SECURITY DOCUMENT AND PROCEDURES FOR ITS AUTHENTICATION

Description

[0001] The invention relates to a security document and a method for its authentication.

[0002] Physical features are typically used to authenticate security documents such as identity cards, passports, visas, and the like. These features can include, for example, security printing and / or optically variable security elements, such as holograms, embedded on or in the security document.

[0003] One problem is that a person verifying such a document must know what the security element looks like in its original state and how it behaves when viewed from different angles. However, due to the large number of different security documents, this knowledge cannot always be assumed, so there is a risk that forged documents will be mistakenly assessed as genuine.

[0004] Furthermore, it is becoming increasingly apparent that digital information is being used to secure and verify such documents. This information can be verified automatically, thus avoiding the aforementioned problem. However, this usually requires a comparison with a database, meaning that such methods can only be used if a suitable infrastructure is available.

[0005] Therefore, even documents containing digital information must also include this information in visual form, so that authentication is still possible in the event of a network failure. However, this in turn opens up opportunities for document manipulation, as it cannot be guaranteed that the digital and visual information match.

[0006] Document WO 2012 / 035306 A1 concerns a system and a procedure for encoding and controlled authentication of security documents.

[0007] Document US 2008 / 0149713 A1 concerns the identification of media areas that are likely to contain watermarks.

[0008] Document US 2011 / 0283369 A1 concerns the production of security documents and procedures for the authentication of security documents.

[0009] Document WO 2015 / 082332 A1 concerns procedures for authenticating a security element and an optically variable security element.

[0010] Document JP 2015055909 A concerns an identification procedure and an identification device.

[0011] The object of the present invention is to provide a security document and a method for its authentication, which enable the reliable integration of digital and physical security features.

[0012] This problem is solved by the subject matter of claim 1 and the subject matter of claim 8.

[0013] Such a security document comprises a first security element, which includes at least one visually recognizable and, in particular, machine-readable first piece of information, and a second security element, which includes at least one second piece of information, in particular machine-readable, which can be used to verify the first piece of information.

[0014] A suitable procedure for authenticating such a security document involves the following steps: Reading a visually recognizable and, in particular, machine-readable first piece of information from a first security element; reading a second piece of information, in particular, machine-readable, from a second security element; verifying the first piece of information using the second piece of information.

[0015] Visually recognizable information is understood to be information that is visible to the naked eye and can be interpreted by a human observer without any additional aids. Machine-readable information is information that can be read digitally, either directly from a storage medium or using image and / or character recognition software. For the purposes of this application, information can be a more complex data set, but it can also be merely a part of a larger data set.

[0016] By using the second piece of information to verify the first, it can be ensured that manipulations of the first piece of information can be detected even without a network connection. To forge such a security document, a forger would have to manipulate both the first and second pieces of information. Since the second piece of information is preferably stored digitally, a particularly high level of protection against forgery can be achieved through appropriate encryption.

[0017] It is preferred if the first piece of information includes personalized data concerning a holder of the security document and / or an object associated with the security document.

[0018] This could include, for example, the name of an identity card holder, biometric data, passport photos, issue and validity dates, nationality, a chassis number or type designation of a motor vehicle associated with the security document, or similar information.

[0019] Furthermore, it is appropriate if the first security element includes, in particular, a laser-engraved inscription and / or a photograph and / or a machine-readable zone (MRZ) of an identity document and / or a storage device, in particular an RFID chip.

[0020] Preferably, these elements are directly visually readable, or, in the case of an RFID chip, readable by means of a reader, in particular a handheld device. A machine-readable zone is understood to be an area of ​​the document that complies with ICAO Document 9303, Part 3.

[0021] It is advantageous if the second security element is designed as a code, in particular as a one- or two-dimensional barcode, especially as a DataMatrix code, QR code, Aztec code, UPC (Universal Product Code), Code 128, Code 39, or PDF417 code. Such codes can preferably be designed as diffractive codes. Other encoding options for the second security element include, for example, area patterns, dot patterns, especially pixel patterns, numeric codes, special, proprietary barcodes such as colored barcodes or three-dimensional barcodes, and codes written into storage media such as volume holograms. Alternatively or additionally, codes based on magnetic storage media (magnetic stripes, magnetic inks) as well as codes applied using fluorescent inks (e.g., UV fluorescent inks), IR upconverters, or polarizing optical elements can be used. For optical or electronic reading, the following may be used:Additional procedures are required, such as UV illumination, electronic reading devices for magnetic encodings, optical filters that are placed on the document or that are held in front of the taking lens (e.g. polarizing filters, moiré analyzers).

