Method for protecting information

Abstract

The invention relates to the field of computing and information security, and more particularly to computer-implemented methods for protecting both a physical object and data identifying said physical object. A digital copy of a physical object is created using a non-fungible token, with information about the physical object being recorded in a distributed database. The digital copy of the physical object is signed with an electronic digital signature by the producer of the physical object, confirming the producer, the authenticity of the physical object and the reliability of the digital copy of the object, and this information is also recorded in the distributed database. Information about the authenticity and genuineness of the physical object, received from an organization responsible for verifying the authenticity of the physical object, is recorded in the distributed database. The authenticity of the physical object is verified on the basis of a gemological examination, and information as to whether details concerning the authenticity and genuineness of the physical object are reliable or unreliable or partially reliable is recorded in the distributed database. The invention makes it possible to create a protected digital identifier of a physical object, capable of unequivocally identifying the physical object, and to enhance the level of protection of data and the protection of physical objects against counterfeit.

Description

[0001] METHOD OF INFORMATION PROTECTION

[0002] AREA OF TECHNOLOGY

[0003] This technical solution relates to the field of computing and information security, in particular to computer-implemented methods for protecting a physical object, as well as data that identifies a physical object.

[0004] LEVEL OF TECHNOLOGY

[0005] The prior art includes patent RU 2799097 C1, published on 04.07.2023. This solution describes a method for verifying the authenticity and reliably tracking the ownership history of individually defined textile products, which consists in the fact that an individually defined textile product is registered in the software by entering information about it and uploading a photograph of a label contained on the individually defined textile product, and the person verifying the authenticity of the individually defined textile product reads the label using technical means, after which the software compares the read label and the labels contained in the software database, and if they match, the individually defined textile product is recognized as genuine, and the person verifying the authenticity of the individually defined textile product is provided with information about this object, characterized in that,that information about the initial owner of an individually identified textile product, and about all or some subsequent owners of an individually identified textile product, is entered into the software and provided during verification, whereby each owner of an individually identified textile product is granted the right to enter information about themselves into the chain of ownership or to maintain anonymity, a photograph of the tag entered into the software during registration of an individually identified textile product is converted into a non-fungible token, and the tag is either of natural origin and represents an existing defect on the surface of the product, or the tag is artificially created by applying it to the product in a manner that prevents its removal from the object,In this case, the artificially created mark is applied by the owner of an individually defined textile product using a coloring agent or high-thermal exposure and contains only irregularly shaped geometric figures in which there are no straight lines, circles, squares, equilateral polygons or other regular figures, and the comparison of marks occurs by comparing a photograph of the read mark and the images of marks contained in the software database.

[0006] The prior art also includes solution US 2021248653 (A1), published 2021-08-12. This solution characterizes a method performed by one or more computing systems, including: receiving an indication that a first product is genuine, wherein the first product has a first owner, wherein the first owner is associated with a unique identifier; receiving an indication that a physical tag associated with the unique identifier is attached to the first product; generating an identifier for the first product; recording the association between the unique identifier associated with the physical tag and the generated identifier; creating a transaction that includes the unique identifier associated with the first owner and a unique identifier associated with the physical tag, wherein the transaction indicates that the first owner owns the first product; and providing the generated transaction for recording in a secure tracking system.

[0007] The proposed technical solution is aimed at eliminating the shortcomings of the current state of technology and differs from known solutions in that the proposed solution allows for the most effective protection of a physical object, as well as information identifying the physical object, from counterfeiting and other fraudulent mechanisms.

[0008] ESSENCE OF THE INVENTION

[0009] The technical problem that the proposed solution aims to solve is the creation of a computer-implemented method for protecting a physical object, as well as the data that identifies the physical object.

[0010] The technical result of the claimed technological object is to increase the level of data protection, where the data allows for the unambiguous identification of a physical object. An additional technical result is proposed to include increased protection of physical objects from counterfeiting.

