System, methods and apparatus for securing printed and displayed content.

Abstract

A system for concealing sensitive data in documents which will be printed or displayed on a screen involves replacing the sensitive data with an encrypted or redacted version so that the sensitive con

Description

Technical Field The present invention relates to securing printed and displayed content. Background Over many years the method of communications has been through speech and the written word. As technology has evolved communications have extended to print, photographs, videos and audio recordings both in physical and electronic form. Restricting who, what and where these communications can be interacted with, has been an ongoing issue and not until now solved. The challenges of managing, restricting and tracing individuals that are authorised to print, view and consume the information was further magnified during the COVID pandemic where people were working from home. There have been many incidents where top secret and sensitive documents have been mislaid by authorised personnel from the government and military. There have also been incidents where cameras with long range lenses have picked up sensitive information printed on documents held by authorised personnel outside restricted areas. There are also far more incidents within the commercial and consumer markets, such as medical, legal &biotech. These have possibly lesser impact on national security but have huge monetary impacts and risks to personal and commercial privacy through the unauthorised dissemination of trade secrets, and commercial and personal data. There have been secure print solutions that manages the physical printing process that reduces the risk of sensitive data being printed by an unauthorised person, printed pages being left in the printer and only starting printing if the printer has sufficient ink and paper etc. Current secure print solutions provide secure Cloud based servers that hold the content, printers that require an authorisation key, passcode or tag to validate the person at the printer and intelligent printing systems that ensure the printer has enough paper, ink and power to ensure that the printed document is complete, and no documents are left on the printer. However, once the document has been printed, the responsibility for safe keeping is now uniquely with the recipient, making tracing, locating, and restricting access to the content considerably harder. A considerable number of documents already exist containing redacted data, where the sensitive data is replaced with black blocking or printed with the sensitive data which is then manually redacted with a marker pen. Another high risk of both commercial and personal privacy leaks is people overseeing documents, presentations, reports, passwords and other sensitive information due to the prevalence of working on their laptops, tablets or phones on public transport. You have only to sit near somebody on their laptop, tablet or phone on a train, plane, boat or automobile to see how much sensitive data is exposed to prying eyes. You never know who could see the sensitive information on your screen when working outside your secure environment. There are privacy screens on the market that primarily work by directing or blocking light so that only a user directly in front of the screen sees a clear image. This can be achieved by external privacy filters, built-in screen technology, and specific adjustments to brightness and contrast. The disadvantage is that these technologies are expensive, require optimisation and the screen content can still be viewed by a person or device located behind the user, such in an aircraft or train. Many businesses and consumers experience scam printed and electronic documents, for example scam letters from bad actors impersonating HMRC, encouraging consumers through the document to apply for tax refunds. Many businesses and consumers experience scam printed and electronic QR, Barcode and other encoded quick response mechanisms. For example, QR codes are commonplace and used for multiple quick response applications such as application downloads, menus, product and service sign-ups and rapid configuration. One common scam is that of vehicle parking payments, where the move away from paying for parking with cash toward parking via a dedicated parking application on consumers mobile phone. These companies often place QR codes by the payment station to make the downloading of their mobile application easy. However, scammers place bogus QR codes over the official QR code which takes the consumer to the fraudulent website location where their personal details are captured. There is also no mechanism to inform the authorities and the business that their signage has been compromised and to take immediate action to prevent fraud. Many businesses and consumers experience the negative impact of counterfeit and fake products, for example fake perfumes may result in skin irritation, respiratory issues and contain toxic ingredients, counterfeit postage stamps can result in the receiver of the letter or parcel being charged for the postage while the sender did not knowingly purchase fake stamps and counterfeit car parts that may lead to injuries and even death. These and other illegal counterfeit trading may indirectly fund organised crime, result in intellectual property theft causing loss of revenue, health risks and reduced consumer satisfaction. The invention is made in this context. Summary of the Invention According to a first aspect of the present invention, there is provided a system, methods and apparatus for encoding sensitive elements of a document, the apparatus comprising a computer program, an authorised user that creates the document, marks the sensitive content, disguises, conceals and / or encrypts that sensitive content and then a printing device (e.g. printer, plotter, display, electronic document). The sensitive elements of the document are disguised, concealed and / or encrypted by methods of unique coding, printed within the document, using encryption for example ciphertext, markers, tags, redacts, blank spaces or encoded images similar to a QR or Bar Code type format. This in affect disguises, conceals and / or encrypts the sensitive elements of the document, rendering it useless to all unauthorised entities, be that a person, machine or AI device. All non-sensitive elements of the document can be printed as normal. In some embodiments according to the first aspect, a series of encoded dots / pixels are printed on the paper, display or within a document, representing the sensitive content, making it unreadable by unauthorised entities. In some embodiments according to the first aspect, a secure local or remote server / storage, that contains the sensitive document, or a subset containing the disguised, concealed or encrypted data, or information relating to the location within the document of the sensitive data, is provided to the printing or display apparatus. In some embodiments according to the first aspect, the sensitive data could be left blank, and the computer program or mobile application could read the incomplete printed document and compare that with the original complete document stored on the secure server or within local storage and simply populate the missing data on the display or audio feed on the revealing device as it’s scanned across the printed document. Although this could be seen to be the simplest solution, having blank spaces within a sensitive document could lead to the sensitive data being handwritten in the spaces after the authorised user has decoded the data, which in some cases defeats the purpose of secured printing. A compromise could be to use a combination and to populate the missing data with a random, dummy or meaningful reference code e.g. [XXXX] or [Ref ooi]. Those methods of disguising the sensitive content, through encryption, encoded dots, encoding, replacement, missing content, redacted or ciphertext can be performed in the Cloud and sent directly to the printer, be embedded within the secured document, be a customised font or be part of the printing device’s firmware. In some embodiments according to the first aspect, the encrypted data could represent the actual data e.g. text represented by a Barcode or QR type coding, where the decoding algorithm could be part of the local computer program or mobile application, the advantage being there is no external connection required. In some embodiments according to the first aspect, the sensitive data could be a simple reference code that identifies the missing data from within the original sensitive document, e.g. [Soldier ooi] is the reference code that is printed on the sensitive document, but the original sensitive document stored on the secure server or within local storage, provides the sensitive data as [Mr Jack Jones]. In some embodiments according to the first and second aspects, the encoder and decoder have their encryption keys generated by a trust centre that ensures that only authorised encoding and decoding devices can encrypt and then decrypt the sensitive data. According to the first and second aspects of the present invention, it is anticipated that a customised computer program and / or mobile application is created to ensure the secure integrity of the concealing and / or revealing processes. In some embodiments, according to the second aspect, the user would gain access to the revealing / scanning device using facial, fingerprint, password, multi factor authentication, then login to the secure server that contains the sensitive document or a subset containing the redacted or missing content. In some embodiments according to the second aspect, a device such as a mobile phone is used to run an application and containing for example front and back facing cameras, fingerprint sensor and Global Navigation Satellite System (GNSS), that utilises key user verification methods such as facial recognition, fingerprint recognition, location, password protection before decoding the disguised, concealed and / or encrypted data. According to the second aspect of the present invention, there is provided methods and apparatus for decoding the disguised, concealed and / or encrypted content and presenting the equivalent sensitive content to the authorised user. In some embodiments according to the second aspect, the user must maintain facial recognition during part or all the revealing process to ensure that somebody else is not looking over the authorised users’ shoulder and prying on the restricted document. In some embodiments according to the second aspect, a back facing camera captures the encrypted, image, encoded dots / pixels, coding, replacement, missing content, redacted or ciphertext, decrypts that content and displays the sensitive content on the revealing apparatus’ screen. In some embodiments according to the second aspect, while the back facing camera is decoding the encrypted, image, encoded dots / pixels, coding, replacement, missing content, redacted or ciphertext content, a front camera facing the user is validating their face, which ensures that only the authorised person can operate the revealing / scanning apparatus and at the same time read the sensitive content. In some embodiments according to the second aspect, the revealing device can utilise biometric data such as, but not limited to, facial images, dactyloscopic data (i.e. fingerprint), passwords, multifactor authentication, location etc. for the purpose of uniquely identifying a natural person as the authorised user. In some embodiments according to the second aspect of the present invention, there is provided a method comprising a scanning device that uses an image sensor e.g. camera, to read printed content, which can be read as normal on the display. When the revealing / scanning device’s camera is moved across the printed content and reaches the disguised, concealed and / or encrypted content e.g. encoded dots / pixels, coding, replacement, missing, redacted or ciphertext, it may validate the user’s biometric data, then once verified, decode the sensitive content and superimpose the decoded content on the screen as if it was just part of the non-sensitive content securely revealing the sensitive document to the authorised user. According to a second aspect of the present invention, where documents that are already printed containing aliases and / or with redacted, referenced, or missing information, the method of securely referring to the original unredacted document or indexed list of the sensitive information to reveal the redacted content, can be deployed to benefit vast numbers of currently printed or electronic documents. In some embodiments according to the second aspect of the present invention, the revealing apparatus could be smart display glasses or a VR headset, these will ensure that only the intended recipient can view the full content of the screen of a laptop, tablet, phone etc. The sensitive content is encrypted and displayed alongside the nonsensitive content on the laptop, or other screen and then decrypted by the smart glasses to reveal the sensitive content as the methods described when revealing disguised, concealed and / or encrypted printed content. The authorised user can then continue to view, edit and create content on their laptop, or other device, without wearing the smart glasses or VR headset unless they wish to read or write sensitive content, which will remain disguised, concealed and / or encrypted on the laptop display but fully visible within the VR or smart display glasses. In some embodiments, the first and second aspects of the present invention maybe used to scan a document, object or item using a camera and / or wireless communication means and validate that data with that of the original and official source of that product to determine its authenticity. In a further embodiment, the present invention can be used to protect businesses and consumers from scam printed and electronic material. For example, scam letters from bad actors impersonating HMRC, encouraging consumers through the document to apply for tax refunds. In this scenario, most businesses have electronic versions of all documents sent to customers and consumers, so the customer or consumer could utilise the second aspect of the present invention to confirm with the business that the document in their possession matches their original and has been sent by the business, if at all. The business could utilise the first aspect of the present invention by disguising, concealing and / or encrypting the sensitive content of the sent document in order that the receiving customer or consumer can use the second aspect of the present invention to validate