EP2130363A2 - Verfahren und vorrichtung zum schutz vor fälschung - Google Patents

Verfahren und vorrichtung zum schutz vor fälschung

Info

Publication number
EP2130363A2
EP2130363A2 EP07872375A EP07872375A EP2130363A2 EP 2130363 A2 EP2130363 A2 EP 2130363A2 EP 07872375 A EP07872375 A EP 07872375A EP 07872375 A EP07872375 A EP 07872375A EP 2130363 A2 EP2130363 A2 EP 2130363A2
Authority
EP
European Patent Office
Prior art keywords
image
printing
determining
digital
digital authentication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP07872375A
Other languages
English (en)
French (fr)
Inventor
Jean-Pierre Massicot
Alain Foucou
Zbigniew Sagan
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Advanced Track and Trace SA
Original Assignee
Advanced Track and Trace SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from FR0610891A external-priority patent/FR2910148B1/fr
Priority claimed from FR0611402A external-priority patent/FR2910667B1/fr
Priority claimed from FR0703922A external-priority patent/FR2916678B1/fr
Priority claimed from FR0704517A external-priority patent/FR2917877B1/fr
Application filed by Advanced Track and Trace SA filed Critical Advanced Track and Trace SA
Publication of EP2130363A2 publication Critical patent/EP2130363A2/de
Withdrawn legal-status Critical Current

Links

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B42BOOKBINDING; ALBUMS; FILES; SPECIAL PRINTED MATTER
    • B42DBOOKS; BOOK COVERS; LOOSE LEAVES; PRINTED MATTER CHARACTERISED BY IDENTIFICATION OR SECURITY FEATURES; PRINTED MATTER OF SPECIAL FORMAT OR STYLE NOT OTHERWISE PROVIDED FOR; DEVICES FOR USE THEREWITH AND NOT OTHERWISE PROVIDED FOR; MOVABLE-STRIP WRITING OR READING APPARATUS
    • B42D25/00Information-bearing cards or sheet-like structures characterised by identification or security features; Manufacture thereof
    • B42D25/40Manufacture
    • B42D25/405Marking
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N1/00Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
    • H04N1/32Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
    • H04N1/32101Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
    • H04N1/32128Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image
    • H04N1/32133Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title attached to the image data, e.g. file header, transmitted message header, information on the same page or in the same computer file as the image on the same paper sheet, e.g. a facsimile page header
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N1/00Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
    • H04N1/32Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
    • H04N1/32101Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
    • H04N1/32144Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title embedded in the image data, i.e. enclosed or integrated in the image, e.g. watermark, super-imposed logo or stamp
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N2201/00Indexing scheme relating to scanning, transmission or reproduction of documents or the like, and to details thereof
    • H04N2201/32Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device
    • H04N2201/3201Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
    • H04N2201/3225Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document
    • H04N2201/3233Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title of data relating to an image, a page or a document of authentication information, e.g. digital signature, watermark

