Method for recording identifying characteristics for products

Abstract

Method for recording a number of identifiers, wherein each identifier comprises a sequence of alphanumeric characters, the method comprising the following steps: a) Reading (1) the sequence of alphanumeric characters of a first identifier E1, b) Forming a first hash value H1 (2) by applying a hash function to a first sequence N1 of alphanumeric characters comprising the sequence of alphanumeric characters of the read first identifier E1 and a time value Z, c) Storing (3) the first hash value H1 using a storage device (13), d) Reading (4) a subsequent identifier E n , e) Creating a hash value H n (5) by applying a hash function to a sequence N n alphanumeric characters that represent the sequence of alphanumeric characters of the read identifier E nor a hash value resulting from this sequence and the previously generated hash value H n-1 includes f) Storing (6) the hash value H n by means of the storage device (13) and g) iteratively continuing steps d) to f), wherein a time interval is set for retaining the logged hash values ​​and stored hash values ​​logged at a time earlier than the set time interval are deleted, and a qualified timestamp is generated and stored based on the last deleted logged identifier.

Description

Subject of the invention

[0001] The present invention relates to a method and a device for logging identification features, in particular identification features applied to products. The invention also relates to a computer program product and a computer-readable data carrier. Background of the invention

[0002] Numerous legal standards stipulate requirements for product labeling. In addition to the general labeling of products, such as products or goods, particularly with regard to manufacturer information, product descriptions, material information, information on ingredients, or expiration dates, certain products also require individual product-identifying information on the product.

[0003] In the European Union, for example, Article 15 of Directive 2014 / 40 / EU of April 3, 2014, stipulates that all tobacco product packages must have a unique identifier that allows the identification of the date and place of manufacture, the manufacturing facility, the machine used to manufacture the tobacco products, the work shift or time of manufacture, the product description, the intended sales market, the intended shipping route, and, if applicable, the importer into the EU. This is intended to ensure the traceability and traceability of all packages, particularly to prevent fraudulent tax liability.

[0004] According to Article 8(1) of the Commission Implementing Regulation of 15 December 2017, each unit of tobacco products must be marked with a unit-level identifier. The identifier shall consist of a sequence of alphanumeric characters as short as possible (maximum 50 characters).The sequence shall be unique for each package and shall comprise the following data elements: (a) in the first position, alphanumeric characters corresponding to the identification code assigned to the authority which issued the identifier; (b) a sequence of alphanumeric characters (serial number) for which the probability of being deduced is negligible and in any event less than 1 in 10 000; (c) a code (product code) allowing the identification of: (i) the place of manufacture; (ii) the manufacturing site; (iii) the machinery used for manufacture; (iv) the description of the product; (v) the intended market; (vi) the intended dispatch route; (vii) where applicable, the importer of the product into the Union; (d) in the last position, the time stamp consisting of a sequence of eight digits in the format YYMMDDhh indicating the date and time of manufacture.

[0005] According to Article 8(2), issuing authorities are responsible for generating a code consisting of the elements specified in paragraph 1(a), (b), and (c). According to Article 8(3), manufacturers or importers add the timestamp specified in paragraph 1(d) to the code generated by the issuing authority in accordance with paragraph 2. The concrete implementation of these requirements presents a challenge for potential issuing authorities and manufacturers or importers. This concerns, among other things, tamper-evident logging and traceability.

[0006] It can be assumed that similar requirements for individual identification and traceability will also have to be met for other products in the future. Therefore, there is interest in options for implementing the respective requirements for the production or generation of individual identifiers and their recording by authorized issuing bodies, manufacturers, or importers.

[0007] The magazine article: SCHULZ, Hajo: This is what blockchain does - The technology behind Bitcoin & Co. c't: Magazine for Computer Technology, 2017, Issue 23, pages 102 to 112, concerns blockchain technology and smart contracts.

[0008] The Wikipedia article: Bitcoin. May 7, 2018. https: / / web.archive.org / web / 20180507-090333 / https: / / de.wikipedia.org / wiki / Bitcoin [researched on December 3, 2020] reveals general information about Bitcoin.

[0009] The document: FEDERAL OFFICE FOR INFORMATION SECURITY: BSI Technical Guideline 03125: Preservation of Evidence of Cryptographically Signed Documents, Annex TR-ESOR-M.2: Crypto Module. March 15, 2018. https: / / www.bsi.bund.de / DE / Publikationen / TechnischeRichtlinien / tr03125 / TR-03125_node.html [accessed December 3, 2020] concerns a technical guideline for specifying security requirements for the long-term preservation of evidence of cryptographically signed electronic documents and data, including associated electronic administrative data (metadata).