the authenticity of the content of the printed document in their possession. A business could integrate the second aspect of the present invention into their mobile application, comparing the document stored within their secure server with the document being scanned by the recipient, the content being validated against their original, essentially focussing on the sensitive content including but not limited to the personal data, references, amounts, decisions, remedies and their contact details. This process defeats the scammers using printed and electronic documents to defraud others. In a further embodiment, the present invention can be used to protect businesses and consumers from counterfeit postage stamps. For example, the image processing and bar code scanning of postage stamps could eliminate the existence of counterfeit stamps by the revealing apparatus capturing the stamp and comparing that photo image, barcode or QR code with the original stored on the business’s official server / store. In a further embodiment, the present invention can be used to protect businesses and consumers from scam printed and electronic QR, Bar code and other encoded quick response mechanisms. For example, QR codes are commonplace and used for multiple quick response applications such as application downloads, menus, product and service sign-ups and rapid configuration. One common scam is that of vehicle parking payments, where the move away from paying for parking with cash toward parking via a dedicated parking application on the consumers’ mobile phone. These companies often place QR codes by the payment station to make the downloading of their mobile application easy. However, scammers place bogus QR codes over the official QR code which takes the consumer to the fraudulent website location where their personal details are captured. In this scenario, the second aspect of the present invention, the revealing apparatus, scans the QR code, display’s its content at maximum size, so that the user can easily see the data e.g. URL. The next stage for the revealing application is to analyse the data, in the case of a URL is this on a website blacklist and does the website URL conform to a legitimate business website type structure, does the business provide such services at this GNSS location. The validation process is further enhanced by retrieving the official businesses’ signage, comparing that, including the QR code with the original secure version from the business directly. This not only prevents the consumer from being scammed in the first instance but also provides a mechanism to inform the authorities and the business their signage at a specific location has been compromised and to take immediate action to prevent fraud. In a further embodiment, the present invention maybe used to protect businesses and consumers from the negative impact of counterfeit and fake products. In the example of fake perfume given in the background section, the first and second aspects of the present invention may be used to scan the packaging and labels, and again compare the result with the details held by the legitimate business, identifying misspellings, low-quality packaging, missing details, uneven product finishes or incorrect logos. This not only prevents the consumer from being scammed in the first instance but also provides a mechanism to inform the authorities and the business their product has been compromised, its location and to allow them to take immediate action to prevent fraud. Advantages of the present invention 1. Although current secured print solutions provide validation, authentication and traceability of the person requesting the document to be printed, the printing, collation, and collection of the printed document, they fail to secure the sensitive parts of the document once it has been printed. The present invention solves this major shortcoming by encrypting, disguising or concealing the sensitive parts of the document, which can then only be made accessible through a revealing device and a computer program or mobile application. 2. The present invention provides a first level of authentication to allow the operation of the computer program or mobile application, second level ensuring that the sensitive elements of the document are being viewed at a suitable time and location and an optional but vital third level to ensure the authorised person is the only person that can physically see the sensitive content. 3. Although the sensitive content within the examples given have been illustrated as text, any content can be disguised, concealed and / or encrypted using the present invention such as images, photos, diagrams, drawings, graphs etc. 4. In some embodiments, the printing of normal text and disguising or concealing the sensitive parts of the document, means that decoding / decryption can take place with a simple revealing / scanning device connected to a remote secure server, using suitable decryption algorithms present within the remote computer program. 5. In some embodiments, the printing of normal text and encoding of the sensitive parts of the document, means that decoding / decryption can take place within the revealing or scanning device and without the need to connect to a secure server, effectively operating on the “edge” using suitable decryption algorithms present within the computer program or mobile application. 6. Event bound visibility, where different parts of the sensitive document are revealed based upon, for example the time and / or location of the revealing device. 7. In some embodiments it may be desirable that a sensitive document contains a dynamic and changing security level access enabling different parts of a document to have different security levels during its reveal lifecycle, meaning the reveal process can be adapted to authorise a user access to different sensitive content based upon the revealing apparatus’ location, time, date, surroundings e.g. sound, voice, conversations, images etc. 8. Using the reference e.g. [Soldier ooi], method of encoding the sensitive data, would enable the vast number of current documents in circulation that refer to sensitive data by an alias because of legal restrictions or sensitive or commercial data to benefit from this invention without the need for further encoding and subsequent repeat printing. 9. In some embodiments, the authorised user wears smart glasses or a VR headset, part or full content is encrypted on the screen and only the authorised user can see the sensitive content through the eye worn revealing device. The advantage of this embodiment is that the content creator can be reading or writing content that is ineligible to prying eyes or recording equipment. This is important for those users creating, reading or reviewing sensitive content outside of a secure environment e.g. on a train or aeroplane. 10. During the revealing process the device’s microphone is used to capture any speech during the revealing process and alongside the image of the user is then recorded and maybe compared with a list of unauthorised persons, maybe confirming if the user is a known “bad actor” and / or used at a later stage for audit and traceability purposes. 11. The method of firstly encrypting the sensitive content prior to turning that content into a collection of dots / pixels in the form of a Bar code or QR code type format the revealing process can then utilise standard Bar code or QR code readers followed by the decryption process to reveal the original sensitive content. 12. Pre-encrypting the sensitive content prior to encoding using standard QR or Bar code formats may alleviate the lengthy standardisation process which would greatly improve adoption, market traction and time to market. 13- The full content of the sensitive document could be encrypted by the concealing apparatus and decrypted by the revealing apparatus, however the present invention’s preferred methods only disguise, conceal or encrypt the sensitive content, reducing the computing power, power consumption, cost and specification of the revealing apparatus. 14. In some embodiments, both or either aspect of the present invention can be used to protect businesses and consumers from scam printed or displayed material. 15. In some embodiments, both or either aspect of the present invention can be used to protect businesses and consumers from scam QR, Bar code or other quick response mechanisms found on printed or displayed material. 16. In some embodiments, both or either aspect of the present invention can be used to protect businesses and consumers from the negative impacts of counterfeit and fake products. Brief Description of the Drawings Figure 1, illustrates the system for securing printed and displayed content, the present invention consisting of two aspects, first aspect concealing apparatus (500), second aspect revealing apparatus (510) (512) and then the physical form be that printed (507) or displayed (509). Figure 2, illustrates example methods of creating a document with sensitive content (11) that can be printed with that sensitive content disguised or concealed (12) by means of encryption; encoded dots / pixels (14), coding (15), replacement (16), missing content (17), redacted / obscured (18) or ciphertext (19). Figure 3, illustrates a system level process of disguising, concealing and / or encrypting the sensitive content within a document using an encoding method (15). The revealing device fetches (8) the decoding data from the document store (1), the printed document (5) and displays the fully revealed document (29) on the revealing apparatus’ screen (30). Figure 4, illustrates a further example of the system illustrated in Figure 3 where the disguised or concealed content is encrypted with encoded dots (14) in a Bar code or QR code format, that is decrypted (11) on the revealing device (7), removing the need to have a connection to an external server or storage. Figure 5, illustrates the use of LiDAR distance measuring device (36)(31) to ensure that the distance (34) between the document and the revealing device (7) is appropriate and how the user (35) can be positioned an optimal distance (33) away from the revealing device’s screen to prevent other people, machines and / or AI devices from overseeing the sensitive content. Figure 6, illustrates an example of encoding sensitive content [Imno] with a encoded set of pixels or dots e.g. QR or Bar code type format, and then printed, allowing the revealing apparatus to decode the QR or Bar code locally. Figure 7, illustrates an example shown in Figure 6 with sensitive content firstly encrypted prior to encoding the printed document with a encoded set of pixels or dots e.g. QR or Bar code type format, which can then be decrypted and then decoded locally by the revealing device. Figure 8, (47) illustrates a secured printed document that utilises standard QR codes, as an example of encoding sensitive content with a collection of dots / pixels before combining it with the non-sensitive content prior to printing. Figure 9, illustrates a working example of how a standard QR code application represents sensitive content. Figure 10, illustrates a QR code type encoded set of dots / pixels in a typical form-factor that would fit within the line structure of a normal document. Figure 11, illustrates the Rectangular Micro QR Code (rMQR Code) version R11X77 that could be used if combined with encryption. Figure 12, illustrates a method of coding sensitive content [Imno] (81) followed by decoding the printed document (84) using the revealing device (85). Figure 13, illustrates a more detailed example of coding sensitive (51) content and an example embodiment for decoding (52) that sensitive content, which is then inserted within the non-sensitive content (55) on the revealing apparatus (53) display. Figure 14, illustrates an example of disguising or concealing the sensitive content of the printed document with a method of replacement or substitution. Figure 15, illustrates an example method of disguising or concealing sensitive content (72) by removing that content (73)(74) from the original sensitive document (71), recording the removal position (76) and content (77). Figure 16, illustrates an embodiment using a mobile device as the revealing apparatus for the method in Figure 15, the sensitive content (92) (93) being inserted into the nonsensitive content (94) displayed on the screen using the removal position and recorded content to reconstruct the full sensitive document. Figure 17, illustrates another embodiment using a mobile device (983) used as the revealing apparatus of Figure 15, the sensitive content being inserted into the nonsensitive printed document (981) displayed on screen using the removal position and recorded content (982) to reconstruct the full sensitive document (985) on the revealing device’s display (983). Figure 18, (300) illustrates multiple instances of the revealing apparatus (302) as an example of how a single revealing apparatus is moved across a redacted document (300), revealing the sensitive content (303)(304)(305) that has been concealed by redacted mark (301) and revealed by one of the revealing methods. Figure 19, illustrates how a sensitive document (910) is fully encrypted into ciphertext using encryption keys and then printed (915). The revealing apparatus (917) decrypts the document using the decryption keys once authorised user verification (919)(920) has taken place to ensure that only the intended user is able to view the sensitive document (922) on the revealing device’s screen (923). Figure 20, illustrates an alternative revealing device screen (11b) of Figure 19 that displays only the sensitive content for greater clarity. Figure 21, illustrates a user authentication process, where the front facing camera (210) captures the user (209)(219) before authentication and revealing the disguised, concealed and / or encrypted content. Figure 22, describes the revealing process for revealing one of the example methods of disguising, concealing and / or encrypting the sensitive content. Figure 23, illustrates six example decrypting methods (124)(125)(126)(127)(128)(129) as part of the Figure 22 revealing process (123). Figure 24, illustrates an embodiment using VR or smart display glasses (27) for securing sensitive content on a laptop (23)(24), tablet or mobile phone that enables the authorised user to read and write content without being overlooked. Figure 25, presents an alternative embodiment of Figure 24 that only display’s the sensitive content (25b) for greater clarity. Figure 26, illustrates an example hierarchical security level concealing list using JSON format (900), where the security level 1, depicted in the example by superscript 1 being associated with the code

