CREATION OF DOCUMENT TEMPLATES WITH SECURITY FEATURES

Description

Area

[0001] The invention relates to a method for generating document templates with security features and for producing documents using corresponding document templates, in particular so-called valuable or security documents such as identity cards, passports, or credit cards. Furthermore, the invention relates to document templates generated using corresponding methods. Finally, the invention encompasses electronic design systems for corresponding document templates and production systems for corresponding documents. State of the art

[0002] Documents, such as valuable and security documents such as identity cards, passports, or credit cards, are used in many security-critical application scenarios. The risk is correspondingly high that an authorized owner of such a document or an unauthorized third party could physically tamper with the document after it has been issued, for example, to gain unauthorized access to a protected building complex, access protected data, or access the services of a service provider. For example, an unauthorized third party could attempt to replace the owner's facial image, which is printed on a previously produced and issued identification document or on a personalized security document, with their own facial image or a morphed image (identity theft).Other manipulations are also possible, such as manipulating the location and age information on the document or making a physical copy of a genuine document.

[0003] If the document has electronic components, such as in particular a data storage device and a microprocessor, there are various approaches in the state of the art to make a document or at least the content of its data storage device uniquely and tamper-proof identifiable by means of individual identifiers, cryptographic keys, signatures and other document-specific or personal data or algorithms.

[0004] However, not all valuable and security documents have the appropriate data storage and / or microprocessors to ensure the security of the document and / or its information content against tampering using algorithmic and / or cryptographic methods. Even if appropriate electronic components are present, their use in the course of an integrity check is often time-consuming or complex. These electronic means of ensuring integrity are often insufficient, especially when the integrity of the document is to be verified, at least in some cases, based on purely optical features, such as a hologram, a facial image of the document holder, a handwritten signature of the holder, etc.For example, a person's facial image printed on a passport, identity card, or employee ID card is often used to prove to others that the owner of the document is the person for whom the card was issued. In such scenarios, it is therefore not sufficient to simply ensure that the document's electronic components or data storage are intact, i.e., have not been tampered with.

[0005] GB 2 352 708 A describes an identity card comprising a substrate on which characters are displayed; and an at least partially transparent overlay on which characters and optionally a photographic representation and handwriting can be printed, which overlay at least partially covers the substrate so that the characters on the substrate and the overlay are visible side by side.

[0006] WO 00 / 38932 A1 describes a document having on a substrate at least one document number, an optical marking with a machine-readable identifier, and a memory field for receiving a control number. The control number is generated only at the moment of delivery to an authorized person using a cryptographic operation from at least the document number, the identifier, and a first secret key and is written into the memory field. A certificate of authenticity generated in this way can be verified for authenticity with a verifier using a cryptographic operation and the information stored on the document with a second key.

[0007] WO 2018 / 109035 A2 describes a method for verifying a security document using a reading device. First transmission and / or reflection properties of a first region of the security document are detected by the reading device in a first spectral range. From this, a first data set specifying these properties is created. The first region overlaps an optical security element arranged on the security document or embedded in the security document, at least in some areas. Second transmission and / or reflection properties of the first region of the security document are detected by the reading device in a second spectral range. From this, a second data set specifying these properties is created. The first spectral range differs from the second spectral range.Based on at least the first data set and the second data set, the authenticity of the security document and / or the security element is verified.

[0008] US 2005 / 010776 A1 describes systems and methods for securing an identification document having at least one storage element capable of storing information. An encryption key is provided, wherein the encryption key comprises a public key and a private key. An optically variable device (OVD) in a machine-readable format is created, wherein the OVD is associated with the public key. A payload of data is generated for storage in the storage element. At least a portion of the payload is encrypted with the private key, and the encrypted payload is transmitted to at least one location on the identification document. At least a portion of the payload may be based on data randomly selected from data stored in the storage element or encrypted from data stored in the storage element.The storage element may include an optically variable element (OVD), optical storage media, a hologram, a kinegram, an exelgram, a pixelgram, a three-dimensional barcode, a two-dimensional barcode, a magnetic stripe, and a chip. Transmitting the encrypted payload may include at least one of embedding, digitally watermarking, printing, and encoding encrypted data at at least one location on the identification document.

[0009] WO 2020 / 004633 A1 describes an authentication body comprising a sheet-shaped lamination sheet having a first region formed in the lamination sheet in which personal identification information is recorded, and a second region formed in the lamination sheet having a hologram structure in which verification data associated with first individual information is recorded.

[0010] Furthermore, it must be ensured that the optically detectable personal data of the document have not been tampered with or that any such tampering can be identified quickly and reliably. Subject of the invention

[0011] The invention is based on the object of creating an improved method for generating an electronic document template for a valuable or security document.

[0012] The objects underlying the invention are achieved with the features of the independent patent claims. Embodiments of the invention are specified in the dependent claims. The embodiments listed below can be freely combined with one another, provided they are not mutually exclusive.

[0013] In one aspect, the invention relates to a computer-implemented method as defined in claim 1 for generating an electronic document template for a value or security document.

[0014] Embodiments can have the advantage of making it possible to ensure, even during the design of such documents, that an integrity check of the finished document using an optical reader can actually be ensured, in particular with acceptable error probabilities. This ensures that the finished document is optimized for the optical reader, thereby preventing important features of the document from being reliably recognized. A design process is provided that considers the system comprising the document and the inspection or reading device, so that the capabilities and limitations of the optical reader and the manufacturing process can be considered right from the design stage.In particular, systematic pseudo-errors during processing in the field due to contradictory design of security features can be avoided.

[0015] Embodiments can have the advantage of allowing the available optical security features to be freely selected and combined during the design of the document layout using the database. If, during the design process, security features are instantiated in such a way that they spatially overlap or are adjacent to one another and simultaneously occupy a common channel, there is a risk that the optical reader will not be able to cleanly separate these security features from one another or capture them in isolation. For example, the optical reader will only be able to capture an overlay of the corresponding security features, from which it cannot individually extract the underlying security features. For example, in this case, one or more of these security features may not be captured or may not be fully captured by the optical reader.

[0016] During a validity check of the document, there is a risk that the corresponding security features would be classified by the optical reader as incomplete or missing altogether. Thus, the security features, although present and valid, would be classified as invalid by the optical reader, which could result in the document containing the security features being incorrectly classified as invalid.

