SECURITY FEATURES FOR A VALUE DOCUMENT, VALUE DOCUMENT, SYSTEMS FOR VERIFYING A VALUE DOCUMENT, METHOD OF VERIFYING A VALUE DOCUMENT

Abstract

Security feature for a valuable document (200), comprising: a concealment element (110) with optically encrypted machine-readable verification data; a verification element (120) comprising: at least one recording layer (121) transparent in the visible spectral range, a light-deflectoring structure (122), wherein the light-deflectoring structure (122) is arranged on a first side (123) of the recording layer (121); at least one marking (124) which is incorporated into the at least one recording layer (121) and is recognizable by means of the light-deflectoring structure (122) when viewing the verification element (120) from at least one angle of inclination with respect to the field of vision of an observer of the verification element (120), wherein the marking is the decrypted verification data.

Description

[0001] The invention relates to a security feature and an alternative security feature for a security document. Furthermore, the invention relates to a security document. Additionally, the invention relates to a system for verifying a security document and an alternative system for verifying a security document. Furthermore, the invention relates to a method for verifying a security document and two alternative methods for verifying a security document.

[0002] According to current technological standards, valuable and security documents such as banknotes, branded goods, driver's licenses, access data, chip cards, or identity documents like passports or national identity cards are known to have so-called security elements or features to protect against unauthorized reproduction or counterfeiting. These security elements / features make it possible to verify the authenticity of the security document, as counterfeiters are sometimes unable to reproduce them, or can only reproduce them with insufficient quality.

[0003] Conventional security documents incorporate electronic semiconductor chips, hereinafter referred to as security chips or simply chips, to prevent reproduction or forgery. These chips provide a high level of copy protection, forgery protection, and reproduction protection. However, equipping security documents with security chips is costly, extremely cumbersome, and complex, as special processes and materials must be used to avoid damaging the delicate and sensitive security chips.

[0004] Therefore, there is a need for a security feature or a document with a security feature that does not require a chip but still provides a high level of protection against copying, forgery, and reproduction, so that the costs, complexity, and cumbersome production of these documents can be significantly reduced. Furthermore, there is a need to provide a system and a procedure for reliably verifying these documents.

[0005] The invention is defined in the independent claims. Further developments and embodiments of the invention are specified in the dependent claims and the following description.

[0006] One aspect of the present disclosure relates to a security feature for a valuable document. The security feature comprises an obfuscation element with optically encrypted, machine-readable verification data and a verification element. The verification element comprises at least one recording layer transparent in the visible spectral range, a light-deflecting structure, wherein the light-deflecting structure is arranged on a first side of the recording layer; and at least one marking which is incorporated into the at least one recording layer and is recognizable by means of the light-deflecting structure when viewing the verification element from at least one angle of inclination with respect to the field of vision of an observer of the verification element, wherein the marking is the decrypted verification data.

[0007] The term "obfuscation element" describes any element that includes or contains machine-readable verification data, where this verification data is at least optically encrypted or obfuscated by the obfuscation element. For example, an obfuscation element can be a QR code or a barcode. The obfuscation element can be a 2D or a 3D element. The obfuscation element can have any shape, such as rectangular, oval, circular, polygonal, square, or rectangular. The obfuscation element can be visibly positioned on a surface of a first page and / or a second page of the security document. In this context, the term "visible" can be interpreted to mean that the obfuscation element is visible in the human-visible spectral range or that the obfuscation element is only visible in a spectral range not visible to humans, e.g.,The obfuscation element is visible in the UV or IR spectral range. It can be located on the same side of the document as the verification element. Alternatively, it can be located on a surface opposite the first side of the document on which the verification element is located. Therefore, the obfuscation element and the verification element can be located on different sides of the document. The obfuscation element can be positioned beneath a light-reflecting structure so that it is only visible when viewing the document or obfuscation element from at least one angle relative to the viewer's field of vision.

[0008] The verification data represents all data or information that can be used to verify, i.e., check the authenticity of, the security document. The verification data or information may consist of, but are not limited to, alphanumeric strings and / or numbers.

[0009] For example, verification data may include personal data. Personal data represents any data or information directly linked to an individual. This individual could be the owner of the security document, who received it from an authorized body, such as a government agency. Examples of personal data include, but are not limited to, the date of birth, name (first and last name), parents' names, an image of the owner, and the owner's fingerprint.

[0010] Alternatively or additionally, the verification data may include characteristic or document-specific data or information, such as a serial number or an identification number, but is not limited to this. The verification data may be machine-readable, and in particular, exclusively machine-readable.

[0011] The term "verification element" represents any element that includes at least one identifier for verifying the verification data. The verification element comprises at least one recording layer transparent in the visible spectral range, a light-reflecting structure, and at least one identifier. The verification element can have any shape, such as rectangular, oval, circular, polygonal, square, or rectangular.

[0012] The verification element can be placed on the same page of the security document as the obfuscation element. This simplifies the creation of the security document.

[0013] Alternatively, the verification element can be located on a surface of the first page of the security document on which the obfuscation element is located, for example, on the opposite or adjacent second page. Consequently, the obfuscation element and the verification element can be located on different pages of the security document.

[0014] The verification element can be fully or at least partially contained in a photograph of the owner of the security document or arranged on the security document itself.

[0015] Alternatively, the verification element may be fully or at least partially enclosed or positioned at the edge of the photograph of the owner of the security document. In this context, the term "photograph" refers to any pictorial representation of the owner's face, such as a passport photo.

[0016] The recording layer represents each layer or position on which a label or a multitude of labels are included or contained.

[0017] The recording layer is a transparent layer or layer in the visible spectral range, especially the human visible spectral range.

[0018] Alternatively or additionally, the recording layer can be transparent in a spectral range not visible to humans, such as UV or IR.

[0019] The recording layer can be fully or at least partially embedded in the security document.

[0020] At least one surface of the recording layer can be completely or at least partially covered with the light-deflectoring structure.

[0021] Markings can be introduced into the recording layer by printing on a printable area or by using a laser or laser engraving into the recording layer, but this is not the only method.