[0011] restricts the revealing of the sensitive content concealed by code

[001] to user ID: “01234567”, facial image “oi234567.png”, time access all day but excluding from one minute passed midnight to four o’clock (am) between dates 21st September 1933 to 08th December 2024, excluding dates 7th February 2021 and 13th February 2021. Figure 27, illustrates (400) an example of how a consumer and / or business receiving a fictional letter from HMRC pretending to owe the recipient money and how that recipient could use the present invention to validate the letter. The letter (401) is scanned (408) using the back facing camera (406) by the recipient using the second aspect of the present invention, the revealing apparatus (407). The business’ details are extracted from the document e.g. HMRC, letter, address, website, phone number, QR code link etc (402), the revealing apparatus makes contact with the business (404)(405), compares the captured letter with the original issued by the business and held on their secure server / storage (404)(405) if it exists (410). The validation of the letter’s authenticity is then shared with the consumer via the revealing apparatus (407)(405), a suitable message is then shared with the user e.g. Official Document or SCAM Document (409) via the revealing apparatus’ (407) display. Figure 28 illustrates an example of how a consumer and / or business might validate having encountered fictional council car park signage (701) that contains a QR code (703) needed to download their mobile phone application. The consumer and / or business uses the present invention to validate the signage including checking that the QR code is not a scam QR code. The signage (701) is scanned (708) using the back facing camera (706) by the consumer and / or business using the second aspect of the present invention, the revealing apparatus (707). The business, e.g. Council car parking’s details are extracted from the signage e.g. Council Car Parking, signage, location: 1234, address, website, phone number etc (702), the revealing apparatus makes contact with the business (704)(705), compares the QR code link with the details of the captured signage with the original issued by the business and held on their secure server / storage (704)(705) if it exists (710). The validation of the QR code link authenticity and services provided by the business at the GNSS location (711) of the revealing apparatus (707) is then shared (710)(705), with the consumer via the revealing apparatus (707) a suitable message being shared with the user e.g. “Official Signage allow QR code (703) app download” or “SCAM Signage, do not use this QR Code” (709) disable app download. Then notify the business and / or authorities of the SCAM signage Figure 29, illustrates an example of a fictitious fake perfume bottle, and how a consumer and / or business might validate the product’s authenticity by using an embodiment of the present invention to scan (726) the product (723) using the revealing apparatus (730) via the back facing camera (727) and comparing it with official details of the product. Detailed Description Embodiments of the present invention will now be described, by way of example only, with reference to the accompanying drawings, in which: • Words such as encryption, coded, encoded, replacement, substitution, missing, redacted or ciphertext refer to methods of disguising, concealing and / or encrypting content so that only authorised users can understand the sensitive content. • The words “encryption” and “decryption” may be used as generic terms for all methods of disguising / concealing and revealing data. • The word “printed” may be used to refer to a physical printed document e.g. on paper and / or a document displayed on a screen. • The word “content” may refer to anything found within a document e.g. text, images, photos, diagrams, drawings, graphs, watermarks etc and may extend to electronic content e.g. RFID, where the content is held within RF readable devices located within and / or on the document. Figure 1, illustrates the system for securing printed and displayed content, the present invention consisting of two aspects, first aspect concealing apparatus (500), second aspect revealing apparatus (510) (512) and then the physical form be that printed (507) or displayed (509). According to the first aspect of the present invention, Figure 2, illustrates example methods of creating a document with sensitive content (11)(13) that can be printed with the sensitive content e.g. [Imno], disguised or concealed (12) by means of encryption in the form of encoded dots / pixels (14), coding (15), replacement (16), missing (17), redacted (18) or ciphertext (19) according to an embodiment of the present invention; According to the first and second aspect of the present invention, a sensitive document may contain dynamic and changing security level access. The revealing of a sensitive document may be constrained during the concealing process by using the hierarchical security level module (502) that enables different parts of a document to have different security levels during its reveal lifecycle, meaning the reveal process can be adapted to authorise a user access to different sensitive content based upon the revealing apparatus’ location, time, date, surroundings e.g. sound, voice, conversations, images etc. According to the first and second aspects of the present invention, Figure 3, Figure 1, illustrates a system level process of disguising, concealing and / or encrypting sensitive content within a printed (5)(507) or displayed document (509), methods of disguising, concealing and / or encrypting the content Figure 2 (14)(15)(16)(17)(18)(19), the methods of decrypting content through the use of a computer program or mobile application within the revealing apparatus (7) and methods of identifying and authenticating the user (9)(200)(201)(202) trying to consume the content of the printed (5)(205)(507) or displayed document (509). The sensitive documents are stored securely (1)(506). The Concealing process requires that the sensitive content is identified and then disguised, concealed and / or encrypted using example methods illustrated in Figure 2 (14)(15)(16)(17)(18)(19) and combined with the non-sensitive content within the document creator / editor program (501)(2). The combined content is then sent to the printing device (3)(508) or display (509). The control of the printing process then follows existing methods of the secured printing process (4) as described in the background section. The printed and / or displayed document (5)(507)(509) now contains the sensitive content disguised, concealed and / or encrypted which is illegible and of little value to humans, machines or AI without the second aspect of the present invention, the revealing device, method and apparatus (7)(512)(510). The printed and / or displayed document (5)(507)(509) is now placed (6) under the back facing camera (515) of the revealing apparatus (7)(512). The disguised, concealed or encrypted content is extracted from the document. The original sensitive document, a subset, look-up, revealing algorithm and / or decryption keys are retrieved (8) from the secure server / store (1)(506)(517) by the revealing apparatus (7). The revealing apparatus’ software application (28) then uses that information to “reveal” the sensitive document or part content, (29) on the screen of the revealing apparatus (7)(510)(526). For further security there is an optional but vital step, where the sensitive content is then only revealed (n) during the user’s facial and / or biometric data validation process (9)(200)(201)(202) using the front facing camera (10)(210)(514). Figure 21, illustrates a user authentication process, where the front facing camera (210) captures the user (209)(219) before authentication and revealing the disguised, concealed and / or encrypted content. 0 (200) illustrates how the user (209) positions their face to fill (215) the screen within the active area (214) so that no person, machine and / or AI device can consume the content on screen containing the revealed sensitive content. 0 (201) illustrates the user (209) facial recognition and authentication which may be required to be maintained (216)(217) during the reveal process, the sensitive content (211) being displayed on the screen (213). 0 (202) illustrates a “bad actor” (219) trying to view the sensitive content on the revealing device’s screen (213). The sensitive content has been removed (208) from the revealing apparatus’ display (213) because the facial recognition and authentication failed, to prevent the “bad actor” (219) from consuming the sensitive content (211). According to the first and second aspects of the present invention, Figure 4, illustrates a further example of the system illustrated in Figure 3 where the disguised, concealed and / or encrypted content is decrypted within the revealing device, removing the need to have a connection to an external server or storage. In some embodiments, the non-sensitive content stored locally or on the remote server (1) could be stored without encryption, whereby security is established by the fact the server or storage is secured with access control. The sensitive content is encrypted by the methods according to the first aspect of the present invention. In some embodiments, store only the encryption keys in the secure storage or server and have all the sensitive documents stored encrypted. The encrypted document’s nonsensitive content is then decrypted (2) and then printed (3) with the sensitive content remaining encrypted by the methods according to the first aspect of the present invention. The disadvantage, the revealing process would be slower, require greater processing power and the entire document may need to be visible on the screen of the revealing device. If the encryption methods described or similar are use prior to further encoding in the form of encoded dots / pixels e.g. Bar code or QR code type format, then there would be no technical need to implement a new Bar code or QR code format other than its physical form-factor. However, as the present invention is aimed at securing printed sensitive documents many stakeholders such as government, military and big business may require a new standard to exist to ensure a high level of security, authentication, integrity and that compatibility exists, it is maintained and evolved through standardisation and regulatory bodies. The output of the printing device (3) could be for example on paper (5) or in electronic format e.g. a display / screen and the content of that output would be the non-sensitive content with the sensitive content encrypted by the methods of, encoded dots / pixels, coding, replaced, missing, redacted or ciphertext in a way that nobody could digest that sensitive content without the revealing apparatus (7). The disguised, concealed and / or encrypted document (5) could then be read by the authorised user (9) by means of placing the revealing apparatus (7) over the disguised, concealed and / or encrypted content, the non-sensitive content can then be read directly while the disguised, concealed and / or encrypted content would appear on the revealing device’s display (30); or the entire document would appear on the revealing device’s display alongside the disguised, concealed and / or encrypted content that has now been replaced by the sensitive content (29). The revealing device (7) contains a back facing sensor e.g. camera, that captures the disguised, concealed and / or encrypted document’s contents (5) and a front facing camera (10) that captures the user’s profile e.g. face (9) and matches with biometric data securely stored locally on the revealing device (7) or on the remote server (1). The sensitive content that has been disguised, concealed and / or encrypted is then displayed (29) on the revealing device’s display the user (9) maintains their biometric data or face within the restricted viewing area of the display (30), ensuring that only the authorised user has sight of the sensitive content. Figure 5, illustrates a further but optional security feature of the present invention, the technology is part of the latest mobile devices, which could be used as the revealing device. LiDAR distance measuring device (31) when combined with the back facing cameras (36) and optional illuminating LED (32) ensure that the distance (34) between the document (5) and the revealing device (7) does not allow for others to view the sensitive content by ensuring the distance is compatible with the original document attributes e.g. size, font size, font type, line spacing etc. The user’s (35) facial or biometric data is validated to prevent any unauthorised person, machine and / or AI device from circumventing the present invention by being inserted between the revealing device (7) and the user (35). The distances from the user to the revealing device (33) is calculated from knowing the camera / sensor characteristics and that the user (35) should maintain the facial / biometric data within the active area on the revealing device (7) screen, illustrated in Figure 21. According to the first aspect of the present invention Figure 2, detailed examples will now illustrate the process of disguising, concealing and / or encrypting sensitive content through various methods of encryption be that encoded dots / pixels (14), coding (15), replacement (16), missing (17), redacted (18) or ciphertext (19) according to an embodiment of the present invention. Using Figure 2, as a simple example for illustration purposes only; sensitive document (11), printed document (12), sensitive content (13) and methods (14)(15)(16)(17)(18)(19) of disguising, concealing and / or encrypting the sensitive data hnno will now be detailed using multiple example methods. Detailed descriptions of various methods of disguising, concealing and / or encrypting the sensitive content will be presented, others are also available including combining methods. The preferred method will depend upon the embodiment and apparatus available; some require access to the original sensitive document; some require increased processing power and others require decryption. Methods of disguising, concealing and revealing sensitive documents: Figure 2 illustrates six example methods of disguising or concealing sensitive content, which are further described: Example i, encoded dots / pixels (14), Figure 6 and Figure 7 illustrate methods of securing sensitive content within a printed document using dot / pixel encoding. Figure 6 illustrates an example of encoding the printed document with an encoded set of pixels or dots e.g. QR or Bar code type format, that can be decoded locally by the revealing device and thus reveal the sensitive information to the user without the need to communicate with a remote secure server / storage. The example provided in Figure 6 uses a standard and commonly used QR code to represent the sensitive data by way of illustration only and can be read by the majority of QR code readers and hence is not secure without previously encrypting the content that is then further encoded via the QR code as illustrated in Figure 7. The preferred embodiment of the present invention Figure 7, encrypts the sensitive data prior to then encoding that data dots / pixels printed on the paper, display or within a document, to represent the sensitive content, making it unreadable by unauthorised entities without the decryption key, method, and apparatus of the present invention. The encoded dots / pixels require a form-factor that can be easily printed accurately, repeatably and that can be included within the line size, line spacing, font size and type face. It is anticipated that the format and encryption method would need to be the form factor as illustrated in Figure 10. In that example (6o), [Top Secret] is encoded as (61), [Mr Jack Jones] is encoded as (62), [30th March 2000] is encoded as (63), [Poisoned] is encoded as (64), [Unknown Bad Actor] is encoded as (65) and [Novichok] is encoded as (66) Figure 11, illustrates a new rectangular form-factor, Rectangular Micro QR Code (rMQR Code) which could be adopted but would require encryption before encoding. However, it is anticipated that a new encryption method and security level would be subject to a consortium of security, government, regulatory and industry standardisation and out of scope of the present invention. For illustration purpose only, Figure 8, utilises standard QR codes, the encoded secured printed document would appear as (47): Figure 9, illustrates how a standard QR code application encodes and then decodes sensitive content within the above example (47). The document is now secure and ready to be printed on a standard printer or display. Using the second aspect of the present invention the secured printed and / or displayed document (47) is scanned using the revealing apparatus and (41) is decoded as [Top Secret], (42) is decoded as [Mr Jack Jones], (43) is decoded as [30th March 2000], (44) is decoded as [Poisoned], (45) is decoded as [Unknown Bad Actor], (46) is decoded as [Novichok] and would appear as (48): 48. This document is Top Secret and relates to Mr Jack Jones who on the 30th March 2000 was Poisoned by an Unknown Bad Actor using Novichok. Example 2, coding (15), Using simple example in Figure 2 for illustration only; sensitive document (11), printed document (12), sensitive content (13) and coding method (15) and Figure 12 illustrates a method of coding sensitive content (81) [Imno]. The sensitive content hnno (81) is coded using the look-up table (82) disguising the sensitive content as

