WO2010079465A2 - Mécanisme anti-duplication pour produits de consommation non électroniques vérifiables par le consommateur final - Google Patents

Mécanisme anti-duplication pour produits de consommation non électroniques vérifiables par le consommateur final Download PDF

Info

Publication number
WO2010079465A2
WO2010079465A2 PCT/IB2010/050940 IB2010050940W WO2010079465A2 WO 2010079465 A2 WO2010079465 A2 WO 2010079465A2 IB 2010050940 W IB2010050940 W IB 2010050940W WO 2010079465 A2 WO2010079465 A2 WO 2010079465A2
Authority
WO
WIPO (PCT)
Prior art keywords
consumer
credential
verifiable
authentication
numbers
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/IB2010/050940
Other languages
English (en)
Other versions
WO2010079465A9 (fr
WO2010079465A3 (fr
Inventor
Ashish Anand
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of WO2010079465A2 publication Critical patent/WO2010079465A2/fr
Publication of WO2010079465A3 publication Critical patent/WO2010079465A3/fr
Publication of WO2010079465A9 publication Critical patent/WO2010079465A9/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0806—Details of the card
    • G07F7/0813—Specific details related to card security
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing

Definitions

  • This invention belongs to the field of anti-duplication mechanism for non-electronic consumer products verifiable by end consumer. This invention is applicable to products those doesn't get transferred or sold as second-hand item and thus starts and finishes its life-cycle with single end-consumer.
  • Non-electronic consumer products may employ methods like bar- coding, holograms or special packaging.
  • Duplication of known brands continues, despite the fact that companies invest in marketing network to gather intelligence and all. Sometimes duplication also continues due to connivance of an insider. In all cases of duplication, companies, government and consumers all three parties suffer. While duplication of bar-coding and holograms is one concern, most important factor is that end consumer doesn't have any verifiable way to determine originality of product. Consumer needs to be educated about verifying holograms of every product, he uses in regular life. Further holograms and such methods are not unique per-piece and can be duplicated.
  • Motivation of this invention is to propose a simple seamless method using which an end consumer can verifiably determine the originality of product all by himself without depending on efficiency of company marketing intelligence network or integrity of any insider. This will also enhance the trust in known brand, contain black economy and consumer can spend the money with conviction.
  • This invention proposes set of 3 unique credentials generation per-piece of product that needs to be protected against counterfeiting. These credentials are labelled inside the packaging such that consumer can see those credentials and try verification only after packaging is opened following item is billed.
  • Invention proposes mobile SMS channel for purpose of communication as auditing and tracking based on mobile numbers are easier.
  • Unique credential-set per-piece of product has 3 numbers (for illustration). Customer needs to send first two numbers in authentication request. First number in authentication request is unique-ID (64 bit) and second one is its digest. Digest is required to mitigate any possibility of wrong human input hitting wrong entry in database. Authentication request is processed and third number is sent to consumer for his self- verification.
  • Second number is digest of first one
  • third number is cryptographic output of first number.
  • database will store only first number and one cryptographic key.
  • Block Diagram 1 Block diagram of credential set consisting of 3 numbers and description of their role in authentication and storage on database
  • Block Diagram 2 Block diagram of credential set label with foldable portion around perforated edge to hide alpha-numeric human readable numbers.
  • Block diagram 3 Block diagram of credential set label with foldable portion locked with tamper-evident/ self-destroyable label strip such that alpha-numeric credentials can be seen only after item is billed. Bar-coded form of first unique-Id is exposed and thus logged in point-of-sale system and communicated to database and is leveraged to implement item-theft and mitigating threat of credential- set replacement by junk numbers.
  • Block diagram 4 Authentication request processing stages for filtering and analysis of multiple authentication request
  • Block diagram 5 Block diagram of scheme to track store-theft and mitigate threat of intentional replacement of credentials by junk numbers.
  • Block diagram 6 Block diagram of graphical representation for detection if particular credential-set has been replicated on fake products depending on by what amount the repeated authentication request from different mobile devices for same credential- set is exceeds the average sale rate of product.
  • Consumer verifiability Consumer should get a verifiable mathematical data (002) in authentication-response, rather than simply being informed about successful authentication in response to his authentication request. It is shown as third unique-id in diagram 1.
  • Automated authentication request filtering If platform detects that same mobile number is firing authentication request for random number using inter-request intervals being same or intelligently altered, it issues certain heuristic instruction understandable only by human. If subsequent authentication request are not following those instructions it ignores all authentication-request sent by particular number. Also from mobile number offender can easily be traced.
  • Honey-trap for duplicators Analysis of multiple authentication requests for false positives and false negatives is done.
  • typical things to be analysed is multiple authentication request for same credential from different mobile devices to detect replication of credential on fake products and generate system alert (011) if rate of authentication request (from different mobile devices) exceeds average rate of product-sale.
  • System alert is accompanied by actionable field intelligence (mobile numbers). Call centre can now enquire from consumers about the purchase-point of items and pass this input to appropriate agency to trace the duplicators.
  • Un-intentional multiple authentication request Since unique credentials can be seen after item is billed and packaging is opened and hence there can be multiple authentication-request for same piece (done from same family either for sake of fun or curiosity). Platform applies heuristic method likes authentication requests coming from same set of mobile numbers, inter-request intervals or volume of such request to filter it as un-intentional multiple authentication request.
  • Storage optimization Since this platform deals with fast moving consumer goods, database size will be huge. Hence it is proposed that only first unique-ID will be stored and rest two numbers should be mathematically deduced from first one. It is proposed that second number is digest of first unique-ID and third one is cryptographic output of first unique-ID.
  • Credential-container Credentials should not be visible and hence labelled in such a way (003) preferably inside the packaging that unless item is billed and packaging is opened authentication cannot be attempted. All 3 alpha-numeric human readable credentials are hidden behind portion of label folded around perorated edge. This folding is protected by tamper-evident self-destroyable locking strip. Product code is exposed to avoid human error and ensure that right label is planted on right product. Bar-coded form of first unique-ID is also exposed to implement item-theft prevention and credential-replacement prevention as described in following sections.
  • Credential-set replacement and alternation detection and prevention Disputes can be created by replacement of credential-set by junk numbers after item is billed. This is mitigated by exposing only first number in its bar-coded format (010) such that first unique-ID (64 bit) is recorded in PoS (point of sale) once item is billed and recorded on PoS (point of sale) receipt. Replacement of other two numbers is not possible because those are mathematically deduced from first one. Also authentication request cannot be launched before item is billed as only first number is exposed and second number is still hidden.
  • Item-theft prevention and detection Extend this technology to implement store theft mechanism due to insider connivance wherein First number in its bar-coded format can remain exposed (010) such that PoS (point of sale) system records this and send notification to database, once item is billed. If database gets authentication request from particular mobile number for non-billed item then alert is generated to store and appropriate field action can be taken.
  • This replicated server can contain the credential- set, which becomes a common knowledge once item is billed and thus credential-set can be replicated on multiple fake units.
  • This replicated authentication- server can keep responding with third number without being detectable and authentication being successful.
  • One easy way to address this threat is using end- to-end encryption but which may not be possible or costly.
  • Another new way to address this threat mode that this invention proposes is that authentication server regularly audits the SMS hit at SMS gateway and does software certification of SMS gateway. Authentication server keeps a copy of binary image of SMS gateway software. It challenges SMS gateway to report its software hash by appending a random nonce at random offset. In case the SMS hit at SMS-gateway and authentication server is significantly different it raises a alert and whole channel can be audited.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