Definitions

  • the present invention relates to a method and a device for combating counterfeiting. It concerns, in particular, the production and exploitation of digital authentication codes ("DACs").
  • digital authentication codes DACs
  • the present invention applies, in particular, copy detection patterns (“MDC”), secure information matrices (“MIS”), scattered dot patterns and / or digital watermarks ( in English “watermarks”) for the secure and robust production, tracing and authentication of manufactured products and parts, packaging, etc.
  • owners of these intellectual property rights want, first and foremost, to measure the problem or problems they face: do they face problems of counterfeiting, gray market, a combination of the two, in which markets, etc.? ?
  • owners of intellectual property rights including trademarks, designs and designs and organizations that generate official documents and who have adopted bi-dimensional (“2D") bar codes or other information media , such as RFID (Radio Frequency Identification) RFID tags, to help them solve falsification problems, must nevertheless use radically different authentication means (“authenticators”), such as holograms , security inks, micro-texts, or so-called “guilloche” patterns (fine lines and curves interfering with digital reproduction systems, for example by Moiré effect), to avoid or detect servile counterfeiting.
  • authentication means such as holograms , security inks, micro-texts, or so-called “guilloche” patterns (fine lines and curves interfering with digital reproduction systems, for example by Moiré effect), to avoid or detect servile counterfeiting.
  • CNAs offer an interesting alternative to traditional methods of securing documents.
  • all digital they offer a solution of essentially digital nature having all the desired functionalities, that is to say, product traceability, authentication (detection of copies) automatic detection of forgery. They dematerialize the process of producing secure documents: inserting a mark by modifying a digital file of a document, or by adding an image that is authentic (that is to say, to automatically detect copies) and, possibly identifying. The reading is done by the automatic processing of a digital image capture of a document, the reader possibly being able to connect to a secure database.
  • CNAs are particularly interesting for the holders of rights on manufactured products which have production and cost requirements particularly strict: in fact, the order, the sending and the reception of files of images of CNA can be done instantly.
  • Another advantage of NACs is the ability to use standard image sensors, such as scanners or consumer digital cameras, possibly integrated with digital personal digital assistants (or mobile phones), for the verification of DACs. This allows large-scale deployment of CNAs, given the low cost and ease of obtaining such sensors.
  • a security ink requires a dedicated reader, often expensive, and forces the rights holder to commit to a vulnerable and expensive solution to implement, with the consequences and risks that entails.
  • MIS and MDC are specific digital authentication codes.
  • Other DACs include digital watermarks, and scattered dot patterns, if these have authenticating properties.
  • the digital authentication codes include digital watermarks, and scattered dot patterns, if these have authenticating properties.
  • CNA present the ability, at least in principle, to draw each document or product individually.
  • MIS secure information matrices are a machine-readable representation of machine-readable surface information from an image capture.
  • MIS are not mere "containers" of information: they are designed to ensure the security of the documents on which they are printed. In particular, they make it possible to deal with numerous problems related to counterfeiting (identical copies, reproductions) and the falsification of documents (expiry date of a medicine, identity card, etc.), and ensure their traceability, which makes it possible to combat the gray market.
  • 2D barcodes such as Datamatrix (registered trademark)
  • MIS offers much broader treatment of security issues.
  • the MIS can detect cases of counterfeit copying or photocopying, which is not normally possible with other types of information matrix.
  • any copy of an original printed MIS can be detected.
  • the decoding error rate of the message carried by the copied MIS is higher than the maximum error rate tolerated. for an original printed MIS.
  • the MIS offer the possibility to use different levels of write or read permission, each locked by a cryptographic key, each level of permission corresponding to a security layer: if a cryptographic key is compromised, only the layer security is affected.
  • the MIS allow to securely store all the values associated with document traceability. For example, a unique identity number, expiry date, production order, provenance, destination market, etc. It is advantageous that each MIS is unique, that is to say that an MIS with a specific message will be printed only once: it is called “serialized” printing. This ensures that you can uniquely identify each of the existing documents.
  • the MIS are generally used in this way for digital printing methods, that is to say in which a processor communicates directly with the printing medium and can make vary the printed contents, in particular with the digital printing means, laser, inkjet allowing the serialized printing of MIS.
  • MDC copy detection patterns are a type of visible authentication pattern, which generally has the appearance of noise and is generated from a key in a pseudorandom manner. These MDC copy detection patterns are essentially used to distinguish between original printed documents and printed copies of the former, for example by photocopying or using a scanner and a printer. This technique works by comparing a captured image of an analog copy detection pattern, i.e., the real world, with an original digital representation of that pattern to measure the degree of difference between the two. The underlying principle is that the degree of difference is higher for the captured image of a pattern that has not been produced from an original analog pattern because of the degradation in the copy. To convey information, the image of the MDC is divided into zones, and each zone may contain different configurations of pixel values (all having the appearance of noise), each configuration being associated with a binary value.
  • score which is compared to a threshold value, in general, predetermined: if the score is greater than this threshold value, it is deduced that the image is an original. Otherwise, we deduce that it is a copy.
  • a threshold value in general, predetermined: if the score is greater than this threshold value, it is deduced that the image is an original. Otherwise, we deduce that it is a copy.
  • the score may be, for example, measured as a decreasing function of the error rate of the captured MIS.
  • MDCs it can be measured as the index of similarity between the original MDC and the captured MDC.
  • the score can be measured by the degree of correlation between the original watermark, the signal before its modulation in the marked image, and the captured image, once the image is filtered in the spectrum of adequate frequency and signal synchronization performed.
  • the score can be measured by the cross-correlation peak value between the origin point pattern and the dot pattern in the captured image. It is noted that many other measures are possible, and in particular that the distance measurements can be inverted to represent measures of proximity or similarity.
  • the threshold value (or possibly the thresholds if we use the zone of indecision
  • the CNAs can be invisible or at least difficult to perceive, for example a digital watermark fragile to the copy integrated in the image, or a pattern of pseudo-randomly scattered points, also called "MSMA".
  • the pseudo-randomly distributed points have a certain density, low enough to be difficult to identify, for example of the order of 1%.
  • a score similar to the cross-correlation peak between the reference MSMA and the captured MSMA corresponds to the energy level of the signal, and will be a priori lower for the copies.
  • Figures 4 and 5 show two distributions 905 and 915 of scores for the original impressions and two hypothetical distributions 910 and 920 for the copies (indeed, as it was said there is no such thing as strictly speaking, universal distribution of copies scores), when the production of original documents is well controlled, as shown in Figure 4, and when poorly controlled, as shown in Figure 5.
  • the distribution 905 the scores of the originals follow approximately a Gaussian distribution, and the separation with the scores of the 910 copies is clear: the whole of the original impressions was carried out under identical conditions.
  • the distribution of the scores of the originals 915 is more spread out and the capacity of completely separating scores of originals 915 and copies scores 920 is no longer assured, the zone (a) pointed by a arrow corresponding to the score values where the result of the detector can not be trusted.
  • the spread of the score distribution of the originals corresponds to a combination of the distributions illustrated in FIGS. 4 and 5 with respective proportions of 3 A and%: these distributions correspond to production conditions that would be, in part, different.
  • the internal settings of the image capture tool also have an influence.
  • the image quality, and thus the score of a DAC, captured with a scanner may vary depending on the image capture resolution, the number of bits per pixel, and so on.
  • an image sensor can make bad images. For example, if an object containing a DAC is incorrectly positioned on a scanner, the captured image may be fuzzy. If a portable tool is used and the operator is not careful, the image may have a problem of sharpness due to movement or positioning of the NAC out of the focal plane.
  • the DAC score can be significantly lower and an original can then be detected as a copy.
  • this figure shows the statistical distribution of the scores for the same originals, 935, and copies, 940, based on images captured by another inferior image capture tool.
  • the threshold value as calculated for the reference image capture tool is indicated. It is clear that the threshold value used is not adequate and would lead to many decision errors.
  • the score shown in Figure 6 is, compared to the score shown in Figures 4 and 5, divided by five. For example, the limit value which is 12 in FIG. 6 corresponds to a score of 60 in FIGS. 4 and 5.
  • the CNA check tools can either operate locally or in conjunction with a server.
  • the danger is that a counterfeiter seizes a module and does the reverse engineering, in order to determine the reading algorithms used, to deduce the corresponding generation algorithms (the algorithms of reading are generally symmetrical with the generation algorithms of CNA), and especially to seize the cryptographic keys stored in the module.
  • the present invention thus aims, in its various aspects, to overcome the difficulties of integration and / or operating difficulties of the CNAs, particularly the problems of security, stability, and lack of flexibility of integration of CNAs in the production of secure documents and / or problems of security, stability, and lack of operational flexibility of the CNAs in the verification of secure documents.
  • the present invention aims a method of reading a digital authentication code, characterized in that it comprises:
  • the step of determining capture conditions of said image comprises a step of determining a value representative of the capture quality of said image.
  • the step of determining conditions for capturing an image comprises a step of determining a value representative of the capture blur of said image. According to particular characteristics, during the authenticity determination step, it is first determined whether the representative value of blur represents a blur lower than a predetermined value and, if so, whether the error rate is less than a predetermined value. According to particular characteristics, if the representative value of blur represents a blur greater than the predetermined value, the image capture step is reverted and the steps of error rate determination and authenticity determination are repeated.
  • the representative value of blur represents a blur lower than a predetermined value
  • at least a portion of said image is transmitted to a remote server and the authenticity determination step is performed by said remote server.
  • More complex processing can be done by a system with more resources in terms of processing capabilities.
  • the determining step it is first determined whether the error rate is lower than a predetermined value and, if not, whether the representative value of blur represents a blur of less than a predetermined value. predetermined value.
  • the step of determining a value representative of the blur implements values representative of the printing conditions of the digital authentication code.
  • the method that is the subject of the present invention comprises, following the image-capture step and before the authenticity determination steps, a step of detecting the presence of a digital authentication code in said image, the determination steps being carried out only in the case of presence of a digital authentication code in said image and the image capture step being repeated in the event of absence of digital authentication code in said image.
  • the method can be applied to a succession of captured images, without the user needing to trigger the capture of an image.