[0001] (83). The secured document can now be printed (84) without the risk of the sensitive content being consumed by unauthorised users. The authorised user may now use the second aspect of the present invention, the revealing device (85) to scan the printed document (84), the sensitive content is then decoded using a look-up table (86) to reveal the original sensitive content hnno (87) on the screen of the revealing device (85) Building upon the simple example of Figure 12, a more detailed and descriptive example of the coding method of a sensitive document will now be presented with reference to Figure 13. Document coding / decoding look-up table (52): -

[001] represents [Top Secret]

[002] represents [Mr Jack Jones]

[003] represents [30th March 2000]

[004] represents [Unknown Bad Actor]

[005] represents [Poisoned]

[006] represents [Novichok] Using the look-up table (52) above to code the secured printed document’s sensitive content, the secured printed document (51), would then appear as: This document is

[001] and relates to

[002] who on the

[003] was

[004] by a

[005] using

[006] The secured document can now be printed (51) without the risk of the sensitive content being consumed by unauthorised users. The authorised user may now use the second aspect of the present invention, the revealing device (53) to scan (57) the printed document (51) using the back facing camera (54), the sensitive content is then decoded (58) to reveal the original sensitive content (55) on the screen of the revealing device (53). User authentication may be established as previously described by utilising the front facing camera (56) for facial or biometric validation. The secured printed document is then fully visible after using the revealing device (53) and appears as. This document is Top Secret and relates to Mr Jack Jones who on the 30th March 2000 was Poisoned by an Unknown Bad Actor using Novichok. Example 3, replacement or substitute content (16) Using simple example in Figure 2 for illustration only; sensitive document (11), printed document (12), sensitive content (13) and replacement or substitute method (16). Figure 14, illustrates an example of disguising or concealing the sensitive content of the printed document (602)(606) with a method of replacement or substitute e.g. [ ], [XXXX]. The original sensitive document (601)(608) or part content is securely stored locally on the revealing device (607) or on a remote secure server (601), the revealing device retrieves the original document (608) and reveals the missing data [imno] on the display (603) by matching (609) the sequence of the printed content (606) to that of the original stored content (608), thus identifying the missing content [Imno] and hence revealing the entire or part of the sensitive document (603)(608). Example 4, missing content (17) Using simple example in Figure 2 for illustration only; sensitive document (11), printed document (12), sensitive content (13) and missing content method (17). Figure 15, illustrates an example method of disguising or concealing sensitive content (72) e.g. [def], [Imno], [stu], [xyz] by removing that content from the original sensitive document (71) leaving the non-sensitive content (73)(74), recording the removal position (75)(76) and content (77). A look-up table (76)(77) consists of a list of the sensitive words removed from the sensitive document alongside the index position within the non-sensitive content (74) that references the insertion point (75) during the reveal process. The advantage of this method is, only access to the look-up table containing the sensitive content and position index of that content is required and not the entire sensitive document. The disadvantage of this method is the look-up table is a list of sensitive content, which effectively summarises the important parts of the document so the sensitive content would need to be encrypted prior to storing and decrypted during the revealing process using the encryption keys, method and apparatus of the present invention. The start point (79), or reference marker of the index position could be the start of the document, line, paragraph or marker. Building upon the simple example of Figure 15, a more detailed and descriptive example of the sensitive content removal method will now be presented with reference to Figure 16 and Figure 17. Document coding / decoding look-up table (82)(982): - [Position index] [Sensitive content]

[17] Top Secret,

[32] Mr Jack Jones,

[43] 30th March 2000,

[47] Poisoned,

[53] Unknown Bad Actor,

[59] Novichok Using the look-up table (82)(982) above to code the secured printed document’s sensitive content, the secured printed document (81)(981), would then appear as: This document is and relates to who on the was by an using . According to the first aspect of the present invention and missing content method (17), Top Secret (92)(982) would appear on the revealing device (91)(983) via the back facing camera (984) alongside the non-sensitive content at position

[17] , when viewed via the revealing device apparatus (91)(983) and verification methods as described in the second aspect of the present invention. Likewise, the second element of the secured content Mr Jack Jones (93) would be inserted into position

