Product tag

Abstract

This disclosure relates to a tag comprising an identifier visually representing first information and a mechanism to change the tag from a first state relating to the tag being unaltered where the machine readable identifier is inaccessible to a second state relating to the tag being altered where the machine-readable identifier is accessible. The machine-readable identifier comprises a substance that has a first configuration in the first state of the tag and changes to a second configuration in the second state of the tag. The first information is readable in the first configuration and unreadable in the second configuration.

Description

"Product tag"Technical Field

[0001] This disclosure relates to product identifiers.Background

[0002] Product serialisation addresses the problem of substandard and falsified medicines entering legitimate supply chains with significant success, but it is not without limitations. Firstly, product serialisation is expensive and complex to implement, and is co-ordinated across a large geographical area to be successful and minimise leakiness (country or region wide). Secondly, product serialisation places a large burden on manufacturers who assign a unique serial number, GTIN, LOT numbers, and expiry date to each package - in some cases each primary, secondary, and tertiary package. Thirdly, it also places a large burden on distributors and retailers who record custody transactions and decommission each package correctly. This reliance on the ‘human element’ exposes serialisation to fraudulent actors and human error. When packages enter a supply-chain, they are scanned at regular points by humans to ensure a continuous chain or custody is established up to the point of sale. In theory, this reduces the chance of products being intercepted by a counterfeiter, diverted, or otherwise tampered with before they reach the customer. However, product validation at discrete points along the supply chain still leaves open the possibility of interception. Furthermore, when a package exits the supply chain (sold to a customer, research institution, hospital, etc.) each unique serial number is decommissioned in accordance to how it exits the supply chain, which also relies on human input. Failure to decommission a serial number correctly may allow counterfeiters to replicate or reuse an un-decommissioned identifier to sell fraudulent products back into legitimate supply chains.

[0003] Lastly, when a serialised package is sold and decommissioned, all the information to replicate or recycle the package is available to counterfeiters. The onlyway a counterfeited product may be detected within a serialisation zone is if the consumer actively scans the package and checks if the unique serial number has previously been decommissioned. This is something that consumers are unlikely to do if they are not trained to detect counterfeit products, or if the counterfeit product is convincing. Additionally, if counterfeit products are transported outside of the serialisation zone, the consumer has no easy way of identifying a counterfeit. With the auto-decommissioning identifier invention disclosed here, the unique identifier is automatically taken out of circulation shortly after a package is opened.

[0004] When executed properly, serialisation can work well for pharmaceutical products in developed economies who have regulatory capacity to implement it, and the money to pay for it. However, it is not a good fit for many other parts of the world nor for other lower value products, and ultimately does not solve the problem of counterfeiting and diversion.

[0005] Any discussion of documents, acts, materials, devices, articles or the like which has been included in the present specification is not to be taken as an admission that any or all of these matters form part of the prior art base or were common general knowledge in the field relevant to the present disclosure as it existed before the priority date of each of the appended claims.Summary

[0006] A tag comprises: a identifier visually representing first information; and a mechanism to change the tag from a first state relating to the tag being unaltered where the machine readable identifier is inaccessible to a second state relating to the tag being altered where the machine- readable identifier is accessible, wherein the machine-readable identifier comprises a substance that has a first configuration in the first state of the tag andchanges to a second configuration in the second state of the tag, and wherein the first information is readable in the first configuration and unreadable in the second configuration.

[0007] In some embodiments the identifier is a machine-readable identifier.

[0008] In some embodiments, second information, different from the first information is readable from the machine-readable identifier in the second configuration.

[0009] In some embodiments, the mechanism is a seal that, in the first state, isolates the identifier from environmental conditions and, in the second state, exposes the identifier to the environmental conditions, and the substance changes to the second configuration as a result of being exposed to the environmental conditions.

[0010] In some embodiments, the environmental conditions comprise a presence of one or more of atmospheric oxygen, or electromagnetic radiation.

[0011] In some embodiments, the colour changing substance changes to a second configuration in response to exposure to atmospheric oxygen.

[0012] In some embodiments, the substance is a colour-changing substance that has a first colour in the first configuration and a second colour in the second configuration.

[0013] In some embodiments, the colour-changing substance changes colour in response to an environmental change as a result of opening the package.

[0014] In some embodiments, the colour changing substance is formulated into an ink and the identifier is made by printing the ink on a substrate.

[0015] In some embodiments, the substance changes colour when exposed to oxygen and is oxichromic.

[0016] In some embodiments, the colour changing substance is a phenothiazine, which is a redox chemical that reacts with oxygen.

[0017] In some embodiments, the substance changes colour when exposed to visible light and is photochromic.

[0018] In some embodiments, the identifier is a binary graphical code comprising dark areas identifying a first binary value and bright areas identifying a second binary value and the colour changing substance inhibits a distinction between at least some of the dark areas and bright areas to thereby make the first information unreadable.

[0019] In some embodiments, the first colour of the colour-changing substance is visible to a reading device to constitute the identifier and the second colour is invisible to the reading device to make the first information unreadable.

[0020] In some embodiments, the first colour of the colour-changing substance is invisible to a reading device, the identifier is created using a different ink than the colour-changing substance, the colour-changing substance overlaps with the identifier and in the second colour at least partially covers the to make the first information unreadable.

[0021] In some embodiments, the colour-changing substance is a colour changing ink used isolated from the environmental conditions, the identifier is created using the same colour changing ink in the form exposed to the environmental conditions, the colourchanging substance overlaps with the identifier and in the second colour at least partially covers the identifier to make the first information unreadable.

[0022] In some embodiments, the substance comprises a coloured fluid and the tag comprises an absorbent material to transport the coloured fluid from a repository to the identifier to colour at least parts of the identifier to make the first information unreadable.

[0023] In some embodiments, the mechanism is configured to release the coloured fluid from the repository upon the tag being changed to the second state to access the identifier.

[0024] In some embodiments, the identifier comprises product information.

[0025] In some embodiments, the product information is verifiable against data stored in a remote database.

[0026] In some embodiments, the product information comprises a product identifier unique to a product to which the tag is attached.

[0027] In some embodiments, the tag is applied to a package and unaltered relates to the package being unopened and altered relates to the package being opened.

[0028] In some embodiments, the identifier is readable by a camera of a mobile communication device.

