Security document, method and device for producing a security document

Abstract

The invention relates to a security document, such as a passport or identity card, which has a photograph of a person, an animal or an object. The security document additionally has a further representation of the photograph in the form of a code that can be read by means of an optical reading device, the code containing a digital signature and / or being encrypted.

Description

[0001] SECURITY DOCUMENT, METHOD AND DEVICE FOR PRODUCING A SECURITY DOCUMENT

[0002] The present invention relates to a security document and a method and a device for producing a security document.

[0003] A variety of different types of security documents are known from the state of the art. Many of these contain a photograph, for example, of the holder of the security document. Security documents are often also equipped with one or more (additional) security features to increase the document's forgery resistance.

[0004] The present invention is based on the object of further improving the forgery security of security documents or at least of providing an alternative security feature or a security document equipped therewith as well as a method and a device for producing such a security document.

[0005] This object is achieved according to the teaching of the independent claims. Various embodiments and further developments of the invention are the subject of the dependent claims.

[0006] A first aspect of the technology described here relates to a security document comprising: a photograph of a person, an animal, or an object; and a further representation of the photograph in the form of a code that can be read by an optical reading device, wherein the code contains a digital signature and / or is encrypted.

[0007] For the purposes of this disclosure, the term "security document" includes, in particular, passports, identity cards, identification cards or other types of personalized cards, in particular chip cards, such as bank cards, credit cards, membership cards, access authorization cards, health certificates, visas, visa stickers, or other valuable documents.

[0008] Since the technology described here is particularly applicable to security documents containing a photograph of a person, the following description primarily refers to security documents containing photographs of persons, without this being understood as a limitation. As mentioned above, the photograph may also be a photograph of an animal or an object. Furthermore, the person, animal, or object may be depicted in whole or in part in the photograph, for example, only the head or face of a person.

[0009] For the purposes of the present disclosure, an "optical reading device" is understood to mean, in particular, a device that can detect a code provided by the security document using optical means. The optical reading device can, in particular, detect electromagnetic radiation in the visible range that emanates from or is reflected by the code. In this context, it is also possible that the code is not visible to the human eye without the aid of additional aids, or at least not recognizable, despite sufficient lighting (e.g., in daylight), for example because the code or individual structures of the code are too small or because the code only becomes visible when irradiated with electromagnetic radiation outside the visible range. This can be, for example, ultraviolet radiation (UV radiation) or infrared radiation (IR radiation).

[0010] Techniques for converting a photograph into a code that can be read with an optical reader are known in principle. The code can, in particular, be printed.

[0011] Since, according to the first aspect, the code is a further representation of the photograph, the information contained in the code corresponds, at least substantially, to the photograph, or at least to a portion of the photograph, in particular to a substantial portion of the photograph. This, in turn, means that, using a corresponding reading device, the photograph (or the corresponding portion of the photograph to which the code refers) can be generated from the code. Thus, a comparison between the photograph contained in the security document and the photograph that can be generated from the code is possible.

[0012] For the sake of clarity, the photograph contained in the security document (i.e., the one that is actually recognizable as a photograph to a viewer) is also referred to below as the "first photograph." The photograph that can be generated from the code is also referred to below as the "second photograph." A comparison between the first and second photographs can be made, for example, by a viewer examining the two photographs and comparing them—if necessary without any additional aids. Additionally or alternatively, a comparison could also be accomplished with aids, for example, using a scanner that optically captures the two photographs and compares them using suitable image processing techniques.With this variant, it would also be possible for the second photograph generated from the code not to actually be generated as a recognizable photograph (for a human user), but for the information obtained from the code, which represents the second photograph, to be compared with information obtained by the scanner by scanning the first photograph. To assess the match, a fixed or adjustable threshold can be defined, for example. If the degree of match is above this threshold, it can be concluded that the two photographs match; if it is below this threshold, it can be concluded that the two photographs do not match, which indicates a forgery of the security document.

[0013] By comparing the two photographs, security against forgery can be increased.

[0014] The digital signature can originate from an authorized entity. Depending on the type of security document, various institutions may be authorized. In particular, the institution issuing the security document can specify which institutions are authorized to issue the digital signature. This can be the issuing institution itself or an institution commissioned by that institution. This can also increase security against forgery.

[0015] The code can be designed in such a way that, even without a private key used to create the signature, a copy of the (first) photograph, i.e., the second photograph, or an image of the (first) photograph's features can be generated from it, allowing comparison with the (first) photograph of the security document. A public key can be used for this purpose, i.e., the authenticity of the second photograph can be verified using the public key.

[0016] In particular, the code can be designed in such a way that the second photograph can be generated from it even without the public key, but the signature cannot be verified. However, the signature, and thus the authenticity of the second photograph, can be verified using the public key. The private key generally remains secret. This can also increase security against forgery. In particular, it makes the forgery method described below more difficult or even impossible.