[0011] The claimed technical result is achieved by implementing a computer-implemented method for protecting a physical object, as well as data that identify the physical object, which includes the following stages: creating a digital copy of the physical object based on a non-fungible token, wherein information about the physical object is registered in a distributed database; the digital copy of the physical object, implemented on the basis of a non-fungible token, containing information about the physical object, is signed with an electronic digital signature by the manufacturer of the physical object, confirming the manufacturer, the authenticity of the physical object and the reliability of the digital copy of the object, wherein information about the confirmation of the authenticity and originality of the physical object, as well as information about the reliability and identity of the digital copy of the object is registered in a distributed database;information about the authenticity and originality of a physical object, received from at least one organization that verifies the authenticity of a physical object, is registered in a distributed database, wherein a digital copy of a physical object based on a non-fungible token, containing information about the object, is signed with an electronic digital signature of the organization that verifies the authenticity of a physical object based on a gemological examination, registering in the distributed database information that the information registered by the manufacturer regarding the authenticity and originality of the physical object is reliable or unreliable or partially reliable, and also registering information that the physical object and the digital copy of the physical object, implemented on the basis of a non-fungible token, are identical or not identical or partially identical;information about the storage and location of a physical object, received from an authorized organization storing the physical object, is uploaded to a private distributed database, and the organization storing the physical object, using its electronic digital signature, signs a digital copy of the physical object based on a non-fungible token, confirming the physical location of the object.

[0012] In a particular embodiment of the claimed computer-implemented method, the physical object is a precious stone.

[0013] In a specific embodiment of the claimed computer-implemented method, the digital copy of the gemstone contains information about: the color of the gemstone; the weight of the gemstone; the origin of the gemstone; the treatment applied to the gemstone; the purity of the gemstone; and the quality of the gemstone's cut. In a specific embodiment of the claimed computer-implemented method, at least one organization verifying the authenticity of the physical object based on a gemological examination is a licensed laboratory that generates a digital certificate of authenticity for the gemstone.

[0014] In a particular embodiment of the claimed computer-implemented method, a certificate generated by at least one organization that verifies the authenticity of a physical object based on a gemological examination is additionally loaded into the IPFS system.

[0015] In a particular embodiment of the claimed computer-implemented method, the distributed database is implemented on the basis of blockchain.

[0016] In another particular embodiment of the claimed computer-implemented method, an accurate three-dimensional scanning of the physical object is additionally performed.

[0017] In another particular embodiment of the claimed computer-implemented method, the digital copy of the gemstone contains an exact three-dimensional model of the gemstone, and the exact three-dimensional model of the gemstone is registered in a private distributed database.

[0018] DETAILED DESCRIPTION OF THE INVENTION

[0019] The following detailed description of the invention includes numerous implementation details intended to provide a clear understanding of the present invention. However, one skilled in the art will readily appreciate how the present invention may be utilized with or without these implementation details. In other instances, well-known methods, procedures, and components have not been described in detail to avoid unnecessarily obscuring the features of the present invention.

[0020] Furthermore, it will be clear from the foregoing description that the invention is not limited to the embodiment described. Numerous possible modifications, changes, variations, and substitutions, while preserving the spirit and form of the present invention, will be apparent to those skilled in the art.

[0021] This technical solution is designed to protect a physical object from counterfeiting, as well as to significantly increase the reliability and authenticity of information regarding and characterizing the physical object. Specifically, the solution enables effective object identification and protects information (data) identifying the physical object in a virtual environment.

[0022] In a preferred embodiment, the physical object is a gemstone. In another particular embodiment, the physical object is precious metals—gold, silver, platinum, and platinum group metals. In another particular embodiment, the physical object is a piece of jewelry.

[0023] Currently, the jewelry industry is a huge playground for scammers and unscrupulous sellers. The most common fraudulent practice in this industry is outright counterfeiting of precious stones. It's also common for information published and posted by jewelry manufacturers and / or sellers on official websites to be inaccurate, and the websites themselves can often be spoofed by phishing scammers.

[0024] It's also worth noting that jewelry is often used as an investment. However, securely buying, selling, storing, and physically transporting precious stones can be quite challenging.

