EP0772929B1

EP0772929B1 - Methods and systems for creating and authenticating unalterable self-verifying articles

Info

Publication number: EP0772929B1
Application number: EP95928140A
Authority: EP
Inventors: Dennis G. Priddy
Original assignee: Siemens Energy and Automation Inc
Current assignee: Siemens Energy and Automation Inc
Priority date: 1994-07-26
Filing date: 1995-07-26
Publication date: 2006-09-06
Anticipated expiration: 2015-07-26
Also published as: CN1164306A; JPH10503609A; EP0772929A4; DE69535212D1; CN1153402C; HK1002213A1; CA2195681A1; ATE338988T1; WO1996003821A1; JP2006313534A; DE69535212T2; EP0772929A1

Abstract

The system includes an input data set (100) which includes a biometric data set (101) and an optional textual data set (102), an article (10), a processing system (103), and a self-verifying article (104). The input data set (100) is recipient specific data. The biometric data set (101) may include one or more physical traits personal to the potential article recipient, such as a photo, a retinal scan, a finger print, or a signature. The textual data set (102) may include one or more textual attributes, such as name, address, height and weight, or eye color.

Description

The present invention relates in general to encoding methods and systems, and in particular to methods, systems and articles of manufacture for creating and authenticating self-verifying articles.

BACKGROUND OF THE INVENTION

Modern life requires that individual identification and document authenticity be quickly, conveniently and reliably verified. The necessity for both individual and document verification arises in almost every commercial transaction.
Additionally, the necessity for individual identification arises in both social and governmental settings with ever increasing frequency.
Commercial transactions requiring both document verification and individual identification include credit card, calling card, automatic teller machine ("ATM") and similar transactions, as well as other daily commercial transactions such as check cashing. For example, when a check is presented to a bank for payment, the bank is required to verify the authenticity of the check writer's signature (called the endorsement) and that there is enough money in the checking account to cover the check.
Authenticity of the endorsement is determined by comparing the signature appearing upon the check with a signature sample of the check writer on file with the bank. A reasonably good forgery of the endorsement might enable an unauthorized person to illegally cash the check.
Alternatively, in non-commercial settings, identification issues often arise in the context of security. For example, common apartment and office building security systems require that anyone wishing to enter the building "sign in" in front of a security guard, and often, to present the guard with a previously issued personal identification document which authorizes access to the building. The security guard is required to exercise his best personal judgment to determine that the identification document is authentic and that the person presenting it is the person identified on the identification document. In such circumstances, and understandably so, a security guard may be deceived by a person who is correctly identified on a forged or altered identification document. In the governmental context, it is a requirement in many countries that citizens carry personal identification papers in public to be produced for review upon request by appropriate authorities.
For example, private individuals are required to present to the police personal identification, such as a driver's license, at the scene of a traffic accident or when stopped for a traffic violation. Additionally, personal identification documents are required for admittance to voting polls, and when crossing international boundaries and/or importing or exporting goods.
Accordingly, a pronounced need exists for unalterable self verifying personal, commercial and governmental identification cards, papers, documents, labels, packaging and other similar articles. For the purposes of this patent document, an article shall be defined as any item having a surface, which may include a substrate, to which data may be fixed. As used herein, the term fixed shall mean one or more of the following, but is not limited to, attached, imprinted, adhered, etched, scratched, painted, printed, peened, embedded, machined, drilled, stamped, or otherwise imaged.
One current solution requires the use of biometric information that is stored in a memory device carried by an individual. The term biometric information refers to a characteristic personal to an individual, such as a signature, a finger print or a picture, for example. A sample of biometric information to be used is obtained from the person at an "encodation" site where the memory device is programmed under secure conditions. The sample is formed into a code by conventional encoding techniques. The sample may be obtained by having the person place a hand, eye, face or other unique physical feature upon a scanning input device. The scanned information is then encoded to form a code which is subsequently stored to an alterable, portable memory device (i.e., magnetic strips, electronic or optical memory cards, floppy disks, etc.).
The portable memory device is issued to the person. When the person's identity needs to be verified, the person presents the portable memory device at a "remote access/decodation" site where identification verification is to occur, and the information contained within the portable memory device is read from memory.
Another sample of biometric information is then obtained by the person again placing a particular physical feature upon the input scanning device. The read code and the just sampled biometric information are compared by a machine to determine authenticity.
In this regard, the read code may be decoded, e.g., using a process that reverses the encodation performed previously, or the sample information encoded, e.g., using the same encoding process used at the encryption site, to make the comparison. Because this method requires a processing system for performing data encoding and/or decoding, complex opto-electric hardware at every encodation and remote access site, and a memory device for each person, this solution is exceedingly expensive.
In EP 0599558 there is disclosed use of an identification card and method and apparatus for producing and authenticating such an identification card. Identity, Status or characteristics are scanned to produce a digital signal which is compressed, encrypted, and coded as a two dimensional barcode or as some other appropriate form of coding, which is incorporated into one portion of the identification card. The image is also printed or otherwise embodied onto another portion of the identification card. A text message maybe appended to the signal before it is encrypted and also printed as plain text on the identification card. In one embodiment the signal representing the image is encrypted using a public key encryption system and the key is downloaded from a center. This key maybe changed from time to time to increase security. To facilitate authentication the corresponding decryption key is encrypted with another key and incorporated on the card. To validate the card the coded message is scanned, decoded, decrypted, expanded and displayed. The card may then be authenticated by comparison of the displayed representation of the image and the displayed text message with the image and text message printed on the card.
It is therefore an object of the present invention to provide an unalterable code, for use on an article, which contains biometric identification information personal to the authorized bearer of the article.
Another object of the present invention is to provide methods and systems for inexpensively, accurately and efficiently producing unalterable self-verifying personal and commercial articles.
A further object of the present invention is to provide methods and systems for accurately, efficiently and inexpensively authenticating presented self-verifying articles.
A still further object of the present invention is to provide methods and systems for verifying the authenticity of self-verifying articles presented at remote access sites which do not require expensive verification equipment, such as physical-trait-scanning input devices, or the inconvenience of a communication channel to a central location.