[0022] A light-directing structure represents any structure that refracts, diffracts, reflects, and / or absorbs light, particularly light in the visible spectrum and / or the non-visible spectrum, such as UV or IR. The light-directing structure may be located above the recording layer, but is not limited to this. Examples of light-directing structures include micromirrors and / or lenses.

[0023] The light-reflecting structure can be configured such that at least one marking is fully visible at at least one angle of inclination of the document relative to the viewer's field of vision. In other words, the light-reflecting structure can be designed such that at least one marking is visible only at a predefined angle of inclination, for example 40°, or at several predefined angles of inclination, for example 20°, 40°, and 60°.

[0024] Alternatively, the light-reflecting structure can be configured such that at least one marking is at least partially visible at at least two angles of inclination of the document relative to the viewer's field of vision. In other words, the light-reflecting structure can be designed such that a first part of a marking, particularly if the marking comprises several marking parts, is visible only at a first predefined angle of inclination, for example 40°, or at several first predefined angles of inclination, for example 20°, 40° and 60°.The light-deflecting structure can then also be designed in such a way that a second part of the marking is only recognizable under a second predefined angle of inclination that differs from the first predefined angle of inclination, for example 50°, or under several second predefined angles of inclination that differ from the first predefined angles of inclination, for example 30°, 50° and 70°.

[0025] The light-deflectoring structure can be a micromirror structure and / or a lens structure, in particular a structure consisting of a plurality of microlenses and / or a structure consisting of a plurality of micromirrors. The individual micromirrors of the micromirror structure or the individual lenses of the lens structure can have a diameter of 30 to 120 µm. The tilt angle range for selecting a predefined tilt angle at which at least one marking is recognizable to a person can be from 10° to 80° and / or from 100° to 170°.

[0026] The light-reflecting structure can be a laser-etched image, such as MLI or CLI. In a laser-etched image, an integrated striped lens structure makes two different motifs or individual pieces of information (e.g., coat of arms, secondary image, date of birth or expiration) visible or highlighted at different angles of inclination. This allows for a comparison of individual information in the etched image with printed information or with the motifs described in the reference material.

[0027] The tilt angle, also known as the angle of inclination, represents the direction or angle between the verification element or light-reflecting structure and the viewer's field of vision. In other words, the tilt angle indicates the angle from which a viewer looks at the verification element. If the angle is 0°, 90°, or 180°, the verification element is perpendicular to the viewer's field of vision; therefore, at these angles, the verification element is not tilted and these angles do not represent a tilt angle. The tilt can be defined with respect to a horizontal and / or vertical axis extending through the security document. Thus, a tilt angle is preferably specified here with reference to a plane, in particular a plane in which the security or security document is located.The term "viewer" represents any person or device that is set up to visually detect or view the verification element.

[0028] The term "identifier" represents all information embedded in the recording layer. The identifier can include, but is not limited to, an alphanumeric string and / or a sequence of numbers or a single number. For example, the identifier can include, but is not limited to, personal data, unique identifiers (e.g., ID number), or unique words.

[0029] Alternatively or additionally, the identifier can include a cryptographic key or a cryptographic key part with which the optically encrypted machine-readable verification data, if also cryptographically encrypted, can be cryptographically decrypted.

[0030] The marking may be fully or at least partially visible in the human visible spectrum.

[0031] Alternatively, the marking can be entirely or at least partially in the human non-visible spectrum, e.g. UV or IR, and thus exclusively machine-readable and recognizable.

[0032] Alternatively, the marking can be exclusively machine-readable. The term "exclusively machine-readable" here means that the marking cannot be deciphered by the human eye upon mere inspection. This could include, for example, the marking being provided in a resolution too low or too small for the naked eye, or the marking only being visible in the UV or IR spectrum, but it is not limited to these possibilities. In other words, the term "exclusively machine-readable" means that the marking cannot be recognized, deciphered, and / or read with the naked human eye.

[0033] By using exclusively machine-readable markings, verification, especially biometric verification, is impossible by the naked eye. This completely eliminates the possibility of the human brain automatically and erroneously correcting differences in biometric data during verification, thus making the verification of the security document more secure.

[0034] By using a concealment element and a verification element, a security element can be provided that does not require a chip, but still provides a high level of copy protection, forgery protection and reproduction protection, so that the costs, complexity and cumbersomeness of producing these valuable or security documents can be significantly reduced.

[0035] Furthermore, it is now possible to add additional information to a valuable document as identifiers that are only visible when viewed at a specific angle. Several different identifiers can be "hidden" at different angles. This makes it impossible to retrieve all the information from a single photograph of the valuable document or by scanning or copying it. Thus, this concept protects the valuable document from unauthorized copying.

[0036] Furthermore, the security document qualifies as a second unique factor for 2-factor authentication.

[0037] According to one embodiment of the security feature for a security document, the marking and / or the decrypted verification data includes personal data, in particular personal data of the owner of the security document.

[0038] According to one embodiment, the obfuscation element is the marking of the verification element.

[0039] Because the marking and / or the decrypted verification data include personal data, a customizable or personalized security document can be used. Personalizing the security document increases the level of protection against copying, forgery, and reproduction, as forgers / reproducers must additionally identify or know the personally identifiable data.

[0040] According to one embodiment of the security feature for a valuable document, a plurality of different markings are incorporated into the at least one recording layer, wherein each individual marking or a subset of the plurality of different markings is only recognizable when viewing the verification element from a different predefined angle of inclination relative to the field of vision of an observer of the verification element, wherein only one marking or a smaller selection of markings from this plurality of markings constitutes the decrypted verification data. In other words, the recording layer can have a plurality of different markings, wherein, for example,Each verification element, or a subset of a multitude of separate markings, is recognizable from a predetermined angle of inclination—different for other markings within the multitude—relative to the field of vision of an observer. This increases the level of protection against copying, counterfeiting, and reproduction, as counterfeiters / reproducers must identify, from the multitude of markings, the one or a selection of markings valid for verification.

[0041] According to one embodiment of the security feature for a valuable document, the verification element comprises at least two sub-elements, wherein the first sub-element is arranged in a first area of ​​the valuable document and the second sub-element is arranged in a second area of ​​the valuable document different from the first area, wherein the decrypted verification data is only formed by linking, concatenating, concatenating and / or connecting the marking of the first sub-element with the marking of the second sub-element.