  • the step of detecting the presence of an authenticating digital code it is determined whether the image represents a characteristic geometrical shape of said codes. For example, we search, automatically, a square or rectangular shape.
  • a value representative of a gradient in a digital authentication code is determined.
  • the blur represented by this gradient is thus easily determined, in particular when the blur originates from a positioning defect of the authenticating digital code, with respect to the plane of sharpness conjugated to the sensor plane by the objective of the image-capturing means.
  • a Sobel filter is implemented.
  • a Gaussian filter is implemented.
  • the method that is the subject of the present invention, as succinctly described above, comprises: a step of capturing an image representative of a pattern,
  • a step of adjusting the error rate according to said adjustment value the step of determining authenticity of the digital authentication code implementing the adjusted error rate.
  • an image of a card is captured, the method that is the subject of the present invention, as briefly described above, comprising a step reading on said card, a cardholder identifier and an authorization verification step to said carrier to perform an authenticity determination step.
  • the step of determining conditions for capturing an image comprises a step of determining the number of points of said image that correspond to a digital authentication code.
  • the step of determining the number of points of said image that correspond to a digital authentication code includes a step of determining the resolution of the image sensor in number of points per unit area placed in its plane of sharpness.
  • a print sharpness of the digital authentication code is determined.
  • said sharpness is determined by reading, in the content of the digital authentication code, a type of printing used to print said digital authentication code.
  • the method which is the subject of the present invention comprises:
  • the present invention relates to a device for reading a digital authentication code, characterized in that it comprises: a means for capturing an image representing a digital authentication code,
  • the image file is not printed directly, but goes through at least one analog transformation step, for example during the creation of the plate and sometimes during the creation of the film used to make the plate, etc.
  • These plates or films must also be protected because they make it possible to generate authentic DACs.
  • there is no means of control ensuring that the processor mandated by the rights holder to produce a given number of documents, has not produced a surplus that will be resold to an unauthorized third party.
  • DACs require a high stability of the printing process to function properly.
  • the marking means comprise numerous adjustment parameters which depend, for example, on the product to be marked, the substrate, the inking, and which can strongly affect the score of the CNA.
  • these parameters can also change over time, be adjusted differently by different operators, etc. Without complete control over the means of document production, the ability to detect copies can be greatly diminished.
  • secure (and traceable or auditing) data exchanges must generally be made between several parties.
  • these parties may be the rights owner (for example, a pharmaceutical company that wants to produce copy-protected drugs), or the processor (s) (for example, the printer of a package and / or a label ), and the provider of the CNAs, which is often a third party. If the information exchange processes are not automated, how can you ensure that CNAs with the right values are correctly printed on the corresponding documents or products?
  • integration errors may be so numerous that they can render the system unusable, or strongly reduce its credibility.
  • an integration error one can imagine a subcontractor managing the insertion of several CNAs in several products, which inserts a CNA into a document that does not correspond to it.
  • the present invention aims at a print quality control method, characterized in that it comprises:
  • the print quality is controlled by processing an image of the digital authentication code and continues printing media (s) with the same print settings as if the image quality is sufficient.
  • the print quality is determined based on an information content of the authenticating digital code read in said image.
  • the information content identifies a type of medium (eg paper or cardboard, colors, frosting,
  • an error rate in the authenticating digital code read in said image is determined, the print quality being a function of said error rate.
  • the quality measure can be standardized. It is noted that, during a subsequent transformation of the medium, the digital authentication code can be separated from the useful part, this digital authentication code then serving only for the determination of the print quality of the medium.
  • the method that is the subject of the present invention comprises a step of determining whether, at the same time, said image makes it possible to read a value carried by the printed digital authentication code and presents a error rate below a predetermined limit value,
  • the method that is the subject of the present invention as briefly described above comprises a step of determining said predetermined limit value as a function of the value represented by the digital authentication code.
  • the method that is the subject of the present invention as succinctly set forth above includes
  • said print quality determination step comprises the determination of an error rate for each of a plurality of said images and during the storage step, a limit value is memorized. error rate, based on said determined error rates
  • the operator is asked for a minimum of readings, for example 30, taken uniformly during production, so as to determine error rate statistics, or "score" of production.
  • the method that is the subject of the present invention comprises a server that provides digital authentication codes.
  • the server transmits, first, at least one file of control for printing a digital authentication code unusable, because of its information content, to authenticate a production of media and, if the production is valid, the server transmits at least one other digital code authenticating representative information related to said production.
  • the method which is the subject of the present invention as briefly described above comprises:
  • the method that is the subject of the present invention comprises a step of determining a signature of each captured image of a digital authentication code, and a step of storing said signature in a database, with the information associated with the manufacturing. It is thus possible to find, subsequently, by the use of the signature, for each printed document, if its manufacture has been authorized as well as the associated information allowing its traceability.
  • the method which is the subject of the present invention comprises a step of printing an information matrix representing said signature on the document carrying the DAC corresponding to said signature.
  • the method which is the subject of the present invention comprises:
  • said values of analysis parameters are representative of a print error rate of the authenticating digital codes and in that, during the step of determining a note, said note is representative. a difference between the error rate represented by the analysis parameter values and the error rate determined from said image.
  • the method which is the subject of the present invention comprises a step of determining a rate of average error from at least one authenticating digital code image and, from a predetermined time, during the step of determining a note, said note is representative of a difference between said rate error and the error rate determined from at least one image of a new digital authentication code.
  • the method which is the subject of the present invention comprises an alarm transmission step when said difference is greater than a predetermined limit value.
  • the method that is the subject of the present invention comprises a step of associating a microtext with the digital authentication code, said microtext being printed with the associated digital authentication code.
  • the present invention aims a print quality control device, characterized in that it comprises:
  • the present invention also relates to a method and a device for securing documents. It applies, in particular to the printing of marks to differentiate an original from a copy.
  • Two great families of such brands are known: the images processed by steganography, that is to say, comprising, on a decoration, indistinguishable from the eye, an imprint (in English "watermark”) and visible marks formed a matrix of dots each presenting one of two colors, usually black and white.
  • a copy detection mark is manufactured in such a way that any copy, whether by photocopy or by taking a picture and then printing the captured image, causes a deterioration of its details and, with reading system and adapted treatment, to detect this degradation.
  • the reading system performs a measurement of the degradation and compares it, generally, with a predetermined limit value or threshold.
  • the printing of the originals causes an initial deterioration of the printed mark and may make it impossible to exploit the anti-copy function of this mark.
  • the present invention aims at a method of securing an "original" document, which comprises: a step of determining characteristics of a printing material of said original document, a determination step a mark making it possible to differentiate an original from a copy, according to the characteristics of the printing material intended to be implemented for the printing of said mark on said document, a step of printing said mark with said printing material for forming said original document, and a step of determining a first limit value for use by a copy detection material for discriminating said original document from a copy of said original document, based on at least one printing of said mark.
  • the brand is optimized according to the characteristics of the printing equipment and the limit value used by the detection equipment takes into account the actual print quality of this printing equipment.
  • the method as briefly described above comprises a step of printing at least one print reference representative of a maximum or a minimum of inking authorized for the printing of said document and during the step of determining the first limit value, a measurement is determined on at least one said print reference and a tolerance is added thereto.
  • the method as briefly described above comprises a step of measuring the deterioration of the mark on the printing line, a step of comparing this measurement with a second predetermined limit value and, in case of exceeding the second deterioration limit value, an alert step. It is observed that the second limit value may be identical to the first limit value. Thanks to these provisions, the printer can be automatically informed when the print quality deteriorates and correct the settings of the printing machine.
  • the present invention is directed to a computer program that can be loaded into a computer system, said program containing instructions for implementing the method that is the subject of the present invention as briefly described above.
  • the present invention aims at a support for information readable by a computer or a microprocessor, removable or not, retaining instructions of a computer program, characterized in that it allows the implementation of the method object of the present invention as succinctly set forth above.
  • FIG. 1 represents, schematically, an embodiment particular of the device for producing authenticating digital codes that is the subject of the present invention
  • FIGS. 2A and 2B represent, in the form of a logic diagram, steps implemented in a particular embodiment of the method for producing authenticating digital codes that are the subject of the present invention
  • FIGS. 3A to 3H represent, in the form of a logic diagram, steps implemented in a particular embodiment of the method of reading authenticating digital codes object of the present invention
  • FIGS. 4 and 5 represent distributions of authenticating digital code scores
  • FIG. 6 represents statistical distributions of scores for originals and copies calculated on the basis of images taken with a reference image capture tool; and with a lower quality image capture tool
  • FIGS. 7A and 7B show, in the form of logic diagrams, the steps implemented in a particular embodiment of the method that is the subject of the present invention
  • FIG. 8 is a schematic representation of a particular embodiment of a device capable of to implement the method that is the subject of the present invention
  • FIGS. 9A and 9B represent, in the form of a logic diagram, steps implemented in a particular embodiment of the method that is the subject of the present invention.
  • the present invention is applied to authenticating digital codes in the form of square areas comprising square cells printed in black on a white background, the white areas having, in the initial digital image, the same surface, in number points, or pixels, as black areas.
  • this The invention is not limited to this type of application, but extends, on the contrary, to any type of digital CNA image allowing to discern (automatically) the original prints of the copies on the basis of the measurement of a score the digital image printed and digitized, said score varying according to the amount of degradation suffered by the image.