[0017] If the relevant security features were neglected or disregarded during a validity check due to the risk of false rejection, the effort involved in incorporating the relevant security features into the document would be in vain. Furthermore, ignoring security features would compromise the security level of the document in question, and the security of the document in question could be compromised. In particular, there would be an increased risk of false acceptance of an invalid document that does not include the relevant security features at all, or includes them in an incomplete and / or incorrect form. However, if the relevant security features are assumed to be necessary to confirm the validity of the document, the document would not be validatable or verifiable using a corresponding optical reader.A successful validity test would either be impossible from the outset or at least prone to failure, as there would be a high probability of false rejection.

[0018] For a security feature, it may be necessary for the optical reader to detect the presence of a plurality of predefined characteristic details of the security feature to be checked. For example, the security feature is compared with a reference template. If the match is sufficient, i.e., if the detected security feature and / or the detected characteristic details of the security feature match the reference template, the security feature is classified as present or valid. A match can, for example, include identity and / or a match within a predefined tolerance range.

[0019] Embodiments can have the advantage that, for a given optical reader or for a given optical reader type, it can be checked during the course of a layout design whether the instantiated security features can actually be detected during a validity check with the corresponding optical reader or the corresponding optical reader type. If the check of the layout design is positive, i.e. no potentially problematic security feature combinations are detected, the checked layout design is saved as an electronic document template. If the check is negative, i.e. if instantiated security features are identified during the check which the reader cannot individually resolve and therefore cannot check, a correction of the layout design is initiated and the resulting corrected layout design is saved as an electronic document template.

[0020] For example, the resulting corrected layout draft is saved as an electronic document template after a correction. For example, a positive review result is a prerequisite for saving the resulting corrected layout draft. In the case of a negative review result, the review and correction can be repeated several times in succession until the review of the corrected layout draft is positive and it is saved as an electronic document template without further correction.

[0021] Embodiments can have the advantage that, before a document is produced, it can be ensured that all security features of the corresponding document can be validated or verified with the optical reader intended for checking the document. In particular, validation tests of the corresponding document with one or more corresponding optical readers intended for validating or verifying the corresponding document are unnecessary. Rather, corresponding validation tests can be replaced by testing the layout design before the physical document is produced.

[0022] According to embodiments, it is provided that the optical reading device has a given optical resolution and the checking of the layout design is carried out such that it is performed for adjacent regions of the layout design that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout design is carried out such that it is performed for adjacent instantiated types of security features that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout design is carried out such that it is performed for overlapping regions of the layout design that cannot be spatially resolved by the optical reading device. According to embodiments, it is provided that the checking of the layout design is carried out such that it is performed for overlapping instantiated types of security features that cannot be spatially resolved by the optical reading device.

[0023] Embodiments can have the advantage that the optical resolution of the optical reader is taken into account when checking the layout design. Using the optical resolution of the optical reader, for example, areas of the layout design and / or instantiated security features included in the layout design can be identified for which a check is relevant. As long as the resolution of the optical reader is sufficient to capture two instantiated security features as separate security features or areas of the layout design comprising two security features as separate areas, the capture and validation or verification of the corresponding security features is not disrupted, for example, by the security features occupying the same optical channel. The spatial separation can, for example, be sufficient to separate the corresponding security features.On the other hand, if the optical resolution is not sufficient for spatial separation, separation can be achieved, for example, by using different optical channels.

[0024] For example, the document to be produced is a multi-layer document composed of multiple layers. For example, the layout design defines multiple layers in which the security features are instantiated. For example, security features are instantiated in different layers, i.e., at different levels, of the layout design. Security features that overlap or are arranged on different levels in overlapping areas of the layout design cannot be spatially separated by the optical reader, for example.

[0025] According to embodiments, one or more of the channels are reader-specific channels, each assigned to one or more optical reader types. According to embodiments, the method further comprises selecting one or more of the reader types for which the layout design is checked. The check to determine whether spatially overlapping or adjacent instantiated types of security features occupy a common channel is carried out in a reader-type-specific manner. This means that only common channels assigned to a common reader type are considered. If overlapping or adjacent instantiated types of security features occupy the same channel, but each for different reader types, for example, no signal is output and therefore no correction is entered.

[0026] Embodiments may have the advantage that a layout design can be tested for a plurality of different optical reader types. It can thus be ensured that the instantiated security features can be captured by all optical readers of the plurality of different optical reader types and used for document validation or verification.

[0027] According to embodiments, the production of the value or security document according to the electronic document template is subject to manufacturing tolerances with regard to the spatial arrangement of the instantiated optical security features. These manufacturing tolerances are incorporated into the determination of the overlapping or adjacent areas that cannot be spatially resolved by the optical reader. For example, these manufacturing tolerances are incorporated into the determination of overlapping or adjacent security features that cannot be spatially resolved by the optical reader.

[0028] Tolerances can occur not only on the receiver side, for example, in the form of the resolution of the optical reader, but also on the transmitter side. Transmitter-side tolerances include, for example, manufacturing tolerances of the security features. Embodiments can have the advantage that the transmitter-side influence of the manufacturing tolerances of the instantiated security features on the detectability or separability of security features that occupy the same channel can be taken into account when reviewing the layout design.

[0029] According to embodiments, it is provided that the types of optical security features in the database are each assigned a validation error rate when checked for validity by the optical reader if the security feature in question occurs sporadically, and wherein the method calculates an overall validation error rate for the layout design and / or the resulting corrected layout design. Embodiments can have the advantage that an overall validation error rate for the layout design can be calculated based on the validation error rates of the individual instantiated security features. For example, checking the layout design can include checking the overall validation error rate. If an overall validation error calculated for a layout design exceeds a predefined threshold, a signal is output, and a correction of the corresponding layout design is input in response to the signal.The resulting corrected layout draft is saved, for example, as the electronic document template. For example, the validation failure rates of the individual instantiated security features are summed to calculate the overall validation failure rate. The validation failure rates are, for example, false acceptance rates (FARs) and / or false rejection rates (FRRs). The overall validation failure rate is, for example, an overall false acceptance rate or an overall false rejection rate. For example, an overall false acceptance rate and an overall false rejection rate are calculated.

[0030] According to embodiments, it is provided that the channels are selected from the group formed by frequency channels, tilt angles, excitation wavelengths, color impressions and combinations thereof. A channel can be defined, for example, by a frequency or a frequency range in which security features are detected. A channel can be defined, for example, by a tilt angle of a surface of the document relative to a plane assigned to the optical reading device, under which plane security features are detected. The assigned plane is, for example, an image plane. The tilt angle defines, for example, a relative tilt of the surface of the document, i.e. the object plane, relative to the image plane. A channel can be defined, for example, by one or more wavelengths and / or wavelength ranges with which security features are excited.A channel can, for example, be defined by a color impression with which security features are detected.