[0042] The identifiers are preferably linked using an XOR operation in order to decode the obfuscation element, i.e., to be able to read the barcode or QR code, for example.

[0043] By providing multiple sections of the security document, each of which contains at least one identifier that can be extracted to verify the security document, the level of protection against copying, forgery, and reproduction can be increased, as forgers / reproducers must identify or forge the multitude of sections and / or identifiers within these sections.

[0044] Another aspect of this disclosure concerns a security feature for a valuable document. The security feature comprises an obfuscation element with optically and cryptographically encrypted machine-readable verification data and a verification element. The verification element comprises at least one recording layer transparent in the visible spectral range, a light-reflecting structure, wherein the light-reflecting structure is arranged on a first side of the recording layer; and at least one marking which is incorporated into the at least one recording layer and is discernible by means of the light-reflecting structure when viewing the verification element from at least one angle of inclination relative to the field of vision of an observer of the verification element, wherein the marking includes key data for decrypting the encrypted verification data.

[0045] Thus, the marking creates a document-specific key that is used to decrypt the obfuscation element.

[0046] According to one embodiment of the security feature for a security document, the decrypted verification data includes personal data, in particular personal data of the owner of the security document.

[0047] According to one embodiment of the security feature for a valuable document, a plurality of different markings are incorporated into the at least one recording layer, wherein each individual marking or a subset of the plurality of different markings is recognizable when viewing the verification element from a different predefined angle of inclination relative to the field of vision of an observer of the verification element, wherein only one marking or a smaller selection of markings from this plurality of markings are configured for jointly decrypting the encrypted verification data. In other words, the recording layer can have a plurality of different markings, wherein, for example,Each verification element, or a subset of a multitude of separate markings, is recognizable from a predetermined angle of inclination—different for other markings within the multitude—relative to the field of vision of an observer of the verification element. This increases the level of protection against copying, counterfeiting, and reproduction, as counterfeiters / reproducers must identify, from the multitude of markings, the one or a selection of markings valid for verification.

[0048] In one embodiment, the inclination angle information can be entered as an additional identifier in the verification element, and this information can be checked as part of the verification process to increase safety.

[0049] According to one embodiment of the security feature for a valuable document, the verification element comprises at least two sub-elements, wherein the first sub-element is located in a first area of ​​the valuable document and the second sub-element is located in a second area of ​​the valuable document different from the first area, wherein only one linking, concatenation, concatenation and / or connection of the mark of the first sub-element with the mark of the second sub-element is configured to decrypt the encrypted verification data.

[0050] By providing multiple sections of the security document, each of which contains at least one identifier that can be extracted to verify the security document, the level of protection against copying, forgery, and reproduction can be increased, as forgers / reproducers must identify or forge the multitude of sections and / or identifiers within these sections.

[0051] In one embodiment, the linking, chaining, concatenation, and / or connection of the identifier of the first sub-element with the identifier of the second sub-element, used for cryptographic decryption, can change, for example, dynamically. For instance, for decryption at a first point in time, an identifier from a first area can be used with an identifier from a second area, whereas for decryption at a second point in time (different from the first), an identifier from a third area can be used with an identifier from a fourth area. The linking, chaining, concatenation, and / or connection of the identifiers can thus change very dynamically and further increase security.

[0052] The result of linking, concatenating, sequencing and / or connecting the identifiers is nevertheless the same when using different areas, in order to enable the cryptographic decryption of the verification data.

[0053] According to one embodiment of the security feature for a valuable document, the light-deflectoring structure is a micromirror structure and / or a lens structure.

[0054] According to one embodiment of the security feature for a valuable document, the micromirror structure and / or lens structure is configured such that the at least one marking is fully visible at at least one tilt angle of the valuable document in relation to the field of vision of a viewer.

[0055] According to one embodiment of the security feature for a valuable document, the micromirror structure and / or lens structure is configured such that the marking is at least partially visible at at least two tilt angles of the valuable document in relation to the viewer's field of vision.

[0056] According to one embodiment of the security feature for a valuable document, the micromirrors of the micromirror structure or the lenses of the lens structure have a diameter of 30 to 120 µm.

[0057] This diameter of the micromirrors of the micromirror structure or the lenses of the lens structure ensures suitable visibility of the markings below the light-deflectoring structure.

[0058] According to one embodiment of the security feature for a valuable document, there is at least one angle of inclination in a range of 10° to 80° and / or 100° to 170°.

[0059] These angles increase the level of protection against copying, forgery, and reproduction, as they reliably prevent the copying of the valuable document with a photocopier.

[0060] According to one embodiment of the security feature for a valuable document, the markings are exclusively machine-readable.

[0061] The exclusive machine readability of the marking increases the level of protection against copying, counterfeiting and reproduction, as counterfeiters / reproducers need appropriate or special machines to recognize the markings.

[0062] Another aspect of the present disclosure concerns a security document with a security feature as described above.

[0063] According to one embodiment of the security document, the security document has a first page and a second page opposite the first page, wherein the verification element is arranged on or in a surface of the first page of the security document and the obfuscation element is arranged on or in a surface of the second page of the security document.

[0064] By placing the verification element and the obfuscation element on different sides of the security document, the level of copy protection, forgery protection and reproduction protection can be increased, since potential forgers / reproducers do not only have to forge one side of the security document, but both sides.

[0065] According to one embodiment of the security document, the document further includes a photograph, for example, a passport photo, of the document's owner. For instance, the photograph can be positioned in the layered structure above or below the recording layer of a colored polycarbonate page of the document. The inclusion of this marking(s) further enhances document protection by placing additional information (e.g., an image) between existing photographic layers (e.g., a grayscale image and a color image). This additional marking (e.g., a photograph, an alphanumeric string containing the document owner's biographical data such as date of birth, first name, last name, maiden name, eye color, hair color, etc., or data about the document such as serial number, identification number, date of issue, expiration date, and issuing authority) is only visible from predetermined viewing angles.

[0066] According to one embodiment of the security document, the verification element is located wholly or at least partially in a peripheral area of ​​the photograph. By placing the verification element in a peripheral area of ​​the photograph, the visibility of the photograph, or of the owner's face in the photograph, can be reliably ensured.