  • all the CNAs have the same issues of reliability and security in terms of score control and control of the source image and:
  • information matrix this is a physical representation of a message, usually affixed to a solid surface (unlike watermarks or digital watermarks that modify the pixel values of an image to be printed) machine readable representation (in English "machine-readable representation of information”).
  • the definition of the information matrix includes, for example, 2D barcodes, one-dimensional bar codes, and other information representation means that are less intrusive, such as "Dataglyphs"; - "cell”: this is an element of the digital authentication code which represents an information unit;
  • marking any process by which a digital image (including a digital authentication code, a document, etc.) is passed to its representation in the real world, this representation being generally made on a surface: this includes, non-exclusively, inkjet, laser, offset, thermal printing, as well as embossing, laser engraving, hologram generation. More complex processes, such as molding, in which the digital authentication code is first etched into the mold, then molded onto each object, are also included (note that a "molded" digital authentication code can be seen as having three dimensions in the physical world even if its digital representation has two.It should also be noted that many of the processes mentioned include several transformations, for example offset printing.
  • capture any process by which we obtain a digital representation of the real world, including the digital representation of a physical document containing a digital authentication code.
  • Each step of the creation of the digital authentication code is performed for the purpose that the original message is readable without error, even if, and this is a desired effect, the initial printing of the digital authentication code is tainted with errors.
  • one of the purposes of this creation of the digital authentication code is to use the number or the error rate of the modulated message, to determine a score, and then the authenticity of an impression of this digital authentication code. Indeed, a copy of the original NAC print will generally have more errors than this initial NAC impression. It is recalled here that the image of the digital authentication code is created from a
  • the source message is transformed into a binary representation, then encrypted by the key; the encrypted message is encoded to be robust to a high number of errors, then the encoded message is scrambled by the key before being modulated into an image, each binary being represented by a pixel of the image forming the digital authentication code.
  • the image forming the digital authentication code is printed at a resolution ensuring, from this initial impression, a significant error rate (ie a low score) without being too high, so that the decoding of the encoded message containing the errors is guaranteed. as well as the detection of a possible copy of the digital authentication code, which necessarily involves more errors.
  • the error rate can be adjusted according to the characteristics of the printing, so that the production of a copy leads to additional errors, resulting in an average error rate more high, or a lower score, when playing a copy, than when reading an original.
  • an error rate of about 20% in the original print is adequate, although rates ranging from 5% to more than 30% may work. Note that for an error rate that is too low, a perfect and therefore non-discernable copy of the originals would be feasible, whereas for an error rate that is too high, the digital authentication code could not be correctly decoded and there would not be enough information that could be degraded during copying.
  • the coded message extracted from a copied authenticated digital identification code therefore has more errors than the coded message extracted from an original digital authentication code captured.
  • the number or rate of errors detected are, in embodiments, used to differentiate a copy of an original, through the score which is a decreasing function of this error rate.
  • an important issue is to determine an appropriate decision threshold that best discriminates the originals of the copies.
  • the transformer prints the expected number of documents, with the CNA (s) provided on each document by implementing at least one aspect of the present invention.
  • the expected number of printed documents is sent to the rights holder.
  • the documents are sent to the assembler mandated by the rights holder.
  • the rights holder or assembler assembles the finished product (which may contain several "documents" secured by DACs) and implements at least one aspect of the present invention.
  • the rights holder authorizes the CNA provider to provide at least one NAC to the printer.
  • the DAC provider provides a test DAC and a predetermined threshold value that can depend on the printing conditions (media type, print type, printed colors, image capture conditions). ). It is observed that the density (i.e., the ratio of dark surfaces to light surfaces) of this test DAC and each definitive DAC (see below) may depend on the document and the printing conditions.
  • the printer prints a pre-series of documents including the test DAC.
  • a step 815 it is determined whether the print quality of the test DACs is sufficient, by analyzing DAC images and comparing its score with the threshold value. If the print quality is insufficient, it returns to step 810. If the print quality is sufficient, during a step 820, the DAC provider determines threshold values to be implemented during production, that is, the printing of the documents to be delivered, and at least one NAC, which represents, optionally, at least one compensation parameter value to be applied in determining whether an image of a CNA represents an original DAC, ie printed during production, or a copy of an original DAC . Alternatively, it is an information matrix provided by the DAC provider that represents each compensation parameter value. In step 820, the DAC provider also determines threshold values to be applied during production.
  • the DAC provider provides the printer with at least one definitive DAC and threshold values to be applied during production and, optionally, compensation parameter values.
  • a step 830 an image capture of a
  • step 835 it is determined whether the image capture conditions are sufficient. Otherwise, we return to step 830. If yes, during a step 840, the score of the image is determined, the operator is given a score representative of this score and it is determined whether the image of the CNA corresponds to a score value, possibly compensated, which is between the threshold values provided in step 825. If yes, this score is stored during a step 845, the production continues and we return in step 830. Otherwise, an alarm is triggered during a step 850 and the documents being printed are rejected. Then we go back to step 830, the acceptance of the documents resumed only when the alarm is raised.
  • At least one compensation parameter value (for example, additive or multiplicative) is determined to be applied to the score of the DAC images of this production as a function of the capture quality. image, based on the scores stored in memory and stores each value of compensation parameter in the server of the DAC provider. Each parameter value represents the conditions and / or print quality of the DACs.
  • an image of a CNA is captured. Then, during a step 865, image capture conditions are determined. During a step 870, it is determined whether the image capture conditions are sufficient, especially in terms of blur, resolution and lighting, to allow interpretation of the DAC. Otherwise, return to step 860 and / or provide the image to the DAC provider server. If the image capture conditions are sufficient, during a step 875, at least one compensation parameter value (for example, additive or multiplicative) is determined to be applied to the DAC score represented by the image, in depending on image capture conditions, including blur, resolution, and illumination uniformity.
  • compensation parameter value for example, additive or multiplicative
  • At least one print-related compensation parameter value and a threshold value to be determined are determined, either by reading a part of the contents of the DAC, either by reading a content of an information matrix, or by asking this value from the DAC provider's server.
  • step 885 the image is determined to be an original DAC or a copy.
  • the result of step 885 is transmitted to the DAC provider and possibly to the rights holder and, optionally, to the operator who made the capture.
  • FIG. 7 The implementation of the different steps illustrated in FIG. 7 is detailed in other particular embodiments of the method that is the subject of the present invention illustrated in FIGS. 1 to 3H.
  • FIG. 1 shows an embodiment of the identification device 100 which is the subject of the present invention adapted to a machine, or document printing line, in order to process these documents as soon as they are initially printed.
  • the document identification device 100 comprises: a destacker 105, known per se, which depilates objects, generally sheets of cardboard or paper, or "documents", 1 10,
  • a printing line 106 for printing at least one DAC on each document 110,
  • a stacker 107 of known type, which forms a stack of documents 110 printed by the device 100,
  • the reading means 125 of the DAC 115 includes a camera 126 and at least one light source 127.
  • the reading means 125 also comprises means 129 for processing the image captured by the camera 126, which determines characteristics of the image of the DAC 1 15.
  • the DAC reading means 125 controls a withdrawal means (not shown) of each document 100 carrying a bad DAC.
  • the means of withdrawal of each document 100 carrying a bad quality DAC is, for example, constituted by a "lock", that is to say a shutter controlled for, in one of its positions, to make drop the documents in a bin and, in another position, let the documents go to the stacker 107.
  • the result of the verification performed by the means 125 is transmitted, for storage and subsequent operation to a server 155.
  • This server 155 provides digital authentication codes and has the following features: means 160 for specifying, rights holders, authorized transformers, calibrated or approved printers, existing products or documents with all the parameters of printing or generation of DACs relating to these products, as well as printers or transformers; moreover, the means of associating products with customers, from printers to transformers;
  • a secure connection allows a machine controlling the print to download DACs on demand.
  • the means of sending an image to said server and receiving the tagged image back the means of sending an image to said server and receiving the tagged image back.
  • - a means 175 to receive quality measures from the CNA, to maintain these quality measures, and to determine whether production is valid based on these quality measures. See below for quality measures, based on images captured on the production line. If the production is deemed valid, a message is sent to the processor allowing him to close the production and deliver the products to the right holder and
  • the database 185 is optional, a DAC may, in embodiments, incorporate at least one degradation limit value for discriminating an original document from a copy.
  • a mobile reading means CNA 190 is also shown in FIG. 1.
  • the fixed reading means 125 and the mobile reading means 190 each comprise means of remote communication with the server 155, for example, via a telephony network, fixed or mobile, or the Internet network.
  • the integration of CNAs for document security involves three parties: the rights holder wishing to produce secure documents, the CNA document security service provider, and the processor. the printer producing the documents secured by CNA.
  • a party may have two roles to play, for example the rights holder is also the provider of the security service, or the latter is also responsible for printing the documents.
  • the three-part separation is functionally relevant because it is usually different services that order, provide, or print the DACs.
  • Each captured image of a DAC is stored on a database, with associated information (production order, date, etc.).
  • a signature uniquely identifies an impression of a CNA among the impressions of the CNAs from the same source image (from the same DAC).
  • the site where NAC images are captured can be found at the printer, the advantage being that it can be integrated with the production and the disadvantage being that it is in the exposed area.
  • the machine used for the calculation and / or storage of signatures can be secured, for example deported to the server and processing the images provided by one of the reading means 125 or 190.
  • the site can be at the third party mandated by the rights holder, usually the same who provides the DAC (s) used.
  • the reliability of copy detection depends on the stability of the score: from a statistical point of view, the first aim is to obtain the score with the smallest variance. This means that from start to finish of the production of products containing a given DAC, the printing conditions affecting the CNA score must not change significantly.
  • this score is sensitive to a large number of parameters, for example the type of paper, the type of ink, and generally adjustable parameters on printing machines such as ink density.
