Systems and methods for token authentication

1. A system for employing multidimensional encodings to perform token authentication, the system comprising:

storage circuitry configured to store a secret key;

an optical sensor system configured to operate in a plurality of invisible ink detecting modes, the plurality of invisible ink detecting modes comprising a first mode corresponding to a first wavelength range within a light spectrum and a second mode corresponding to a second wavelength range within the light spectrum different from the first wavelength range; and

control circuitry configured to perform operations comprising:

obtaining text printed on a document;

generating a first message authentication code based on the text and the secret key;

obtaining a second message authentication code by:

setting the optical sensor system to operate in the first mode corresponding to the first wavelength range;

extracting, via the optical sensor system in the first mode, a first portion of the second message authentication code from a first invisible-ink-printed pattern on the document;

setting the optical sensor system to operate in the second mode corresponding to the second wavelength range;

extracting, via the optical sensor system in the second mode, a second portion of the second message authentication code from a second invisible-ink-printed pattern that overlaps with the first invisible-ink-printed pattern on the document;

determining, based on a current time, an ordering of the first portion and the second portion; and

generating the second message authentication code by concatenating the first portion and the second portion based on the determined ordering; and

authenticating the document based on a determination that the first message authentication code matches the second message authentication code.

2. The system of claim 1 , wherein the control circuitry is configured to perform operations further comprising:

extracting a third portion of the second message authentication code from at least one ink pattern on the document, wherein the at least one ink pattern is printed using ink detectable in light that has a wavelength between 380 and 700 nanometers,

wherein generating the second message authentication code comprises concatenating the third portion with the first portion and the second portion.

3. The system of claim 1 , wherein the control circuitry is configured to perform operations further comprising:

generating, based on text printed on the document, a cryptographic hash; and

in response to determining that the cryptographic hash is greater than a threshold value, determining the first wavelength range from a plurality of wavelength ranges.

4. The system of claim 1 , wherein determining the ordering of the first portion and the second portion comprises:

determining, based on the text printed on the document, that the document has not expired; and

in response to determining that the document has not expired, ordering the first portion prior to the second portion.

5. A method comprising:

obtaining text printed on a document;

generating a first message authentication code based on the text and a secret key;

obtaining a second message authentication code by:

extracting, via one or more sensors in a first mode corresponding to a first wavelength range, first data related to a second authentication code from a first invisible-ink-printed pattern on the document;

extracting, via the one or more sensors in a second mode corresponding to a second wavelength range, second data related to the second message authentication code from a second invisible-ink-printed pattern that overlaps with the first invisible-ink-printed pattern on the document; and

generating, based on the first data and the second data, the second message authentication code; and

authenticating the document based on a determination that the first message authentication code matches the second message authentication code.

6. The method of claim 5 , wherein the first wavelength range and the second wavelength range do not overlap.

7. The method of claim 5 , further comprising:

generating, based on the text printed on the document, a cryptographic hash; and

in response to determining that the cryptographic hash is greater than a threshold value, determining the first wavelength range from a plurality of wavelength ranges.

8. The method of claim 5 , wherein the secret key comprises a public key of a key pair, the method further comprising:

determining a third-party certificate on the document;

determining, via a public key corresponding to a third-party associated with the third-party certificate, that the third-party certificate is valid; and

in response to determining that the third-party certificate is valid, determining that the secret key is valid.

9. The method of claim 5 , further comprising:

extracting third data related to the second message authentication code from at least one ink pattern on the document, wherein the at least one ink pattern is printed using ink detectable in light that has a wavelength between 380 and 700 nanometers.

10. The method of claim 9 , wherein the at least one ink pattern overlaps with the second invisible-ink-printed pattern and the first invisible-ink-printed pattern on the document.

11. The method of claim 5 , wherein determining an ordering of the first data and the second data comprises:

receiving a code from a user device associated with the document;

verifying that the code is correct; and

in response to verifying the code, ordering the first data prior to the second data.

12. The method of claim 5 , wherein determining an ordering of the first data and the second data comprises:

determining, based on a date printed on the document, that the document has not expired; and

in response to determining that the document has not expired, ordering the first data prior to the second data.

13. One or more non-transitory, computer-readable media comprising instructions that, when executed by one or more processors, causes operations comprising:

obtaining text printed on a document;

generating a first message authentication code based on the text and a secret key;

obtaining a second message authentication code by:

extracting, via one or more sensors in a first mode corresponding to a first wavelength range, first data related to a second authentication code from a first invisible-ink-printed pattern on the document;

extracting, via the one or more sensors in a second mode corresponding to a second wavelength range, second data related to the second message authentication code from a second invisible-ink-printed pattern that overlaps with the first invisible-ink-printed pattern on the document; and

generating, based on the first data and the second data, the second message authentication code; and

authenticating the document based on a determination that the first message authentication code matches the second message authentication code.

14. The one or more non-transitory, computer-readable media of claim 13 , wherein the first wavelength range and the second wavelength range do not overlap.

15. The one or more non-transitory, computer-readable media of claim 13 , wherein the instructions, when executed, cause operations further comprising:

generating, based on the text printed on the document, a cryptographic hash; and

in response to determining that the cryptographic hash is greater than a threshold value, determining the first wavelength range from a plurality of wavelength ranges.

16. The one or more non-transitory, computer-readable media of claim 13 , wherein the secret key comprises a public key of a key pair, and the instructions, when executed, cause operations further comprising:

determining a third-party certificate on the document;

determining, via a public key corresponding to a third-party associated with the third-party certificate, that the third-party certificate is valid; and

in response to determining that the third-party certificate is valid, determining that the secret key is valid.

17. The one or more non-transitory, computer-readable media of claim 13 , wherein the instructions, when executed, cause operations further comprising:

extracting third data related to the second message authentication code from at least one ink pattern on the document, wherein the at least one ink pattern is printed using ink detectable in light that has a wavelength between 380 and 700 nanometers.

18. The one or more non-transitory, computer-readable media of claim 17 , wherein the at least one ink pattern overlaps with the second invisible-ink-printed pattern and the first invisible-ink-printed pattern on the document.

19. The one or more non-transitory, computer-readable media of claim 13 , wherein determining an ordering of the first data and the second data comprises:

receiving a code from a user device associated with the document;

verifying that the code is correct; and

in response to verifying the code, ordering the first data prior to the second data.

20. The one or more non-transitory, computer-readable media of claim 13 , wherein determining an ordering of the first data and the second data comprises:

determining, based on a date printed on the document, that the document has not expired; and

in response to determining that the document has not expired, ordering the first data prior to the second data.