[0031] According to embodiments, it is provided that the optical security features are selected from the group formed by guilloches, micro-writing, metameric systems, printing with fluorescence, phosphorescence and / or up-conversion inks, printing with infrared ink, barcodes, in particular one- or two-dimensional barcodes, optically variable inks, transparent or reflective holograms or kinegrams, watermarks, in particular digital watermarks that carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibers, security threads, micro-perforations and combinations thereof.

[0032] According to embodiments, the method additionally comprises an optimization of the document template, preferably with the aid of an optimization algorithm using an ROC curve or a performance curve, taking manufacturing tolerances into account. For example, a function to be optimized is defined, which defines a property of the layout design, such as the detectability of individual security features or an overall error rate. For example, the defined function is an ROC curve or a performance curve. The corresponding function can be defined, for example, taking manufacturing tolerances of the instantiated security features and / or the resolution of the optical reader into account. The corresponding function is minimized or maximized as an objective function during the execution of the optimization algorithm.

[0033] Embodiments can have the advantage that the layout design and thus the document template can be optimized. In other words, parameters of the instantiated security features can be automatically optimized, and the result of the optimization can be used to correct or adapt the layout design. For example, a distance between security features that occupy the same channel can be optimized. For example, the distance is minimized to a minimum distance at which the corresponding security features can just be separated by the optical reader. For example, manufacturing tolerances of the security features and / or the resolution of the optical reader are taken into account.

[0034] According to embodiments, it is provided that the method additionally comprises a placement and scaling of security features to which multivariate separate channels are assigned, preferably combining the excitation wavelength and color impression channels, in order to optimize the document template.

[0035] Embodiments can have the advantage that the placement and scaling of the security features are taken into account during optimization. For example, a distance between security features can be adjusted and thus optimized by adjusting the placement and / or scaling of one or more of the corresponding security features. The corresponding security features are security features that occupy the same channel. For example, the corresponding security features are security features that occupy separate channels. The channels are, for example, multivariate channels. The optimization of the document template with regard to the placement and scaling of security features can, for example, aim to prevent crosstalk between separate channels.

[0036] According to embodiments, the method further comprises producing the valuable or security document using the electronic document template. The electronic document template is made available, for example, to a production system for documents, such as valuable or security documents. For example, the production system comprises an electronic design system on which the document template is created. For example, the document template is sent from the design system to the production system via a network. For example, the document template is made available to the production system on a removable storage medium.

[0037] The electronic design system comprises, for example, a printing system for printing the document. If the document is a personalized document, such as an identification document, the design system comprises, for example, a personalization system for personalizing a document blank to produce the corresponding personalized document, such as a personalized valuables or security document. According to embodiments of the invention, the document body can comprise a plurality of material layers, wherein one or more of the material layers are each individually personalized. For example, all material layers of the plurality of material layers are each individually personalized. For example, the plurality of material layers comprises one or more material layers that are not personalized.The plurality of material layers are, for example, combined to form the document body after personalizing the one or more material layers. For example, the plurality of material layers are laminated to form the document body from the plurality of material layers. The resulting document body thus comprises one or more individually personalized material layers. For example, all material layers of the resulting document body are individually personalized. For example, the resulting document body comprises one or more material layers that are not personalized. According to embodiments of the invention, the document body can consist of several material layers, each of which is individually personalized and then laminated to form the document body from the personalized layers.For example, the personalization system is configured to incorporate personalization data into the document blank to be personalized. The personalization data includes, for example, attributes of a document owner, such as a name, address, etc. Furthermore, the personalization data includes, for example, biometric data of the owner, such as a facial photograph or fingerprint data. For example, the personalization data is printed on the document or on a document layer. For example, one or more of the security features each include personalization data of the owner. For example, the printing system includes the personalization system for printing personalization data. For example, the document includes a memory in which the personalization system stores the personalization data.

[0038] For example, the document is a composite body comprising a plurality of material layers or material sheets. For example, the security features are arranged on one or more of the material layers. For example, security features are incorporated into one or more of the material layers. For example, security features are printed on one or more of the material layers. During the production of the document, the plurality of material sheets are arranged one on top of the other, for example in a document-specific sequence, to form a material sheet booklet, from which a composite body is created, for example by lamination.

[0039] For example, one or more of the security features include data required to access a memory contained in the document.

[0040] For example, one or more of the checked security features is a security feature that includes corresponding data. The optical reader, for example, captures the corresponding security features. A data reader comprising the optical reader extracts the corresponding data from the captured security feature. Using the corresponding data, the data reader derives, for example, a cryptographic key. The data reader uses this cryptographic key when executing a cryptographic protocol to unlock the document's memory, i.e., to gain access to the memory from which the data reader reads data using a contact or contactless communication interface.

[0041] In a further aspect, the invention relates to an electronic document template defined in claim 10 for a value or security document, generated using a method according to the invention.

[0042] This description further discloses an unclaimed valuable or security document produced using such a document template. The valuable or security document comprises, for example, a multilayer composite body.

[0043] This description further discloses an unclaimed document, in particular a valuable or security document, comprising an integrated electronic circuit and an electronic memory for storing data requiring protection and means for executing a cryptographic protocol, and having an interface to a data reader which enables the data reader to access the data requiring protection after execution of the cryptographic protocol.

[0044] This description further discloses that the execution of the cryptographic protocol is only possible using an optical security feature of this document.

[0045] In a further aspect, the invention relates to an electronic design system for document templates as defined in claim 11, comprising a processor and a memory device in which a computer program is stored, the execution of which by the processor causes a method according to the invention to be carried out.

[0046] In a further aspect, the invention relates to a manufacturing system for value or security documents as defined in claim 12, comprising an electronic design system according to the invention and a printing system for value or security printing and / or a personalization system for personalizing document blanks for producing the value or security documents.

[0047] According to preferred embodiments, the method is a process for creating a test-optimized document layout, the basis of which is preferably the representation of all features based on supports, occupied reception channels and test characteristics.