  • Printing machines are often very sensitive, and experience shows that for the same product printed on the same machine, the print settings can change for print sequences made at different times, with a significant impact on the score of the CNAs.
  • the print parameters can change during the same production, and there is then a gradual shift of the score. It is even possible that the change of operator during production has an impact on the quality of printing and therefore the score of the CNAs. We therefore seek to minimize these effects, in particular by providing for scoring offsets.
  • the tagging conditions during production are controlled to provide the essential copy-detection functionality of the DACs. Also, it is not uncommon for the printer or CNA integration manager in the files to make an association error, so that a bad CNA value is assigned to a document to print.
  • the reading means 125 is absent, an operator is provided with a mobile DAC reader 190, so that it makes regular checks of the production on the printing line.
  • the reader can be very close to a regular NAC reader. However, it is preferable that it has the following characteristics: it is preferably manageable, for example by taking the form of a stand-alone reader, or by wire connection with a wire of sufficient length. Its main function is to control the quality of production, so a binary response is, in general, inappropriate; since the readers are located in remote areas, that is to say printers or subcontracting transformers, it is better to locally store a minimum of sensitive information (read algorithms, reading parameters) in the reading means 125 and 190.
  • the operator receives a file of CNA reading parameter sets (these parameters can be transmitted automatically via the printer's internal network) and is provided with a mobile reader 190, in communication mode. wired or not.
  • the parameter set does not include the read keys, because there would be a security risk to broadcast such a set of parameters.
  • a subset of the NAC values, randomly sampled and of sufficient size to store a representative score for quality control, is therefore stored, but of insufficient size to recreate a NAC that is close to the original CNA impressions. For example, if a DAC includes 12,000 values, 2,000 of these values are stored in the file, chosen at random positions known to the reader.
  • the operator makes a reading of the printing plate that carries it (for example that which corresponds to the black ink), to make sure that the CNA has the good value and is of good quality. If this is not the case, it will have to produce a new plate, possibly with new DACs. Otherwise, it may start printing products in the preliminary phase of adjusting the print settings. During this preliminary phase, the operator carries out several checks of the CNAs.
  • the document security method comprises, firstly, carried out by a server that provides digital authentication codes: a step 205 of specification of rights holders, authorized transformers / printers,
  • a step 220 of associating products with rights holders and with printing and / or processing systems a step 225 of declaration of production orders relating to products, indicating in particular the quantities to be produced of CNA and / or products and
  • a step 230 of transmitting, in a secure manner, digital authentication codes to printing or transformation systems for integration with the design of the product is sent to the server before step 230 and during At this stage, the server carries out the DAC and forwards it to the printing or transformation site.
  • the digital authentication codes transmitted during step 230 are digital test authentication codes for integration into the design of the product.
  • a printing step 235 is performed on a first predetermined number of documents comprising a said digital authentication code.
  • a capture of an image of at least one, and preferably of each, printed digital authentication code is performed and the storage of information representative of each digital authentication code printed.
  • This capture image can be performed manually or automatically, by an image sensor placed on the channel.
  • captured images of printed digital authentication codes printed to the server are transmitted from the printing or transformation site, as well as print parameter values implemented to print the first predetermined number of prints. products.
  • the server determines an error rate in the authenticating digital codes represented by the images, then a score and a print quality of the first predetermined number of products, with possible compensation as a function of the conditions. printing and image capture conditions. Then, during a step 255, the server determines whether the production is valid from the received measurements, according to a predetermined limit value, as explained with reference to FIGS. 3A to 3D.
  • step 260 the server notifies the user or the printing chain, with indications on the modifications to be made to the print parameters (for example to reduce inking or to increase it). Then we return to step 235.
  • the server transmits to the print or transformation site a message indicating that the production is valid and a digital authentication code to implement for future production.
  • an error rate or score limit value, or threshold value, for validating the authenticity of the DACs is determined by the server from the rates determined in step 250.
  • This value is represented, in a secure manner, by the CNA transmitted during step 265.
  • this limit value corresponds to the validation of the authenticity of 98% of the CNAs printed during the last step 235.
  • This value, as well as a margin of error are transmitted to the string reader and / or the manual reader.
  • this DAC is also representative of the print parameters implemented during the last step 235.
  • the error rate, the score and the print quality are determined locally by the reader taking the images and they are transmitted to the server 155.
  • a second predetermined number, specified in the production order, of products is printed or converted by implementing the print parameters of the last step 235. Then, during a step 275, for each product or for a part of the products, an image capture of the printed DAC is carried out automatically or manually on the printing line.
  • an error rate is determined in the digital authentication codes represented by the images, then a score and a print quality of the first number predetermined product, with possible compensation depending on the printing conditions and image capture conditions, according to a predetermined limit value, as discussed with reference to Figures 3A to 3D.
  • the local drive determines whether the instantaneous production is valid based on the margin of error, assigns a note to the last captured image and provides, by display, this note to the operator of the print chain.
  • one or more signatures are calculated for each valid DAC image captured.
  • a signature generally that occupying the smallest volume of data is quantized and / or compressed so as to obtain a compact representation of it.
  • the set of calculated signatures is sent, by secure link, to the server on which the inspectors connect to verify the validity of the signatures.
  • an information matrix preferably secured with an encryption key, is generated to contain the representation of the signature and printed on the document containing the DAC, during the step 285.
  • a limit value, or threshold value, for the validity of the DAC is determined during production, on the basis of the measurements made during step 280, and represented, in a secure manner, by a matrix of printed information. during a step 295.
  • the parameter set received by the operator contains a target average score for the DAC, as well as margins of error.
  • the target score can be 15, and the margin of error +/- 2.
  • any score between 13 and 17 is accepted, but the desired score should be as close
  • This score is generally not presented to the operator, but a transformation of this score, called the note, is presented to him during the step 280, during the production. This note is more easily interpretable for him, and is comparable between different fabrications that would have different target scores.
  • a possible transformation is to transform the score on a scale of -5 to +5, as follows:
  • the objective of the operator is to have as close as possible a score close to 0, which corresponds to a score equal to the target score, here of 15. He must at all costs avoid a score of -5 or +5, which corresponds to an unacceptable score.
  • a score of 14.2 gives a score of +1, a score of 16 a score of -1.25.
  • the note can be quantized to the nearest integer.
  • the operator is required to have a minimum of readings, for example 30, taken uniformly during production, so as to determine the score statistics of the production.
  • the production is judged valid if:
  • a score higher than the target score is actually more acceptable than a score lower than the target score.
  • the notes displayed to the operator are transformed into notes on a letter notation scale, for example A, B, C, D, E with a + or - sign depending on whether the score is below or above the target score. It is preferable to quantify the note beforehand.
  • +5 corresponds to E +, +4 to D +, + 3 to C +, +2 to B +, +1 to A +, 0 to A, -1 to A-, - 2 to B-, -3 to C-, -4 to D-, -5 to E-.
  • the target score and the error margin or margins are generally pre-calculated during a calibration phase of the printing machine and / or the ink and paper used and / or the target product. , each of which may have an impact on the NAC score.
  • the adjustment phase can serve as a learning phase: some variation in the value of the target score can be tolerated, provided that all production is also close as possible of this target score.
  • the priority is to minimize the variability of the score, and as long as the variability is low, it is acceptable that the average score of the production is different from the target score.
  • a message may be sent to the operator depending on the note, for example recommending to increase or decrease the ink charge.
  • the printing machine is directly controlled so that the note remains as close as possible to the value "0".
  • Scores, or error rates, are presented to the operator and counted in the production statistics.
  • the transformer establishes a secure connection with an analysis server.
  • the images are sent back to the server and the results sent to the transformer's computer application, in real time.
  • a step 315 for obtaining the print parameters for example reading the contents of the DAC represented by the image, or querying a database according to the content of the DAC or another identifier of the DAC; production,
  • a step 320 of adjusting the limit value according to the printing conditions if this limit value does not already take account of it as explained with reference to FIGS. 2A and 2B, a step 325 of determining the capture conditions image during which a resolution of the DAC image and / or poor focus and / or motion blur during image capture is determined according to known image processing techniques and / or implementing a test pattern, as disclosed elsewhere, - a step 330 of determining whether the image capture conditions are sufficient, if not, a step 335 of sending the image to the server 155 for complementary image processing followed by a return to step 305,
  • a step 340 for determining the error rate in the CNA the error rate also called the "score" of the CNA
  • step 350 of signature determination of each DAC whose image has been captured a step 355 of transmission of the signature and the result of step 345 to the server 155,
  • a step 360 of determining the identity of the product by comparing the signature found with the contents of a database of signatures making it possible to identify the DACs and
  • steps 340 and 345 are eliminated and during from step 425, which follows step 320, the error rate in the DAC image is determined, then a score and, in step 430, the authenticity of the product is determined as exposed next to steps 340 and 345 but without adjustment according to the image capture conditions. If it is determined that the product is authentic, proceed to step 350. Otherwise, steps 325 and 330 are performed and, if the image capture conditions are sufficient, proceed to step 350.
  • DAC as opposed to a non-significant black square or a 2D bar code
  • step 540 read each DAC, make a second sharpness measurement and compare the DAC score and its sharpness score with the reference stored threshold values, as set out with reference to one of FIG. 3A or 3B, all the steps being then performed by the server 155,
  • This embodiment applies, for example to images produced by flatbed scanners.
  • an image may be generated by different flatbed scanners, which are not necessarily licensed or even known.
  • These scanners produce images of varying quality: there are indeed a multitude of brands and models of flatbed scanners, and most of these scanners contain internal settings that can affect the quality of the captured image.
  • Knowing the model of the scanner does not usually mean to determine the quality of image: indeed, for the same scanner the capture resolution (600 dpi, 1,200 dpi, 2,400 dpi) affects the quality of the image, and this in a different way on different models of scanners.
  • the image type (color, greyscale, binary) also affects the image quality.
  • the "smoothing" option of some scanners corresponds to the application of a low-pass filter of the image that can eliminate many details of the CNA, whose score can then be significantly reduced. And other options may have the opposite effect on the score.
  • an image may be taken on any scanner and sent to a server for verification.