[0022] This allows for a high information density in a small space. In particular, diffractive barcodes also offer an optical security feature that further hinders counterfeiting. The diffractive optical effect in a diffractive barcode can provide the actual encoding, form additional encoded information, or simply be decorative without any encoded information. The decorative effect can also be combined with encoded information.

[0023] The QR code, defined in ISO / IEC 18004, can consist of 21x21 to 177x177 modules in a two-dimensional matrix. This matrix can encode alphanumeric data or 8-bit byte data. For example, up to 7089 numeric characters, up to 4296 alphanumeric characters, or up to 2953 8-bit byte characters can be encoded, each within the maximum matrix size of 177x177 modules. It is also possible to store correspondingly less data and combine the data in the matrix with error correction data. The micro-QR code, with a size between 11x11 and 17x17 modules, can hold up to 35 characters, with a border width of at least two modules.

[0024] The second piece of information can also be in the form of OCR text, which is machine-readable. For example, a security document can contain OCR-B text as the second piece of information, as defined in ICAO Doc 9303 for a machine-readable zone for Type 3 travel documents, containing 44 characters in two lines.

[0025] It is particularly advantageous if the second piece of information includes a key or part of a key for decoding the first piece of information.

[0026] Such an encryption method achieves a particularly high level of security against forgery. For example, the second piece of information could be the public key of an asymmetric key pair, which serves as a digital signature for a portion of the first piece of information encoded with the private key of the key pair. Manipulation of the first piece of information is then impossible without knowledge of the private key. Elliptic Curve Digital Signature Algorithm (ECDSA) and / or, for example, SHA-256 hash algorithms are particularly suitable.

[0027] It is further useful if the second piece of information includes a checksum for the first piece of information or parts of the first piece of information.

[0028] Such a checksum ensures that any manipulation of the initial information can be detected immediately. For example, a checksum can comprise multiple check digits, each generated from individual biographical data elements of the security document, such as name, date of birth, etc. ICAO document 9303 and the equivalent ISO standard 7501, parts 1-3, describe an example of a standardized formula for calculating such check digits. However, non-standardized and potentially secret methods can also be used.

[0029] Furthermore, it is advantageous if the second piece of information includes a redundant reproduction of at least part of the first piece of information. This also allows any manipulation of the first piece of information to be detected immediately, as this would lead to inconsistencies with the second piece of information.

[0030] In another embodiment, the second piece of information can include a password for database access and / or for access to an RFID chip. This allows for an additional external verification of the document's authenticity.

[0031] Preferably, the first and / or second piece of information includes biometric features, such as fingerprints, portrait photos, iris scan, retina scan, hand vein scan.

[0032] Preferably, the biometric features can be available as a template and / or stored in a template. A template is preferably a compressed dataset and / or a dataset whose information content is reduced to the essential biometric features, generated by applying algorithms to the raw biometric data (e.g., fingerprint, portrait photo, iris scan, retina scan, hand vein scan).

[0033] The data size of a template is preferably between 100 bytes and 500 bytes, e.g. 256 bytes, and preferably conforms to the ISO standard for such templates.

[0034] Due to the small amount of data, such a template can be stored and / or saved in a non-electronic memory, in particular in an optically readable code such as a barcode.

[0035] It is further preferred if the second piece of information includes information about a target state of a safety feature of the first safety element.

[0036] In particular, this allows a person verifying the document to be shown what an authentic security feature should look like, thus avoiding accidental visual authentication of a forged document.

[0037] According to the invention, the second security element comprises at least one optically variable element, which includes one or more of the following structures: a diffractive structure, a zero-order diffraction structure, a blaze grating, a macrostructure, in particular a lens structure or microprism structure, a mirror surface, a matte structure, in particular an anisotropic or isotropic matte structure, a volume hologram, or a thin-film structure with a color-changing effect. This allows for a variety of attractive optical effects and further increases counterfeit protection.

[0038] Such optically variable elements or structures are difficult to reproduce and therefore offer particularly good protection against counterfeiting. The optically variable element or structures thus represent a key security feature. The optically variable element can also form and / or contain the first and / or second piece of information, especially in an optically readable form, for example, as a diffractive barcode.

