CN1153402C - Methods and systems for creating and authenticating unalterable self-verifying articles - Google Patents

Abstract

The system includes an input data set (100) which includes a biometric data set (101) and an optional textual data set (102), an article (10), a processing system (103), and a self-verifying article (104). The input data set (100) is recipient specific data. The biometric data set (101) may include one or more physical traits personal to the potential article recipient, such as a photo, a retinal scan, a finger print, or a signature. The textual data set (102) may include one or more textual attributes, such as name, address, height and weight, or eye color.

Description

Method and system for generating and authenticating an immutable, automatically authenticating artifact

technical field of invention

The present invention relates generally to encoding methods and systems, and more particularly to methods, systems and articles of manufacture and authentication of self-authenticating articles.

Background of the invention

Modern life demands quick, easy and reliable verification of personal identification and document authenticity. Almost every business transaction requires the identification of individuals and documents. In addition, there is an increasing need for personal identification in social and political environments.

Business transactions requiring document identification and personal identification include credit cards, phone cards, automated teller machine ("ATM") and similar transactions as well as other routine business transactions such as check cashing. For example, when taking a check to a bank to pay, the bank needs to verify the authenticity of the check writer's signature (called an endorsement) and that there is enough money in the checking account to pay the check. The authenticity of the endorsement is determined by comparing the signature on the check with a sample of the check writer's signature left on the bank's file. Forging a reasonably good endorsement can allow unauthorized individuals to illegally cash a check.

In non-commercial environments, on the other hand, there are often identification issues in terms of security. For example, security systems in apartment and office buildings require anyone who wants to enter the building to "sign in" in front of a security guard and often present the guard with a previously issued personal identification document that allows entry to the building. It is up to the security guard to use his or her best judgment to determine that the personal identification document is genuine and that the person presenting the personal identification document is the person identified on the identification document. In such circumstances, it is understandable that security guards may be deceived by persons identified by forged or altered identification documents. In a political environment, many countries require citizens to openly carry a personal ID so that it can be inspected at the appropriate official request. For example, at the scene of a traffic accident or when stopped for a traffic violation, an individual is required to present personal identification, such as a driver's license, to the police. Additionally, personal identification documents are required to vote, cross international borders and/or import or export goods.

Accordingly, there is a clear need for non-alterable, self-authenticating personal, business and political identification cards, documents, documents, labels, packaging and other similar articles. For the purposes of this patent document, an article should be considered to be any article having a surface, which may include a substrate, on which data may be affixed. As used herein, the term "fixed" shall mean, without limitation, one or more of the following words, attached, stamped, glued on, etched, scratched out, drawn on, printed, tapped, embedded , machining, drilling, stamping or imaging.

One current solution entails utilizing biometric information stored in a memory device carried by the individual. The term "biometric information" refers to characteristics that are unique to an individual, such as a signature, fingerprint or photograph. The "programming" site, which programs the memory device under secure conditions, obtains a sample of the biometric information to be used from the individual. Samples are converted into codes using common coding techniques. Samples can be obtained by having each person place their hand, eyes, face, or other unique identifier on a scan-in device. The scanned information is then encoded to form a code that is subsequently stored in a changeable portable memory device (ie, magnetic tape, electronic or optical memory card, floppy disk, etc.). Issue portable memory devices to individuals. When the individual's identity needs to be verified, everyone just presents the portable memory device at the "remote access/decoding" place where personal identity verification is carried out, and the information contained in the portable memory device is read out from the memory. The individual then places specific physical characteristics on the input scanning device to obtain another sample of biometric information. The machine compares the read code with the biometric information just sampled to determine authenticity. In this respect, the read-out code can be decoded, for example, using the inverse procedure of the previously performed encoding or the sample information can be encoded for comparison, for example, using the same encoding process as used at the time of encryption. This solution is prohibitively expensive because of the processing systems required to perform data encoding and/or decoding, complex opto-electronic hardware, and memory devices at each encoding and remote access location of.

It is therefore an object of the present invention to provide an unalterable code for use on an article containing biometric identification information unique to the intended holder of the article.

Another object of the present invention is to provide a method and system for cheaply, accurately and efficiently generating inalterable self-authenticating personal and commercial articles.

It is a further object of the present invention to provide methods and systems for accurately, efficiently and inexpensively authenticating presented self-authenticating articles.

It is yet another object of the present invention to provide a method and system for verifying the authenticity of an automatically authenticated article presented at a remote access location that does not require expensive verification equipment, such as physical feature scanning input devices, and does not require access to a central location. Inconvenience in communicating information.