[0029] A method for verifying a product comprises: altering a packaging of the product from a first state into a second state, wherein a identifier is inaccessible in the first state and accessible in the second state; scanning, with a scanning device during a scanning time, the identifier; decoding the identifier to decode product information data associated with the product; and verifying, by the scanning device, the product information data, wherein the identifier comprises a substance that changes to a changed configuration in response to altering the packing and after the scanning time, and the identifier is unreadable in the changed configuration.

[0030] In some embodiments, altering the packaging comprises opening a seal, where the unopened seal isolates the machine readable identifier from environmentalconditions, and opening the seal exposures the machine readable identifier to the environmental conditions causes the identifier to change to the changed configuration.

[0031] In some embodiments, opening the seal comprises operating a mechanism that opens the package.

[0032] In some embodiments, the environmental conditions comprise a presence of atmospheric oxygen.

[0033] In some embodiments, the substance comprises one or more of a redox substance, or leuco substance, a phenothiazine, or a spiropyran.

[0034] The auto-decommissioning identifier (ADI) codes disclosed here are also directly analogous to two-factor authentication, but for physical products. The first factor, in the case of conventional two-factor authentication, is a user appearing as legitimate to a website by logging in with the correct password. The equivalent first factor for ADIs is a package appearing as legitimate to a customer by presenting with the correct attributes. In both cases, the first factor is regarded as insufficient to protect against fraud or counterfeiting. The second factor, in the case of conventional two- factor authentication, is a code provided by a third party authenticator application that confirms a user is legitimate. This code times-out to prevent brute force hacking attacks. The equivalent second factor for auto-decommissioning identifiers is also a unique identifier code provided by a third party that confirms a product is legitimate. This code also ‘times-out’ (auto-decommissions) to prevent a package being replicated or reused.

[0035] Throughout this specification the word "comprise", or variations such as "comprises" or "comprising", will be understood to imply the inclusion of a stated element, integer or step, or group of elements, integers or steps, but not the exclusion of any other element, integer or step, or group of elements, integers or steps.Brief Description of Drawings

[0036] An example will now be described with reference to the following drawings:

[0037] Figure 1 illustrates a product package in different states.

[0038] Figure 2 illustrates a method for verifying a product.

[0039] Figure 3 illustrates benefits of auto-decommissioning identifiers.

[0040] Figure 4 illustrates compositions of auto-decommissioning identifiers.

[0041] Figure 5 illustrates examples of different state changes resulting in autodecommissioning identifier being destroyed or changed.

[0042] Figure 6 illustrates state changes that edit information in the identifier (ID).

[0043] Figure 7 illustrates how auto-decommissioning identifiers may be encrypted in a symbol.

[0044] Figure 8 illustrates auto-decommissioning identifier (ADI) components, use, and state change.

[0045] Figure 9 illustrates a methodology for manufacturing auto-decommissioning identifier (ADI).

[0046] Figure 10 illustrates an auto-decommissioning identifier (ADI) that uses liquid obfuscator and capillary action mechanism.

[0047] Figure 11 illustrates an example workflow where serialisation is not implemented, and consumer does not have access to internet, and manufacturer does not append product information.

[0048] Figure 12 illustrates an example workflow where serialisation is not implemented, and consumer does or does not have access to internet at time of scanning and manufacturer does append product information.

[0049] Figure 13 illustrates another example workflow where serialisation is implemented, and consumer has access to internet and manufacturer does append product information.Description of Embodiments

[0050] This disclosure provides a product identifier that auto-decommissions. This way the product identifier can be read for a period of time but then becomes unreadable so that the same identifier cannot be used for another product that may not be a genuine product. Such an auto-decommissioning identifier can reduce the number of counterfeit goods because an end user can read the product identifier and match them against a database or other information on the product packaging or both to verify that the product is genuine.

[0051] A ‘good’ anti-counterfeiting and tamper-proof (ACTP) technology should meet all of the following:• Prevent recycled and replicated package counterfeiting• Be economically infeasible to reverse-engineer, given the value of the product protected• Result in a maximum of one unit being affected if broken• Incorporate a decisive test for packages that are suspected of being counterfeited / tampered with• Be operated by a typical end-user with access to smartphone technology only• Easy to implement and able to be integrated into existing manufacturing processes• Does not rely on complex processes for decommissioning.

[0052] Here, we disclose an invention that, in some embodiments, meets all the criteria of a ‘good’ ACTP technology, and also addresses the major limitations of serialisation - implementation cost and complexity, reliance on the ‘human element’ to record custody transactions and decommission unique identifiers correctly, and exposure to re-used and replicated package counterfeiting. The technology may be used in place of, or complementary to, product serialisation platforms.

[0053] This disclosure relates to an auto-decommissioning (i.e. self-destructing) unique (or not) package identifier that: (1) is optionally instigated by the action of opening a package or another step essential to using the package (2) may be scanned and validated by a smartphone application within a specific time window, and (3) irreversibly auto-decommissions after the time window elapses (typically ~10 minutes). The significance of this invention is that it transfers decommissioning of unique identifier to the end user. There are also two routes for decommissioning - an automatic decommissioning of the physical identifier, and virtual decommissioning of the identifier through a smartphone application. If the user fails to decommission the identifier virtually, the automatic physical decommissioning acts as a safety-net and takes the identifier out of circulation. Advantageously, the user can also visually assess package decommissioning in real-time through the self-destruction of the unique identifier, or whether a package has been decommissioned previously by a previous user. This means that they don’t need to trust individuals at, and upstream from, the point of sale.

[0054] Figure 1 illustrates a product package 100 comprising an opening mechanism such as a lid 101. There is also tag 102 comprising a product identifier 103 visually representing information. The information may be associated with the product, such as a serial number, authentication code or other information. Visually representing means that the identifier shows the information so that it is visually or optically extractable or readable. As such, the product identifier 103 may be human-readable, such as in the form of text, numbers, icons, images, etc. or it may be machine readable so that the product identifier can be read by a device that the customer can operate, such as an optical reading device. Machine-readable in this context means that the informationrepresented by the physical identifier can be extracted by a reader device or machine. In some cases, machine-readable means that most humans cannot readily extract the information with the naked eye, such as from a barcode. In other cases, alphanumeric characters may be readable by a human and also machine readable. However, for improved robustness, machine-readable identifiers are of high contrast areas that are optimised for machine reading rather than human reading.