[0039] Such an optically variable element overlaps the first and / or second piece of information at least partially, so that manipulation of this information is not possible without destroying the optically variable element or the security feature.

[0040] The optically variable element is also located adjacent to, in particular directly adjacent to, the first and / or the second piece of information.

[0041] The optically variable element can preferably overlap at least the first piece of information, at least partially, and be adjacent to the second piece of information, preferably directly adjacent. The exact opposite case is also possible: that the optically variable element overlaps at least the second piece of information, at least partially, and is adjacent to the first piece of information, preferably directly adjacent.

[0042] Furthermore, it is preferred if the first and / or the second safety element comprises a reflective layer, in particular a full or partial metal layer and / or a full or partial layer of a high refractive index (HRI) material. The reflective layer is preferably located in the region of the optically variable element.

[0043] It is also advantageous if the first and / or the second security element or the optically variable element comprises single- or multi-layer printed structures, in particular including colored, optically active and / or optically variable dyes and / or pigments.

[0044] Overall, this allows for a wide variety of layered structures that are both visually appealing and particularly counterfeit-proof.

[0045] It is advantageous if the first and second safety elements are arranged adjacent to each other, in particular directly adjacent to each other.

[0046] The first and second security elements preferably form a combined security element and / or a common patch. They thus preferably constitute a single unit and / or are formed from parts of a common layer, in particular in the form of a patch, a transfer film, a laminating film, or a security thread.

[0047] Due to the adjacent design of the safety elements or the resulting preferred unit, it is possible to apply the safety elements or the combined safety element obtained therefrom to a substrate in just one single step.

[0048] To simplify the application of the security elements, it is advantageous if the first and second security elements are provided in a common transfer layer of a transfer film or in a laminating film.

[0049] However, it is also fundamentally possible that the first and second security elements can be arranged in the security document in a manner that overlaps each other, at least in some areas. According to the invention, this means that, when viewed from above, one security element at least partially overlaps or covers the other security element.

[0050] The first safety element and / or the second safety element can each have at least two sub-areas. In A first sub-area preferably contains and / or stores the first and / or second pieces of information, respectively. A second sub-area may be provided adjacent to and / or surrounding the first sub-area, in particular directly adjacent to and / or directly surrounding it. In The second sub-area preferably includes further, in particular optical, and especially optically variable, security features or elements.

[0051] It is advantageous if a second sub-area of ​​a security element, comprising in particular an optically variable element, overlaps and / or covers at least a portion of a first sub-area of ​​the other security element. In particular, the second sub-area of ​​the second security element overlaps at least a portion of the first security element, most preferably the first sub-area of ​​the first security element, and thus preferably the first piece of information. This ensures that manipulation of the first piece of information is only possible by destroying the second sub-area, in particular the optical element.

[0052] The term "adjacent" preferably refers to a spacing of less than 50 mm at the boundary lines of the sub-areas, more preferably less than 10 mm, and more preferably less than 3 mm. The term "immediately adjacent" preferably refers to a spacing of less than 1 mm between the boundary lines of two sub-areas, more preferably less than 300 µm, and more preferably to a shared boundary line that is at least partially formed between the sub-areas.

[0053] Preferably, the security document is designed as an identity document, visa document, driver's license, vehicle registration document or the like.

[0054] It is particularly advantageous if the reading of at least one first and / or at least one second piece of information and / or the verification of the first piece of information is carried out using a handheld device, in particular a smartphone, PDA, tablet, or the like. The reading of the first and / or second piece of information and / or the verification of the first piece of information can also be carried out with a reading device that is connected to a desktop computer or similar device.

[0055] In this embodiment, no special hardware is required, so that authentication of the document is easily possible with commercially available handheld devices.

[0056] It is advantageous if a single image and / or a sequence of images and / or a video of the security document is captured to read the first and / or second information.

[0057] Particularly when recording a sequence of images or a video, it is possible to verify the presence of optically variable elements or optically variable security features by, for example, recording the document from different angles and verifying the desired optical change of the optically variable element or security feature.

[0058] It is particularly useful if, before or during the reading of the first and / or second information, instructions for capturing the single image, image sequence or video are displayed on a screen of the handheld device, which include, in particular, specifications regarding a shooting angle, a shooting distance or the like.

[0059] This ensures that the user obtains a recording that is suitable for evaluation, thus avoiding verification errors due to recording artifacts.