[0025] The claimed technological object significantly improves the security and reliability of information characterizing and identifying a precious stone. The claimed invention also addresses a number of issues related to the direct physical protection of precious stones from counterfeiting.

[0026] To achieve the aforementioned positive technical effects, the first stage of the claimed method involves creating a digital copy of a physical object based on a non-fungible token. A digital copy is a virtual copy of a physical object that accurately recreates the physical object in a virtual environment. A non-fungible token (unique token) is a type of highly secure cryptographic token, each instance of which is unique (specific) and cannot be replaced or substituted by another similar token. A non-fungible token is a cryptographic certificate of a digital object, which is designed to be transferable via a mechanism used in cryptocurrencies. Thus, the information that characterizes a gemstone from the moment it is manufactured is generated based on cryptographic tokens, each instance of which is unique (specific) and cannot be replaced or substituted by another similar token.To enhance data security, information about a physical object is registered in a distributed database / distributed ledger. This, thanks to the decentralized topology and cryptographic mechanisms, makes malicious manipulation of the information extremely difficult, while the information itself remains accessible to all participants. In other words, at this stage, a secure digital identifier for the physical object is generated (created) based on a non-fungible token, which can subsequently accurately identify the object.

[0027] Furthermore, to prevent the possibility of imitating the original manufacturer and falsifying information published by the gemstone manufacturer, a digital copy of a physical object, created using a non-fungible token and containing information about the physical object, is verified with an electronic digital signature from the manufacturer of the physical object, registering information about the authenticity of the physical object and the validity of the digital copy in the manufacturer's distributed database / distributed registry. A digital signature is a cryptographic mechanism used to confirm the authenticity and integrity of digital data.

[0028] Thus, a physical object receives a secure digital copy (a secure digital identifier) ​​signed by the original manufacturer. In other words, a secure digital identifier for a physical object contains precise and unambiguous information about the manufacturer, and this information, thanks to the decentralized topology and cryptographic mechanisms, is impossible to counterfeit.

[0029] A digital copy of a gemstone may contain at least the following information: gemstone color; gemstone weight; gemstone origin; gemstone treatment; gemstone clarity; gemstone cut quality; and a 3D model of the gemstone. To enhance data security, information about the manufacturer, as well as information about the manufacturer's confirmation of the authenticity and originality of the physical object, and information about the reliability and identity of the digital copy of the object, are uploaded to a distributed database / distributed ledger. Thus, the primary information regarding the object and the manufacturer is protected from counterfeiting and hacking. A specific embodiment of the claimed invention additionally includes a precise 3D scan of the gemstone. The 3D model of the gemstone is linked to the digital copy.In a specific implementation, a digital copy of a gemstone contains an exact 3D model of the gemstone. This exact 3D model is registered in a private distributed database / distributed ledger to prevent counterfeiting of the gemstone and information characterizing the object. By implementing the above-mentioned steps, an additional opportunity arises to unambiguously determine the originality of the gemstone, namely, the ability to hardware-basedly identify the gemstone and its digital copy, taking into account precise information regarding volume, number of facets, facet pattern, etc.

[0030] This makes it possible to clearly determine the authenticity of all information reflected in a digital copy of a precious stone.

[0031] It is common knowledge that jewelry and precious stones undergo gemological examination to confirm their quality. Gemological examination involves procedures for determining the stone's identity, its origin, and the presence of enhancements. Gemological examination includes the diagnosis and expert evaluation of precious, jewelry, and ornamental stones, their synthetic analogs, and imitations. Expert evaluation within gemological examination refers to establishing the stone's useful properties as a commodity, determining its qualitative and quantitative characteristics, and confirming their compliance with generally accepted international expert evaluation systems. The main goal is to identify the true nature of the gemstone and evaluate its monetary value. Natural, rare gemstones are expensive, and fraudsters exploit this by offering counterfeits or low-grade goods for large sums of money.However, counterfeit certificates of authenticity are often encountered. The problem of counterfeit certificates of authenticity is also addressed by the stated technical solution.

