Document-Based PUF Key Generation for Secure Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security documents lack a method to provide unique, document-specific information without direct access to personal data, making it difficult to ensure authenticity and security without compromising privacy.

Innovation Solution

A method using a reading device to detect properties of a security document with different measurement methods, generating a PUF key through a one-way hash value function, which cannot be reverse-engineered to reveal personal data, ensuring the document's authenticity and security without exposing sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security documents use targeted PUF features to prevent counterfeiting, then security against counterfeiting is improved, but the ability to store and verify information is worsened because the features cannot be directly used for information storage

Engineering Contradiction:
Improvesecurity against counterfeitingVSAvoidability to store and verify information
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent introduces an intermediary representation layer between the physical PUF features and the digital information storage. The PUF features (optical, magnetic, electrical properties) are measured and converted into a digital representation that can be stored and verified, while the actual PUF features remain hidden and不可复制. This intermediary digital representation enables information storage without exposing the underlying security features.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a digital copy or representation of the physical PUF features that can be stored and transmitted without copying the actual physical features. The digital representation captures the essential characteristics of the PUF features while maintaining their security properties, allowing multiple copies of the information to be made without replicating the physical security features.

Inventive Principle:
Principle #26Copying

2Reliability

If electronic circuits with cryptographic methods are used to secure data, then data security is improved, but the complexity of the system is worsened

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security function from complex electronic circuits and cryptographic systems and implements it through simple physical PUF features. Instead of using complex encryption hardware and software, the security is achieved through the inherent physical uniqueness of materials and structures, which can be measured and represented digitally without requiring complex processing.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces electronic cryptographic systems with physical measurement and digital representation. Instead of using electronic circuits for security, the invention uses physical properties (optical, magnetic, electrical) of materials and structures, measuring them with simple devices and representing them digitally, thereby eliminating the need for complex electronic security systems.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Ease of operation

If personal data is stored in security documents for identification, then ease of operation is improved, but privacy is worsened because the data can be accessed and potentially compromised

Engineering Contradiction:
Improveidentification capabilityVSAvoidprivacy risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts personal identification data from the security document and separates it from the PUF features. The PUF features are measured and represented digitally without containing personal information, while personal data is stored separately. This extraction allows identification functionality to be maintained while preventing direct access to personal data through the security features.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary layer between personal data and the security verification process. The digital representation of PUF features serves as an intermediary that enables verification without revealing personal information. The system can verify authenticity through the PUF representation while personal data remains protected and inaccessible through the security features.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2807787B1Document based key
Publication Date: 2018.09.12 BUNDESDRUCKEREI GMBH
  • EP2807787B1 patent drawingFigure 1
  • EP2807787B1 patent drawingFigure 2
  • EP2807787B1 patent drawingFigure 3

AI summary

The invention relates to a method for providing a document-based key or PUF key (12, 12a), having the following steps: providing a document (2) which comprises at least one electronic circuit (5); providing a reading device (1); detecting at least two properties of the document (2) using the reading device (1), a dataset (9, 10, 119-n, 120-k) which represents a detected property being provided for each detected property, wherein the at least two properties are detected using different detection methods; and calculating the PUF key (12, 12a) using an erratic value function which uses the data sets (9, 10, 119-n, 120-k) provided during the step of detecting the properties as starting values. The invention further relates to a reading device (1) for generating a PUF key (12, 12a).