[32] of the printed document (94)(981) when viewed via the revealing device (91)(983). The revealing process continues as the revealing device captures the content of the printed document as it is scanned by the back facing camera (984). The revealed content (92)(93)(985) appears alongside the printed non-sensitive content (94) as illustrated in Figure 16 or inserted within the fully revealed content as: This document is Top Secret and relates to Mr Jack Jones who on the 30th March 2000 was Poisoned by an Unknown Bad Actor using Novichok. The method maybe modified to restrict the look-up table to only requiring the position index into the original sensitive document, the sensitive content being made available from the secure server / storage to the insertion process. Within the missing sensitive content of the printed document, the index position enables the sensitive content to be inserted in or alongside the non-sensitive content of the printed document as illustrated in Figure 16 (94)(981). This has the advantage of only having a list of missing content insertion positions, the disadvantage is the original sensitive document must be accessible to identify the missing sensitive content (92)(93)(982). [Position Index into the original sensitive document] - (for information only) 17 (Top) 20 (Secret) 43 (Mr) 46 (Jack) 50 (Jones) 68 (30th) 73 (March) 79 (2000) 88 (Poisoned) 103 (Unknown) 111 (Bad) 115 (Actor) 127 (Novichok) An alternative method utilises a marker (73) e.g. | that identifies the position of the missing data (77) within the original sensitive document (71), where the marker, marking the start point of the missing content is then replace based upon the order of the missing content table (77). e.g. [def] replaces the first marker [ | ] from within the non-sensitive content (73), [Imno] replaces the second marker [ | ], [stu] replaces the third marker [ | ] and [xyz] replaces the fourth marker [ | ] and so on. Example 5, redacted or obscured or marked out (18) The redacting of the sensitive content could have been added to an electronic version of a sensitive document; or could have been added manually with a marker pen. In the case of the electronic redaction using blacked block characters, the missing content is looked-up from the secure store. In the case where the redacted mark is added to an existing printed document the revealing device compares the content around the redacted mark, the sensitive content transferred from the secure store or remote server is then presented to the revealing device’s display after satisfying the access control requirements. Multiple instances of the revealing device (102) in Figure 18 illustrate how the single revealing device is moved across the redacted document, “Abstract” (100) searching for the redacted content (101). The revealing device searches the original sensitive document for the content around the redacting mark for the missing content that is hidden by the redact mark. The revealing device may then place the missing sensitive content over the redacted marking on the screen of the redacting device (103)(104)(105). Another embodiment of the present invention would allow for the sensitive document to be sent to the revealing device without the need to scan a printed document, where it could be displayed on the revealing device’s screen once the user has been verified. However, there are clear advantages to operating the revealing device similar to a magnifying glass, placing the revealing device over the redacted content (103)(104)(105), the missing content then appearing in the display, greatly opening up the scope of suitable revealing devices that are fit for purpose. The clear advantage is that a printed redacted document could be sent to the remote server / storage from the revealing device after capture, verifying that the content matches the original sensitive document, sending back the concealed content that is then displayed on the screen of the revealing apparatus once user authorisation has taken place. This example method also provides further advantage commercially and environmentally by enabling the millions of printed redacted documents to now be securely revealed at a time, place and by authorised users without the need to reprint those documents. Example 6, ciphertext (19) This example illustrates, how well-established encryption techniques convert the full or part content of the sensitive document to ciphertext, then print or display that disguised content, which can then only be made readable using the revealing apparatus, method and system. This process combines encryption for confidentiality with digital signatures for authenticity and integrity. The sensitive document (n) with sensitive content [Imno] (13) has the sensitive content encrypted, the sensitive parts are therefore scrambled and are of little or no use to unauthorised people, machines and / or AI devices. The following steps provide an example of the hybrid encryption process, resulting in for example [Imno] being printed as [*5 / !]. This process can be applied to the entire sensitive document or just the sensitive content. The preferred embodiment of this process would encrypt the sensitive content and provide a digital signature for the entire document. The sensitive content stored locally or on the remote server (1) wants to send secret content to the authorised user operating the revealing device. The sensitive content stored locally or on the remote server (1) uses the authorised user’s public key to encrypt the content knowing that only the authorised user’s private key can decrypt the content which enforces Confidentiality. Asymmetric keys also ensure that the sensitive content stored locally or on the remote server (1) send the content which enforces Authentication and that the content has not been modified during transmission which enforces Integrity. Figure 19 illustrates how a sensitive document (910) is fully encrypted using the ciphertext method to disguise sensitive content might be implemented using hybrid encryption. The sensitive document (910) in this example is fully encrypted using public and private keys (912) prior to being sent to the printer or display (913). The printed document (915) is then viewed on the revealing device (917), which decrypts the document using decryption keys as part of the decryption process (921). The optional authorised user verification (919) using the front facing camera (920) can then be used to ensure that only the intended user is able to view the sensitive document (922) on the revealing device’s screen (923). The ciphertext example Figure 19 will be further described using well-known hybrid encryption to facilitate encryption, authentication and ensure integrity of the process: Steps... i. Secure server / store (911) and Revealing device (917) Setup: Both the secure server / store (911) and revealing device (917) have their own publicprivate key pairs for digital signatures (asymmetric encryption) and agree on a public key infrastructure for secure communication. 2. Session Key Generation: The application on the secure server / store (911)(912) generates a random symmetric encryption key (session key), typically for fast data encryption (e.g. AES). 3. Symmetric Encryption: The application on the secure server / store (911)(912) uses the session key to encrypt the sensitive document (910) 4. Message Hashing: The application on the secure server / store (911)(912) generates a hash (e.g., SHA-256) of the sensitive content (910) before encryption. The hashing process provides a unique "fingerprint" of the data. 5. Digital Signature Creation: The application on the secure server / store (911)(912) signs the hash using its private key. This creates the digital signature, proving the authenticity of the sensitive content (910) delivered from the secure storage (911) and the integrity of the message. 6. Public Key Encryption: The application on the secure server / store (911)(912) retrieves the revealing device's (917) public key and encrypts (912) the session key using asymmetric encryption (e.g., RSA or ECC). 7. Transmission: The application on the secure server / store (911) (912) transmits the encrypted sensitive content (910), the encrypted session key, and the digital signature to the printing device (913). 8. Printing device or Display: The full or partially encrypted document is printed (915) or displayed. 9. Decryption of the Session Key: The printed document (915) is placed under (916) the revealing device (917) where the back facing camera captures the encrypted content which is displayed on the revealing device display. This is illegible until the authorised user (919) validates their facial or biometric identity before using its private key to decrypt the session key. 10. Data Decryption: The revealing device (917) uses the decrypted session key to decrypt the encrypted data (ciphertext), recovering the original sensitive content (plaintext). 11. Digital Signature Verification: The revealing device (917) uses the secure server / store (911) public key to verify the digital signature by checking that the signature matches the hash of the decrypted data. The revealing device (917) recalculates the hash from the decrypted data and compares it with the signed hash. If they match, the message is authentic and has not been tampered with. 12. Revealed Sensitive Document: The sensitive document (910) has been securely encrypted, printed and decrypted, ensuring confidentiality, through hybrid encryption and authenticity, via digital signature. The revealing device (917) can trust the data came from the secure storage (911) and was not altered during transmission and is able to display the sensitive content (922) on the revealing device’s display (923) following any user verification process. According to the second aspect of the present invention, the reveal method (100) in Figure 22 and Figure 23 is described in the following process: 0 unlock the mobile revealing device (101) using fingerprint, facial, biometric, password or other existing access control methods. 0 login into the computer program or mobile application (102) using fingerprint, facial, biometric, password or other existing access control methods. 0 select the sensitive document (103) from the secure local or remote storage (1) to be revealed; or 0 scan the document QR / Bar code to securely locate electronic version. 0 validate the GNSS location and / or access point location, if required (104) (105). 0 place the revealing device over the printed document; ensure that the content can be seen directly or on the revealing device’s display as it’s moved across the document, if required (106) (107). 0 ensure (109) (110) that the user’s face or biometric information is captured by the front facing sensor e.g. camera, during any movement of the revealing device. 0 the back facing sensor (121)(54) e.g. camera, captures the document’s content (57), if it detects (122) any encrypted content in the form of encoded dots / pixels (14)(124), coding (15)(125), replacement (16)(126), missing (17)(127), redacted (18)(128) or ciphertext (19) (129) content, the revealing device will, decrypt the encrypted content and then display that content alongside the non-sensitive content; or just reveal the disguised or concealed content (11b). Figure 22, (120) (123) represents the method of decryption which is further broken down to, but not limited to, six example disguising, concealing and / or encrypting methods in Figure 23, in the form of encoded dots / pixels (14)(124), coding (15)(125), replacement (16)(126), missing (17)(127), redacted (18)(128) or ciphertext (19) (129) (124) encoded dots / pixels 1. capture the encoded dots / pixels using the back facing camera. 2. decode the encoded dots / pixels to readable text format; 3. if the readable format has been encrypted, then decrypt using decryption keys. 4- replace the encoded dots / pixels data with the original sensitive content. (125) coding 1. capture the coded content using the back facing camera. 2. decode the captured content using look-up table. 3. replace the coded content with sensitive content from the look-up table. (126) replacement 1. retrieve each element of the original sensitive document from the remote server or local storage. 2. compare each element with the data captured from the back facing camera. 3. replace the missing data with sensitive content. (127) missing 1. retrieve the missing content and its insertion point into the printed document from the look-up table, and decrypted if required using decryption keys, 2. capture each element of the printed document from the back facing camera. 3. insert the sensitive content into the displayed version of the disguised / concealed document. (128) redacted 1. capture each element of non-sensitive content around the redacted content from the back facing camera. 2. compare each element of the original non-redacted document, identifying the concealed content. 3. replace the redacted content with the sensitive content found in the original document. (129) ciphertext i. capture each encrypted element of ciphertext from the back facing camera. 2. decrypt each encrypted element using existing methods of decryption, retrieving appropriate decryption keys from secure local or remote storage. 3. replace the ciphertext content with the sensitive content. Optional hierarchical security levels can be added to the concealing methods Figure 2 by means of a tag, marker, encoding or identification mark. This further enhances the functionality of the present invention by providing sensitive documents with dynamic and changing security level access enabling different parts of a document to have different security levels during its reveal lifecycle. The reveal process can be adapted to authorise a user access to different sensitive content based upon the revealing apparatus’ location, the user, time, date, surroundings e.g. sound, voice, conversations, images etc. For illustration purposes only, according to the first aspect of the present invention, the concealing process (500), using encryption method coded (15), [Mr Jack Jones] is coded as

[0021] and then printed. The

[002] is the code look-up for sensitive content [Mr Jack Jones] and the superscript [■] represents the security level 1, which could then define that [Mr Jack Jones] is revealed providing the reveal constraints are met. Further, a more detailed example is given where the fictional sensitive document, “This document is Top Secret and relates to Mr Jack Jones who on the 30th March 2000 was Poisoned by an Unknown Bad Actor using Novichok.” has been concealed by method coded (15) with the optional security level appended to the look-up code using a superscript method and appears as: “This document is 0011 and relates to 0021 who on the 0032 was 0042 by an 0053 using 0063” where, o Codes ooi1, 0021 map to [Top Secret], [Mr Jack Jones] having security level 1, the revealing constraints define who, what, where, when etc. this content can be revealed, while, o Codes 0032, 0042 map to [30th March 2000], [Poisoned] having security level 2, may have different reveal constraints, while, 0 Codes 0053, 0063 map to [Unknown Bad Actor], [Novichok] having security level 3, may again have different reveal constraints. Therefore, in this example, security level 1 may allow for sensitive content reveal between 10:00 and 17:00 for user 01234567, once the image has been verified on 20th May 2023. Security level 2 may then restrict the sensitive content reveal to a higher ranked person and finally security level 3 may restrict reveal to only government minsters and within government establishments within the United Kingdom. These security levels maybe modified dynamically if constraints change. Hierarchical security level concealing example is illustrated in Figure 26 using JSON format (900), where the security level 1, depicted in the example by superscript 1 being associated with the code