[0032] In one implementation, the organization that verifies the authenticity of a physical object based on gemological expertise is a licensed laboratory that generates a digital certificate of authenticity for the gemstone. In this technical solution, certificates received / generated from gemological laboratories (organizations that verify the authenticity of a physical object based on gemological expertise) are assigned to the gemstone and its digital copy in a counterfeit-proof manner.

[0033] Information that a gemstone has undergone gemological testing in a certified laboratory is registered in a distributed database, confirming this fact with an electronic digital signature from the certified laboratory. The digital certificate obtained based on the gemological test is also uploaded to the IPFS (Interplanetary File System). IPFS is a decentralized network and protocol of the same name developed for exchanging and storing data online.

[0034] In a preferred implementation, a single gemstone undergoes three gemological examinations in three different certified laboratories, significantly increasing the level of originality and authenticity of the gemstone. Each certified laboratory signs the digital copy of the gemstone, sold with a non-fungible token, with its own electronic signature. When signing the digital copy of the gemstone, sold with a non-fungible token, information is registered in a distributed database regarding whether the information declared and registered by the manufacturer regarding the authenticity and originality of the physical object is accurate, false, or partially accurate. Additionally, the absolute identity of the gemstone and its digital copy is confirmed or not confirmed.Since the above information is recorded in a distributed database, and a certified laboratory digitally signs a digital copy of the gemstone produced using a non-fungible token, the information characterizing the gemstone becomes impossible to counterfeit or hack. Furthermore, the digital signature makes it possible to unambiguously identify the specific organization that conducted the research. This further enhances the security of the information identifying the gemstone. Furthermore, a secure digital copy of the object, with a high level of security, contains unambiguous information about the physical object. As mentioned earlier, jewelry is often used as an investment. However, the secure storage, sale, and physical transportation of gemstones is quite challenging.The claimed technical object additionally describes the process of information protection, where the protected information characterizes the data regarding the storage of a physical object.

[0035] In this technical solution, information about the storage and location of a physical object, received from an authorized storage organization, is uploaded to a private distributed database. The storage organization, using its electronic digital signature, signs a digital copy of the physical object based on a non-fungible token, confirming the physical location of the object. This step securely and privately registers not only the physical location of the gemstone and the authorized storage organization, but also further confirms the identity of the physical object and the digital copy of the physical object based on the non-fungible token.

[0036] In a specific implementation option, the authorized organization responsible for storing the object is understood to be a bank or a specialized secure storage facility for precious stones.

[0037] Information that allows for the identification of a precious stone, as well as its transparent and reliable characterization and identification, is essential. The proposed technical solution enables a significant level of information security, as data registered in a distributed database cannot be falsified. The proposed technical solution also enables the unambiguous identification of a precious stone and protects it from counterfeiting, as a digital copy of the object becomes a kind of protected digital identifier for the physical object, carrying detailed and reliable information about it.

[0038] In a preferred embodiment, to increase the level of protection, the claimed technical object can be implemented on the basis of blockchain.

[0039] In a preferred implementation, to enhance security when managing user rights, the claimed solution is implemented using access rights distribution and management tokens for various users. Access rights distribution and management tokens play a key role in the claimed solution, enabling the distribution and management of access rights for various users. These tokens are non-fungible and tied to specific users, allowing for their reliable identification in the system and the assignment of specific rights and permissions.

[0040] The proposed solution includes four types of participating parties (firms) in which employees can be linked using tokens:

[0041] Gemstone manufacturers are companies that mine and process precious stones;

[0042] Administrators - the party that manages the functionality and operations;

[0043] Gemstone auditors are independent organizations, certified laboratories, that test and certify gemstones;

[0044] Safe storage facilities are organizations / companies that provide storage services for precious stones, ensuring their protection and safety.

[0045] Token functionality:

[0046] Assigning Access Rights: Tokens are used to assign different levels of access and rights to users, depending on their roles and responsibilities. Each token represents a set of permissions that can be linked to a specific company.