[0055] For example, this may mean that the product identifier 103 is constructed of regular areas of different reflectivity, such as black and white or other contrasting colours. The contrast between these areas is sufficient for a reader device to extract the information from the identifier 103. The reader device may be an optical reader device that captures light reflected from the product identifier 103. The reader device may be passive, such as a camera, in that it relies on environmental light reflected from the product identifier 103. The reader device may be active, such as a camera with a light to illuminate the product identifier. Cameras are reader devices that capture a 2- dimensional array of pixel values (i.e. a digital image) and extract the product identifier information from that array of pixel values. However, point-based reader devices can equally be used, such as laser scanners that measure the reflectivity at each point by directing a laser beam at that point and measuring the intensity of the reflected light and then moving the laser beam to the next point, such as along a line. This can be used for barcode scanning and the barcode can be created according to this disclosure so that the barcode becomes unreadable.

[0056] Unreadable means that the machine or reading device does not extract the correct information from the product identifier. For example, the contrast or difference in intensity becomes insufficient to distinguish between the dark areas and the bright spaces or vice versa. The contrast that is sufficient may depend on the noise level of the reader device, in which case readable may mean readable under a prevailing noise level. More particularly, readable may mean that the contrast across the product identifier 103 is higher than the noise level of the reading device and unreadable may mean that the contrast is lower than the noise level of the reading device.

[0057] For example, the machine readable identifier 103 may be in the form of a quick response (QR) code. A QR code can be conveniently read by a smart phone 104 with the use of a camera and an image processing software that extracts the encoded information from the QR code. The tag 102 is affixed on the inside of the lid and the package 100 is not transparent. As a result, the smart phone 104 cannot read the product identifier 103 while the package is closed.

[0058] In another embodiment, the identifier is a string of alphanumeric or ASCII characters that is read by a human and reported to an authentication service without a machine readable device. For example, a user messages the identifier code to an authentication service, which crosschecks the identifier code on a database of valid identifier codes, and reports the authenticity of the product back to the user. In this case, the identifier is human read during the active ADI time window, and autodecommissions using any of the mechanisms described in this disclosure.

[0059] This is referred to as the product identifier 103 being inaccessible for scanning and the state of tag 102 in which the product identifier 103 is inaccessible is referred to as first state or unaltered state to mean the state in which the package travels through the supply chain until it arrives at the end customer who opens the package, which is then referred to as the second state or altered state. This is indicated by numeral 105 in Figure 1. It is also noted that the package 100 acts as a seal that isolates the product identifier from environmental conditions, such as oxygen in atmospheric air.

[0060] When the end customer opens lid 101 of package 100, the product identifier 103 becomes accessible and is exposed to environmental conditions of the environment of package 100. The product identifier is made of a substance that changes colour when exposed to the environmental conditions. That is, this substance has a first configuration in the first state 105 and changes to a second configuration in the second state 106. The product information is readable in the first configuration and unreadable in the second configuration.

[0061] In the example of Figure 1, the product identifier comprises a layer on top of the QR code and that layer is transparent while the product identifier is isolated from the environmental conditions and turns into a solid colour, such as black, in response to the layer being exposed to the environmental conditions. This is shown at 106 in Figure 1. As can be seen, the product identifier is now accessible but it is unreadable. This is referred to as the second state or altered state, where the product identifier has been decommissioned automatically. In other words, the lid 101 acts as a mechanism to change tag 102 from first state 105 relating to tag 102 being unaltered where the machine readable identifier 103 is inaccessible to a second state 106 relating to tag 102 being altered where the machine-readable identifier 103 is accessible.

[0062] There is a transition time between the unaltered state 105 and the altered state 106 and the transition state is referenced as 107 in Figure 1. During this transition, the product identifier 103 is accessible and the end customer can scan, using a smart phone 104, the QR code and verify the product using the extracted information. For example, the customer can connect to an online database and check that this specific product has not been opened elsewhere. Upon verifying that this is the case, the customer may cause the database to update to reflect that this particular product has been opened. This way, if another person scans the same code, that person will then be able to discern from the database that the product of that other person is likely to be a counterfeit good or that something else is wrong in the supply chain.

[0063] For the legitimate end user, there is a limited amount of time to scan the QR code because the chemicals in the product identifier 103 react with the environment and that reaction leads to the product identifier being irreversibly unreadable. This chemical process may take about 10 minutes to give the customer sufficient time to scan the QR code but make re-use of the product identifier impractical. Other time frames for decommissioning may equally be possible, such as a time between 1 minute or 1 day.

[0064] In some examples, second information, different from the first product identifier is readable from the product identifier in the second configuration. Forexample, additional squares may appear in the QR code so that the encoded information changes to something different.

[0065] As stated above, the substance changes from transparent to a solid colour. More generally, the substance is a colour-changing substance that has a first colour in the first configuration and a second colour in the second configuration. “Colour” in this context comprises any condition of reflectivity or transmissivity and as such, includes black, white or any other point in an RGB, CMYK or other colour coordinate as well as opaque, translucent or transparent. In one example, the substance is ink and the identifier is made by printing the ink on a substrate. In other examples, the substance is a dye or other substance. As the substance changes from the first colour to the second colour, the contrast across the QR code, that is, the contrast between areas of a different colour (e.g. black / white, green / red, blue / green), reduces until the areas are of the same colour. At that point, the contrast is zero and the identifier is unreadable.

[0066] The QR code is a binary graphical code comprising dark areas identifying a first binary value and bright areas identifying a second binary value. So black squares may be ones and white squares zeros or vice versa. It is noted that black / white can be replaced by other contrasting colours. The smart phone 104 extracts the binary data and decodes the information from the binary data, such as a unique product serial number. The colour changing substance inhibits a distinction between at least some of the dark areas and bright areas to thereby make the first information unreadable once the substance has changed colour as a result of being exposed to the environmental conditions.

[0067] In another example, the substance becomes invisible in response to being exposed to the environmental conditions. That is, the first colour of the colourchanging substance is visible to a reading device, such as black, to constitute the identifier and the second colour, after the change, is invisible to the reading device, such as transparent or white, to make the first information unreadable. Invisible in this context means indistinguishable from the background or substrate.