[0010] The document: NAKAMOTO, SATOSHI: Bitcoin: A Peer-to-Peer Electronic Cash System. November 1, 2008. https: / / web.archive.org / web / 20170712113708 / http: / / www.-bitcoin.org / bitcoin.pdf [accessed December 4, 2020] discloses the sending of online payments directly from one party to another without going through a financial institution using a peer-to-peer network. Description of the invention

[0011] Against the background described, it is the object of the present invention to provide a method and a device for logging identification features which, on the one hand, is particularly suitable for implementing Article 8 of the Commission Implementing Regulation of 15 December 2017 to Directive 2014 / 40 / EU, but at the same time can also be used as diversely as possible for other applications.

[0012] This object is achieved by a method for logging a number of identification features according to claim 1, a device for logging a number of identification features according to claim 12, a computer program product according to claim 13, and a computer-readable data carrier according to claim 14. The dependent claims contain further advantageous embodiments of the invention.

[0013] The method according to the invention for recording a number of identification features relates to identification features that each comprise a sequence of alphanumeric characters, in particular each consisting of a sequence of alphanumeric characters. The identification features can each be applied to a product. The method comprises the following steps: a) Reading the sequence of alphanumeric characters of a first identification feature E1, b) forming a first hash value H1 by applying a hash function to a first sequence N1 of alphanumeric characters, which comprises the sequence of alphanumeric characters of the read-out first identification feature E1 and a time value Z, in particular consisting of the sequence of alphanumeric characters of the read-out first identification feature E1 and a time value Z (H1=hash(N1)=hash(E1,Z)), c) storing the first hash value H1 by means of a storage device, d) Reading a subsequent identification feature E n , e) Forming a hash value H n by applying a hash function to a sequence N n alphanumeric characters that represent the sequence of alphanumeric characters of the read-out identification feature E n or a hash value attributable to this sequence and the previously formed hash value H n-1 comprises, in particular, the sequence of alphanumeric characters of the read-out identification feature E1 and the previously formed hash value H n-1 exists (H n =hash(N n )=hash(E n ,H n-1 )), f) Storing the hash value H n by means of a storage device, g) iterative continuation of steps d) to f).

[0014] A time interval is defined for storing the logged hash values. Stored hash values ​​logged at a time prior to the specified time interval are deleted. A qualified timestamp is generated and stored based on the most recently deleted logged identifier.

[0015] The method according to the invention has the advantage of enabling the forgery-proof recording of individual identification features for products. Tamper-proofness is ensured by the avalanche effect of the hash function and the iterative approach. Furthermore, the described method is applicable, on the one hand, within the framework of the implementation of the aforementioned implementing regulation for tobacco products and, in this context, offers a fast and compliant recording option for manufacturers and importers. Furthermore, the method can also be used to record and track individually marked other products, making it flexible and versatile in this regard.

[0016] Storing the generated hash values ​​H ncan be physical and / or electronic, for example by storing it on a hard disk, on a server, in a cloud, on a CD-ROM, on a WORM memory, an EPROM, etc.

[0017] In an advantageous variant, the identifying features are read using an optical character recognition (OCR) process. This enables fast and reliable reading.

[0018] The time value Z preferably includes a qualified timestamp, which in particular ensures security against manipulation.

[0019] In a further variant, a number k of recognition features E nwhere n is a natural number from 1 to k, and steps d) to f) are continued until the specified number k of identification features is recorded. In this way, specific product batches and product quantities can be recorded reliably and in a tamper-proof manner.

[0020] In one possible variant, the sequences include N n alphanumeric characters the sequence of alphanumeric characters of the previously read identification feature E n-1 This uses the resulting avalanche effect to improve counterfeit security.

[0021] In a further variant, a number, for example two, of the generated hash values ​​H n at least one other hash value H yIn particular, in a tree structure, a further hash value can be created from two hash values ​​generated consecutively at a level or stage of the tree structure. This can be continued for each resulting level or stage. The sequences N n alphanumeric characters can have at least one further hash value H y include.

[0022] Before reading, individual identification features can be generated by adding a product code to an identification code composed of alphanumeric characters and a serial number. The product code can, in particular, comprise alphanumeric characters that can be used to identify the place of manufacture and / or the manufacturing facility and / or the machine used for manufacture and / or the product description and / or the intended sales market and / or the intended shipping route and / or the importer of the product. Additionally or alternatively, the identification feature can comprise a number of positions for alphanumeric characters that can be assigned alphanumeric characters after the identification feature has been generated, for example, with a time value.