Summary of the invention

The present invention relates to a self-authenticating article comprising an encoded machine-readable data set including recipient-specific biometric data. Automated authentication articles include, for example, business documents (i.e., IOUs, money orders, checks, and bearer securities, etc.), transaction cards (i.e., ATM cards, phone cards, and credit cards, etc.), personal identification documents (i.e., driver's licenses, government relief cards, passports, and personal ID card, etc.) and a label fixed on the surface of the package, which includes, for example, the identification of the owner or sender of the package, which can be used by customs agents to verify imported goods. A subset or all of the biometric data set could be, for example, images of personal characteristics considered to be unique to a person, such as fingerprints, retinal scans, photographs, signatures, etc., or preferably some combination of the above encoded to produce a machine readable data set. The article is preferably a low cost article of paper or plastic, but can be any substrate, and the machine readable data set is preferably affixed to or within the article. Artifacts can also, but need not, contain human-readable versions of biometric datasets.

In one embodiment of the invention, the encoded machine-readable data set is affixed to the article in such a manner that it is indecipherable or invisible to the human eye except with the aid of a suitably designed reading device. For example, a check or any article of manufacture in this regard has immobilized thereon a machine-readable data set including a designated user's signature. Therefore, a false counterfeiter will not be able to obtain a sample of the designated signature for reproduction. Comparison of the user's signature with the decrypted signature allows verification at the point of use.

In another embodiment, a human-readable text data set is also present on the article of manufacture, a selected subset of which can be selected to be encoded, concatenated with the encoded biometric data set, interleaved, etc. For the purposes of this patent document, the text data set includes all data other than biometric data.

Accordingly, one embodiment of the present invention is an automated authentication article comprising a surface and a data set comprising encoded recipient-specific biometric data in machine-readable form. Another embodiment is a self-authenticating article comprising a surface, a first data set affixed to the surface, and a second data set that is an encoded copy of the first data set. An alternative embodiment is comprising a surface, a text data set comprising at least one subset of text data fixed on the surface, a biometric data set comprising at least one subset of biometric data fixed on the surface, and a text data set comprising An automatically authenticated recipient-specific identification article of machine-readable data sets of encoded copies of biometric and biometric data sets optionally concatenated, interleaved, or combined and affixed to the article. The machine readable data set is preferably arranged as optically readable binary codes forming at least one matrix (array). Matrix usually refers to a 2D barcode or matrix code.

One aspect of the invention relates to a method of producing an unalterable self-authenticating article, the method comprising the steps of: receiving a recipient-specific data set consisting of one or more recipient-specific data subsets, by selectively encoding a first received The recipient-specific subset of data is used to generate a machine-readable data set, and the machine-readable data set and optionally the first recipient-specific data subset are affixed to the surface of the article. Preferably, the machine-readable data set may be fixed in the form of one or more machine-readable matrices. The printed machine-readable data set may be affixed as visual binary data, e.g. on a designated blank area of the article, or alternatively, as described above, may be fixed by means of marking, e.g. separately from the printout of the article. Detected inks, such as ultraviolet, infrared, or other colored inks, or machine-readable data sets can be printed on or under printed areas of the article by placing the machine-readable data set on the article so that they can be selectively read. Produce permanent magnetic or fluorescent images. It is also possible to immobilize the machine-readable data set in a spectrally resolvable manner, and to print on the data set a false code that would produce an invalid code if optically replicated or otherwise reproduced.

On the other hand, the machine-readable data set may actually be fixed as binary data as voids. For this patent document, blank spots should include but not limited to pits, gaps, air bubbles, depressions and small holes, etc., or none of these, and blank spots can be arranged in the matrix at will, so that the physical material detection system can distinguish blank spots/ non-blank area. Such detection systems may include ultrasound or other imaging techniques that utilize return signals that determine the depth or density of cellareas to determine the presence of voids. Other optical techniques can likewise be used, such as those used in common compact disk technology. Preferably when utilizing physical properties, any voids can be filled or covered with material to provide a smooth surface to the article. Thus, the structure of the article is a multi-layer structure, one of which contains the machine-readable code as blank spots.

Another alternative is to have a machine-readable code affixed to the article on a layer that is opaque except for the code (or transparent except for the code), so that strong The invisible light of the layer is used to optically detect the code, but the code cannot be obscured by another layer.

Another aspect of the invention relates to a method of operation for verifying the authenticity of an automated verification article. One such method includes the steps of scanning an auto-authenticating article of one of the various types described above that includes an encoded biometric data set, locating (or reading, etc.) and decoding the biometric data set, converting the decoded biometric data set to The set of statistical data is compared to the recipient-specific sample, and it is determined whether the decoded set of biometric data corresponds to the recipient-specific sample. Another method includes the steps of receiving an auto-verifying article including first and second data sets, the first data set being an encoded copy of the second data set, scanning the auto-verifying article to locate (or read etc.) the encoded first data set, decoding the encoded first data set, and comparing the decoded first data set to the second data set to determine the authenticity of the self-verifying article. In a preferred embodiment, the encoded first data set has been printed in one or more machine-readable matrices.

