Method for authenticating an article

Abstract

Described herein are methods and systems comprising one or more entropy- configured unique physical features ("id-entropy") that serve as unique identifiers for physical items such as products or devices, particularly commercial products and / or devices, documents, packaging, and the like. The id-entropy enables the unique differentiation of one item from another. In one embodiment, the id-entropy requires conversion into a digital entity, which can be accomplished through a challenge-response interaction, wherein a physical challenge is applied to the id-entropy, wherein the id-entropy will provide a physical response as a reaction to the challenge. In some embodiments, the response is encrypted. In some embodiments, the resulting decrypted and optionally decompressed code can be compared to a digital response obtained when the authenticating device is challenged, to estimate a trust score, such as a trust quotient.

Description

[0001] Cross Reference to Related Patent Applications

[0002] This application claims the benefit of U.S. Provisional Patent Application No. 62 / 966,147, filed January 27, 2020, which is incorporated by reference herein in its entirety. TECHNICAL FIELD

[0003] Described herein are systems and methods for using unique physical features configured with entropy (“id-entropy”). The systems and methods can include compression and encryption techniques to enable authentication without the use of an online connection. BACKGROUND

[0004] Counterfeiting involves manufacturing and / or distributing goods under the name of another person or under the brand of another company without the permission of the other person. Counterfeit goods (e.g., “knock-offs” or “fakes”) are often made with lower quality components to sell cheaper imitations of goods produced by a brand known and trusted by consumers. Counterfeit or pirated goods span multiple industries, including luxury goods and apparel, jewelry, accessories, music, software, pharmaceutical and medical devices, tobacco products, wine and spirits, consumer products, toys, fresh agricultural products, and electronic devices.

[0005] Counterfeiting is a significant problem, both in developed and developing countries. The Organization for Economic Cooperation and Development (OECD) and the European Union Intellectual Property Office (EUIPO) reported that trade in counterfeit and pirated goods accounted for 2.5% of international trade (or $461 billion) in 2013. In 2013, this percentage accounted for 5% of imported goods in Europe alone (equivalent to $116 billion). In the 2013 fiscal year, the U.S. Department of Homeland Security (DHS) seized counterfeit goods worth more than $1.7 billion at the U.S. border.

[0006] Counterfeit goods can pose risks to both sellers and consumers. For example, counterfeit goods are often made with cheap, substandard, and / or dangerous components that can endanger the health and safety of consumers. When consumers provide personal or financial information to a counterfeit merchant, purchasing goods from a counterfeit website can put consumers at risk of identity theft and financial fraud.

[0007] Many features are known that attempt to make it more difficult for counterfeiters to “copy” an item. Unique and expensive packaging, holograms, hard-to-obtain materials are all known. However, these features can often be mimicked or copied without perfectly matching the original feature. It is often difficult for an end user (who needs to verify that an item with such a “realness” feature is real) to identify such a feature, as the end user is not an expert who can identify these special features.

[0008] Other known authentication features require an online connection over the internet to determine whether a particular security feature (e.g. a unique serial number, or an image, or an identropy configured unique physical feature) is genuine. However, the use of the internet tends to be slow, inconsistent or in some cases impossible. Furthermore, for mass produced items such as foodstuffs, where large amounts of data can need to be processed, server capacity at a central verification end is limited.

[0009] It is therefore an object of the present invention to provide a solution for the offline authentication of physical items using ubiquitous low cost authentication devices without the need for an online connection to a central database.

[0010] It is a further object of the present invention to provide a solution for the offline authentication of various physical items by providing a method that is both flexible and secure.

[0011] It is a further object of the present invention to provide a means for end users (such as retailers or consumers) to verify the authenticity of an object, wherein the means involves or includes a trust merchant that provides a quantitative means for verifying the authenticity of an object. SUMMARY

[0012] The methods and systems described herein include one or more identropy configured unique physical features that are used as unique identifiers for physical items such as products or devices, in particular commercial products and / or devices, documents, packaging, etc. The identropy makes it possible to uniquely distinguish one item from another. Due to the random nature of the identropy feature, the chance of two products carrying the same identropy configured unique physical feature is infinitesimally small.