SUMMARY OF THE INVENTION

The invention is directed to a self-verifying article which contains an encoded machine-readable data set which includes recipient-specific biometric data. Self-verifying articles include, for example, commercial instruments (i.e., notes, drafts, checks, bearer paper, etc.), transaction cards (i.e., ATM cards, calling cards, credit cards, etc.), personal identification documents (i.e., driver's licenses, government benefit cards, passports, personal identification papers, etc.) and labels affixed to package surfaces, including for example identification of the package owner or sender, which may be used for verifying imported goods by customs agents. A subset of, or the whole of, the biometric data set may be, for example, a graphic image of a personal characteristic considered unique to a particular individual, such as, for example, a fingerprint, a retinal scan, a photo, a signature, etc., or some combination of the foregoing, is encoded to generate a machine readable data set. This article is preferably a low cost article, of paper or plastic, but may be any substrate, and the machine-readable data set is preferably fixed upon or in the article. The article also may, but need not, contain a human readable version of the biometric data set.
The object of the invention is attained by the features of the independent claims respectively. Preferred embodiments of the invention are subject-mather of the respective dependent claims.
In one embodiment of the invention, the encoded machine readable data set is fixed upon the article in a manner which is neither comprehensible, nor detectable, by the human-eye, unless assisted by a suitably arranged reading device. For example, a check, or any other article for that matter, has fixed thereon a machine readable data set including the authorized user's signature. Thus, a would be forger would not have a sample of an authorized signature to copy. A comparison of the user's signature with the decoded signature permits verification at the site of use.
In another embodiment, a human-readable textual data set also appears on the article, optionally with selected subsets of the textual data set also being encoded and concatenated, interleaved, etc. with the encoded biometric data set. For the purpose of this patent document, a textual data set comprises all data which is not biometric data.

BRIEF DESCRIPTION OF THE DRAWINGS

For a more complete understanding of the present invention, and the advantages thereof, reference is now made to the following descriptions taken in conjunction with the accompanying drawings in which like numbers designate like parts, and in which.

FIG. 1A illustrates a functional block diagram of a system for producing a self-verifying article in accordance with the principles of the present invention;
FIG. 1B illustrates an isometric view of the processing system set forth in FIG.1A;
FIG. 1C illustrates a block diagram of a processing unit and a memory storage device;
FIG. 2A illustrates a functional block diagram of a system for verifying the authenticity of a received self-verifying article in accordance with the principles of the present invention;
FIG. 2B illustrates an isometric view of the remote access site processing system set forth in FIG. 2A;
FIG. 3 illustrates a machine-readable binary coded matrix;
FIGS. 4A and 4B illustrate flow diagrams for producing an unalterable self-verifying article in accordance with the embodiment illustrated in FIG. 1A; and
FIG. 5 illustrates a flow diagram for verifying the authenticity of a received self-verifying article in accordance with the embodiment illustrated in FIG. 2A.