[0011] The concealing process now constrains the revealing process of disguised, concealed and / or encrypted content, tagged with security level 1 to only revealing the sensitive content [Mr Jack Jones] to user ID, “01234567”, facial image match “oi234567.png”, while within the United Kingdom, between dates (21 / 09 / 1933 to 20 / 11 / 2024) but excluding dates (13 / 02 / 2021 to 20 / 11 / 2022), between times (00:00:01 to 23:59:59) but excluding times (01:00:00 to 03:59:59) According to the first aspect of the present invention, the hierarchical security level constraints file (530) is optionally created during the Concealing process but can be dynamically updated. Had this been, for example a military battle plan and an increased amount of sensitive content could be revealed once the troops arrived at their destination. Figure 24, Figure 25, illustrate a further embodiment of the present invention that provides a method and apparatus to secure sensitive content that could be overlooked unintentionally, or with intent to consume the content on for example a laptop, tablet or mobile phone. The authorised user (21) wears smart display glasses (20) or VR headset containing one or more cameras (22) mounted on the front of the smart display glasses (20), collects the content of the laptop screen (23) that contains the redacted sensitive document (24). Figure 24, illustrates examples of what the authorised user would experience when using this embodiment of the present invention. The authorised user (21) wears the smart glasses or VR headset. The front facing camera(s) (22) capture the laptop’s screen content which has the sensitive content encoded, coded, replaced, missing, redacted and / or ciphertext and the inbuilt screens (24) (25a) display that content in addition to the decrypted sensitive content. An alternative embodiment may only display the sensitive content Figure 25, (25b). The content can be provided from, for example the laptop (23) or via the smart glasses (20) camera(s) (22) to the inbuild displays (27). The computer program or application can reside within the computing device, e.g. computer, laptop, mobile device, smart glasses / VR headset (20) Unauthorised users or bystanders can see the screen (23) but part or full content is disguised or concealed so is of little or no value. The content is then processed with the same or similar apparatus and methods as described for the other embodiments of this invention. The disguised or concealed content (24) that is displayed on the laptop (23), has been captured by the camera(s) (22) of the smart display glasses (20), is then decrypted in order to display the unredacted content (25a) in the displays (27) within the smart display glasses (20). It is possible to utilise the methods and apparatus described in the other embodiments of the present invention, but in addition the embodiment illustrated in Figure 24, and Figure 25 provides for the user the ability to also be writing / typing confidential and sensitive content, on a laptop, tablet or mobile phone, the creator seeing the content being typed on the eye worn device while the device is displaying part or fully encrypted content (25a) (25b). In the following detailed description, only certain exemplary embodiments of the present invention have been shown and described, simply by way of illustration. As those skilled in the art would realise, the described embodiments may be modified in various different ways, all without departing from the scope of the present invention. Accordingly, the drawings and description are to be regarded as illustrative in nature and not restrictive. Like reference numerals designate like elements throughout the specification. According to the first aspect of the present invention, Figure 2 illustrates how, in these examples of a fictional “sensitive” document could appear after being securely printed (14)(15)(16)(17)(18)(19). While the sensitive details are critical to the subject understanding, once printed anybody could see, copy, photograph, or steal the sensitive information. Often documents have sensitive information redacted, which makes recording and disseminating sensitive information a challenge, especially when different stakeholders may require a different level of visibility, e.g. a doctor may require a person’s medical notes, be authorised to see the patients name, medication, treatment, allergies, history but not their home address and contact details. While the practice manager and admin team may only require visibility of the patients’ home address and contact details etc. In the case of the military, top ranking officers may be able to see the sensitive / secret document but the commanding officers below them maybe for example able only to see the plan, who and what but not the details of where and when. Then, closer in time and location to the engagement the commanding officers could then be authorised to see the sensitive documents and relay them to the troops, only getting visibility of who, what, where and when at the last moments. This feature maybe configured using the hierarchical security level constraints file created during the concealing process but that could be dynamically updated. It has the added advantage of rendering printed documents useless if they are captured by a hostile actor. Further, intentional false information could also be provided to that hostile actor via the revealing device if the authorised user was under duress. According to the second aspect of the present invention, Figure 3, Figure 4, Figure 13 illustrates how the computer program or mobile application firstly authenticates the user of the revealing / scanning device via commonly known security features such as passwords, pin codes, fingerprint and facial recognition. At this point the authorised user can operate the revealing / scanning device, then the user logs into a secure server or local data store, where the documents, subsets of those documents, algorithms, look-up tables, decoders, redacted, missing sensitive data and encryption keys are held. The computer program or mobile application, running for example on a mobile phone, that contains a front facing camera (video call / selfie camera) (10)(56) that validates that the person operating the scanning device and a back facing camera (normal photographic camera) (54) that is used to read and scan the printed document. The computer program or mobile application utilises any of the available sensors, e.g. front facing camera facial recognition to validate that the user is who they are portraying to be. LiDAR or Light Detection and Ranging illustrated in Figure 5 (31) is an active remote sensing system found in modern day mobile phones and tablets and located near the back facing camera(s) (36) that could be used to measure the distance (34) to the document (5), ensuring that the document is directly in front of the user and at the correct distance based upon the document parameters e.g. paper size, font size, etc. and camera specification. The additional security feature of maintaining facial / biometric recognition during the reveal process requires that the front facing camera is a set distance from the user to remain in focus and reduces the risk of an individual or device being used to covertly to read the sensitive data. The authorised user, having progressed through the revealing / scanning device’s access control, the “reveal” computer program or application login, and secure data store authentication process, takes the user to the “reveal” process illustrated in Figure 13. The back facing camera (54) reads (57) the document (51) and displays the data on the screen (55) while the front facing camera (10)(56) is configured to read the image in front of the display e.g. the user’s face (9), and then compare that with the authorised person’s images, and either “reveal” the sensitive content and / or record the image and any sound or event, which could be evidence of a “bad actor” and may form evidence for audit, security and traceability purposes. As the revealing / scanning apparatus is moved across the printed document (205) or the document is moved across the revealing / scanning apparatus, referred to as the “reveal” process, Figure 21 illustrates how the authorised user’s face (209)(215) maybe required to be maintained (216)(217) within the field of view area (214) on the computer program or mobile application. The authentication process can utilise facial recognition to ensure, for example, that no device or other person can be placed in front of the screen that contains the “revealed” sensitive content. If an authorised person (209) moves away from the screen and out of the required “field of view” (214), or an unauthorised user (219) and / or multiple users (222) are detected then the “reveal” process maybe interrupted and the sensitive content erased (208) from the revealing apparatus display (213). The reveal process consists of, 0 the back facing camera (54) configured to read the printed document. 0 the revealing / scanning device may contain a LiDAR sensor (31) configured to measure the distance from the back facing camera to the document. 0 the front facing camera system configured to perform facial recognition of the user. 0 the front facing camera system configured to determine the most appropriate distance between the user and the revealing apparatus’ screen to allow for facial recognition but to prevent overlooking from prying eyes, machine and / or AI device. o the revealing / scanning device’s display is configured to reproduce the image from the back facing camera. o when sensitive content has been encrypted by methods including but not limited to encoded, coded, replaced, missing, redacted and / or ciphertext, that content is detected, the revealing / scanning apparatus is configured to: • decode the encoded group of dots / pixels and / or, • look-up the code that represents the sensitive content and / or, • find the absent content by comparing it with the original document and / or, • find the missing content based upon the position within the original sensitive document and / or, • find the redacted content by comparing it with the original document and / or, • decrypt the encrypted content using well established techniques, retrieving the crypto keys from the server or locally. during the scanning and authorised “reveal” process, the user maybe required to maintain valid facial recognition while scanning the disguised, concealed or encrypted printed or displayed document to ensure that only the authorised user can see the sensitive data on the revealing / scanning device. o the revealing / scanning apparatus, may be configured to stop displaying the revealed sensitive content if, • the user fails to be authenticated and / or, • the user’s face or biometrics is not maintained within the validation window of the revealing apparatus and / or, • the location, time, date or another authorisation criteria fails to match the “reveal” requirements, and / or, • hierarchical security level constrains the “reveal” process, and / or • an unusual event, sensor reading, sound, image etc is detected that may indicate a higher risk of the sensitive content being consumed by an unauthorised user and / or, • an additional person, object, device or AI are detected in the field of view of the revealing apparatus. According to the first and second aspect of the present invention, a sensitive document may contain dynamic and changing security level access. A sensitive document may contain a hierarchical security level that enables different parts of a document to have different security levels during its reveal lifecycle, meaning the reveal process can be adapted to authorise a user’s access. According to the second aspect of the present invention, during the revealing process, the optional hierarchical security level constraints data (530) generated as part of the concealing process can, for example, constrain the revealing of the sensitive content based upon the revealing apparatus’ location, time, date, surroundings e.g. sound, voice, conversations, images etc. defined using, for example JSON type format (900), where the security level 1, depicted in the example by superscript 1 being associated with the code

[00011] The Revealing process now limits visibility of the disguised, concealed or encrypted content tagged with security level 1 to only reveal the sensitive content [Mr Jack Jones] to user ID, “01234567”, facial image match “oi234567.png”, while within the United Kingdom, between dates (21 / 09 / 1933 to 20 / 11 / 2024) but excluding dates (13 / 02 / 2021 to 20 / 11 / 2022), between times (00:00:01 to 23:59:59) but excluding times (01:00:00 to 03:59:59) In a further embodiment, the revealing device could be smart display glasses or a VR headset as illustrated in Figure 24 and Figure 25, these will ensure that only the intended recipient can view the full content of the screen of a laptop, tablet, phone. The sensitive content is encrypted by methods including but not limited to encoded, coded, replaced, missing, redacted or ciphertext and displayed on the laptop, or other screen and then decrypted by the smart glasses to reveal the sensitive content as the methods described when securing printed content. The authorised user can then continue to view, edit or create content on their laptop, or other device, which is encrypted on that display but fully visible within the smart display glasses. Using the present invention, enables sensitive documents to be viewed, edited and created within public and / or insecure areas such as on trains, planes, boats, automobiles, cafes etc. without the risk of prying eyes compromising private, sensitive and / or restricted information. In a further embodiment, the sensitive document is sent to the smart glasses or VR headset from the laptop, mobile device or revealing device, where the document can be viewed, edited or created. o the advantage of this embodiment is that smart glasses or VR headsets without front facing cameras can be used, as this embodiment does not rely on reading the sensitive content from the laptop or other device’s display, the sensitive document is sent directly to the smart glasses or VR headset integrated displays. o the disadvantage is that anybody could pick-up the smart glasses or VR headset and read the sensitive document, therefore user validation maybe required using user biometric markers, e.g. eye retina scanning, within the glasses or, using the user authentication method described in the second aspect of the present invention, where the laptop or mobile device’s camera can be used to validate that the user is authorised to view the sensitive document displayed within the smart glasses or VR headset. In a further embodiment, illustrated in Figure 27, the revealing apparatus (407), method and system can be used to protect businesses and consumers from scam printed and electronic documents, for example scam letters (401) from bad actors impersonating HMRC, encouraging consumers through the document to apply for tax refunds. In this scenario, all businesses have electronic versions of all documents sent to customers and consumers. The business utilises the first aspect of the present invention by encoding the sent document in order that the receiving customer or consumer can use the second aspect of the present invention to validate (409) the authenticity of the printed document (401) in their possession. So, as an example, an authority could integrate the second aspect of the present invention into their mobile application, comparing the document stored within their secure server (404) with the document being scanned (408) by the recipient, the content being validated against their original, essentially focussing on the sensitive content including but not limited to the personal data, references, amounts, decisions, remedies and their contact details. This process defeats the scammers using printed and electronic documents to defraud others (409). In a further embodiment, illustrated in Figure 28, the revealing apparatus (707), method and system can be used to protect businesses and consumers from scam printed and electronic (703) QR, Bar code and other encoded quick response mechanisms. For example, QR codes (703) are commonplace and used for multiple quick response applications such as application downloads, menus, product and service sign-ups and rapid configuration. One common scam is that of vehicle parking payments, where the move away from paying for parking with cash toward parking via a dedicated parking application on consumers mobile phone. These companies often place QR codes (703) by the payment station to make the downloading of their mobile application easy. However, scammers place bogus QR codes over the official QR code (703) which takes the consumer to the fraudulent website location where their personal details are captured. In this scenario, second aspect of the present invention, the revealing apparatus (707), scans (708) the QR code (703) using the back facing camera (706), display’s its content at maximum size, so that the user can easily see the data e.g. URL. The next stage for the revealing application is to analyse the data, in the case of a URL is this on a website blacklist and does the website URL conform to a legitimate business website type structure, does the business provide such services at this GNSS location. Further, the present invention may provide extra protection for the user by insisting that the user captures not only the QR code (703) but also the details of the signage around (702) the QR code. The revealing apparatus then in conjunction with the secure server: - 1. validates the link e.g. website, app download o blacklist o structure o look &feel 2. validates the information around the QR or Bar code for o businesses’ name &contact details o other distinguishing marks e.g. parking location: 1234 0 GNSS location 0 does the QR or Bar code, link to a business that provides such services at the GNSS location. The validation process is further enhanced by retrieving the official businesses’ signage (701), comparing that, including the QR code (703) with the original secure version from the business directly (710). This not only prevents the consumer from being scammed in the first instance but also provides a mechanism to inform the authorities and the business their signage has been compromised and to take immediate action to prevent fraud. In a further embodiment, Figure 29 illustrates the revealing apparatus (730) being used to protect consumers and / or businesses against counterfeit and fake products by validating the product’s (e.g. perfume bottle) authenticity by using an embodiment of the present invention to scan (726) the product (723) using the revealing apparatus (730) via the back facing camera (727). A standard back facing camera (727) maybe combined with the optional LiDAR scanner, available in many of the latest mobile phones as described in claim 4, that gives the camera system the ability to understand depth and spatial information which enables the capturing of 3D scans of objects, spaces, and environments, which can be used to create 3D images The business details are extracted from the label (725), image (723), size e.g. (fictional) PURFUMCo, FAKE, 50ml by the revealing apparatus. Then, connect with the fictional business (731)(733) e.g. PURFUMCo, compare the captured label (725), product image (723), dimensions, etc with the REAL product’s details from the Business’ Secure server / storage (732)(731)(733), validate the product with the business (723) VS. (732). In this example the FAKE product details (721)(722)(724)(725) are all different to that of the characteristics of the REAL product (732) and then communicate the product’s authenticity e.g. “REAL” or “FAKE” on the revealing apparatus to inform the consumer of the authenticity of the product. Notify the Business and / or authorities of any FAKE products and their GNSS location (728). According to the second aspect of the present invention, further security steps may be deployed in order to not only authenticate the user during the reveal process but also to capture the user, device and surroundings that maybe utilised in preventing current and future security breaches. Sound may be recorded via the revealing apparatus’ microphone (528) which is configured to capture any voices, sounds and disturbances during the revealing process and alongside the image of the user trying to authenticate are then recorded and maybe compared with a list of unauthorised persons, maybe confirming if the user is a known “bad actor”. It will also be appreciated by those skilled in the art, that although the sensitive and non-sensitive content of a secured document or part content are illustrated in plain text, that a further pre-encryption process could be implemented using well known encryption methods as described. It will also be appreciated by those skilled in the art, that although the sensitive content within the examples given have been illustrated as text, any content can be disguised, concealed and / or encrypted such as text, images, photos, diagrams, drawings, graphs, watermarks etc and may extend to electronic content e.g. RFID, where the content maybe held within RF readable devices located within and / or on the document. Whilst certain embodiments of the invention have been described herein with reference to the drawings, it will be understood that many variations and modifications will be possible without departing from the scope of the invention as defined in the accompanying claims.