[0013] The identropy can be based on physical variations that occur naturally (e.g. randomly or in an entropic manner) during manufacture or production, such as a dispersion or splatter pattern resulting from printing a mark, text and / or graphic on the article; a dispersion or splatter pattern resulting from printing text and / or a graphic on a label or tag attached to the article; a unique random pattern of paper fibre orientation within the mark or tag; and / or a unique topography of the surface of the article or mark or tag on the article. For example, the inherent printing imperfections (such as inkjet splatter) on the article itself or on a label or tag attached to the article provide a unique distribution of dot size, shape and spacing when imaged at an appropriate resolution.

[0014] In one embodiment, after the id-entropy is applied to the surface of the item, the id-entropy needs to be converted into a digital entity. This can be done through a challenge-response interaction, where a physical challenge is applied to the id-entropy, where the id-entropy will provide a physical response as a reaction to the challenge. Other examples of physical challenge-response pairs include, but are not limited to, haptic feedback and RFID (Radio Frequency Identification).

[0015] In some embodiments, the above response is encrypted. In some embodiments, the cryptographic system is public-key cryptography or an asymmetric cryptography system that uses a public key that can be widely disseminated and a private key that only the owner knows. The generation of such keys depends on the cryptographic algorithm used to produce a mathematical problem for the one-way function. Effective security only requires that the private key be kept private; the public key can be distributed openly without compromising security. In some embodiments, the encryption of the digital response or the digitally converted analog response is done using the private key. The specific public key used to encrypt the response from the id-entropy corresponds to the specific private key. In some embodiments, the private / public key pair has a serial number. Each serial number corresponds to a unique private / public key pair. In some embodiments, a user who wants to use id-entropy to provide authentication has multiple private / public key pairs to use. In some embodiments, each unique id-entropy comes with a unique private and public key pair. In other embodiments, the same private / public key pair can be used for multiple id-entropies.

[0016] In some embodiments, the encrypted signal can be compressed. Compression will reduce the amount of data that needs to be processed at later stages and will reduce the chances of brute force attacks on the encrypted signal. In some embodiments, the encrypted and optionally compressed data is converted into a machine-readable form that can be printed on the item that the id-entropy is challenged on.

[0017] In some embodiments, near the printer-readable data, a serial number corresponding to the public-private key pair used to encrypt the data can be printed. The serial number can be printed in human-readable form or machine-readable form. In some embodiments, the serial number is printed in machine-readable format. In some embodiments, the encrypted data that is machine-readable and the unencrypted serial number that is machine-readable are printed in one machine-readable format. In some embodiments, the encrypted response linked to the individual item is stored in a cloud-based shared immutable ledger with the serial number for associating each individual physical item.

[0018] In some embodiments, the location from which the challenge id entropy is required and / or from which the response to the challenge can be collected can be derived from the location of the machine-readable code. If the location from which the challenge id entropy is required and / or from which the response to the challenge can be collected cannot be derived from the location of the machine-readable code, then the location from which the challenge id entropy is required and / or from which the response to the challenge can be collected must be indicated in another manner.

[0019] In some embodiments, the derived decrypted and optionally decompressed code can be compared to the digital response obtained when the authentication device is challenged. Ideally, the two can be identical because the id entropy is identical. However, it can be the case that the response of the authentication device is not exactly identical to the response obtained by decrypting the printed machine-readable code due to damage during shipping, random permutations that occur during the id entropy life cycle, or for any other reason. In such a case, a trust score, such as a trust quotient, can be estimated. The trust score or trust quotient can be calculated using known techniques and altered or modified as necessary to account for variables in a particular system to calculate the trust quotient.

[0020] In some embodiments, the trust quotient provides a degree or level of certainty (e.g., a confidence level) that the article in hand of the individual (e.g., such as a retailer, a consumer, etc.) is authentic. In some embodiments, the trust quotient is at least 90%, 91%, 92%, 93%, 94%, 95%, 96%, 97%, 98%, 99%, 99.1%, 99.2%, 99.3%, 99.4%, 99.5%, 99.6%, 99.7%, 99.8%, 99.9%, 99.95%, 99.99%, or more.

[0021] In the methods described herein, there is no need to verify the authenticity of the item while connected to the central database. However, connecting the authentication device to the central database can be used for a variety of purposes. This can be required when requesting a new public key with its corresponding serial number or when adding a new transaction and new progress to a cloud-based shared immutable ledger.