[0068] In another example, the ink changes from invisible to visible to obfuscate the identifier. That is, the first of the colour-changing substance is invisible to a reading device, the identifier is created using a different ink than the colour-changing substance, the colour-changing substance overlaps with the machine-readable identifier and in the second colour at least partially covers the machine-readable to make the first information unreadable.

[0069] In yet another example, the same ink is used but under different conditions. That is, the colour-changing substance is a colour changing ink used isolated from the environmental conditions, e.g. in the absence of oxygen. The identifier is created using the same colour changing ink but exposed to the environmental conditions, e.g. in the presence of oxygen to make the identifier readable. The colour-changing substance overlaps with the machine -readable identifier and in the second colour at least partially covers the machine-readable identifier to make the first information unreadable.

[0070] In another example, the colour changing substance is a redox chemical, where the reduced form of the chemical is a different colour to the oxidised form of the chemical. The oxidised form of the first colour may be printed under most environmental conditions whilst the reduced form of the second colour is printed under zero or low atmospheric oxygen conditions. The identifier is then sealed under zero or low oxygen atmospheric conditions. When the seal is broken and the identifier is exposed to atmospheric oxygen the reduced form converts to the oxidised from, making the machine readable identifier printed in the oxidised form unreadable.Advantageously, using different forms of the same chemical to manufacture the identifier means the identifier in the decommissioned end-state is comprised of only one form of the chemical, which makes reverse-engineering difficult.

[0071] It is noted that the identifier does not need to be affixed to packaging that contains the product. In other examples, the tag is a sticker that has the product identifier on the side of the adherent and sticks to the product. In that case, the mechanism is the sticker and the customer can peel off the sticker to scan the identifier. As a result, the identifier is exposed to environmental conditions from which the gluehad insulated the identifier. Hence, the identifier becomes unreadable as described above. Other types of mechanisms for the state stage are equally possible.

[0072] While the above examples relate to colour changing inks that have been printed immovably onto a substrate, it is also possible to use lateral flow to cover the identifier. In that case, the substance comprises a coloured fluid and the tag comprises an absorbent material to transport the coloured fluid from a repository to the identifier to colour at least parts of the identifier to make the first information unreadable. The result may look similar to state 106 at Figure 1 with the difference that during the transition the code is covered gradually in the direction of the flow of the fluid.

[0073] In this example, the mechanism, e.g. the lid 101, is configured to release the coloured fluid from the repository upon the tag being changed to the second state to access the machine -readable identifier.

[0074] Figure 2 illustrates a method 200 for verifying a product. Method 200 comprises altering 201 a packaging of the product from a first state into a second state, such as by opening a lid or peeling off a sticker. The machine-readable identifier is inaccessible in the first state and accessible in the second state as described above. Then, the method 200 comprises scanning 202, with a scanning device, such as a mobile phone during a scanning time, the machine -readable identifier. Here, the scanning time may correspond to the transition state 107 in Figure 1. The next step is to decode 203 the machine-readable identifier to decode product information data associated with the product and to verify 204 by the scanning device, the product information data. As described above, this verification can involve sending the decoded information to a database or another verification service, or by locally verifying the information. For example, the packaging may have another QR code that encodes a hash value of the product identifier and the mobile device calculates the hash code of the identifier and checks whether is identical to the hash code on the package.

[0075] As also described above, the identifier comprises a substance that changes to a changed configuration in response to altering the packing and after the scanning time, and the machine-readable identifier is unreadable in the changed configuration.

[0076] Figure 3 illustrates benefits of auto-decommissioning identifiers (ADIs) relative to manual-decommissioning identifiers. Here, the major limitations of serialisation (dotted lines) are shown - implementation cost and complexity, reliance on the ‘human element’ to record custody transactions and decommission unique identifiers correctly, and exposure to re-used and replicated package counterfeiting. The significance of ADIs (solid / black) is that it transfers decommissioning of unique identifier to the end user, which is instigated upon opening of the package. There are also two routes for decommissioning - an automatic decommissioning of the physical identifier, and virtual decommissioning of the identifier through a smartphone application. If the user fails to decommission the identifier virtually, automatic physical decommissioning acts as a safety net and takes the identifier out of circulation within a restricted time window. Advantageously, consumers can also visually assess package decommissioning in real-time through the self-destruction of the unique identifier. This means that consumers don’t need to trust individuals at, and upstream from, the point of sale. Additionally, ADIs mean that custody transactions do not need to be documented at each point in the supply chain, thereby reducing implementation cost and complexity.Examples

[0077] The following description provides further examples of how to implement the methods and tags described generally above.

[0078] Figure 4 illustrates compositions of auto-decommissioning identifiers (ADIs). ADIs are comprised of an identifier (ID) and an obfuscator (OB). In State 1 the ID and OB are substantially different colours. In State 2 either one or both of the ID and OB are chromogenic dyes that change colour to a substantially similar or identical colour. Importantly, the transition from State 1 to State 2 results in the irreversible destructionof information. Note that all or some of the OB overlap the ID, and may be (A) behind the ID, (B) in front of the ID, or (C) a combination of both in front and behind the ID.

[0079] Figure 5 illustrates examples of different state changes resulting in autodecommissioning identifier (ADI) being destroyed or changed. (A) ID is colour 1 (black) and printed on background of colour 2 (white). ID changes state (blackclear, ID is also OB). (B) ID is colour 1 (black) and printed on background of colour 2 (white). ID changes state to colour 2 (black white, ID is also OB). (C) ID is colour 1 (black) and printed on background of colour 2 (white). OB changes state to colour 2 (clear white). (D) ID is colour 1 (black) and printed on background of colour 2 (white). OB changes state to colour 1 (clear black). (E) ID is colour 1 (black) and printed on background of colour 2 (white). ID changes state to colour 3 (black grey) and OB changes state to colour 3 (clear grey). (F) ID is more than one colour and printed on background of colour 1 (white). ID and OB change state such that the activated / decommissioned ADI is the same colour. Other colour transitions are also possible. In some cases, ID is not required to be printed with a chromogenic dye.

