Remote authentication of two dimensional barcoded indicia
View Patent ↗An indicia authentication system includes a franking device for embedding identification and encrypted authentication data into indicia and applying the indicia to an article, and a computing device for utilizing the identification data to retrieve a key for deciphering the encrypted authentication data, where the computing device is adapted to utilize the deciphered authentication data to determine the validity of the indicia.
1. A method of verifying the authenticity of indicia comprising:
embedding identification and encrypted device data into an indicia, wherein the embedding of the identification and encrypted device data further comprises the steps of;
providing device data to a first hash function to yield a first hash value;
providing the first hash value to a first digital signature function utilizing a device private key to yield a first digital signature value;
incorporating the identification data, the first hash value and the first digital signature value into the indicia;
providing the device data and a device public key to a second hash function to yield a second hash value;
providing the second hash value to a second digital signature function utilizing a vendor private key to yield a second signature value; and
incorporating the second hash value and a vendor public key into the indicia;
utilizing the identification data to retrieve authentication data for deciphering the encrypted device data; and
determining a validity of the indicia using the deciphered device data.
2. The method of claim 1 , further comprising accessing a remote database to retrieve the authentication data.
3. The method of claim 1 , further comprising embedding identification and encrypted device data into indicia using a franking device.
4. The method of claim 3 , wherein the identification data comprises a serial number of the franking device.
5. The method of claim 3 , wherein the device data comprises one or more of a serial number of the franking device, a value applied by the franking device, and the contents of a register of the franking device.
6. The method of claim 1 further comprising:
identifying the identification data and the first hash value incorporated in the indicia;
determining a device public key from the identification data;
utilizing the device public key to extract the first hash value from the first digital signature value to yield a first extracted hash value;
comparing the first extracted hash value and the first hash value and if they do not match determining that the indicia is invalid.
7. The method of claim 6 , further comprising:
comparing the first extracted hash value and the first hash value and if they match identifying a vendor public key to extract the second hash value from the second digital signature value to yield a second extracted hash value; and
comparing the extracted second hash value and the second hash value and determining that the indicia is valid if they match and invalid if they do not match.