[0048] This process makes features, forms, and / or production data available in databases. The desired layout is created, and the user can be supported in the process. Within a test routine, the local occupancy of all channels and the expected performance are analyzed using an ROC curve or a merit function. If the result is process-reliable, the layout can be used, and the existing data is preferably sent directly to prepress or a printing system for printing the document. Otherwise, there is the option of rework until the target is achieved. For example, an iterative repetition of corrections and testing of the layout draft takes place until the check for potentially problematic feature combinations is positive and no problematic feature combinations are found.The testing routine preferably also includes tests on the maximum area and channel occupancy of the document, the ratio of personal data to static features and purely aesthetic emblems, e.g. design elements, an estimation of the processability and the expected false acceptance rate (FAR("False Acceptance Rate") value) and the false rejection rate (FRR("False Rejection Rate") value) in the field based on known external data and performance curves, on manufacturability due to area occupancy and use of special materials and / or on the expected costs of the final document.

[0049] In the context of the description of the present invention and its embodiments, the following terms are defined as follows: A "document" is a physical object, for example, a paper-based or plastic-based card with or without an integrated circuit, such as a chip, which verifies an identity or a property or right of the document holder. A document can, in particular, be a valuable or security document. Examples of valuable documents are banknotes. An identity document is a document that contains information regarding the identity of its owner (name, address, facial image, signature, etc.). An identity document can, for example, be an identity card, a passport, an employee ID card, or a personalized valuable document (e.g., a credit card).Documents often contain security features such as facial images, holograms, checksums, cryptographic keys or the like.

[0050] A "document template" is a data object stored electronically on a design system with which a document can be created whose properties are determined by the document template.

[0051] A "layout element" is an element of a document's or document template's layout that has optical security features. Different types of layout elements have different optical security features or combinations of such security features.

[0052] "Optical security features" are properties of a document that can be used to verify the authenticity or integrity of a document using an optical reader that incorporates such security features. Examples of such security features include guilloches, micro-lettering, metameric systems, printing with fluorescent, phosphorescent, and / or up-conversion inks, printing with infrared inks, barcodes, especially one- or two-dimensional barcodes, optically variable inks, transparent or reflective holograms or kinegrams, watermarks, especially digital watermarks that carry machine-readable information, registration printing elements, especially see-through registrations, see-through windows, mottled fibers, security threads, micro-perforations, and combinations thereof. A feature occupies one or more channels depending on the definition (CMYK vs. RGB).A feature has a surface that serves as a support to apply the feature and display it undisturbed. A feature has a structure for each channel that must be inspected. Features are stored in a database with information on occupied channels, surface characteristics, structure, and inspection conditions. Features can generally be arranged arbitrarily in the layout, although overlapping features may be prohibited.

[0053] A "database" is understood here as a container and / or system for storing and managing electronic data. The database is preferably a document-external database that stores the image reference data and optionally also other reference data for a large number of documents. A database can therefore be designed, for example, as a directory or directory tree. However, a database is preferably a database system designed to store large amounts of data efficiently, consistently, and permanently, and to provide required subsets in different, needs-based presentation formats for users and application programs. Depending on the embodiment, a database system consists of two parts: the management software, called a database management system (DBMS), and the set of data to be managed, the database (DB) in the narrower sense, sometimes also called a "database."The management software internally organizes the structured storage of the data and controls all read and write access to the database. A database system provides a database language for querying and managing the data. Examples of databases include a feature database (channels, supports, characteristics), a form database (forms, data groups), and a manufacturing database (manufacturing tolerances, process limits).

[0054] An "optical reader" is a device for optically capturing a document, in particular for optically capturing a security feature of such a document.

[0055] A "data reader" is a device for reading data from an electronic memory. A data reader can be integrated with an optical reader in a reading device, such as a terminal.

[0056] A "channel for optically capturing a security feature" is defined by the specific optical properties of a security feature. Examples of channels in this sense include frequency channels, flip angles, excitation wavelengths, color impressions, and combinations thereof. Typically (e.g., according to the "ICAO - Best Practice Guidelines for Optical Machine Authentication," Version 1.2, February 2018), images are captured in the visible, UV, and IR ranges. Extensions, particularly in the area of ​​holographic representations, are conceivable. This results in, for example, three channels in the visible range: VisR, VisG, VisB, i.e., red, green, and blue. The UV range can also be divided into sub-ranges. For example, the UV range is divided into three sub-ranges analogous to the visible channels VisR, VisG, and VisB, which are referred to as UVR, UVG, and UVB.The UV range with the longest wavelengths is called the "red" UV range (UVR), the middle UV range with medium wavelengths is called the "green" UV range (UVG), and the UV range with the shortest wavelengths is called the "blue" UV range (UVB). Furthermore, there are the IR channel and a holo channel. Since both static and personalized features can occur in each channel, this configuration results in a total of 16 channels.

[0057] "Channel separation" refers to the separate capture of optical security features by an optical reader. For example, different optical sensors can capture and process signals from different channels separately, or send them to separate processing. Channel separation is made more difficult by factors such as crosstalk. A feature typically occupies a certain number of channels. A yellow UV ink, for example, can occupy the UVG and UVR channels, while laser-engraved text occupies all channels. The requirement for separability means that features within the individual channels do not overlap or are too close to one another. An occasional exception is made for texts and codes that are decoded directly. These can be extracted from the corresponding channels using prior knowledge of a form, a decoder, and / or a characteristic.A formal description of the separability of two features M i and M j with the supports supp(M Channel< i ) or supp(M Channel< j ) then leads within a channel to a condition of the form: supp(M Channel< i ) ∩ supp(M Channel< j ) = Ø, where supp(M Channel< i ) = {x Channel< i , y Channel< i | M Channel 0} and x Channel< i or y Channel< i are the coordinates of image points in a two-dimensional document plane or detection plane.

[0058] "Crosstalk" is a term from telephony and originally refers to an effect that allows one to quietly overhear another conversation on the telephone—hence the name. Today, the term is generally used in communications engineering to describe the unwanted mutual interference between otherwise independent signal channels.

[0059] The "instantiation of selected types of optical security features" means the inclusion of representatives of such types of optical security features in a document template when designing that document template.

[0060] "Placement and scaling" refers to the local placement and selection of a specific dimensioning of an optical security feature in the layout of a document template during its instantiation.

[0061] A "document carrier layer of a valuable or security document" is a layer in, on or around the body of the valuable or security document that carries the information of the document, in particular its optical security features.

[0062] An "electronic representation of a document support layer" is the layout design of the document support layer of a document stored in a storage device of a document template design system.