[0080] Figure 6 illustrates state changes that edit information in the identifier (ID), which means in the second state, second information is readable and the second information is different to the first information that is readable in the second state. Activation of the auto-decommissioning identifier (ADI) causes the information in (A) State 1, which contains the information 10REAL01ABCKS, to be edited to the information encoded in (D) State 2, which contains the information 10USED01ABCKS. This process uses two state changes and two chromogenic dyes. In this example the first (B) converts some black pixels white, and the second (C) converts some white pixels to black. The resulting change in pixel colour results in State 2. Note that the two state changes (B and C) may occur simultaneously. Other colour transitions are also possible.

[0081] Figure 7 illustrates how auto-decommissioning identifiers may be encrypted in a symbol. (A) information displayed in a way that is readable by the public, such as text, QR codes, or data matrix codes, may be (B) first encrypted into a symbol or imagethat is decoded by specific software, and similarly (C) obscured by a state change in the obfuscator (OB, grey) or identifier (ID) or both.

[0082] Figure 8 illustrates auto-decommissioning identifier (ADI) components, use, and state change. In (A) information that is in a form that is accessible to the public is (B) encrypted into an identifier (ID). The ID is printed in one or more chromogenic dyes that are in the same form as if an activator is present which induces an activated state (i.e. State 2 = black). Subsequently, in (C) the activator is removed, and the same or different chromogenic dye is used to print the overlapping obfuscator in its inactivated state (i.e. State 1 = clear). Preferably an irreversible chromogenic dye is used that may only revert to its first inactivated state (State 1 = clear) via a second activator / s that is different to the first activator / s that induces its second activated state (State 2 = black). However, reversible chromogenic dyes may also be used. Optionally, in (D) an activation modulation layer (AML) or additive may be used to modulate the exposure of the ADI to the first activator 1 that induces State 1 (clear)State 2 (black). The AML is used to tune the auto-decommission time of the ADI. The autodecommissioning time of the ADI should preferentially be 1-60 minutes or ideally 5-15 minutes, which is sufficient for a user to scan the ID with a smartphone application.

[0083] In (E) the initiator is any action undertaken by the user to expose the ADI to activator 1. This may, for example, include peeling off a sticker or seal to expose the ADI to atmospheric oxygen, light, pressure, temperature, or any other stimuli. At (F) the ADI is exposed to the (G) activator 1, and the user has 5-15 minutes to scan the ID with a smartphone application before a state change occurs that destroys the ID. In this example, the ADI is printed with one chromogenic dye that is comprised of an ID in State 2 and an OB in State 1. Exposure to the activator destroys information in the ID by (H) inducing OB to change to the same state as the ID (State 2 = black). The OB and ID may be reverted to State 1 (I) with a different activator if an irreversible chromogenic dye is used to print ID and OB, or the same activator if a reversible chromogenic dye is used to print ID and OB. In both cases the ID and OB is reverted to the same state (State 1 = clear) and the information in the ID remains destroyed.

[0084] Figure 9 illustrates a methodology for manufacturing auto-decommissioning identifier (ADI). In (A) an identifier is generated, and in (B) this identifier is printed under chromogenic activation state 1 conditions which induce the identifier to be visible. Here, activator state 1 conditions are defined as any conditions that maintain a chromogenic dye in one chemical or colour form only. Activator state 1 conditions may be environmental conditions. Activator state 2 conditions are defined as any conditions that maintain a chromogenic dye in two or more chemical or colour forms. For example, for some oxichromic inks the oxidised coloured form remains oxidised under zero or high oxygen conditions. However, the reduced colourless form of the same ink is only stable under low or zero oxygen conditions. In (C) activator state 1 conditions are changed to activator state 2 conditions and preferentially the same chromogenic ink, but in a different colour form, is used to print the obfuscator. Activator state 1 conditions may be environmental conditions, and State 2 conditions are any conditions that maintain the chromogenic dye in two or more different colour forms. In (D) an optional activator modulation layer is added which modulates the rate of state change in response to the reinstatement of activator state 1 conditions.

[0085] In (E) the ADI is sealed under activator state 2 conditions so that it can be exposed to activator state 1 conditions without causing the obfuscator to undergo a chromogenic change. Preferentially, activator state 1 conditions are environmental conditions so when the seal is opened the obfuscator undergoes a change to the same chromogenic state as the identifier. Preferentially irreversible chromogenic dyes used are (G) completely irreversible or (H) only irreversible in the presence of a different activator. Alternatively, the ID is printed in permanent non-chromogenic dye and the OB is printed in a reversible or preferentially irreversible chromogenic dye in a colour form that permits the ID to be read, such that a change to activator state 2 conditions makes the ID illegible after a certain period of time.

[0086] Figure 10 illustrates an auto-decommissioning identifier (ADI) that uses liquid obfuscator and capillary action mechanism. In (A) the liquid obfuscator obscures the identifier and in (B) the liquid obfuscator dissolves or chemically destroys the identifier. For both (A) and (B) steps (i)-(v) are equivalent. In (i) the identifier isprinted on or affixed to a material that permits capillary action / wicking of the liquid obfuscator, such as capillary paper. The identifier is covered by a seal so that it is not visible until opened. In (ii) the seal is opened which both releases the liquid obfuscator, or otherwise initiates migration of the liquid obfuscator and makes the identifier visible to the consumer. The consumer may then scan and validate the identifier. In (iii) the liquid obfuscator travels along the capillary material at a rate that has been optimised to auto-decommission the identifier in a sufficient amount of time to allow the user to scan and validate via a smartphone application.

[0087] The travel time of the liquid obfuscator may be adjusted using techniques and / or methodologies of paper-based microfluidics. In (iv) the liquid obfuscator front has progressed to the identifier and in (v) the liquid obfuscator has completely decommissioned the identifier. This system may also be used in conjunction with environmental initiators, for example, where opening the seal causes a pressure change, and that pressure change initiates the release of the liquid obfuscator - for example, through breaking a second seal that contains a reservoir or liquid obfuscator.