[0060] Additionally, the instructions may also contain information on how to use the reading device's lighting units (flash, built-in LEDs or use of the polarized light of the device display) for verification.

[0061] Furthermore, it is advantageous if, to verify the first piece of information, a checksum of the first piece of information is generated and compared with a target checksum encompassed by the second piece of information.

[0062] In a further preferred embodiment, to verify the first information, at least an encrypted part of the first information is decrypted using a key encompassed by the second information.

[0063] It is also possible that, to verify the first piece of information, the first piece of information or parts of the first piece of information are compared with a redundant copy of the first piece of information encompassed by the second piece of information.

[0064] As already explained above using the security document, such a checksum and / or encryption and / or redundant information can immediately detect any manipulation of the first piece of information.

[0065] It is further preferred if a password included in the second piece of information is used as access authentication for a program on the handheld device and / or a database stored on the handheld device or on a computer separate from the handheld device. This provides an additional layer of security for the document. Even if a forger were to succeed in manipulating the first and second pieces of information, the database, which is inaccessible to the forger, introduces a further layer of security by which such manipulation can be detected when the information stored on and / or in the document is compared with the information in the database.

[0066] It is particularly advantageous if a third piece of information is retrieved based on the first and / or second piece of information. This third piece of information can be retrieved from a database stored on the handheld device or on a separate computer. Alternatively, the third piece of information can be information captured or recorded by the handheld device. The capture of this information preferably occurs in direct conjunction with the first and / or second piece of information. This means that the capture of the third piece of information takes place immediately before or after the reading of the first and / or second piece of information. For this purpose, the handheld device preferably has means for recording or capturing this information. Cameras can advantageously be used for this purpose.

[0067] This third piece of information enables authentication independent of the document and is not accessible to a potential forger.

[0068] It is advantageous if the third piece of information includes a key or part of a key for decoding the first piece of information, or forms a key pair together with the second piece of information.

[0069] Alternatively or additionally, the third piece of information can include a checksum for the first and / or second piece of information.

[0070] Here too, it is possible that the third piece of information includes a redundant reproduction of at least part of the first piece of information.

[0071] As already explained above using the security document, such a checksum and / or encryption and / or redundant information can immediately detect any manipulation of the first piece of information.

[0072] Furthermore, the third piece of information may also include a password for database access and / or for access to an RFID chip.

[0073] This allows for the creation of additional security layers which, as already described, are beyond the reach of a potential forger.

[0074] Furthermore, it is appropriate if the third piece of information includes information about a target state of a security feature of the first and / or second security element.

[0075] This information can be used to support machine authentication, or it can be made available to a user to reliably enable visual authentication even when the intended state of the document is unknown.

[0076] In this case, it is particularly advantageous if, based on the third piece of information, a single image and / or a sequence of images and / or a video is displayed on a handheld device screen, demonstrating the target state of a particularly diffractive security feature of the first and / or second security element. Audio playback in the form of instructions on how to perform a check or which questions should be asked of the person being checked is also possible. This audio playback can also be played back to verify, for example, whether the person being checked possesses information related to the data listed on the document (e.g., in which German state was their birthplace?).

[0077] The user is thus shown how the individual security features of the document must appear in their unmanipulated state, so that they can easily and reliably detect forgeries.

[0078] It is particularly advantageous if the single image and / or image sequence and / or video includes a reproduction of the security feature from different viewing and / or lighting angles.

[0079] This allows the user to be shown how, for example, an optically variable security feature must behave when the document is tilted and / or rotated.

[0080] The handheld device can also use an external or integrated optical camera to capture and analyze the current state of a security feature. This current state can then be compared with a previously saved target state. In particular, it is possible to perform color analyses, font analyses, brightness analyses, contrast analyses, and other analyses on the security feature and / or the initial information.

[0081] The camera can also be used for biometric recognition by capturing the current state of the person in question and then comparing it with the information on the document, in particular with the first piece of information, e.g. in the form of a photo, and / or with the second piece of information, e.g. in the form of electronically stored biometric features.

[0082] During a security document review, it is preferable to take a current scan of the biometric features. If the biometric features are stored as a template in the first and / or second information, it is advantageous to convert the scan into such a compressed and / or reduced, but current, template and then compare it with the template stored on the security document, particularly in the first and / or second information.