[0017] With this forgery method, a document forger aims to replace a (first) photograph of a first person contained in the security document with a (first) photograph of a second person. If the photograph is merely glued, stapled, or otherwise attached to a carrier material of the security document, such as paper, the photograph of the first person could, in principle, be replaced with a photograph of the second person in a relatively simple manner. However, after such an exchange of the first photograph, the code also contained in the security document no longer matches the replaced photograph, so that a comparison of the replaced photograph, i.e. the (first) photograph of the second person, with the (second) photograph (of the first person) that can be generated using the code, shows that the security document has been forged due to the lack of correspondence between the photographs.On the other hand, without knowledge of the private key, the document forger cannot adapt the code contained in the security document to the photograph of the second person. Even if the document forger could adapt the code contained in the security document to the photograph of the second person, it would generally be impossible (i.e., without knowledge of the private key) to add a valid signature to the code. Verifying the security document using the public key would then reveal the absence of a valid signature, which would indicate a forgery.

[0018] Often, the (first) photograph is not merely glued, tacked, or otherwise attached to the security document, but is integrated into the carrier material of the security document, particularly by means of a material bond. The carrier material of the security document may, for example, be a plastic material or contain such a material, particularly in the area of ​​the first photograph. In this case, document forgers have sometimes attempted in the past to remove at least part of the carrier material and the first photograph, for example, by milling it away, particularly starting from the reverse side of the carrier material, i.e., the side opposite or "behind" the side from which the first photograph is visible, in order to subsequently replace the first photograph of the first person with a first photograph of the second person and then refill the removed carrier material.But even in such a case, using the technique described here, the code contained in the security document does not correspond to the first photograph of the second person, so that the forgery can be detected by the comparison described above.

[0019] The same applies if a document forger attempts to create a new security document - i.e. not to create a fake security document by manipulating an existing security document - because for this purpose, too, the document forger would need the private key to authentically sign the code.

[0020] In these cases, the following applies again: Even if the document forger could adapt the code contained in the security document to the photograph of the second person, it would generally not be possible (i.e. without knowledge of the private key) to provide the code with a valid signature.

[0021] The comparison between the photographs can be done optically as described above, for example by a viewer, in particular without any additional aids, or with the aid of a suitable device.

[0022] If the code is encrypted, the second photograph cannot be obtained from it without knowledge of the key used for encryption. In this case, only those persons or institutions with access to this key could generate the second photograph from the code; possibly only the person / institution that originally generated the encrypted code, for example, the person / institution that produced the security document. In this context, the following use case would be conceivable: The security document could be a passport, for example. The authority that issues the passport is the only one with knowledge of the key used. It is therefore the only one that can generate the second photograph from the code.If an official checking the passport (for example, a border guard or a police officer) has doubts about the authenticity of the passport, for example because a chip contained in the passport is not (or no longer) working, the passport is sent to the issuing authority for verification. There, a comparison can then be made between the first and second photographs. If necessary, instead of the entire passport, just an image of the first photograph contained in the passport and the code contained therein could be sent, particularly electronically, to the issuing authority for verification. This would allow for a timely verification of the authenticity of the passport. The result of the verification could then be sent back (electronically) to the official checking the passport just as quickly.

[0023] The code can be a two-dimensional code. Additionally or alternatively, the code can (also) contain three-dimensional elements. In this context, a third dimension can be considered to be a third spatial dimension or an (additional) color scheme. To give some examples: A purely two-dimensional code without additional color scheme could, for example, be a two-dimensional (flat) pattern made up of two primary colors, with black and white being possible primary colors, for example, but not necessarily limited to this. A three-dimensional code, in which the third dimension is a third spatial dimension, could be a three-dimensional pattern, i.e. a pattern that does not extend solely in one plane. For example, such a pattern could have elevations (similar to Braille) and / or depressions.A code that has a third spatial dimension could, however, also have elements in superimposed layers. This means that the surface could, in principle, be flat (i.e., have no depressions or elevations), but individual elements of the code could be present at different levels in the material of the security document. Each of the individual elements of the code (possibly present at different levels) can be visible when illuminated with visible light, or the code could have a mixture of different elements, namely a mixture of those that are (only) visible when illuminated with visible light, those that are (only) visible when illuminated with UV light, and / or those that are (only) visible when illuminated with IR light.