DETAILED DESCRIPTION OF THE INVENTION

FIG. 1A illustrates a functional diagram of a system for producing a self-verifying article in accordance with the present invention. The system includes an input data set 100, which includes a biometric data set 101 and an optional textual data set 102, an article 10, a processing system 103 and a self verifying article 104. As previously introduced, data set 100 is comprised of recipient specific data. Biometric data set 101 may include one or more physical traits personal to the potential article recipient (i.e., photo, retinal scan, finger print, signature, etc.), while textual data set 102, which is optionally included in input data set 100, may include one or more textual attributes (i.e., name, address, height/weight, eye color, etc.).
Processing system 103 is operable to produce self verifying article 104 by generating a unique machine-readable data set for fixing upon article 10.
Processing system 103 includes input means, processing means, output means and article producing means. The input means are for receiving input data set 100 and article 10. The processing means are for validating input data set 100, both syntactically and semantically, and encoding selected subsets of biometric data set 101, and, optionally, selected portions of textual data set 102 (optionally, the data to be encoded may first be encrypted, if desired). The output means are for transmitting a validated and encoded data set, along with the selected subsets of biometric data set 101, and optionally with the textual data set 102, to the article producing means. The article producing means are for fixing the validated and encoded data set, and for optionally fixing the selected subsets of biometric data set 101 and optionally textual data set 102, to article 10, thereby producing self-verifying article 104.
In the preferred embodiment, processing system 103 ensures data integrity by encoding all selected biometric and textual data subsets into a compact unalterable machine-readable data set, and subsequently, configuring the machine-readable data set as one or more matrices. If preferred, the machine-readable data set may be divided into two or more individual segments, which segments may then be incorporated into two or more two dimensional machine-readable matrices, which may or may not appear visually similar in size. The multiple matrices, though physically separate, may contain check values and features which assure the detection of any attempted alteration of either the human-readable text and/or the machine-readable matrices. In this regard, the encoded biometric data and textual data can be concatenated into one data string, divided by approximately two, and then formed into two matrices of approximately equal size.
Alternatively, the biometric data and text data may be interleaved, for example, in alternating bits, bytes, group of bytes, etc. to form a data string which is then divided into the two matrices. Preferably, each matrix is provided with a checksum for verifying the data integrity of each matrix independently. In addition, or alternatively, the matrices may have an interdependent checksum that is used to verify the data integrity of both matrices collectively. As a result of these checksums, if one matrix is altered, or if both matrices are altered, invalid data will be read. Advantageously, interleaving biometric data and textual data according to a predetermined routine enhances the ability to detect altered matrices.
Alternatively, biometric data set 101 could be formed as one matrix and textual data set 102 could be formed as a second matrix.
Enhanced data security is obtained and maintained by verifying the machine-readable data set for acceptability against predetermined criteria which may include searching a data base (e.g., an organized, comprehensive collection of data stored for use by processing system(s)) of previously issued articles to determine uniqueness. Note, in an alternate embodiment input data set 100 may be received at a remote access encodation site not equipped with the verification and/or encodation algorithm(s), in which case, a data signal representation or both the recipient-specific biometric data and the related textual data may be transmitted to a secure central host (shown in a similar context in FIG. 2A), the central host then performs the above mentioned verification. The transmission may be by wired or non-wired communication.
If the recipient is determined acceptable, the recipient-specific biometric data is encoded, which preferably includes utilization of compression algorithms, combining the biometric data subsets, and optionally, the textual data subsets, into one or more machine-readable matrices. If input data set 100 was received at a remote access encodation site not equipped with the encodation algorithm(s), the resulting encoded binary string is transmitted as previously discussed to the remote access encodation site. A standard article issuance device (shown in FIG. 1B) then fixes the machine-readable data set onto one or more self-verifying articles. As the articles are created and ejected from the article issuance device, a record of the event is automatically entered into the data base, which, if input data set 100 is received at a remote access encodation site, may be located at the central host. Entry of the record insures that duplicate articles are not inadvertently issued at a later date. Note that the number of articles issued is directly related to the intended use of the articles.
Applications of this aspect of the invention include issuing only a single driver's license having a unique encoded photo, or issuing multiple articles, such as checks, traveler's checks, bank account withdrawal slips, etc. having the same encrypted signatures.
FIG. 1B illustrates an isometric view of processing system 103. Processing system 103 includes a personal computer ("PC") 105 coupled with a article issuance device 114. PC 105 is comprised of a hardware casing 106 (shown as having a cut away view), a monitor 109. a keyboard 110 and optionally a mouse 113.
Hardware casing 106 includes both a floppy disk drive 107 and a hard disk drive 108. Floppy disk drive 107 is operable to receive, read and write to external disks, while hard disk drive 108 is operable to provide fast access data storage and retrieval. Although only floppy disk drive 107 is illustrated, PC 105 may be equipped with any suitably arranged structure for receiving and transmitting data, including, for example, tape and compact disc drives, and serial and parallel data ports. Within the cut away portion of hardware casing 106 is a processing unit, central processing unit ("CPU") 111, coupled with a memory storage device, which in the illustrated embodiment is a random access memory ("RAM") 112. Although PC 105 is shown having a single CPU 111, PC 105 may be equipped with a plurality CPUs 111 operable to cooperatively carry out the principles of the present invention. Article generating device 114 is operable to receive one or more output data sets from PC 105, and fix the output data sets to the article's surface.