[0088] Figure 11 illustrates an example workflow where serialisation IS NOT IMPLEMENTED, and consumer DOES NOT HAVE ACCESS to internet, and manufacturer DOES NOT append product information. In (A) two autodecommissioning identifiers (ADI_1 and ADI_2) are supplied together to a product manufacturer, where ADI_1 is identical to ADI_2, or ADI_2 is an encrypted value of ADI_1, for e.g. ADI_2 = hash(secret text ||ADI_1) where “||” = concatenate. The manufacturer (B) splits the pair of ADIs and (C) affixes ADI_1 to the primary package and ADI_2 to the secondary package. The consumer (D) receives the packaged product, (E) opens the product which also unseals ADI_2 on the secondary package and scans (Scan 1) the still-visible ADI_2 which is validated by a software application, either by direct comparison or by decryption then direct comparison.

[0089] The software application may also include an artificial intelligence image classifier to record other secondary package information for further validation. In (F) ADI_2 auto-decommissions. The user takes out the primary package and mayoptionally (G) remove the seal and scan ADI_1 (Scan 2) and cross validate with ADI_2. The software application may also include an artificial intelligence image classifier to record other primary package information for further validation. In (H) ADI_1 auto-decommissions. Alternatively, ADI_1 is an identifier (ID) and not an ADI. Many other variations are also possible. If the user does not scan ADI_1 or ADI_2 identifiers, both physically auto-decommission and are taken out of circulation.

[0090] Figure 12 illustrates an example workflow where serialisation IS NOT IMPLEMENTED, and consumer DOES or DOES NOT HAVE ACCESS to internet at time of scanning and manufacturer DOES append product information. In (A) two auto-decommissioning identifiers and a public identifier (ADI_1, ADI_2 and PI) are supplied together to a product manufacturer where ADI_1 is identical to ADI_2, or ADI_2 is an and encrypted value of ADI_1 (for e.g. ADI_2 = hash(secret text||ADI_l) where “||” = concatenate), or AD I I and ADI 2 are associated to each other on a database, and where PI is associated with ADI_2 or ADI_1 on a database and / or is an encrypted value of ADI_2 or ADI_1, e.g. PI = hash(secret text||ADI_2 or ADI_1). The manufacturer scans PI (Scan 1) and appends relevant product information in a database. The manufacturer then (B) splits the pair of ADIs, discards PI and (C) affixes ADI_1 to the primary package and ADI_2 to the secondary package.

[0091] The consumer (D) receives the packaged product (E) opens the product which also unseals ADI_2 on the secondary package and scans (Scan 2) the still-visible ADI_2 which is validated by a software application. The software application may also include an artificial intelligence image classifier to record other secondary package information for further validation. In (F) ADI_2 auto-decommissions. The user takes out the primary package and may optionally (G) remove the seal and scan ADI_1 (Scan 3) and cross validate with ADI_2.

[0092] The software application may also include an artificial intelligence image classifier to record other primary package information for further validation. In (H) ADI_1 auto-decommissions. If the user is connected to the internet, or the user reconnects to the internet, scanning event information is appended to a database and theADIs are electronically decommissioned. Alternatively, ADI_1 is an identifier (ID) and not an ADI. Many other variations are also possible. If the user does not scan ADI_1 or ADI_2 identifiers, both physically auto-decommission and are taken out of circulation.

[0093] Figure 13 illustrates another example workflow where serialisation IS IMPLEMENTED, and consumer HAS ACCESS to internet and manufacturer DOES append product information. In (A) two auto-decommissioning identifiers and a public identifier (ADI_1, ADI_2 and PI) are supplied together to a product manufacturer where ADI_1 is identical to ADI_2, or ADI_2 is an and encrypted value of ADI_1 (for e.g. ADI_2 = hash(secret text||ADI_l) where “||” = concatenate), or ADI_1 and ADI_2 are associated to each other on a database, and where PI is associated with ADI_2 or ADI_1 on a database and / or is an encrypted value of ADI_2 or ADI_1, e.g. PI = hash(secret text||ADI_2 or ADI_1). The manufacturer scans PI (Scan 1) and associates PI with a unique serialisation identifier (SN) on a database. The manufacturer then (B) splits the pair of ADIs, discards PI and (C) affixes ADI_1 to the primary package and ADI_2 to the secondary package. Advantageously, discarding the PI meets European Union pharmaceutical serialisation standards that only allow one visible 2D code on a package.

[0094] The consumer (D) receives the packaged product (E) opens the product which also unseals ADI_2 on the secondary package and scans (Scan 2) the still-visible ADI_2 which is validated by a software application. The software application may also include an artificial intelligence image classifier to record other secondary package information for further validation. In (F) ADI_2 auto-decommissions. The user takes out the primary package and may optionally (G) remove the seal and scan ADI_1 (Scan 3) and cross validate with ADI_2. The software application may also include an artificial intelligence image classifier to record other primary package information for further validation. In (H) ADI_1 auto-decommissions. If the user is connected to the internet, or the user reconnects to the internet, scanning event information is appended to a database and the ADIs are electronically decommissioned. Alternatively, ADI_1 is an identifier (ID) and not an ADI. Many other variations are also possible. If the userdoes not scan ADI_1 or ADI_2 identifiers, both physically auto-decommission and are taken out of circulation.

[0095] Table 1 below provides examples of chromogenic dyes and activators that may be used to induce a state change in the machine-readable identifier. Activator state 1 conditions are defined as any conditions that maintain a chromogenic dye in one chemical or colour form only. Activator state 1 conditions are typically environmental conditions. Activator state 2 conditions are defined as any conditions that maintain a chromogenic dye in two or more chemical or colour forms, so that information contained in the identifier is readable. The identifier is sealed under activator state 2 conditions. The instigator may be any mechanism (such as removing a sticker or seal or opening a package) that exposes the auto-decommissioning identifier (ADI) to one or more activators in Activator state 1 conditions, and preferentially is a mechanism required to open a package, resulting in a state change in either ID or OB or both. Activator state one conditions induce the chromogenic dye to change to one colour / chemical form only in a way that makes the identifier unreadable.

[0096] The oxygen sensing reporter or substance could be biological based (e.g. haemoglobin or myoglobin or other), luminescent (e.g. organic or metal ligand complexes or luminescent nanomaterials or multiple emitters or other), or redox based (phenothiazine dyes including, but not limited to, methylene blue or toluidine, or otherwise 2,6-dichloroindophenol, or anthraquinone P-sulfonate, or indigo, or thioindigo, or polyviologens including but not limited to 2,2'-dicyano-l,l'- dimethylviologen, or oxazone resorufin or malachite green or other). Other oxygen sensing substances may also be used.