[0024] A code in which a third dimension is represented by additional coloring could, in addition to, for example, black and white elements, also have elements of at least one additional color, preferably elements with two or more additional colors, so for example, in addition to black and white, the additional colors red, green, blue and yellow, whereby in principle there is no upper limit to the number of additional colors - as long as the different colors can still be sufficiently distinguished from one another. If the code has three spatial dimensions and at least one additional color in addition to the two primary colors, this can even result in a four-dimensional code. The code can be a QR code or a QR code that complies with the ICAO-VDS (Visible Digital Seal) standard, and / or the (second) photograph can be in a digital image format, for example in JPEG XL, AVIF or WebP format.This allows for high compression rates while preserving biometric characteristics. The code can contain the photograph, for example, as a base64 [B64] or base45 encoded photograph in jpg format.

[0025] The code can also contain data in text form, for example, in JSON or XML format. In addition to the information representing the photograph, the code can also contain further information, such as details of a person whose photograph is included in the security document. In this context, it should be noted that data in JSON or XML format is mentioned only as an example. The additional information contained in the code can also be in a different format.

[0026] The code can also be a JAB code. In particular, the code can be printed in color and then laser-treated to create grayscale for additional security.

[0027] The (first) photograph may be arranged on a first side of the security document or be visible or optically detectable from the first side, and the code may be arranged on a second side of the security document opposite the first side or be visible or optically detectable from the second side.

[0028] In this context, the term "optically detectable" is to be understood as previously explained for the optical reading device. This means, in particular, that the photograph and / or code can be read by the human eye with or without the aid of aids, possibly only upon exposure to electromagnetic radiation outside the visible range (e.g., in the UV or infrared spectrum). The same applies to optical reading by a reading device.

[0029] Regarding the term "side" in the security document, it should be noted that this can be understood in the sense of the English word "side" and / or in the sense of the English word "page." The security document can, for example, be designed as or comprise a substantially flat body, wherein the substantially flat body has two opposite sides, each with a very large surface area relative to its thickness. In other words, the substantially flat body can, for example, be understood as a very flat cuboid, wherein the two largest, opposite sides of the cuboid, in the sense of the English word "side," form the "first side" and the "second side" (or front and back) of the security document.However, the shape of these sides is not limited to a rectangle (as is the case with a cuboid), but can, for example, have rounded corners or a shape that deviates significantly from a rectangle. These sides also do not necessarily have to be exactly parallel to each other, but can also enclose an angle that deviates (relatively slightly) from 0°.

[0030] However, the security document can also have multiple pages, for example, two or more sheets of (special) paper or other materials, as is typically the case with a passport. In this case, the security document can therefore have at least two essentially flat bodies, which are connected to one another, in particular movably connected to one another, for example, near a respective edge of the two essentially flat bodies. The above statements regarding the essentially flat body apply accordingly to these two essentially flat bodies, but a first of these flat bodies contains the (first) photograph, and a second of these flat bodies contains the code.In this case, the security document can be designed so that both the photograph and the code are visible to a viewer simultaneously when the security document is opened like a book or passport. When the security document is opened in this way, for example, the photograph could be visible on the left and the code on the right, on the next page.

[0031] Alternatively, the photograph and the code may be arranged on the same side of the security document, in particular next to each other.

[0032] As described above, the photograph and / or code may be arranged on one side of the security document or be visible or optically detectable from one side. If the photograph and / or code is arranged on one side of the security document, they may be located substantially directly at or on the surface of the security document and may be covered only by a thin cover layer, in particular a thin transparent or translucent cover layer (thickness of the thin cover layer, for example, in the range of 0.01 to 0.1 mm), or they may form a surface or a surface portion of the security document.If the photograph and / or code are not located on or on a side of the security document, but are visible or optically detectable from one side, they may also be embedded more deeply into the material of the security document and covered by a thicker cover layer, which in turn may be transparent or translucent (thickness of the thicker cover layer, for example, in the range of 0.1 mm to a few mm).

[0033] The photograph may be located in a first area and the code in a second area overlapping the first area (but on different sides). The first and second areas are viewed as projected onto a plane parallel to a surface on the first or second side of the security document. For example, if the photograph is located on the front of a substantially flat security document and the code is on the back, the photograph and the code are at least partially located in the same position, but on different sides.

[0034] The first area can also be essentially congruent with the second area. This, too, is to be viewed in projection onto a plane parallel to a surface on the first or second side of the security document. For example, if the photograph were punched out precisely (i.e., the entire surface of the photograph, but no more than the entire surface of the photograph), this would result in the code being punched out precisely as well. Such an arrangement of photograph and code can also increase forgery security.

