Authentication systems and methods
A system includes a first computing device having a first non-transitory machine-readable storage medium, first communication circuitry, and at least one first processor in communication with the first non-transitory machine-readable storage medium and the first communication circuitry. The at least one first processor is configured to execute instructions stored in the first non-transitory machine-readable storage medium to cause the first communication circuitry to receive a first signal from a first transmission medium, calculate a first authentication value for an object based on data included in the first signal, and cause the first communication circuitry to transmit a second signal to the first transmission medium. The second signal identifies whether the object is authentic based, at least in part, on the first authentication value.
1. A method for distributed authentication, the method comprising:
receiving, at a computing device of multiple computing devices of a validation network, first data concerning a first characteristic of an object;
incorporating the first data into an immutable token (IT) that corresponds to the object;
storing a copy of the IT within the computing device;
transmitting at least one other copy of the IT to at least one other computing device of the multiple computing devices to enable distributed storage of multiple copies of the IT among the multiple computing devices;
receiving, at the computing device, second data concerning a second characteristic of the object;
cooperating with at least one other computing device of the multiple computing devices to authenticate at least a subset of the multiple copies of the IT stored among the multiple computing devices; and
incorporating the second data into the IT to generate an updated IT that corresponds to the object.
2. The method of claim 1 , further comprising:
storing a copy of multiple copies of the updated IT within the computing device;
transmitting at least one other copy of the multiple copies of the updated IT to at least one other computing device of the multiple computing devices to enable distributed storage of the multiple copies of the updated IT among the multiple computing devices; and
cooperating with at least one other computing device of the multiple computing devices to authenticate at least a subset of the multiple copies of the updated IT stored among the multiple computing devices.
3. The method of claim 1 , wherein:
the first data comprises an indication of a first location of the object; and
the second data comprises an indication of a second location to which the object has been moved at a time after the object was at the first location.
4. The method of claim 3 , wherein the first location and the second location specify at least a portion of a chain of custody of the object.
5. The method of claim 1 , wherein:
the first data comprises a measure of the first characteristic of the object that is detected by a first measuring device; and
the second data comprises a measure of the second characteristic of the object that is detected by a second measuring device.
6. The method of claim 5 , wherein each of the first characteristic and the second characteristic comprises a physical attribute of the object.
7. The method of claim 5 , wherein:
the object comprises a piece of artwork; and
each of the first characteristic and the second characteristic comprises an appearance attribute of the object.
8. The method of claim 1 , wherein:
incorporating the first data into the IT comprises applying a first weight to the first data;
the first weight is based on an evaluation of likelihood of the first data being forged;
incorporating the second data into the IT comprises applying a second weight to the second data; and
the second weight is based on an evaluation of likelihood of the second data being forged.
9. The method of claim 1 , wherein:
incorporating the first data into the IT comprises incorporating a hash or an encrypted form of the first data into the IT; and
incorporating the second data into the IT comprises incorporating a hash or an encrypted form of the second data into the IT.
10. The method of claim 1 , wherein:
the object comprises a person; and
each of the first characteristic and the second characteristic comprises a response, received from the person, to a request for information about the person.
11. The method of claim 10 , further comprising using the IT to determine, at the computing device, whether the person is authorized to access information stored within at least one computing device of the multiple computing devices of the validation network.
12. The method of claim 1 , wherein the object comprises a virtual object.
13. A computing device comprising:
a network interface configured to connect the computing device to a validation network to which multiple computing devices are connected, wherein the multiple computing devices comprises the computing device;
a storage component configured to store copies of immutable tokens (ITs); and
a processor communicatively coupled to the network interface and the storage component, the processor configured to perform operations comprising:
receive, at the computing device, first data concerning a first characteristic of an object;
incorporate the first data into an IT that corresponds to the object;
store a copy of the IT within the storage component of the computing device;
transmit at least one other copy of the IT to at least one other computing device of the multiple computing devices to enable distributed storage of multiple copies of the IT among the multiple computing devices;
receive, at the computing device, second data concerning a second characteristic of the object;
cooperate with at least one other computing device of the multiple computing devices to authenticate at least a subset of the multiple copies of the IT stored among the multiple computing devices; and
incorporate the second data into the IT to generate an updated IT that corresponds to the object.
14. The computing device of claim 13 , wherein the processor is further configured to perform operations comprising:
store a copy of multiple copies of the updated IT within the storage component of the computing device;
transmit at least one other copy of the multiple copies of the updated IT to at least one other computing device of the multiple computing devices to enable distributed storage of the multiple copies of the updated IT among the multiple computing devices; and
cooperate with at least one other computing device of the multiple computing devices to authenticate at least a subset of the multiple copies of the updated IT stored among the multiple computing devices.
15. The computing device of claim 13 , wherein:
the first data comprises an indication of a first location of the object; and
the second data comprises an indication of a second location to which the object has been moved at a time after the object was at the first location.
16. The computing device of claim 15 , wherein the first location and the second location specify at least a portion of a chain of custody of the object.
17. The computing device of claim 13 , wherein:
the first data comprises a measure of the first characteristic of the object that is detected by a first measuring device; and
the second data comprises a measure of the second characteristic of the object that is detected by a second measuring device.
18. The computing device of claim 17 , wherein each of the first characteristic and the second characteristic comprises a physical attribute of the object.
19. The computing device of claim 17 , wherein:
the object comprises a piece of artwork; and
each of the first characteristic and the second characteristic comprises an appearance attribute of the object.
20. The computing device of claim 13 , wherein:
incorporating the first data into the IT comprises applying a first weight to the first data;
the first weight is based on an evaluation of likelihood of the first data being forged;
incorporating the second data into the IT comprises applying a second weight to the second data; and
the second weight is based on an evaluation of likelihood of the second data being forged.
21. The computing device of claim 13 , wherein:
incorporating the first data into the IT comprises incorporating a hash or an encrypted form of the first data into the IT; and
incorporating the second data into the IT comprises incorporating a hash or an encrypted form of the second data into the IT.
22. The computing device of claim 13 , wherein:
the object comprises a person; and
each of the first characteristic and the second characteristic comprises a response, received from the person, to a request for information about the person.
23. The computing device of claim 22 , wherein the processor is further configured to use the IT to determine, by the processor, whether the person is authorized to access information stored within at least one computing device of the multiple computing devices of the validation network.
24. The computing device of claim 13 , wherein the object comprises a virtual object.
25. A method for distributed authentication, the method comprising:
receiving, at a computing device of multiple computing devices of a validation network, first data concerning a first characteristic of an object;
incorporating the first data into an immutable token (IT) that corresponds to the object;
storing a copy of the IT within the computing device;
transmitting at least one other copy of the IT to at least one other computing device of the multiple computing devices to enable federated storage of multiple copies of the IT among the multiple computing devices;
receiving, at the computing device, second data concerning a second characteristic of the object;
cooperating with at least one other computing device of the multiple computing devices to authenticate at least a subset of the multiple copies of the IT stored among the multiple computing devices; and
incorporating the second data into the IT to generate an updated IT that corresponds to the object.