[0097] The photochromic substance could be of the class of triarylmethanes (e.g. crystal violet or basic green or malachite green oxalate or basic blue or acid blue or other), or the class of diarylethenes (e.g l,2-Bis(2-methyl-5-phenyl-3- thienyl)perfluorocyclopentene (BTPF) or l,2-Bis(2-methylbenzo[b]thiophen-3- yl)perfluorocyclopentene (BBTP), l,2-Bis(2-methylbenzo[b]thiophen-3-yl)thiophene (BBTT) or l,2-Bis(2-methyl-5-methoxy-3-thienyl)perfluorocyclopentene (BMTPF) or other), or the class of spiropyrans (e.g 6-Nitro-l',3',3'-trimethylspiro[2H-l-benzopyran- 2,2'-indoline] (6-Nitro BIPS) or r,3',3'-trimethylspiro[indoline-2,3'-[3H]naphth[2,l- b]pyran] (SPIRO-NAP) or Spiro[chromene-2,2'-indoline] (SPI) or other) or the class of spirooxazines (e.g Spiro[2H-indole-2,3'-[3H]naphth[2,l-b]pyran] (SINP), or Spiro[indoline-2,3'-[3H]naphth[2, l-b]pyran] (SINP), Spiro [benzopyran-oxazine](SBPO), or Spiro [chromene-oxazine] (SCO) or other) or the class of napthopyrans / napthooxazines (e.g napthoypyran, or 2H-Naphtho[l,2-b]pyran (2H-NBP or Naphthopyranoxazine NPO or Naphthopyran-thiazine hybrids or other). Other light sensing substances may also be used.

[0098] The solvatochromic substance could be 9-(Diethylamino)-5H- benzo[a]phenoxazin-5-one or 9-(2-Carboxyphenyl)-6-(diethylamino)-N,N-diethyl-3H- xanthen-3-iminium chloride or (9-dimethylamino-10-methyl-benzo[a]phenoxazin-5- ylidene)ammonium chloride or 3',6'-dihydroxyspiro[isobenzofuran-l(3H),9'- [9H]xanthen]-3-one or bis[4-(dimethylamino)phenyl]methaniminium chloride, or 8-(4- Dimethylaminophenyl)diazenyl-N,N-diethyl- 10-phenylphenazin- 10-ium-2-amine chloride or 4-(4'-hydroxystyryl)-N-methylpyridinium iodide (negative) and 4,4'- bis(dimethylamino)fuchsone (positive). Other solvatochromic substances may also be used.

[0099] Other chromogenic dyes / pigments / reporter molecules that may also be used include but are not limited to hydrochromic (Triphenylmethane), peizochromic (5- methyl-2-[(2-nitrophenyl)amino]-3-thiophenecarbonitrile), and halochromic (Chromeazurol B (Na2HL)). Other chromogenic substances are also possible.

[0100] Provided below are examples of polymer substrates that can be used as activation modulation layer / s or additives (AML) for use with chromogenic substances• Polymethacrylates• Polyvinyl chloride• Ethyl cellulose• Zein• Polystyrene• Polyacetylene• Examples of scattering agents for use with chromogenic dyes• Silicon dioxide (SiO2)• Titanium dioxide (TiO2)• Barium sulphate (BaS04)

[0101] It will be appreciated by persons skilled in the art that numerous variations and / or modifications may be made to the above-described embodiments, without departing from the broad general scope of the present disclosure. The present embodiments are, therefore, to be considered in all respects as illustrative and not restrictive.

[0102] PRACTICAL EXAMPLE 1 : Oxichromic ADIs

[0103] In one embodiment, the chromogenic dye may be an oxichromic substance that changes state when exposed to oxygen. In this example, the oxichromic substance is methylene blue, CieHisCINsS, that is dark blue when oxidised and clear-yellowish when reduced. The dark blue oxidised form was incorporated into an ink and used to print the identifier under activator state 1 or activator state 2 conditions. The reduced clear-yellowish form was incorporated into an ink and used to print the obfuscator under activator state 2 conditions only. In this example, activator state 1 conditions are environmental conditions and activator state 2 conditions are anaerobic conditions.

[0104] To prepare first oxidised dye formulation used to print the identifier, 0.2 - 4% methylene blue, MB, (CAS 122965-43-9) was solubilised in commercially available water-based inkjet printer ink that did not contain any dyes or pigments. This MB ink was transferred to a printer cartridge.

[0105] To prepare the second reduced dye formulation used to print the obfuscator, 0.2 - 4% methylene blue was dissolved in water, reduced with sodium dithionite, and purified under anaerobic conditions using protocols known to those skilled in the art. The reduced methylene blue (also called leuco methylene blue, LMB) was solubilised in base ink which formed a clear-yellowish solution. This LMB ink was transferred to a printer cartridge under anaerobic conditions.

[0106] The MB and LMB ink cartridges were inserted into an inkjet printer housed under anaerobic (activation state 2) conditions. The unique identifier was printed in a QR code, where the dark squares were printed in MB ink and the light squares printed in LMB ink.

[0107] In a separate experiment, the dark squares of the QR code were printed first in MB ink, and a layer of LMB ink was printed second, and on top of the QR code.

[0108] In some cases, an activation modulation layer (AML) was printed to slow the decommissioning rate. The AML ink formulation was comprised of 2% m / v polyvinyl alcohol (MW = 9,000-10,000) in base ink, and printed on top of the ADI code. Alternatively, 2% m / v polyvinyl alcohol (MW = 9,000-10,000) may be added directly into the LMB formulation and achieve similar results.

[0109] The printed ADI QR codes comprised of both MB and LMB ink were sealed using commercially available oxygen barrier / scavenger films. The sealed codes were stable when reintroduced into activation state 1 environmental conditions, and autodecommissioned over a period of 10-20 minutes after the seal was opened when no AML was present. With the AML present, the decommissioning time increased to >60 minutes. A higher concentration of PVA or thicker AML layer may achieve longer decommissioning times.