  • the name of the scanner is not transmitted to the server, and even if it were transmitted, its image capture properties might be unknown, given the large number of models on the market.
  • image capture tools during a step 600, illustrated in FIG. 3D.
  • a test pattern is an object, for example a card, which contains image structures for evaluating the quality of the image produced by the image sensor in a precise and stable manner.
  • the operator with a pattern wishing to authenticate a document places the pattern and the document adjacent to the field of view of the image sensor, so that only one image capture contains both the DAC (s). to analyze and sight, during step 605.
  • An image of the test pattern can be used to calculate one or more indicators of the quality of the image. These indicators are related to reference values for the test pattern, in order to adjust the DAC score taking into account the image quality metric, during a step 610 and 615 and / or to determine if the image is of sufficient quality to determine the authenticity of the NAC.
  • the test pattern can also be a sticker that is pasted on the document to be checked next to the NAC. In this way, if the CNA is misplaced on the scanner so that it is out of focus in the generated image, there is a good chance that the target is also fuzzy. It will then be possible to determine that the image does not authenticate the DAC.
  • the pattern itself contains a DAC.
  • step 610 a score of the CNA is calculated
  • an image quality indicator is calculated from the test pattern
  • step 620 if the quality indicator is less than a predetermined threshold value, the image is rejected, that is to say that complementary analyzes are requested,
  • a multiplicative adjustment coefficient or an additive coefficient to be applied to the score is calculated of the NAC and the adjusted NAC score is calculated from its initial score and the multiplicative or additive coefficient.
  • the adjusted score is compared to each predetermined threshold value of the NAC to make a decision on its authenticity, signature, score, and product identity as set forth in Figures 3A or 3B.
  • Image quality problems can exist even with reading tools that are, in principle, known. Indeed, in practice a fleet of readers is distributed among subcontractors, assembly units, quality service of different rights holders, as well as inspectors, customs, distributors. These drives are moved and manipulated with varying precautions, and sometimes some drives are out of order. In addition, it may happen that a player is not perfectly adjusted when it leaves the factory. And in general, we can not guarantee that all readers have exactly the same reading performance, even if they are produced identically. According to at least one aspect of the present invention, the scores, or decision threshold values, are adjusted to take into account the performance of the tool. Preferably, means are provided for detecting an adjustment problem on a reading tool.
  • One solution to these problems is to permanently integrate a pattern (such as those described above) in the field of view of the image capture means, so that the pattern is contained in any captured image with the capture means.
  • the reading of the pattern makes it possible to measure the quality of the image. This image quality may be taken into account in order to adjust the score measured for the DAC, or to display a message warning the operator of the reading means that a setting of this reading means is necessary.
  • step 635 of reference DAC generation serving as a hold and certification of readers
  • a step 640 for affixing these DACs to each of the authorized reading means in its field of vision for example by etching or gluing a reference DAC support.
  • the performance of the image capture means is not known and a target is not available, it is nevertheless possible to ensure that a document studied is an original. Indeed, it is possible to establish beforehand a threshold value corresponding to the best quality of reading that can be obtained over a range of reading means.
  • the range of reading means may correspond to all flatbed scanners operating at 1,200 dpi.
  • the threshold value can be established by one of the methods described above.
  • the DAC is considered an original if the score is greater than the threshold value.
  • the response message generally consists in recommending a thorough check, using an image capture means with known performance, or else with an image capture means providing a superior image quality .
  • the card with the pattern may have other advantageous features.
  • the test pattern may contain information, for example in a CNA or MIS, to identify its holder. This ensures that only authorized persons can read or authenticate CNAs. It is also possible to determine the CNAs read for a given test pattern, or to allow a maximum number of readings for a given test pattern. It's the same if the pattern is on a sticker, it can be destructible if we try to detach it.
  • the reading means also makes it possible to establish a payment model of the CNA reading service client based on the number of readings made.
  • Copy detection methods can be applied to detect a possible copy of a reading card. It should be noted that these functionalities can be implemented without the card containing a pattern.
  • a step 655 of distributing reading certificates to authorized persons an image capture step 660 by an unauthorized capture tool, said image containing both a document containing a CNA and a document containing the certification CNA,
  • a step 710 for determining the score threshold value of the CNA (for example stored on a server or in the message),
  • a step 715 for comparing the DAC score with the threshold value if the error rate is lower than the threshold value, it is determined that the product is original, and if not: a step 720 of measuring a CNA sharpness value (this step can be done automatically during the DAC reading step), - a step 725 of determining the sharpness threshold value (for example, depending on the message contained in the DAC, DAC identification function), - a step 730 of comparing the sharpness value with the sharpness threshold value, and at the output, a determination whether the product is a "copy", whether the DAC is sufficiently sharp or if the image is "non-compliant", if the image is not clear.
  • the sharpness level can be used up to a certain tolerable value to adjust the DAC score.
  • the expected value or sharpness threshold value (as well as the threshold value of the score) can be stored in the message from the NAC; these values can also be stored in a 2D barcode during a pass-through print.
  • the threshold value of the sharpness score can be absolute or determined depending on the printing conditions if they are known. For example, depending on the sharpness measure, one can have different scores of values for DACs printed in offset, or in inkjet printing (typically lower in the latter case). Note that the sharpness measurement may also vary depending on the properties of the image capture tool and the resolution at which it is used. If necessary, the sharpness measurements are converted to take account of these properties, and the parameters of the sharpness measurement algorithm can also be adapted (for example the size of the considered neighborhood, which is typically larger if the capture resolution is higher).
  • a step 755 for determining whether an image contains a CNA (for example by detecting a square if the CNA is square),
  • a step 760 for measuring a sharpness index for example the average measurement of the absolute value gradient on the portion of the image containing the CNA (some CNAs are very textured), and comparison with a threshold value predetermined,
  • a step 765 for transmitting the image to a reading module of the DAC (the latter may be on a machine different from that implementing the measurement functions sharpness).
  • the operator can force the reading by pressing a button provided for this purpose, in the case where the measurement of sharpness is systematically less than the predetermined threshold value, - as a function of the estimated time of analysis, a step 770 of transmitting a signal to the operator indicating that an image is being read and
  • an image difference is measured between the received image and the previous image, and the image is rejected if the difference measurement is greater than a threshold value.
  • a large difference in image may indicate that the product or document is in motion and that its position is not stabilized, which increases the chances that the image is blurred.
  • the measurement of a sharpness score on the test pattern is integrated in the algorithm given above. It is noted that there are many sharpness measures that can be used, many of which are described in Loren Shih's "Autofocus survey: A comparison of algorithm”.
  • the Sobel gradient filter provides good results, and is inexpensive in computations.
  • the subtraction of an image and the result of the low-pass filtering (for example by Gaussian filtering) of this image results in an image of differences, these differences being all the more marked if the image originally contained a high energy in the high frequencies.
  • the average of these differences (taken in absolute value), or an average of these differences on a selection of the image containing the greatest number of differences, provides an indicator of sharpness.
  • a remote scanner application can check image quality with the help of the test pattern.
  • This application is advantageous because no software must be installed at the user.
  • the application requires several manipulations (correctly set the scanner parameters, optionally select the image part to be scanned, save the scanned image, or "scan", to a file, send the file to the server by e-mail ).
  • many users will not necessarily be familiar with this type of manipulation, and therefore will not use the application.
  • a handling error can easily be made, resulting for example in an image file containing no DAC, or in an image not having the required quality.
  • This local application makes it possible to greatly simplify the reading.
  • This local application preferably does not contain CNA reading algorithms or associated keys. Indeed, it avoids the associated security problems. On the other hand, it avoids the problems of updating the keys or parameters on the installed applications.
  • the local appliance manages the scanner parameters, determines the areas to be scanned, sends the images from the DACs to the server, and displays the server responses in return. It can also detect problems before sending an image to the server, such as fuzzy images, and tell the user how to correct these problems.
  • the DAC (s) are read. For each DAC, a sharpness measurement can be made and compared to a threshold value stored on the server (this value can be retrieved if the DAC is identified). If the DAC score is lower than the corresponding threshold value and the sharpness measure is also less than the threshold value that corresponds, one can, for example, send a message to the scanner operator, the rights holder and / or the DAC provider, indicating that the image could not be authenticated.
  • the threshold value applied to the sharpness score may have been calculated at the time of the manufacturing closure, from the images resulting from the quality control.
  • Figure 3C illustrates the steps implemented in this particular embodiment.
  • the error rate (or quality) and sharpness scores may vary depending on the characteristics of the image capture: quality, resolution, lighting, etc.
  • the measurements made during the calibration (see Figures 2A and 2B), during the production quality control or when the products are delivered to the processor or to any consignee designated by the right holder, which serve as a reference for the expected measurements. , must be adapted to the conditions of image capture if they have been performed with an image capture tool producing images of a different nature.
  • a printed DAC (or multiple prints of the same DAC) is used as the reference.
  • this CNA is printed correctly without any particularity, for example its ink charge is not too high.
  • Images are captured with the various image capture tools used, and the conversion function to be applied to the different score levels obtained with these different tools is determined.
  • image capture For example, it is considered that the conversion function is of the additive or multiplicative type, and the additional coefficient or multiplier to be applied is determined.
  • the conversion function is of the additive or multiplicative type, and the additional coefficient or multiplier to be applied is determined.
  • the average score is 13 for a sample of CNAs with the reference tool, and this average is 11 for the tool used in operation, we can use a multiplicative coefficient of 13/11 regardless the score.
  • the offset of the scores explained above is corrected and the risks of misclassification of the CNAs which may result therefrom are minimized.
  • this approach is not always applicable because, as previously discussed, the image capture tool used is not always known.
  • an image of a test pattern was also captured during the shooting and, preferably, this pattern contains another CNA whose score on a reference tool is known. We have seen previously how this pattern can be used to determine if the image quality is sufficient.
  • This pattern can also be used to adjust the score for the NAC to authenticate. For example, if the CNA is a score of 12, when the score is 13 on average on the reference image capture tool, a multiplier of 13/12 can be applied to the NAC score. to authenticate.