[0035] The photograph and / or the code can be printed on a surface of the security document or incorporated into the material of the security document. Suitable printing processes are known in principle and are therefore not described in detail. The print can be covered by a (possibly thin) protective layer. Methods for incorporating a photograph or a code into the material of a security document are also known in principle, so these too will not be described in detail. Two categories of methods in particular come into consideration as suitable methods for this purpose. In a first category of methods, the material structure of the security document - possibly consisting of several layers - is essentially completed without the photograph and / or the code being visible or optically detectable.Only then are they made visible or optically detectable through external influences, for example by irradiation with a laser. For this purpose, however, ink, paint or similar (possibly initially invisible) can be introduced into the material of the security document in advance, particularly during its production. The properties of the ink, paint or similar are changed by irradiation with the laser or similar, so that the ink, paint or similar becomes visible, possibly again only after irradiation with light outside the visible spectrum (e.g. UV, IR). In a second category of processes, the photograph and / or code are already incorporated into the security document before its material construction is complete. For example, the security document can be produced using a lamination process in which at least two layers of material are bonded together by lamination.The photograph and / or code can be placed as an additional layer between the at least two material layers before lamination, creating the security document as a laminate made up of the at least two material layers and the additional layer (photograph / code). Alternatively, the photograph and / or code can be printed on one of the material layers and then covered with another layer of material before the security document is produced, for example, by lamination.

[0036] In the security document, the photograph and / or the code can be provided with at least one additional security feature. These additional security features can, in particular, be one or more optical security features, such as a hologram, microtext, or security structures. These can be placed "underneath" the photograph and / or the code. This can prevent simple copying – or a simple copy would no longer correspond to the original. The security document can also have additional security features that are not necessarily directly linked to the photograph and / or the code, for example, a chip in which, for example, a representation of the photograph and possibly other data such as biometric data can be stored.

[0037] Embodiments of the technology described here have, among other things, the following advantage over security documents which are provided with a photograph and a chip in which an additional copy of the photograph or biometric data of the holder of the security document is stored, but which do not contain an optically detectable code as described here: According to ICAO, a passport is a valid travel document even if no chip can be read. A biometric check or comparison between the (first) photograph contained in the security document and a (further) copy of the photograph, which may be stored in the chip, can thereby be deliberately prevented by destroying the chip. Such circumvention of a biometric check orHowever, a comparison is no longer possible if the corresponding security document is required to contain the corresponding optically detectable code in addition to the (first) photograph.

[0038] A second aspect of the technique described here relates to a method for producing a security document, the method comprising:

[0039] Providing a photograph of a person, animal or object;

[0040] Creating a further representation of the photograph in the form of a code that can be read by an optical reader and that contains a digital signature and / or is encrypted; and

[0041] Applying or incorporating the photograph and code onto or into the security document.

[0042] A third aspect of the technology described here relates to a device for producing a security document according to the first aspect of the technology described here, optionally with one or more of the additional features described above. The device comprises: a first module for applying or incorporating the photograph onto or into the security document; a second module for generating, receiving, and / or storing a further representation of the photograph in the form of a code that can be read by an optical reading device and that contains a digital signature and / or is encrypted; and a third module for applying or incorporating the code onto or into the security document.

[0043] The first and third modules may comprise devices configured for the above-described methods for applying or incorporating the photograph or code, respectively. In particular, the first and third modules may comprise a printing device or printer for printing on a carrier material of the security document (paper, plastic material, etc.), a laser, or a transport device for placing a physical photograph and / or a physical representation of the code (which may be present, for example, on paper or another material) on a carrier material of the security document.

[0044] The first and third modules can be identical, meaning a single module could perform the functions of the first and third modules described above. This can be particularly the case if the photograph and the code can be applied to or incorporated into the security document using the same technique, e.g., by printing. Alternatively or additionally, the second module can be combined with the first and / or third modules into a single module.

[0045] For the second module to provide the code to the third module, there are several options for the second module, as described above. For example, the second module can have a scanner to digitize the photograph. Additionally, the second module can have a processor to generate the code from the digitized data representing the photograph, which can then be provided to the third module. Alternatively, the second module can receive already digitized information representing the photograph and use its processor to generate the code from it.

[0046] However, the second module can also have an interface through which it can receive information representing the code. In other words, in this case, the second module doesn't have to generate the code itself because it can receive the already generated code via its interface.

[0047] Finally, the second module can also have a memory in which the previously generated code is pre-stored. The code then neither needs to be received nor generated, but can be read from the memory to make it available to the third module.

[0048] The terms "comprises," "includes," "includes," "has," "has," "with," or any other variation thereof, as used herein, are intended to cover non-exclusive inclusion. For example, a method or apparatus that includes or has a list of elements is not necessarily limited to those elements, but may include other elements not expressly listed or that are inherent in such a method or apparatus.

[0049] Furthermore, unless expressly stated to the contrary, "or" refers to an inclusive "or" and not an exclusive "or." For example, a condition A or B is satisfied by each of the following conditions: A is true (or present) and B is false (or absent), A is false (or absent) and B is true (or present), and both A and B are true (or present). The terms "a" or "an" as used herein are defined to mean "one or more." The terms "another" and "a further," and any other variations thereof, are to be construed to mean "at least one further."

[0050] The term "plurality" as used here shall mean "two or more".