[0023] All identification features logged from a specified point in time onwards are advantageously stored, for example, on at least one data storage device. The generated hash values ​​and, optionally, the read-out identification features are stored. A time interval can be specified for the retention of the logged identification features. The logged identification features recorded at a point in time further back than the specified time interval can be deleted. This has the advantage of allowing effective use of existing storage capacity. Furthermore, the amount of data to be stored long-term can be kept to a minimum.

[0024] The device according to the invention comprises a device for reading identification features, a device for applying cryptographic hash functions, and a memory device for storing generated hash values. The device according to the invention is designed to carry out a previously described method according to the invention. The device according to the invention can be configured, for example, as a computer with a scanner.

[0025] The computer program product according to the invention comprises instructions which, when the program is executed by a computer, cause the computer to execute an inventive method described above. The computer-readable data carrier according to the invention is characterized in that it stores instructions which, when the program is executed by a computer, cause the computer to execute an inventive method described above. The device according to the invention, the computer program product according to the invention, and the computer-readable data carrier according to the invention have the same features and advantages as the previously described inventive method. Description of implementation examples

[0026] Further features, properties, and advantages of the present invention are described in more detail below using embodiments with reference to the accompanying figures. All features described so far and below are advantageous both individually and in any combination. The embodiments described below are merely examples and do not limit the subject matter of the invention.

[0027] The figures are not necessarily detailed or to scale and may be enlarged or reduced to provide a better overview. Therefore, the functional details disclosed herein are not to be interpreted in a limiting sense, but merely as an illustrative basis for teaching one skilled in the art how to variously employ the present invention.

[0028] As used herein, the term "and / or," when used in a series of two or more elements, means that any of the listed elements may be used alone, or any combination of two or more of the listed elements may be used. For example, if a composition is described as containing components A, B, and / or C, the composition may contain A alone; B alone; C alone; A and B in combination; A and C in combination; B and C in combination; or A, B, and C in combination. Fig. 1 schematically shows a first variant of the method according to the invention in the form of a flow chart. Fig. 2 schematically shows a second variant of the method according to the invention in the form of a tree diagram. Fig. 3 shows schematically a device according to the invention.

[0029] The Fig. 1 schematically shows a first variant of the method according to the invention in the form of a flowchart. In a first step 1, the sequence of alphanumeric characters of a first identification feature E1 is read out. This can be done using a text recognition method. In a second step 2, a first hash value H1 is formed by applying a hash function to a first sequence N1 of alphanumeric characters. The first sequence N1 comprises the sequence of alphanumeric characters of the read-out first identification feature E1 and a time value Z. The first sequence N1 can in particular consist of the elements mentioned. The time value Z can be a qualified timestamp. In a third step 3, the first hash value H1 is stored using a storage device.

[0030] In a fourth step 4, a subsequent identification feature E nread out. In a fifth step 5, a hash value H n by applying a hash function to a sequence N n alphanumeric characters. The sequence N n comprises the sequence of alphanumeric characters of the read-out identification feature E n or one based on the sequence E n hash value to be returned and the previously generated hash value H n-1 In a sixth step 6, the hash value H n stored by means of a storage device. Steps 4 to 6 are then continued or repeated iteratively. In particular, a number k of recognition features E to be recorded can be n where n is a natural number from 1 to k, and steps 4 to 6 can be continued until the specified number k of detection features is logged.

[0031] The Fig. Figure 2 schematically shows a second variant of the method according to the invention in the form of a tree diagram. In a first level or stage 10, the recognition features E to be recorded are n (E1, E2, E3, ..., E k ) is read out. From the first identification feature E1 and a time value Z, which is determined in step 2 of the Fig. 1, a first hash value H1 is formed. In a second level or stage 20, a second hash value H 21 Then, a hash value H is created from the second identification feature E2 and the third identification feature E3. 22 From the hash value H 22 , which is due to the read third identification feature E3, and the previously formed second hash value H 21 In the third level or level 30 a third hash value H 31 At the fourth level or level 40, a fourth hash value H41 from the previously formed third hash value H 31 and another H 32 The further hash value H 32 is made up of the hash values ​​H 22 and H 23 formed and hashed using the hash value H 23 , which is formed from the identification features E3 and E4, can be traced back to the read sequence of alphanumeric characters of the identification feature E4.

[0032] The process can be continued iteratively, with a new level being created with each additional recognition feature read. Alternatively, individual tree diagrams can be generated for a specified number of recognition features, each of which can have at least two tree vertices linked to each other using hash values.