A processing system for generating a unique machine-readable data set affixed to an article in accordance with the principles of the present invention includes receiving an input for a recipient-specific data set comprising a plurality of recipient-specific data subsets, storing a plurality of A memory device for processing system instructions, a processing unit for generating a machine-readable data set, and an optional output for transmitting the generated machine-readable data set and the first recipient-specific subset of data. The processing unit retrieves and executes at least one processing system instruction in the memory device. The processing system instructions instruct the processing unit to selectively encode the first recipient-specific subset of data. In one embodiment of the invention, the processing unit is also capable of arranging the machine-readable data set as an optically readable binary code constituting at least one matrix.

A processing system for verifying the authenticity of an auto-verifying article in accordance with the principles of the present invention includes an input for receiving (or scanning, reading, etc.) an auto-verifying article, a memory device storing a plurality of processing system instructions, verifying the auto-verifying article The authenticity processing unit, and an optional output port for transmitting the output signal. The input comprises means for selectively scanning the surface of the self-authenticating article, controlled by the processing unit or alternatively by another processing unit or input control device. The processing unit retrieves and executes at least one processing system instruction from the memory device, the processing system instruction directing the processing unit to locate an encoded first data set affixed to the self-validating article and to decode the encoded first data set. In one embodiment, the processing unit further compares the decoded first data set with a second data set affixed to the self-verifying article and generates an output signal indicative of the authenticity of the self-verifying article. In an alternative embodiment, the processing unit will transmit the decoded first and second data sets to a central host processing system which compares the two data sets. In another embodiment, the decoded first data set will include biometric data, the output of which will transmit the biometric data to an output display device that enables the watchman to perform automatic visual inspection. A comparison of the authentication of the holder of the verification artifact.

One embodiment of the application and/or extension of the invention is software stored on a storage medium. The software includes computer instructions that control one or more processing units to generate and/or authenticate unique self-certifying articles in accordance with the principles of the present invention. The computer will include the necessary encoding and/or decoding operations/algorithms to be used, or will include a portion thereof. The storage media used may include, but is not limited to, magnetic memory, optical memory, and/or semiconductor chips, just to name three.

Thus, an advantage of the present invention is the ability to provide an unalterable code for use on an article containing biometric identification and characteristic information unique to the licensed holder of the article.

Another advantage is that the machine readable code is immobilized on the article using a very reliable and accurate relatively cheap technique, preferably using common printing equipment.

Another advantage of the present invention resides in the ability to provide self-authenticating articles and methods and systems for cheaply, accurately and efficiently producing inalterable self-verifying personal identification documents and business documents.

Yet another advantage of the present invention is the ability to provide methods and systems for accurately, efficiently and inexpensively authenticating presented auto-verifying articles.

Yet another advantage of the present invention is the ability to provide a method and system capable of verifying the authenticity of an auto-authentication article presented at a remote access location without the need for expensive verification equipment.

Figure overview

For a more complete understanding of the present invention and its advantages, reference is now made to the following description given in conjunction with the accompanying drawings, in which like numerals refer to like parts, in which:

Figure 1A shows a functional block diagram of a system for generating automatically authenticated artefacts in accordance with the principles of the present invention;

Figure 1B shows an isometric view of the processing system shown in Figure 1A;

Figure 1C shows a block diagram of a processing unit and a memory device;

Figure 2A shows a functional block diagram of a system for verifying the authenticity of received automatically verified articles in accordance with the principles of the present invention;

Figure 2B shows an isometric view of the remote access site processing system shown in Figure 2A;

Figure 3 represents a machine-readable binary encoding matrix;

Figures 4A and 4B represent a flow diagram of the embodiment shown in Figure 1A for generating an immutable self-verifying artifact; and

Figure 5 shows a flow diagram of verifying the authenticity of a received auto-verifying article for the embodiment shown in Figure 2A.

Detailed description of the invention

Figure 1A shows a functional diagram of the system of the present invention for generating automatically authenticated articles. The system includes an input data set 100 including a biometric data set 101 and an optional textual data set 102 , an article 10 , a processing system 103 and an automatic verification article 104 . As noted above, data set 100 consists of recipient-specific data. Biometric data set 101 may include one or more physical characteristics (i.e. photographs, retinal scans, fingerprints, signatures, etc.) , which can include one or more body attributes (ie name, address, height/weight, eye color, etc.). Processing system 103 generates self-validating article 104 by generating a unique machine-readable data set affixed to article 10 .

The processing system 103 includes input means, processing means, output means, and artifact generation means. The processing means renders the input data set 100 syntactically and semantically valid and encodes a selected subset of the biometric data set 101 and optionally a selected portion of the text data set 102 (and, if desired, The data to be encoded can optionally be first encrypted). The output means transmits the validated and encoded data set, along with the selected subset of the biometric data set 101 and optionally the text data set 102, to the artifact generation means. The article generating means immobilizes the validated and encoded data set and optionally a selected subset of the biometric data set 101 and the optional text data set 102 on the article 10 to produce the self-authenticating article 104 .