[0067] Another aspect of the present disclosure relates to a system for verifying a value document. The system comprises a value document, as described above, and a verification device configured to verify the value document.

[0068] The verification device represents any device configured to verify a valuable document. The verification device may include at least one optical sensor and at least one processing unit, and optionally also a key storage device, an inclination angle determination unit, a license plate control unit, and / or an instruction device. The at least one optical sensor, the at least one processing unit, the key storage device, the inclination angle determination unit, the license plate control unit, and / or the instruction device may be directly or indirectly, wirelessly or via cable, communicatively coupled to each other or to the processing unit. The verification device may be, but is not limited to, a mobile phone, a smartphone, a stationary unit, or an automatic document verification station.

[0069] A valid verification of the security document can exist if the verification device indicates that the identifier and the decrypted verification data are identical, if the verification device indicates that the encrypted verification data could be decrypted with the identifier, or if the verification device indicates that decrypting the encrypted verification data with the identifier yields a specific result, e.g., displaying a characteristic parameter such as the name, but is not limited to these.

[0070] An instruction can be issued requesting the user to tilt the document incrementally so that all markings on the document can be captured and evaluated by the verification device. Alternatively or additionally, the instruction can include a directive for the user of the verification device to hold the document at a predetermined angle of inclination to capture a marking. The marking at this predetermined angle of inclination may not have been fully or correctly captured during a previous scan of the document, so the user or a tilt-angle adjustment unit of the verification device, guided by the instruction, must capture this predetermined angle again.

[0071] According to one embodiment of the system, the verification device comprises at least one optical receiving element configured to detect the obfuscation element and the at least one identifier; and at least one processing unit configured to decrypt the optically encrypted machine-readable verification data and to compare the decrypted verification data with the identifier.

[0072] The optical receiving element represents any element or receiving device configured to receive or capture the obfuscation element and / or the at least one identifier. For example, an optical receiving element can be a camera, such as a still camera or a video camera, but is not limited to this. The optical receiving element can receive or capture the obfuscation element and / or the at least one identifier in the human visible spectrum or in the human invisible spectrum, such as UV or IR. The optical receiving element is communicatively coupled to a processing unit, directly or indirectly, wirelessly or via cable. The optical receiving element can comprise a plurality of receiving elements, with each receiving element of the plurality capturing a different feature, e.g.One sensor captures only the obfuscation elements, and another captures only the verification data. The optical sensor can incorporate error correction across a large number of images to automatically capture both the verification data and the obfuscation elements.

[0073] The processing unit represents any unit configured to process, in particular to decrypt, the optically encrypted machine-readable verification data and to compare the decrypted verification data with the identifier. Alternatively, the processing unit represents any unit configured to process, in particular to decrypt, the optically encrypted and cryptographically encrypted machine-readable verification data using the key data, or to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key or key part of the identifier and the key or key part of the key storage device. The processing unit may include a processor, but is not limited to this.

[0074] According to one embodiment of the system, the verification device has at least one optical receiving element configured to detect the obfuscation element and the at least one identifier, and, if the identifier includes key data for decrypting the encrypted verification data and the optically encrypted machine-readable verification data are additionally cryptographically encrypted, at least one processing unit configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key data.

[0075] According to one embodiment of the system, the verification device includes a key storage device configured to store at least one cryptographic key or a cryptographic key part.

[0076] The key storage device represents any storage unit that stores key data, in particular a cryptographic key or a cryptographic key fragment. The key storage device can store the key data permanently or for a limited time. The key storage device can be located inside or outside the system used to verify a valuable document. If the key storage device is located outside the system used to verify a valuable document, it includes a communication unit configured to provide or transmit the cryptographic key or cryptographic key fragment to the system used to verify a valuable document.

[0077] According to one embodiment of the system, the verification device has at least one optical receiving element configured to detect the obfuscation element and the at least one identifier, and, if the identifier includes key data with a cryptographic key or a cryptographic key part for decrypting the encrypted verification data and the optically encrypted machine-readable verification data is additionally cryptographically encrypted, at least one processing unit configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data by combining, concatenating, linking, concatenating and / or linking the cryptographic key or cryptographic key part of the identifier with the cryptographic key or cryptographic key part of the key storage device.

[0078] Preferably, this processing unit of the verification device is configured to combine, chain, connect, concatenate and / or link the cryptographic key or cryptographic key part of the identifier with the cryptographic key or cryptographic key part of the key storage device.

[0079] By decrypting the optically encrypted and cryptographically encrypted machine-readable verification data using the key or key part of the identifier and the key or key part of the key storage device, reliable verification of the valuable document can be achieved. This increases the level of protection against copying, forgery, and reproduction.

[0080] According to one embodiment of the system, the verification device includes an inclination angle determination unit configured to determine an inclination angle of the value document in relation to the verification device, and a marking control unit configured to check the marking in relation to the determined inclination angle.

[0081] The tilt angle determination unit represents any unit configured to determine the tilt of the security document or verification element, in particular the optical recording unit, relative to the verification device. The tilt angle can be determined from the slope of a surface on which the security document is placed, but is not limited to this.

[0082] The identifier control unit represents any unit configured to check the identifier, key, or key component in relation to an angle of inclination determined by the tilt angle determination unit. In other words, the identifier control unit can verify whether specific identifiers can be detected at specific angles of inclination. For example, the identifier control unit can check whether a particular identifier can be detected at a predetermined angle of inclination, such as 40°. This adds another layer of protection against copying, counterfeiting, and reproduction.

[0083] According to one embodiment of the system, the verification device includes an instruction device which is configured to create at least one action instruction and to provide the at least one action instruction to a user, for example the owner of the value document, of the verification device.

[0084] The instruction device represents any device configured to create at least one action instruction and to provide that at least one action instruction to a user of the verification device. Action instructions represent any instructions that instruct a user—that is, a person and / or a device—on how to examine the value document. For example, an action instruction might instruct a user of the value document to slowly tilt, flip, or rotate the value document at a constant speed within the verification device's field of view. An action instruction may contain, but is not limited to, a string of characters and / or numbers.

[0085] The instruction device can comprise a processing unit that creates at least one action instruction and a communication unit that provides the action instructions to the user of the verification device.