[0051] The term "configured" or "set up" to perform a specific function (and respective variations thereof) is to be understood here that the corresponding device is already in a configuration or setting in which it can perform the function, or is at least adjustable - i.e., configurable - so that it can perform the function after being set accordingly. The configuration can be carried out, for example, by appropriately setting parameters of a process sequence or of switches or the like for activating or deactivating functionalities or settings. In particular, the device can have several predetermined configurations or operating modes, so that configuration can be carried out by selecting one of these configurations or operating modes.

[0052] The features described herein may be combined with one another as desired, unless expressly excluded or technically impossible. Likewise, features described primarily in connection with one aspect disclosed herein may correspondingly represent features of the other aspects disclosed herein. Furthermore, all aspects and features disclosed herein, either individually or in combination, are to be regarded as aspects of the present invention.

[0053] Further advantages, features and possible applications of the present invention will become apparent from the following detailed description in conjunction with the figures.

[0054] It shows, in schematic representation:

[0055] Fig. 1 a multi-sheet security document;

[0056] Fig. 2 shows a first page of a security document in card form;

[0057] Fig. 3 shows a second side of the security document in card form from Fig. 2; Fig. 4 shows a two-dimensional code;

[0058] Fig. 5 a three-dimensional code (two-dimensional code with additional coloring);

[0059] Fig. 6 a two-dimensional code with additional security feature;

[0060] Fig. 7 shows a carrier material of a security document or a first step of a manufacturing process of a security document;

[0061] Fig. 8 shows a security document or a second step of a manufacturing process for a security document;

[0062] Fig. 9 shows a first step of another method for producing a security document;

[0063] Fig. 10 shows a second step of the manufacturing process of Fig. 9;

[0064] Fig. 11 shows a third step of the manufacturing process of Fig. 9;

[0065] Fig. 12 shows an apparatus for producing a security document;

[0066] Fig. 13 is a flow chart of a manufacturing process.

[0067] The figures are not to scale.

[0068] The security document 1 shown in Fig. 1 is a multi-sheet security document 1 with a left page or sheet 4a (in Fig. 1) and a right page or sheet 4b. These can, for example, represent two pages of a passport. The two pages 4a, 4b are movably connected to one another at an edge (running vertically in the center of the figure in Fig. 1), so that the two pages 4a, 4b or the security document 1 can be opened or closed like a book.

[0069] The left side 4a has a photograph 2, for example, of a holder of the security document. Next to the photograph 2 is an area 3 containing a code to be explained later. The code 3 itself is not shown in Fig. 1. Furthermore, the security document 1 can have a further area 7 for various data, such as biometric data. These can be in letter or number form, for example. The code 3 can also be arranged on a right or second side 4b opposite the left or first side 4a, as shown in Fig. 1.

[0070] The arrangement of the photograph 2 and the code 3 and, if applicable, other areas relative to each other can in principle be arbitrary - Fig. 1 shows only one example.

[0071] Fig. 2 shows a first side 5—here also referred to as the front side 5—of a security document 1 in card form. The security document 1 can, for example, represent an identification card 1. The front side 5 can be essentially rectangular, optionally with rounded corners. The front side 5 has a significantly larger dimension relative to the thickness of the card (the thickness is not shown).

[0072] A photograph 2 is applied to the front side 5 of the card or incorporated into the card. The photograph 2 is visible from the front side 5 (i.e., when viewing the front side 5) or optically detectable, either by the unaided human eye or only with the aid of an aid. For example, it is possible that the photograph 2 is only visible when irradiated by electromagnetic radiation from a specific wavelength range, in particular by non-visible electromagnetic radiation, such as UV or IR radiation.

[0073] In the example shown, the photograph 2 is arranged at a specific location on the security document 1; in Fig. 2, this is indicated by the distance X of the photograph 2 from the left edge of the security document 1 and the distance Y from the top edge of the security document 1.

[0074] Optionally, the security document 1, as shown in the example, can also have a chip 8 or other security features. The chip 8 can be located inside the card 1 and completely covered by the other material of the identification card 1, e.g., plastic material, or it can be located on the surface of the identification card 1 and be accessible from the outside, in particular contactable. For example, data relating to the holder of the security document 1 can be stored in the chip 8. This can, in particular, be a copy of the photograph 2 and / or biometric data of the holder. Furthermore, further data (not shown) can be visible on the identification card 1, for example, printed on it, such as the holder's name, date of birth, etc.

[0075] Fig. 3 shows a second side 6 of the security document 1 in card form from Fig. 2, also referred to here as the back 6. The back 6 of the identification card 1 is arranged essentially parallel to the front 5 and has essentially the same shape and extent. As in the embodiment according to Fig. 1, a code 3, which will be explained later, is arranged in or on the back 6. This code is visible or optically detectable from the back 6 (i.e., when viewing the back 6), again by an "unaided" human eye or only with the aid of an aid as described above in connection with photograph 2.