  • this new method allows, within certain limits (a score below a pre-established limit for the NAC of the aiming at a rejection of the captured image), to perform a score compensation which, while it may be approximate, nevertheless makes it possible to reduce the risks of errors (in particular the risks of considering an original as a copy on a tool lower quality image capture).
  • the image quality can be estimated in various ways, for example by applying low-pass filtering, preferably Gaussian, to the image, and measuring a difference, for each image pixel between the image and the image. filtered image and the original image, then calculating an average of the image difference. An average can also be calculated by focusing on areas of the NAC with higher contrast. The lower the difference, the lower the grip quality will be in general. It is noted that other similar methods, for example based on the measurement of the frequency energy spectrum of the captured image, can be used as an indicator of sharpness.
  • low-pass filtering preferably Gaussian
  • the relationship between the sharpness indicator and the score correction factor must be predetermined. For example, one or more DACs of the same print quality are selected, and their score and sharpness indicator are calculated on image capture tools of different qualities. We can then estimate, by statistical methods, the relationship between the sharpness indicator and the score correction coefficient. The same procedure can be repeated for DACs of different print quality levels, and thus different score levels when capturing images with a reference image capture tool. It should be noted that, for best results, it is preferable to take into account the possible differences in image capture resolutions in the computation of the sharpness indicator, as well as the image dynamics.
  • the term "document” is used to refer to any readable information medium with reading material and, sometimes, to the eye and is called "anticopia mark” or “mark”, a mark intended to be made , by printing or by local physical modification of the medium, on a document, whose degradation during a copy of this document is detectable and makes it possible to differentiate the original from the copy.
  • images processed by steganography that is to say comprising, on a decoration, indistinguishable from the eye, a print (in English "watermark”) and visible marks formed of a matrix of dots each having one of two colors, usually black and white.
  • Figure 8 is also not shown in scale.
  • FIG. 8 shows a printing equipment 1005 equipped with a copy detection equipment 1010, a copy protection server 1015, a server 1020 for storing a database of degradation measurements. authorized, a proprietary 1025 server rights to a document, 1030 warning means, for example beacon, sound transmitter or production control computer and a mobile copy detection equipment 1035.
  • the printing material 1005 is of any type, for example flexography, gravure, offset, letterpress, digital printing, laser printing or inkjet printing.
  • the copy detection equipment 1010 and 1035 comprise an image pickup means 1040 of a mark on a document, for example a charge transfer image sensor, known as a "CCD” (acronym for " charge coupled device “for a charge transfer device), a processor 1045 and a non-volatile memory 1050 holding software implementing steps illustrated in FIGS. 9A and 9B.
  • a charge transfer image sensor known as a "CCD” (acronym for " charge coupled device "for a charge transfer device”
  • processor 1045 for a charge transfer device "for a charge transfer device
  • non-volatile memory 1050 holding software implementing steps illustrated in FIGS. 9A and 9B.
  • the copy detection equipment 1010 also comprises a remote communication means 1055 with the server 1020 and / or with the server 1015, for example on a fixed or mobile telephony network.
  • the copy detection equipment 1035 also includes a remote communication means 1060 with the servers 1020 and 1025, for example on a mobile telephone network.
  • the anti-copy mark supply server 1015 is adapted to implement step 1165 illustrated in FIGS. 9A and 9B to provide an anti-copy mark depending on the characteristics of the printing equipment.
  • the server 1020 maintains a database of authorized degradation measurements in correspondence with identifiers of printed documents.
  • an anti-copy mark may, in embodiments, incorporate the one or more boundary degradation measures for discriminating an original document from a copy.
  • the document rights owner server 1025 is adapted to archive and process information from the mobile copy detection equipment 1035 to determine the path of a document, especially in the case where a copy is detected.
  • a printer completes a questionnaire describing, among other things, the type and brand of printing material to be used to print documents bearing an anti-copy mark, and, all parameters of the graphic chain, for example the system of "DTP” (acronym for “desktop publishing") of the system of "RIP” (acronym for "rastering image process” for image translation process) which translates as a file “Bitmap", that is to say separately representing each point of the image for each color, and the system of "DTP" (acronym for "desktop publishing") of the system of "RIP” (acronym for "rastering image process” for image translation process) which translates as a file “Bitmap", that is to say separately representing each point of the image for each color, and the system
  • the completed questionnaire is provided by the printer to an anti-copy mark provider.
  • the supplier prepares and supplies a template of calibration sheets to the printer, according to the content of the completed questionnaire which represents the physical configuration of the printing machine. For example, from the web, the supplier determines where to place the template (for example of a dimension of 105 x 210), knowing that this template is to be reproduced several times on test sheets. Preferably, it is expected that the template makes it possible to identify each printed color (each printing group) because an anti-copy mark is included for each printing group. In other embodiments, anti-copy mark is only provided for the color, preferably the black, with which this mark will be printed.
  • the brand provider determines a calibration mark, based on the content of the completed questionnaire. Knowing the native resolution of the printing material, generally 2400 dots per inch, the resolution of the anti-copy mark is chosen in such a way that the printing of the original itself carries a sufficient mark degradation, for example example greater than a predetermined value.
  • the supplier provides the plug template and the calibration mark to the printer, preferably by attachment to an email.
  • the printer completes a calibration sheet, that is to say, during the design of a test sheet comprising several cards intended to be printed in different places and in different colors, it adds a mark, for example a cross, in a box corresponding to the position and the printing color. Similarly, it identifies the hardware used for printing.
  • the printer associates an anti-copy mark supplied in step 1125, to each sheet made according to the template.
  • the printer prints the calibration mark with the printing material, preferably in different central and lateral printing areas of the printing equipment and preferably for the reference cardboard most widespread in manufacturing. Alternatively, the printer prints the mark on different types of paper or cardboard, different weights.
  • the printer provides the completed calibration sheet and the mark or marks printed by the printing equipment to the trademark provider.
  • the provider performs a degradation measurement of at least one copy-proof mark printed with the print material for statistical processing to determine a standard deviation between the printouts.
  • the brand supplier determines the characteristics of a mark to be printed, according to the degradation of at least one mark printed with the printing material to be used and provides a mark possessing these characteristics, to the printer, which integrates them into the matrix of the document to be printed, for example offset films. For example, the supplier statistically determines a standard deviation of the number of print errors of the copy-proof mark printed in step 1 135. Based on this standard deviation, the capacity of the copy-proof mark is checked. use of printing equipment and its context. Optionally, the provider adjusts, in step 1150, the print resolution of the anti-copy marks. When launching a production of original documents, the printer implements a triptych printer.
  • a triptych is a physical sample of the document, accepted by the client in terms of the quality of execution. It is signed by the customer and serves as a reference or calibration standard for the printing equipment at the beginning of each manufacturing process. It is a working tool that is widely used and used systematically in the printing world.
  • the triptych corresponds to three printing situations: printing with the minimum acceptable ink charge, printing with the ideal ink charge, and printing with the maximum acceptable ink charge.
  • a copy detection equipment is implemented to measure, on at least one of the extreme flaps of the triptych corresponding to an extreme inking, the degradation of the anti-copy mark.
  • Standard inking represented by the shutter central triptych defines, through the copy detection equipment, a standard error rate, or degradation measure.
  • the measurement is carried out at least on the flap of the triptych exhibiting the minimum inking authorized by the customer.
  • each component is subjected to a degradation measurement and the highest degradation measurement is selected. It is recalled that a measure of degradation can determine the number of points of the mark that do not have the color of the digital original. This measurement can be performed by comparing an image of the brand analyzed with a digital image without degradation, for example.
  • a copy detection equipment installed on the printing equipment is stored, information representative of the degradation measurement obtained during the step 1155.
  • This information is, for example, for example, the measurement of the error rate for each authorized extreme inking.
  • a safety margin for example a multiple of the standard deviation, is added to the degradation measurement obtained during step 1155 for the standard inking and the result is stored in memory.
  • two limit values are determined by adding or subtracting the margin of error from the error rate obtained with the standard inking.
  • the storage is performed in a remote database (see server 1020 illustrated in FIG. 8), by storing the limit value or values, in association with an identifier of the document in the database.
  • storage is performed in a new anti-copy mark provided by the anti-copy mark provider for the production of original documents.
  • the anti-copy mark then has a coding or an encryption of the limit value or values.
  • the anti-copy mark integrates, in known manner, information representative of the limit value or values.
  • the document is manufactured, generally in large series.
  • the detection equipment installed on the printing equipment is measured by the degradation of the anti-copy marks.
  • the manufacture is completed, during a step 1 190, if the copy-back mark does not represent, itself, the limit value or values, mobile copy detection equipment is stored, information representative of the measure of degradation maintained in database in correspondence with an identifier of the produced document.
  • the document is identified, either from information contained in the anti-copy mark or in an information medium associated with this mark, for example a bar code, possibly in two dimensions, for example a datamatrix (trademark filed), or by entering the visible information attached to it (eg model and manufacturer).
  • an information medium associated with this mark for example a bar code, possibly in two dimensions, for example a datamatrix (trademark filed), or by entering the visible information attached to it (eg model and manufacturer).
  • the copy detection equipment is used to measure a degradation of a mark on a document identified during the step 1195. It is observed that the steps 1195 and 1200 can form only a step, especially when the reading of an identifier of the document is performed by image processing of the anti-copy mark.
  • step 1200 is greater than the measurement stored in step 1 190. If yes, during a step 1210, is transmitted remotely, information on the analyzed mark or the product concerned, so that the The owner of the rights may act against any infringement of his product associated with the document. For example, this communication is carried out by implementing a mobile telephone network. Otherwise, at regular time intervals, for example once a day, during a step 1215, information is transmitted remotely, with regard to the documents analyzed, so that the owner of the rights can make the traceability of his documents. products.
  • the steps 1160 and 1190 can be eliminated in the case where the anti-copy mark represents, in the information that it incorporates, the limit value (s) which, for step 1175, represents the alert signal trigger threshold (s) and, for step 1205, represents the discrimination threshold (s) of an original document of a copy.
  • the two extreme situations represented by the triptych define the maximum value of the error rate, or measurement of degradation, allowed to find that a document is an original, with a margin of tolerance.