In a preferred embodiment, the processing system 103 operates by encoding all selected subsets of biometric and textual data into a compact unalterable machine-readable data set and then arranging the machine-readable data set into one or more matrices to ensure data integrity. If advisable, the machine-readable data set can be divided into two or more individual data segments, which can then be added to two or more two-dimensional machine-readable matrices, the two-dimensional Machine-readable matrices can appear to be the same size, or they can appear to be different sizes. These matrices, although physically separate, may contain check values and features that ensure detection of any attempt to alter human-readable text and/or machine-readable matrices. In this regard, the encoded biometric data and text data may be concatenated into one data string, then roughly divided into two parts to form two matrices of substantially the same size. Alternatively, the biometric data and text data may be interleaved, eg, in units of alternating bits, bytes, groups of bytes, etc. to form a data string, which is then split into two matrices. Preferably, each matrix is provided with a checksum to independently verify the data integrity of each matrix. Additionally, or alternatively, the matrices may have interdependent checksums that are used to collectively verify the data integrity of the two matrices. Due to these checksums, if one matrix is changed, or if both matrices are changed, invalid data will be read. Interleaving the biometric and textual data according to a predetermined routine advantageously improves the ability to examine the altered matrix. On the other hand, biometric data set 101 may form one matrix and textual data set 102 may form a second matrix.

In one embodiment, by checking the acceptability of a machine-readable data set against predetermined criteria - such checking may include a database of previously generated artifacts (e.g., an organized and comprehensive data set stored for use by a processing system ) searches to determine uniqueness - this enables and maintains enhanced data security. Note that in an alternative embodiment, the input data set 100 may be received at a remote access encoding location without authentication and/or encoding algorithms, in which case the recipient-specific biometric data and associated text data may be The data signal representation of is transmitted to a secure central host (similar to that shown in Figure 2A), which then performs the verification described above. Transmission can be wired or wireless.

If the recipient is found to be acceptable, the recipient-specific biometric data is encoded, preferably including the use of compression algorithms and the combination of subsets of the biometric data and arbitrarily subsets of the text data into a or multiple machine-readable matrices. If the input data set 100 is received at a remote access encoding site that does not have an encoding algorithm, the resulting encoded binary string is transmitted to the remote access encoding site as described above. Standard article creation equipment (shown in FIG. 1B ) then affixes the machine-readable data set to one or more self-verifying articles. As products are produced and discharged in the product production facility, a record of events is automatically entered into a database which may be located at a central host if the input data set 100 is received at a remote access coded location. Recording items ensures that duplicate artifacts are not inadvertently created later. Note that the number of artifacts produced is directly related to the intended use of the artifact. Applications of this aspect of the invention include producing only a single driver's license with a unique encoded photograph, or producing multiple articles with the same cryptographic signature, such as checks, traveler's checks, and nostro account withdrawal slips, among others.

FIG. 1B shows an isometric view of processing system 103 . The processing system 103 includes a personal computer (“PC”) 105 connected to an artifact generation device 114 . PC 105 consists of a housing 106 (shown with a cutaway view), a monitor 109 , a keyboard 110 , and optionally a mouse 113 . Enclosure 106 includes floppy disk drive 107 and hard disk drive 108 . Floppy disk drive 107 accepts, reads from, and writes to external disks, while hard disk drive 108 provides fast-access data storage and retrieval. While only a floppy disk drive 107 is shown, PC 105 may be equipped with any suitably designed structure for receiving and sending data, including, for example, magnetic tape and optical disk drives, and serial and parallel ports. Within the cutaway portion of the housing 106 is a central processing unit ("CPU") 111 that is connected to a memory device, which in the depicted embodiment is random access memory ("RAM") 112 . Although PC 105 is shown with one CPU 111, PC 105 may be equipped with multiple CPUs 111 that cooperatively carry out the principles of the present invention. The article creation device 114 receives one or more output data sets from the PC 105 and affixes the output data sets to the surface of the article.

Although one implementation of processing system 103 has been illustrated with PC 105 and artifact creation device 114, it may alternatively be within any processing system having at least one processing unit, such as in a complex computing machine, handheld computer, minicomputer, mainframe, and Implementation of the invention within supercomputers (RISC and parallel processing architectures) and within a network combination of processing systems as described above may employ any reasonably designed artefact generating means.

Figure 1C shows a schematic block diagram of one of any number of sub-processing systems that may be used in Figures 1A and 1B. The sub-processing system includes a processing unit, such as a CPU 111 , connected to a memory device, such as a RAM 112 , via a data bus 118 . Memory device 112 stores one or more instructions that are retrieved, interpreted, and executed by processing unit 111 . Processing unit 111 includes a control unit 115, an arithmetic logic unit ("ALU") 116, and a local memory device 117, which may be, for example, a cascaded cache or a plurality of registers. The control unit 115 fetches instructions from the memory device 112 . ALU 116 performs the various operations required to complete the instruction, including addition and Boolean AND. Local memory device 117 provides the high speed memory required to store intermediate results and control information.