Cette invention porte sur un mécanisme anti-contrefaçon transparent et vérifiable par le consommateur applicable en particulier à des produits de consommation non électroniques. Des procédés connus tels que code à barre, hologrammes, identification radiofréquence (RFID), tatouage numérique nanométrique ou emballage spécial sont soit non vérifiables par le consommateur d'une manière tangible soit incapables de répondre à un modèle de menace élaboré. L'invention propose la génération d'un ensemble de trois authentifiants uniques par élément de produit qui doit être protégé contre une contrefaçon. Une fois que le produit est facturé et l'emballage est ouvert, le consommateur doit envoyer tout d'abord deux nombres dans une requête d'authentification. La requête d'authentification est traitée à l'extrémité serveur d'authentification et un troisième nombre est envoyé à l'extrémité consommateur pour son auto-vérification. Dans un but d'extensibilité de stockage, l'invention propose que le deuxième nombre et le troisième nombre puissent tous les deux être obtenus à partir du premier et donc que seul le premier nombre nécessite un stockage. Un autre attribut important que propose cette invention est qu'il doit être techniquement et tangiblement vérifiable qu'un mauvais authentifiant n'est pas généré par le serveur d'authentification. Malgré le fait qu'il soit techniquement réplicable, ce procédé devient infaillible étant donné qu'il est supporté par un moteur d'analyse heuristique qui agit comme un leurre pour des faussaires et cela devient sa plus grande force.
PCT/IB2010/050940 2009-01-07 2010-03-04 Mécanisme anti-duplication pour produits de consommation non électroniques vérifiables par le consommateur final Ceased WO2010079465A2 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
IN41CH2009 2009-01-07
IN41/CHE/2009 2009-01-07