Although PC 105 and article generating device 114 have been utilized for illustrating one implementation of processing system 103, the invention may alternately be implemented within any processing system having at least one processing unit, including, for example, sophisticated calculators and hand held, mini, main frame and super computers, including RISC and parallel processing architectures, as well as within network combinations of the foregoing, and may utilize any suitably arranged article producing means.
FIG. 1C illustrates a conceptual block diagram of one of any number of sub-processing systems which may be utilized in conjunction with FIGS. 1A and 1B. The sub-processing system includes a single processing unit, such as CPU 111, coupled via data bus 118 with a memory storage device, such as RAM 112.
Memory storage device 112 is operable to store one or more instructions which processing unit 111 is operable to retrieve, interpret and execute. Processing unit 111 includes a control unit 115, an arithmetic logic unit ("ALU") 116, and a local memory storage device 117, such as, for example, stackable cache or a plurality of registers. Control unit 115 is operable to fetch instructions from memory storage device 112. ALU 116 is operable to perform a plurality of operations, including addition and Boolean AND needed to carry out instructions. Local memory storage device 117 is operable to provide high speed storage used for storing temporary results and control information.
FIG. 2A illustrates a functional block diagram of a system for verifying the authenticity of a received self-verifying article in accordance with the present invention. The system includes self-verifying article 104, a remote access site processing system 200, optionally coupled with a central host processing system 103 (as indicated by the broken line), and an authenticity message displaying means 201, such as a display device, a printer, or other suitably arranged indicating device.
Self-verifying article 104 includes at least one encoded data set which includes a first data subset that is an encoded copy of a portion, or the whole, of a biometric data set.
Self-verifying article 104 also includes both a text data set and a biometric data set.
Remote access site processing system 200 includes input means, processing means and output means. The input means are for receiving self-verifying article 104. The processing means are for verifying the authenticity of self-verifying article 104, which may include communications between remote access site processing system 200 and central host processing system 103.
The output means are for transmitting an authenticity message produced by the processing means to display means 201.
The processing means are operable to scan self-verifying article 104 to locate and decode the encoded first data set and to compare the decoded first data set with a second data set, which is either obtained from the bearer of the article or is fixed to self-verifying article 104, and to generate the output signal indicating authenticity of article 104. In an alternate embodiment, the processing means either selectively bypasses or is not operable to perform the comparison of the decoded first data set and the second data set. Instead, the processing means generates an output signal representative of the decoded first data set, e.g., a graphic image display of the portion of the biometric data set, and the second data set to a display device for manual comparison and verification by a processing system operator. Alternatively, the processing system operator may manually compare the decoded first data set, and optionally the second data set (if one is fixed to the article), with the article bearer or a biometric data set obtained from the bearer, e.g., the bearer's signature or appearance, or from a database.
The illustrated system for verifying the authenticity of self-verifying article 104 may utilize a variety of devices including, for example, portable terminals, fixed station readers, and flat bed scanners, each of which may directly incorporate decoder capability or have decoder capability available at a base/host station, such as processing system 103, via wired or radio frequency, short wave, cellular, infrared or other form of non-wired communication. Remote access site processing system 200 and/or central host processing system 103 may be configured with keyboards and display screens of sufficient resolution to accurately display the encoded biometric image and/or textual data, and may incorporate imaging apparatus necessary to convert machine-readable data sets into binary machine language bits in preparation for decoding.The imaging apparatus may be based on any of a number of technologies, including CCD, CMOS, and NMOS or other forms of light sensitive sensors, which sensors may be structured in the form of a two dimensional area or one-dimensional linear arrays, or a single beam laser reading for scanning a two-dimensional image in a raster pattern.
One preferred embodiment of imaging apparatus is a linear array scanner that is vertically aligned with a solid border of an imprinted machine readable code 205, and when two or more matrices are used, these matrices are arrayed in parallel orientation so that the two symbols can be passed by the CCD scanner using a conventional card swipe action as in conventional magnetic strip reading. The matrices are then read and a video image of each matrix is stored in memory for processing. Imaging may also be achieved through the use of lasers, laser-diodes, infrared or other such binary imaging technologies which devices may also be structured in the form of two-dimensional area or one-dimensional linear arrays. Additionally, readers may include the ability to automatically verify the images and information encoded within the machine-readable matrix to the human recognizable version on the same article. In one embodiment, this comparison may be accomplished internal to remote access site processing system 200's memory thereby precluding the need for key pads and/or high resolution display screens on the terminals. Alternately, as introduced, operators may visually compare the information displayed on the terminal screen to the human readable information now present on the article and/or to the article bearer.