[0022] The systems and methods described herein can be used to authenticate / tracking a variety of articles, including but not limited to commercial goods and documents. Examples of articles include, but are not limited to, clothing (e.g., authentic sports jerseys, luxury clothing, etc.), shoes, accessories (e.g., handbags, etc.), jewelry, wine and spirits, tobacco products, pharmaceutical products and medical devices, cosmetics, food (e.g., fruits and vegetables, meat, seafood, dairy products, etc.), and the like. Examples of documents include documents related to complex financial transactions, including letters of credit, guarantees, bank and buyer's certificates of acceptance, and certificates of inspection, admission credentials, passports, visas, driver's licenses, wills, contracts, bonds, stock certificates, and other similar articles.

[0023] In some embodiments, systems and methods can be used to reduce, minimize, or prevent the use of authentic packaging to package counterfeit goods. For example, tamper-evident measures can be used to indicate that the packaging has been tampered with and, therefore, the contents can be counterfeit. Further, the packaging can contain one or more unique identifiers that associate the packaging with authentic goods therein.

[0024] The method further comprises the step of checking the history and identity of the item via a hash chain of associated data by using private and / or public key tokens. DETAILED DESCRIPTION

[0025] I. DEFINITIONS

[0026] As used herein, “block chain” means a growing list of records, called blocks, linked using cryptography. Each block contains a cryptographic hash of the previous block, a timestamp, and transaction data. By design, block chains are resistant to modification of their data.

[0027] As used herein, “database” means a collection of organized data, typically stored and accessed electronically from a computer system. A database can be hosted locally (e.g., on a machine or server) or can be cloud-based.

[0028] As used herein, “digital twin” means a digital or virtual copy of one or more physical items (e.g., products, documents, packaging, etc.).

[0029] As used herein, “distributed ledger” means a consensus of replicated, shared, and synchronized digital data that is geographically scattered across multiple locations, countries, or institutions. There is no central administrator or centralized data storage.

[0030] As used herein, “IDENTROPY” means a unique physical feature configured with entropy that is used as a unique identifier for a physical item.

[0031] As used herein, “scatter pattern” or “splatter pattern” means a random pattern caused by one or more materials (such as ink, dye, pigment, adhesive, etc.) splattering when applied to an item or to a label or marking applied to an item.

[0032] As used herein, “trust quotient” refers to a level of confidence that an item is authentic.

[0033] II. Systems and methods for authenticating articles

[0034] A. id entropy

[0035] The systems and methods described herein include one or more id entropies as a means for authenticating and tracking articles such as commercial goods, documents, authentic brand packaging, etc. In some embodiments, the id entropy is a random pattern generated during manufacture of the article. In some embodiments, the random pattern is a splatter or dispersion pattern of ink and / or another material (e.g., dye, pigment, adhesive, etc.) applied to the article during manufacture or to a label or tag affixed to the article and which can be read or imaged (e.g., optically). In other embodiments, the random pattern is an absorbance pattern. In some embodiments, one or more additives can be incorporated into the material that emit electromagnetic radiation in a portion of the spectrum outside the visible range (UV, IR, etc.). In some embodiments, the additives cause the pattern to luminesce or phosphoresce. Examples of such applications include printing a brand, size, material from which the article was made, text or graphics (logo, image, etc.) applied to the article, or a combination thereof. In other embodiments, the above-mentioned pattern is generated when preparing a label or tag affixed to the article. The materials that can be used to generate the pattern are the same as described above, i.e., ink, dye, pigment, adhesive, etc.

[0036] Various conventional inks can be used. For example, conventional inks that can be used for inkjet applications can be used. Such inks include, but are not limited to, dye-based inks or pigment-based inks. Dye-based inks generally refer to dyes dissolved in a carrier, such as an aqueous carrier, while pigment-based inks generally refer to pigment particles suspended in a carrier. In addition to, or instead of, conventional inkjet, thermochromic inks and / or photochromic inks can be used. Thermochromic inks are a type of ink that changes color with application (or removal of heat). For reversible thermochromic inks, the color returns when the temperature returns to its original level. For irreversible thermochromic inks, the color remains unchanged after a temperature change. Photochromic inks are a type of ink that changes color when the intensity of incident light changes. For example, the ink can change from colorless to colored upon exposure to UV light, and then fade back to colorless when the light source is removed. Such inks can be used in combination with other security features such as a QR code as described above. The combination of a QR code with a functional ink is described in Gloric et al., Sensors, 19, 586 (2019).