[0086] Alternatively or additionally, the action instruction can also be provided or transmitted to the provider of the document, thus alerting them to a possible forgery. Furthermore, the action instruction can inform the user which information is still missing to verify the document and what that information should be.

[0087] Providing an instruction device can significantly improve and facilitate the examination or verification of the security document.

[0088] Another aspect of the present disclosure relates to a method for verifying a security document, as described above. The method comprises the following steps: capturing optically encrypted, machine-readable verification data provided in an obfuscation element; capturing at least one identifier on the security document; decrypting the optically encrypted, machine-readable verification data; and verifying the security document by comparing the decrypted verification data with the at least one identifier.

[0089] Another aspect of the present disclosure relates to a method for verifying a security document, as described above. The method comprises the following steps: capturing optically and cryptographically encrypted machine-readable verification data provided in an obfuscation element; capturing at least one mark on the security document, the mark comprising key data for decrypting the cryptographically encrypted machine-readable verification data; decrypting the optically and cryptographically encrypted machine-readable verification data using the mark; and verifying the security document using the decrypted machine-readable verification data.

[0090] Another aspect of the present disclosure relates to a method for verifying a security document, as described above. The method comprises the following steps: capturing optically and cryptographically encrypted machine-readable verification data provided in an obfuscation element; capturing at least one mark on the security document, wherein the mark includes key data for decrypting the cryptographically encrypted machine-readable verification data; querying a key or key part from a verification device; decrypting the optically and cryptographically encrypted machine-readable verification data using the mark and the queried key or key part; and verifying the security document using the decrypted machine-readable verification data.

[0091] According to one embodiment of the method, the method further comprises the following steps: determining an angle of inclination of the security document in relation to the verification device; and checking the detected marking in relation to the determined angle of inclination.

[0092] According to one embodiment of the method, the method further comprises the following steps: creating at least one instruction for action; and providing the at least one instruction for action to a user of the verification device.

[0093] The invention, or further embodiments and advantages thereof, are explained in more detail below with reference to drawings, which only depict embodiments of the invention. Identical components are identified by the same reference numerals in the drawings. Elements drawn with dashed lines are considered optional.

[0094] The drawings are not to be considered to scale, and individual elements of the drawings may be depicted in an exaggeratedly large or exaggeratedly simplified form. Fig. Figure 1 shows an embodiment of a security document according to the invention. Fig. 2a and Fig. 2b shows further embodiments of a security document according to the invention. Fig. Figure 3 shows a verification element of an embodiment of a security document according to the invention. Fig. Figure 4 shows a system according to the invention for verifying a security document. Fig. Figure 5 shows an embodiment according to the invention of a method for verifying a security document. Fig. Figure 6 shows another embodiment of a method for verifying a security document according to the invention. Fig. Figure 7 shows another embodiment of a method for verifying a security document according to the invention.

[0095] Fig. Figure 1 shows an embodiment of a security document according to the invention. The security document 200 has a first page 201. On the first page 201, in particular on the surface or top side, a concealment element 110 and a verification element 120 are arranged visibly and unobstructed to the naked eye. The concealment element 110 and the verification element 120 are each part of a security feature. The concealment element 110 and the verification element 120 are each formed in one piece. The concealment element 110 and the verification element 120 are arranged in different, spaced-apart areas of the page 201 or the surface of the security document 200.

[0096] Optionally, the security document 200 includes a photograph 203. The photograph 203 is visibly and unobstructedly positioned on the surface of the security document. The verification element 120 can be located on or within an edge area of ​​the photograph 203.

[0097] Fig. 2a and Fig. Figure 2b shows further embodiments of a security document according to the invention. Fig. Figure 2a shows a second page 202, in particular a subpage, of the security document 200. On the subpage 202, the obfuscation element 110 is visible and arranged without concealment. Fig. Figure 2b shows a first page 201, in particular a top side, of the security document 200. The verification element 120 is visible and unobstructed on the top side 201.

[0098] Optionally, a photo 203 is visible and unobstructed on the first page 201. The verification element 120 is located on or in an edge area of ​​the photo 203.

[0099] Fig. Figure 3 shows a verification element of an embodiment of a security document 200 according to the invention. The security document 200 can correspond to the security document 200 of the figures described above. The verification element 120 comprises a light-reflecting structure 122 and a recording layer 121. The recording layer 121 is made of a material transparent in the human visible spectrum. A plurality of markings 124 are incorporated within the recording layer 121. The light-reflecting structure 122 is arranged on a first side 123, in particular the surface or top side, of the recording layer 121. The light-reflecting structure 122 completely covers the first side 123. The light-reflecting structure 122 is a microlens structure consisting of a plurality of lenses with a diameter of 30 to 120 µm.The light-deflecting structure 122 is configured such that at least one marking 124 is fully visible at an angle of inclination of 45° of the security document relative to the viewer's field of vision (solid arrow line). The marking is not visible from any other angle of inclination or angle, such as 90° (dashed arrow line).

[0100] For example, the photograph 203 of the security document 200 can be positioned above or below the recording layer 121 in the layer structure. If, for example, security documents with a colored polycarbonate side are used, a grayscale and a color version are generated from the digital source code of the photograph 203. While the grayscale photograph is laser-etched into the security document 200 along with the biographical data, the color version of the photograph 203 is applied to the light-reflecting structure 122 (also known as the clip ID area), for example, by printing. This side is then laminated. Together, both images form a complete color image. The inclusion of the markings 124 further increases image protection by placing an additional image between the two existing photographic layers (grayscale image and color image). These additional markings (e.g.,To recognize photos, alphanumeric strings from the biographical data of the owner of the security document such as date of birth, first name, last name, maiden name, eye color, hair color, etc., or data about the security document such as serial number, identification number, date of issue, expiry date, issuing authority.

[0101] Fig. Figure 4 shows a system according to the invention for verifying a security document. The system 300 includes a security document 200, as already described in the Fig. 1, Fig. 2a and Fig. 2b is shown, and a verification device 400 is shown. The verification device 400 is configured to verify the value document 200.