FIG. 2B illustrates an isometric view of a hand held computer which may be used as remote access site processing system 200. Hand held computer 200 includes a keypad 202, a display screen 203 and an input port 204. Keypad 202 includes a systematic arrangement of keys for manually receiving input data from a user. Display screen 203 is for displaying an authenticity message, and/or biometric and/or textual data.
Input port 204 is for receiving self-verifying article 104, here illustrated as a driver's license, which in the illustrated embodiment includes encrypted machine-readable data sets 205 a;b configured as two optically readable binary matrices. Remote access site processing system 200 includes at least one processing unit and one memory storage device, such as the subprocessing system illustrated in FIG. 1C. Preferably, the processing unit includes a microprocessor having associated memory (non-volatile storage for containing the program instruction set to identify and decode the matrices, and volatile memory for a data processing work area), a video memory for storing an image of the matrices to be decoded, and associated signal conditioning circuits, which are mounted on a single printed circuit board.
FIG. 3 illustrates a preferred single machine-readable binary coded matrix, generally indicated as a matrix 205. Matrix 205 is a sample of the Data Matrix symbology developed by
International Data Matrix, Inc., Clearwater, Florida, the assignee of this invention. Matrix 205 has a perimeter 300 formed by intersecting sides 301 formed of solid lines and intersecting perimeter sides 302 formed of dark perimeter squares 303 and light perimeter squares 304 in an alternating pattern.
Data, generally indicated as 305, is stored within perimeter 301 of matrix 204 by converting each character to be stored to a visual binary code represented by dark and light squares corresponding to ones and zeros of encoded binary information.
For a more complete description of the configuration of matrix 205, reference is made to United States Patent No. 4,939,354, entitled "Dynamically Variable Machine Readable Binary Code and
Method for Reading and Producing Thereof" and to co-pending patent application, United States patent 5,324,923, entitled "Apparatus for Producing a Dynamically Variable Machine Readable
Binary Code and Method for Reading and Producing Thereof," commonly owned by the assignee of this patent document.
FIG. 4A illustrates a flow diagram for producing an unalterable self-verifying article in accordance with the embodiment illustrated in FIG. 1A. Upon entering START block 400, the process according to the principles of the present invention begins. The recipient-specific data set, which is comprised of at least one data subset, is received by processing system 103 (input block 401). Processing system 103 preferably performs a graphic image compression of a first data subset.
Image compression by a factor of approximately 50:1 or better is preferred to obtain a digital representation of the acquired data. Such compressed data is capable of reproducing on a conventional graphic display screen the recipient specific image without any significant degradation of visual quality (block 402). The image compression may be by any standard routine e.g.,
Discrete Cosine Transform (DCT), LZW (Lempcl-Ziv), fractal, or others to reduce the amount of bits required to encode the first data subset. A compression ratio of 50:1 is deemed suitable, but other ratios may be used. In addition to data compression, a graphic image enhancement routine may be performed on the first data subset, preferably before the data compression step, in order to enhance the image contrast, sharpen and smooth edges and reduce the effect of shadows, particularly for imaging a photograph of the recipient. The foregoing improves the digital image for more effective data compression. Suitable image enhancement routines are known, and described R. Gonzalez et al.,
Digital Image Processing, published by Addison-Wesley Publishing
Co. (Reading MA) 1987. Processing system 103 selectively encodes the compressed first data set, thereby generating a machine readable data set (processing block 403). This selectively encoding step is more fully discussed in connection with the detail description of FIG. 4B. Processing system 103 is further operable to configure the machine-readable data set as an optically readable binary code forming one or more matrices (processing block 404).
Processing system 103 fixes the machine-readable data set and the first recipient-specific data subset onto a surface of an article, thereby producing self-verifying article 104 (processing block 405). In one embodiment, the matrix is fixed on the article using a conventional printing process, e.g., thermal, thermal transfer, ink-jet, bubble-jet, laser jet, dot matrix printing, etc. Alternatively, the matrix or matrices may be fixed sub-surface, e.g., by laminating a top surface or by placing the matrix over the printed layer of a multilayer article. In another embodiment, the machine-readable data set is imprinted over an already printed area of the article, such as the photograph on a driver's license for example. In yet another embodiment, the matrix is formed by introducing bubbles or voids into the article, or drilling or punching holes into or through the article, according to the matrix pattern, such that the code is machine readable by a technique capable of detecting the absence or presence of material, or the relative density of material, or the depth of a bubble, void, hole or the like in the article, e.g., ultrasonically, or by a light measuring system or other suitable imaging system having a bounceback signal capable of distinguishing the code.
FIG. 4B illustrates a more detailed flow diagram of processing block 402 illustrated in FIG. 4A. Upon entering START block 406, the selective encodation of the first data set begins.
Processing system 103 compares the first data set with system control values to determine if the first data set is within acceptable tolerances (processing block 407). The step of comparing may include, for example, syntactic and/or semantic analysis. If it is determined that the first data set is invalid as received ("N" branch of decisional block 408), then processing system 103 aborts self-verifying article production (termination block 409). Alternatively, if it is determined that the first data set is valid as received ("Y" branch of decisional block 408), then processing system 103 searches a data base of previously issued articles to determine if the issued article is unique (processing block 410), uniqueness being determined on a subjective basis as a function of the type of article being produced. Note that the data base utilized by processing system 103 may be internal or external to processing system 103, and that in either system, processing system 103 may search the data base directly, or indirectly. For example, the data base may be stored remotely and controlled by another processing system with which processing system 103 communicates. If it is determined that the first data set is not unique as received ("N" branch of decisional block 411), then processing system 103 aborts self verifying article production (termination block 412).