Figure 2A shows a functional block diagram of the system of the present invention for verifying the authenticity of received auto-verification articles. The system comprises an automatic authentication article 104, a remote access site processing system 200 optionally connected (as shown in dashed lines) to a central host processing system 103, and an authenticity information display device 201, which may be, for example, a display , printer or other reasonably designed display device. The self-verifying article 104 includes at least one encoded data set including a first subset of data that is an encoded copy of a portion or all of the biometric data set. Automated authentication article 104 preferably also includes a text data set or a biometric data set, or both.

The remote access location processing system 200 includes input means, processing means and output means. The input device receives an auto-authenticating article 104 . The processing device verifies the authenticity of the automatically authenticated article 104 , which verification may include communications between the remote access site processing system 200 and the central host processing system 103 . The output means transmits the authenticity information generated by the processing means to the display means 201 .

The processing device scans the self-certifying article 104 to locate and decode the encoded first data set, the first data set to be decoded and the The second data set is compared and an output signal indicative of the authenticity of the article 104 is generated. In an alternative embodiment, the processing device selectively bypasses or does not perform the comparison of the decoded first data set and the second data set. Instead the processing means generates for the display device an output signal representing the decoded first data set, e.g. a graphical display of a portion of the bioencoded data set, and the second data set for manual comparison and verification by an operator of the processing system . Alternatively the operator of the processing system may manually link the decoded first data set and optionally the second data set (if affixed to the article) with the article holder or biological data obtained from the holder or from a database. Statistical data sets, such as the holder's signature or appearance, are compared.

The system for verifying the authenticity of the auto-verification article 104 may employ, for example, a variety of devices including portable terminals, fixed station readers, and planar scanners, each of which may directly include a decoder or may utilize wired or Radio frequency, short wave, cellular, infrared or other forms of wireless communication implement the decoding function at a base station or master station, such as at processing system 103 . The remote access site processing system 200 and/or the central host processing system 103 may have a keyboard and a display screen with sufficient resolution to accurately display the encoded biometric image and/or textual data, and may also include converting machine-readable data sets Imaging equipment needed to prepare binary machine language bits for decoding. Such imaging devices may be based on any of several technologies including CCD, CMOS, and NMOS, or other forms of light-sensitive sensors that may have structures in the form of two-dimensional area or one-dimensional linear arrays, or may be structured in the form of a raster pattern A sensor that is read out by a single laser beam that scans a two-dimensional image.

A preferred embodiment of the imaging device is a linear array scanner aligned vertically with the solid boundaries of the printed machine readable code 205. When two or more matrices are used, these matrices are arranged in parallel, so using as in A CCD scanner with a normal cards swipe action in normal tape reading can sweep two symbols. The matrices are then read and the video image for each matrix is stored in memory for processing. Imaging can also be achieved using lasers, laser diodes, infrared, or other binary imaging techniques that allow the device to have structures in the form of two-dimensional regions or one-dimensional linear arrays. In addition, the reader may have the ability to automatically compare images and information encoded in a machine-readable matrix with the human-readable version on the same article. In one embodiment, this comparison can be done within the memory of the remote access location processing system 200, thus eliminating the need for a keyboard and/or high resolution display screen at the terminal. Alternatively, as described above, the operator can visually compare the information displayed on the terminal screen with the human readable information currently on the article and/or the holder of the article.

FIG. 2B shows an isometric view of a handheld computer that may be used as the remote access location processing system 200 . Handheld computer 200 includes keyboard 202 , display shield 203 and input port 204 . The keyboard 202 includes a regular arrangement of keys that manually receive input data from a user. Display screen 203 displays authenticity information and/or biometric and/or text data. Input port 204 receives an auto-verifying article 104, represented here as a driver's license, which in the depicted embodiment includes encrypted machine-readable data sets 205a and 205b arranged in two optically readable binary matrices . The remote access site processing system 200 includes at least one processing unit and one storage device, such as the sub-processing system shown in FIG. 1c. The processing unit preferably comprises a microprocessor with associated memory (non-volatile memory storing the program instruction set for identifying and decoding matrices and volatile memory for the data processing workspace), memory for storing images of matrices to be decoded The video memory, and related signal conditioning circuits, are mounted on a printed circuit board.