[0063] A "layout design" is a data set that stores the instantiated optical security features of a document and their placement and scaling.

[0064] "Common channels" are channels that are assigned to more than one type of optical security feature in a database that assigns channels to different types of optical security features.

[0065] An "input of a layout draft correction" is the new input of a corrected layout draft or the correction of an existing layout draft requiring correction by the designer (the "Designer") of the layout draft.

[0066] The "optical resolution of an optical reader" is the minimum distance between two structures, particularly security features, in a document layout that just allows spatial resolution (separation) of these two structures in an image captured by this optical reader. The resolution is quantified, for example, by specifying an angular separation or angular resolution, or by specifying a distance between structures that are just barely separable.

[0067] "Manufacturing tolerances" here are unwanted deviations of the actual values ​​of layout parameters such as positions, sizes or optical features from the target values ​​of these layout parameters.

[0068] A "verification error rate" (also known as error rate, error quotient, error density, error quota, or error frequency) is the relative proportion of defective elements in relation to the total when verifying documents or document templates, i.e., the relative frequency with which an error occurs. A distinction is often made between false positive and false negative verification results. For example, each type of optical security feature in the database is assigned a verification error rate when checking for validity using the optical reader.

[0069] An "overall verification failure rate" for a layout design and / or a resulting layout is calculated from the individual verification failure rates of the security feature types instantiated in the layout (design) according to the rules of probability theory. A layout is created and represented in test channels. Based on known performance experience (ROC curve or similar), an expected value for field tests is created. Manufacturing-specific know-how can also be taken into account when arranging features (e.g., color coverage). Biometric features, in particular, can be given special weighting.

[0070] A "ROC curve" (ROC: receiver operating characteristic), also called a limit optimization curve or isosensitivity curve, is a method for evaluating and optimizing analysis strategies. The ROC curve visually represents the relationship between efficiency and error rate for different parameter values. It is an application of signal detection theory.

[0071] The ROC curve can be used to find the best possible value for a parameter, for example, in a dichotomous (semi-)quantitative trait or two-class classification problem. For each possible parameter value (e.g., transmission speed, frequency, etc.), the resulting relative frequency distributions are determined in the form of sensitivity (true positive rate) and false positive rate. In a diagram or digitally stored table, the sensitivity (true positive rate) is preferably plotted as the ordinate ("y-axis") and the false positive rate as the abscissa ("x-axis"). The parameter value itself does not appear, but can be used as a label or digital label for the points. The result is typically a relationship that corresponds to a curved, upward-sloping curve.An ROC curve close to the diagonal indicates a random process: Values ​​close to the diagonal indicate an equal hit rate and false positive rate, which corresponds to the expected hit frequency of a random process. The ideal ROC curve initially rises (almost) vertically (the hit rate is close to 100%, while the error rate initially remains close to 0%), only then does the false positive rate increase. An ROC curve that remains significantly below the diagonal indicates that the values ​​were misinterpreted. The theoretical optimum (in the sense of a compromise between hit and error rates) of the tested value is then determined visually or computer-assisted from the contact point of a diagonally rising tangent with the ROC curve.

[0072] If the test values ​​are plotted (for example, as a function of the false positive rate) in the same graph, the threshold value is found as the perpendicular to the contact point of the tangent to the test value curve. Alternatively, the points on the curve can be labeled with the test value. The test value with the highest Youden index is calculated as sensitivity + specificity - 1.

[0073] A merit function, or performance function, is a function that measures the fit between data and a fitting model for a specific selection of parameters. By general convention, the performance function is small when the fit is high. For example, in a regression, parameters can be adjusted based on the value of the merit function until a smallest value is obtained, thereby producing an optimal fit of the corresponding parameters that results in the smallest value of the merit function. In other words, the corresponding parameters can be optimized by minimizing the merit function. The result of the corresponding optimization is optimal or optimized parameter values.

[0074] A Bayesian network or model, for example, is used to determine the influence of parameters of the instantiated security features of the layout design and / or parameters of the optical reader on the separability of the instantiated security features by the optical reader. A Bayesian network is a directed acyclic graph in which the nodes describe random variables and the edges describe conditional dependencies between the variables. Each node of the network is given a conditional probability distribution of the random variable it represents, which assigns random variables to the parent node. A Bayesian network serves to represent the joint probability distribution of all participating variables as compactly as possible by exploiting known conditional independences. The conditional (in)dependence of subsets of the variables is combined with a priori knowledge.If the value of some of the variables is known, i.e., if evidence is available, the conditional probability distribution of random variables with the given variables can be calculated using various algorithms, and thus inference can be performed. For approximate inference, for example, a Monte Carlo algorithm can be used.

[0075] A "frequency channel" is an optical channel defined by one frequency, by multiple frequencies, or by a spectrum of optical frequencies in or outside the visible range of electromagnetic radiation.

[0076] "Tilt angles" are important in connection with the tilt effect, which can be a potential security feature of valuable or security documents, especially banknotes. This can, on the one hand, make a particular part of the banknote appear different from different angles (different colors or motifs); on the other hand, different images can be projected onto the left and right eye to create a 3D effect. The tilt effect can be created using embossed printing or lenticular images; an important example is the so-called kinegram. A kinegram is a technology used to protect against counterfeiting banknotes, metal bars, passports, visas, and identity cards using the tilt effect. In security terms, it is referred to as an "OVD" (Optically Variable Device).Unlike holograms, which have three-dimensional elements, the mostly silvery-shiny kinegrams represent a two-dimensional sequence of movements. The name is derived from the term kinematics because, depending on the angle at which the kinegram is viewed, a clearly defined, film-like sequence takes place.

[0077] A channel defined by "excitation wavelengths" is defined by the wavelengths of the discrete or continuous spectrum of a light source used to illuminate a document in the optical reader. These excitation wavelengths do not have to be identical to the spectra emitted by the illuminated document. This is not the case, for example, with fluorescence, phosphorescence, and / or up-conversion inks.

[0078] A channel defined by "color impressions" is defined by the optical color impressions of an observer. The optical impression of an observer is the product of the reflection or remission, the illuminance, and the spectral sensitivity.

[0079] An "optical sensor" refers here to a sensor designed to capture one or more images of a physical object, e.g., a document or part of a document. The images can, in particular, be digital images. The optical sensor can, for example, be a camera or a video camera. The optical sensor can, for example, be designed to selectively capture light within a specific wavelength range, e.g., infrared light (IR light) or light in the wavelength range visible to the human eye (white light, daylight). The captured images are preferably digital images that are stored electronically and / or sent to a system that further processes the image.