Publications (3)

Publication Number Publication Date
WO2010079465A2 true WO2010079465A2 (fr) 2010-07-15
WO2010079465A3 WO2010079465A3 (fr) 2011-05-05
WO2010079465A9 WO2010079465A9 (fr) 2011-06-23

Family

ID=42316913

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IB2010/050940 Ceased WO2010079465A2 (fr) 2009-01-07 2010-03-04 Mécanisme anti-duplication pour produits de consommation non électroniques vérifiables par le consommateur final

Country Status (1)

Country Link
WO (1) WO2010079465A2 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103732430A (zh) * 2011-08-10 2014-04-16 丰田自动车株式会社 混合动力车辆用驱动装置
US8740076B2 (en) 2012-07-11 2014-06-03 Linksmart Technologies Pvt. Ltd. Label for enabling verification of an object

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2342743B (en) * 1998-10-17 2003-05-14 Nicholas Paul Elliot Verification method
WO2003036556A2 (fr) * 2001-10-25 2003-05-01 Koninklijke Philips Electronics N.V. Procede et systeme d'authentification d'un produit emballe
US20070075125A1 (en) * 2005-09-30 2007-04-05 Muscat Robert G Packaging and process of authenticating packaging

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9122971B2 (en) 2010-03-10 2015-09-01 Linksmart Technologies Pvt. Ltd. Label for enabling verification of an object
US9361532B2 (en) 2010-03-10 2016-06-07 Linksmart Technologies Pvt. Ltd. Label for enabling verification of an object
CN103732430A (zh) * 2011-08-10 2014-04-16 丰田自动车株式会社 混合动力车辆用驱动装置
US8740076B2 (en) 2012-07-11 2014-06-03 Linksmart Technologies Pvt. Ltd. Label for enabling verification of an object

Also Published As

Publication number Publication date
WO2010079465A9 (fr) 2011-06-23
WO2010079465A3 (fr) 2011-05-05

Similar Documents

Publication Publication Date Title
CN101036152B (zh) 用于标记、跟踪和鉴认产品的方法和系统
US10972264B2 (en) Method for realizing network electronic identity identification information protection based on key dispersion calculation
Delgado-Mohatar et al. Blockchain-based semi-autonomous ransomware
Yang et al. Show me the money! finding flawed implementations of third-party in-app payment in android apps.
CN107341676A (zh) 防伪溯源标识和方法
Saputra A survey of cyber crime in Indonesia
CN109447809A (zh) 一种结合区块链的视频主动识别方法
CN102622624B (zh) 一种商品防伪鉴别系统和方法
Vijaya Geeta Online identity theft–an Indian perspective
WO2010079465A2 (fr) Mécanisme anti-duplication pour produits de consommation non électroniques vérifiables par le consommateur final
Mayes et al. Transport ticketing security and fraud controls
Wang et al. The evolutional view of the types of identity thefts and online frauds in the era of the internet
US20080281759A1 (en) System and Method for Registration Control
Rzaieva et al. Methods of Personal Data Protection in Retail: Practical Solutions
CN116192469A (zh) 一种电子卡券交易或传输的安全防盗方法
Mayes et al. Information security best practices
Hsiang A secure and efficient authentication scheme for m-coupon systems
Zhou et al. Towards blockchain-based auditing of data exchanges
Goh et al. Blockchain-based online virtual store (BOVS): A secure framework for managing machine-created elements in business process management
US20250378145A1 (en) System for linking physical products to blockchain-connected digital entities and authentication of the physical products
US20070192589A1 (en) System and method for encrypting webpage logs
Rani et al. Blockchain Technology for Safeguarding Against Counterfeits
KR20130037790A (ko) 스마트 휴대 기기를 이용한 부동산 거래 중개 방법 및 시스템
DEEPTHI New Era of Cyber Security: New Era of Cyber Security
Karuppiah Blockchain for digital rights management

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10729137

Country of ref document: EP

Kind code of ref document: A2

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10729137

Country of ref document: EP

Kind code of ref document: A2