FIG. 3 illustrates a preferred single machine-readable binary encoding matrix represented generally by matrix 205 . Matrix 205 is developed by Interntional DataMatrix Inc of Clearwater, Florida. A sample of the Data Matrix notation developed by (which is the assignee of the present invention). The matrix 205 has a perimeter 300 formed by an intersecting edge 301 , which is a solid line, and an intersecting perimeter edge 302 consisting of alternating dark 303 and light 304 perimeter rectangles. The data generally indicated at 305 is stored in matrix 204 by converting each character to be stored into a visual binary code represented by dark and light rectangles of 1s and 0s corresponding to the encoded binary information within the perimeter of 301. For a more complete description of the structure of matrix 205 see U.S. Patent No. 4,939,354 entitled "Dynamically Variable Machine-Readable Binary Code and Method of Reading and Generating the Same" and "Producing Dynamically Variable Machine-Readable Binary Code Apparatus for Binary Code and Methods of Reading and Generating the Code," pending US Patent No. 5,324,923, both of which are owned by the assignee of this patent document and are incorporated herein by reference.

FIG. 4A shows a flow diagram of the embodiment shown in FIG. 1A for generating a non-alterable self-verifying artifact. Upon entering "START" block 400, processing in accordance with the principles of the present invention begins. A recipient-specific data set comprising at least a subset of data is received by processing system 103 (input block 401). Processing system 103 preferably performs image compression on the first subset of data. The ratio of image compression is preferably about 50:1 or higher in order to obtain a digital representation of the acquired data. Such compressed data enables reproduction of the recipient-specific image on a conventional graphics display screen without any significant loss of visual quality (block 402). Image compression can be accomplished using any standard routine, such as discrete cosine transform (DCT), LZW (Lempel-Ziv), fractal, etc., in order to reduce the number of bits required to encode the first subset of data. A compression ratio of 50:1 is considered suitable, but other compression ratios may also be used. In addition to data compression, an image enhancement routine may be performed on the first subset of data to enhance image contrast, sharpness, smooth edges, and reduce shadowing effects, particularly when imaging recipient photographs, preferably is before the data compression step. The foregoing improves digital images due to more efficient data compression. Suitable image enhancement routines are known in R, 1987, Addison-Wesley Publishing Co., Reading MA. Such a routine is described in "Digital Image Processing" by Gonzlez et al. Processing system 103 optionally encodes the compressed first data set to produce a machine-readable data set (processing block 403). This optional encoding step will be discussed in more detail with reference to the detailed description of FIG. 4B. In one embodiment of the invention, the processing system 103 also arranges the machine-readable data set into an optically readable binary code comprising one or more matrices (processing block 404). The processing system 103 affixes the machine-readable data set and the first recipient-specific subset of data to the surface of the article, thereby producing the self-validating article 104 (processing block 405). In one embodiment, the matrix is affixed to the article using a common printing process such as thermal, heat transfer, ink jet, bubble jet, laser, dot matrix printing, and the like. Alternatively the matrix may be fixed below the surface, for example by laminating the upper surface or by covering the matrix with a printed layer of a multilayer article. In another embodiment, the machine-readable data set is printed on a printed area of an article, such as a photograph on a driver's license. In yet another embodiment, the matrix is formed by creating air bubbles or voids within the article or holes drilled or punched in the article according to the pattern of the matrix, such codes are machine readable and can be used to detect the presence of materials. Whether or not, the relative density of the material or the depth of air bubbles, voids, holes, etc. within the article or using an optical measurement system or other suitable imaging system with a bounce signal capable of distinguishing the code to read such a code.

FIG. 4B shows a more detailed flowchart of processing block 402 shown in FIG. 4A. Upon entering "START" block 406, selective encoding of the first data set begins. Processing system 103 compares the first data set to system control values to determine whether the first data set is within acceptable tolerances (processing block 407). This comparison step may include, for example, syntactic and/or semantic analysis. If the first data set is determined to be invalid ("no" branch of decision block 408), processing system 103 aborts generation of the automatic verification artifact (termination block 409). On the other hand, if the first data set is judged to be valid (the "yes" branch of decision block 408), the processing system 103 searches the database of previously produced artifacts to confirm whether the generated artifacts are unique (processing side Block 410), uniqueness is determined based on subjective judgment as a function of the type of artifact produced. It should be noted that the database used by the processing system 103 may be internal or external to the processing system 103, and whether internal or external, the processing system 103 may search the database directly or indirectly. For example, the database may be stored and controlled remotely by another processing system with which processing system 103 is in communication. If the first data set is determined not to be unique ("no" branch of decision block 411) the processing system 103 aborts the generation of the automatic verification artifact (termination block 412). On the other hand, if the first data set is determined to be valid (the "Yes" branch of decision block 411), the processing system 103 has the option of treating one or more subsets of the received recipient-specific data set as At least one record is added to the database (processing block 413). The processing system 103 then encodes the first data set (processing block 414), and in one embodiment, adds error correction bits to the encoded first data set (processing block 415).

The selective encoding of only the first data set embodied in Figures 4A and 4B is illustrative only, and it should be recognized that the present invention can selectively encode multiple compressed subsets of recipient-specific data and then The encoded subsets are concatenated, interleaved, etc., thereby forming a machine-readable data set. Additionally, when encoding two or more data subsets and concatenating, interleaving them together, processing system 103 is capable of arranging the machine-readable data sets into one or more optically readable matrices, each encoded data subset Sets can occupy two or more matrices.