[0102] Optionally, the verification device 400 comprises at least one optical receiving element 410 and at least one processing unit 420. The optical receiving element 410 is configured to detect the obfuscation element 110 and the at least one marking 124. The optical receiving element 410 can be a camera. The at least one processing unit 420 is configured to decrypt the optically encrypted, machine-readable verification data and to compare the decrypted verification data with the marking.Alternatively, if the identifier includes key data for decrypting the encrypted verification data and the optically encrypted machine-readable verification data is additionally cryptographically encrypted, then at least one processing unit 420 is configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key data.

[0103] Optionally, the verification device 400 includes a key storage device 430. The key storage device 430 is configured to store at least one key or key part. The key or key part stored in the key storage device can be different from the key or key part used for identification.

[0104] Optionally, the verification device 400 includes at least one optical receiving element 410 and at least one processing unit 420. The optical receiving element 410 is configured to detect the obfuscation element 110 and the at least one identifier 124. If the identifier includes key data with a key or key part for decrypting the encrypted verification data, and the optically encrypted machine-readable verification data is additionally cryptographically encrypted, the processing unit 420 can be configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key or key part of the identifier and the key or key part of the key storage device 430.

[0105] Optionally, the verification device 400 includes an inclination angle determination unit 440 and a marking control unit 450. The inclination angle determination unit 440 is configured to determine the inclination angle of the value document 200 relative to the verification device 400. The marking control unit 450 is configured to check the marking in relation to the determined inclination angle.

[0106] Optionally, the verification device 400 includes an instruction device 460. The instruction device is configured to create at least one action instruction and to provide this at least one action instruction to a user of the verification device 400. The action instruction can instruct the user to tilt the valuable document incrementally so that the markings can be captured and evaluated. Alternatively or additionally, the action instruction can include an instruction for the user of the verification device 400 to hold the valuable document at a predetermined angle of inclination. In some cases, the marking at this predetermined angle of inclination may not have been fully or correctly captured during a previous scan of the valuable document, requiring the user to capture this predetermined angle of inclination again.

[0107] The optical receiving element 410, the processing unit 420, the key storage device 430, the tilt angle determination unit 440, the license plate control unit 450 and / or the instruction device 460 are all communicatively coupled to the processing unit 420 directly or indirectly, wirelessly or by cable.

[0108] Using the methods described in the preceding figures, it is possible to add further information to the security document in the form of markings 124, which are only visible when viewed at a specific angle. Several different markings 124 can be "hidden" at different angles. This makes it impossible to retrieve all the information from a single photograph or by scanning / copying the security document. The described concept protects the photographs 203 of a security document from copying and qualifies the security document as a second unique factor for two-factor authentication.

[0109] The solution proposed here makes it possible to conceal digital information. By tilting the security document 200 in front of the optical recording element 410, this concealed information (markings 124) is recorded gradually. The information extracted from the markings 124 can be used to verify the authenticity of the security document 200 in various ways. Counterfeiters would have to read the security document at all personalized tilt angles and reconstruct the information so that it could be personalized onto another (forged) security document 200. This would require them to laboriously produce the special light-diffusing layer 122. This type of personalization of a security document 200 may require an expensive laser engraver with a tilting mechanism, which counterfeiters typically avoid.

[0110] In one version, an inclination angle specification is included as an additional identifier 124 in the verification element. This specification can be checked by the verification device during the verification process to increase security.

[0111] In one embodiment, the obfuscation element 110 is simultaneously the marking 124 of the verification element.

[0112] For example, it may be necessary to link individual identifiers 124 in order to decode the obfuscation element, i.e., to read the barcode or QR code of the security document 200. This linking is preferably done using an XOR operation.

[0113] Fig. Figure 5 shows an embodiment of a method for verifying a security document according to the invention. In a first step S1, optically encrypted, machine-readable verification data provided in a concealment element 110 is acquired. This can be provided by means of an optical receiving element 410 of the verification device 400. In a second step S2, at least one marking 124 on the security document 200 is acquired. This can be provided by means of the same or a further or different receiving element 410 of the verification device 400. In a third step S31, the optically encrypted, machine-readable verification data is decrypted.Such decryption can be achieved by processing the optically encrypted, machine-readable verification data using optical decryption software, such as a barcode or QR code reader, in which at least one processing unit 420 is provided. In a fourth step S41, the value document 200 is verified by comparing the decrypted verification data with the at least one identifier 124. In other words, if the decrypted verification data and the at least one identifier 124 are identical, then the value document 200 is considered successfully verified. If the decrypted verification data and the identifier 124 do not match, then the value document 200 is considered unsuccessfully verified.

[0114] Optionally, in a fifth step S6, an inclination angle of the security document 200 relative to the verification device 400 can be determined. This angle can be provided by the verification device's inclination angle determination unit 440. In a sixth step S7, the captured identifier is checked by an identifier control unit 150 with respect to the determined inclination angle. In other words, the identifier control unit 150 checks whether at least one identifier was captured at a correct inclination angle of the verification element or the security document.

[0115] Optionally, in a seventh step S8, at least one action instruction is created. The action instruction can be created using an instruction device. In an eighth step S9, the at least one action instruction is provided to a user of the verification device 400. The action instruction can be provided to the user of the verification device using a communication unit.

[0116] Fig. Figure 6 shows a further embodiment of a method for verifying a security document according to the invention. In a first step S1, optically and cryptographically encrypted machine-readable verification data provided in a concealment element 110 are acquired. This can be provided by means of an optical receiving element 410 of the verification device 400. In a second step S2, at least one marking 124 on the security document (200) is acquired, wherein the marking 124 comprises key data for decrypting the cryptographically encrypted machine-readable verification data. This can be provided by means of the same or a further or different receiving element 410 of the verification device 400. In a third step S32, the optically encrypted and cryptographically encrypted machine-readable verification data are decrypted by means of the marking.The decryption of the third step S32 can be performed separately and sequentially. In other words, the optical decryption of the machine-readable verification data can be performed separately and prior to the cryptographic decryption of the machine-readable verification data. Optical decryption can be performed by processing the optically encrypted machine-readable verification data using optical decryption software, such as a QR code reader, in which at least one processing unit 420 is provided. Cryptographic decryption can be performed by processing the cryptographically encrypted machine-readable verification data using cryptographic decryption software or decryption methods in which at least one processing unit 420 is provided. In a fourth step S42, the value document 200 is...Verification is carried out using the decrypted machine-readable verification data. In this context, the verification of document 200 can be considered successful if the optically and cryptographically encrypted machine-readable verification data can be decrypted. If the encrypted verification data cannot be decrypted using the identifier 124, then document 200 is considered to have been unsuccessfully verified.

