Zero Knowledge Protocol for Physical Token Authenticity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for proving authenticity using physical tokens expose sensitive information, making them vulnerable to counterfeiting and piracy, as they rely on unique responses that can be duplicated or compromised.
Innovation Solution
A system that generates a secret S using a physical token, which is then used to create a public value PV through a computationally expensive function F, allowing for a zero knowledge protocol to verify authenticity without exposing the secret S, using a first communication means and storage means for a certificate signed by a Trusted Third Party, enabling off-line verification and reducing information exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unique response from a physical token is used to verify authenticity, then the proof of authenticity is sufficient, but the exposed information can be used for duplicating the work piece
Solution Approach 1:
The patent extracts only the essential verification information (public value PV) from the physical token's response, separating it from the sensitive secret (S). The secret remains hidden within the token while only the non-sensitive public value is exposed to the verifier, allowing authentication without information leakage that could enable duplication.
Solution Approach 2:
The patent introduces a Trusted Third Party (TTP) as an intermediary that issues certificates containing public values. This intermediary layer allows the physical token to prove authenticity through the certificate without directly exposing its internal secret, mediating between the token and verifier while protecting sensitive information.
2Loss of information
If a zero knowledge protocol is used to prove authenticity, then information exposure is reduced, but the computational cost increases
Solution Approach 1:
The patent performs preliminary actions by pre-generating public values and having the Trusted Third Party issue certificates before the actual authentication process. This preparation work is done in advance, so that during verification only lightweight operations are needed, reducing the computational burden at the time of authentication while still enabling zero-knowledge proof capabilities.
3Productivity
If offline verification is enabled using stored certificates, then verification speed improves, but storage requirements increase
Solution Approach 1:
The patent uses lightweight, self-contained certificates that can be independently verified without needing to maintain large databases. Each certificate is a compact, disposable verification object that contains all necessary information for offline authentication, eliminating the need for persistent storage infrastructure while enabling fast verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for proving authenticity of a prover PRV to a verifier VER, the method comprising generating a secret S using a physical token by the prover PRV. Obtaining a public value PV by the verifier, where the public value PV has been derived from the secret S using a function for which the inverse of said function is computationally expensive. The method further comprising a step for conducting a zero knowledge protocol between the prover PRV and the verifier VER in order to prove to the verifier VER, with a pre-determined probability, that the prover PRV has access to the physical token, where the prover PRV makes use of the secret S and the verifier VER makes use of the public value PV. The invention further relates to a system employing the method, and an object for proving authenticity.