Figure 5 shows a flow diagram of verifying the authenticity of a received auto-verifying article for the embodiment shown in Figure 2A. Upon entering "START" block 500, processing in accordance with the principles of the present invention begins. An auto-authenticating article, in this embodiment comprising a plurality of data sets, the first of which is an encoded copy of the first data set, is received by the remote access location processing system 200 (input block 501). The remote access location processing system 200 then scans the received auto-verification article to locate the encoded first data set (processing block 502). The remote access site processing system 200 decodes the encoded first data set (processing block 503), and compares the decoded first data set with the second data set to determine the authenticity of the received self-verifying article (processing block 504).

In one embodiment, the comparison step is accomplished using communications between the remote access location processing system 200 and the processing system 103, which maintains a database of recipient-specific data related to previously generated auto-verification articles. In this embodiment, the communication between the remote access location processing system 200 and the processing system 103 may be accomplished using wired or wireless communication means. In an alternative embodiment, at least the decoded first data set and optionally the second data set are transmitted to an output display device for manual comparison by a system operator. If it is determined that the decoded first data set is not authentic ("No" branch of decision block 505), remote access site processing system 200 displays an authenticity message indicating that the self-verifying artifact is invalid (output block 506). Conversely, if it is confirmed that the decoded first data set is authentic ("Yes" branch of decision block 505), the remote access site processing system 200 displays an authenticity message indicating that the automatic verification artifact is valid (output block 507).

In another embodiment, prior to decoding the encoded first data set, the remote access site processing system 200 converts the received self-verification article into a digital bitmap and segments the digital bitmap into a plurality of regions, wherein The first region includes the first data set being encoded and the second region includes the second data set. In this embodiment, both the first and second regions may include a plurality of biometric and/or orthogonal data subsets that are then transformed into a common data format for processing by the remote access location processing system 200 .

As noted above, an embodiment of an automated verification article includes two matrices having a first data set of biometric data and a second data set of textual data. Additionally, in one embodiment, the article of manufacture may also include a magnetic strip containing data that can be altered by scanning a machine-readable matrix, decoding certain data contained therein, and converting the data (with or without other data) other data) to the magnetic stripe to program the magnetic stripe. This makes auto-authenticating articles very useful in applications that require the reading of magnetic stripes.

Yet another application of the invention is to prevent illegal copying of software. Software is a special form of program that has been recorded on a storage medium, for example, on one of the above-mentioned storage media. Software enables programs to be freely transferred or copied from one storage medium to another, which enables unauthorized users to obtain illegal copies of the software. For example, in one embodiment, a purchaser of a processing system provides a software vendor with industry-standardized personal data, such personal data may include biometric data, optionally encrypted, and stored in the processing system's external. Whenever a processing system purchaser purchases software, the purchaser will again be required to provide such industry-normalized personal data compressed, optionally encrypted, and encoded into a machine-readable data set , preferably encoded as one or more binary coded matrices, and fixed on the surface of a portable storage medium, such as stored on a floppy disk or an optical disk. When the software is loaded into the processing system, the matrix is scanned, decoded and verified according to the principles of the present invention, compared with previously stored data in order to ensure commonality of ownership, thereby limiting illegal copying of the software. If common ownership is found, the software is loaded into the processing system along with decoded industry-standardized personal data. When the owner of a processing system transfers ownership of the processing system, in order to load his software, the new owner will have to redefine industry-standardized personal data, which either suspends the new owner's use of the existing software or automatically Remove existing software. When the use of software is suspended, if ownership of a piece of software is legally transferred, an ownership "transfer" routine is available to re-enable the suspended use of the existing software.

Although the present invention and its advantages have been described in detail, it should be understood that various changes and substitutions could be made hereto without departing from the spirit and scope of the invention.

Claims (23)

1 one kinds of methods that produce the peculiar goods of recipient said method comprising the steps of:

Receive the peculiar data set of recipient, the peculiar data set of described recipient comprises the peculiar data subset of one or more recipients;

Encode the peculiar data subset of first recipient to produce the machine-readable data collection;

Described machine-readable data collection is arranged as the readable binary code of light of forming at least one matrix; With

Described machine-readable data collection is fixed on the goods.

2. the process of claim 1 wherein that described coding step is further comprising the steps of:

A part and controlling value to the peculiar data subset of described first recipient of major general are made comparisons, to determine that the peculiar data subset of described first recipient is whether in the tolerance of described controlling value.