[0117] Optionally, in a fifth step S6, an inclination angle of the security document 200 relative to the verification device 400 can be determined. This can be provided by the verification device's inclination angle determination unit 440. In a sixth step S7, the captured mark is checked by a mark control unit 150 with respect to the determined inclination angle. In other words, the mark control unit 150 checks whether at least one mark was captured at a correct inclination angle of the verification element or the security document.

[0118] Optionally, in a seventh step S8, at least one action instruction is created. The action instruction can be created using an instruction device. In an eighth step S9, the at least one action instruction is provided to a user of the verification device 400. The action instruction can be provided to the user of the verification device using a communication unit.

[0119] Fig.Figure 7 shows a further embodiment of a method for verifying a valuable document according to the invention. In a first step S1, optically and cryptographically encrypted machine-readable verification data provided in a concealment element 110 are acquired. This can be provided by means of an optical receiving element 410 of the verification device 400. In a second step S2, at least one marking 124 on the valuable document (200) is acquired, wherein the marking 124 comprises key data for decrypting the cryptographically encrypted machine-readable verification data. This can be provided by means of the same or a further or different receiving element 410 of the verification device 400. In a third step S5, a key or a key part is retrieved from a verification device 400. The key part or key can be accessed by a key storage device 430.In a fourth step, S33, the optically and cryptographically encrypted machine-readable verification data are decrypted using the identifier and the queried key or key fragment. The decryption of the third step, S33, can be performed separately or sequentially. In other words, the optical decryption of the machine-readable verification data can be performed separately and prior to the cryptographic decryption. Optical decryption can be achieved by processing the optically encrypted machine-readable verification data using optical decryption software, such as a QR code reader, which provides at least one processing unit 420.Cryptographic decryption can be performed by processing the cryptographically encrypted, machine-readable verification data using cryptographic decryption software or a decryption method in at least one processing unit 420. The identification key and the retrieved key may be used or necessary to decrypt the encrypted verification data. In this case, the identification key and the retrieved key can be separate, distinct keys or interacting key pairs that together form a single key. In a fourth step S43, the value document 200 is verified by or using the decrypted, machine-readable verification data. In this context, the verification of the value document 200 can be considered successful.The verification data will be considered successful if the optically and cryptographically encrypted, machine-readable verification data can be decrypted. If the encrypted verification data cannot be decrypted using the code 124, then the document (value 200) is considered not to have been successfully verified.

[0120] Optionally, in a fifth step S6, an inclination angle of the security document 200 relative to the verification device 400 can be determined. This angle can be provided by the verification device's inclination angle determination unit 440. In a sixth step S7, the captured identifier is checked by an identifier control unit 150 with respect to the determined inclination angle. In other words, the identifier control unit 150 checks whether at least one identifier was captured at a correct inclination angle of the verification element or the security document.

[0121] Optionally, in a seventh step S8, at least one action instruction is created. The action instruction can be created using an instruction device. In an eighth step S9, the at least one action instruction is provided to a user of the verification device 400. The action instruction can be provided to the user of the verification device using a communication unit. Reference symbol list: 110 Concealment element 120 verification elements 120a first sub-element 120b second sub-element 121 Recording layer 122 light-deflecting structure 123 first page of the light-deflectoring structure 124 Labeling 200 valuable documents 200a first section of the security document 200b second section of the security document 201 first page of the security document 202 second page of the security document 203 Photo of the owner of the security document 300 System 400 verification device 410 optical receiving element 420 processing units 430 Key storage device 440 Inclination Angle Determination Unit 450 license plate control unit 460 Instruction device S1 Capture of verification data S2 Recording of marking S31 Decrypting the verification data S32 Decryption of verification data S33 Decrypting the verification data S41 Verifying the security document S42 Verifying the security document S5 querying the key or key part S6 Determining the angle of inclination S7 Checking the labeling S8 Creating action instructions S9 Providing action instructions