[0110] PRACTICAL EXAMPLE 2: Photochromic ADIs

[0111] Equivalent protocols may be also be developed for a wide range of other chromogenic compounds. For example, commercially available photochromic substances may be incorporated into ink formulations and used to print binary codes. Diarylethenes are a class of organic compound that was used to develop ADIs that decommission when exposed to light. Diarylethenes undergo a reversible structural change between open (colourless) and closed (coloured) forms when exposed to UV light, and revert back to colourless when exposed to visible light.

[0112] In this example, the diarylethene l,2-Bis(2-methylbenzo[b]thiophen-3- yl)perfluorocyclopentene was solubilised in base ink. The diarylethene ink was split into two aliquots, and one of the aliquots was exposed to UV light such that it changed to its closed red form. The red form was used to print the dark squares of the ADI QR code and the clear form was used to print the light squares of the ADI QR code. The ADI QR codes were printed and sealed under dark conditions. In the case of oxichromic ADIs, the seal includes any material that isolates the ADI from electromagnetic radiation that causes a change in the colour state of the ADI. This includes, but is not limited to, any opaque material or substance such as plastics, foils, and scratch removable materials.

[0113] When exposed to visible light, the red form converted into the colourless form and destroyed the information contained in the QR code, resulting in a solid colourless square. When re-exposed to UV light the solid colourless square changed to a solid red square, demonstrating that the information had been irreversibly destroyed.

[0114] Although photochromic compounds may be used to manufacture ADIs, oxichromic compounds have the advantage that they may be designed to change in response to a constant environmental condition - atmospheric oxygen concentration.

[0115] It will appreciated that a wide range of substances and mechanisms may be used to manufacture ADI codes. This invention disclosed here covers the use of all types of chromogenic substances to manufacture ADI codes that decommission when exposed to environmental conditions.

Claims

CLAIMS:

1. A tag comprising: an identifier visually representing first information; and a mechanism to change the tag from a first state relating to the tag being unaltered where the identifier is inaccessible to a second state relating to the tag being altered where the identifier is accessible, wherein the identifier comprises a substance that has a first configuration in the first state of the tag and changes to a second configuration in the second state of the tag, and wherein the first information is readable in the first configuration and unreadable in the second configuration.

2. The tag of claim 1, wherein the identifier is a machine-readable identifier.

3. The tag of claim 1, wherein second information, different from the first information is readable from the identifier in the second configuration.

4. The tag of any of the preceding claims, wherein the mechanism is a seal that, in the first state, isolates the identifier from environmental conditions and, in the second state, exposes the identifier to the environmental conditions, and the substance changes to the second configuration as a result of being exposed to the environmental conditions.

5. The tag of claim 4, wherein the environmental conditions comprise a presence of one or more of atmospheric oxygen, or electromagnetic radiation.

6. The tag of any one of the preceding claims, wherein the substance is a colourchanging substance that has a first colour in the first configuration and a second colour in the second configuration.

7. The tag of claim 6, wherein the colour-changing substance changes colour in response to an environmental change as a result of opening the package.

8. The tag of any one of the preceding claims, wherein the colour-changing substance is formulated into an ink and the identifier is made by printing the ink on a substrate.

9. The tag of any one of the preceding claims, wherein the identifier is a binary graphical code comprising first areas identifying a first binary value and second areas identifying a second binary value and the colour changing substance inhibits a distinction between at least some of the first areas and the second areas to thereby make the first information unreadable.

10. The tag of claim 9, wherein the first areas are made of a colour changing substance that has a first colour in the first configuration and a second colour in the second configuration, and the second colour of the colour changing substance is indistinguishable from the colour of the second areas to inhibit the distinction.

11. The tag of any one of claims 6 to 10, wherein the first colour of the colourchanging substance is distinguishable from a background colour by a reading device to constitute the identifier and the second colour is indistinguishable from the background colour by the reading device to make the first information unreadable.

12. The tag of any one of claims 6 to 11 wherein the first colour of the colour-changing substance is transparent to a reading device and the identifier is readable in the first state through the colour-changing substance, the identifier is created using a different ink than the colour-changing substance, the colour-changing substance overlaps with the identifier and in the second colour at least partially occludes the identifier to make the first information unreadable.

13. The tag of any one of claims 6 to 12, wherein the colour-changing substance is a substance that exists in two colour forms. the identifier is created using the substance in the same form as when it is exposed to environmental conditions.The colour changing ink uses the substance in the form that changes colour in response to exposure to environmental conditions. the colour-changing substance overlaps with the identifier and in the second colour at least partially covers the identifier to make the first information unreadable.

14. The tag of any one of claims 1 to 5, wherein the substance comprises a coloured fluid and the tag comprises an absorbent material to transport the coloured fluid from a repository to the identifier to colour at least parts of the identifier to make the first information unreadable.

15. The tag of claim 14, wherein the mechanism is configured to release the coloured fluid from the repository upon the tag being changed to the second state to access the identifier.

16. The tag of any one of the preceding claims, wherein the identifier comprises product information.

17. The tag of claim 16, wherein the product information is verifiable against data stored in a remote database.

18. The tag of claim 16 or 17, wherein the product information comprises a product identifier unique to a product to which the tag is attached.

19. The tag of any one of the preceding claims, wherein the tag is applied to a package and unaltered relates to the package being unopened and altered relates to the package being opened.

20. The tag of any one of the preceding claims, wherein the identifier is readable by a camera of a mobile communication device.

21. A method for verifying a product, the method comprising: altering a packaging of the product from a first state into a second state, wherein a identifier is inaccessible in the first state and accessible in the second state; scanning, with a scanning device during a scanning time, the identifier; decoding the identifier to decode product information data associated with the product; and verifying, by the scanning device, the product information data, wherein the identifier comprises a substance that changes to a changed configuration in response to altering the packing and after the scanning time, and the identifier is unreadable in the changed configuration.

22. The method of claim 21, wherein altering the packaging comprises opening a seal, where the unopened seal isolates the identifier from environmental conditions, and opening the seal exposures the identifier to the environmental conditions causes the identifier to change to the changed configuration.

23. The method of claim 22, wherein opening the seal comprises operating a mechanism that opens the package.

24. The method of claim 22 or 23, wherein the environmental conditions comprise a presence of one or more of atmospheric oxygen or electromagnetic radiation .

25. The method of any one of claims 21 to 24, the substance comprises one or more of a redox substance, leuco substance, a phenothiazine, or a spiropyran.

Images