[0083] It is also possible that images or photos of users are stored in the first and / or second piece of information. To keep the data volume as low as possible, the photos are preferably stored at a low or coarse resolution. When verifying the security document, it is then advantageous for the reading device, especially the handheld device, to read the first and / or second piece of information and regenerate the image at the low resolution, displaying it on the reading device itself, such as the handheld device or connected hardware. This allows the inspector to easily evaluate the image. The retrieved image can then either be compared with a recently taken image of the user, or the inspector can directly compare the retrieved image with the user standing before them, i.e., by visually observing the user.

[0084] During the verification process, a single mobile device can simultaneously read the security document template and perform the current scan of the biometric features. This significantly simplifies and speeds up the security document verification process.

[0085] Furthermore, the handheld device could calculate and output a probability value indicating the likelihood (e.g., 93%) that a document, security feature, and / or piece of information is genuine. This would be a practical solution, rather than a simple yes / no analysis, especially when checking a large number of documents in a very short time.

[0086] The first piece of information and / or the second piece of information can be located on the same page of the security document or on different pages and / or in different positions within the security document. For example, in a card-shaped security document, the first and second pieces of information can be located on the front or back of the document. Alternatively, one of the two pieces of information can be located on the opposite page. In a book-like security document with multiple pages, the first and second pieces of information can be located together on the same page or on different pages. For example, the first piece of information can be located on one page and the second piece of information on another page, particularly within a visa affixed or printed therein.

[0087] The first piece of information and / or the second piece of information can also be arranged in a transparent window area of ​​the security document. For example, the first piece of information can be designed to be visually visible from the front and / or back and / or via transmission. The second piece of information can be arranged within this window, either alternatively or additionally.

[0088] Advantageously, the security document can contain at least one microcode. The microcode is, in particular, a project-specific characteristic. This means that security documents of a specific type, for example, security documents of a certain type such as passports, or security documents from the same authority, share the same microcode.

[0089] The microcode is preferably designed so that it cannot be resolved by the human eye, i.e., it is not visible. The microcode preferably has a structure size between 0.5 µm and 300 µm, more preferably between 1 µm and 100 µm, and particularly preferably between 1 µm and 50 µm. The microcode can be designed as a QR code. Preferably, the microcode is formed from a very finely structured partial metallization and / or a very finely structured color layer. Preferably, the microcode is covered by an optically variable element. The optically variable element can be designed to optically overexpose or otherwise obscure the microcode in order to make it difficult for the naked human eye to detect.

[0090] When verifying the security document, the microcode is preferably read using the reader. The reader then compares the read microcode with other information stored in the security document, particularly the document type and / or the country of issue. Specifically, the data stored on the security document, especially personal data, is only displayed once it has been confirmed that the microcode matches or corresponds with the data being compared on the security document, particularly the document type and / or the country of issue.

[0091] It is also possible that the microcode is stored on the chip of the security document. This ensures that the correct chip is attached to the security document. When the security document is read, the microcode in the document is compared with the microcode on the chip.

[0092] Preferably, the microcode is embedded in a foil, particularly a transfer foil, which does not yet contain any individualizing features, such as personal data and / or biometric features. Known demetallization processes and / or color structuring processes are particularly suitable for producing the microcodes, creating a very finely structured partial metallization and / or a very finely structured color layer. This allows for a very fine structuring of the microcodes. During the individualization process, personal data is then embedded in the foil. This is done, in particular, by laser engraving.

[0093] The invention will now be explained in more detail using exemplary embodiments. These will show... Fig. 1 A schematic representation of an exemplary embodiment of a security document; Fig. 2 A schematic representation of the procedure for verifying a security document; Fig. 3 A schematic representation of the procedure for verifying an alternative security document; Fig. 4 A schematic representation of an exemplary embodiment of a security document with an RFID chip; Fig. 5 A schematic representation of the procedure for verifying a security document using an external database; Fig. 6 A schematic representation of an alternative embodiment of a security document with an RFID chip; Fig. 7 A schematic representation of the procedure for verifying a security document according to Fig. 6 including an external database; Fig. 8 A schematic representation of another example of a security document.

[0094] A security document 1 in the form of an identity card comprises an area 11 with legible identification data, a passport photo 12, and a standardized machine-readable zone 13. Area 11 and the passport photo 12 are partially overlapped by an optically variable security element 14. An additional machine-readable security element 15 is also provided.