Claims

[1] Security feature for a security document (200), exhibiting: a concealment element (110) with optically encrypted machine-readable verification data; comprising a verification element (120): at least one recording layer transparent in the visible spectral range (121), a light-deflectoring structure (122), wherein the light-deflectoring structure (122) is arranged on a first side (123) of the recording layer (121); at least one marking (124) which is incorporated into the at least one recording layer (121) and is recognizable by means of the light-deflectoring structure (122) when viewing the verification element (120) from at least one angle of inclination in relation to the field of vision of an observer of the verification element (120), wherein the marking (124) is the decoded verification data. [2] Security feature according to claim 1, wherein the marking (124) and / or the decrypted verification data comprise personal data, in particular personal data of the owner of the security document (200). [3] Security feature according to any of the preceding claims, wherein a plurality of different markings are incorporated in the at least one recording layer (121), wherein each marking or a subset of the plurality of different markings is recognizable when viewing the verification element (120) from different angles of inclination in relation to the field of view of an observer of the verification element (120), wherein only one marking or a selection of markings are the decrypted verification data. [4] Security feature according to any of the preceding claims, wherein the verification element (120) comprises at least two sub-elements (120a, 120b), wherein the first sub-element (120a) is arranged in a first area (200a) of the security document (200) and the second sub-element (120b) is arranged in a second area (200b) of the security document different from the first area (200a), wherein the marking of the first sub-element (120a) and the marking of the second sub-element (120b) are the decrypted verification data. [5] Security feature for a security document (200), exhibiting: a concealment element (110) with optically and cryptographically encrypted machine-readable verification data; comprising a verification element (120): at least one recording layer transparent in the visible spectral range (121), a light-deflectoring structure (122), wherein the light-deflectoring structure (122) is arranged on a first side (123) of the recording layer (121); at least one marking (124) which is incorporated into the at least one recording layer (121) and is recognizable by means of the light-deflectoring structure (122) when viewing the verification element (120) from at least one angle of inclination in relation to the field of vision of an observer of the verification element (120), wherein the marking includes key data for decrypting the encrypted verification data. [6] Security feature according to claim 5, wherein the decrypted verification data includes personal data, in particular personal data of the owner of the security document (200). [7] Security feature according to any one of claims 5 or 6, wherein a plurality of different markings are incorporated in the at least one recording layer (121), wherein each marking or a subset of the plurality of different markings is recognizable when viewing the verification element (120) from different angles of inclination in relation to the field of view of an observer of the verification element (120), wherein only one marking or a selection of markings is configured for joint decryption of the encrypted verification data. [8] Security feature according to any one of claims 5 to 7, wherein the verification element (120) comprises at least two sub-elements (120a, 120b), wherein the first sub-element (120a) is arranged in a first area (200a) of the value document (200) and the second sub-element (120b) is arranged in a second area (200b) of the value document different from the first area (200a), wherein the marking of the first sub-element (120a) and the marking of the second sub-element (120b) are configured together to decrypt the encrypted verification data. [9] Safety feature according to any of the preceding claims, wherein the light-deflectoring structure (122) is a micromirror structure and / or a lens structure. [10] Security feature according to claim 9, wherein the micromirror structure and / or lens structure is configured such that the at least one marking is fully visible at at least one tilt angle of the security document in relation to the field of vision of an observer. [11] Security feature according to claim 9, wherein the micromirror structure and / or lens structure is configured such that the marking is at least partially visible at at least two tilt angles of the security document in relation to the field of vision of an observer. [12] Safety feature according to any one of claims 9 to 11, wherein the micromirrors of the micromirror structure or the lenses of the lens structure have a diameter of 30 to 120 µm. [13] Safety feature according to any of the preceding claims, wherein the at least one inclination angle is in a range of 10° to 80° and / or 100° to 170°. [14] A security feature according to any of the preceding claims, wherein the markings are exclusively machine-readable. [15] Security document (200) with a security feature according to any of the preceding claims. [16] Security document (200) according to claim 15, wherein the security document (200) has a first page (201) and a second page (202) opposite the first page (201), wherein the verification element (120) is arranged on the first page (201) of the security document (200) and the concealment element (110) is arranged on the second page (202) of the security document (200). [17] A security document (200) according to any one of claims 15 or 16, wherein the security document (200) further comprises a photograph (203) of the owner of the security document (200). [18] Valuable document (200) according to claim 17, wherein the verification element (120) is arranged completely or at least partially in a marginal area (203a) of the photograph (203). [19] A system (300) for verifying a value document (200), comprising: a security document (200) according to any one of claims 15 to 18; a verification device (400) configured to verify the value document (200). [20] System (300) according to claim 19, wherein the verification device (400) comprises: at least one optical receiving element (410) configured to detect the obfuscation element (110) and the at least one marking (124); at least one processing unit (420) configured to decrypt the optically encrypted machine-readable verification data and to compare the decrypted verification data with the label. [21] System (300) according to claim 19, wherein the verification device (400) comprises: at least one optical receiving element (410) configured to detect the obfuscation element (110) and the at least one marking (124); if the identifier includes key data for decrypting the encrypted verification data and the optically encrypted machine-readable verification data are additionally cryptographically encrypted, at least one processing unit (420) is configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key data. [22] System (300) according to any one of claims 19 to 21, wherein the verification device (400) comprises: a key storage device (430) configured to store at least one key or part of a key. [23] System (300) according to claim 22, wherein the verification device (400) comprises: at least one optical receiving element (410) configured to detect the obfuscation element (110) and the at least one marking (124); if the identifier includes key data with a key or key part for decrypting the encrypted verification data and the optically encrypted machine-readable verification data are additionally cryptographically encrypted, at least one processing unit (420) configured to decrypt the optically encrypted and cryptographically encrypted machine-readable verification data using the key or key part of the identifier and the key or key part of the key storage device (430). [24] System (300) according to any one of claims 19 to 23, wherein the verification device (400) comprises: a tilt angle determination unit (440) configured to determine a tilt angle of the value document (200) with respect to the verification device (400); and a license plate control unit (450) which is configured to control the license plate in relation to the specified tilt angle. [25] System (300) according to any one of claims 19 to 24, wherein the verification device (400) comprises: an instruction device (460) configured to create at least one action instruction and to provide the at least one action instruction to a user of the verification device (400). [26] A method for verifying a security document (200) according to claims 15 to 18, comprising: Capture (S1) optically encrypted machine-readable verification data provided in an obfuscation element (110); Detection (S2) of at least one identifier (124) on the security document (200); Decryption (S31) of the optically encrypted machine-readable verification data; Verifying (S41) the value document (200) by comparing the decrypted verification data and the at least one identifier (124). [27] A method for verifying a security document (200) according to claims 15 to 18, comprising: Capture (S1) optically and cryptographically encrypted machine-readable verification data provided in an obfuscation element (110); Capture (S2) of at least one identifier (124) on the security document (200), wherein the identifier (124) includes key data for decrypting the cryptographically encrypted machine-readable verification data; Decrypting (S32) the optically encrypted and cryptographically encrypted machine-readable verification data using the label (124); Verify (S42) the value document (200) using the decrypted machine-readable verification data. [28] A method for verifying a security document according to claims 15 to 18, comprising: Capture (S1) optically and cryptographically encrypted machine-readable verification data provided in an obfuscation element (110); Capture (S2) of at least one identifier (124) on the security document (200), wherein the identifier (124) includes key data for decrypting the cryptographically encrypted machine-readable verification data; Queries (S5) of a key or key part from a verification device (400); Decryption (S33) of the optically encrypted and cryptographically encrypted machine-readable verification data using the identifier (124) and the queried key or key part; Verify (S42) the value document (200) using the decrypted machine-readable verification data. [29] Method according to any one of claims 26 to 28, comprising: Determine (S6) an angle of inclination of the security document (200) with respect to the verification device (400); and Check (S7) the recorded marking in relation to the determined angle of inclination. [30] Method according to any one of claims 26 to 29, comprising: Create (S8) at least one instruction for action; and Providing (S9) at least one instruction for action to a user of the verification device (400).

Images