[0076] In the example shown, Code 3 is a two-dimensional Code 3, rectangular in shape in the example shown, although other shapes are possible. Code 3 is arranged at a distance X from the right edge and at a distance Y from the top edge of ID card 1, corresponding to the arrangement of photograph 2 in Fig. 2, and also has the same shape and size as photograph 2. It should be noted that, compared to the illustration in Fig. 2, card 1 shown in Fig. 3 has been rotated 180° around an axis located in the plane of the drawing, which would be vertical in Fig. 2 or 3. In other words, the edge of ID card 1, which is on the left in Fig. 2, is on the right in Fig. 3. The top edge of ID card 1 in Fig. 2 is also the top edge in Fig. 3. This means that the code is arranged in the same position as photograph 2, but on the back 6 instead of the front 5.Or to put it another way: If photograph 2 were punched out exactly, i.e. no more and no less than photograph 2, then this would also punch out no more and no less than code 3.

[0077] In alternative embodiments, the code 3 and the photograph 2 are not arranged at the same or corresponding location, but merely overlap or do not overlap. The size and / or shape of the areas occupied by the photograph 2 and the code 3 may also be different.

[0078] Fig. 4 shows an embodiment of a two-dimensional code 3 for the use described above in a security document 1. The code 3 has several elements – here, squares – in two primary colors, in the example shown, black 11 and white 10, although other combinations of two primary colors are also possible. To better distinguish the individual squares, lines are also drawn between two white squares 10. These are not required and could also be omitted.

[0079] In the example shown, Code 3 consists of 8 x 8 = 64 black and white squares. In practical embodiments, Code 3 is intended to have significantly more elements to enable a sufficiently detailed coded representation of a photograph 2. In principle, Code 3 can have any number of elements, provided they allow visual differentiation, in particular provided they are sufficiently large to allow visual differentiation. However, the number of elements should be sufficiently large to allow a sufficiently accurate representation of the features of the first photograph in order to ensure comparability with sufficient confidence. In this context, the (minimum) number of elements can be selected depending on the desired level of confidence.For example, a relatively large number of elements may be required for a passport to make it as forgery-proof as possible, while a smaller number of elements might be considered sufficient for a supermarket loyalty card, for example.

[0080] The shape of the individual elements isn't limited to squares either. Rectangles, triangles, hexagons, or other shapes, or even a mixture of different shapes, are also possible.

[0081] In particular, the code 3 can be a QR code 3.

[0082] In one variant, the code 3 is not visible under normal daylight, but only when exposed to UV or infrared radiation, for example. For this purpose, a UV or IR source 9 is indicated in Fig. 4. In this case, the elements shown in black in Fig. 4 could contain so-called UV ink.

[0083] While Code 3 is depicted as a two-dimensional pattern in Fig. 4, individual elements or sub-areas of individual elements could be recessed or raised, or appear as a hologram or similar, i.e., extend perpendicular to the plane of the drawing. In this way, a three-dimensional Code 3 could be realized.

[0084] As already mentioned, code 3 represents a copy or image of photograph 2. This means that from code 3, using a suitable reader, a copy of the photograph can be generated which, to a viewer, is essentially identical to photograph 2. Such reader devices are, in principle, known in the prior art. However, it should be noted that code 3 contains a digital signature. According to the present technology, code 3 provided with the digital signature was created by an authorized institution using a private key. This private key is not publicly known. A copy of photograph 2 can be generated from code 3 - using a public key, which may be publicly known, or even without this public key. However, verification of the authenticity of the signature would only be possible using the public key.In other words, using a reader known in principle and the public key, a digitally signed copy of photograph 2 can be generated from code 3. In this way, it can be verified whether the (first) photograph 2 matches the (second) photograph generated using code 3 and whether the code is authentically signed.

[0085] Fig. 5 shows an embodiment of a code 3 which, in principle, extends in two dimensions, but which can nevertheless be regarded as a three-dimensional code 3 because it contains an additional color scheme compared to the code 3 of Fig. 4.

[0086] Due to the black-and-white representation required for patent applications, the additional colors are represented by various patterns with which some elements (squares) of Code 3 are filled. In the example shown, Code 3 again contains white elements 10 and black elements 11, but also elements 12 of a first additional color (e.g., red) and elements 13 of a second additional color (e.g., blue).

[0087] Fig. 6 shows a two-dimensional code 3 with an additional security feature 14, which is indicated here as a hologram 14 of the holder of the security document 1, which is placed "under" the code 3.

[0088] Reference is now made simultaneously to Figs. 7, 8, and 13 to further explain an embodiment of a manufacturing method for a security document 1 described herein. Figs. 7 and 8 show a first and a second step of a manufacturing method for a security document 1. Fig. 13 shows a flowchart of the manufacturing method.