[0037] Other id entropies include the topography of the article, document, or label or tag substrate, or the topography of the material (e.g., ink, dye, pigment, and / or adhesive) applied to the article, document, or label or tag. For example, a random pattern of discontinuous layers of adhesive is a unique identifying feature.

[0038] B. Physical challenge-response pair

[0039] After applying the id entropy to one or more surfaces of the item, the id entropy needs to be converted into a digital entity. This is done through a challenge-response interaction, where a physical challenge acts on the id entropy, and where the id entropy provides a physical response as a reaction to the challenge. A typical exemplary embodiment of such a physical challenge-response pair is imaging the id entropy. In some embodiments, the id entropy can be imaged visually, e.g. by taking a picture, where the challenge is the light falling on the id entropy, and the response is the light sent back from the id entropy into the camera. The light sent back from the id entropy into the camera can be modified in many ways by the characteristics of the id entropy, such as frequency, frequency distribution, intensity, polarization plane, or other properties.

[0040] In other embodiments, the id entropy contains one or more additives that emit electromagnetic radiation in one or more parts of the electromagnetic spectrum, e.g. other than the visible part of the spectrum. For example, in some embodiments, the one or more additives can be excited using an excitation source, and the resulting radiation emission, e.g. luminescence or phosphorescence, can be imaged using appropriate equipment, such as a fluorescence microscope.

[0041] In some embodiments, the physical challenge-response pair is a haptic feedback, where the challenge is a sensor touching the id entropy, and the response is the force the force sensor receives under the influence of the height or elasticity of the id entropy.

[0042] In other embodiments, the physical challenge-response pair is an RFID (Radio Frequency Identification), where the challenge is an RFID scanning device, such as an NFC-enabled smartphone or an RFID reader, emitting electromagnetic radio waves, and the response is the id entropy containing the RFID emitting modified electromagnetic radio waves.

[0043] In some embodiments, the response is an analog signal that is converted into a digital signal. A typical example of such a conversion is a charge-coupled device (CCD) or an active pixel sensor (CMOS sensor). In other embodiments, the response signal is a digital signal. In the case of an RFID challenge-response pair, the return signal carries the digitized information, and thus does not need to be converted into a digital signal.

[0044] Regardless of the imaging method, it should be efficient and easy to use. For example, in some embodiments, the id-entropy is imaged using a handheld device equipped with an appropriate lens (e.g., a macro lens), microscope, detector, reader, etc. to image or read the id-entropy. Suitable handheld devices include, but are not limited to, smartphones, tablets, application-specific devices (e.g., specifically designed and manufactured to image id-entropies). In other embodiments, the id-entropy can be imaged using a device or equipment installed in a specific location (e.g., a warehouse, shipping container, transportation vehicle (train, ship, truck, etc.), retail location, etc.). Such devices or equipment can be set up to image a large number of articles, e.g., designed to image id-entropies of articles moving along a conveyor belt.

[0045] In addition to being easy to use, the method for imaging or reading the id-entropy should also be fast. The id-entropy should be imaged or read and stored within a few seconds or less for the systems and methods described herein to be efficient and economically viable. In some embodiments, the time required to image or read the id-entropy is less than 5 seconds, 4 seconds, 3 seconds, 2 seconds, 1 second, 0.75 seconds, 0.5 seconds, 0.25 seconds, 0.1 seconds, 0.05 seconds, 0.025 seconds, 0.01 seconds, 0.005 seconds, 0.0025 seconds, 0.001 seconds, or less. In some embodiments, the time required to image or read the id-entropy and store the image is less than 5 seconds, 4 seconds, 3 seconds, 2 seconds, 1 second, 0.75 seconds, 0.5 seconds, 0.25 seconds, 0.1 seconds, 0.05 seconds, 0.025 seconds, 0.01 seconds, 0.005 seconds, 0.0025 seconds, 0.001 seconds, or less.