[0047] Token activation and deactivation: Business owners can activate and deactivate their employees' tokens. For example, if an employee goes on vacation or leaves the company, their token can be deactivated. This means the employee no longer has access to the rights associated with that token, although their activity history is preserved and the token itself does not disappear.

[0048] Token Management: Initially, each owner, director, or administrator of a company is issued a management token for an authorized company within the system. This token grants rights to manage the company within the system. The company owner can then assign rights to their employees by distributing tokens linked to the company. These tokens will contain specific rights and permissions, as specified by the director for their subordinates.

[0049] Tokens are therefore an essential tool for access rights management and security. They help create a transparent and secure environment where each user has clearly defined rights and permissions appropriate to their role in the company or project, and maintain a history of employee actions even after their departure.

[0050] This system allows for effective management of user access and rights, ensuring that all actions are performed only by authorized and verified individuals, while maintaining the entire history of interactions within the system.

[0051] The use of such tokens in the proposed solution has several significant advantages over traditional authentication and access control methods based on logins and passwords in centralized systems with conventional databases.

[0052] 1. Security and resistance to hacking.

[0053] Access rights distribution and management tokens are linked directly to the user's unique cryptographic key and cannot be transferred or forged. This ensures a high level of protection against hacking and data theft, unlike traditional logins and passwords, which can be compromised through phishing, data leaks, or weak passwords.

[0054] Blockchain provides transparency and immutability of data, which eliminates the possibility of unauthorized modification or deletion of access rights records, which often happens in centralized systems.

[0055] 2. Transparency and trust.

[0056] In a blockchain system, access control actions are recorded in a decentralized and immutable database. This creates a high level of trust, as any changes to access rights, token assignment, or deactivation can be verified and confirmed by all network participants.

[0057] In centralized systems, data is stored on a single server or a single cluster of servers, making it vulnerable to internal security breaches and manipulation by the system administrator.

[0058] 3. Simplified access rights management.

[0059] Access rights distribution and management tokens allow dynamic access rights changes without the need to change central credentials or implement changes in multiple systems. Business owners can easily activate or deactivate a token by changing employee rights, simplifying access management and making it more flexible. In traditional systems, changing access rights requires manually updating credentials in each system, which increases the likelihood of errors and complicates the management process.

[0060] 4. Immutability and preservation of history.

[0061] The history of all access management actions is stored on the blockchain and cannot be modified retroactively. This ensures complete transparency and auditability of all transactions related to access rights management. In centralized systems, the action history can be modified or deleted, which creates the risk of losing important information and reduces trust in the system.

[0062] 5. Removing single point of failure.

[0063] Decentralized blockchain-based systems lack the single point of failure found in centralized systems. This significantly reduces the risks associated with server attacks or system failures that could lead to data loss or system shutdown. Centralized systems rely on a single control node, which can become vulnerable in the event of a cyberattack, hardware failure, or other incident.

[0064] 6. Flexibility and scalability.

[0065] Blockchain allows the system to easily scale and adapt to changes, adding new companies, users, and tokens without the need for significant changes to the infrastructure.