[0080] A "facial image" is understood here to be an image, in particular a digital image, that depicts the face of a person.

[0081] A "digital image" is a data set in which image content is represented and stored. In particular, the digital image can be a data set in which the content of an image is represented by integers. In particular, the digital image can be a raster graphic.

[0082] A "system" here refers to a collection of one or more system elements capable of processing data. For example, a system can comprise a computer or a distributed computer system, e.g., configured as a cloud computing system. It is also possible for individual components of the system or the entire system to be implemented in dedicated hardware. For example, the testing system can be fully integrated into a terminal, which, in addition to one or more cameras, also includes one or more lighting systems and a copy of the database containing the reference data. However, it is also possible for individual components, such as the database, to be provided by a component external to the terminal, for example, via a database server connected to the terminal via a network connection. Short description of the characters

[0083] Embodiments of the invention are described below with reference to the figures. They show: Figure 1 a schematic diagram of an exemplary layout design of a document or document template, Figure 2 a schematic diagram of an exemplary assignment of channels to features; Figure 3 a flow chart of an exemplary procedure, Figure 4 a schematic diagram of an exemplary document with an integrated electronic circuit, Figure 5 a schematic diagram of an exemplary design system for generating electronic document templates and Figure 6 a schematic diagram of an exemplary manufacturing system for producing a document using an electronic document template.

[0084] As in the Figure 1Shown schematically and by way of example, an exemplary layout design 100 of a document 101 or an electronic document template has a plurality of layout elements. For example, the layout design 100 comprises a plurality of types of optical security features 104 to 108 that are instantiated in the layout design 100. The security features can be placed on the same level or layer of the document and scaled if necessary, or, in the case of a multi-layered document, on different layers arranged one above the other. An optical reader, for example, captures the top side of a corresponding document. The security features are distributed, for example, in a capture plane of a document carrier layer, which is spanned by two axes 102, 103 of an x, y coordinate system.One or more security features can, for example, be arranged in an overlapping manner, such as the exemplary security features 105 and 107 or 106 and 108 in the . Figure 1 . The optical security features may, for example, comprise textual features (text fields) 104 or other types of optical security features. Security features may, for example, be arranged adjacent to one another, such as the exemplary security features 107 and 108, so that they touch each other. Security features may also have completely disjoint carriers, such as the security features 106 and 105 or 107 and 106 in Figure 1 .

[0085] If overlapping optical security features, such as security features 106 and 108, occupy the same channel, there is a risk that an optical reader attempting to validate or verify a document with the corresponding instantiated security features will not be able to distinguish or separate the security features. For example, the optical reader may conclude that one or both security features are incomplete and therefore invalid. The same problem can occur, for example, with adjacent security features, such as security features 107 and 108. If the resolution of the optical reader is insufficient to resolve the boundary or a slight distance between the corresponding security features, the optical reader will also not be able to distinguish or separate these security features.In this case too, the optical reader could conclude that one or both security features are incomplete and therefore invalid.

[0086] As in the Figure 2 As shown schematically and by way of example, the optical security features M 1 and M 2 occupy different channels. The optical security feature M 1 is assigned, for example, to the channels with channel numbers 6 and 11, while the optical security feature M 2 is assigned, for example, to the channel with channel number 5. The optical security features M 1 and M 2 are, for example, security features which have completely disjoint carriers, i.e. they occupy completely overlapping and contact-free (disjoint) areas of the layout design. The channel numbers are plotted on the vertical axis 201. The horizontal x- and y-axes 203 and 202 respectively span the detection plane.

[0087] As in the Figure 3Shown by way of example and in a schematic manner, the exemplary method for generating an electronic document template for a value or security document comprises the following steps: In step 301, a database DB is made available. The database assigns different types of optical security features to one or more channels for optical capture using an optical reader. The corresponding optical reader is designed, for example, to separate the channels. In step 302, one of a plurality of types of optical security features is selected from the database. During their instantiation, the selected optical security features are placed on an electronic representation of a document carrier layer of the document to be designed, for example a value or security document, to generate a layout draft and are scaled if necessary.

[0088] The layout draft created in this way with the instantiated optical security features is checked in step 303. During the check, a check is carried out for spatially overlapping or adjacent instantiated security features to determine whether they occupy a common channel. If the result is negative and the check reveals that potentially problematic overlapping or adjacent security features are present, a correction to the design takes place in step 304. For example, a signal is output or sent which identifies potentially problematic combinations of security features. In response to the corresponding signal, a correction to the layout draft is input or received, for example. For example, the signal is displayed on a display device of a user interface in the form of a conflict indication which identifies the potentially problematic combinations of security features.For example, correction commands are received via an input device of the user interface. Correcting problematic combinations of security features can, for example, comprise spacing the corresponding security features on the document carrier layer from one another. The spacing is chosen, for example, such that the corresponding security features can be separated from the corresponding reader, taking into account manufacturing tolerances and / or the resolution of the optical reader, even though they occupy the same channel. A corresponding complaint can, for example, be made by adjusting the placement of the security features and / or by rescaling the security features, in the course of which they are reduced in size. Furthermore, the correction can comprise replacing one or more of the security features with security features of a different type that occupies a different channel.Finally, a correction may involve omitting or removing one of the instantiated security features from the layout design.

[0089] For example, the conflict notification may include one or more automatically generated correction suggestions. The correction suggestions may, for example, be created and output in a hierarchical order. Where possible, a first suggestion may, for example, suggest a change in the placement of instantiated security features; a second suggestion may, for example, suggest a change in the scaling of instantiated security features; a third suggestion may, for example, include replacement suggestions for replacing instantiated security features with security features of a different type that occupies a different channel; and a fourth suggestion may, for example, suggest removing one or more of the instantiated security features. The input received in response to the conflict notification identifies, for example, one of the correction suggestions to be implemented to correct the layout design.Upon receipt of the corresponding input, the layout draft will be corrected according to the input.