[0046] C. Encryption

[0047] In some embodiments, the id-entropy and the challenge-response are as described above, and the digital response or the analog response converted to digital is encrypted. Encryption is the process of encoding a message or information in such a way that only an authorized party can access it, while an unauthorized party cannot. Encryption is a fundamental feature of authentication because it allows the authenticator to trust the authentication system.

[0048] Public-key cryptography, or asymmetric cryptography, is a cryptographic system that uses pairs of keys: a public key which can be widely distributed, and a private key known only to the owner. The generation of the keys depends on a cryptographic algorithm based on mathematical problems used to create a one-way function. Effective security is only required to keep the private key private; the public key can be distributed openly without compromising security.

[0049] In some embodiments, a private key is used to encrypt the digital response or the digitally converted analog response. Corresponding to the specific private key, a specific public key is used to encrypt the response from id entropy. In some embodiments, the private / public key pair has a sequence number. Each sequence number corresponds to a unique private / public key pair.

[0050] In some embodiments, a user who wants to use ID entropy to provide authentication has multiple private / public key pairs available for their use. In some embodiments, each unique ID entropy comes with a unique private and public key pair. In other embodiments, the same private / public key pair may be used for multiple ID entropies.

[0051] Typical exemplary embodiments of cryptographic protocols suitable for the systems and methods described herein include, but are not limited to, the Diffie-Hellman key exchange protocol, DSS (Digital Signature Standard) (which incorporates digital signature algorithms), the ElGamal encryption algorithm, various elliptic curve cryptography, various password authentication key protocol technologies, the Paillier cryptosystem, the RSA encryption algorithm (PKCS#1), the Cramer-Shoup cryptosystem, the YAK authentication key protocol, the NTRUEncrypt cryptosystem, the McEliece cryptosystem, and quantum-safe cryptography.

[0052] In some embodiments, the encrypted signal may be compressed. Compression reduces the amount of data that needs to be processed in later stages and reduces the chance of brute-force cracking the encrypted signal. In some embodiments, the encrypted and optionally compressed data is converted into a machine-readable form that may be printed on an item whose id entropy is challenged. Typical exemplary embodiments are plain text, linear barcodes, QR codes, SnapTag tags, DataMatrix codes, Digimarc codes, Ez codes, etc.

[0053] In some embodiments, a serial number corresponding to a public-private key pair used to encrypt the data may be printed near the printer-readable data. The serial number is not encrypted but is represented as is. The serial number may be printed in human-readable or machine-readable form. In some embodiments, the serial number is printed in a machine-readable format. Typical exemplary embodiments of this machine-readable format are plain text, linear barcodes, QR codes, SnapTag tags, DataMatrix codes, Digimarc codes, Ez codes, etc.

[0054] In some embodiments, the machine-readable encrypted data and the machine-readable unencrypted serial number are printed in a machine-readable format. In some embodiments, the encrypted response linked to the individual item is stored in a cloud-based shared immutable ledger with the serial number for associating each individual physical item. Examples of such ledgers include, but are not limited to, a blockchain and a Hedera Hashgraph.

[0055] In some embodiments, the location from which the challenge id entropy is required and / or the location at which the response to the challenge can be collected can be derived from the location of the machine-readable code. If the location from which the challenge id entropy is required and / or the location at which the response to the challenge can be collected cannot be derived from the location of the machine-readable code, then the location from which the challenge id entropy is required and / or the location at which the response to the challenge can be collected needs to be indicated in another way.

[0056] So far, the result of the process described is an item and a machine-readable code, from which the id entropy is derivable, in which an encrypted response is stored with or near a machine-readable form representing an unencrypted serial number corresponding to the private key utilized to complete the encryption.

[0057] D. Authentication

[0058] After the response is imaged / read and stored, authentication can be completed. This can be done, for example: (1) somewhere in the transportation chain to verify that the item being transported is authentic; (2) at the point of sale to show potential customers that the item for sale is authentic; (3) by an individual who has acquired the item to verify the authenticity of the item; or (4) in any situation where someone wants to prove or verify the authenticity of the item.

[0059] For the authentication step, an authentication device is required that is capable of performing a challenge-response action on the id entropy in a similar manner as was done previously before the encryption step was completed. In some embodiments, the challenge uses the same physical phenomenon as the means for eliciting a response from the id entropy. However, other physical challenges with different physical characteristics can be presented to the id entropy that provide equivalent responses. For example, the wavelength of light used to produce the initial response before encryption can be different from the wavelength used in the authentication phase.