[0066] At least one physical computing system capable of providing the basic data processing necessary to implement the claimed solution generally comprises components such as one or more processors, at least one memory, data storage, input / output interfaces, input means, and networking capabilities. When executing machine-readable instructions contained in the random-access memory, the device's processor is configured to perform the basic computing operations necessary for the operation of the device or the functionality of one or more of its components. The memory is typically implemented as RAM, which is loaded with the necessary software logic to provide the required functionality. When implementing the proposed solution, the memory capacity required for its implementation is allocated. The data storage medium may be implemented as an HDD, SSD, RAID array, network storage, flash memory, etc.The tool enables long-term storage of various types of information, such as the aforementioned files with user / passenger data sets, databases containing records of time intervals measured for each user, user identifiers, etc. The interfaces are standard means for connecting and operating peripherals and other devices, such as USB, RS232, RJ45, COM, HDMI, PS / 2, Lightning, etc. The choice of interfaces depends on the specific design of the device, which may be a personal computer, mainframe, server cluster, thin client, smartphone, laptop, etc. A keyboard can be used as a data input device in any embodiment of the system implementing the described method.The keyboard hardware can be any of a variety of devices: it could be a built-in keyboard used on a laptop or netbook, or a separate device connected to a desktop computer, server, or other computing device. The connection can be wired, with the keyboard cable connected to a PS / 2 or USB port on the desktop computer's system unit, or wireless, with the keyboard exchanging data wirelessly, such as via radio, with a base station, which is directly connected to the system unit, such as a USB port. In addition to the keyboard, other input devices may include a joystick, display (touchscreen), projector, touchpad, mouse, trackball, stylus, speakers, microphone, and so on.Networking tools are selected from a device that provides network data reception and transmission, such as an Ethernet card, WLAN / Wi-Fi module, Bluetooth module, BLE module, NFC module, IrDA, RFID module, GSM modem, etc. These tools facilitate data exchange via a wired or wireless data transmission channel, such as a WAN, PAN, LAN, Intranet, Internet, WLAN, WMAN, or GSM. The device components are connected via a common data transmission bus.

[0067] In these application materials, a preferred disclosure of the implementation of the claimed technical solution was presented, which should not be used as limiting other, particular embodiments of its implementation that do not go beyond the scope of the requested scope of legal protection and are obvious to specialists in the relevant field of technology.

Claims

Formula 1. A computer-implemented method for protecting a physical object, as well as data that identifies the physical object, comprising the following steps: creating a digital copy of the physical object based on a non-fungible token, wherein information about the physical object is registered in a distributed database; the digital copy of the physical object, implemented on the basis of a non-fungible token, containing information about the physical object, is signed with an electronic digital signature by the manufacturer of the physical object, confirming the manufacturer, the authenticity of the physical object and the validity of the digital copy of the object, wherein information about the confirmation of the authenticity and originality of the physical object, as well as information about the validity and identity of the digital copy of the object is registered in a distributed database;information about the authenticity and originality of a physical object, received from at least one organization that verifies the authenticity of a physical object, is registered in a distributed database, wherein a digital copy of a physical object based on a non-fungible token, containing information about the object, is signed with an electronic digital signature of the organization that verifies the authenticity of a physical object based on a gemological examination, registering in the distributed database information that the information registered by the manufacturer regarding the authenticity and originality of the physical object is reliable or unreliable or partially reliable, and also registering information that the physical object and the digital copy of the physical object, implemented on the basis of a non-fungible token, are identical or not identical or partially identical;information about the storage and location of a physical object, received from an authorized organization storing the physical object, is uploaded to a private distributed database, and the organization storing the physical object, using its electronic digital signature, signs a digital copy of the physical object based on a non-fungible token, confirming the physical location of the object.

2. The computer-implemented method of claim 1, wherein the physical object is a precious stone.

3. The computer-implemented method according to paragraph 2, wherein the digital copy of the precious stone contains information about: the color of the precious stone; the mass of the precious stone; the origin of the precious stone; the treatment of the precious stone; the purity of the precious stone; the quality of the cut of the precious stone.

4. The computer-implemented method according to paragraph 2, wherein at least one organization that verifies the authenticity of the precious stone based on a gemological examination is a licensed laboratory that generates a digital certificate of authenticity of the precious stone.

5. The computer-implemented method according to paragraph 4, wherein the certificate generated by at least one organization that verifies the authenticity of a physical object based on a gemological examination is additionally loaded into the IPFS system.

6. The computer-implemented method according to claim 1, wherein the distributed database is implemented on the basis of blockchain.

7. The computer-implemented method according to claim 1, which additionally includes performing precise three-dimensional scanning of the physical object.

8. The computer-implemented method of claim 7, wherein the digital copy of the gemstone comprises an accurate three-dimensional model of the gemstone, and the accurate three-dimensional model of the gemstone is registered in a private distributed database.