Alternatively, if it is determined that the first data set is valid as received ("Y" branch of decisional block 411), then processing system 103 selectively inserts one or more subsets of the received recipient-specific data set as al least one record into the data base (processing block 413). Processing system 103 then encodes the first data set (processing block 414), and in one embodiment adds error correction bits to the encoded first data set (processing block 415).
The selective encodation of only the first data set as embodied within FIGS. 4A and 4B was for illustrative purposes only, and it is understood that among the various aspects and features of the present invention is the ability to selectively encode a plurality of compressed recipient-specific data subsets, and to subsequently concatenate, interleave, etc. the encoded subsets, thereby forming a single machine-readable data set.
Further, when two or more data subsets are encoded and concatenated, interleaved, etc. together, processing system 103 is operable to configure the machine-readable data set into one or more optically readable matrices wherein individual encoded data subsets may span two or more matrices.
FIG. 5 illustrates a flow diagram for verifying the authenticity of a received self-verifying article in accordance with the embodiment illustrated in FIG. 2A. Upon entering START block 500, the process according to the principles of the present invention begins. The self-verifying article, which in this embodiment includes a plurality of data sets wherein a first data set is an encoded copy of a second data set, is received by a remote access site processing system 200 (input block 501).
Remote access site processing system 200 then scans the received self-verifying article to locate the encoded first data set (processing block 502). Remote access site processing system 200 decodes the encoded first data set (processing block 503), and compares the decoded first data set with the second data set to determine the authenticity ot the received self-verifying article (processing block 504).
The comparison step is accomplished through communications between remote access site processing system 200 and processing system 103, wherein processing system 103 maintains a data base of recipient-specific data relating to previously issued self-verifying articles. Communications between remote access site processing system 200 and processing system 103 may be accomplished via wired or nonwired communication means. In an alternate embodiment, at least the decoded first data set, and optionally the second data set, are transmitted to an output display device for manual comparison by a system operator. If it is determined that the decoded first data set is not authentic ("N" branch of decisional block 505), then remote access site processing system 200 displays an authenticity message 201 indicating that the self-verifying article is invalid (output block 506). Alternatively, if it is determined that the decoded first data set is authentic ("Y" branch of decisional block 505), then remote access site processing system 200 displays an authenticity message 201 indicating that the self-verifying article is valid (output block 507).
In another embodiment, prior to decoding the encoded first data set, remote access site processing system 200 converts the received self-verifying article into a digital bit-map image, and separates the digital bit-map image into a plurality of regions, wherein a first region includes the encoded first data set and a second region includes the second data set. In this embodiment, both the first and second regions may include a plurality of biometric and/or textual data subsets which remote site processing system 200 is further operable to convert into common data formats for processing.
As noted previously, one embodiment of the self verifying article contains two matrices which have a first data set of biometric data and a second data set of textual data. In addition, in one embodiment, the article also may contain a magnetic stripe for containing alterable data, which may be programmed by scanning the machine readable matrices, decoding certain data contained therein and, decoding that data (with or without other data), onto the magnetic stripe. This makes the self verifying article useful in applications which require reading a magnetic stripe.
A further use of the invention is to prevent software piracy. Software is a special form of program which has been recorded to a storage medium, such as one of the above identified storage mediums. Software enables programs to be freely transferred or copied from one storage medium to another, which enables unlicensed users to obtain illegal copies of the software. For example, in one embodiment, the purchaser of a processing system provides a hardware vendor with industry standardized personal data, which may include biometric data, which is, optionally encrypted, and stored internal to the processing system. Whenever the processing system purchaser buys software, the purchaser is again required to provide such industry standardized personal data, which is compressed, optionally encrypted, encoded into a machine-readable data set, preferably as one or more binary coded matrices, and fixed to the surface of a portable storage medium, such as a floppy or compact disk. When the software is loaded onto the processing system, the matrices are scanned, decoded and verified in accordance with the principles of the present invention, compared with the previously stored data to ensure a commonality of ownership, thereby limiting software piracy. If common ownership is found, then the software is loaded onto the processing system along with the decoded industry standardized personal data. In the event the processing system owner transfers ownership of the processing system, the new owner, in order to load his software, will have to have the industry standardized personal data redefined, which could suspend the new owner's use of the existing software or automatically delete the existing software. In the event use of the software is suspended, a "transfer" of ownership routine might be available to reactivate the suspended use of the existing software if ownership of the particular software was legally transferred.
Although the present invention and its advantages have been described in detail, it should be understood that various changes, substitutions and alterations can be made herein without departing from the scope of the appended claims.