[0060] In some embodiments, the authentication is performed with mobile devices such as smart phones, tablets, laptop computers, and RFID reader devices, among others. The device that issues the challenge can be a different device than the device that collects the id-entropy response to the challenge, or the two devices can be combined. The device that performs the computational portion of the authentication process, such as compression, decryption, calculation of trust score, among others, can be a separate device from the device that is used for the challenge-response reaction, or the two can be combined. In some embodiments, all of the devices used in the authentication process can be combined into one device.

[0061] In some embodiments, the authentication device interacts with the id-entropy through a challenge-response interaction. When a challenge is sent to the entropy, the authentication device collects the response. If needed, the response is converted to a digital form. If the response is already in digital form, no conversion is needed. In other embodiments, the authentication device also scans the machine-readable code that is present in the vicinity of the id-entropy. The authentication device then extracts the serial number and the encrypted and optionally compressed data from the machine-readable code.

[0062] In some embodiments, the authentication device contains a database with one or more public keys, each corresponding to a serial number that has been assigned to a public / private key pair prior to the encryption step. When the authentication device reads the serial number, the encrypted data can be decrypted using the public key that corresponds to the serial number. When needed, the decrypted data can be decompressed at this time.

[0063] In some embodiments, the resulting decrypted and optionally decompressed code can be compared to the digital response that was obtained when the authentication device was challenged. Ideally, the two can be identical because the id-entropy is identical. However, it can be the case that the response of the authentication device is not exactly the same as the response that was obtained by decrypting the printed machine-readable code, due to damage during shipping, random permutations that occur during the life of the id-entropy, or for any other reason. In this case, a trust score, such as a trust quotient, can be estimated.

[0064] In some embodiments, the trust quotient (TQ) can be calculated using the following equation:

[0065] TQ = function [(F_intrinsic), (F_extrinsic), (F_geo-temporal trace of its digital twin), (F_tamper trace)] divided by [system noise]

[0066] where,

[0067] F_intrinsic refers to the entropy signature that is intrinsic to the material, such as complex surface topography, paper fiber orientation, among others;

[0068] F extrinsic refers to the addition of primary or secondary additives, unique tracers (Tukan / DUST) resulting from processing, e.g., inkjet splatter, etc.; and

[0069] F DigiTwin refers to the ability to validate / negate a given item grade series using tethered digital information obtained from a position (geographical) and time (temporal) or even integrated social media sources resulting from signatures tracking recording these digital information.

[0070] The above exemplary equations provide a mathematical means to measure the kurtosis (referred to as "configuration entropy" in statistical mechanics) of the order parameter resulting from the spatial complexity on the physical entity in order to provide the end user with a means to quantify the level of confidence on the authenticity of the article. Those of ordinary skill in the art will recognize that the above equations can be altered or modified as needed to account for variables in a particular system in order to calculate the trust quotient.

[0071] In some embodiments, the trust quotient provides a degree or level of certainty (e.g., a level of confidence) that an article in hand is authentic to an individual (e.g., such as a retailer, a consumer, etc.). In some embodiments, the trust quotient is at least 90%, 91%, 92%, 93%, 94%, 95%, 96%, 97%, 98%, 99%, 99.1%, 99.2%, 99.3%, 99.4%, 99.5%, 99.6%, 99.7%, 99.8%, 99.9%, 99.95%, 99.99%, or higher.

[0072] The trust quotient (TQ) reflects the total greed metric that helps the end user "connect the dots" as the article goes through its lifecycle (manufacturing, supply chain, sales, and use). One example of this metric is the concept of digital twin. A digital twin is a digital or virtual copy of one or more physical articles (e.g., products, documents, packaging, etc.). The digital twin connects the real world and the virtual world by collecting real-time data from sensors or security features.

[0073] In the methods described herein, there is no need to verify the authenticity of the article while connected to the central database. However, connecting the authentication device to the central database can be used for multiple purposes. This can be needed when requesting a new public key with its corresponding serial number or when adding a new transaction and new progress to the cloud-based shared immutable ledger.