[0095] Section 11 comprises personalized data relating to a holder of the security document. This may include, for example, the name of the document holder, biometric data, passport photos, issue and validity dates, nationality, a chassis number or type designation of a motor vehicle associated with the security document, or similar information.

[0096] This data is also at least partially reproduced in machine-readable zone 13. Machine-readable zone 13 refers to a section of the document that follows ICAO document 9303, Part 3.

[0097] The machine-readable security element 15 is preferably designed as a code, in particular as a one- or two-dimensional barcode, especially as a DataMatrix code, QR code, Aztec code, UPC (Universal Product Code), Code 128, Code 39, or PDF417 code. Such codes may preferably be designed as diffractive codes. Other encoding options for the second security element include, for example, area patterns, dot patterns, in particular pixel patterns, numeric codes, special, proprietary barcodes such as colored barcodes or three-dimensional barcodes, and codes that are written into storage media such as volume holograms. Alternatively or additionally, codes based on magnetic storage media (magnetic stripes, magnetic inks) as well as codes applied by fluorescent inks (for example, UV fluorescent inks), IR upconverters, or polarizing optical elements can be used. For optical or electronic reading, the following may be used:Additional procedures are required, such as UV illumination, electronic reading devices for magnetic encodings, optical filters that are placed on the document or that are held in front of the taking lens (e.g. polarizing filters, moiré analyzers).

[0098] This allows for a high information density in a small space. In particular, diffractive barcodes also offer an optical security feature that further hinders counterfeiting. The diffractive optical effect in a diffractive barcode can provide the actual encoding, form additional encoded information, or be purely decorative without any encoded information. The decorative effect can also be combined with encoded information.

[0099] The security element 14 preferably comprises, individually or in combination, a diffractive structure, a zero-order diffraction structure, a blaze grating, a macrostructure, in particular a lens structure or microprism structure, a mirror surface, a matte structure, in particular an anisotropic or isotropic matte structure, a volume hologram or a thin-film structure with a color-changing effect.

[0100] Furthermore, it is preferred if the safety element 14 comprises a reflective layer, in particular a full-surface or partial metal layer and / or a full-surface or partial layer of a high refractive index (HRI) material.

[0101] It is also appropriate if the security element 14 comprises single- or multi-layer printed structures, in particular including colored, optically active and / or optically variable dyes and / or pigments.

[0102] Such structures are difficult to reproduce and therefore offer particularly good protection against counterfeiting. At the same time, a variety of appealing visual effects can be achieved. Since the security element 14 overlaps area 11 and the passport photo 12, at least partially, manipulation of these elements is not possible without destroying the security feature 14.

[0103] How Fig. 2 As shown, document 1 can be captured for authentication using a handheld device 2, for example a smartphone, with an integrated camera. Appropriate software on the handheld device captures the information from sections 11, 12, and 13, as well as the machine-readable information from security element 15.

[0104] The information read from security element 15 can then be displayed on a display 21 of the handheld device. The user can now check whether this information is consistent with the printed information in area 11, or whether this area, or the passport photo 12, or the machine-readable zone 13 has been manipulated.

[0105] Furthermore, a reproduction 22 of the security element 14 can also be displayed on the display 21. This serves as an aid for the user to facilitate the identification of a correct and untampered security element 14. Additional information, such as the earliest possible issue date of the document (date of placing on the market), can also be displayed.

[0106] Security element 15 may also contain further information or perform additional functions. It is particularly advantageous if security element 15 includes a key or part of a key for decoding encrypted information contained in areas 11 or 13.

[0107] Such an encryption method achieves a particularly high level of security against forgery. For example, the information contained in security element 15 could be the public key of an asymmetric key pair, which serves as a digital signature for a portion of areas 11 or 13 encoded with the private key of the key pair. Manipulation of these areas is then impossible without knowledge of the private key. Elliptic Curve Digital Signature Algorithm (ECDSA) and / or, for example, SHA-256 hash algorithms are particularly suitable.

[0108] It is also possible that security element 15 includes a checksum for information contained in sections 11, 12, or 13. Such a checksum ensures that any tampering with these sections can be detected immediately. For example, a checksum can comprise multiple check digits, each generated from individual biographical data elements of the security document, such as name, date of birth, etc. ICAO document 9303 and the equivalent ISO standard 7501, parts 1-3, describe an example of a standardized formula for calculating such check digits. However, non-standardized and potentially secret methods can also be used.