Claims

A method for producing a recipient-specific self-verifying article, said method comprising the steps of: receiving a recipient-specific biometric data set, said recipient-specific data set comprised of one or more recipient specific data subsets; encoding a first recipient-specific biometric data subset to generate a machine readable data set; configuring said machine readable data set as an optically readable binary code forming at least one matrix (205); and fixing, said machine-readable data set to an article, characterised in that said comparing step, upon a determination of acceptability, further includes the step of: searching a database of previously produced unalterable articles to determine if said recipient-specific biometric data set is unique, said database of previously produced unalterable articles comprising one or more records; upon a determination of non-uniqueness aborting production of said unique recipient-specific identification article; and upon a determination of uniqueness inserting said recipient-specific biometric data set into at least one of said records within said database of previously produced unalterable articles.
The method as set forth in Claim 1 wherein said encoding step further includes the step of: comparing at least a portion of said first recipient-specific biometric data subset with a control value to determine if said first recipient-specific data subset is within acceptable tolerance of said control value.
The method as set forth in any preceding claim wherein said configuring step is preceded by the steps of: selectively encoding a second recipient data subset.
The method as set forth in Claim 1 or 2 wherein said configuring step is preceded by the steps of: selectively encoding a second recipient data subset; and combining said encoded second recipient-specific data subset with said encoded first recipient-specific data subset thereby forming said machine-readable data set.
The method as set forth in any preceding claim wherein said fixing step further includes the step of etching said matrix (205) into said article.
The method as set forth in any preceding claim wherein said fixing step further includes the step of indenting said matrix (205) in said article.
The method as set forth in any preceding claim wherein said encoding step further includes the step of encrypting said first recipient-specific biometric data subset.
The method as set forth in Claim 7 when dependent on claim 4 or 5
wherein said combining step includes the step of: interleaving said encoded second recipient-specific data subset with said encoded first recipient specific biometric data subset.
The method as set forth in any preceding claim when dependent on claim 3 or 4 wherein said second recipient-specific data subset includes textual data (102).
The method as set forth in Claim 1 wherein said encoding step further includes the step of: configuring said machine readable data set as an optically readable binary code forming two matrices.
A method for verifying the authenticity of a received recipient-specific self-verifying article, said recipient-specific self-verifying article including a plurality of data sets including a first biometric data set and a second biometric data set wherein said first data set is an encoded copy of said second data set, said method comprising the steps of: scanning said received recipient-specific article to locate said encoded first biometric data set; decoding said encoded first biometric data set; and comparing said decoded first biometric data set with said second biometric data set to determine the authenticity of said received recipient-specific identification article, characterised in that the plurality of data sets includes textual data, the first biometric data set being interleaved with an encoded copy of the textual data according to a predetermined routine and configured as a matrix of optically machine readable binary data, the matrix being provided with a check sum and wherein the method includes the step of detecting whether the matrix has been altered by reading the matrix in light of the check sum and checking whether invalid data is read.
The method as set forth in Claim 11 wherein said scanning step further includes the step: converting said plurality of data sets into a digital bit-map image; and separating said digital bit-map image into a plurality of regions,
wherein a first region includes said encoded first data set and a second region includes said second data set.
The method as set forth in Claim 12 wherein said first region includes an encoded textual data subset (102) and said decoding step further includes the step of: converting said first region decoded textual data subset (102) and a second region textual data subset (102) to a first data format.
The method as set forth in Claim 12 wherein said first region includes an encoded biometric data subset (101) and said decoding step further includes the step of: converting said first region decoded biometric data subset (101) and a second region biometric data subset (101) to a first data format.
The method as set forth in Claim II wherein said comparing step further includes the step of: transmitting said decoded first data set and said second data to a processing system for said determination of authenticity.