Claims

1. A system for securing the content of printed (507) and / or displayed documents (509) and revealing that content to authorised users, comprising:• Concealing apparatus (500) in claim 2, configured to:■ conceal the sensitive content of a document,■ set optional hierarchical security level of the sensitive content,■ output the document to a secure server / store,■ output optional hierarchical security level constraints file to a secure server / store,■ output the conceal algorithm, data, encryption keys to a secure server / store.■ submit print jobs, authenticate users and record access attempts.comprising:0 a computing platform (505),0 a user interface (503),0 a conceal module (504),0 a document creator / editor program (501),0 a hierarchical security level module (502).0 a secure server / store (506)• Secure printing process, configured to:■ utilise well established processes and prior art.■ ensure that the act of printing documents is protected from unauthorized access, interception, or misuse.■ provide authentication, encryption, access control, pull printing, logging, audit trails and secure erase.comprising:0 a print server / store (506) hosting encrypted print queues and authentication mechanisms for controlling access to print jobs.o a secure server (506) hosting sensitive documents consisting of encrypted content, non-encrypted content, user data, hierarchical security level constraints data, traceability data and cryptographic keys, for controlling and recording access to the sensitive content.0 a secure server hosting facial, biometric and user data used in the access control and verification process.0 a client application installed on the concealing and / or revealing apparatus for submitting print jobs, authenticating users, recording the access process etc.0 transfer mechanism for sending documents containing normal, disguised, concealed or encrypted print jobs to an output device (508) for print (507) and / or display (509).• An output device (508) (509) configured to:■ receive normal, disguised, concealed and encrypted print jobs from the secure print server, which can print the document in physical form (507) e.g. paper and / or in electronic form (509) e.g. display or screen.■ print or display a document containing both sensitive and non-sensitive content, the sensitive content being encrypted to render the document illegible without the revealing apparatus of claim 3.comprising0 a physical printing device such as a printer, plotter, handwriting, drawing etc.0 an electronic printing device such as a screen, display• Revealing apparatus (512) in claim 3, configured to:• submit print jobs, authenticate users and record access attempts.• capture the printed or displayed document and to display “reveal” the normal, disguised, concealed and / or encrypted content as if it were all normal and legible content.• restrict only authorised users’ visibility of the disguised, concealed and / or encrypted content.• further restrict the reveal process based upon any constraints within the hierarchical security level constraints file (900) e.g. Figure 26.5 * record data, events, surroundings and user profiles (e.g. images, audio,biometrics) during both authorised and non-authorised access attempts.• display normal, and disguised, concealed and encrypted content by the decrypting methods of encoded dots / pixels, coding, replacement, missing, redacted or ciphertext.10 comprising:0 a reveal module (522),0 a user authentication module (525),0 a hierarchical security level module (502),0 a traceability module (519),15 0 a facial recognition module (523),0 a distance measurement module (524),0 a communications module (518).

2. Concealing apparatus (500) for claim 1, configured to:• conceal the sensitive content of a document,• set optional hierarchical security level of the sensitive content,• output the document to a secure server / store,• output optional hierarchical security level constraints file to a secure server / store,• output the conceal algorithm, user data, encryption keys to a secure server / store.• submit print jobs, authenticate users and record access attempts.comprising:• a concealing client application installed within the concealing apparatus (500) for disguising, concealing and / or encrypting sensitive content, submitting print jobs, authenticating users and recording access attempts, operating on a computing platform (505).• a user interface (503) configured to receive user input for identifying sensitive content of a document and the hierarchical security level of its reveal.• a conceal module (504) configured to disguise, conceal and / or encrypt the sensitive content of the document by means of encryption methods in the form of, for example, encoded dots / pixels, coding, replacement, missing, redacted and / or ciphertext.• document creator / editor program (501) configured to:0 receive input from the user interface (503) that allows for entering, editing, formatting of text and image content.0 receive input from the user interface (503) that allows for identifying, marking and tagging sensitive content and at which reveal level is appropriate for each part of the sensitive document.0 output the hierarchical security reveal level to the hierarchical security level module and constraints file that defines which security level constrains the revealing process.• hierarchical security level module (502) configured to:o receive input from a hierarchical security level constraints file (530) (506) (517) (900) that defines what authorisation constraint parameters are required for each part of the sensitive document content which may change over time, location etc e.g. level 1, 2, 3, 4 5 etc. o enable the revealing of the sensitive content based upon its security level, which content is authorised to be revealed for each part of the disguised, concealed and / or encrypted content. 10 o enable different parts of a document to have different security levels meaning the reveal process can be adapted dynamically to the authorised person, their location, time, date, surroundings e.g. sound, voices, conversations, images etc.153- Revealing apparatus (512) for claim 1, configured to:• submit print jobs, authenticate users and record access attempts.• capture the printed or displayed document and to reveal the disguised, concealed or encrypted content as if it were non encrypted content.• restrict only authorised users’ visibility of the disguised, concealed and / or encrypted content during the reveal process.• further restrict the reveal process based upon any constraints within the hierarchical security level constraints file (900) e.g. Figure 26.• record data, events and user profiles during both authorised and nonauthorised access attempts.comprising:• a revealing client application installed on the revealing apparatus configured for submitting print jobs, authenticating users and revealing the sensitive and non-sensitive content of a document.• a reveal module (522) configured to capture and to display “reveal” normal, and disguised, concealed and encrypted sensitive content of the document by means of decryption methods of the form, for example, encoded dots / pixels, coding, replacement, missing, redacted and / or ciphertext.• a secure printing process for printing jobs, authenticating users and recording access attempts.• an authorised process that restricts visibility of the sensitive content.• an optional authorisation constraints process that restricts visibility of the sensitive content based upon any constraints within the hierarchical security level constraints file (900) e.g. Figure 26.• an audit and traceability process that records data, events, surroundingsand user profiles (e.g. images, biometrics, audio) during both authorised and non-authorised access attempts.• display of normal content, and content that has been disguised, concealed and / or encrypted by decrypting methods of encoded dots / pixels, coding, replacement, missing, redacted or ciphertext during the reveal process.comprising:• reveal module (522) configured to:0 capture (515) the printed (507) and / or displayed (509) document, 0 locate the disguised, concealed and / or encrypted content,0 securely access the original content, look-up table, cryptograph keys, decoder, algorithms (506) (517) that allows visibility of the disguised, concealed and / or encrypted content,0 receive input from the user authentication module (525) to ensure that only an authorised user can consume the document’s sensitive content.0 perform language translation, if required,0 display (510) (526) the sensitive content to the authorised user (511); or0 display (510) (526) both the non-sensitive and sensitive content to the authorised user (511).• user authentication module configured to:0 receive input from a set of mandatory and optional verification parameters (e.g. person, facial image, biometrics, time &date, location, distance and surroundings) from secure stores (506) (517) via the hierarchical security level module (502) (900) and / or markers and / or data embedded data within the document,0 receive input from the hierarchical security level module (502),0 receive input from the revealing apparatus’ access control module (521),0 receive input from the communications module (518),0 receive input from the traceability module (519)• hierarchical security level module configured to:0 receive input from a hierarchical security level constrains file (530)(900)(506)(517) that defines what authorisation parameters are required for each part of the sensitive document content whichmay change over time, date, location, user etc e.g. level 1, 2, 3, 4 etc.0 reveal the sensitive content based upon its security level, which content is authorised to be revealed for each part of the disguised, concealed and / or encrypted content.0 enable different parts of a document to have different security levels meaning the reveal process can be adapted to the authorised person, their location, time, date, surroundings e.g. sound, voices, conversations, images etc, and which may change dynamically over time.• traceability module configured to:0 receive the user’s biometric data such as facial image, fingerprint, temperature, heartrate, oxygen saturation etc (513)(520)(521)(523)50 receive input from the communications module (518) e.g. GNSS location, date &time and a plurality of sensors (518)(520)50 receive information about surrounding wireless networks such as mobile, WiFi, Bluetooth, Zigbee, UWB, NFC, LoRa, loT etc. and identifying markers such as SSID, MAC address, mobile tower ID, power level, direction etc;0 receive any other sensor (520) or information available to the revealing apparatus (512);0 record authorised user’s characteristics and surroundings present during the authorisation process (517).0 record non-authorised user’s characteristics and surroundings present during the authorisation process (517).• a facial recognition module (523) configured to:0 receive input from a front facing camera (514) to verify the user (511) that is attempting to consume the sensitive content of a document.o receive input from a front facing camera (514), the camera and revealing apparatus’ characteristics e.g. display, validation window, to verify that the user (35)(511) is at an appropriate distance (33) from the revealing device’s display (7), so that no other person or apparatus can see the sensitive content.• a distance measurement module (524) configured to:0 validate the distance (34)(527) between the revealing apparatus (7)(512) and the printed (5)(507) or displayed (5)(509) document.• a communications module (518) configured to send, receive and process:0 wireless communications (516)(529)50 GNSS location (516);0 time;0 date;• an output device (510)(526) configured to receive sensitive content fromthe reveal module (522) after authentication (525) and display that content either alone or with the non-sensitive content on a display / screen or via smart display glasses or VR headset (510).• an access control module (521) configured to receive input from fingerprint sensor, password, OTP, facial recognition module (523) or other biometric sensors (520) and provide output to the User Authentication module (525) as the user pre-authentication phase prior to the facial recognition and enabling access to the revealing application and secure document store.• a sensors module (520) consisting of a plurality of sensors use to record the surroundings used in the process of determining if the user isgenuine, not under duress and within a conducive environment supported by information from at least one sensor e.g. o heartrate, O light, o sound, o biosensing, o gyroscope, o magnetometer, o proximity, o ambient &body temperature, o ECG, o air pressure, o oximetry o etc.sounds maybe recorded via microphone (528) and used to capture any voices, sounds and disturbances during the revealing process and alongside the image of the user trying to authenticate is then recorded and maybe compared with a list of unauthorised persons, maybe confirming if the user is a known “bad actor”.