[0089] After starting (40) the method, a photograph 2, for example in digital form, is first provided (41). From this, a code 3 containing a digital signature is generated (42) as described above. Furthermore, as shown in Fig. 7, a carrier material of the security document 1 is provided. Fig. 7 shows the carrier material of a security document 1 in card format in profile, with the front side 5 at the top and the back side 6 at the bottom.

[0090] As indicated in Fig. 8 by downward-pointing arrows, the photograph 2 is applied to the front side 5 of the security document 1 by a first module 20, for example, a printer 20 (43). As also indicated in Fig. 8 by upward-pointing arrows, the code 3 is applied to the back side 6 of the security document 1 by a second module 21, for example, a printer 21 (43). This allows the manufacturing process to end (44). The finished security document 1 then bears the photograph 2 on the front side 5 and the code 3 on the back side 6.

[0091] Optionally, the security document 1 can be covered with a protective film or similar after applying the photograph 2 and the code 3.

[0092] In one variant, only one module 20 or one printer 20 is provided, which initially applies only one of the photograph 2 and the code 3 to one side of the security document 1. Subsequently, the security document 1 is turned over or one module 20 or the printer 20 is moved to the other side of the security document 1 in order to apply the other of the photograph 2 and the code 3 to the remaining side.

[0093] The same procedure can be followed mutatis mutandis if Photograph 2 and Code 3 are to be applied to the same page of Security Document 1 or if Photograph 2 and Code 3 are to be applied to different sheets of a multi-sheet Security Document 1.

[0094] 9 to 11 illustrate a further embodiment of a production method for a security document 1. According to this embodiment, the security document 1 is constructed from several carrier layers, in the example shown from two carrier layers 1a and 1b. As shown in Fig. 9, a first carrier layer 1a is provided. In addition, the photograph 2 is provided in physical form, i.e. not only as stored data, but for example as already printed paper. Fig. 9 also shows a transport device 22 which is configured to place the photograph 2 at a designated location on the first carrier layer 1a. For this purpose, the transport device 22 can, for example, have a suction device in order to fix the photograph 2 during transport by means of negative pressure. Fig. 10 shows the first carrier layer 1a on which the photograph 2 has been placed. In addition, Fig.10 a second carrier layer 1b over the first carrier layer 1a and the photograph 2. This second carrier layer 1b can be transported, for example, by the transport device 22 or another transport device.

[0095] The second carrier layer 1b is then placed on the first carrier layer 1a or the photograph 2 and bonded to the first carrier layer 1a and the photograph 2, for example, in a lamination process. The security document 1 thus completed is shown in Fig. 11. The code 3 can be incorporated into the material of the security document 1 in a corresponding manner.

[0096] Various variants of the manufacturing methods described above are conceivable. For example, in the manufacturing method illustrated in Figs. 7 and 8, the photograph 2 and / or the code 3 may not be printed, but rather applied to the carrier material as a physical photograph 2 and / or code 3. Similarly, as a variant of the manufacturing method of Figs. 9 to 11, it is possible to apply the photograph 2 and / or the code 3 to the first carrier layer 1a not as a physical photograph 2 and / or code 3, but rather to print it onto it.

[0097] As a further variant, it is possible that the photograph 2 and / or the code 3 can be generated by irradiation with a laser in the material of the security document 1 or on a surface of the security document 1.

[0098] Fig. 12 shows a device 30 for producing a security document 1. In the example shown, the production device 30 has a processor 31 and, connected thereto for data transmission, an interface 32, a memory 33, a first module 20 and a second module 21. The first module 20 is configured to insert or apply the photograph 2 into or onto the security document 1. The first module 20 can, as described above, comprise a printer, a transport device, a laser, or the like. Similarly, the second module 21 is configured to insert or apply the code 3 into or onto the security document 1. The second module 21 can, as described above, comprise a printer, a transport device, a laser, or the like.

[0099] The first module 20 and the second module 21 are controlled by the processor 31. The interface 32 is configured to receive the photo 2 and / or the code 3 and forward it to the processor 31. The memory 33 is configured to store the photo 2 and / or the code 3.

[0100] According to one embodiment, the production device 30 receives the photograph 2 or data representing the photograph 2 via the interface 32. The processor 31 generates the code 3 provided with a digital signature or data representing it from this data using the private key. If necessary, this can be done with the aid of the memory 33. The processor 31 then causes the first module 20 and the second module 21 to embed the photograph 2 or the code 3 into the security document 1 or to apply it to the security document 1.