[0090] According to embodiments, the checking and correction steps 303, 304 can, for example, also be integrated into the selection step 302, i.e., executed during the creation of the layout design. For example, a corresponding check is performed during the instantiation of each of the security features. If an optical security feature is selected and arranged on the electronic representation of the document carrier layer, a check is performed, for example, to determine whether this optical security feature overlaps another optical security feature or is adjacent to another optical security feature that occupies the same channel as the selected security feature. If this is the case, a signal with a conflict indication is output.For example, potentially conflicting security features are highlighted visually, for example, in color, in a visual representation of the electronic representation of the document carrier layer on the output device of the user interface. For example, one or more correction suggestions for resolving the conflict are also displayed. This could have the advantage of allowing the layout draft to be corrected step by step during its creation. This ensures that the completed layout draft is conflict-free and can be saved as a document template in step 305 without further corrections.

[0091] For example, after each correction of the layout design in step 304, the check according to step 303 is repeated to check whether the correction has resolved all conflicts regarding overlapping or adjacent security features of the same channel. This may allow the correction of the layout design to be performed iteratively.

[0092] If the check in step 303 is positive, i.e., there are no overlapping or adjacent security features of the same channel, the layout draft is saved as an electronic document template in step 305. The saved layout draft can be an unchanged layout draft if the check in step 303 was positive, i.e., no conflicts occurred, or a layout draft that has been corrected one or more times if conflicts were found and corrected in previous check steps.

[0093] As in the Figure 4Shown schematically and by way of example, an embodiment of a document 101, such as a valuable or security document, comprises an integrated electronic circuit 402. The integrated electronic circuit 402 comprises, for example, an electronic memory 403 for storing data requiring protection and a processor 404, which is configured to execute a cryptographic protocol 407. The cryptographic protocol 407 is implemented, for example, in the form of executable program instructions. Furthermore, the document 101 comprises a communication interface 405 for communication with a terminal 411 or with a communication interface 415 of a terminal 411 configured as a data reader or comprising a data reader. Finally, the document 101 comprises a plurality of optical security features 408, which are generated, for example, using a method according to the Figure 3generated electronic document template, in which document 101 was instantiated. The plurality of optical security features 408 comprises, for example, different types of optical security features that occupy different channels or can be captured via different channels.

[0094] The exemplary terminal 411 comprises, for example, an electronic circuit 412 with an electronic memory 413 for storing data, as well as a processor 414 configured to execute a cryptographic protocol 417. The cryptographic protocol 417 is implemented, for example, in the form of executable program instructions. Furthermore, the terminal 411 comprises, for example, a communication interface 415 for communicating with the document 101 or with the communication interface 405 of the document 101. Finally, the terminal 411 comprises an optical reader 416 or optical sensor for detecting optical security features 408 of the document 101. The optical reader 416 is configured to detect optical security features using different channels.For example, the optical reader 416 comprises a plurality of different optical sensors, each configured to detect optical security features via different channels. For example, the optical reader 416 comprises one or more optical sensors, each configured to use a plurality of channels to detect optical security features.

[0095] For example, the processor 414 of the terminal 411 is configured to control the optical reader 416 to capture the plurality of optical security features 408. The captured security features 408 are checked for their validity by the terminal 411. For example, the captured optical data of the security features 408 are compared with reference data stored in the memory 413 of the terminal. If there is a sufficient match between the captured optical data and the stored reference data, the security features 408 and thus the document 101 are classified as valid and authentic. For example, one or more of the security features 408 comprise data extracted by the terminal 411 from the data captured by the optical reader 416.Using the extracted data, the processor 414, during the execution of the cryptographic protocol 417, derives, for example, a cryptographic key that unlocks the document 101 and allows the terminal 411 access to the sensitive data in the electronic memory 403 of the document 411. Using the derived key, the terminal 411 can verify that the document 101 is actually available for optical inspection. Thus, secret reading attempts, for example, without the owner intentionally presenting the document 101 for this purpose, can be prevented.

[0096] For example, the terminal must additionally present an authorization certificate that defines the access rights of terminal 411. For example, the authorization certificate specifies data categories for which terminal 411 has read rights. For example, terminal 411 sends the authorization certificate to communication interface 405 of document 101 via communication interface 415 during authentication against document 101. Furthermore, terminal 411 demonstrates, for example, using a challenge-response method, possession of a private cryptographic key, the corresponding public cryptographic key of which is assigned to the read rights defined in the authorization certificate.If terminal 411 can present its read authorization and / or the key derived from security features 408, it receives, for example, read access to the sensitive data in memory 403 of document 101 and can read it via communication interfaces 405, 415. Document 101 checks the data presented by terminal 411 to verify access or read authorization, for example, by processor 404 using cryptographic protocol 407.

[0097] As in the Figure 5Illustrated schematically and by way of example, one embodiment of an electronic design system 500 for generating electronic document templates comprises, for example, a processor 502 configured to execute program instructions 504 of a computer program for generating an electronic document template for a valuable or security document. Furthermore, the electronic design system 500 comprises, for example, a storage device 503 and a communication interface 504. Furthermore, the electronic design system 500 comprises, for example, an output device 505, such as a display, and input devices 506, such as a mouse and / or keyboard. Furthermore, the electronic design system 500 has, for example, access to a database 507.The database 507 can, for example, be comprised of the storage device 503 of the electronic design system 500, or it can be a remote database that the electronic design system 500 accesses via the communication interface 503 and, for example, a network, such as an intranet or the Internet. For example, different types of optical security features T1, T2, T3, ..., TN are stored in the database 507. For example, one or more channels K1, K2, K3 for optically capturing the respective security feature using an optical reader are each assigned to the different types of optical security features T1, T2, T3, ..., TN. For example, different channels for optical capturing can be assigned to the different types of optical security features T1, T2, T3, ..., TN for different types of optical readers.For example, the database 507 can further include information on the manufacturing tolerance of the optical security features T1, T2, T3, ..., TN and / or the resolution of the optical reader(s). Finally, the database 507 can include information on inspection error rates for the various types of optical security features T1, T2, T3, ..., TN, such as false acceptance rates and / or false rejection rates. For example, the inspection error rates of the various types of optical security features T1, T2, T3, ..., TN are each assigned to a specific type of optical reader or apply only to the corresponding type. Corresponding information can also be stored in different databases, for example.For example, in addition to database 507, which may be a feature database, electronic design system 500 may have access to a separate form database that provides form specifications for documents to be produced, such as specifications for the content arrangement and structuring of document data, as well as for data groups that the corresponding document should contain. Furthermore, electronic design system 500 may, for example, have access to a separate manufacturing database that includes, for example, information on manufacturing tolerances and / or process limits.