A processing system for producing a unique machine-readable data set for fixing upon a self-authenticating recipient-specific article, said processing system comprising: an input port operable to receive a recipient-specific biometric data set, said recipient-specific biometric data set comprised of at least one recipient-specific biometric data subset; a memory storage device operable to store a plurality of processing system instructions; a processing unit for generating said machine-readable data set for imprinting upon a self-authenticating recipient-specific article by retrieving and executing at least one of said processing unit instructions from said memory storage device, said processing unit operable to encode a first recipient-specific biometric data subset; and an output port for transmitting said encoded first recipient-specific biometric data subset as said machine-readable data set;
wherein said processing unit is further operable to configure said encoded first recipient-specific biometric data subset as an optically readable binary code forming at least one matrix (205) characterised in that the system further comprises: means for searching a database of previously produced self-authenticating articles to determine if said recipient-specific data set is unique, said database of previously produced self-authenticating articles comprised of one or more records; and means for inserting said recipient-specific data set into at least one of said records within said database of previously produced self-authenticating articles upon a determination of uniqueness.
The processing system as set forth in Claim 16 wherein said processing unit is further operable to: selectively encode a second recipient-specific data subset; and combine said encoded second recipient-specific data subset with said encoded first recipient-specific data subset thereby forming said machine-readable data set.
The processing system as set forth in Claim 17 wherein said processing unit is further operable to configure said machine readable data set as an optically readable binary code forming two matrices.
The processing system as set forth in Claim 16 further comprising: means for comparing said first recipient-specific data subset with one or more control values to determine if said first recipient-specific data subset is valid.
The processing system as set forth in Claim 16 further comprising: an article production device, coupled with said output port, for fixing said machine-readable data set on a self-authenticating recipient-specific article.
The processing system as set forth in Claim 20 wherein said article production device further comprise means for fixing at least a portion of the recipient-specific data set on said self-authenticating article.
A processing system for verifying the authenticity of a self-verifying article (104), said processing system comprising: an input port operable to receive a biometric data set including first and second data subsets wherein said first data subset is an encoded version of a second data subset, said input port including means controlled by a processing unit for selectively scanning the surface of said self-verifying article (104); a memory storage device operable to store a plurality of processing system instructions; said processing unit for verifying the authenticity of said self-verifying article (104) by retrieving and executing at least one of said processing unit instructions from said memory storage device, said processing unit operable to decode said encoded first data subset, characterised in that the input port is operable to receive textual data, wherein the first biometric data set is interleaved with an encoded copy of the textual data and configured as a matrix of optically machine readable binary data, the matrix being provided with a check sum and wherein the system is operable to detect whether the matrix has been altered by reading the matrix in light of the check sum and checking whether invalid data is read
The processing system as set forth in Claim 22 further comprising means for comparing said decoded first data subset with said second data subset.
The processing unit as set forth in Claim 23 further comprising means for generating an output signal indicating the authenticity of said self-verifying article (104).
The processing, system as set forth in Claim 22 wherein said processing unit is further operable to: convert said received data set to a digital bit-map image; and selectively separate said digital bit-map image into a plurality of regions, wherein a first region includes said encoded first data subset and a second region includes said second data subset.
The processing system as set forth in Claim 25 wherein said first region and said second region each include a biometric data subset (101) and said processing unit is further operable to convert said first region biometric data subset (101) and said second region biometric data subset (101) to a first data format.
The processing system as set forth in Claim 24 wherein said first region and said second region each include a textual data subset (102) and said processing unit is further operable to convert said first region textual data subset (102) and said second region textual data subset (102) to a first data format.
The processing system as set forth in Claim 22 further comprising means for displaying said decoded first data subset.