[0109] In the embodiment according to Fig. 3 The security element 15 also includes an additional optically variable structure 151. This can also be displayed as the target image 23 on the display 21 of the handheld device during verification, which further increases the forgery protection of the document 1.

[0110] The optically variable structure 151 also preferably comprises, individually or in combination, a diffractive structure, a zero-order diffraction structure, a blaze grating, a macrostructure, in particular a lens structure or microprism structure, a mirror surface, a matte structure, in particular an anisotropic or isotropic matte structure, a volume hologram or a thin-film structure with a color-changing effect.

[0111] Furthermore, it is preferred if the optically variable structure 151 comprises a reflective layer, in particular a full-surface or partial metal layer and / or a full-surface or partial layer of a high refractive index (HRI) material and / or single- or multi-layer printed structures, in particular comprising colored, optically active and / or optically variable dyes and / or pigments.

[0112] As already described, this makes it possible to create visually appealing and particularly counterfeit-proof security elements 15.

[0113] A detailed view of such document 1 is again in Fig. 6 reproduced.

[0114] In the embodiment of security document 1 according to Fig. 4 An RFID chip 16 is additionally provided on the security document 1. The RFID chip 16 can, for example, contain a redundant copy of the information from areas 11, 12, and 13. Preferably, this information is encrypted, and information contained in the security element 15 can serve as a key for accessing the information on the RFID chip in the manner already described.

[0115] Additionally, how Fig. 5 This shows that a query of an external database 3 is performed using the handheld device 2. Information stored in the security element 15 or in the chip 16 can serve as the password or access key for the database 3. Information from the two elements can also complement each other to achieve a particularly high level of security.

[0116] Database 3 can in turn provide a copy of the data from areas 11, 12, 13, deliver reproductions 22 of the security elements 14, 15 in the manner described, or provide further keys or checksums for the verification of document 1.

[0117] The procedure for this is described in Fig. 7 To illustrate this further: The handheld device 2 captures the information from security elements 15 and 16 and, if necessary, decrypts it. The biographical information of the ID card holder stored on chip 16 is then displayed and can be compared with the information in area 11. If applicable, an electronically stored passport photo can also be displayed and compared with the passport photo in area 12. This allows for the detection of tampering in areas 11 and 12.

[0118] Simultaneously, the handheld device contacts database 3 and downloads a copy of the ID card holder's biographical data. This data is then displayed and can be compared with the data stored in document 1. This makes it possible to detect a forgery even if areas 11 and 12, as well as security element 15 and chip 16, have been manipulated.

[0119] The handheld device also retrieves the previously described reproduction 22, 23 of the security elements 14, 151 from the database 3 or from the memory in the chip 16 in the security document 1 or from the memory in a chip in the handheld device 2 and displays it to the user. Information from the security element 15 can be used as an access code or password for the respective database or chip. Preferably, the respective security element is displayed from several viewing angles in order to demonstrate the optically variable effects of the security elements 14, 151 and to facilitate their verification.

[0120] Figur 8 Figure 1 shows a further embodiment of a security document 1. The machine-readable security element 15, which preferably has a machine-readable code, is directly adjacent to the security element 14, which preferably has an optically variable element. According to the invention, the security elements 14 and 15 can be considered a combined security element 30. It is advantageous if the security elements 14 and 15 are designed as a single patch. This allows the security elements 14 and 15 to be applied to a substrate of the security document 1 in a single application step.

[0121] In Figur 8The combined security element 30 overlaps both area 11 containing readable identification data and the passport photo 12. This has the advantage that manipulation of area 11 and the passport photo 12 is only possible by destroying the combined security element 30. However, it is also conceivable that only one of the security elements 14 or 15 overlaps area 11 and / or the passport photo 12.

Claims

1. Security document (1) having a first security element (14), which comprises a visually recognisable and machine-readable first piece of information, and a second security element (15), which comprises a machine-readable second piece of information, which can be used to verify the first piece of information, wherein the second security element comprises an optically variable element (151) that comprises a diffractive structure, a zeroth order diffraction structure, a blazed grating, a macrostructure, in particular a lens structure or microprism structure, a mirror surface, a matt structure, in particular an anisotropic or isotropic matt structure, a volume hologram or a thin film structure with colour change effect, and the optically variable element is adjacent, preferably directly adjacent, to the second piece of information and / or a further piece of information, and at least regionally overlaps the first piece of information, or the optically variable element is adjacent, preferably directly adjacent, to the first piece of information, and at least regionally overlaps the second piece of information.

