Time-Variant Authentication Scheme for Physical Objects

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current authentication methods for physical objects lack a secure and efficient way to provide time-variant combination schemes, especially in supply chains where counterfeiting and traceability are concerns, especially for products like pharmaceuticals and medical devices.

Innovation Solution

A method and system that generate and store a secured start data package using predicted and random context data, combined with cryptographic hash functions and asymmetric encryption, to create a time-variant authentication scheme stored on a blockchain or distributed ledger, ensuring secure authentication and traceability along the supply chain.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used for physical objects in supply chains, then the authentication process is simple to implement, but the security against counterfeiting and tampering is insufficient

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into multiple independent components: a secured start data package containing predicted context data, random context data, and combination schemes; a blockchain ledger for immutable storage; and authentication systems at different supply chain nodes. This segmentation allows each component to be optimized independently while collectively providing high security without requiring the entire system to be complex.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary actions by pre-generating and storing the secured start data package containing predicted context data and combination schemes before the actual authentication event occurs. This allows the authentication process itself to be simpler, as it only requires comparing current context data against the pre-established criteria rather than performing complex real-time computations.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If time-variant combination schemes are implemented for authentication, then data integrity and traceability are enhanced, but the computational complexity and processing time increase

Engineering Contradiction:
Improvedata integrityVSAvoidauthentication processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system merges predicted context data, random context data, and combination schemes into a single secured start data package that is stored on the blockchain. This consolidation allows authentication systems to retrieve all necessary authentication criteria in one operation rather than querying multiple separate data sources, reducing processing time while maintaining data integrity through the immutable blockchain ledger.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If blockchain technology is used to store authentication data, then traceability and immutability are improved, but the storage requirements and system infrastructure complexity increase

Engineering Contradiction:
ImprovetraceabilityVSAvoidinfrastructure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts and stores only the essential authentication data (secured start data package containing predicted context data, random context data, and combination schemes) on the blockchain, rather than storing complete authentication records. This selective extraction reduces blockchain storage requirements and simplifies infrastructure needs while maintaining traceability through the immutable ledger of authentication criteria.

Inventive Principle:
Principle #2Taking out (Extraction)

4Reliability

If random context data and predicted context data are combined using cryptographic hash functions, then security against tampering is improved, but the computational overhead increases

Engineering Contradiction:
Improvetamper resistanceVSAvoidcomputational energy
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The cryptographic combination of random context data and predicted context data using hash functions is performed in advance when creating the secured start data package, rather than being repeated during each authentication event. This preliminary computation establishes the authentication criteria once, and subsequent authentications only require comparing current context data against these pre-computed criteria, significantly reducing computational energy requirements while maintaining tamper resistance.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3890367B1Methods and systems for preparing and performing an object authentication
Publication Date: 2023.04.19 MERCK PATENT GMBH
  • EP3890367B1 patent drawingFigure 1
  • EP3890367B1 patent drawingFigure 2A
  • EP3890367B1 patent drawingFigure 2B

AI summary

The present invention relates to the field of tracing and anti-counterfeit protection of physical objects, such as products, for example pharmaceuticals or other health-related products, and particularly to preparing and performing a secure authentication of such objects. Specifically, an overall authentication solution comprises a method and a system for preparing a subsequent secured authentication of a physical object or group of physical objects by a recipient thereof, a method and system for authenticating a physical object or group of physical objects, a method and system of securely providing a time-variant combination scheme for authenticating a physical object or group of physical objects according to the above methods, and related computer programs corresponding to said methods. The solution is based on the concept of increasing the security level by increasing the information entropy of the data on which the anti-counterfeit protection is based by means of random data communicated to authenticating entities in an algorithmically hidden way. In some embodiments, the security concept is further based on blockchain technology, physical unclonable functions, and/or time- and location-based information, e.g. geocoordinates, and/or supply chain information.