[0074] E. Article to be authenticated

[0075] The systems and methods described herein can be used to authenticate / tracking a variety of articles, including but not limited to commercial goods and documents. Examples of articles include, but are not limited to, clothing (e.g., authentic sports jerseys, luxury clothing, etc.), shoes, accessories (e.g., handbags, etc.), wine and spirits, tobacco products, pharmaceutical products and medical devices, cosmetics, medical devices, fruits and vegetables, etc.

[0076] Examples of documents include documents related to complex financial transactions, including letters of credit, guarantees, bank and buyer's acceptance certificates, and certificates of inspection, admission, passports, visas, driver's licenses, wills, deeds, bonds, stock certificates, and other similar articles.

[0077] In some embodiments, the systems and methods can be used to reduce, minimize, or prevent the use of authentic packaging to package counterfeit goods. For example, tamper-evident measures can be provided to indicate that the packaging has been tampered with, and therefore, the article inside can be counterfeit. Further, the packaging can contain one or more unique identifiers that associate the packaging with the authentic article inside.

[0078] The method further comprises the step of checking the history and identity of the item via a hash chain of associated data using private and / or public key tokens.

[0079] Those skilled in the art will understand that numerous changes and modifications can be made to the preferred embodiments of the present application, and that such changes and modifications can be made without departing from the spirit of the present application. Therefore, the appended claims are intended to cover all such equivalent variations as fall within the true spirit and scope of the present application.

Claims

1. A method for authenticating articles, comprising: a. Set unique physical characteristics for entropy configuration on items, namely "id entropy"; b. Question the id entropy and obtain a first converted digital response based on the question; c. Provide multiple sets of different encryption key pairs, each set including a private encryption key, a public decryption key, and a serial number, wherein each serial number in the multiple sets is different from the other serial numbers in the multiple sets; d. Select a serial number from the serial numbers set in the plurality of different encryption key pairs; e. Encrypt the first converted digital response using the private encryption key from the same group as the selected serial number; f. The neighbor ID entropy is printed in the form of encrypted code in the encrypted response; g. Print the selected serial number adjacent to or in the same area as the machine-readable code; h. Provide multiple sets of decryption keys, each of which includes a public decryption key and a serial number; i. A second challenge is made to the id entropy and a second converted digital response is obtained based on the challenge; j. Scan the machine-readable code; k. Scan the selected serial number set on or inside the packaging; 1. Select the public key corresponding to the selected sequence number; m. Decrypt the machine-readable code using the public key corresponding to the serial number, thereby generating a second converted digital response; n. Compare the obtained second converted digital response with the first converted digital response; as well as o. A trust score is provided based on a comparison between the obtained second converted digital response and the first converted digital response. Providing the trust score includes using a digital twin of the item, which is a digital or virtual copy of the item and includes real-time data collected from sensors or security features.

2. The method according to claim 1, wherein, The multiple sets of decryption keys in step (h) are stored in software on the mobile device.

3. The method according to claim 2, wherein, Step (i) is performed using the software on the mobile device.

4. The method according to claim 3, wherein, Step (j) is performed using the software on the mobile device.

5. The method according to claim 4, wherein, Step (k) is performed using the software on the mobile device.

6. The method according to any one of claims 1 to 5, wherein, The location of unique physical features with individual entropy configurations is obtained from the location of the machine-readable code.

7. The method according to any one of claims 1 to 5, wherein, The first converted digital response is compressed before encryption, and the second converted digital response is decompressed after decryption.

8. The method according to any one of claims 1 to 5, wherein, The id entropy is a dispersion or splash pattern.

9. The method according to claim 8, wherein, Optical imaging is performed on the id entropy.

10. The method according to any one of claims 2 to 5, wherein, The mobile device is selected from the group consisting of smartphones, tablets, laptops, or RFID reader devices.

11. The method according to any one of claims 1 to 5 or 9, wherein, The article is a package containing goods selected from the group consisting of: clothing, accessories, music, software, pharmaceuticals and medical devices, tobacco products, wine and spirits, toys, fresh produce and electronic devices.

12. The method according to any one of claims 1 to 5 or 9, wherein, Queries the id entropy at one or more locations selected from the following groups: warehouse, airplane, train, truck, shipping container, retail location, or customer / consumer location.