3. the method for claim 2, wherein said comparison step confirmed after acceptable further comprising the steps of:

Search for the previously generated database that can not change goods, to determine whether the peculiar data set of described recipient is unique, and the described previously generated database that can not change goods comprises one or more records;

In case nonuniqueness is identified, with regard to the generation of the described unique peculiar sign goods of recipient of abnormal end; And

In case uniqueness is identified, just the peculiar data set of described recipient is inserted at least one record of the described record in the described previously generated database that can not change goods and goes.

4. the process of claim 1 wherein that described alignment step has following steps before:

The peculiar data subset of second recipient of encoding selectively; And

Make up described peculiar data subset of second recipient that is encoded and the described peculiar data subset of first recipient that is encoded, form described machine-readable data collection thus.

5. the process of claim 1 wherein that described fixing step also comprises is etched in step on the described goods to described matrix.

6. the process of claim 1 wherein that described fixing step also comprises is engraved in step on the described goods to described matrix.

7. the process of claim 1 wherein that described coding step also comprises the step of encrypting the peculiar data subset of described first recipient.

8. the method for claim 7, wherein said combination step may further comprise the steps:

Described peculiar data subset of second recipient that is encoded and the described peculiar data subset of first recipient that is encoded is staggered.

9. the method for claim 7, the peculiar data subset of wherein said second recipient comprises textual data.

10. the method for claim 7, the peculiar data subset of wherein said first recipient comprises biometric data.

11. the process of claim 1 wherein that described coding step is further comprising the steps of:

Described machine-readable data collection is arranged as the readable binary code of light of forming two matrixes.

12. the method for the authenticity of the peculiar goods of recipient of verifying reception, the peculiar goods of described recipient comprise a plurality of data sets, these a plurality of data sets comprise first data set and second data set, wherein said first data set is the copy of a coding of described second data set, described second data set is the readable binary code of light of forming at least one matrix, said method comprising the steps of:

The peculiar goods of recipient that scan described reception are to locate described first data set that is encoded;

Decipher described first data set that is encoded; And

Described first decoded data set and described second data set are made comparisons, with the authenticity of the peculiar sign goods of the recipient who judges described reception.

13. the method for claim 12, wherein said scanning step is further comprising the steps of:

Described a plurality of data sets are for conversion into the digital bitmap image; And

Described digital bitmap image Segmentation is become a plurality of zones, and first area wherein comprises described first data set that is encoded, and second area comprises described second data set.

14. the method for claim 13, wherein said first area comprise the textual data subclass that is encoded, described decoding step is further comprising the steps of:

The decoded textual data subclass of described first area and the textual data subclass of second area are for conversion into first data format.

15. the method for claim 13, wherein said first area comprise a biometric data subclass that is encoded, described decoding step is further comprising the steps of:

The decoded biometric data subclass of described first area and the biometric data subclass of second area are for conversion into first data format.

16. the method for claim 12, wherein said comparison step is further comprising the steps of:

Described first decoded data set and described second data set are sent to treatment system, so that the affirmation of described authenticity.

17. the treatment system of the unique machine-readable data collection on the peculiar goods of recipient that a generation is fixed on automatic discriminating, described treatment system comprises:

Receive an input of the peculiar data set of recipient, the peculiar data set of described recipient comprises the peculiar data subset of at least one recipient;

Store the memory devices of many treatment system instructions;

Processing unit, by retrieving and carry out at least one described machine-readable data collection that produces on the peculiar goods of the recipient who is imprinted on automatic discriminating in the described processing unit instruction in the described memory devices, described processing unit is encoded to the peculiar data subset of first recipient; And

The output that the described peculiar data subset of first recipient that is encoded is transmitted as described machine-readable data collection;

Described processing unit also is arranged as the readable binary code of light of forming at least one matrix to the described peculiar data subset of first recipient that is encoded.

18. the treatment system of claim 17 also comprises:

Goods produce equipment, are connected with described output, on the peculiar goods of recipient that described machine-readable data collection is fixed on automatic discriminating.

Also comprise at least a portion of the peculiar data set of recipient is fixed on device on the described automatic discriminating goods 19. the treatment system of claim 18, wherein said goods produce equipment.

20. the treatment system of the authenticity of the automatic verifying articles of checking, this treatment system comprises:

Reception comprises the input of the data set of first and second data subsets, wherein said first data subset is the form of a coding of second data subset, described first data subset is set to form the readable binary code of light of at least one matrix, and described input comprises and is subject to processing unit controls, scans the device on described automatic verifying articles surface selectively;

Store the memory devices of many treatment system instructions;

Described processing unit is by retrieval with carry out the authenticity that described automatic verifying articles is verified at least one instruction in the described processing unit instruction in the described memory devices, described first data subset that is encoded of described processing unit decoding.

21. the treatment system of claim 20 also comprises the device that described decoded first data subset and described second data subset are made comparisons.

22. the processing unit of claim 20 also comprises the device of the output signal of the authenticity that produces the described automatic verifying articles of expression.

23. the treatment system of claim 20 also comprises the device that shows described decoded first data subset.

Images