[0101] According to one variant, the production device 30 receives the photograph 2 via the interface 32 not in data form, but as a physical photograph 2. In this case, the production device 30 can additionally have a scanner or similar device to digitize the photograph 2. The data obtained therefrom, which represent the photograph 2, can then be used to generate the code 3 as described above. The photograph 2 can then be incorporated into or applied to the security document 1 either as a physical photograph 2 or based on the digitized data.

[0102] According to a further variant, the production device 30 receives not only the photograph 2 (as a physical photograph 2 or in data form) via the interface 32, but also the already generated code 3 representing the photograph 2. In this case, the code 3 does not have to be generated by the production device 30, but can be forwarded directly to the second module 21 to cause it to insert or apply the code 3 into or onto the security document 1. In this case, the memory 33 can be omitted.

[0103] According to a further variant, the photograph 2 and / or the code 3 is already stored in the memory 33. In this case, the code 3 does not have to be generated by the production device 30. Both the photograph 2 (or the data representing it) and the code 3 can be forwarded directly to the first module 20 or to the second module 21, respectively, to cause them to insert or apply the photograph 2 or the code 3 into or onto the security document 1. In this case, the interface 32 can be omitted. In the event that one and the same module inserts or applies the photograph 2 and the code 3 into or onto the security document 1, one of the modules 20 or 21 can be omitted. While at least one exemplary embodiment has been described above, it should be noted that a large number of variations exist.It should also be noted that the described exemplary embodiments are merely non-limiting examples and are not intended to limit the scope, applicability, or configuration of the devices and methods described herein. Rather, the foregoing description will provide guidance to those skilled in the art for implementing at least one exemplary embodiment, with the understanding that various changes in the operation and arrangement of the elements described in an exemplary embodiment may be made without departing from the subject matter defined in the appended claims, as well as their legal equivalents.

[0104] LIST OF REFERENCE SYMBOLS

[0105] 1 security document

[0106] 1a, 1b Layers of the security document

[0107] 2 (first) photograph

[0108] 3 Code

[0109] 4a, 4b pages of a multi-sheet security document

[0110] 5 Front

[0111] 6 Back

[0112] 7 Information area

[0113] 8 microchip

[0114] 9 UV source, IR source

[0115] 10 pattern element, first basic color (white)

[0116] 11 pattern element, second basic color (black)

[0117] 12 pattern element, first additional color

[0118] 13 Pattern element, second additional color

[0119] 14 additional security feature, hologram

[0120] 20 first module, printer

[0121] 21 second module, printer

[0122] 22 Transport device

[0123] 30 Manufacturing device

[0124] 31 processors

[0125] 32 interface

[0126] 33 storage

[0127] 40-44 procedural steps

Claims

CLAIMS 1. A security document comprising: a photograph of a person, an animal, or an object; and a further representation of the photograph in the form of a code that can be read by an optical reading device, wherein the code contains a digital signature and / or is encrypted.

2. Security document according to claim 1, wherein the digital signature originates from an authorized body.

3. Security document according to claim 1 or 2, wherein the code is such that a copy of the photograph or an image of the features of the photograph can be generated from it even without a private key that was used to create the signature in order to enable a comparison with the photograph of the security document.

4. A security document according to any one of the preceding claims, wherein the code is a two-dimensional code.

5. Security document according to one of the preceding claims, wherein the code is a QR code or a QR code that complies with the ICAO-VDS standard and / or wherein the photograph is in a digital image format.

6. Security document according to claim 5, wherein the digital image format is JPEG XL, AVIF or WebP.

7. Security document according to one of the preceding claims, wherein the code contains data in text form.

8. Security document according to one of the preceding claims, wherein the code contains data in JSON or XML format.

9. A security document according to any one of the preceding claims, wherein the photograph is arranged on a first side of the security document or is visible or optically detectable from the first side, and wherein the code is arranged on a second side of the security document opposite the first side or is visible or optically detectable from the second side.

10. A security document according to the preceding claim, wherein the photograph is arranged in a first area and the code is arranged in a second area overlapping the first area.

11. A security document according to the preceding claim, wherein the first region is substantially congruent with the second region.

12. A security document according to any one of the preceding claims, wherein the photograph and / or the code is printed on a surface of the security document or incorporated into the material of the security document.

13. Security document according to one of the preceding claims, wherein the photograph and / or the code is provided with at least one further security feature.

14. A method for producing a security document, the method comprising: Providing a photograph of a person, animal or object; Creating a further representation of the photograph in the form of a code that can be read by an optical reader and that contains a digital signature and / or is encrypted; and Applying or incorporating the photograph and code onto or into the security document.

15. A device for producing a security document according to one of claims 1 to 13, comprising: a first module for applying or inserting the photograph onto or into the security document; a second module for generating, receiving and / or storing a further representation of the photograph in the form of a code that can be read by an optical reading device and that contains a digital signature and / or is encrypted; and a third module for applying or inserting the code onto or into the security document.

Images