4. A preferred embodiment of claim 3, wherein the revealing apparatus (512) is integrated into a mobile phone, (e.g. Apple iPhone 12 pro) comprising built-in:0 back facing camera system (515) configured to:■ capture high-resolution images of the physical document or electronic display;0 front facing camera system (514) configured to:■ capture high-resolution images of the user and the surroundings;■ use the face ID system that uses infrared sensors and a TrueDepth camerasystem to map the user’s face (35) for facial recognition and in determining the appropriate distance (33) between the user (35) and the revealing apparatus (7);0 LiDAR system, configured to:■ measure distance (34) to the physical document or electronic display;0 microphone, configured to:■ capture audio, voice, sound and / or voice signature;0 biometric sensors, configured to:■ capture user and surrounding sensor data;■ authenticate users;0 display, configured to:■ replicate the image captured by the back facing camera (515) of the document (507) and / or display (509);■ present the sensitive content once the disguised, concealed and / or encrypted content has been “revealed” by the decrypting methods and the user has been authorised;■ present a facial recognition window (214) to ensure that the user’s face (215) is positioned such that only the authorised user can consume the sensitive content (211);0 touch screen, configured to:■ provide optional selective reveal of the, disguised, concealed or encrypted content, whereby only the “touched” content is revealed;■ perform normal smart phone functions;0 storage, configured to:■ act as the local secure server / store;0 communications, configured to:■ transfer data to / from the server / store via a communications network;■ receive GNSS position data;0 processing unit, comprising:■ a central processing unit (CPU) configured to execute a dedicated revealing mobile application configured to:utilise the front facing camera image to perform facial recognition and user validation;utilise the back facing camera image to perform document capture; utilise the distance measurement system to ensure the distance to the revealing document and the user are appropriate to ensure only the authorised user can consume the sensitive content on screen.preprocess the captured document images by correcting perspective distortion, enhancing contrast, and removing background noise;detect disguised, concealed and / or encrypted content;perform text and / or image extraction from the captured document images using an onboard optical character recognition (OCR) algorithm;convert the disguised, concealed or encrypted content into readable and / or visual content using the available methods;■ a graphics processing unit (GPU) configured to process image rendering and computational tasks for graphical outputs;■ a neural engine configured to accelerate machine learning operations;■ a secure coprocessor configured to execute cryptographic operations and manage secure data storage;■ a communications engine configured to manage, for example, WiFi, mobile, BT, UWB, NFC, GNSS etc.

5. a method of claim 1 and / or 2 for securing the content of printed documents by means of disguising, concealing and / or encrypting sensitive content, comprising:0 a document or display that contains both normal content and content that has been encrypted by methods such as encoded, coded, replaced, missing, redacted or ciphertext, and / or,0 any form of content such as text, images, photos, diagrams, drawings, graphs, watermarks etc, and / or0 electronic content e.g. RFID, where the content maybe held within RF read / writeable devices located within and / or on the document.

6. a method of claim 1 and / or 3 and / or 4 for revealing printed or displayed documents that have had the sensitive content disguised, concealed and / or encrypted configured to:0 authenticate the user before operating the revealing apparatus.0 authenticate the user prior to and / or while revealing the sensitive content.o reveal sensitive content containing at least one of text, images, photos, diagrams, drawings, graphs, watermarks, RFID, that has been disguised, concealed and / or encrypted by methods such as encoded, coded, replacement, missing, redacted or ciphertext.o display the revealed content on screen.

7. an apparatus of claim 1 and / or 2 and / or 3, by means of validating facial characteristics of the user, comparing them to an authorisation list before concealing and / or revealing the sensitive content.

8. a method of claim 1 and / or 2 and / or 3, configured to only conceal and / or reveal the sensitive content while the validation of the facial or biometric characteristics are maintained.

9. an embodiment of claim 3, where the revealing apparatus operates time independently of claim 1 and / or 2, whereby the data required for the reveal process has been previously loaded into the revealing apparatus prior to the reveal.

10. an embodiment of claim 3, where the revealing apparatus operates independently of claim 1 and / or 2, configured to:0 embed the revealing method within the document, and / or0 have the revealing method preconfigured.

11. an embodiment of claim 3 and / or 4, wherein the revealing apparatus is configured to include the claim 1 and / or the concealing apparatus claim 2.

12. a method of claim i and / or 3, wherein documents that are already printed and / or stored containing, for example aliases, encoded, coded, replacement, missing, redacted and / or ciphertext content, can reveal the original content to authorised users by securely referring to the original document, indexed list, look-up table and / or other encryption methods, revealing the disguised, concealed or encrypted content on the display of the apparatus of claim 3 and / or 4.

13. an embodiment of claim 1 and / or 2 and / or 3, Figure 24, Figure 25, where smart glasses or a VR headset, containing the required processing power and resources can perform the concealing and / or the revealing processes. Disguised, concealed and / or encrypted content (24) visible on for example a laptop, tablet or mobile phone screen (23) via the front facing cameras (22) is sent to the integrated display (27) via the concealing or revealing application, the concealed and / or revealed content (25a)(25b) is now restricted to the authorised wearer of the smart glasses or a VR headset, orsmart glasses or a VR headset maybe used in conjunction with a separate revealing and / or concealing device of claim 4 and / or claim 11 via wireless communication, provides the required resources for the concealing and / or revealing processes, the smart glasses or a VR headset provide further enhancement by enabling total privacy to the authorised user when reading and / or writing sensitive documents, especially in non-secure environments.

14. a method of claim 13 where the authorised document creator inputs content into, for example the laptop, the fully revealed content is visible to the creator on the smart glasses or a VR headset, but the laptop screen display is part or fully illegible to non-authorised users, preventing documents being overseen by unauthorised persons, enabling the authorised person to read and write content in unrestricted locations such as on trains, aeroplanes and / or non-secure areas.15- a method of claim 3, that during the revealing process, the microphone (528) may be used to capture any voices, sounds and / or discussions during the revealing process, alongside the image from the front facing camera, of the user or users attempting to access the sensitive content, may then be recorded for audit and traceability purposes and maybe compared with a list of unauthorised persons, maybe confirming if the user is a known “bad actor”, leading to the halting of the revealing process or revealing false content.

16. a method of claim 3, where an authorised user, operating under duress can use predetermined words, gestures, images, actions, language, accents etc. to trigger the halting of the revealing process or the revealing of false and / or misleading content.

17. a method of claim 3, where the users’ voice may be recorded and used in the user validation process, any sounds, voices and / or conversations conducted during the revealing of the sensitive content recorded as part of the audit and traceability process.

18. a method of claim 3, where audio capture and processing may identify any voice signature of the authorised or non-authorised user, if there are any language or accent differences to those expected and if any key words are used that might further identify any “bad actor” attempting to gain access to sensitive documents or content.

19. a method of claim 1 and / or 2 and / or 3, wherein access control policies are enforced to restrict revealing restricted content based on user roles, departments, location, time, date, and / or other criteria.

20. a method of claims 1, and / or 2, and / or 3, allowing for time sensitive documents such as a battle plan to be revealed to the correct person, at the correct time and at the correct location, which can be changed dynamically and in real-time .

21. a method of claims 1, and / or 2, and / or 3, which allows for different parts of the document to have different reveal criteria, which allows for different parts of the sensitive document to be revealed, for example at different time, date, location etc.

22. a method of claim 3, where the use of proximity measuring capabilities ensure that the view of the revealing device’s display is restricted to the authorised and intended person only, comprising at least one of:0 LiDAR system built-in to today’s mobile devices, Figure 5, configured to measure the distance (34) between the revealing apparatus (7) and the document (5) being revealed,0 facial recognition system alongside the characteristics of the revealing apparatus’ front facing camera system, display and user profile, configured to validate the distance (33) from the user (35) to the revealing device’s (7) display using at least one of:■ the face ID system that uses, for example infrared sources, sensors and a TrueDepth camera system to map the user’s face (35).■ the camera / sensor characteristics;■ lens characteristics;■ image focus and clarity;■ zoom level;■ authorised user’s visual capabilities;■ active area guide;which ensure that the user (35) is positioned at an appropriate distance (33) from the revealing device’s display, that ensures that only the user’s face is in view of the display (200)(214) and can maintain their face within the active area (201)(214) to prevent any unauthorised person (219)(202), machine or AI from circumventing the user validation process by being inserted between the revealing device (7) and the authorised user (35).

23. a method of claims 1, and / or 2, and / or 3, where the revealing apparatus of claim 3 maybe used to scan an electronic and / or printed letter, leaflet, poster or document that is then compared to an official document held by the business and used to validate all the content is official and not a scam.

24. a method of claims 1, and / or 2, and / or 3, where the revealing apparatus of claim 3 may be used to scan printed and electronic QR, Barcode and other encoded quick response mechanisms, compared to the official QR, Barcode and other encoded quick response mechanisms held by the business and used to validate all the content is official and not a scam.

25. a computer-readable storage medium arranged to store computer program instructions which, when executed by one or more processors, perform the methods of claim 1 and / or 2 and / or 3.