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Manufacturing & Machinery (AREA)
  • Editing Of Facsimile Originals (AREA)
  • Accessory Devices And Overall Control Thereof (AREA)
EP07872375A 2006-12-14 2007-12-14 Verfahren und vorrichtung zum schutz vor fälschung Withdrawn EP2130363A2 (de)

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
FR0610891A FR2910148B1 (fr) 2006-12-14 2006-12-14 Procede et dispositif de securisation de documents.
FR0611402A FR2910667B1 (fr) 2006-12-26 2006-12-26 Procedes d'identification et de traitement d'un document
FR0703922A FR2916678B1 (fr) 2007-06-01 2007-06-01 Procede et dispositif de securisation de documents
FR0704517A FR2917877B1 (fr) 2007-06-22 2007-06-22 Procede et dispositif de marquage d'un recipient et procede et dispositif de lecture d'information sur un recipient marque
PCT/FR2007/002085 WO2008107525A2 (fr) 2006-12-14 2007-12-14 Procede et dispositif de lutte contre la contrefaçon

Publications (1)

Publication Number Publication Date
EP2130363A2 true EP2130363A2 (de) 2009-12-09

Family

ID=39689514

Family Applications (1)

Application Number Title Priority Date Filing Date
EP07872375A Withdrawn EP2130363A2 (de) 2006-12-14 2007-12-14 Verfahren und vorrichtung zum schutz vor fälschung

Country Status (3)

Country Link
US (1) US20110038012A1 (de)
EP (1) EP2130363A2 (de)
WO (1) WO2008107525A2 (de)

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU2007254595B2 (en) * 2007-12-20 2011-04-07 Canon Kabushiki Kaisha Constellation detection
FR2932588B1 (fr) * 2008-06-12 2010-12-03 Advanced Track & Trace Procede et dispositif de lecture d'une caracteristique physique sur un objet
DE102009058439A1 (de) * 2009-12-16 2011-06-22 Giesecke & Devrient GmbH, 81677 Verfahren zur Prüfung von Wertdokumenten
US8503794B2 (en) * 2010-07-28 2013-08-06 Microsoft Corporation Data difference guided image capturing
US8864041B2 (en) * 2010-10-12 2014-10-21 Hewlett-Packard Development Company, L.P. System for generating an incrementally completed 2D security mark
NL2006990C2 (en) * 2011-06-01 2012-12-04 Nl Bank Nv Method and device for classifying security documents such as banknotes.
US8830533B2 (en) * 2012-02-16 2014-09-09 Xerox Corporation System and method for creating machine-readable codes in combination with other images such as logos
US10482471B2 (en) * 2013-01-16 2019-11-19 Amazon Technologies, Inc. Unauthorized product detection techniques
FR3018128B1 (fr) * 2014-03-03 2016-03-25 Advanced Track & Trace Procede et dispositif de securisation d'un document
CN107636733B (zh) 2015-04-09 2021-05-07 菲利格拉德私人有限公司 验证印刷物品的真实性的方法和数据处理终端
US10104265B2 (en) * 2015-04-22 2018-10-16 Email Data Source, Inc. Method and device for generating a privatized electronic image for a plurality of electronic documents
FR3037692B1 (fr) * 2015-06-16 2017-06-02 Morpho Procede d'identification biometrique
JP6202285B2 (ja) * 2015-07-03 2017-09-27 コニカミノルタ株式会社 印刷物処理方法及び印刷物処理装置
FR3045885A1 (fr) * 2015-12-22 2017-06-23 Morpho Procede d'identification biometrique
CN113011437B (zh) * 2021-03-09 2023-06-30 安徽超清科技股份有限公司 一种基于工业互联网的产品溯源系统
US11651093B1 (en) * 2022-02-24 2023-05-16 LendingClub Bank, National Association Automated fraudulent document detection

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4758703A (en) * 1987-05-06 1988-07-19 Estee Lauder Inc. System and method for encoding objects
DE10019721A1 (de) * 1999-08-25 2001-03-01 Giesecke & Devrient Gmbh Verfahren zur Produktsicherung
US6420792B1 (en) * 1999-09-24 2002-07-16 Texas Instruments Incorporated Semiconductor wafer edge marking
US7054461B2 (en) * 2002-02-15 2006-05-30 Pitney Bowes Inc. Authenticating printed objects using digital watermarks associated with multidimensional quality metrics

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2008107525A2 *

Also Published As

Publication number Publication date
US20110038012A1 (en) 2011-02-17
WO2008107525A3 (fr) 2008-10-30
WO2008107525A2 (fr) 2008-09-12

Similar Documents

Publication Publication Date Title
EP2130363A2 (de) Verfahren und vorrichtung zum schutz vor fälschung
EP2036002B1 (de) Verfahren und einrichtung zum sichern von dokumenten
EP2150923B1 (de) Verfahren und vorrichtung zur sicherung von dokumenten
EP2294558B1 (de) Verfahren und vorrichtung zur identifikation einer druckplatte eines dokuments
EP2054836B1 (de) Verfahren und vorrichtung zur sicherung und authentifizierung von dokumenten
EP2110776B1 (de) Optische Authentifizierung
EP2596479B1 (de) Verfahren und vorrichtungen zur kennzeichnung und authentifizierung eines produkts durch einen verbraucher
EP2689400B1 (de) Verfahren und vorrichtung zum prüfen von sicherheitsdokumente
EP2300962B1 (de) Verfahren und vorrichtung zur auslesung einer physikalischen eigenschaft eines objekts
FR2936336A1 (fr) Procede et dispositif d'authentification de codes geometriques
US20080044096A1 (en) Scanner Authentication
FR2895125A1 (fr) Procede d'authentification de documents et dispositif de lecture desdits documents a des fins d'enregistrement pour preuve
EP2499000B1 (de) Identitätsdokumente, die eine mit hilfe von motiven gesicherte identitätsfotografie umfassen
EP3686761B1 (de) Gesichertes markierungselement und kodierungs- und authentifizierungsverfahren dieses markierungselements
FR2925195A1 (fr) Procede et dispositif de lutte contre la contrefacon
EA037623B1 (ru) Способ, устройство для формирования изображения и система для генерирования показателя подлинности объекта
FR2925193A1 (fr) Procede et dispositif de lutte contre la contrefacon
FR2957705A1 (fr) Procede et dispositif de securisation de carte a microcircuit et carte le comportant
FR2910667A1 (fr) Procedes d'identification et de traitement d'un document
EP2073175A1 (de) Datenträger für die gesicherte Identifikation und Sicherungsverfahren eines solchen Datenträgers
FR2931973A1 (fr) Procede et dispositif d'authentification d'un document

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20091023

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC MT NL PL PT RO SE SI SK TR

DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20140701