[0098] The electronic design system 500 is configured to enable a user to select a plurality of types of optical security features T1, T2, T3, ..., TN from the database 507, as well as to instantiate the selected types by placing and scaling security features of the selected types on an electronic representation of a document carrier layer of a valuable or security document to generate a layout design. For this purpose, the user can make inputs via the input devices 506, the result of which, for example in the form of the layout design, is displayed to the user via the output device 505. The electronic design system 500 is further configured to perform a layout design check. For example, for spatially overlapping or adjacent types of instantiated security features, a check is performed to determine whether they occupy a common channel.If this is the case, a signal is output, for example via the output device 505, and an input of a correction of the layout design is received in response to the signal via the input devices 506. The resulting corrected layout design is stored, for example, as an electronic document template for producing a corresponding document, ie, a valuable or security document, in the storage device 503.

[0099] As in the Figure 6 Shown schematically and by way of example, an embodiment of a manufacturing system 600 for valuable or security documents 101 comprises an electronic design system 500, such as Figure 5,. Furthermore, the production system 600 has, for example, a printing system 602 for value or security printing. The electronic design system 500 provides the electronic print template to the printing system 602. Furthermore, material sheets 601 are provided for producing the document 101. The printing system 602 prints the material sheets 601 according to the specifications of the electronic print template. In the case of a multi-layer document, these material sheets 601 are combined, for example, into a material sheet booklet, from which the document 101 or the document body of the document 101 is produced, for example by lamination.If the document 101 is a personalized document assigned to an individual owner, the production system 600 further comprises, for example, a personalization system 604 for personalizing document blanks 605 to produce personalized documents 101, such as valuable or security documents. For example, during the personalization process, personal or individual data of the owner are printed on the document blanks 605 or one of the material sheets 603. In this case, the personalization system 604 can be integrated into the printing system 602, for example. Additionally or alternatively, the personalization system 604 can enter the owner's personal or individual data into an electronic memory of the document blank 605. List of reference symbols

[0100] 100Layout design 101Document 102y-axis of a coordinate system in the document layer 103x-axis of a coordinate system in the document layer 104Text field, security feature in text form 105 to 108optical security features M 1 6,11< optical security feature 1 with channels 6 and 11 M 2 5< optical security feature 2 with channel 5 201Axis of the channel numbers 202y-axis of a coordinate system in the document plane 203x-axis of a coordinate system in the document plane 301 to 305Procedure steps DBDatabase 402Integrated circuit 403Memory 404Processor 405Communication interface 407Cryptographic protocol 408Optical security features 411Terminal 412Circuit 413Memory 414Processor 415Communication interface 417Cryptographic protocol 416Optical reader 500Electronic design system 501Processor 502Program instructions 503Storage device 504Communication interface 505Output device 506Input device 507Database T1 to TNTypes of security features K1 to KNChannels 600Production system 600 601Material sheet 602Printing system 604Personalization system 605Document blank,

Claims

1. A method for generating an electronic document template for a value or security document, comprising the following steps: - providing (301) a database (DB), in which different types of optical security features are each assigned one or more channels for optical sensing of the security feature in question by means of an optical reading device, wherein the optical reading device is configured for separation of the channels, - selecting (302) a plurality of types of the optical security features from the database and instantiating the selected types in each case by placing and scaling security features of the selected types on an electronic representation of a document substrate layer of the value or security document in order to generate a layout draft, - checking (303) the layout draft, wherein, for spatially overlapping or mutually adjoining instantiated types of security features, it is checked whether these occupy a common channel, and - if this is the case, outputting a signal and inputting a correction (304) of the layout draft as a response to the signal, and - storing (305) the resulting corrected layout draft as the electronic document template.

2. The method according to claim 1, wherein the optical reading device has a given optical resolution, and wherein the layout draft is checked in such a way that the check is carried out for overlapping or adjacent regions of the layout draft that are spatially non-resolvable by the optical reading device.

3. The method according to claim 2, wherein the production of the value or security document according to the electronic document template is subject to manufacturing tolerances in respect of the spatial arrangement of the instantiated optical security features, wherein these manufacturing tolerances are included in the determination of the overlapping or adjacent regions that are spatially non-resolvable by the optical reading device.

4. The method according to any one of the preceding claims, wherein the types of optical security features in the database are each assigned a checking error rate when checking validity by the optical reading device, if the security feature in question occurs in isolation, and with a calculation of an overall checking error rate for the layout draft and / or the resulting corrected layout draft.

5. The method according to any one of the preceding claims, wherein the channels are selected from the group that is formed by frequency channels, tilt angles, excitation wavelengths, colour impressions, optical resolution and combinations thereof.

6. The method according to any one of the preceding claims, wherein the optical security features are selected from the group formed by guilloches, microlettering, metamerism systems, imprints with fluorescence, phosphorescence and / or up-conversion colours, imprints with infrared colour, barcodes, in particular one- or two-dimensional barcodes, optically variable colours, transparent or reflective holograms or kinegrams, watermarks, in particular digital watermarks which carry machine-readable information, register printing elements, in particular see-through registers, see-through windows, mottled fibres, security yarns, microperforations and combinations thereof.

7. The method according to any one of the preceding claims, comprising an optimisation of the document template, preferably with the aid of an optimisation algorithm using an ROC curve or a performance curve under consideration of manufacturing tolerances.

8. The method according to claim 7, comprising a placement and scaling of security features assigned multivariate separate channels, preferably with combination of the excitation wavelength and colour impression channels for optimisation of the document template.

9. The method according to any one of the preceding claims, further comprising production of the value or security document using the electronic document template.

10. An electronic document template for a value or security document, generated by a method according to any one of the preceding claims.

11. An electronic draft system for document templates comprising a processor and a storage device, in which a computer program is stored, the execution of which by the processor causes a method according to any one of claims 1 to 9 to be performed.

12. A manufacturing system for value or security documents which uses an electronic document template generated by a method according to any one of claims 1 to 9, with an electronic draft system according to claim 11, comprising a printing system for the value or security print and / or a personalisation system for personalising document blanks for production of the value or security documents.

13. The manufacturing system for value or security documents according to claim 12, wherein the value or security documents in each case have an integrated electronic circuit (402) and an electronic memory (403) for storing protection-worthy data and means (404) for executing a cryptographic protocol, and with an interface (405) to a data reading device (406), which enables access by the data reading device to the protection-worthy data following execution of the cryptographic protocol.

14. The manufacturing system for value or security documents according to claim 13, wherein the execution of the cryptographic protocol is only possible with use of an optical security feature of the respective value or security document.