[0033] The Fig. The device 50 according to the invention, shown schematically in Figure 3, for logging a number of identification features comprises a device 11 for reading out identification features. The device 11 can therefore be used to carry out steps 1 and 4 of Fig. 1. The device 50 also comprises a device 12 for applying cryptographic hash functions. The device 12 can therefore be used to carry out steps 2 and 5 of the Fig. 1. The device 50 further comprises a storage device 13 for storing the generated hash values, optionally in addition to storing the read-out identification features. The storage device 13 can be used in particular for carrying out steps 3 and 6 of Fig. 1. The device 50 is designed to carry out a method according to the invention. The device 50 can be, for example, a computer with a scanner.

[0034] Overall, the present invention provides a cost-effective way of implementing the legal requirements mentioned above for the traceability of products with individual identification features, which ensures a high degree of security against tampering. List of reference symbols: 1 Reading the sequence of alphanumeric characters of a first identification feature 2 Forming a first hash value H1 by applying a hash function to a first sequence N1 of alphanumeric characters 3 Storing the first hash value H1 using a storage device 4 Reading a subsequent identification feature E n 5 Creating a hash value H n by applying a hash function to a sequence N n alphanumeric characters 6 Saving the hash value H n by means of a storage device 10 first level 11 Device for reading a number of identification features 12 Device for applying cryptographic hash functions 13 Storage device 20 second level 30 third level 40 fourth level 50 Device for recording or logging a number of identification features E i Identification features H i Hash values

Claims

[1] A method for logging a number of identifying features, each identifying feature comprising a sequence of alphanumeric characters, the method comprising the following steps: a) reading (1) the sequence of alphanumeric characters of a first identification feature E1, b) forming a first hash value H1 (2) by applying a hash function to a first sequence N1 of alphanumeric characters, which comprises the sequence of alphanumeric characters of the read-out first identification feature E1 and a time value Z, c) storing (3) the first hash value H1 by means of a storage device (13), d) Reading (4) a subsequent identification feature E n , e) Forming a hash value H n (5) by applying a hash function to a sequence N n alphanumeric characters that represent the sequence of alphanumeric characters of the read-out identification feature E nor a hash value attributable to this sequence and the previously formed hash value H n-1 includes, f) Storing (6) the hash value H n by means of the storage device (13) and g) iteratively continuing steps d) to f), whereby a time interval is specified for retaining the logged hash values ​​and stored hash values ​​are deleted that were logged at a time earlier than the specified time interval, and a qualified timestamp is generated and stored based on the last deleted logged identifier. [2] Method according to claim 1, characterized by that the recognition features are read out using a text recognition process. [3] Method according to claim 1 or claim 2, characterized by that the time value Z includes a qualified timestamp. [4] Method according to one of claims 1 to 3, characterized by that a number k of recognition features E to be recorded n is determined, where n is a natural number from 1 to k, and steps d) to f) are continued until the specified number k of recognition features is recorded. [5] Method according to one of claims 1 to 4, characterized by that the sequences N n alphanumeric characters the sequence of alphanumeric characters of the previously read identification feature E n-1 include. [6] Method according to one of claims 1 to 5, characterized by that from a number of hash values ​​H n at least one other hash value H y is formed. [7] Method according to one of claims 1 to 6, characterized by that the sequences N n alphanumeric characters at least one further hash value H y include. [8] Method according to one of claims 1 to 7, characterized bythat, before reading, individual identification features are generated in such a way that a product code is added to an identification code consisting of alphanumeric characters and a serial number. [9] Method according to claim 8, characterized by that the product code comprises alphanumeric characters which allow the place of manufacture and / or the manufacturing plant and / or the machine used for manufacture and / or the product description and / or the intended sales market and / or the intended dispatch route and / or the importer of the product to be identified. [10] Method according to one of claims 1 to 9, characterized by that the identification feature comprises a number of positions for alphanumeric characters which can be assigned with alphanumeric characters after the identification feature has been generated. [11] Method according to one of claims 1 to 10, characterized bythat all detection features logged from a specified point in time onwards are saved, a time interval is specified for the retention of the logged detection features, and logged detection features logged at a point in time older than the specified time interval are deleted. [12] Device (50) for recording a number of identification features, characterized by that the device (50) comprises a device (11) for reading out identification features, a device (12) for applying cryptographic hash functions and a storage device (13) for storing formed hash values, and the device (50) is designed to carry out a method according to one of claims 1 to 11. [13] A computer program product comprising instructions which, when executed by a computer, cause the computer to carry out a method according to any one of claims 1 to 11. [14] A computer-readable data carrier on which instructions are stored which, when the program is executed by a computer, cause the computer to carry out a method according to one of claims 1 to 11.

Images