2. Security document according to claim 1, characterised in that the first piece of information comprises personalised data relating to an owner of the security document and / or comprises an object associated with the security document, and / or the first security element comprises an in particular printed or laser-engraved inscription and / or a photograph and / or a machine-readable zone (MRZ) of an identification document and / or a memory device, in particular an RFID chip.

3. Security document according to one of the preceding claims, characterised in that the second security element is formed as a code, in particular as a one or two-dimensional barcode, preferably as a diffractive barcode, and / or the second piece of information comprises a key or a part of a key for decoding the first piece of information, and / or the second piece of information comprises a checksum for the first piece of information, and / or the second piece of information comprises a redundant reproduction of at least one part of the first piece of information, and / or the second piece of information comprises a password for database access and / or for access to an RFID chip.

4. Security document according to one of the preceding claims, characterised in that the first and / or the second security element comprises a reflection layer, in particular a whole-surface or partial metallic layer and / or a whole-surface or partial layer made of a highly refractive material (HRI, High Refractive Index), and / or the first and / or the second security element comprises single or multi-layered printed structures, in particular comprising coloured, optically active and / or optically variable dyes and / or pigments.

5. Security document according to one of the preceding claims, characterised in that the first security element and / or the second security element each have at least two partial regions, wherein, preferably in a first partial region, the first or second piece of information is respectively contained and / or stored, and adjacent to the first partial region and / or surrounding the first partial region, a second partial region, preferably comprising an optically variable element, is provided, in particular at least the second partial region of the first security element at least regionally overlaps the second security element, in particular the first partial region of the security element or at least the second partial region of the second security element at least regionally overlaps the first security element, in particular the first partial region of the security element.

6. Security document according to one of the preceding claims, characterised by at least one microcode, which preferably comprises a structural size of between 0.5 µm and 300 µm, in particular between 1 µm and 100 µm, in particular preferably between 1 µm and 50 µm.

7. Security document according to one of the preceding claims, characterised in that the security document is formed as an identification document, visa document, driving licence, vehicle licence or similar.

8. Method for authenticating a security document according to one of the preceding claims by means of a handheld device, having the following steps: - reading out a visually recognisable and in particular machine-readable first piece of information from a first security element; - reading out an in particular machine-readable second piece of information from a second security element; - verifying the first piece of information by means of the second piece of information, wherein, to read out the first and / or second piece of information, an image sequence and / or a video of the security document is recorded, and wherein, before or when reading out the first and / or second piece of information, an instruction to record the image sequence or the video is displayed on a display of the handheld device, which comprises, in particular, specifications relating to a camera angle, a camera distance, or similar, wherein the presence of an optically variable element or an optically variable security feature is verified by the document being captured from different angles and the desired optical change of the optically variable element or the security feature is verified.

9. Method according to claim 8, characterised in that reading out the first and / or second piece of information and / or verifying the first piece of information is carried out by means of a handheld device, in particular a smartphone, PDA, tablet or similar.

10. Method according to one of claims 8 to 9, characterised in that, to verify the first piece of information, a checksum of the first piece of information is formed and is compared to a target checksum comprised by the second piece of information, and / or to verify the first piece of information, at least one encrypted part of the first piece of information is encrypted by means of a key comprised by the second piece of information, and / or to verify the first piece of information, the first piece of information is compared to a redundant copy of the first piece of information comprised by the second piece of information.

11. Method according to one of claims 8 to 10, characterised in that a third piece of information is retrieved by means of the first and / or second piece of information from a database stored on the handheld device or on a different calculator to the handheld device, or a third piece of information is recorded or plotted by the handheld device, in particular the third piece of information comprises a key or a part of a key for decoding the first piece of information or forms a key pair together with the second piece of information.

12. Method according to claim 11, characterised in that the third piece of information comprises a piece of information about a target state of a security feature of the first and / or second security element, in particular, by means of the third piece of information, a single image and / or an image sequence and / or a video is displayed on a display of the handheld device, which demonstrate a target state of an in particular diffractive security feature of the first and / or second security element.

13. Method according to one of claims 10 to 12, characterised in that a scan of a biometric feature is preferably captured by means of the handheld device and is compared to the feature stored on the security document, in particular in the first and / or second piece of information, in particular the scan is compressed and / or reduced into a template.