the fourth hashing result, ascertaining the object status as being that the object is an authentic object, a counterfeited object, or a stolen object;
• and
• after said ascertaining the object status, displaying the object status on a screen of an authenticity verification equipment.

A computer readable hardware storage device comprising instructions that when executed on a processor of a computer system performs a method for generating data for use in generating an authenticity certificate to be stored on a media, said authenticity certificate being associated with an object for authenticating said object, said method comprising:

• receiving, from a requester entity, a request for a step certificate, the step certificate authenticating an involvement of said requester entity about said object, said request comprising a media identifier, a media key block, an object identifier, a requester entity type of said requester entity, and a requester identity certificate of said requester entity, wherein the media comprises the media identifier, and the media key block, wherein the object identifier identifies the object and is unique to the object, wherein the media identifier identifies the media and is unique to the media, wherein the media key block is a data block of the media providing access to a media key used to unlock a title key stored on the media, and wherein the title key is configured to encrypt data stored on the media;
• generating a random key;
• after said receiving the request, hashing said object identifier;
• after said hashing said object identifier, creating a signature comprising said hashed object identifier, said requester entity type, a certifier identity certificate of a certifier entity that has certified the authenticity of said object, and said requester identity certificate;
• generating a hashing result by hashing a concatenation of said object identifier, the requester entity type, said certifier entity certificate, said requester identity certificate, and said signature;
• generating the step certificate comprising the hashing result;
• encrypting said step certificate using said generated random key;
• transmitting said random key, said media identifier, and said media key block to a clearing house;
• after said transmitting said random key, said media identifier, and said media key block, receiving an encrypted random key from said clearing house, said encrypted random key being based upon said random key, said media identifier, and said media key block;
• and
• after said receiving said encrypted random key, sending said encrypted step certificate and said encrypted random key to the requester entity for subsequent writing said step certificate and said encrypted random key on said media.

A computer system comprising a processor and a computer readable memory unit coupled to the processor, said memory unit containing instructions configured to be executed by the processor to implement a method for generating data for use in generating an authenticity certificate to be stored on a media, said authenticity certificate being associated with an object for authenticating said object, said method comprising:

• receiving, from a requester entity, a request for a step certificate, the step certificate authenticating an involvement of said requester entity about said object, said request comprising a media identifier, a media key block, an object identifier, a requester entity type of said requester entity, and a requester identity certificate of said requester entity, wherein the media comprises the media identifier, and the media key block, wherein the object identifier identifies the object and is unique to the object, wherein the media identifier identifies the media and is unique to the media, wherein the media key block is a data block of the media providing access to a media key used to unlock a title key stored on the media, and wherein the title key is configured to encrypt data stored on the media;
• generating a random key;
• after said receiving the request, hashing said object identifier;
• after said hashing said object identifier, creating a signature comprising said hashed object identifier, said requester entity type, a certifier identity certificate of a certifier entity that has certified the authenticity of said object, and said requester identity certificate;
• generating a hashing result by hashing a concatenation of said object identifier, the requester entity type, said certifier entity certificate, said requester identity certificate, and said signature;
• generating the step certificate comprising the hashing result;
• encrypting said step certificate using said generated random key;
• transmitting said random key, said media identifier, and said media key block to a clearing house;
• after said transmitting said random key, said media identifier, and said media key block, receiving an encrypted random key from said clearing house, said encrypted random key being based upon said random key, said media identifier, and said media key block;
• and
• after said receiving said encrypted random key, sending said encrypted step certificate and said encrypted random key to the requester entity for subsequent writing said step certificate and said encrypted random key on said media.

A computer readable hardware storage device comprising instructions that when executed on a processor of a computer system performs a method for ascertaining an object status of an object associated to an authenticity certificate, said authenticity certificate stored on a media, said method comprising:

• receiving a media identifier and a media key block, wherein the media comprises the media identifier and the media key block, wherein an object identifier of said object to be authenticated identifies the object and is unique to the object, wherein the media identifier identifies the media and is unique to the media, wherein the media key block is a data block of the media providing access to a media key used to unlock a title key stored on the media, and wherein the title key is configured to encrypt data stored on the media;
• receiving the object identifier of said object to be authenticated;
• receiving a first encrypted step certificate of said authenticity certificate, said first encrypted step certificate having been requested by a first entity;
• receiving a first encrypted random key associated to said first encrypted step certificate;
• decrypting said first encrypted random key using the media identifier and the media key block;
• decrypting said first encrypted step certificate using said decrypted first encrypted random key;
• extracting a first hashing result of an object identifier encoded within said decrypted first encrypted step certificate;
• hashing the identifier of said object to be authenticated to generate a second hashing result;
• determining that the first hashing result is equal to the second hashing result;
• receiving a second encrypted step certificate of said authenticity certificate, said second encrypted step certificate having been requested by a second entity;
• receiving a second encrypted random key associated to said second encrypted step certificate;
• decrypting said second encrypted random key using the media identifier and the media key block;
• decrypting said second encrypted step certificate using said decrypted second encrypted random key;
• extracting a third hashing result of an object identifier encoded within said decrypted second encrypted step certificate;
• hashing the identifier of said object to be authenticated to generate a fourth hashing result;
• determining that the third hashing result is equal to the fourth hashing result;
• after said determining that the first hashing result is equal to the second hashing result and that the third hashing result is equal to the fourth hashing result, ascertaining the object status as being that the object is an authentic object, a counterfeited object, or a stolen object;
• and
• after said ascertaining the object status, displaying the object status on a screen of an authenticity verification equipment.